Page 1 Dell Networking Command Line Reference Guide for the MXL 10/40GbE Switch I/O Module 9.5(0.1)
Page 2 WARNING: A WARNING indicates a potential for property damage, personal injury, or death. Copyright © 2014 Dell Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. Dell ™...
Page 3: Table Of Contents
Contents 1 About this Guide....................48 ............................48 Objectives ..............................49 Audience ............................49 Conventions ..........................49 Information Icons 2 CLI Basics......................50 ......................50 Accessing the Command Line ......................50 Multiple Configuration Users ..........................51 Navigating the CLI .............................51 Obtaining Help ......................53 Using the Keyword no Command ........................53 Filtering show Commands ..........................
Page 4 .............................. 78 asset-tag ............................. 78 asf-mode ............................79 banner exec ............................80 banner login ............................81 banner motd ............................82 clear alarms ........................82 clear command history .............................. 82 clear line ............................. 83 configure ........................83 debug cpu-traffic-stats ........................... 84 debug ftpserver ..............................84 disable .................................85...
Page 5 ........................... 107 show memory ..........................107 show processes cpu ......................111 show processes ipc flow-control ........................112 show processes memory ..........................114 show software ifm ............................115 show system ..........................117 show tech-support ..............................120 telnet ............................121 terminal xml ............................121 traceroute ............................123 undebug all .............................123 virtual-ip...
Page 6 ............................143 show config ......................143 Common IP ACL Commands ............................144 access-class ......................144 clear counters ip access-group ..........................144 ip access-group .......................... 145 show ip access-lists ......................146 show ip accounting access-list ......................147 Standard IP ACL Commands ......................147 deny (for Standard IP ACLs) ........................
Page 7 ..............................197 permit ..............................197 ............................198 show config ........................199 show ip prefix-list detail ......................199 show ip prefix-list summary ........................200 Route Map Commands ............................200 continue ............................201 description ..........................202 match interface ..........................202 match ip address ..........................203 match ip next-hop ........................204 match ip route-source .............................205 match metric ..........................
Page 8 ..........................260 seq ether-type ..............................263 ..............................266 ............................269 permit udp ............................271 permit tcp ............................274 permit icmp ..............................276 permit ........................277 deny udp (for IPv6 ACLs) ........................279 deny tcp (for IPv6 ACLs) ....................282 deny icmp (for Extended IPv6 ACLs) .........................
Page 9 ..........................310 BGPv4 Commands ...........................310 address-family ..........................311 aggregate-address .............................312 bgp add-path ....................... 313 bgp always-compare-med ...........................313 bgp asnotation ......................314 bgp bestpath as-path ignore ..................... 315 bgp bestpath as-path multipath-relax .........................315 bgp bestpath med confed ....................316 bgp bestpath med missing-as-best ......................316 bgp bestpath router-id ignore ......................
Page 10 ..........................337 neighbor activate ..........................338 neighbor add-path ......................339 neighbor advertisement-interval ......................339 neighbor advertisement-start ..........................340 neighbor allowas-in ....................... 341 neighbor default-originate .........................341 neighbor description ........................342 neighbor distribute-list ........................343 neighbor ebgp-multihop ..........................343 neighbor fall-over ......................... 344 neighbor graceful-restart ..........................345 neighbor local-as .......................
Page 11 ......................375 show ip bgp inconsistent-as ........................376 show ip bgp neighbors ........................381 show ip bgp next-hop ..........................382 show ip bgp paths ....................... 383 show ip bgp paths as-path ......................384 show ip bgp paths community ........................385 show ip bgp peer-group ..........................
Page 12 ....................412 show ipv6 protocol-queue-mapping ....................413 show mac protocol-queue-mapping 12 Data Center Bridging (DCB)................. 414 ........................414 advertise dcbx-appln-tlv ..........................415 advertise dcbx-tlv ........................415 bandwidth-percentage ............................416 dcb-enable ............................417 dcb-input ............................418 dcb-output ...............419 dcb-policy buffer-threshold (Global Configuration) ..............419 dcb-policy buffer-threshold (Interface Configuration) ..........................
Page 13 ........................451 show qos dcb-output ......................... 452 show qos priority-groups ................... 452 show stack-unit stack-ports ets details ......................453 dcb pfc-shared-buffer-size ........................454 dcb-buffer-threshold ........................455 dcb enable pfc-queues ........................455 dcb <ets | pfc> enable ..............456 dcb-policy buffer-threshold (Interface Configuration) ...............457 dcb-policy buffer-threshold (Global Configuration) .............................
Page 14 ...........................486 domain-name ..........................487 excluded-address ..........................487 hardware-address ..............................488 host ..............................488 lease ........................488 netbios-name-server ........................... 489 netbios-node-type ............................. 489 network ........................490 show ip dhcp binding ......................490 show ip dhcp configuration ........................490 show ip dhcp conflict ..........................491 show ip dhcp server ............
Page 15 ..........................508 ip ecmp-group ..................508 link-bundle-distribution trigger-threshold ......................509 link-bundle-monitor enable ............................509 show config ......................510 show link-bundle distribution 16 FIPS Cryptography..................511 ..........................511 fips mode enable ..........................511 show fips status ............................512 show ip ssh ..............................513 17 FIP Snooping....................515 ..................515 clear fip-snooping database interface vlan ......................516...
Page 16 ............................536 debug gvrp ..............................537 disable ............................538 garp timers ............................539 gvrp enable ..........................539 gvrp registration ............................ 540 protocol gvrp ............................540 show config ..........................540 show garp timers ............................541 show gvrp ..........................542 clear gvrp statistics ............................543 show vlan 20 Internet Group Management Protocol (IGMP)........
Page 17 ......................567 interface range macro (define) ......................568 interface range macro name .............................569 interface vlan ........................569 intf-type cr4 autoneg ............................570 keepalive ..........................571 monitor interface ..............................572 ..........................574 negotiation auto ..........................576 portmode hybrid ............................578 rate-interval ............................578 show config ................579 show config (from INTERFACE RANGE mode) ..........................
Page 18 22 IPv4 Routing....................613 ..............................613 ..........................614 arp learn-enable ............................614 arp retries ............................615 arp timeout ..........................615 clear arp-cache ............................616 clear host ........................616 clear ip fib stack-unit ............................617 clear ip route ..........................617 clear tcp statistics ............................618 debug arp ...........................
Page 19 ............................646 show ip route ..........................649 show ip route list ........................650 show ip route summary ............................ 651 show ip traffic ..........................653 show tcp statistics 23 Internet Protocol Security (IPSec).............. 656 .......................656 crypto ipsec transform-set ..........................658 crypto ipsec policy ......................658 management crypto-policy ..............................
Page 20 ......................... 683 ipv6 unicast-routing ........................ 683 show ipv6 cam stack-unit ......................684 show ipv6 control-plane icmp ........................684 show ipv6 fib stack-unit .........................685 show ipv6 flowlabel-zero .......................... 685 show ipv6 interface ......................... 688 show ipv6 mld_host ..........................689 show ipv6 route ..........................
Page 21 ......................713 clear ip bgp ipv6 unicast soft ............................713 debug ip bgp ..........................714 debug ip bgp events ......................715 debug ip bgp ipv6 dampening ................716 debug ip bgp ipv6 unicast soft-reconfiguration ........................716 debug ip bgp keepalives ........................ 717 debug ip bgp notifications ........................
Page 22 ..........................742 redistribute ospf ............................743 router bgp .....................744 show capture bgp-pdu neighbor ............................744 show config ........................745 show ip bgp ipv6 unicast ....................745 show ip bgp ipv6 unicast cluster-list ....................746 show ip bgp ipv6 unicast community ..................747 show ip bgp ipv6 unicast community-list ..................747 show ip bgp ipv6 unicast dampened-paths ......................
Page 23 ......................770 neighbor remove-private-as ..........................771 neighbor route-map ......................772 neighbor route-reflector-client ..............................772 network ............................773 redistribute ........................774 show ip bgp ipv6 unicast ....................774 show ip bgp ipv6 unicast cluster-list ....................775 show ip bgp ipv6 unicast community ..................776 show ip bgp ipv6 unicast community-list ..................776 show ip bgp ipv6 unicast dampened-paths ......................
Page 24 ........................798 debug isis spf-triggers ....................... 798 debug isis update-packets ......................799 default-information originate ............................800 description .............................800 distance ..........................801 distribute-list in ..........................802 distribute-list out ....................802 distribute-list redistributed-override ..........................803 domain-password .......................... 804 graceful-restart ietf ........................804 graceful-restart interval ..........................
Page 25 ............................824 redistribute ..........................825 redistribute bgp ..........................827 redistribute ospf ............................828 router isis ..........................829 set-overload-bit ............................829 show config ..........................830 show isis database ....................... 833 show isis graceful-restart detail .......................... 833 show isis hostname ..........................834 show isis interface ...........................835 show isis neighbors ..........................836...
Page 26 .......................... 858 default-vlan disable ..............................858 name ............................859 show config ............................859 show vlan ..............................861 tagged ...............................862 track ip ............................863 untagged 31 Link Layer Discovery Protocol (LLDP)............865 ..........................865 advertise dot1-tlv ..........................866 advertise dot3-tlv ....................... 866 advertise management-tlv ..........................
Page 27 ........................887 clear ip msdp sa-cache ........................888 clear ip msdp statistic ..........................888 debug ip msdp ......................889 ip msdp cache-rejected-sa ........................889 ip msdp default-peer .....................890 ip msdp log-adjacency-changes ........................890 ip msdp mesh-group ........................891 ip msdp originator-id ............................. 892 ip msdp peer ..........................893 ip msdp redistribute ..........................893...
Page 28 ..........................914 ip multicast-limit .......................... 914 ip multicast-routing ..........................915 show ip mroute ............................917 show ip rpf ........................918 IPv6 Multicast Commands ........................918 debug ipv6 mld_host ..........................919 ip multicast-limit 36 Neighbor Discovery Protocol (NDP)............920 ......................... 920 clear ipv6 neighbors ............................
Page 29 ..........................942 ip ospf mtu-ignore ..........................942 ip ospf network ........................... 943 ip ospf priority ........................ 943 ip ospf retransmit-interval ........................944 ip ospf transmit-delay ........................944 log-adjacency-changes ..........................945 maximum-paths ............................945 mib-binding ............................. 946 network area ..........................947 passive-interface ............................948 redistribute ..........................949 redistribute bgp...
Page 30 ..........................984 debug ipv6 ospf bfd ..........................986 debug ipv6 ospf ......................986 default-information originate ......................987 graceful-restart grace-period ........................988 graceful-restart mode ............................989 ipv6 ospf area ........................989 ipv6 ospf authentication ......................990 ipv6 ospf bfd all-neighbors ............................ 991 ipv6 ospf cost ........................992 ipv6 ospf dead-interval .........................992...
Page 31 ..........................1016 ip pim dr-priority ..........................1017 ip pim join-filter ......................1017 ip pim ingress-interface-map ........................1018 ip pim neighbor-filter ........................1018 ip pim query-interval ........................1019 ip pim register-filter ..........................1019 ip pim rp-address ........................1020 ip pim rp-candidate ........................1021 ip pim sparse-mode .....................
Page 32 ..........................1045 flow-based enable ..........................1045 monitor session ............................ 1046 show config ........................1047 show monitor session ..................1047 show running-config monitor session ........................1048 source (port monitoring) 41 Private VLAN (PVLAN)..................1050 ........................... 1051 ip local-proxy-arp ................... 1052 private-vlan mapping secondary-vlan ...........................1053 private-vlan mode ......................
Page 33 .......................1078 Policy-Based QoS Commands ........................1078 bandwidth-percentage ............................1079 class-map .......................... 1080 clear qos statistics ........................1081 crypto key zeroize rsa ............................. 1081 ip ssh rekey ........................1082 match ip access-group ...........................1082 match ip vlan ............................. 1083 match ip vrf ............................1084 description ..........................
Page 34 ......................1110 show qos dscp-color-policy ......................1112 show qos dscp-color-map 44 Routing Information Protocol (RIP)............1113 ..........................1113 auto-summary ............................1113 clear ip rip ............................1114 debug ip rip ......................1114 default-information originate ..........................1115 default-metric ............................1115 description ............................1116 distance ..........................1117 distribute-list in ..........................1117 distribute-list out...
Page 35 .......................... 1138 show rmon history ..........................1139 show rmon log ........................1140 show rmon statistics 46 Rapid Spanning Tree Protocol (RSTP)............1142 ..........................1142 bridge-priority ....................... 1142 debug spanning-tree rstp ............................1143 description ..............................1144 disable ..........................1144 forward-delay ............................1145 hello-time ............................1146 max-age ......................1146 edge-port bpdufilter default...
Page 36 ............................1168 password ........................1169 password-attributes ......................1170 service password-encryption ..........................1171 show privilege ............................1171 show users ........................1172 timeout login response ............................1173 username ........................1174 RADIUS Commands ............................ 1174 debug radius ....................... 1175 ip radius source-interface ........................1175 radius-server deadtime ..........................1176 radius-server host...
Page 37 ............................1198 show users ..........................1199 show userroles ..............................1200 ......................1201 Secure DHCP Commands ........................1201 clear ip dhcp snooping ............................ 1201 ip dhcp relay ..........................1202 ip dhcp snooping ......................1202 ip dhcp snooping database .......................1202 ip dhcp snooping binding ....................1203 ip dhcp snooping database renew ........................
Page 38 ........................... 1223 show snmp group ..........................1224 show snmp user ........................1224 snmp ifmib ifalias long ........................ 1225 snmp-server community ........................1226 snmp-server contact ....................... 1227 snmp-server enable traps ........................1228 snmp-server engineID ......................... 1229 snmp-server group ..........................1231 snmp-server host ........................1233 snmp-server location ........................1234...
Page 39 .................... 1256 redundancy force-failover stack-unit ..........................1256 reset stack-unit ..........................1257 show redundancy ........................1258 show system stack-ports .................... 1260 show system stack-unit stack-group ........................1260 stack-unit stack-group ..........................1261 stack-unit priority ........................1262 stack-unit provision ........................1262 stack-unit renumber 52 Storm Control....................1264 ......................
Page 40 ........................1286 clock update-calendar ............................1286 debug ntp ..........................1287 ntp authenticate ........................1287 ntp authentication-key ........................1288 ntp broadcast client ............................1289 ntp disable ......................... 1289 ntp multicast client ............................1289 ntp server ............................1290 ntp source ..........................1291 ntp trusted-key ........................1291 ntp update-calendar ..........................1292 show calendar...
Page 41 .............................. 1308 reload ..........................1308 show boot blc ........................1309 show boot selection ..........................1309 show bootflash ...........................1310 show bootvar ........................1311 show default-gateway ................... 1311 show interface management Ethernet ..................1311 show interface management port config ............................1312 syntax help 57 Uplink Failure Detection (UFD)..............
Page 42 ........................1333 peer-link port-channel ............................1334 peer-routing ........................1334 peer-routing-timeout ..........................1335 primary-priority ..........................1335 show ip mroute ........................1337 show vlt backup-link ...........................1338 show vlt brief ..........................1338 show vlt detail ........................1339 show vlt inconsistency ..........................1339 show vlt mismatch ............................1340 show vlt role ..........................
Page 43 61 ICMP Message Types................... 1363 62 SNMP Traps....................1365 63 FC Flex IO Modules..................1370 ......................... 1370 FC Flex IO Modules ..............1370 Data Center Bridging (DCB) for FC Flex IO Modules ..........1370 Interworking of DCB Map With DCB Buffer Threshold Settings ..........................
Page 44 ...................1403 show stack-unit stack-ports pfc details ..............1404 Fibre Channel over Ethernet for FC Flex IO Modules ................1404 NPIV Proxy Gateway for FC Flex IO Modules ............................1405 dcb-map .....................1406 description (for FCoE maps) ............................1406 fabric ..........................1407 fabric-id vlan ..........................1408 fcf-priority ............................1409 fc-map...
Page 45 ..........................1437 pfc priority ..........................1438 priority-group ......................1439 priority-group qos-policy ..........................1440 priority-list ......................1440 qos-policy-output ets ........................... 1441 scheduler ............................. 1442 set-pgid ...........................1443 show dcb ......................1443 show interface dcbx detail ........................1446 show interface ets ........................1449 show interface pfc ..................... 1452 show interface pfc statistics ........................1453 show qos dcb-input...
Page 46 .............................1473 ........................1474 negotiation auto ........................1476 portmode hybrid .........................1478 stack-unit portmode ......................1479 Port Channel Commands ........................1479 channel-member ......................1480 interface port-channel .......................... 1481 minimum-links ................1482 Internet Group Management Protocol (IGMP) ........................1482 IGMP Commands .....................1486 IGMP Snooping Commands ............................. 1491 Layer 2 ....................
Page 47 ........................1508 service-policy output ........................... 1508 service-queue ....................1509 show qos qos-policy-output ......................1510 Virtual Link Trunking (VLT) ........................1510 back-up destination ........................1511 clear vlt statistics ..................1512 lacp ungroup member-independent ......................1513 peer-link port-channel ........................1514 show vlt mismatch ..........................1515 system-mac ............................1515 unit-id...
Page 48: About This Guide
This book provides information about the Dell Networking Operating System (OS) command line interface (CLI). This book also includes information about the protocols and features found in the Dell OS and on the Dell Networking systems supported by the Dell OS.
Page 49: Audience
Audience This book is intended for system administrators who are responsible for configuring or maintaining networks. This guide assumes that you are knowledgeable in Layer 2 and Layer 3 networking technologies. Conventions This book uses the following conventions to describe command syntax. Keywords are in Courier font and must be entered in the CLI as listed.
Page 50: Cli Basics
CLI Basics This chapter describes the command line interface (CLI) structure and command modes. The Dell operating software commands are in a text-based interface that allows you to use the launch commands, change command modes, and configure interfaces and protocols.
Page 51: Navigating The Cli
The Dell Networking Operating System (OS) displays a command line interface (CLI) prompt comprised of the host name and CLI mode. • Host name is the initial part of the prompt and is “Dell” by default. You can change the host name with the hostname command. •...
Page 52 Use either the Backspace key or Delete key to erase the previous character. • To navigate left or right in the Dell Networking OS command line, use the left and right Arrow keys. The shortcut key combinations at the Dell Networking OS command line are as follows:...
Page 53: Using The Keyword No Command
NOTE: The Dell Networking Operating System (OS) accepts a space before or after the pipe, no space before or after the pipe, or any combination. For example: Dell#command | grep gigabit |except regular-expression | find regular-expression.
Page 54: Command Modes
EXEC Privilege mode, which is used to configure the device. When you are in EXEC mode, the > prompt is displayed following the host name prompt, which is “Dell” by default. You can change the host name prompt using the hostname command.
Page 55: Configuration Mode
Enter the interface command and then enter an interface type and interface number that is available on the switch. The prompt changes to include the designated interface and slot/port number. For example: Prompt Interface Type Dell(conf-if)# INTERFACE mode Ten-Gigabit Ethernet interface then slot/port information Dell(conf-if- te-0/0)# Forty-Gigabit Ethernet interface then slot/port information...
Page 56 To enter IP ACCESS LIST mode: Verify that you are logged in to CONFIGURATION mode. Use the ip access-list standard or ip access-list extended command. Include a name for the ACL. The prompt changes to include (conf-std-nacl) or (conf-ext-nacl). You can return to CONFIGURATION mode by using the exit command. LINE Mode To configure the console or virtual terminal parameters, use LINE mode.
Page 57 Enter the protocol spanning-tree pvst command. The prompt changes to include (conf- pvst). You can return to CONFIGURATION mode by using the exit command. PREFIX-LIST Mode To configure a prefix list, use PREFIX-LIST mode. To enter PREFIX-LIST mode: Verify that you are logged in to CONFIGURATION mode. Enter the ip prefix-list command.
Page 58 To enter ROUTER OSPF mode: Verify that you are logged in to CONFIGURATION mode. Enter the router ospf {process-id} command. The prompt changes to include (conf- router_ospf-id). You can switch to INTERFACE mode by using the interface command or you can switch to ROUTER RIP mode by using the router rip command.
Page 59: File Management
Introduced on the MXL 10/40GbE Switch IO Module. History 8.3.16.0 copy Copy one file to another location. The Dell Networking Operating System (OS) supports IPv4 addressing for FTP, TFTP, and SCP (in the hostip field). Syntax copy source-file-url destination-file-url Parameters...
Page 60 When copying a file to a remote location (for example, using Secure Copy [SCP]), enter only the keywords and Dell Networking OS prompts you need for the rest of the information. For example, when using SCP, you can enter copy running- config scp: where running-config is the source and the target is specified in the ensuing prompts.
Page 61: Copy Running-Config Startup-Config
For a file or directory on an external USB drive, enter usbflash:// then the filename or directory name. no-confirm (OPTIONAL) Enter the keywords no-confirm to specify that the Dell Networking OS does not require user input for each file prior to deletion. File Management...
Page 62: Format Flash
Command EXEC Privilege Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell#dir Directory of flash: drwx 4096 Jan 01 1980 00:00:00 +00:00 . drwx 2048 Mar 06 2010 00:36:21 +00:00 .. drwx 4096 Feb 25 2010 23:32:50 +00:00 TRACE_LOG_DIR...
Page 63: Http Copy Via Cli
— displays information about the file systems on the system. HTTP Copy via CLI Copy one file to another location. Dell Networking OS supports IPv4 and IPv6 addressing for FTP, TFTP, and SCP (in the hostip field). This feature is supported on S6000 Z9000 S4810 S4820T platform.
Page 64: Logging Coredump Server
If the FTP server is not reachable, the application coredump is aborted. The Dell Networking OS completes the coredump process and waits until the upload is complete before rebooting the system.
Page 65: Rename
Syntax Command EXEC Privilege Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell#pwd flash: Dell# Related – changes the directory. Commands rename Rename a file in the local file system. Syntax rename url url...
Page 66: Show Boot System
• EXEC Privilege Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell#show boot system stack-unit all Current system image information in the system: ============================================= Type Boot Type --------------------------------------------- Stack-unit 0 is not present. Stack-unit 1 is not present.
Page 67: Show File-Systems
Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell#show file flash://startup-config ! Version E8-3-16-29 ! Last configuration change at Thu Apr 26 19:19:02 2012 by default ! Startup-config last updated at Thu Apr 26 19:19:04 2012 by...
Page 68: Show Os-Version
Dell# Command Field Description Fields size(b) Lists the size (in bytes) of the storage location. If the location is remote, no size is listed. Free(b) Lists the available size (in bytes) of the storage location. If the location is remote, no size is listed.
Page 69: Show Running-Config
History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage NOTE: A filepath that contains a dot ( . ) is not supported. Information Example Dell#show os-version RELEASE IMAGE INFORMATION : -------------------------------------------------------- Platform Version Size ReleaseTime IOM-Series: XL 9-1-0-848...
Page 70 for the current static ARP configuration for the current boot configuration boot for the current class-map class-map configuration for the current FEFD configuration fefd for the current FTP configuration for the current FVRP configuration fvrp for the current host configuration host for hardware-monitor action-on-error hardware-...
Page 71 Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell#show running-config Current Configuration ... ! Version E8-3-16-29 ! Last configuration change at Thu Apr 26 19:19:21 2012 by admin ! Startup-config last updated at Thu Apr 26 19:19:04 2012 by...
Page 72: Show Startup-Config
Example Dell#show running-config status running-config bytes 4306, checksum 0x4D55EE70 startup-config bytes 4344, checksum 0x6472C5E Dell# Usage The status option allows you to display the size and checksum of the running Information configuration and the startup configuration. show startup-config Display the startup configuration.
Page 73: Show Version
Display the current Dell Networking OS version information on the system. Syntax show version Command EXEC Privilege Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell#show version Dell Force10 Real Time Operating System Software Dell Force10 Operating System Version: 1.0...
Page 74: Upgrade Boot
Lines Beginning Description With Chassis Type: Chassis type (for example, E1200, E600, E600i, E300, C300, C150, S25, S50, S55, S60, S4810) Control Control processor information and amount of memory on Processor:... processor 128K bytes... Amount and type of memory on system 1 34 Port Hardware configuration of the system, including the number and type of physical interfaces available...
Page 75: Upgrade System
EXEC Privilege Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Usage You must reload the Dell Networking OS after executing this command. Information Example Dell#upgrade boot ? Upgrade both boot flash image and selector image bootflash-image...
Page 76: Verify
Introduced on the MXL 10/40GbE Switch IO Module. History Usage Reset the card using the power-cycle option after restoring the FPGA command. Information Example Dell#upgrade system ? flash: Copy from flash file system (flash://filepath) ftp: Copy from remote file system, IPv4 or IPv6, (ftp:/...
Page 77 (Optional). Enter the flash:// keyword. The default is to use the flash drive. You can just enter the image file name. img-file Enter the name the Dell Networking software image file to validate. hash-value (Optional). Enter the relevant hash published on i-Support.
Page 78: Control And Monitoring
Control and Monitoring This chapter describes control and monitoring for the MXL 10/40GbE Switch IO Module. asset-tag Assign and store a unique asset-tag to the stack member. Syntax asset-tag stack-unit unit id Asset-tag ID To remove the asset tag, use no stack-unit unit-id Asset-tag ID command.
Page 79: Banner Exec
Optionally, use the banner exec command to create a text string that displays Information when you accesses EXEC mode. The exec-banner command toggles that display. Example Dell(conf)#banner exec ? LINE c banner-text(max length 255) c, where 'c' is a delimiting...
Page 80: Banner Login
4d21h5m: %STKUNIT0-M P:CP %SEC-5-LOGOUT: Exec session is terminated for user on line console This is the banner Dell Force10 con0 now available Press RETURN to get started. This is the banner Related banner login — sets a banner for login connections to the system.
Page 81: Banner Motd
Dell#exit 13d21h9m: %STKUNIT0-M:CP %SEC-5-LOGOUT: Exec session is terminated for user on line console This is the banner Dell Force10 con0 now available Press RETURN to get started. 13d21h10m: STKUNIT0-M:CP %SEC-5-LOGIN_SUCCESS: Login successful for user on line console This is the banner...
Page 82: Clear Alarms
Related banner exec — enables the display of a text string when you enter EXEC mode. Commands banner login — sets a banner to display after successful login to the system. clear alarms Clear alarms on the system. Syntax clear alarms Command EXEC Privilege Modes...
Page 83: Configure
Command EXEC Privilege Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell#configure Dell(conf)# debug cpu-traffic-stats Enable the collection of computer processor unit (CPU) traffic statistics. Syntax debug cpu-traffic-stats Defaults Disabled Command...
Page 84: Debug Ftpserver
History disable Return to EXEC mode. Syntax disable [level] Parameters level (OPTIONAL) Enter a number for a privilege level of the Dell OS. The range is from 0 to 15. The default is 1. Defaults Command EXEC Privilege Modes Command Version 8.3.16.1...
Page 85: Enable
Enter EXEC Privilege mode or any other privilege level configured. After entering this command, you may need to enter a password. Syntax enable [level] Parameters level (OPTIONAL) Enter a number for a privilege level of the Dell Networking OS. The range is from 0 to 15. The default is 15. Defaults Control and Monitoring...
Page 86: Enable Optic-Info-Update Interval
Command EXEC Modes Command Version 9.5(0.0) Introduced the support for roles on the MXL 10/40GbE History Switch. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Users entering EXEC Privilege mode or any other configured privilege level can Information access configuration commands.
Page 87: Exec-Banner
Return to EXEC Privilege mode from other command modes (for example, CONFIGURATION or ROUTER OSPF modes). Syntax Command • CONFIGURATION Modes • SPANNING TREE • MULTIPLE SPANNING TREE • LINE • INTERFACE • VRRP • ACCESS-LIST • PREFIX-LIST • ROUTER OSPF •...
Page 88: Exec-Timeout
Introduced on the MXL 10/40GbE Switch IO Module. History Usage To remove the time interval, use the exec-timeout 0 0 command. Information Example Dell con0 is now available Press RETURN to get started. Dell> exit Return to the lower command mode. Syntax...
Page 89: Ftp-Server Enable
• ROUTER RIP Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Related — returns to EXEC Privilege mode. Commands ftp-server enable Enable FTP server functions on the system. Syntax ftp-server enable Defaults Disabled Command CONFIGURATION Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
Page 90: Ftp-Server Topdir
After you enable FTP server functions with the ftp-server enable command, Information Dell Networking OS recommends specifying a top-level directory path. Without a top-level directory path specified, the Dell Networking OS directs users to the flash directory when logging in to the FTP server. Related ftp-server enable —...
Page 91: Hostname
The hostname is used in the prompt. You cannot specify spaces in the hostname. Information Starting with Dell Networking OS version 9.3(0.0), the default hostname is modified as Dell instead of FTOS on all of the supported platforms. ip ftp password Specify a password for outgoing FTP connections.
Page 92: Ip Ftp Source-Interface
Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Usage The password is listed in the configuration file; you can view the password by Information entering the show running-config ftp command in EXEC mode. Use the ip ftp password command when you use the ftp: parameter in the copy command.
Page 93: Ip Ftp Username
ip ftp username Assign a user name for outgoing FTP connection requests. Syntax ip ftp username username Parameters username Enter a text string as the user name up to 40 characters long. Defaults No user name is configured. Command CONFIGURATION Modes Command Version 8.3.16.1...
Page 94: Ip Tftp Source-Interface
• For Loopback interfaces, enter the keyword loopback then a number from zero (0) to 16383. • For a Port Channel, enter the keywords port-channel then a number. The range is from 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
Page 95: Line
Command Verison 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History line Enable and configure console and virtual terminal lines to the system. This command accesses LINE mode, where you can set the access conditions for the designated line. Syntax line {console 0 | vty number [end-number]} Parameters...
Page 96: Ping
ping Test connectivity between the system and another device by sending echo requests and waiting for replies. Syntax ping [host | ip-address | ipv6-address] [count {number | continuous}] [datagram-size] [timeout] [source (ip src-ipv4- address) | interface] [tos] [df-bit (y|n)] [validate-reply(y| n)] [outgoing-interface] [pattern pattern] [sweep-min-size] [sweep-max-size] [sweep-interval] [ointerface (ip src-ipv4- address) | interface]...
Page 97 ICMP message codes that return from a ping command, refer Internet Control Message Protocol (ICMP) Message Types. Example (IPv4) Dell#ping 172.31.1.255 Type Ctrl-C to abort. Sending 5, 100-byte ICMP Echos to 172.31.1.255, timeout is 2 seconds: Reply to request 1 from 172.31.1.208 0 ms Reply to request 1 from 172.31.1.216 0 ms...
Page 98: Reload
Introduced on the MXL 10/40GbE Switch IO Module. History Usage If there is a change in the configuration, the Dell Networking OS prompts you to Information save the new configuration. Or you can save your running configuration with the copy running-config command.
Page 99: Service Timestamps
Defaults none Command EXEC Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Usage Messages can contain an unlimited number of lines; however, each line is limited Information to 255 characters. To move to the next line, use <CR>. To send the message use CTR-Z;...
Page 100: Show Alarms
EXEC Modes • EXEC Privilege Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell# show alarms -- Minor Alarms -- Alarm Type Duration --------------------------------------- No minor alarms -- Major Alarms -- Alarm Type Duration ----------------------------------------...
Page 101 [5/4 9:19:35]: CMD-(TEL0):[configure]by admin from vty0 (10.11.68.14) - Repeated 1 time. [5/4 9:19:50]: CMD-(TEL0):[interface tengigabitethernet 0/16]by admin from vty0 (10.11.68.14) [5/4 9:20:11]: CMD-(TEL0):[exit]by admin from vty0 (10.11.68.14) Dell# Related clear command history — clears the command history log. Commands Control and Monitoring...
Page 102: Show Command-Tree
Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Usage Reload the system to reset the command-tree counters. Information Example Dell#show command-tree count Enable privilege mode: calendar command usage:5 option usage: 0 hh:mm:ss option usage: 0 <1-31>...
Page 103: Show Cpu-Traffic-Stats
NOTE: After debugging is complete, use the no debug cpu-traffic- stats command to shut off traffic statistics collection. Example Dell#show cpu-traffic-stats Processor : CP -------------- Received 100% traffic on TenGigabitEthernet 8/2 Total...
Page 104: Show Debugging
Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell#show debug Generic IP: (Access List: test) IP packet debugging is on for (Access List: test) TenGigabitEthernet 0/16 ICMP packet debugging is on for TenGigabitEthernet 0/16...
Page 105: Show Inventory
Sensor7 Sensor8 Sensor9 --------------------------------------------------------------- ---- ---------------- 5753 * Management Unit Dell# show inventory Display the switch type, components (including media), and Dell Networking OS version including hardware identification numbers and configured protocols. Syntax show inventory [media slot] Control and Monitoring...
Page 106 Serial Number Part Number Revision -------------------------------------------------------------- MXL-10/40GbE TW282921F00048 0NVH81 * - Management Unit Software Protocol Configured -------------------------------------------------------------- SNMP LLDP Dell# Example Dell#show inv media (media) Slot Port Type Media Serial Number F10Qualid ---------------------------------------------------------- QSFP 40GBASE-CR4-1M APF11490011J2Q QSFP 40GBASE-SR4 MLJ004V QSFP...
Page 107: Show Memory
The output for show memory displays the memory usage of LP part (sysdlp) of the Information system. The sysdlp is an aggregate task that handles all the tasks running on the CPU. Example Dell#show memory stack-unit 0 Statistics On Unit 0 Processor =========================== Total(b) Used(b) Free(b)
Page 108 Unit0 CPU utilization 5Sec 1Min 5Min ------------------------------------------- Unit1* Unit2 Unit3 * Mgmt Unit Example Dell#show proc cpu management-unit 5 (management- CPU utilization for five seconds: 6%/0%; one minute: 6%; five minutes: 7% unit) Runtime(ms) Invoked uSecs 5Sec 1Min 5Min Process...
Page 109 10000 0.00% 0.00% 0.00% 0 tLogTask 0x785bb000 147650 14765 10000 0.00% 0.00% 0.00% 0 tUsrRoot Example Dell#show processes memory (memory) Memory Statistics Of Stack Unit 0 (bytes) =========================================================== Total: 2147483648, MaxUsed: 378417152, CurrentUsed: 378417152, CurrentFree: 1769066496 TaskName TotalAllocated TotalFreed MaxHeld CurrentHolding...
Page 110 225280 208896 l2pm 172032 7483392 f10appioserv 225280 208896 arpm 192512 7057408 Dell# Example Dell#show process memory stack-unit 0 (stack-unit) Total: 2147483648, MaxUsed: 378433536, CurrentUsed: 378433536, CurrentFree: 1769050112 TaskName TotalAllocated TotalFreed MaxHeld CurrentHolding f10appioserv 225280 208896 ospf 573440 8716288 f10appioserv...
Page 111: Show Processes Ipc Flow-Control
show processes memory — displays CPU usage information based on processes running. show processes ipc flow-control Display the single window protocol queue (SWPQ) statistics. Syntax show processes ipc flow-control [cp] Parameters (OPTIONAL) Enter the keyword cp to view the control processor’s SWPQ statistics.
Page 112: Show Processes Memory
In the example, a retry (Retries) value of zero indicates that the SWP mechanism reached the maximum number of retransmissions without an acknowledgement. Example Dell#show processes ipc flow-control Q Statistics on CP Processor TxProcess RxProcess Cur High Time Retr Msg Ac k Aval Max...
Page 113 MXL 10/40GbE Switch IO Module’s CP. The output of the show memory command and this command differ based on which the Dell OS processes are counted. • In the show memory output, the memory size is equal to the size of the application processes.
Page 114: Show Software Ifm
Example Dell#show processes memory management-unit (management- Total : 2147483648, MaxUsed : 378470400 [05/23/2012 09:49:39] unit) CurrentUsed: 378470400, CurrentFree: 1769013248 SharedUsed : 18533952, SharedFree : 2437592 PID Process ResSize Size Allocs Frees Current 472 ospf 8716288 573440 94952 94952 94952 529 fcoecntrl 7917568...
Page 115: Show System
Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Example DELL#show software ifm clients summary ClntType Inst svcMask subSvcMask tlvSvcMask tlvSubSvc swp 0x00000000 0x00000000 0x90ff71f3 0xb98784a1 22 0x00000000 0x00000000 0x800010ff 0x0064c798 56 0x00000dfe 0x00000000 0x00000000 0x00000000 0...
Page 116 Member not present Member not present Member not present Member not present Dell# Example Dell#show system stack-unit 0 (stack-unit) -- Unit 0 -- Unit Type : Management Unit Status : online Next Boot : online Required Type : MXL-10/40GbE - 34-port GE/TE/FG (XL)
Page 117: Show Tech-Support
— Configures the ability of the switch to become the management unit of a stack. show tech-support Display a collection of data from other show commands, necessary for Dell Networking OS technical support to perform troubleshooting on MXL switches. Syntax...
Page 118 The save option works with other filtering commands. This allows you to save specific information of a show command. The save entry must always be the last option. For example: Dell#show tech-support |grep regular-expression |except regular-expression | find regular-expression | save...
Page 119 Dell#show tech-support stack-unit 1 | save ? flash: Save to local file system (flash://filename (max 20 chars) ) Dell#show tech-support stack-unit 1 | save flash://LauraSave Start saving show command report ..Dell# Dell#dir Directory of flash: Directory of flash: 1 drwx 4096 Jan 01 1980 01:00:00 +01:00 .
Page 120: Telnet
— Displays memory usage based on running processes. telnet Connect through Telnet to a server. The Telnet client and server in the Dell Networking Operating System (OS) support IPv4 connections. You can establish a Telnet session directly to the router or a connection can be initiated from the router.
Page 121: Terminal Xml
This command enables the XML input mode where you can either cut and paste Information XML requests or enter the XML requests line-by-line. For more information about using the XML feature, refer to the XML chapter in the Dell Networking OS Configuration Guide. traceroute View a packet’s path to a specific device.
Page 122 (in seconds) (default is 5), a probe count (default is 3), minimum TTL (default is 1), maximum TTL (default is 30), and port number (default is 33434). To keep the default setting for those parameters, press the ENTER key. Example (IPv4) Dell#traceroute www.force10networks.com Translating "www.force10networks.com"...domain server (10.11.0.1) [OK] Type Ctrl-C to abort.
Page 123: Undebug All
If you enter the no virtual-ip command without any specified address, the IPv4 virtual addresses are removed. Example Dell#virtual-ip 10.11.197.99/16 write Copy the current configuration to either the startup-configuration file or the terminal. Syntax...
Page 124 command is similar to the copy running-config startup-config command. terminal Enter the keyword terminal to copy the current running configuration to the terminal. This command is similar to the show running-config command. Command EXEC Privilege Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Usage The write memory command saves the running-configuration to the file labeled...
Page 125: Debug Dot1X
After authentication is successful, normal traffic passes through the port. The Dell Networking operating software supports remote authentication dial-in service (RADIUS) and active directory environments using 802.1X Port Authentication. Important Points to Remember The system limits network access for certain users by using virtual local area network (VLAN) assignments.
Page 126: Dot1X Auth-Fail-Vlan
Parameters Enable all 802.1X debug messages. auth-pae-fsm Enable authentication PAE FSM debug messages. backend-fsm Enable backend FSM debug messages. eapol-pdu Enable the EAPOL frame trace and related debug messages. interface Restricts the debugging information to an interface. interface Defaults Disabled Command EXEC Privilege Modes...
Page 127: Dot1X Auth-Server
Related • dot1x port-control — Enables port control on an interface. Commands • dot1x guest-vlan — Configures a guest VLAN for limited access users or for devices that are not 802.1X capable. • show dot1x interface — Displays the 802.1X configuration of an interface. dot1x auth-server Configure the authentication server to RADIUS.
Page 128: Dot1X Authentication (Configuration)
Related dot1x mac-auth-bypass — Enables MAC authentication bypass. Commands dot1x authentication (Configuration) Enable dot1x globally. Enable dot1x both globally and at the interface level. Syntax dot1x authentication To disable dot1x on a globally, use the no dot1x authentication command. Defaults Disabled Command CONFIGURATION...
Page 129: Dot1X Host-Mode
To disable the guest VLAN, use the no dot1x guest-vlan vlan-id command. Parameters vlan-id Enter the VLAN Identifier. The range is from 1 to 4094. Defaults Not configured. Command CONFIGURATION (conf-if-interface-slot/port) Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Usage 1X authentication is enabled when an interface is connected to the switch.
Page 130: Dot1X Mac-Auth-Bypass
Defaults single-host Command INTERFACE Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Usage • Single-host mode authenticates only one host per authenticator port and drops Information all other traffic on the port. • Multi-host mode authenticates the first host to respond to an Identity Request and then permits all other traffic on the port.
Page 131: Dot1X Max-Supplicants
Defaults Command INTERFACE Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History dot1x max-supplicants Restrict the number of supplicants that can be authenticated and permitted to access the network through the port. This configuration is only takes effect in Multi-Auth mode. Syntax dot1x max-supplicants number Parameters...
Page 132: Dot1X Quiet-Period
Command Auto Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Usage The authenticator completes authentication only when port-control is set to Information auto. dot1x quiet-period Set the number of seconds that the authenticator remains quiet after a failed authentication with a client. Syntax dot1x quiet-period seconds To disable quiet time, use the no dot1x quiet-time command.
Page 133: Dot1X Reauth-Max
Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History dot1x reauth-max Configure the maximum number of times a port can reauthenticate before the port becomes unauthorized. Syntax dot1x reauth-max number To return to the default, use the no dot1x reauth-max command. Parameters number Enter the permitted number of reauthentications.
Page 134: Dot1X Supplicant-Timeout
Where the default values are as follows: dot1x server-timeout (30 seconds), radius-server retransmit (3 seconds), and radius-server timeout (5 seconds). For example: Dell(conf)#radius-server host 10.11.197.105 timeout 6 Dell(conf)#radius-server host 10.11.197.105 retransmit 4 Dell(conf)#interface gigabitethernet 2/23 Dell(conf-if-gi-2/23)#dot1x server-timeout 40 dot1x supplicant-timeout Configure the amount of time after which exchanges with the supplicant time-out.
Page 135: Show Dot1X Cos-Mapping Interface
You can display the CoS mapping information applied to traffic from authenticated supplicants on 802.1X-enabled ports that are in Single-Hot, Multi-Host, and Multi- Supplicant authentication modes. Example Dell#show dot1x cos-mapping interface tengigabitethernet 0/32 802.1p CoS re-map table on Te 0/32: ---------------------------------- Dot1p Remapped Dot1p 802.1X...
Page 136: Show Dot1X Interface
Dell# Dell#show dot1x cos-mapping interface tengigabitethernet 0/32 mac-address 00:00:00:00:00:10 Supplicant Mac: 0 0 0 0 0 10 Lookup for Mac: 802.1p CoS re-map table on Te 0/32: ---------------------------------- 802.1p CoS re-map table for Supplicant: 00:00:00:00:00:10 Dot1p Remapped Dot1p Dell# show dot1x interface Display the 802.1X configuration of an interface.
Page 137 (Port Authentication status, Untagged VLAN ID, Authentication PAE state, and Backend state) are displayed for each supplicant, as shown in the following example. Example Dell#show dot1x interface fortyGigE 0/48 802.1x information on Fo 0/48: ----------------------------- Dot1x Status: Enable...
Page 138 Backend State: Idle Dell# Dell#show dot1x interface tengigabitethernet 0/32 mac-address 00:00:00:00:00:10 Supplicant Mac: 0 0 0 0 0 10 Lookup for Mac: 802.1x information on Te 0/32: ----------------------------- Dot1x Status: Enable Port Control: AUTO Re-Authentication: Disable Guest VLAN: Enable Guest VLAN id:...
Page 139 Authenticated Backend State: Idle Port status and State info for Supplicant: 00:00:00:00:00:11 192 | 802.1X www.dell.com | s u p p o r t . d e l l.com Port Auth Status: AUTHORIZED Untagged VLAN id: Auth PAE State: Authenticated...
Page 140: Access Control Lists (Acl)
Access Control Lists (ACL) Access control lists (ACLs) are supported by the Dell Networking Operating System (OS). The Dell Networking OS supports the following types of ACL, IP prefix list, and route maps: • Commands Common to all ACL Types •...
Page 141: Remark
Example Dell(conf-std-nacl)#remark 10 Deny rest of the traffic Dell(conf-std-nacl)#remark 5 Permit traffic from XYZ Inc. Dell(conf-std-nacl)#show config ip access-list standard test remark 5 Permit traffic from XYZ Inc.
Page 142: Resequence Access-List
resequence access-list Re-assign sequence numbers to entries of an existing access-list. Syntax resequence access-list {ipv4 | mac} {access-list-name StartingSeqNum Step-to-Increment} Parameters ipv4 | mac Enter the keyword ipv4 or mac to identify the access list type to resequence. access-list- Enter the name of a configured IP access list. name StartingSeqNu Enter the starting sequence number to resequence.
Page 143: Show Config
Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell(config-std-nacl)#show conf ip access-list standard test remark 5 Permit traffic from XYZ Inc. seq 5 permit 1.1.1.0/24 count remark 10 Deny traffic from ABC seq 10 deny 2.1.1.0/24 count...
Page 144: Access-Class
NOTE: Also refer to the Commands Common to all ACL Types section. access-class Apply a standard ACL to a terminal line. Syntax access-class access-list-name Parameters access-list- Enter the name of a configured Standard ACL, up to 140 name characters. Defaults Not configured.
Page 145: Show Ip Access-Lists
Enter the keyword in to apply the ACL to incoming traffic. Enter the keyword out to apply the ACL to the outgoing traffic. implicit-permit (OPTIONAL) Enter the keyword implicit-permit to change the default action of the ACL from implicit-deny to implicit-permit (that is, if the traffic does not match the filters in the ACL, the traffic is permitted instead of dropped).
Page 146: Show Ip Accounting Access-List
Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell#show ip access-lists test Standard Ingress IP access list test seq 5 permit 1.1.1.0/24 count (0 packets) seq 10 deny 2.1.1.0/24 count (0 packets) show ip accounting access-list Display the IP access-lists created on the switch and the sequence of filters.
Page 147: Standard Ip Acl Commands
“order 4” Displays the QoS order of priority for the ACL entry. Example Dell#show ip accounting access-list Standard Ingress IP access list test on TenGigabitEthernet 0/88 Total cam count 2 seq 5 permit 1.1.1.0/24 count (0 packets) seq 10 deny 2.1.1.0/24 count (0 packets)
Page 148 Enter the keyword any to specify that all routes are subject to the filter. host ip-address Enter the keyword host then the IP address to specify a host IP address. count (OPTIONAL) Enter the keyword count to count packets processed by the filter. byte (OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
Page 149: Ip Access-List Standard
Usage When the configured maximum threshold is exceeded, generation of logs is Information stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero.
Page 150: Permit (For Standard Ip Acls)
Usage The Dell operating system supports one ingress and one egress IP ACL per Information interface. The number of entries allowed per ACL is hardware-dependent. For detailed specifications on entries allowed per ACL, refer to your line card documentation. Example...
Page 151 order (OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry. The range is from 0 to 254 (where 0 is the highest priority and 254 is the lowest; lower-order numbers have a higher priority). If you do not use the keyword order, the ACLs have the lowest order by default (255).
Page 152 You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction.
Page 153 order (OPTIONAL) Enter the keyword order to specify the QoS order for the ACL entry. The range is from 0 to 254 (where 0 is the highest priority and 254 is the lowest; lower-order numbers have a higher priority). If you do not use the keyword order, the ACLs have the lowest order by default (255).
Page 154: Extended Ip Acl Commands
• If sequence-number is configured, the sequence-number is used as a tie breaker for rules with the same order. When the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero.
Page 155: Deny (For Extended Ip Acls)
deny (for Extended IP ACLs) Configure a filter that drops IP packets meeting the filter criteria. Syntax deny {ip | ip-protocol-number} {source mask | any | host ip- address} {destination mask | any | host ip-address} [count [byte]] [dscp value] [order] [monitor] [fragments] [log [interval minutes] [threshold-in-msgs [count]] [monitor] To remove this filter, you have two choices: •...
Page 156 threshold-in (OPTIONAL) Enter the threshold-in-msgs keyword msgs count followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100. interval (OPTIONAL) Enter the keyword interval followed by the minutes...
Page 157: Deny Icmp
Related deny tcp — assigns a filter to deny TCP packets. Commands deny udp — assigns a filter to deny UDP packets. ip access-list extended — creates an extended ACL. deny icmp To drop all or specific internet control message protocol (ICMP) messages, configure a filter. Syntax deny icmp {source mask | any | host ip-address} {destination mask | any | host ip-address} [dscp] [count [byte]] [order]...
Page 158 The order option is relevant in the context of the Policy QoS feature only. For Information more information, refer to the Quality of Service chapter of the Dell Networking OS Configuration Guide. When the configured maximum threshold is exceeded, generation of logs is stopped.
Page 159: Deny Tcp
ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces. You can activate flow-based monitoring for a monitoring session by entering the flow-based enablecommand in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction.
Page 160 • fin: finish (no more data from the user) • psh: push function • rst: reset the connection • syn: synchronize sequence numbers • urg: urgent field operator (OPTIONAL) Enter one of the following logical operand: • eq = equal to •...
Page 161 The order option is relevant in the context of the Policy QoS feature only. For Information more information, refer to the Quality of Service chapter of the Dell Networking OS Configuration Guide. In the MXL switch, you can configure either count (packets) or count (bytes).
Page 162: Deny Udp
7 0001111100000000 1111111111000000 7936 7999 64 8 0001111101000000 1111111111111111 8000 8000 1 Total Ports: 4001 Example An ACL rule with a TCP port lt 1023 uses only one entry in the CAM. Dell# Data Mask From To #Covered 1 0000000000000000 1111110000000000 0...
Page 163 To remove this filter, you have two choices: • Use the no seq sequence-number command if you know the filter’s sequence number. • Use the no deny udp {source mask | any | host ip-address} {destination mask | any | host ip-address} command. Parameters source Enter the IP address of the network or host from which the...
Page 164 The order option is relevant in the context of the Policy QoS feature only. For Information more information, refer to the Quality of Service chapter of the Dell Networking OS Configuration Guide. In the MXL switch, you can configure either count (packets) or count (bytes).
Page 165: Ip Access-List Extended
7 0001111100000000 1111111111000000 7936 7999 64 8 0001111101000000 1111111111111111 8000 8000 1 Total Ports: 4001 Example An ACL rule with a TCP port lt 1023 uses only one entry in the CAM. Dell# Data Mask From To #Covered 1 0000000000000000 1111110000000000 0...
Page 166: Permit (For Extended Ip Acls)
The number of entries allowed per ACL is hardware-dependent. For detailed Information specification on entries allowed per ACL, refer to your line card documentation. Example Dell(conf)#ip access-list extended TESTListEXTEND Dell(config-ext-nacl)# Related ip access-list standard — configures a standard IP access list.
Page 167 keyword order, the ACLs have the lowest order by default (255). fragments Enter the keyword fragments to use ACLs to control packet fragments. (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages. threshold-in (OPTIONAL) Enter the threshold-in-msgs keyword msgs count followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation...
Page 168: Permit Icmp
the ingress and egress direction. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists.
Page 169 the message type. The range is 0 to 255 for ICMP type and 0 to 255 for ICMP code. count (OPTIONAL) Enter the keyword count to count packets the filter processes. byte (OPTIONAL) Enter the keyword byte to count bytes the filter processes.
Page 170: Permit Tcp
The order option is relevant in the context of the Policy QoS feature only. For Information more information, refer to the Quality of Service chapter of the Dell Networking OS Configuration Guide. When the configured maximum threshold is exceeded, generation of logs is stopped.
Page 171 mask Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous. Enter the keyword any to specify that all routes are subject to the filter. host ip-address Enter the keyword host then the IP address to specify a host IP address.
Page 172 The order option is relevant in the context of the Policy QoS feature only. For Information more information, refer to the “Quality of Service” chapter of the Dell Networking OS Configuration Guide. The MXL 10/40GbE System IO Module cannot count both packets and bytes, so when you enter the count byte options, only bytes are incremented.
Page 173 (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG). Example An ACL rule with a TCP port range of 4000–8000 uses eight entries in the CAM. Dell# Data Mask From To #Covered...
Page 174: Permit Udp
Related ip access-list extended — creates an extended ACL. Commands permit — assigns a permit filter for IP packets. permit udp — assigns a permit filter for UDP packets. permit udp To pass UDP packets meeting the filter criteria, configure a filter. Syntax permit udp {source mask | any | host ip-address} [operator port [port]] {destination mask | any | host ip-address} [dscp]...
Page 175 The order option is relevant in the context of the Policy QoS feature only. For Information more information, refer to the “Quality of Service” chapter of the Dell Operating System Configuration Guide. In the MXL switch, you can configure either count (packets) or count (bytes).
Page 176 (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG). Example An ACL rule with a TCP port range of 4000–8000 uses eight entries in the CAM. Dell# Data Mask From To #Covered...
Page 177 Related ip access-list extended — creates an extended ACL. Commands permit — assigns a permit filter for IP packets. permit tcp — assigns a permit filter for TCP packets. Assign a sequence number to a deny or permit filter in an extended IP access list while creating the filter. Syntax seq sequence-number {deny | permit} {ip-protocol-number | icmp | ip | tcp | udp} {source mask | any | host ip-address}...
Page 178 operator (OPTIONAL) Enter one of the following logical operands: • eq = equal to • neq = not equal to • gt = greater than • lt = less than • range = inclusive range of ports (you must specify two ports for the port parameter.) port port (OPTIONAL) Enter the application layer port number.
Page 179 monitor (OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface. Defaults By default 10 ACL logs are generated if you do not specify the threshold explicitly. The default frequency at which the ACL logs are generated is five minutes.
Page 180: Common Mac Access List Commands
monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists.
Page 181 To delete a MAC access-group, use the no mac access-group mac-list- name command. Parameters access-list- Enter the name of a configured MAC access list, up to 140 name characters. vlan vlan-range (OPTIONAL) Enter the keyword vlan and then enter a range of VLANs.
Page 182: Show Mac Access-Lists
show mac access-lists Display all of the Layer 2 ACLs configured in the system, whether or not they are applied to an interface, and the count of matches/mismatches against each ACL entry displayed. Syntax show mac access-lists [access-list-name] [interface interface] [in | out] Parameters access-list-...
Page 183: Standard Mac Acl Commands
The ACL hit counters in this command increment the counters for each matching Information rule, not just the first matching rule. Example Dell#show mac accounting access-list TestMac interface tengigabitethernet 0/89 in Ingress Standard mac access-list TestMac on TenGigabitEthernet 0/89 Total cam count 2...
Page 184 To remove this filter, you have two choices: • Use the no seq sequence-number command if you know the filter’s sequence number. • Use the no deny {any | mac-source-address mac-source-address- mask} command. Parameters Enter the keyword any to specify that all routes are subject to the filter.
Page 185: Mac Access-List Standard
Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module platform. Usage When the configured maximum threshold is exceeded, generation of logs is Information stopped. When the interval at which ACL logs are configured to be recorded expires, the subsequent, fresh interval timer is started and the packet count for that new interval commences from zero.
Page 186: Permit
Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Usage The Dell operating system supports one ingress and one egress MAC ACL per Information interface. The number of entries allowed per ACL is hardware-dependent. For detailed specification about entries allowed per ACL, refer to your switch documentation.
Page 187 threshold-in (OPTIONAL) Enter the threshold-in-msgs keyword msgs count followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100. interval (OPTIONAL) Enter the keyword interval followed by the minutes...
Page 188 one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG). Related deny — configures a MAC ACL filter to drop packets. Commands —configure a MAC ACL filter with a specified sequence number. To a deny or permit filter in a MAC access list while creating the filter, assign a sequence number.
Page 189 interval (OPTIONAL) Enter the keyword interval followed by the minutes time period in minutes at which ACL logs must be generated. The interval range is from 1 to 10 minutes.. monitor (OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface.
Page 190: Extended Mac Acl Commands
permit — configures a filter to forward packets. Extended MAC ACL Commands When an access-list is created without any rule and then applied to an interface, ACL behavior reflects implicit permit. The following commands configure Extended MAC ACLs. The MXL 10/40GbE Switch IO Module platform supports both Ingress and Egress MAC ACLs. deny To drop packets that match the filter criteria, configure a filter.
Page 191: Mac Access-List Extended
mac- Specify which bits in the MAC address must match. destination- address-mask The MAC ACL supports an inverse mask; therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly. ethertype (OPTIONAL) To filter based on protocol type, enter one of operator...
Page 192: Permit
Command This guide is platform-specific. For command information about other platforms, History refer to the relevant Dell Networking OS Command Line Reference Guide. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage The number of entries allowed per ACL is hardware-dependent. For detailed Information specifications on entries allowed per ACL, refer to your line card documentation.
Page 193 Parameters Enter the keyword any to forward all packets. host Enter the keyword host then a MAC address to forward packets with that host address. mac-source- Enter a MAC address in nn:nn:nn:nn:nn:nn format. address mac-source- (OPTIONAL) Specify which bits in the MAC address must address-mask match.
Page 194 Configure a filter with a specific sequence number. Syntax seq sequence-number {deny | permit} {any | host mac-address | mac-source-address mac-source-address-mask} {any | host mac- address | mac-destination-address mac-destination-address-mask} [ethertype operator] [count [byte]] Parameters sequence- Enter a number as the filter sequence number. The range is number from zero (0) to 65535.
Page 195: Ip Prefix List Commands
Defaults Not configured. Command CONFIGURATION-MAC ACCESS LIST-STANDARD Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Related deny — configures a filter to drop packets. Commands permit — configures a filter to forward packets. IP Prefix List Commands When you create an access-list without any rule and then apply it to an interface, the ACL behavior reflects implicit permit.
Page 196: Ip Prefix-List
Parameters ip-prefix Specify an IP prefix in the network/length format. For example, 35.0.0.0/ 8 means match the first 8 bits of address 35.0.0.0. ge min-prefix- (OPTIONAL) Enter the keyword ge and then enter the length minimum prefix length, which is a number from zero (0) to le max-prefix- (OPTIONAL) Enter the keyword le and then enter the length...
Page 197: Permit
Related show ip route list — displays IP routes in an IP prefix list. Commands show ip prefix-list summary — displays a summary of the configured prefix lists. permit Configure a filter that passes packets meeting the criteria specified. Syntax permit ip-prefix [ge min-prefix-length] [le max-prefix-length] Parameters ip-prefix...
Page 198: Show Config
Parameters sequence- Enter a number. The range is from 1 to 4294967294. number deny Enter the keyword deny to configure a filter to drop packets meeting this condition.. permit Enter the keyword permit to configure a filter to forward packets meeting this condition. (OPTIONAL) Enter the keyword any to match any packets.
Page 199: Show Ip Prefix-List Detail
Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell#show ip prefix-list detail Ip Prefix-list with the last deletion/insertion: PL_OSPF_to_RIP ip prefix-list PL_OSPF_to_RIP: count: 3, range entries: 1, sequences: 5 - 25 seq 5 permit 1.1.1.0/24 (hit count: 0) seq 10 deny 2.1.0.0/16 ge 23 (hit count: 0)
Page 200: Route Map Commands
Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell#show ip prefix-list summary Ip Prefix-list with the last deletion/insertion: PL_OSPF_to_RIP ip prefix-list PL_OSPF_to_RIP: count: 3, range entries: 1, sequences: 5 - 25 Route Map Commands When you create an access-list without any rule and then applied to an interface, the ACL behavior reflects implicit permit.
Page 201: Description
• A successful match with a continue clause, the route map executes the set clauses and then goes to the specified route map entry upon execution of the continue clause. • If the next route map entry contains a continue clause, the route map executes the continue clause if a successful match occurs.
Page 202: Match Interface
match interface To match routes whose next hop is on the interface specified, configure a filter. Syntax match interface interface To remove a match, use the no match interface interface command. Parameters interface Enter the following keywords and slot/port or number information: •...
Page 203: Match Ip Next-Hop
Parameters prefix-list- Enter the name of configured prefix list, up to 140 name characters. Defaults Not configured. Command ROUTE-MAP Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Related match interface — redistributes routes that match the next-hop interface. Commands match ip next-hop —...
Page 204: Match Ip Route-Source
match ip route-source — redistributes routes that match routes advertised by other routers. match metric — redistributes routes that match a specific metric. match route-type — redistributes routes that match a route type. match tag — redistributes routes that match a specific tag. match ip route-source To match based on the routes advertised by routes specified in IP access lists or IP prefix lists, configure a filter.
Page 205: Match Metric
match metric To match on a specified value, configure a filter. Syntax match metric metric-value Parameters metric-value Enter a value to match. The range is from zero (0) to 4294967295. Defaults Not configured. Command ROUTE-MAP Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Related match interface...
Page 206: Match Tag
Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Related match interface — redistributes routes that match the next-hop interface. Commands match ip address — redistributes routes that match an IP address. match ip next-hop — redistributes routes that match the next-hop IP address. match ip route-source —...
Page 207: Route-Map
Use caution when you delete route maps because if you do not specify a sequence Information number, all route maps with the same map-name are deleted when you use the no route-map map-name command. Example Dell(conf)#route-map dempsey Dell(config-route-map)# Related show config2 — displays the current configuration.
Page 208: Set Metric
Defaults Not configured. Command ROUTE-MAP Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Related set metric — specify the metric value assigned to redistributed routes. Commands set metric-type — specify the metric type assigned to redistributed routes. set tag —...
Page 209: Set Metric-Type
set metric-type To assign a new route type for routes redistributed to OSPF, configure a filter. Syntax set metric-type {internal | external | type-1 | type-2} Parameters internal Enter the keyword internal to assign the Interior Gateway Protocol metric of the next hop as the route’s BGP MULTI_EXIT_DES (MED) value.
Page 210: Show Config
Command ROUTE-MAP Modes Command Version 8.3.16.1 Introduced on MXL 10/40GbE Switch IO Module History Example Dell(config-route-map)#show config route-map hopper permit 10 Dell(config-route-map)# show route-map Display the current route map configurations. Syntax show route-map [map-name] Parameters map-name (OPTIONAL) Enter the name of a configured route map, up to 140 characters.
Page 211: Deny (For Standard Ip Acls)
deny (for Standard IP ACLs) To drop packets with a certain IP address, configure a filter. Syntax deny {source | any | host {ip-address}}[count [byte]] [dscp value] [order] [fragments] [log [interval minutes] [threshold- in-msgs [count]] [monitor] To remove this filter, you have two choices: •...
Page 212 monitor (OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface. Defaults By default, 10 ACL logs are generated if you do not specify the threshold explicitly. The default frequency at which ACL logs are generated is five minutes.
Page 213: Deny (For Extended Ip Acls)
deny (for Extended IP ACLs) Configure a filter that drops IP packets meeting the filter criteria. Syntax deny {ip | ip-protocol-number} {source mask | any | host ip- address} {destination mask | any | host ip-address} [count [byte]] [dscp value] [order] [monitor] [fragments] [log [interval minutes] [threshold-in-msgs [count]] [monitor] To remove this filter, you have two choices: •...
Page 214 threshold-in (OPTIONAL) Enter the threshold-in-msgs keyword msgs count followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100. interval (OPTIONAL) Enter the keyword interval followed by the minutes...
Page 215 Related deny tcp — assigns a filter to deny TCP packets. Commands deny udp — assigns a filter to deny UDP packets. ip access-list extended — creates an extended ACL. Assign a sequence number to a deny or permit filter in an extended IP access list while creating the filter. Syntax seq sequence-number {deny | permit} {source [mask] | any | host ip-address}} [count [byte] [dscp value] [order] [fragments]...
Page 216 (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages. threshold-in (OPTIONAL) Enter the threshold-in-msgs keyword msgs count followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands.
Page 217: Deny Tcp
standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces. You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode.
Page 218 host ip-address Enter the keyword host then the IP address to specify a host IP address. dscp Enter this keyword dscp to deny a packet based on the DSCP value. The range is from 0 to 63. Enter a flag or combination of bits: •...
Page 219 The order option is relevant in the context of the Policy QoS feature only. For Information more information, refer to the Quality of Service chapter of the Dell Networking OS Configuration Guide. In the MXL switch, you can configure either count (packets) or count (bytes).
Page 220 7 0001111100000000 1111111111000000 7936 7999 64 8 0001111101000000 1111111111111111 8000 8000 1 Total Ports: 4001 Example An ACL rule with a TCP port lt 1023 uses only one entry in the CAM. Dell# Data Mask From To #Covered 1 0000000000000000 1111110000000000 0...
Page 221: Deny Udp
deny udp To drop user datagram protocol (UDP) packets meeting the filter criteria, configure a filter. Syntax deny udp {source mask | any | host ip-address} [operator port [port]] {destination mask | any | host ip-address} [dscp] [operator port [port]] [count [byte]] [order] [fragments][log [interval minutes] [threshold-in-msgs [count]] To remove this filter, you have two choices: •...
Page 222 The order option is relevant in the context of the Policy QoS feature only. For Information more information, refer to the Quality of Service chapter of the Dell Networking OS Configuration Guide. In the MXL switch, you can configure either count (packets) or count (bytes).
Page 223: Deny Arp (For Extended Mac Acls)
7 0001111100000000 1111111111000000 7936 7999 64 8 0001111101000000 1111111111111111 8000 8000 1 Total Ports: 4001 Example An ACL rule with a TCP port lt 1023 uses only one entry in the CAM. Dell# Data Mask From To #Covered 1 0000000000000000 1111110000000000 0...
Page 224 • Use the no deny arp {destination-mac-address mac-address-mask | any} vlan vlan-id {ip-address | any | opcode code-number} command. Parameters destination- Enter a MAC address and mask in the nn:nn:nn:nn:nn format. mac-address mac-address- For the MAC address mask, specify which bits in the MAC mask address must match.
Page 225 of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100. interval (OPTIONAL) Enter the keyword interval followed by the minutes time period in minutes at which ACL logs must be generated. The time interval range is from 1 to 10 minutes.
Page 226: Deny Icmp
(MD) and the destination port is the monitoring port (MG). The order option is relevant in the context of the Policy QoS feature only. For more information, refer to the Quality of Service chapter of the Dell Networking OS Configuration Guide.
Page 227 Enter the keyword any to specify that all routes are subject to the filter. host ip-address Enter the keyword host then the IP address to specify a host IP address. destination Enter the IP address of the network or host to which the packets are sent.
Page 228: Deny Ether-Type (For Extended Mac Acls)
The order option is relevant in the context of the Policy QoS feature only. For Information more information, refer to the Quality of Service chapter of the Dell Networking OS Configuration Guide. When the configured maximum threshold is exceeded, generation of logs is stopped.
Page 229 • Use the no deny ether-type protocol-type-number {destination- mac-address mac-address-mask | any} vlan vlan-id {source- mac-address mac-address-mask | any} command. Parameters protocol-type- Enter a number from 600 to FFFF as the specific Ethernet number type traffic to drop. destination- Enter a MAC address and mask in the nn:nn:nn:nn:nn format. mac-address mac-address- For the MAC address mask, specify which bits in the MAC...
Page 230 of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100. interval (OPTIONAL) Enter the keyword interval followed by the minutes time period in minutes at which ACL logs must be generated. The time interval range is from of 1 to 10 minutes.
Page 231: Deny
deny To drop packets with a the MAC address specified, configure a filter. Syntax deny {any | mac-source-address [mac-source-address-mask]} [count [byte]] [log [interval minutes] [threshold—in-msgs [count]] [monitor] To remove this filter, you have two choices: • Use the no seq sequence-number command if you know the filter’s sequence number.
Page 232: Deny
Command CONFIGURATION-MAC ACCESS LIST-STANDARD Modes Command Version 9.4(0.0) Added support for flow-based monitoring on the MXL History 10/40GbE Switch IO Module platform. Version 9.3(0.0) Added support for logging of ACLs on the MXL 10/40GbE Switch IO Module platform. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module platform.
Page 233 [byte]][log [interval minutes] [threshold-in-msgs [count]] [monitor] To remove this filter, you have two choices: • Use the no seq sequence-number command if you know the filter’s sequence number. • Use the no deny {any | host mac-address | mac-source-address mac-source-address-mask}{any | host mac-address | mac- destination-address mac-destination-address-mask}command.
Page 234 The order option is relevant in the context of the Policy QoS feature only. For Information more information, refer to the Quality of Service chapter of the Dell Networking OS Configuration Guide. In the MXL switch, you can configure either count (packets) or count (bytes).
Page 235: Permit (For Standard Ip Acls)
permit (for Standard IP ACLs) To permit packets from a specific source IP address to leave the switch, configure a filter. Syntax permit {source [mask]| any | host ip-address} [count [byte]] [dscp value] [order] [fragments] [log [interval minutes] [threshold-in-msgs [count]] [monitor] To remove this filter, you have two choices: •...
Page 236 interval (OPTIONAL) Enter the keyword interval followed by the minutes time period in minutes at which ACL logs must be generated. The interval range is from 1 to 10 minutes. monitor (OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface.
Page 237: Permit Arp
permit arp Configure a filter that forwards ARP packets meeting this criteria. This command is supported only on 12- port GE line cards with SFP optics; refer to your line card documentation for specifications. Syntax permit arp {destination-mac-address mac-address-mask | any} vlan vlan-id {ip-address | any | opcode code-number} [count [byte] | log] [order] [monitor] [fragments] [log [inteval minutes] [threshold-in-msgs [count]] [monitor]...
Page 238 NOTE: For more information, refer to the Flow-based Monitoring section in the Port Monitoring chapter of the Dell Networking OS Configuration Guide. fragments Enter the keyword fragments to use ACLs to control packet fragments.
Page 239: Permit Ether-Type (For Extended Mac Acls)
The order option is relevant in the context of the Policy QoS feature only. For Information more information, refer to the “Quality of Service” chapter of the Dell Networking OS Configuration Guide. When you use the log option, the CP processor logs details about the packets that match.
Page 240 address-mask | any} [count [byte]] [order] [log [intervalminutes][threshold-in-msgs] [count]][monitor] To remove this filter, you have two choices: • Use the no seq sequence-number command if you know the filter’s sequence number. • Use the no permit ether-type protocol-type-number {destination-mac-address mac-address-mask | any} vlan vlan- id {source-mac-address mac-address-mask | any} command.
Page 241 The order option is relevant in the context of the Policy QoS feature only. For Information more information, refer to the “Quality of Service” chapter of the Dell Networking OS Configuration Guide. NOTE: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value.
Page 242: Permit Icmp
When you use the log option, the CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’ details. The monitor option is relevant in the context of flow-based monitoring only.
Page 243 Parameters source Enter the IP address of the network or host from which the packets were sent. mask Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or noncontiguous. Enter the keyword any to match and drop specific Ethernet traffic on the interface.
Page 244 The order option is relevant in the context of the Policy QoS feature only. For Information more information, refer to the Quality of Service chapter of the Dell Networking OS Configuration Guide. When the configured maximum threshold is exceeded, generation of logs is stopped.
Page 245: Permit Udp
permit udp To pass UDP packets meeting the filter criteria, configure a filter. Syntax permit udp {source mask | any | host ip-address} [operator port [port]] {destination mask | any | host ip-address} [dscp] [operator port [port]] [count [byte]] [order] [fragments] [log [interval minutes] [threshold-in-msgs [count]] [monitor] To remove this filter, you have two choices: •...
Page 246 The order option is relevant in the context of the Policy QoS feature only. For Information more information, refer to the “Quality of Service” chapter of the Dell Operating System Configuration Guide. In the MXL switch, you can configure either count (packets) or count (bytes).
Page 247 (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG). Example An ACL rule with a TCP port range of 4000–8000 uses eight entries in the CAM. Dell# Data Mask From To #Covered...
Page 248: Permit (For Extended Ip Acls)
permit (for Extended IP ACLs) To pass IP packets meeting the filter criteria, configure a filter. Syntax permit {source mask | any | host ip-address} {destination mask | any | host ip-address} [count [bytes]] [dscp value] [order] [fragments] [log [interval minutes] [threshold-in-msgs [count]] [monitor] To remove this filter, you have two choices: •...
Page 249 interval (OPTIONAL) Enter the keyword interval followed by the minutes time period in minutes at which ACL logs must be generated. The interval range is from 1 to 10 minutes. monitor (OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface.
Page 250: Permit
permit udp — assigns a permit filter for UDP packets. permit To forward packets from a specific source MAC address, configure a filter. Syntax permit {any | mac-source-address [mac-source-address-mask]} [count [byte]] | log [interval minutes] [threshold-in- msgs[count] [monitor] To remove this filter, you have two choices: •...
Page 251 Defaults Not configured. Command CONFIGURATION-MAC ACCESS LIST-STANDARD Modes Command Version 9.4(0.0) Added support for flow-based monitoring on the MXL History 10/40GbE Switch IO Module platform. Version 9.3(0.0) Added support for logging of ACLs on the MXL 10/40GbE Switch IO Module platform. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
Page 252 To a deny or permit filter in a MAC access list while creating the filter, assign a sequence number. Syntax seq sequence-number {deny | permit} {any | mac-source-address [mac-source-address-mask]} [count [byte]] [log [interval minutes] [threshold-in-msgs [count]] [monitor] To remove this filter, use the no seq sequence-number command. Parameters sequence- Enter a number from 0 to 65535.
Page 253 Defaults By default, 10 ACL logs are generated if you do not specify the threshold explicitly. The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled. Command CONFIGURATION-MAC ACCESS LIST-STANDARD Modes Command Version 9.4(0.0) Added support for flow-based monitoring on the MXL...
Page 254: Permit Tcp
permit tcp To pass TCP packets meeting the filter criteria, configure a filter. Syntax permit tcp {source mask | any | host ip-address} [bit] [operator port [port]] {destination mask | any | host ip- address} [bit] [dscp] [operator port [port]] [count [byte]] [order] [fragments][log [interval minutes] [threshold-in-msgs [count]] [monitor] To remove this filter, you have two choices:...
Page 255 port port Enter the application layer port number. Enter two port numbers if you are using the range logical operand. The range is from 0 to 65535. The following list includes some common TCP port numbers: • 23 = Telnet •...
Page 256 The order option is relevant in the context of the Policy QoS feature only. For Information more information, refer to the “Quality of Service” chapter of the Dell Networking OS Configuration Guide. The MXL 10/40GbE System IO Module cannot count both packets and bytes, so when you enter the count byte options, only bytes are incremented.
Page 257 Example An ACL rule with a TCP port range of 4000–8000 uses eight entries in the CAM. Dell# Data Mask From To #Covered 1 0000111110100000 1111111111100000 4000 4031 32 2 0000111111000000 1111111111000000 4032 4095 64 3 0001000000000000 1111100000000000 4096 6143 2048...
Page 258 destination- Enter a MAC address and mask in the nn:nn:nn:nn:nn format. mac-address mac-address- For the MAC address mask, specify which bits in the MAC mask address must match. The MAC ACL supports an inverse mask; therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly.
Page 259 NOTE: For more information, refer to the Flow-based Monitoring section in the Port Monitoring chapter of the Dell Networking OS Configuration Guide. Defaults By default, 10 ACL logs are generated if you do not specify the threshold explicitly. The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled.
Page 260: Seq Ether-Type
new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is re-enabled for this new interval. If ACL logging is stopped because the configured threshold is exceeded, it is re- enabled after the logging interval period elapses. ACL logging is supported for standard and extended IPv4 ACLs, IPv6 ACLs, and MAC ACLs.
Page 261 destination- Enter a MAC address and mask in the nn:nn:nn:nn:nn format. mac-address mac-address- For the MAC address mask, specify which bits in the MAC mask address must match. The MAC ACL supports an inverse mask; therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly.
Page 262 NOTE: For more information, refer to the Flow-based Monitoring section in the Port Monitoring chapter of the Dell Networking OS Configuration Guide. Defaults By default, 10 ACL logs are generated if you do not specify the threshold explicitly. The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled.
Page 263 You cannot include IP, TCP, or UDP (Layer 3) filters in an ACL configured with ARP or Ether-type (Layer 2) filters. Apply Layer 2 ACLs to interfaces in Layer 2 mode. When the configured maximum threshold is exceeded, generation of logs is stopped.
Page 264 mask (OPTIONAL) Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous. Enter the keyword any to specify that all routes are subject to the filter. count (OPTIONAL) Enter the keyword count to count packets the filter processes.
Page 265 Version 9.3(0.0) Added support for logging of ACLs on the MXL 10/40GbE Switch IO Module platform. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage The order option is relevant in the context of the Policy QoS feature only. The Information following applies: •...
Page 266 Assign a sequence number to a deny or permit filter in an extended IP access list while creating the filter. Syntax seq sequence-number {deny | permit} {ipv6-protocol-number | icmp | ip | tcp | udp} {source mask | any | host ipv6-address} {destination mask | any | host ipv6-address} [operator port [port]] [count [byte]] [dscp value] [order] [fragments] [log [interval minutes] [threshold-in-msgs [count]] [monitor]...
Page 267 port port (OPTIONAL) Enter the application layer port number. Enter two port numbers if you are using the range logical operand. The range is from 0 to 65535. The following list includes some common TCP port numbers: • 23 = Telnet •...
Page 268 Command ACCESS-LIST Modes Command Version 9.4(0.0) Added support for the flow-based monitoring on the MXL History 10/40GbE Switch IO Module. Version 9.3(0.0) Added support for logging of ACLs on the MXL 10/40GbE Switch IO Module. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage The order option is relevant in the context of the Policy QoS feature only.
Page 269: Permit Udp
Related deny — Configures a filter to drop packets. Commands permit — Configures a filter to forward packets. permit udp Configure a filter to pass UDP packets meeting the filter criteria. Syntax permit udp {source address mask | any | host ipv6-address} [operator port [port]] {destination address | any | host ipv6- address} [operator port [port]] [count [byte]] [log [interval minutes] [threshold-in-msgs [count]][monitor]...
Page 270 destination Enter the IPv6 address of the network or host to which the address packets are sent in the x:x:x:x::x format followed by the prefix length in the /x format. The range is /0 to /128. The :: notation specifies successive hexadecimal fields of zero. count (OPTIONAL) Enter the keyword count to count packets processed by the filter.
Page 271: Permit Tcp
logging for ACLs that are associated with egress interfaces. you cannot enable logging for ACLs that are associated with egress interfaces. You can activate flow-based monitoring for a monitoring session by entering the flow-based enable command in the Monitor Session mode. When you enable this capability, traffic with particular flows that are traversing through the ingress and egress interfaces are examined and, appropriate ACLs can be applied in both the ingress and egress direction.
Page 272 operator (OPTIONAL) Enter one of the following logical operand: • eq = equal to • neq = not equal to • gt = greater than • lt = less than • range = inclusive range of ports (you must specify two port for the port parameter.) port port Enter the application layer port number.
Page 273 interval (OPTIONAL) Enter the keyword interval followed by the minutes time period in minutes at which ACL logs must be generated. The interval range is from 1 to 10 minutes. monitor (OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface.
Page 274: Permit Icmp
permit icmp To allow all or specific internet control message protocol (ICMP) messages, configure a filter. Syntax permit icmp {source address mask | any | host ipv6-address} {destination address | any | host ipv6-address} [message-type] [count [byte]] | [log] [interval minutes] [threshold-in-msgs [count]][monitor] To remove this filter, you have two choices: •...
Page 275 interval (OPTIONAL) Enter the keyword interval followed by the minutes time period in minutes at which ACL logs must be generated. The interval range is from 1 to 10 minutes. monitor (OPTIONAL) Enter the keyword monitor to monitor traffic on the monitoring interface specified in the flow-based monitoring session along with the filter operation.
Page 276: Permit
permit To configure a filter that matches the filter criteria, select an IPv6 protocol number, ICMP, IPv6, TCP, or UDP. Syntax permit {ipv6-protocol-number | icmp | ipv6 | tcp | udp} [count [byte]] [dscp value] [order] [fragments] [log [interval minutes] [threshold-in-msgs [count]] [monitor] To remove this filter, you have two choices: •...
Page 277: Deny Udp (For Ipv6 Acls)
interval (OPTIONAL) Enter the keyword interval followed by the time minutes period in minutes at which ACL logs must be generated. The interval range is from 1 to 10 minutes. monitor (OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule is applied to the monitored interface.
Page 278 host ipv6– Enter the keyword host then the IPv6 address to specify a address host IP address. operator (OPTIONAL) Enter one of the following logical operand. • eq = equal to • neq = not equal to • gt = greater than •...
Page 279: Deny Tcp (For Ipv6 Acls)
Command ACCESS-LIST Modes Command Version 9.4(0.0) Added support for flow-based monitoring on the MXL History 10/40GbE Switch IO Module platform. Version 9.3(0.0) Added support for logging of ACLs on the MXL 10/40GbE Switch IO Module platform. Usage When the configured maximum threshold is exceeded, generation of logs is Information stopped.
Page 280 To remove this filter, you have two choices: • Use the no seq sequence-number command syntax if you know the filter’s sequence number • Use the no deny tcp {source address mask | any | host ipv6- address} {destination address | any | host ipv6-address} command Parameters source...
Page 281 byte (OPTIONAL) Enter the keyword byte to count the bytes that filter the processes. (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages. threshold-in (OPTIONAL) Enter the threshold-in-msgs keyword msgs count followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands.
Page 282: Deny Icmp (For Extended Ipv6 Acls)
This feature is particularly useful when looking for malicious traffic. It is available for Layer 2 and Layer 3 ingress and egress traffic. You may specify traffic using standard or extended access-lists. This mechanism copies all incoming or outgoing packets on one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG).
Page 283 threshold-in (OPTIONAL) Enter the threshold-in-msgs keyword msgs count followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation of ACL logs is terminated with the seq, permit, or deny commands. The threshold range is from 1 to 100. interval (OPTIONAL) Enter the keyword interval followed by the minutes...
Page 284: Deny (For Ipv6 Acls)
one port and forwards (mirrors) them to another port. The source port is the monitored port (MD) and the destination port is the monitoring port (MG). deny (for IPv6 ACLs) Configure a filter that drops IPv6 packets that match the filter criteria. Syntax deny {ipv6-protocol-number | icmp | ipv6 | tcp | udp} [count [byte]] [dscp value] [order] [fragments] [log [interval...
Page 285 in which you are creating the rule is applied to the monitored interface. Defaults By default, 10 ACL logs are generated if you do not specify the threshold explicitly. The default frequency at which ACL logs are generated is five minutes. By default, flow-based monitoring is not enabled.
Page 286: Access Control List (Acl) Vlan Groups And Content Addressable Memory (Cam)
Access Control List (ACL) VLAN Groups and Content Addressable Memory (CAM) This chapter describes the access control list (ACL) VLAN group and content addressable memory (CAM) enhancements. member vlan Add VLAN members to an ACL VLAN group. Syntax member vlan {VLAN-range} Parameters VLAN-range Enter the member VLANs using comma-separated VLAN IDs,...
Page 287: Ip Access-Group
ip access-group Apply an egress IP ACL to the ACL VLAN group. Syntax ip access-group {group name} out implicit-permit Parameters group-name Enter the name of the ACL VLAN group where you want the egress IP ACLs applied, up to 140 characters. Enter the keyword out to apply the ACL to outgoing traffic.
Page 288 AnyEmployeeCustomerEleve 2-10,99 HostGroup Group5 1,1000 Dell# The following sample output is displayed when using the show acl-vlan-group group-name option. NOTE: The access list name is truncated. Dell#show acl-vlan-group TestGroupSeventeenTwenty Group Name Egress IP Acl Vlan Members TestGroupSeventeenTwenty SpecialAccessOnlyExperts 100,200,300 Dell# The following sample output shows the line-by-line style display when using the show acl-vlan-group detail option.
Page 289: Show Cam-Acl-Vlan
Group5 Vlan Members : 1,1000 Dell# show cam-acl-vlan Display the number of flow processor (FP) blocks that is allocated for the different VLAN services. Syntax show cam-acl-vlan Command EXEC Privilege Modes Command Version 9.3. Introduced on the MXL 10/40GbE Switch IO Module History (0.0)
Page 290: Cam-Acl-Vlan
Field Description VlanAclOpt Number of FP blocks for ACL VLAN optimzation feature. Example Dell#show cam-acl-vlan -- Chassis Vlan Cam ACL -- Current Settings(in block sizes) VlanOpenFlow : VlanIscsi VlanHp VlanFcoe VlanAclOpt : -- Stack unit 0 -- Current Settings(in block sizes)
Page 291: Show Cam-Usage
Command Version 9.3(0.0) Introduced on the MXL platform. History Usage The VLAN ContentAware Processor (VCAP) application is a pre-ingress CAP that Information modifies the VLAN settings before packets are forwarded. To support the ACL CAM optimization functionality, the CAM carving feature is enhanced. A total of four VACP groups are present, of which two are for fixed groups and the other two are for dynamic groups.
Page 292 Amount of CAM space that is currently in use Available CAM Amount of CAM space that is free and remaining to be allocated for ACLs Example 1: Dell#show cam-usage Output of the Linecard|Portpipe| CAM Partition | Total CAM Used CAM |Available CAM...
Page 293 12286 | IN-L3 FIB 262141 262127 | IN-L3-SysFlow 2878 2834 --More-- Example 2: Dell#show cam-usage acl Output of the Linecard|Portpipe| CAM Partition | Total CAM Used CAM |Available CAM show cam- ========|========|=================|=============| usage acl =============|============ Command | IN-L2 ACL 1008...
Page 294: Show Running Config Acl-Vlan-Group
Example 4: Dell#show cam-usage switch Output of the Linecard|Portpipe| CAM Partition | Total CAM Used CAM show cam- |Available CAM usage switch ========|========|=================|=============| Command =============|============== | IN-L2 ACL 7152 7152 | IN-L2 FIB 32768 1081 31687 | OUT-L2 ACL | IN-L2 ACL...
Page 295: Acl-Vlan-Group
Dell#show running-config acl-vlan-group group1 acl-vlan-group group1 description Acl Vlan Group1 member vlan 1-10,400-410,500 ip access-group acl1 out implicit-permit Dell# acl-vlan-group Create an ACL VLAN group. Syntax acl-vlan-group {group name} To remove an ACL VLAN group, use the no acl-vlan-group {group name} command.
Page 296: Show Acl-Vlan-Group Detail
VLAN-Group names (or the Access List Group Names) to display in their entirety. Examples The following sample output shows the line-by-line style display when using the show acl-vlan-group detail option. Note that no group or access list names are truncated Dell#show acl-vlan-group detail Group Name : TestGroupSeventeenTwenty Egress IP Acl : SpecialAccessOnlyExpertsAllowed...
Page 297: Description (Acl Vlan Group)
description (ACL VLAN Group) Add a description to the ACL VLAN group. Syntax description description Parameters description Enter a description to identify the ACL VLAN group (80 characters maximum). Default No default behavior or values Command CONFIGURATION (conf-acl-vl-grp) Modes Command Version 9.3(0.0) Introduced on the MXL 10/40GbE Switch IO Module History...
Page 298: Bidirectional Forwarding Detection (Bfd)
Bidirectional forwarding detection (BFD) is a detection protocol that provides fast forwarding path failure detection. The Dell Networking Operating System (OS) implementation is based on the standards specified in the IETF Draft draft-ietf-bfd-base-03 and supports BFD on all Layer 3 physical interfaces including virtual local area network (VLAN) interfaces and port-channels.
Page 299: Bfd Disable
Defaults Refer to Parameters. Command ROUTER OSPF Modes ROUTER OSPFv3 ROUTER BGP ROUTER ISIS INTERFACE (BFD for VRRP only) Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Usage All neighbors inherit the timer values configured with the bfd neighbor Information command except in the following cases: •...
Page 300: Bfd Enable (Configuration)
Command INTERFACE VRRP Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History bfd enable (Configuration) Enable BFD on all interfaces. Syntax bfd enable Disable BFD using the no bfd enable command. Defaults BFD is disabled by default. Command CONFIGURATION Modes...
Page 301: Bfd Neighbor
Command INTERFACE Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell(conf-if-gi-0/3)#bfd interval 250 min_rx 300 multiplier 4 role passive Dell(conf-if-gi-0/3)# bfd neighbor Establish a BFD session with a neighbor. Syntax bfd neighbor ip-address Parameters...
Page 302: Bfd Protocol-Liveness
Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Related show bfd neighbors — displays the BFD neighbor information on all interfaces or a Commands specified interface. bfd protocol-liveness Enable the BFD protocol liveness feature. Syntax bfd protocol-liveness Defaults Disabled Command...
Page 303: Ipv6 Ospf Bfd All-Neighbors
multiplier value Enter the keywords multiplier to specify the number of packets that must be missed in order to declare a session down. The range is from 3 to 50. The default is 3. role [active | Enter the role that the local system assumes: passive] •...
Page 304: Isis Bfd All-Neighbors
multiplier value Enter the keyword multiplier to specify the number of packets that must be missed in order to declare a session down. The range is from 3 to 50. The default is 3. role [active | Enter the role that the local system assumes: passive] •...
Page 305: Neighbor Bfd
role [active | Enter the role that the local system assumes: passive] • Active — The active system initiates the BFD session. Both systems can be active for the same session. • Passive — The passive system does not initiate a session.
Page 306: Neighbor Bfd Disable
Usage When you enable a BFD session with a specified BGP neighbor or peer group using Information the bfd neighbor command, the default BFD session parameters are used (interval: 100 milliseconds, min_rx: 100 milliseconds, multiplier: 3 packets, and role: active) if you have not specified parameters with the bfd neighbor command.
Page 307: Show Bfd Neighbors
• The neighbor does not inherit the global BFD disable values configured with the bfd all-neighbor command or configured for the peer group to which the neighbor belongs. • The neighbor only inherits the global timer values configured with the bfd all-neighbor command: interval, min_rx, and multiplier.
Page 308 LocalAddr RemoteAddr Interface State Rx-int Tx-int Mult Clients * 10.1.3.2 10.1.3.1 Gi 1/3 Example Dell#show bfd neighbors detail (Detail) Session Discriminator: 1 Neighbor Discriminator: 1 Local Addr: 10.1.3.2 Local MAC Addr: 00:01:e8:02:15:0e Remote Addr: 10.1.3.1 Remote MAC Addr: 00:01:e8:27:2b:f1 Int: GigabitEthernet 1/3...
Page 309: Vrrp Bfd Neighbor
vrrp bfd neighbor Establish a BFD for VRRP session with a neighbor. Syntax vrrp bfd neighbor ip-address Parameters neighbor ip- Enter the IP address of the BFD neighbor. address Defaults none Command INTERFACE Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Bidirectional Forwarding Detection (BFD)
Page 310: Border Gateway Protocol Ipv4 (Bgpv4)
Border Gateway Protocol IPv4 (BGPv4) For detailed information about configuring BGP, refer to the BGP chapter in the Dell Networking OS Configuration Guide. This chapter contains the following sections: • BGPv4 Commands • MBGP Commands • BGP Extended Communities (RFC 4360) BGP IPv6 Commands are listed in the following sections: •...
Page 311: Aggregate-Address
ipv6 unicast Enter BGPv6 mode. Defaults Not configured. Command ROUTER BGP Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History aggregate-address To minimize the number of entries in the routing table, summarize a range of prefixes. Syntax aggregate-address ip-address mask [advertise-map map-name] [as- set] [attribute-map map-name] [summary-only] [suppress-map map-...
Page 312: Bgp Add-Path
Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Usage At least one of the routes included in the aggregate address must be in the BGP Information routing table for the configured aggregate to become active. If routes within the aggregate are constantly changing, do not add the as-set parameter to the aggregate as the aggregate flaps to keep track of the changes in the AS_PATH.
Page 313: Bgp Always-Compare-Med
Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Related neighbor add-path — specifies that this neighbor/peer group can send/receive Commands multiple path advertisements. bgp always-compare-med Allows you to enable comparison of the MULTI_EXIT_DISC (MED) attributes in the paths from different external ASs.
Page 314: Bgp Bestpath As-Path Ignore
Example Dell(conf)#router bgp 1 Dell(conf-router_bgp)#bgp asnotation asdot Dell(conf-router_bgp)#ex Dell(conf)#do show run | grep bgp router bgp 1 bgp four-octet-as-support bgp asnotation asdot Dell(conf)#router bgp 1 Dell(conf-router_bgp)#bgp asnotation asdot+...
Page 315: Bgp Bestpath As-Path Multipath-Relax
Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Usage If you enable this command, use the clear ip bgp * command to recompute Information the best path. bgp bestpath as-path multipath-relax Include prefixes received from different AS paths during multipath calculation. Syntax bgp bestpath as-path multipath-relax To return to the default BGP routing process, use the no bgp bestpath as-...
Page 316: Bgp Bestpath Med Missing-As-Best
Usage The software compares the MEDs only if the path contains no external Information autonomous system numbers. If you enable this command, use the clear ip bgp * command to recompute the best path. bgp bestpath med missing-as-best During path selection, indicate preference to paths with missing MED (MULTI_EXIT_DISC) over paths with an advertised MED attribute.
Page 317: Bgp Client-To-Client Reflection
bgp client-to-client reflection Allows you to enable route reflection between clients in a cluster. Syntax bgp client-to-client reflection To disable client-to-client reflection, use the no bgp client-to-client reflection command. Defaults Enabled when a route reflector is configured. Command ROUTER BGP Modes Command Version 9.2(0.0)
Page 318: Bgp Confederation Identifier
The default format for displaying the cluster-id is dotted decimal, but if you enter the cluster-id as an integer, it is displayed as an integer. Related bgp client-to-client reflection — enables route reflection between the route Commands reflector and clients. neighbor route-reflector-client —...
Page 319: Bgp Confederation Peers
bgp confederation peers Specify the autonomous systems (ASs) that belong to the BGP confederation. Syntax bgp confederation peers as-number [...as-number] To return to the default, use the no bgp confederation peers command. Parameters as-number Enter the AS number. The range is from 0 to 65535 (2 byte), from 1 to 4294967295 (4 byte), or from 0.1 to 65535.65535 (dotted format).
Page 320 Parameters half-life (OPTIONAL) Enter the number of minutes after which the Penalty is decreased. After the router assigns a Penalty of 1024 to a route, the Penalty is decreased by half after the half-life period expires. The range is from 1 to 45. The default is 15 minutes.
Page 321: Bgp Default Local-Preference
bgp default local-preference Change the default local preference value for routes exchanged between internal BGP peers. Syntax bgp default local-preference value To return to the default value, use the no bgp default local-preference command. Parameters value Enter a number to assign to routes as the degree of preference for those routes.
Page 322: Bgp Fast-External-Failover
If you disable the enforce-first-as command, it can be viewed using the show ip protocols command. Related show ip bgp neighbors — views the information the BGP neighbors exchange. Commands show ip protocols — views information on routing protocols. bgp fast-external-failover Enable the fast external failover feature, which immediately resets the BGP session if a link to a directly connected external peer fails.
Page 323: Bgp Graceful-Restart
Where the 2-byte format is from 1 to 65535, the 4-byte format is from 1 to 4294967295. Both formats are accepted and the advertisements reflect the entered format. For more information about using the 2 byte or 4-byte format, refer to the Dell Networking OS Configuration Guide. bgp graceful-restart To support graceful restart as a receiver only, enable graceful restart on a BGP neighbor, a BGP node, or designate a local router.
Page 324: Bgp Non-Deterministic-Med
BGP graceful restart is active only when the neighbor becomes established. Otherwise it is disabled. Graceful-restart applies to all neighbors with established adjacency. bgp non-deterministic-med Compare MEDs of paths from different autonomous systems. Syntax bgp non-deterministic-med To return to the default, use the no bgp non-deterministic-med command. Defaults Disabled (that is, paths/routes for the same destination but from different ASs do not have their MEDs compared).
Page 325: Bgp Regex-Eval-Optz-Disable
This caching and reuse may be at the expensive of RP1 processor memory. Examples Dell(conf-router_bgp)#no bgp regex-eval-optz-disable Dell(conf-router_bgp)#do show ip protocols Routing Protocol is "ospf 22222" Router ID is 2.2.2.2 Border Gateway Protocol IPv4 (BGPv4)
Page 326: Bgp Router-Id
Capable of ROUTE_REFRESH For Address Family IPv4 Unicast BGP table version is 0, main routing table version 0 Distance: external 20 internal 200 local 200 Dell(conf-router_bgp)# Related show ip protocols — views information on all routing protocols enabled and active.
Page 327: Capture Bgp-Pdu Neighbor
To return to the default setting, use the no bgp soft-reconfig-backup command. Defaults Command ROUTER BGP Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Usage When you enable soft-reconfiguration for a neighbor and you execute the clear Information ip bgp soft in command, the update database stored in the router is replayed and updates are re-evaluated.
Page 328: Capture Bgp-Pdu Max-Buffer-Size
capture bgp-pdu max-buffer-size Set the size of the BGP packet capture buffer. This buffer size pertains to both IPv4 and IPv6 addresses. Syntax capture bgp-pdu max-buffer-size 100-102400000 Parameters 100-10240000 Enter a size for the capture buffer. Defaults 40960000 bytes. Command EXEC Privilege Modes Command...
Page 329: Clear Ip Bgp Dampening
(OPTIONAL) Enter the keyword in to activate only inbound policies. (OPTIONAL) Enter the keyword out to activate only outbound policies. Command EXEC Privilege Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Related bgp recursive-bgp-next-hop — disables next-hop resolution through other routes Commands learned by the BGP.
Page 330: Clear Ip Bgp Peer-Group
filter-list as- (OPTIONAL) Enter the keywords filter-list then the path-name name of a configured AS-PATH list. regexp regular- (OPTIONAL) Enter the keyword regexp then regular expression expressions. Use one or a combination of the following: • . = (period) any single character (including a white space).
Page 331: Debug Ip Bgp
Parameters peer-group- Enter the peer group name to reset the BGP sessions within name that peer group. Command EXEC Privilege Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History debug ip bgp Display all information on BGP, including BGP events, keepalives, notifications, and updates. Syntax debug ip bgp [ip-address | peer-group peer-group-name] [in | out]...
Page 332: Debug Ip Bgp Dampening
debug ip bgp notifications — views information about BGP notifications. debug ip bgp updates — views information about BGP updates. show debugging — views enabled debugging operations. debug ip bgp dampening View information on routes being dampened. Syntax debug ip bgp dampening [in | out] To disable debugging, use the no debug ip bgp dampening command.
Page 333: Debug Ip Bgp Keepalives
peer-group (OPTIONAL) Enter the keyword peer-group then the name peer-group- of the peer group. name (OPTIONAL) Enter the keyword in to view only events on inbound BGP messages. (OPTIONAL) Enter the keyword out to view only events on outbound BGP messages. Command EXEC Privilege Modes...
Page 334: Debug Ip Bgp Notifications
Usage To remove all configured debug commands for BGP, enter the no debug ip bgp Information command. debug ip bgp notifications Allows you to view information about BGP notifications received from neighbors. Syntax debug ip bgp [ip-address | peer-group peer-group-name] notifications [in | out] To disable debugging, use the no debug ip bgp [ip-address | peer-group peer-group-name] notifications [in | out] command.
Page 335: Debug Ip Bgp Updates
Parameters ip-address (OPTIONAL) Enter the IP address of the neighbor in dotted decimal format. peer-group- (OPTIONAL) Enter the name of the peer group to disable or name enable all routers within the peer group.. Defaults Disabled Command EXEC Privilege Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
Page 336: Default-Metric
Usage To remove all configured debug commands for BGP, enter the no debug ip bgp Information command. default-metric Allows you to change the metric of redistributed routes to locally originated routes. Use this command with the redistribute command. Syntax default-metric number To return to the default setting, use the no default-metric command.
Page 337: Max-Paths
Command ROUTER BGP Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Related router bgp — enters ROUTER mode on the switch. Commands max-paths Configure the maximum number of parallel routes (multipath support) BGP supports. Syntax max-paths {ebgp | ibgp} number To return to the default values, enter the no maximum-paths command.
Page 338: Neighbor Add-Path
Parameters ip-address (OPTIONAL) Enter the IP address of the neighbor in dotted decimal format. peer-group- (OPTIONAL) Enter the name of the peer group. name activate Enter the keyword activate to enable the neighbor/peer group in the new AFI/SAFI. Defaults Disabled Command CONFIGURATION-ROUTER-BGP-ADDRESS FAMILY Modes...
Page 339: Neighbor Advertisement-Interval
Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Related bgp add-path — allows the advertisement of multiple paths for the same address Commands prefix without the new paths implicitly replacing any previous ones. neighbor advertisement-interval Set the advertisement interval between BGP neighbors or within a BGP peer group. Syntax neighbor {ip-address | peer-group-name} advertisement-interval seconds...
Page 340: Neighbor Allowas-In
Parameters ip-address (OPTIONAL) Enter the IP address of the neighbor in dotted decimal format. seconds Enter a number as the time interval, in seconds, before BGP route updates are sent. The range is from 0 to 3600 seconds. Defaults none Command ROUTER BGP Modes...
Page 341: Neighbor Default-Originate
neighbor default-originate Inject the default route to a BGP peer or neighbor. Syntax neighbor {ip-address | peer-group-name} default-originate [route-map map-name] To remove a default route, use the no neighbor {ip-address | peer- group-name} default-originate command. Parameters ip-address (OPTIONAL) Enter the IP address of the neighbor in dotted decimal format.
Page 342: Neighbor Distribute-List
Command ROUTER BGP Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History neighbor distribute-list Distribute BGP information via an established prefix list. Syntax neighbor {ip-address | peer-group-name} distribute-list prefix- list-name {in | out} To delete a neighbor distribution list, use the no neighbor {ip-address | peer-group-name} distribute-list prefix-list-name {in | out} command.
Page 343: Neighbor Ebgp-Multihop
neighbor ebgp-multihop Attempt and accept BGP connections to external peers on networks that are not directly connected. Syntax neighbor {ip-address | peer-group-name} ebgp-multihop [ttl] To disallow and disconnect connections, use the no neighbor {ip-address | peer-group-name} ebgp-multihop command. Parameters ip-address Enter the IP address of the neighbor in dotted decimal format.
Page 344: Neighbor Graceful-Restart
Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Usage When you enable failover, BGP keeps track of IP or IPv6 ability to reach the peer Information remote address and the peer local address. Whenever either address becomes unreachable (for example, no active route exists in the routing table for the peer IP or IPv6 destination/local address), BGP brings down the session with the peer.
Page 345: Neighbor Local-As
neighbor local-as To accept external routes from neighbors with a local AS number in the AS number path, configure Internal BGP (IBGP) routers. Syntax neighbor {ip-address | peer-group-name} local-as as-number [no- prepend] To return to the default value, use the no neighbor {ip-address | peer- group-name} local-as command.
Page 346: Neighbor Password
maximum Enter a number as the maximum number of prefixes allowed for this BGP router. The range is from 1 to 4294967295. threshold (OPTIONAL) Enter a number to be used as a percentage of the maximum value. When the number of prefixes reaches this percentage of the maximum value, the software sends a message.
Page 347: Neighbor Peer-Group (Assigning Peers)
password Enter a text string up to 80 characters long. The first character of the password must be a letter. You cannot use spaces in the password. Defaults Not configured. Command ROUTER BGP Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Usage Configure the same password on both BGP peers or a connection does not occur.
Page 348: Neighbor Peer-Group (Creating Group)
peer-group- Enter the name of a configured peer group. name Defaults Not configured. Command ROUTER BGP Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Usage You can assign up to 256 peers to one peer group. Information When you add a peer to a peer group, it inherits all the peer group’s configured parameters.
Page 349: Neighbor Peer-Group Passive
Parameters peer-group- Enter a text string up to 16 characters long as the name of name the peer group. Defaults Not configured. Command ROUTER BGP Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Usage When you create a peer group, it is disabled (Shut mode). Information Related neighbor peer-group (assigning peers)
Page 350: Neighbor Remote-As
For passive eBGP limits, the Remote AS must be different from the AS for this neighbor. Related neighbor soft-reconfiguration inbound — assigns a subnet to a dynamically Commands configured BGP neighbor. neighbor remote-as — assigns an indirectly connected AS to a neighbor or peer group.
Page 351: Neighbor Remove-Private-As
neighbor remove-private-as Remove private AS numbers from the AS-PATH of outgoing updates. Syntax neighbor {ip-address | peer-group-name} remove-private-as To return to the default, use the no neighbor {ip-address | peer-group- name} remove-private-as command. Parameters ip-address Enter the IP address of the neighbor to remove the private AS numbers.
Page 352: Neighbor Route-Reflector-Client
peer-group- Enter the name of the peer group. name map-name Enter the name of an established route map. If the Route map is not configured, the default is deny (to drop all routes). Enter the keyword in to filter inbound routes. Enter the keyword out to filter outbound routes.
Page 353: Neighbor Shutdown
Command ROUTER BGP Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Usage A route reflector reflects routes to the neighbors assigned to the cluster. Neighbors Information in the cluster do not need not to be fully meshed. By default, when you use no route reflector, the internal BGP (IBGP) speakers in the network must be fully meshed.
Page 354: Neighbor Soft-Reconfiguration Inbound
Usage Peers that are enabled within a peer group are disabled when their peer group is Information disabled. The neighbor shutdown command terminates all BGP sessions on the BGP neighbor or BGP peer group. Use this command with caution as it terminates the specified BGP sessions.
Page 355: Neighbor Timers
neighbor timers Set keepalive and hold time timers for a BGP neighbor or a peer group. Syntax neighbor {ip-address | peer-group-name} timers keepalive holdtime To return to the default values, use the no neighbor {ip-address | peer- group-name} timers command. Parameters ip-address Enter the IP address of the peer router in dotted decimal...
Page 356: Neighbor Weight
To use the closest interface, use the no neighbor {ip-address | peer- group-name} update-source interface command. Parameters ip-address Enter the IP address of the peer router in dotted decimal format. peer-group- Enter the name of the peer group to disable all routers within name the peer group.
Page 357: Network
Usage In the system best path selection process, the path with the highest weight value is Information preferred. NOTE: In the system best-path selection process, the path with the highest weight value is preferred. If you configure the set weight command in a route map applied to this neighbor, the weight set in that command overrides the weight set in the neighbor weight command.
Page 358: Network Backdoor
Usage The system software resolves the network address the network command Information configures with the routes in the main routing table to ensure that the networks are reachable using non-BGP routes and non-default routes. Related redistribute — redistributes routes into BGP. Commands network backdoor Specify this IGP route as the preferred route.
Page 359: Redistribute Ospf
Introduced on the MXL 10/40GbE Switch IO Module. History Usage With the Dell Networking OS version 8.3.1.0 and later, you can use the Information redistribute command to advertise the IGP cost as the MED on redistributed routes. When you set the route-map with metric-type internal and applied outbound to an EBGP peer/peer-group, the advertised routes corresponding to those peer/peer-groups have the IGP cost set as MED.
Page 360: Router Bgp
Introduced on the MXL 10/40GbE Switch IO Module. History Usage With the Dell Networking OS version 8.3.1.0 and later, you can use the Information redistribute command to advertise the IGP cost as the MED on redistributed routes. When you set the route-map with metric-type internal and apply outbound to an EBGP peer/peer-group, the advertised routes corresponding to those peer/ peer-groups have the IGP cost set as MED.
Page 361: Show Capture Bgp-Pdu Neighbor
Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell(conf-router_bgp)#show capture bgp-pdu neighbor 20.20.20.2 Incoming packet capture enabled for BGP neighbor 20.20.20.2 Available buffer size 40958758, 26 packet(s) captured using 680 bytes PDU[1] : len 101, captured 00:34:51 ago...
Page 362: Show Config
ROUTER BGP Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell(conf-router_bgp)#show config router bgp 45 neighbor suzanne peer-group neighbor suzanne no shutdown neighbor sara peer-group neighbor sara shutdown neighbor 13.14.15.20 peer-group suzanne neighbor 13.14.15.20 shutdown neighbor 123.34.55.123 peer-group suzanne...
Page 363 Path Lists all the ASs the route passed through to reach the destination network. Example Dell>show ip bgp BGP table version is 847562, local router ID is 63.114.8.131 Status codes: s suppressed, d damped, h history, * valid, > best...
Page 364: Show Ip Bgp Cluster-List
1239 13716 i *> 63.114.8.33 0 18508 701 1239 13716 i 4.21.132.0/23 63.114.8.33 0 18508 209 6461 16422 i *> 63.114.8.33 0 18508 701 6461 16422 i *> 4.24.118.16/30 63.114.8.33 0 18508 209 i *> 4.24.145.0/30 63.114.8.33 0 18508 209 i *>...
Page 365: Show Ip Bgp Community
Lists all the ASs the route passed through to reach the destination network. Example Dell#show ip bgp cluster-list BGP table version is 64444683, local router ID is 120.1.1.1 Status codes: s suppressed, d damped, h history, * valid, > best...
Page 366 You can specify up to eight community numbers to view information on those community groups. local-AS Enter the keywords local-AS to view all routes with the COMMUNITY attribute of NO_EXPORT_SUBCONFED. All routes with the NO_EXPORT_SUBCONFED (0xFFFFFF03) community attribute must not be advertised to external BGP peers.
Page 367 Lists all the ASs the route passed through to reach the destination network. Example Dell>show ip bgp community BGP table version is 3762622, local router ID is 63.114.8.48 Status codes: s suppressed, d damped, h history, * valid, > best...
Page 368: Show Ip Bgp Community-List
Lists all the ASs the route passed through to reach the destination network. Example Dell#show ip bgp community-list pass BGP table version is 0, local router ID is 10.101.15.13 Status codes: s suppressed, d damped, h history, * valid, >...
Page 369: Show Ip Bgp Dampened-Paths
Lists all the ASs the dampened route passed through to reach the destination network. Example Dell>show ip bgp dampened-paths BGP table version is 210708, local router ID is 63.114.8.2 Status codes: s suppressed, d damped, h history, * valid, >...
Page 370 Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell#show ip bgp detail Detail information for BGP Node bgpNdP 0x41a17000 : NdTmrP 0x41a17000 : NdKATmrP 0x41a17014 : NdTics 74857 : NhLocAS 1 : NdState 2 : NdRPMPrim 1 : NdListSoc 13...
Page 371: Show Ip Bgp Extcommunity-List
BGPRst 0 : NumGrCfg 1 : DfrdTmestmp 0 : SnmpTrps 0 : IgnrBestPthASP 0 RstOn 1 : RstMod 1 : RstRole 2 : AFFalgs 7 : RstInt 120 : MaxeorExtInt 361 FixedPartCrt 1 : VarParCrt 1 Packet Capture max allowed length 40960000 : current length 0 Peer Grp List Nbr List Confed Peer List...
Page 372: Show Ip Bgp Filter-List
Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Usage To view the total number of COMMUNITY attributes found, use the show ip bgp Information summary command. The text line above the route table states the number of COMMUNITY attributes found.
Page 373: Show Ip Bgp Flap-Statistics
Lists all the ASs the route passed through to reach the destination network. Example Dell#show ip bgp filter-list hello BGP table version is 80227, local router ID is 120.1.1.1 Status codes: s suppressed, d damped, h history, * valid, >...
Page 374 ip-address (OPTIONAL) Enter the IP address (in dotted decimal format) of the BGP network to view information only on that network. mask (OPTIONAL) Enter the network mask (in slash prefix (/x) format) of the BGP network address. filter-list as- (OPTIONAL) Enter the keyword filter-list then the path-name name of a configured AS-PATH ACL.
Page 375: Show Ip Bgp Inconsistent-As
Lists all the ASs the flapping route passed through to reach the destination network. Example Dell>show ip bgp flap-statistics BGP table version is 210851, local router ID is 63.114.8.2 Status codes: s suppressed, d damped, h history, * valid, >...
Page 376: Show Ip Bgp Neighbors
Lists all the ASs the route passed through to reach the destination network. Example Dell>show ip bgp inconsistent-as BGP table version is 280852, local router ID is 10.1.2.100 Status codes: s suppressed, d damped, h history, * valid, > best...
Page 377 advertised- (OPTIONAL) Enter the keywords advertised-routes to routes view only the routes the neighbor sent. dampened- (OPTIONAL) Enter the keywords dampened-routes to view routes information on dampened routes from the BGP neighbor. detail (OPTIONAL) Enter the keyword detail to view neighbor- specific internal information for the IPv4 Unicast address family.
Page 378 The Lines Description Beginning with: BGP version Displays the BGP version (always version 4) and the remote router ID. BGP state Displays the neighbor’s BGP state and the amount of time in hours:minutes:seconds it has been in that state. Last read This line displays the following information: •...
Page 379 Foreign host: Displays the peering address of the neighbor and the TCP port number. Example Dell#show ip bgp neighbors (S4810 S4820T) BGP neighbor is 10.10.10.1, remote AS 23456, external link BGP version 4, remote router ID 10.10.10.1 BGP state ESTABLISHED, in this state for 00:00:35 .
Page 380 Prefixes advertised 0, rejected 0, withdrawn 0 from peer Connections established 2; dropped 1 Last reset 00:18:21, due to Maximum prefix limit reached Example Dell>show ip bgp neighbors 192.14.1.5 advertised-routes (Advertised- BGP table version is 74103, local router ID is 33.33.33.33 Routes) Status codes: s suppressed, S stale, d damped, h history, * valid, >...
Page 381: Show Ip Bgp Next-Hop
Displays the time elapsed since the next hop was learned. If the route is down, this field displays time elapsed since the route went down. Example Dell>show ip bgp next-hop Next-hop RefCount Cost Flaps Time Elapsed 63.114.8.33 63.114.8.33, Gi 12/22...
Page 382: Show Ip Bgp Paths
show ip bgp paths View all the BGP path attributes in the BGP database. Syntax show ip bgp paths [regexp regular-expression] Parameters regexp regular- Enter a regular expression then use one or a combination of expression the following characters to match: •...
Page 383: Show Ip Bgp Paths As-Path
Description Path Displays the AS path for the route, with the origin code for the route listed last. Numbers listed between braces {} are AS_SET information. Example Dell#show ip bgp path Total 16 Paths Address Hash Refcount Metric Path 0x1efe7e5c...
Page 384: Show Ip Bgp Paths Community
AS-Path Displays the AS paths for this route, with the origin code for the route listed last. Numbers listed between braces {} are AS_SET information. Example Dell#show ip bgp paths as-path Total 13 AS-Paths Address Hash Refcount AS-Path 0x1ea3c1ec 0x1ea3c25c...
Page 385: Show Ip Bgp Peer-Group
Example E1200-BGP>show ip bgp paths community Total 293 Communities Address Hash Refcount Community 0x1ec88a5c 4 209:209 209:6059 209:31272 3908:900 19092:300 0x1e0f10ec 4 209:209 209:3039 209:31272 3908:900 19092:300 0x1c902234 2 209:209 209:7193 209:21362 3908:900 19092:300 0x1f588cd4 24 209:209 209:6253 209:21362 3908:900 19092:300 0x1e805884 2 209:209 209:21226 286:777 286:3033 1899:3033...
Page 386 Lists the IP addresses of the peers in the peer group. If the members: address is outbound optimized, an * is displayed next to the IP address. Example Dell#show ip bgp peer-group (S4810 S4820T) Peer-group pg1 BGP version 4 Minimum time between advertisement runs is 30 seconds...
Page 387: Show Ip Bgp Regexp
Example Dell#show ip bgp peer-group Peer-group RT-PEERS Description: ***peering-with-RT*** BGP version 4 Minimum time between advertisement runs is 30 seconds For address family: IPv4 Unicast BGP neighbor is RT-PEERS Number of peers in this group 20 Peer-group members (* - outbound optimized): 12.1.1.2*...
Page 388 Lists all the AS paths the route passed through to reach the destination network. Example Dell#show ip bgp regexp ^2914+ (S4810) BGP table version is 3700481, local router ID is 63.114.8.35 Status codes: s suppressed, S stale, d damped, h history, * valid, >...
Page 389: Show Ip Bgp Summary
11853 11853 11853 11853 6496 *>I 4.19.2.0/23 1.1.1.2 0 100 0 2914 701 6167 6167 6167 i *>I 4.19.16.0/23 1.1.1.2 0 100 0 2914 701 6167 6167 6167 i *>I 4.21.80.0/22 1.1.1.2 0 100 0 2914 174 4200 16559 i *>I 4.21.82.0/24 1.1.1.2 0 100...
Page 390 Field Description paths Displays the number of paths and the amount of memory used. denied paths Displays the number of denied paths and the amount of memory used. BGP path attribute Displays the number of BGP path attributes and the amount entries of memory used to process them.
Page 391: Show Running-Config Bgp
If the neighbor is disabled, the phrase (Admin shut) appears in this column. Example Dell#show ip bgp summary (S4810) BGP router identifier 120.10.10.1, local AS number 100 BGP table version is 34, main routing table version 34...
Page 392: Timers Bgp
timers bgp Adjust the BGP Keep Alive and Hold Time timers. Syntax timers bgp keepalive holdtime To return to the default, use the no timers bgp command. Parameters keepalive Enter a number for the time interval, in seconds, between keepalive messages sent to the neighbor routers. The range is from 1 to 65535.
Page 393: Distance Bgp
Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Usage CAUTION: Dell Networking OS recommends that you do not change the Information administrative distance of internal routes. Changing the administrative distances may cause routing table inconsistencies. The higher the administrative distance assigned to a route means that your confidence in that route is low.
Page 394: Show Ip Bgp Dampened-Paths
Lists all the ASs the dampened route passed through to reach the destination network. Example Dell>show ip bgp dampened-paths BGP table version is 210708, local router ID is 63.114.8.2 Status codes: s suppressed, d damped, h history, * valid, >...
Page 395: Set Extcommunity Rt
set extcommunity rt To set Route Origin community attributes in Route Map, use this feature. Syntax set extcommunity rt {as4 ASN4:NN [non-trans] | ASN:NNNN [non- trans] | IPADDR:NN [non-trans]} [additive] To delete the Route Origin community, use the no set extcommunity command.
Page 396: Set Extcommunity Soo
set extcommunity soo To set extended community site-of-origin in Route Map, use this feature. Syntax set extcommunity soo {as4 ASN4:NN | ASN:NNNN | IPADDR:NN [non- trans]} To delete the site-of-origin community, use the no set extcommunity command. Parameters as4 ASN4:NN Enter the keyword as4 then the 4-octet AS specific extended community number in the format ASN4:NN (4- byte AS number:2-byte community value).
Page 397: Show Ip Bgp Paths Extcommunity
Refcount Displays the number of BGP routes using these extended communities. Community Displays the extended community attributes in this BGP path. Example Dell#show ip bgp paths extcommunity Total 1 Extended Communities Address Hash Refcount Extended Community 0x41d57024 12272 1 RT:7:200 SoO:5:300 SoO:0.0.0.3:1285...
Page 398: Ipv6 Bgp Commands
• EXEC Privilege Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Usage To view the total number of COMMUNITY attributes found, use the show ip bgp Information summary command. The text line above the route table states the number of COMMUNITY attributes found.
Page 399: Clear Ip Bgp Ipv6 Unicast Soft
command), BGP sends a route-refresh request to the neighbor and receives all of the peer’s updates. Related clear ip bgp — activates inbound policies without resetting the BGP TCP session. Commands clear ip bgp ipv6 unicast soft Clear and reapply policies for IPv6 unicast routes without resetting the TCP connection; that is, perform BGP soft reconfiguration.
Page 400: Debug Ip Bgp Ipv6 Unicast Soft-Reconfiguration
debug ip bgp ipv6 unicast soft-reconfiguration Enable soft-reconfiguration debugging for IPv6 unicast routes. Syntax debug ip bgp [ipv4-address | ipv6-address | peer-group-name] ipv6 unicast soft-reconfiguration To disable debugging, use the no debug ip bgp [ipv4-address | ipv6- address | peer-group-name] ipv6 unicast soft-reconfiguration command.
Page 401: Show Ipv6 Prefix-List
Related show ipv6 prefix-list — View the selected IPv6 prefix-list. Commands show ipv6 prefix-list Displays the specified IPv6 prefix list. Syntax show ipv6 prefix-list detail {prefix-list name} | summary Parameters detail Display a detailed description of the selected IPv6 prefix list. prefix-list name Enter the name of the prefix list.
Page 402 summary Display a summary of RPF routes. Command EXEC Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Border Gateway Protocol IPv4 (BGPv4)
Page 403: Content Addressable Memory (Cam)
Content Addressable Memory (CAM) Content addressable memory (CAM) commands are supported on the Dell Networking MXL 10/40GbE Switch IO Module. WARNING: If you are using these features for the first time, contact Dell Networking Technical Assistance Center (TAC) for guidance. CAM Profile Commands The CAM profiling feature allows you to partition the CAM to best suit your application.
Page 404 qos | vman-qos—dual— number | vman-qos—dual—fp number] ipv4pbr number} ecfmacl number fcoeacl number iscsioptacl number} Parameters default Use the default CAM profile settings and set the CAM as follows: • L3 ACL (ipv4acl): 4 • L2 ACL(l2acl): 5 • IPv6 L3 ACL (ipv6acl): 0 •...
Page 405 fcoeacl Enter the keyword fcoeacl and then the number of FP number blocks for FCOE ACL. The range is from 0 to 6. Iscsioptacl Enter the keyword iscsioptacl and then the number of FP number blocks for iSCSI optimization ACL. The range is from 0 to 2. vrfv4acl Enter the keyword vrfv4acl and then the number of FP number...
Page 406: Cam-Optimization
NOTE: An ACL itself may still require more that a single FP entry, regardless of the number of interfaces. For more information, refer to the IP Access Control Lists, Prefix Lists, and Route-mapsections in the Dell Operating System Configuration Guide.
Page 407 Usage The display reflects the settings implemented with the cam-acl command. Information Example Dell#show cam-acl (Default) (Default) -- Chassis Cam ACL -- Current Settings(in block sizes) 1 block = 128 entries L2Acl Ipv4Acl Ipv6Acl Ipv4Qos L2Qos L2PT IpMacAcl VmanQos VmanDualQos...
Page 408: Show Cam-Acl-Egress
Introduced on the MXL 10/40GbE Switch IO Module. History Usage The display reflects the settings implemented with the cam-acl-egress Information command. Example Dell#show cam-acl-egress -- Chassis Egress Cam ACL -- Current Settings(in block sizes) L2Acl Ipv4Acl Ipv6Acl -- Stack unit 0 --...
Page 409: Control Plane Policing (Copp)
Control Plane Policing (CoPP) The CoPP commands are supported on the Dell Networking MXL 10/40GbE Switch IO Module. control-plane-cpuqos To manage control-plane traffic, enter control-plane mode and configure the switch. Syntax control-plane-cpuqos Defaults Not configured. Command CONFIGURATION Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
Page 410: Service-Policy Rate-Limit-Protocols
Related qos-policy-input — creates a QoS input policy map. Commands policy-map-input — creates an input policy map. service-policy rate-limit-protocols Apply a policy for the system to rate limit control protocols on a per-protocol basis. Syntax service-policy rate-limit-protocols policy-name Parameters policy-name Enter the service-policy name, using a string up to 32 characters.
Page 411: Show Ip Protocol-Queue-Mapping
Usage This command applies the service-policy based on the type of protocol defined in Information the ACL rules. Create ACL and QoS policies prior to enabling this command. Example Dell#show cpu-queue rate cp Service-Queue Rate (PPS) Burst () -------------- -----------...
Page 412: Show Ipv6 Protocol-Queue-Mapping
Syntax show ipv6 protocol-queue-mapping Defaults Not configured. Command EXEC Privilege Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell#show ipv6 protocol-queue-mapping Protocol Src-Port Dst-Port TcpFlag Queue EgPort Rate (kbps) -------- -------- -------- ------- -----...
Page 413: Show Mac Protocol-Queue-Mapping
Syntax show mac protocol-queue-mapping Defaults Not configured. Command EXEC Privilege Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell#show mac protocol-queue-mapping Protocol Destination Mac EtherType Queue EgPort Rate (kbps) -------- --------------- --------- ----- ------...
Page 414: Data Center Bridging (Dcb)
(LAN), server, and storage traffic. The Dell Networking Operating System (OS) commands for data center bridging features include 802.1Qbb priority-based flow control (PFC), 802.1Qaz enhanced transmission selection (ETS), and the data center bridging exchange (DCBX) protocol.
Page 415: Advertise Dcbx-Tlv
advertise dcbx-tlv On a DCBX port with a manual role, configure the PFC and ETS TLVs advertised to DCBX peers. Syntax advertise dcbx-tlv {ets-conf | ets-reco | pfc} [ets-conf | ets- reco | pfc] [ets-conf | ets-reco | pfc] To remove the advertised ETS TLVs, use the no advertise dcbx-tlv command. Parameters {ets-conf | ets- Enter the PFC and ETS TLVs advertised, where:...
Page 416: Dcb-Enable
Parameters percentage (Optional) Enter the bandwidth percentage. The percentage range is from 1 to 100% in units of 1%. Defaults none Command QOS-POLICY-OUT-ETS Modes Command Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is History supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
Page 417: Dcb-Input
To disable DCB, use the no dcb enable command. Defaults none Command CONFIGURATION Modes Command Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is History supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage DCB is not supported if you enable link-level flow control on one or more Information...
Page 418: Dcb-Output
NOTE: Please note that Dell Networking does not recommended to use this command as it has been deprecated in the current 9.4(0.0) release. A warning message appears when you try to run this command indicating that you have to use the dcb-map commands in the future.
Page 419: Dcb-Policy Buffer-Threshold (Global Configuration)
This method of configuration enables you to effectively manage and administer the behavior of lossless queues. Example Dell(conf)# dcb-policy buffer-threshold stack-unit all stack- ports all test dcb-policy buffer-threshold (Interface Configuration) Assign the DCB policy to the DCB buffer threshold profile on interfaces. This setting takes precedence over the global buffer-threshold setting.
Page 420: Dcb-Policy Input
This method of configuration enables you to effectively manage and administer the behavior of lossless queues. Example Dell(conf-if-te-0/0)#dcb-policy buffer-threshold test dcb-policy input Apply the input policy with the PFC configuration to an ingress interface. Syntax dcb-policy input policy-name To delete the input policy, use the no dcb-policy input command.
Page 421: Dcb-Policy Input Stack-Unit Stack-Ports All
Traffic may be interrupted when you reconfigure PFC no-drop priorities in an input policy or reapply the policy to an interface. NOTE: Please note that Dell Networking does not recommended to use this command as it has been deprecated in the current 9.4.(0.0) release. A warning message appears when you try to run this command indicating that you have to use the dcb-map commands in the future.
Page 422: Dcb-Policy Output
NOTE: Please note that Dell Networking does not recommended to use this command as it has been deprecated in the current 9.4.(0.0) release. A warning message appears when you try to run this command indicating that you have to use the dcb-map commands in the future.
Page 423: Dcb-Policy Output Stack-Unit Stack-Ports All
You can apply different DCB output policies to different stack units. NOTE: Please note that Dell Networking does not recommended to use this command as it has been deprecated in the current 9.4.(0.0) release. A warning message appears when you try to run this command indicating that you have to use the dcb-map commands in the future.
Page 424: Dcb Stack-Unit All Pfc-Buffering Pfc-Port-Count Pfc-Queues
dcb stack-unit all pfc-buffering pfc-port-count pfc- queues Configure the PFC buffer for all switches in the stack. Syntax dcb stack-unit all pfc-buffering pfc-port-count {1-56} pfc- queues {1-2} To remove the configuration for the PFC buffer on all switches in the stack, use the no dcb stack-unit all pfc-buffering pfc-port-count pfc-queues command.
Page 425: Dcbx Port-Role
To remove the configuration for the PFC buffer on all port pipes in a specified stack unit, use the no dcb stack-unit stack-unit-id [port-set port-set- id] pfc-buffering pfc-ports pfc-queues command. Parameters stack-unit-id Enter the stack unit identification. The range is from 0 to 5. port-set Enter the port-set identification.
Page 426: Dcbx Version
Parameters config-source | Enter the DCBX port role, where: auto- • config-source: configures the port to serve as the downstream | configuration source on the switch. auto-upstream • auto-upstream: configures the port to receive a peer | manual configuration. The configuration source is elected from auto-upstream ports.
Page 427: Debug Dcbx
• ieee-v2: configures the port to use IEEE 802.1az (Draft 2.5). Defaults Auto Command INTERFACE PROTOCOL LLDP Modes Command Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is History supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage DCBX requires that you enable LLDP to advertise DCBX TLVs to peers.
Page 428: Description
Command EXEC Privilege Modes Command Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is History supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. description Enter a text description of the DCB policy (PFC input or ETS output). Syntax description text To remove the text description, use the no description command.
Page 429: Fcoe Priority-Bits
(the service-policy output command), the QoS configuration in the output policy takes precedence. NOTE: Please note that Dell Networking does not recommended to use this command as it has been deprecated in the current 9.4(0.0) release. A warning message appears when you try to run this command indicating that you have to use the dcb-map commands in the future.
Page 430: Iscsi Priority-Bits
Usage This command is available at the global level only. Information iscsi priority-bits Configure the iSCSI priority advertised for the iSCSI protocol in application priority TLVs. Syntax iscsi priority-bits priority-bitmap To remove the configured iSCSI priority, use the no iscsi priority-bits command.
Page 431 This method of configuration provides an easy and flexible technique to accommodate both administratively-configured and peer-configured priorities. Example Dell (conf-dcb-buffer-thr)#priority 0 buffer-size 52 pause- threshold 16 resume-offset 10 shared-threshold-weight 7 Data Center Bridging (DCB)
Page 432: Pfc Link-Delay
pfc link-delay Configure the link delay used to pause specified priority traffic. Syntax pfc link-delay value To remove the link delay, use the no pfc link-delay command. Parameters value The range is (in quanta) from 712 to 65535. One quantum is equal to a 512-bit transmission.
Page 433: Pfc No-Drop Queues
PFC on all DCB egress ports or configure the dot1p priority-queue assignment of PFC priorities to lossless queues (refer to pfc no-drop queues). To disable PFC operation on an interface, enter the no pfc mode on command in DCB Input Policy Configuration mode. PFC is enabled and disabled as global DCB operation is enabled (dcb-enable) or disabled (no dcb-enable).
Page 434: Pfc Priority
dot1p Value in the Description heading Incoming Frame pfc priority Configure the CoS traffic to be stopped for the specified delay. Syntax pfc priority priority-range To delete the pfc priority configuration, use the no pfc priority command. Parameters priority-range Enter the 802.1p values of the frames to be paused. Separate the priority values with a comma;...
Page 435: Priority-Group
NOTE: Please note that Dell Networking does not recommended to use this command as it has been deprecated in the current 9.4(0.0) release. A warning message appears when you try to run this command indicating that you have to use the dcb-map commands in the future.
Page 436: Priority-Group Qos-Policy
(the service-policy output command), the QoS configuration in the output policy takes precedence. NOTE: Please note that Dell Networking does not recommended to use this command as it has been deprecated in the current 9.4(0.0) release. A warning message appears when you try to run this command indicating that you have to use the dcb-map commands in the future.
Page 437: Priority-List
12 to 13%. NOTE: Please note that Dell Networking does not recommended to use this command as it has been deprecated in the current 9.4(0.0) release. A warning message appears when you try to run this command indicating that you have to use the dcb-map commands in the future.
Page 438: Scheduler
Command CONFIGURATION Modes Command Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is History supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage If an error occurs in an ETS output-policy configuration, the configuration is Information ignored and the scheduler and bandwidth allocation settings are reset to the ETS default values (all priorities are in the same ETS priority group and bandwidth is...
Page 439: Set-Pgid
Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage NOTE: Please note that Dell Networking does not recommended to use this Information command as it has been deprecated in the current 9.4(0.0) release. A warning message appears when you try to run this command indicating that you have to use the dcb-map commands in the future.
Page 440: Show Dcb
Introduced on the MXL 10/40GbE Switch IO Module. Usage Specify a stack-unit number on the Master switch in a stack. Information Example Dell(conf)#do show stack-unit 0 port-set 0 DCB Status :Enabled PFC Queue Count Total Buffer[lossy + lossless] (in KB):7982...
Page 441 Command Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is History supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage To clear DCBX frame counters, use the clear dcbx counters interface Information stack-unit/port command.
Page 442 Total DCBX Number of unrecognizable DCBX frames received. Frames unrecognized Example Dell(conf)# show interface tengigabitethernet 0/49 dcbx detail Dell#show interface te 0/49 dcbx detail E-ETS Configuration TLV enabled e-ETS Configuration TLV disabled R-ETS Recommendation TLV enabled r-ETS Recommendation TLV disabled...
Page 443: Show Interface Ets
DCBX Operational Status is Enabled Is Configuration Source? TRUE Local DCBX Compatibility mode is CEE Local DCBX Configured mode is CEE Peer Operating version is CEE Local DCBX TLVs Transmitted: ErPfi Local DCBX Status ----------------- DCBX Operational Version is 0 DCBX Max Version Supported is 0 Sequence Number: 2 Acknowledgment Number: 2...
Page 444 Field Description Interface Interface type with stack-unit and port number. Max Supported Maximum number of priority groups supported. TC Group Number of Traffic Number of 802.1p priorities currently configured. Classes Admin mode ETS mode: on or off. When on, the scheduling and bandwidth allocation configured in an ETS output policy or received in a DCBX TLV from a peer can take effect on an interface.
Page 445 ETS TLV Statistic: Number of ETS Error Configuration TLVs received. Error Conf TLV pkts Example Dell(conf)# show interfaces te 0/0 ets summary (Summary) Interface TenGigabitEthernet 0/0 Max Supported TC Groups is 4 Number of Traffic Classes is 8 Admin mode is on...
Page 446 Conf TLV Tx Status is disabled Traffic Class TLV Tx Status is disabled Example Dell(conf)# show interfaces tengigabitethernet 0/0 ets detail (Detail) Interface TenGigabitEthernet 0/0 Max Supported TC Groups is 4 Number of Traffic Classes is 8 Admin mode is on...
Page 447: Show Interface Pfc
Pkts show interface pfc Displays the PFC configuration applied to ingress traffic on an interface, including priorities and link delay. Syntax show interface port-type slot/port pfc {summary | detail} Parameters port-type slot/ Enter the port-type slot and port PFC information. port pfc {summary | Enter the keyword summary for a summary list of results or...
Page 448 Field Description Operational status Port state for current operational PFC configuration: (local port) • Init: Local PFC configuration parameters were exchanged with the peer. • Recommend: Remote PFC configuration parameters were received from the peer. • Internally propagated: PFC configuration parameters were received from the configuration source.
Page 449 Pause Tx pkts PFC TLV Statistics: Number of PFC pause frames received. Pause Rx pkts Example Dell# show interfaces tengigabitethernet 0/49 pfc summary (Summary) Interface TenGigabitEthernet 0/49 Admin mode is on Admin is enabled Remote is enabled, Priority list is 4...
Page 450: Show Interface Pfc Statistics
History supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Example Dell#show interfaces te 0/3 pfc statistics (Summary) Interface TenGigabitEthernet 0/3 Priority Rx XOFF Frames Rx Total Frames Tx Total Frames -------------------------------------------------------- show qos dcb-input Displays the PFC configuration in a DCB input policy.
Page 451: Show Qos Dcb-Output
Usage NOTE: Please note that Dell Networking does not recommended to use this Information command as it has been deprecated in the current 9.4(0.0) release. A warning message appears when you try to run this command indicating that you have to use the dcb-map commands in the future.
Page 452: Show Qos Priority-Groups
Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage NOTE: Please note that Dell Networking does not recommended to use this Information command as it has been deprecated in the current 9.4(0.0) release. A warning message appears when you try to run this command indicating that you have to use the dcb-map commands in the future.
Page 453: Dcb Pfc-Shared-Buffer-Size
Max Supported TC Groups is 4 Number of Traffic Classes is 1 Admin mode is on Admin Parameters: -------------------- Admin is enabled TC-grp Priority# Bandwidth TSA ------------------------------------------------ 0,1,2,3,4,5,6,7 100% Stack unit 1 stack port all Max Supported TC Groups is 4 Number of Traffic Classes is 1 Admin mode is on Admin Parameters:...
Page 454: Dcb-Buffer-Threshold
S4810-YU-MR-FTOS (conf)#dcb pfc-shared-buffer-size 2000 %ERROR: pfc shared buffer size configured cannot accommodate existing buffer requirement in the system. Example Dell(conf)#dcb pfc-shared-buffer-size 5000 dcb-buffer-threshold Configure the profile name for the DCB buffer threshold. Syntax dcb buffer—threshold profile-name...
Page 455: Dcb Enable Pfc-Queues
Example Dell(conf)#dcb buffer—threshold test dcb enable pfc-queues Configure the number of PFC queues. Syntax dcb enable pfc-queues value Parameters value Enter the number of PFC queues. The range is from 1 to 4. The number of ports supported based on lossless queues configured will depend on the buffer.
Page 456: Dcb-Policy Buffer-Threshold (Interface Configuration)
Usage PFC and ETS are enabled by default on the interfaces when DCB is globally enabled Information (refer to dcb enable). In some network topology, you may want to disable PFC on an interface and apply link level flow control; Similarly you may want to disable ETS on an interface and apply QoS bandwidth configurations.
Page 457: Dcb-Policy Buffer-Threshold (Global Configuration)
This method of configuration enables you to effectively manage and administer the behavior of lossless queues. Example Dell(conf)# dcb-policy buffer-threshold stack-unit all stack- ports all test Data Center Bridging (DCB)
Page 458: Priority-Pgid
You cannot enable PFC and link-level flow control at the same time on an interface. NOTE: Please note that Dell Networking does not recommended to use this command as it has been deprecated in the current 9.4(0.0) release. A warning message appears when you try to run this command indicating that you have to use the dcb-map commands in the future.
Page 459 dot1p1_group- dot1p2_group- dot1p3_group- dot1p4_group- dot1p5_group- dot1p6_group- dot1p7_group- Defaults None Command DCB MAP Modes Command Version 9.3(0.0) Introduced on the FC Flex IO module installed in the MXL History 10/40GbE Switch module platform. Usage PFC and ETS settings are not pre-configured on Ethernet ports. You must use the Information dcb-map command to configure different groups of 802.1p priorities with PFC and ETS settings.
Page 460: Qos-Policy-Buffer
priority-group bandwidth pfc— configures the ETS bandwidth allocation and the PFC setting used to manage the port traffic in an 802.1p priority group. qos-policy-buffer Create a QoS policy buffer and enter the configuration mode to configure the no-drop queues, ingress buffer size, buffer limit for pausing, and buffer offset limit for resuming.
Page 461 Example Dell(conf)# qos-policy-buffer test Dell (conf-qos-policy-buffer)#queue 0 pause no-drop buffer-size 128000 pause-threshold 103360 resume-threshold 83520 Dell(conf-qos-policy-buffer)# queue 4 pause no-drop buffer-size 128000 pause-threshold 103360 resume-threshold 83520...
Page 462: Show Qos Dcb-Map
Enhanced Transmission Selection (ETS). Percentage of bandwidth allocated to the priority group. PFC setting for the priority group: On (enabled) or Off. Priorities 802.1p priorities configured in the priority group. Example Dell# show qos dcb-map dcbmap2 State :Complete PfcMode:ON -------------------- PG:0 TSA:ETS...
Page 463: Show Stack-Unit Stack-Ports Pfc Details
Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Example Dell(conf)# show stack-unit all stack-ports all pfc details stack unit 0 stack-port all Admin mode is On Admin is enabled, Priority list is 4-5...
Page 464: Debugging And Diagnostics
• Diagnostic results are printed to the screen. The Dell Networking OS does not write them to memory. • Diagnostics only test connectivity, not the entire data path.
Page 465: Offline Stack-Unit
level1 Enter the keyword Level1 to run Level 1 diagnostics. Level 1 diagnostics is a smaller set of diagnostic tests with support for automatic partitioning. They perform status/self test for all the components on the board and test their registers for appropriate values.
Page 466: Online Stack-Unit
The following sections detail the buffer tuning commands. WARNING: Altering the buffer allocations is a sensitive operation. Do not use any buffer tuning commands without first contacting the Dell Networking Technical Assistance Center (TAC). buffer (Buffer Profile) Allocate an amount of dedicated buffer space, dynamic buffer space, or packet pointers to queues 0 to 3.
Page 467 dynamic Enter the keyword dynamic to configure the amount of dynamic buffer space per Field Processor. packets- Enter the keywords packets-pointers to configure the pointers number of packet pointers per queue. queue0 Enter the keyword queue0 and the number to allocate an number amount of buffer space or packet pointers to Queue 0.
Page 468: Buffer (Configuration)
Introduced on the MXL 10/40GbE Switch IO Module. History 8.3.16.10 Usage If you attempt to apply a buffer profile to a non-existent port-pipe, the Dell Information Networking OS displays the following message. However, the configuration still appears in the running-config.
Page 469: Buffer-Profile (Configuration)
Similarly, when you configure buffer- profile global, you cannot not apply buffer-profile on any interface. If the default buffer-profile is active, the Dell OS displays an error message instructing you to remove the default configuration using the no buffer- profile global command.
Page 470: Buffer-Profile (Interface)
Defaults none Command EXEC Privilege Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell#show buffer-profile summary fp-uplink Linecard Port-set Buffer-profile test1 test2 Dell# Debugging and Diagnostics...
Page 471: Show Buffer-Profile Interface
Command INTERFACE Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell#show buffer-profile detail csf linecard 4 port-set 0 Linecard 4 Port-set 0 Buffer-profile test Queue# Dedicated Buffer Buffer Packets (Bytes) 36960 18560 18560...
Page 472: Hardware Commands
Hardware Commands These commands display information from a hardware sub-component or ASIC. clear hardware stack-unit Clear statistics from selected hardware components. Syntax clear hardware stack-unit 0–5 {counters | unit 0–1 counters | cpu data-plane statistics | cpu party-bus statistics | stack- port 0–52} Parameters stack-unit 0–5...
Page 473: Clear Hardware System-Flow
clear hardware system-flow Clear system-flow statistics from selected hardware components. Syntax clear hardware system-flow layer2 stack-unit 0–5 port-set 0–0 counters Parameters stack-unit 0–5 Enter the keywords stack-unit then 0 to 5 to select a particular stack member and then enter one of the following command options to clear a specific collection of data.
Page 474: Show Hardware Layer3
show hardware layer3 Display Layer 3 ACL or QoS data for the selected stack member and stack member port-pipe. Syntax show hardware layer3 {acl | qos} stack-unit 0–5 port-set 0–0 Parameters acl | qos Enter either the keyword acl or the keyword qos to select between ACL or QoS data.
Page 475 [detail], or register. Defaults none Command • EXEC Modes • EXEC Privilege Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell#show hardware stack-unit 0 phy-firmware-version PortNumber Status Programmed Version SW Version Debugging and Diagnostics...
Page 476 In the above example, the Status field represents presence of OPTM ports, Programmed versionfield represents loaded firmware version, and SW version represents the SDK version. Example (data- Dell#show hardware stack-unit 0 cpu data-plane statistics plane) bc pci driver statistics for device: rxHandle...
Page 477 Dell#show hard stack-unit 0 drops unit 0 summary) PortNumber Ingress Drops IngMac Drops Total Mmu Drops EgMac Drops Egress Drops Dell# Example (drop Dell#show hardware stack-unit 0 drops unit 0 port 27 counters) --- Ingress Drops --- Ingress Drops IBP CBP Full Drops PortSTPnotFwd Drops...
Page 478 L2MC Drops PKT Drops of ANY Conditions : 0 Hg MacUnderflow TX Err PKT Counter : 0 25 Dell# Example (port- Dell#show hardware stack-unit 0 unit 0 port-stats statistics) ena/ speed/ link auto lrn inter max loop port link duplex scan neg?
Page 479 0x03335000 ASF_PORT_SPEED.xe28 = 0x00000000 0x03339000 ASF_PORT_SPEED.xe29 = 0x00000000 !------------------ output truncated ---------------! Example (unit Dell#show hardware stack-unit 0 unit 0 details details) ****************************************************** The total no of FP & CSF Devices in the Card is 1 The total no of FP Devices in the Card is 1...
Page 480: Show Hardware System-Flow
Dell(conf)#sh hardware stack-unit 0 buffer total-buffer (buffer) Dell#sh hardware stack-unit 0 buffer total-buffer Total Buffers allocated per Stack-Unit 46080 Example Dell(conf)#show hardware stack-unit 0 buffer unit 0 port 1 (specific port) buffer-info ----- Buffer Stats for Unit 0 Port 1 -----...
Page 481 Defaults none Command EXEC Privilege Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell#show hardware system-flow layer2 stack-unit 0 port-set 0 counters --------------------------------------------------------------- EntryId Description #HITS --------------------------------------------------------------- 2048 STP BPDU Redirects 2047 LLDP BPDU Redirects...
Page 482 , FPF4=0x00 MASK=0x00000000 00000000 00000000 ffffffff ffff0000 00000000 00000000 0x00 action={act=Drop, param0=0(0x00), param1=0(0x00)}, action={act=CosQCpuNew, param0=7(0x07), param1=0(0x00)}, action={act=CopyToCpu, param0=0(0x00), param1=0(0x00)}, action={act=UpdateCounter, param0=1(0x01), param1=0(0x00)}, meter=NULL, counter={idx=0, mode=0x01, entries=1} ################ FP Entry for redirecting LLDP BPDU to RSM ################ EID 2047: gid=1, slice=15, slice_idx=0x01, prio=0x7ff, flags=0x82, Installed tcam: color_indep=0, higig=0, higig_mask=0, KEY=0x00000000 00000000 00000000 0180c200...
Page 483 KEY=0x00000000 00000000 00000000 0180c200 00210000 00000000 00000000 , FPF4=0x00 MASK=0x00000000 00000000 00000000 ffffffff ffff0000 00000000 00000000 0x00 action={act=Drop, param0=0(0x00), param1=0(0x00)}, action={act=CosQCpuNew, param0=7(0x07), param1=0(0x00)}, action={act=CopyToCpu, param0=0(0x00), param1=0(0x00)}, action={act=UpdateCounter, param0=1(0x01), param1=0(0x00)}, meter=NULL, counter={idx=3, mode=0x01, entries=1} ################# FP Entry for redirecting ARP Replies to RSM ############# EID 2043: gid=1, slice=15, slice_idx=0x04, prio=0x7fb, flags=0x82,...
Page 484: Dynamic Host Configuration Protocol (Dhcp)
Dynamic Host Configuration Protocol (DHCP) Dynamic host configuration protocol (DHCP) is an application layer protocol that dynamically assigns IP addresses and other configuration parameters to network end-stations (hosts) based on the configuration policies the network administrators determine. An MXL switch can operate as a DHCP server or DHCP client. As a DHCP client, the switch requests an IP address from a DHCP server.
Page 485: Debug Ip Dhcp Server
Entering <CR> after the clear ip dhcp binding command clears all the IPs Information from the binding table. debug ip dhcp server Display the Dell Networking OS debugging messages for DHCP. Syntax debug ip dhcp server [events | packets] Parameters...
Page 486: Disable
disable Disable the DHCP server. Syntax disable DHCP Server is disabled by default. To enable the system to be a DHCP server, use the no disable command. Defaults Disabled Command DHCP Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History dns-server Assign a DNS server to clients based on address pool.
Page 487: Excluded-Address
Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History excluded-address Prevent the server from leasing an address or range of addresses in the pool. Syntax excluded-address [address | low-address high-address] Parameters address Enter a single address to be excluded from the pool. low-address Enter the lowest address in a range of addresses to be excluded from the pool.
Page 488: Host
host For manual (rather than automatic) configurations, assign a host to a single-address pool. Syntax host address Parameters address/mask Enter the host IP address and subnet mask. Defaults none Command DHCP <POOL> Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History lease Specify a lease time for the addresses in a pool.
Page 489: Netbios-Node-Type
Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History netbios-node-type Specify the NetBIOS node type for a Microsoft DHCP client. Dell Networking Operating System (OS) recommends specifying clients as hybrid. Syntax netbios-node-type type Parameters type Enter the NETBIOS node type: •...
Page 490: Show Ip Dhcp Binding
Command DHCP <POOL> Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History show ip dhcp binding Display the DHCP binding table. Syntax show ip dhcp binding Defaults none Command EXEC Privilege Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History show ip dhcp configuration Display the DHCP configuration.
Page 491: Show Ip Dhcp Server
Defaults none Command EXEC Privilege Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History show ip dhcp server Display the DHCP server statistics. Syntax show ip dhcp server statistics Defaults none Command EXEC Privilege Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
Page 492: Other Commands Supported By The Dhcp Client
interface type slot/port command. If you later enter the no shutdown] command and the lease timer for the dynamic IP address has expired, the IP address is unconfigured and the interface tries to acquire a new dynamic address from DHCP server. You cannot configure a secondary (backup) IP address on an interface using the ip address dhcp command;...
Page 493: Debug Ip Dhcp Clients Events
Defaults none Command EXEC Privilege Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History debug ip dhcp clients events Enable the display of log messages for the following events on DHCP client interfaces: IP address acquisition, IP address release, Renewal of IP address and lease time, and Release of an IP address. Syntax debug ip dhcp client events [interface type slot/port] Parameters...
Page 494: Release Dhcp Interface
Defaults none Command EXEC Privilege Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History release dhcp interface Release the dynamically-acquired IP address on an Ethernet interface while retaining the DHCP client configuration on the interface. Syntax release dhcp interface type slot/port Parameters interface type...
Page 495: Show Ip Dhcp Client Statistics
• For a 40-GigabitEthernet Ethernet interface, enter FortyGigabitEthernet then the slot/port numbers; for example, fortygigabitethernet 0/2. Defaults none Command EXEC Privilege Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Usage When you enter the renew dhcp command, a new dynamic IP address is acquired Information on the specified Ethernet interface for the renewed lease time.
Page 496: Show Ip Dhcp Lease
show ip dhcp lease Display lease information about the dynamic IP address currently assigned to a DHCP client-enabled interface. Syntax show ip dhcp lease [interface type slot/port] Parameters interface type Display DHCP lease information on the specified interface. slot/port • For a 10-GigabitEthernet Ethernet interface, enter TenGigabitEthernet then the slot/port numbers;...
Page 497: Arp Inspection-Trust
arp inspection-trust Specify a port as trusted so that ARP frames are not validated against the binding table. Syntax arp inspection-trust Defaults Disabled Command • INTERFACE Modes • INTERFACE PORT-CHANNEL Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Related arp inspection...
Page 498: Ip Dhcp Snooping Database
Layer 3 only and dependent on DHCP Relay Agent (ip helper-address). The Dell Networking OS version 8.2.1.0 extends DHCP Snooping to Layer 2, and you do not have to enable relay agent to snoop on Layer 2 interfaces.
Page 499: Ip Dhcp Snooping Database Renew
• For a Ten-Gigabit Ethernet interface, enter the keyword tengigabitethernet. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE. slot/port Enter the slot and port number of the interface. lease time Enter the keyword lease then the amount of time the IP address are leased.
Page 500: Ip Dhcp Source-Address-Validation
Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History ip dhcp source-address-validation Enable the IP Source Guard. Syntax [no] ip dhcp source-address-validation [ipmac] Parameters ipmac Enable IP+MAC Source Address Validation. Defaults Disabled Command INTERFACE Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
Page 501: Ip Dhcp Relay
NOTE: Learning only happens if there is a trusted port in the VLAN. Related ip dhcp snooping trust — configures an interface as trusted. Commands ip dhcp relay Enable Option 82. Syntax ip dhcp relay information-option [remote-id | trust-downstream] Parameters remote-id Configure the system to enable the remote-id string in option-82.
Page 502: Ip Dhcp Snooping Verify Mac-Address
Related clear ip dhcp snooping — clears the contents of the DHCP binding table. Commands ip dhcp snooping verify mac-address Validate a DHCP packet’s source hardware address against the client hardware address field (CHADDR) in the payload. Syntax [no] ip dhcp snooping verify mac-address Defaults Disabled Command...
Page 503: Equal Cost Multi-Path (Ecmp)
Equal Cost Multi-Path (ECMP) Equal cost multi-path (ECMP) is supported on the Dell Networking MXL 10/40GbE Switch IO Module. ecmp-group Provides a mechanism to monitor traffic distribution on an ECMP link bundle. A system log is generated when the standard deviation of traffic distribution on a member link exceeds a defined threshold.
Page 504: Hash-Algorithm
hash-algorithm Changes the hash algorithm used to distribute traffic flows across a Port Channel. Syntax hash-algorithm {algorithm-number | {ecmp {crc16 | crc16cc | crc32MSB | crc32LSB | crc-upper | dest-ip | lsb | xor1 | xor2 | xor4 | xor8 | xor16} [number] lag {checksum | crc | xor} [number] nh-ecmp {checksum | crc | xor}[number] linecard number ip-sa-mask value ip-da-mask value | seed seed-value } To return to the default hash algorithm, use the no hash-algorithm command.
Page 505 (Single Linecard). • When hashing is done only on IPSA or IPDA, the Dell Networking OS maintains bi-directionality with masks set to XX 00 for line card 1 and 00 XX for line card 2 (ip-sa-mask and ip-da-mask).
Page 506: Hash-Algorithm Ecmp
On TeraScale, if you do not enter the keyword ECMP or LAG, the Dell Networking OS assumes it to be common for both. If the keyword ECMP or LAG is entered separately, both should fall in the range of 0 to 23 or 24 to 47 since compression enable/disable is common for bothTeraScale and ExaScale support the range 0-47.
Page 507: Hash-Algorithm Seed
The Dell Networking OS provides a CLI-based solution for modifying the hash seed to ensure that on each configured system, the ECMP selection is same. When configured, the same seed is set for ECMP, LAG, and NH, and is used for incoming traffic only.
Page 508: Ip Ecmp-Group
NOTE: While the seed is stored separately on each port-pipe, the same seed is used across all CAMs. You cannot separate LAG and ECMP but you can use different algorithms across the chassis with the same seed. If LAG member ports span multiple port-pipes and line cards, set the seed to the same value on each port-pipe to achieve deterministic behavior.
Page 509: Link-Bundle-Monitor Enable
Parameters percent Indicate the threshold value when traffic distribution starts being monitored on an ECMP link bundle. The range is from 1 to 90%. The default is 60%. Command EXEC Privilege Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History link-bundle-monitor enable Provides a mechanism to enable monitoring of traffic distribution on an ECMP link bundle.
Page 510: Show Link-Bundle Distribution
Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell#show link-bundle-distribution Link-bundle trigger threshold - 60 ECMP bundle - 5 Utilization[In Percent] - 0 Alarm State - Inactive Interface Line Protocol Utilization[In Percent] Te 0/4...
Page 511: Fips Cryptography
Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell (conf)#fips mode enable WARNING: Enabling FIPS mode will close all SSH/Telnet connection, restart those servers, and destroy all configured host keys. proceed (y/n) ? y Dell (conf)# Related —...
Page 512: Show Ip Ssh
Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell#show fips status FIPS Mode: Enabled Dell# show ip ssh Display information about established SSH sessions Syntax show ip ssh Defaults none Command EXEC Modes EXEC Privilege Command Version 9.2(0.0)
Page 513 Open an SSH connection specifying the hostname, username, port number, and version of the SSH client. Syntax ssh {hostname | ipv4 address | ipv6 address} [-c encryption cipher | -l username | -m HMAC alogorithm | -p port-number | -v {1|2}] Parameters hostname...
Page 514 User name option HMAC algorithm to use (for v2 clients only) SSH server port option (default 22) SSH protocol version <cr> Dell#ssh 10.11.8.12 -c ? 3des-cbc Force ssh to use 3des-cbc encryption cipher Dell#ssh 10.11.8.12 -m ? hmac-sha1 Force ssh to use hmac-sha1 HMAC algorithm...
Page 515: Fip Snooping
Acting as a transit FIP snooping bridge, the switch uses dynamically-created ACLs to permit only authorized FCoE traffic to be transmitted between an FCoE end-device and an FCF. The following Dell Networking Operating System (OS) commands are used to configure and verify the FIP snooping feature.
Page 516: Clear Fip-Snooping Statistics
clear fip-snooping statistics Clears the statistics on the FIP packets snooped on all VLANs, a specified VLAN, or a specified port interface. Syntax clear fip-snooping statistics [interface vlan vlan-id | interface port-type port/slot | interface port-channel port- channel-number] Parameters vlan-id Enter the VLAN ID of the FIP packet statistics to be cleared.
Page 517: Feature Fip-Snooping
Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. feature fip-snooping Enable FCoE transit and FIP snooping on a switch. Syntax feature fip-snooping To disable the FCoE transit feature, use the no feature fip-snooping command. Defaults Disabled Command CONFIGURATION Modes Command Version 9.2(0.0)
Page 518: Fip-Snooping Fc-Map
fip-snooping fc-map Configure the FC-MAP value FIP snooping uses on all VLANs. Syntax fip-snooping fc-map fc-map-value To return the configured FM-MAP value to the default value, use the no fip- snooping fc-map command. Parameters fc-map-value Enter the FC-MAP value FIP snooping uses. The range is from 0EFC00 to 0EFCFF.
Page 519: Show Fip-Snooping Config
EXEC Privilege Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell# show fip-snooping config FIP Snooping Feature enabled Status: Enabled FIP Snooping Global enabled Status: Enabled Global FC-MAP Value: 0X0EFC00 FIP Snooping enabled VLANs VLAN...
Page 520: Show Fip-Snooping Fcf
Field Description FC-ID Fibre Channel session ID the FCF assigns. Example Dell# show fip-snooping enode Enode MAC Enode Interface FCF MAC VLAN FC-ID --------- --------------- ------- ---- ----- d4:ae:52:1b:e3:cd Te 0/11 54:7f:ee:37:34:40 100 62:00:11 show fip-snooping fcf Display information on the FCFs in FIP-snooped sessions, including the FCF interface and MAC address, FCF interface, VLAN ID, FC-MAP value, FKA advertisement period, and number of ENodes connected.
Page 521: Show Fip-Snooping Sessions
Fibre Channel ID the FCF assigns. Port WWPN Worldwide port name of the CNA port. Port WWNN Worldwide node name of the CNA port. Example Dell#show fip-snooping sessions Enode MAC Enode Intf FCF MAC FCF Intf VLAN aa:bb:cc:00:00:00 Te 0/42...
Page 522: Show Fip-Snooping Statistics
21:00:0e:fc:00:00:00:00 0e:fc:00:01:00:02 01:00:02 41:00:0e:fc:00:00:00:00 21:00:0e:fc:00:00:00:00 0e:fc:00:01:00:03 01:00:03 41:00:0e:fc:00:00:00:01 21:00:0e:fc:00:00:00:00 0e:fc:00:01:00:04 01:00:04 41:00:0e:fc:00:00:00:02 21:00:0e:fc:00:00:00:00 0e:fc:00:01:00:05 01:00:05 41:00:0e:fc:00:00:00:03 21:00:0e:fc:00:00:00:00 show fip-snooping statistics Display statistics on the FIP packets snooped on all interfaces, including VLANs, physical ports, and port channels. Syntax show fip-snooping statistics [interface vlan vlan-id | interface port-type port/slot | interface port-channel port- channel-number] Parameters...
Page 523 Field Description Number of FLOGI Number of FIP-snoop FLOGI request frames received on the interface. Number of FDISC Number of FIP-snoop FDISC request frames received on the interface. Number of Number of FIP-snoop FLOGO frames received on the FLOGO interface Number of ENode Number of FIP-snoop ENode keep-alive frames received on Keep Alives...
Page 524 Field Description due to Hardware Config Example Dell# show fip-snooping statistics interface vlan 100 Number of Vlan Requests Number of Vlan Notifications Number of Multicast Discovery Solicits Number of Unicast Discovery Solicits Number of FLOGI Number of FDISC Number of FLOGO...
Page 525: Show Fip-Snooping System
Modes • EXEC Privilege Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell# show fip-snooping system Global Mode : Enabled FCOE VLAN List (Operational) : 1, 100 FCFs Enodes Sessions : 17 show fip-snooping vlan Display information on the FCoE VLANs on which FIP snooping is enabled.
Page 526 0X0EFC00 1 FIP Snooping...
Page 527: Force10 Resilient Ring Protocol (Frrp)
Force10 Resilient Ring Protocol (FRRP) Force10 resilient ring protocol (FRRP) is supported on Dell Networking MXL 10/40GbE Switch IO Module. FRRP is a proprietary protocol for that offers fast convergence in a Layer 2 network without having to run the spanning tree protocol (STP). The resilient ring protocol is an efficient protocol that transmits a high- speed token across a ring to verify the link status.
Page 528: Debug Frrp
• The number of state change counters Example Dell#clear frrp Clear frrp statistics counter on all ring [confirm] yes Dell#clear frrp 4 Clear frrp statistics counter for ring 4 [confirm] yes Dell# Related show frrp — displays the resilient ring protocol configuration.
Page 529: Description
description Enter an identifying description of the ring. Syntax description Word To remove the ring description, use the no description [Word] command. Parameters Word Enter a description of the ring. Maximum: 255 characters. Defaults none Command CONFIGURATION (conf-frrp) Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
Page 530: Member-Vlan
• Fast Ethernet interface: enter the keyword FastEthernet then the slot/port information. • Port Channel interface: enter the keyword port- channel then a number. The range is from 1 to 128. • 10-Gigabit Ethernet interface: enter the keyword TenGigabitEthernet then the slot/port information •...
Page 531: Mode
Parameters vlan-range Enter the member VLANs using VLAN IDs (separated by commas), a range of VLAN IDs (separated by a hyphen), a single VLAN ID, or a combination. For example: VLAN IDs (comma-separated): 3, 4, 6. Range (hyphen-separated): 5-10. Combination: 3, 4, 5-10, 8. Defaults none Command...
Page 532: Show Frrp
This command clears the following counters: • hello Rx and Tx counters • Topology change Rx and Tx counters • The number of state change counters Example Dell#show frrp summary (Summary) Ring-ID State Mode Ctrl_Vlan Member_Vlans ---------------------------------------------- Master 11-20, 25,27-30 Transit 40-41...
Page 533: Timer
Ring Master's MAC Address is 00:01:e8:13:a3:19 Topology Change Statistics: Tx:110 Rx:45 Hello Statistics: Tx:13028 Rx:12348 Number of state Changes: 34 Member Vlans: 1000-1009 Dell# Example (2 Dell#show frrp 2 summary Summary) Dell#show frrp 2 summary Ring-ID State Mode Ctrl_Vlan Member_Vlans ----------------------------------------------- Master 2...
Page 534 Command CONFIGURATION (conf-frrp) Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Usage The hello interval command is the interval at which ring frames are generated Information from the primary interface of the master node. The dead interval command is the time that elapses before a time-out occurs.
Page 535: Garp Vlan Registration (Gvrp)
GARP VLAN Registration (GVRP) The Dell Networking Operating System (OS) supports the basic GVRP commands. The generic attribute registration protocol (GARP) mechanism allows the configuration of a GARP participant to propagate through a network quickly. A GARP participant registers or de-registers its attributes with other participants by making or withdrawing declarations of attributes.
Page 536: Clear Gvrp Statistics
• VLANs created dynamically with GVRP exist only as long as a GVRP-enabled device is sending updates. If the devices no longer send updates, or GVRP is disabled, or the system is rebooted, all dynamic VLANs are removed. • GVRP manages the active topology, not non-topological data such as VLAN protocols. If a local bridge must classify and analyze packets by VLAN protocols, manually configure protocol-based VLANs, and simply rely on GVRP for VLAN updates.
Page 537: Disable
Parameters config Enter the keyword config to enable debugging on the GVRP configuration. event Enter the keyword event to enable debugging on the JOIN/ LEAVE events. Enter the keyword pdu then one of the following Interface keywords and slot/port or number information: •...
Page 538: Garp Timers
garp timers Set the intervals (in milliseconds) for sending GARP messages. Syntax garp timers {join | leave | leave-all} To return to the previous setting, use the no garp timers {join | leave | leave-all} command. Parameters join Enter the keyword join then the number of milliseconds to configure the join time.
Page 539: Gvrp Enable
gvrp enable Enable GVRP on physical interfaces and LAGs. Syntax gvrp enable To disable GVRP on the interface, use the no gvrp enable command. Defaults Disabled. Command CONFIGURATION-INTERFACE Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Related disable...
Page 540: Protocol Gvrp
To advertise or learn about VLANs through GVRP, use the forbidden command when you do not want the interface. Related show gvrp — displays the GVRP configuration including the registration. Commands protocol gvrp Access GVRP protocol — (config-gvrp)#. Syntax protocol gvrp Defaults Disabled.
Page 541: Show Gvrp
Command • EXEC Modes • EXEC Privilege Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell#show garp timers GARP Timers Value (milliseconds) ---------------------------------------- Join Timer Leave Timer LeaveAll Timer 10000 Dell# Related garp timers — sets the intervals (in milliseconds) for sending GARP messages.
Page 542: Clear Gvrp Statistics
Example R3#show gvrp brief GVRP Feature is currently enabled. Port GVRP Status Edge-Port ---------------------------------------------- Gi 3/0 Disabled Gi 3/1 Disabled Gi 3/2 Enabled Gi 3/3 Disabled Gi 3/4 Disabled Gi 3/5 Disabled Gi 3/6 Disabled Gi 3/7 Disabled Gi 3/8 Disabled R3#show gvrp brief Related...
Page 543: Show Vlan
VLANs (GVRP Blocking state). • An entry for a new GVRP VLAN could not be created in the GVRP database. Example Dell#show gvrp statistics int tengig 1/0 Join Empty Received: 0 Join In Received: 0 Empty Received: 0 LeaveIn Received: 0...
Page 544 Active U Te 3/20 U Te 5/20-21 Active G Po128(Te 5/49) (dynamically leanred vlan) Dell Related show gvrp statistics — displays the GVRP statistics. Commands GARP VLAN Registration (GVRP)
Page 545: Internet Group Management Protocol (Igmp)
(IGMP) The IGMP commands are supported by the Dell Networking Operating System (OS). IGMP Snooping Commands The Dell Networking OS supports IGMP Snooping version 2 and 3 on all Dell Networking systems. Important Points to Remember for IGMP Snooping •...
Page 546: Ip Igmp Access-Group
• If the IP SA of the incoming IGMP general query is higher than the VLAN IP address, the switch continues to work as an IGMP snooping Querier. ip igmp access-group To specify access control for packets, use this feature. Syntax ip igmp access-group access-list To remove the feature, use the no ip igmp access-group access-list...
Page 547: Ip Igmp Querier-Timeout
ip igmp querier-timeout Change the interval that must pass before a multicast router decides that there is no longer another multicast router that should be the querier. Syntax ip igmp querier-timeout seconds To return to the default value, use the no ip igmp querier-timeout command.
Page 548: Ip Igmp Query-Max-Resp-Time
ip igmp query-max-resp-time Set the maximum query response time advertised in general queries. Syntax ip igmp query-max-resp-time seconds To return to the default values, use the no ip igmp query-max-resp-time command. Parameters seconds Enter the number of seconds for the maximum response time.
Page 549: Ip Igmp Snooping Fast-Leave
Defaults Disabled. Command • CONFIGURATION Modes • INTERFACE VLAN Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Usage To enable IGMP snooping, enter this command. When you enable this command Information from CONFIGURATION mode, IGMP snooping enables on all VLAN interfaces (except the default VLAN).
Page 550: Ip Igmp Snooping Last-Member-Query-Interval
Defaults Enabled. Command CONFIGURATION Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Usage When you disable flooding, unregistered multicast data traffic is forwarded to only Information multicast router ports, both static and dynamic, in a VLAN. If there is no multicast router port in a VLAN, unregistered multicast data traffic is dropped.
Page 551: Ip Igmp Snooping Querier
Introduced on the MXL 10/40GbE Switch IO Module. History Usage The Dell Networking OS provides the capability of statically configuring the Information interface to which a multicast router is attached. To configure a static connection to the multicast router, enter the ip igmp snooping mrouter interface command in the VLAN context.
Page 552: Show Ip Igmp Snooping Mrouter
Command • EXEC Modes • EXEC Privilege Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell#show ip igmp snooping mrouter Interface Router Ports Vlan 2 Gi 13/3, Po 1 Dell# Internet Group Management Protocol (IGMP)
Page 553: Interfaces
Interfaces The commands in this chapter are supported by Dell Networking Operating System (OS). This chapter contains the following sections: • Basic Interface Commands • Port Channel Commands Basic Interface Commands The following commands are for Physical, Loopback, and Null interfaces.
Page 554: Clear Dampening
History supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Example Dell#clear counters Clear counters on all interfaces [confirm] Related mac learning-limit — allows aging of MACs even though a learning-limit is Commands configured or disallow station move on learned MACs.
Page 555: Cx4-Cable-Length
On the MXL switch, after you enter the clear counters command and verify the Information results with the show interfaces command, the line rate is not reset to 0.00%. Example Dell#clear dampening gigabitethernet 1/2 Clear dampening counters on tengig 1/2 [confirm] y Dell# Related show interfaces dampening —...
Page 556: Dampening
For details about using XFP ports with CX4 cables, refer to your MXL switch hardware guide. Example Dell#show interfaces tengigabitethernet 0/26 | grep "XFP type" (Unsuccessful) Pluggable media present, XFP type is 10GBASE-CX4 Dell(conf-if-te-0/26)#cx4-cable-length short % Error: Unsupported command. Dell(conf-if-te-0/26)#cx4-cable-length medium % Error: Unsupported command.
Page 557: Description
Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage With each flap, The Dell Networking OS penalizes the interface by assigning a Information penalty (1024) that decays exponentially depending on the configured half-life. After the accumulated penalty exceeds the suppress threshold value, the interface moves to the Error-Disabled state.
Page 558: Duplex (1000/10000 Interfaces)
Defaults none Command INTERFACE Modes Command Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is History supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Important Points to Remember: Information •...
Page 559: Flowcontrol
This command applies to any physical interface with speed set to 1000/10000. Information NOTE: Starting with the Dell Networking OS version 7.8.1.0, when you use a copper SFP2 module with catalog number GP-SFP2-1T in the S25P module, you can manually set its speed with the speed command. When you set the speed to 10 Mbps or 100 Mbps, you can also execute the duplex command.
Page 560 Example This Example shows how the Dell Networking OS negotiates the flow control (Values) values between two Dell Networking chassis connected back-to-back using 1G copper ports. Configured Interfaces...
Page 561: Interface
LocRxConf LocTxConf RemoteRxConf RemoteTxConf LocNegRx LocNegTx RemNegRx RemNegTx Related show running-config — displays the flow configuration parameters (non-default Commands values only). show interfaces — displays the negotiated flow control parameters. interface Configure a physical interface on the switch. Syntax interface interface Parameters interface Enter one of the following keywords and slot/port or number...
Page 562: Interface Loopback
If you select any other interface as the next hop to the tunnel destination, the tunnel interface does not operate as an ECMP. Example Dell(conf)#interface tengig 0/0 Dell(conf-if-tengig-0/0)#exit# Related interface port-channel —...
Page 563: Interface Managementethernet
Introduced on the M I/O Aggregator. This command is History supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Example Dell(conf)#interface loopback 1655 Dell(conf-if-lo-1655)# Related interface — configures a physical interface. Commands interface null —...
Page 564: Interface Null
Example Dell(conf)#interface managementethernet 0/0 Dell(conf-if-ma-0/0)# interface null Configure a Null interface on the switch. Syntax interface null number Parameters number Enter zero (0) as the Null interface number. Defaults Not configured; number = 0 Command CONFIGURATION Modes Command Version 9.2(0.0) Introduced on the M I/O Aggregator.
Page 565 Parameters interface, Enter the keywords interface range and one of the interface,... interfaces — slot/port, port-channel, or VLAN number. Select the range of interfaces for bulk configuration. You can enter up to six comma-separated ranges. Spaces are not required between the commas. Comma-separated ranges can include VLANs, port-channels, and physical interfaces.
Page 566 Example (Bulk) Dell(conf)#interface range so 2/0-1, te 10/0, gi 3/0, fa 0/0 % Warning: Non-existing ports (not configured) are ignored by interface-range Example Dell(conf)#interface range gi 2/0 - 23, gi 2/1 - 10 (Multiple Ports) Dell(conf-if-range-gi-2/0-23# Example Dell(conf)#interface range gi 2/1 - 11, gi 2/1 - 23...
Page 567: Interface Range Macro (Define)
interface vlan — configures a VLAN interface. show config (from INTERFACE RANGE mode) — shows the bulk configuration interfaces. show range — shows the bulk configuration ranges. interface range macro (define) Defines a macro for an interface range and then saves the macro in the running configuration. Syntax define interface range macro name interface , interface , ...
Page 568: Interface Range Macro Name
This example shows how to define an interface range macro named test. Execute Range) the show running-config command to display the macro definition. Dell(config)# define interface-range test tengigabitethernet0/0-3, gigabitethernet 5/0-47, gigabitethernet 13/0-89 Dell# show running-config | grep define define interface-range test tengigabitethernet0/0-3, gigabitethernet5/0-47, gigabitethernet 13/0 - 89 Dell(config)#interface range macro test Dell(config-if-range-te-0/0-3,gi-5/0-47,gi-13/0-89)#...
Page 569: Interface Vlan
For more information about VLANs and the commands to configure them, refer to Information the Virtual LAN (VLAN) Commands. FTP, TFTP, and SNMP operations are not supported on a VLAN. MAC/IP ACLs are not supported. Example Dell(conf)#int vlan 3 Dell(conf-if-vl-3)# Related interface — configures a physical interface. Commands interface port-channel —...
Page 570: Keepalive
Command Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is History supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage If you configure interface type as CR4 with auto-negotiation enabled, also Information configure CR4 with auto-negotiation.
Page 571: Monitor Interface
monitor interface Monitor counters on a single interface or all interfaces on a line card. The screen is refreshed every five seconds and the CLI prompt disappears. Syntax monitor interface [interface] To disable monitoring and return to the CLI prompt, press the q key. Parameters interface (OPTIONAL) Enter the following keywords and slot/port or...
Page 572 Description Change the view to the next interface on the line card, or if in line card mode, the next line card in the chassis. Change the view to the previous interface on the line card, or if in line card mode, the previous line card in the chassis. Increase the screen refresh rate.
Page 573 The IP MTU is adjusted automatically when you configure the Layer 2 MTU with the mtu command. When you enter the no mtu command, The Dell Networking OS reduces the IP MTU value to 1536 bytes. Link MTU and IP MTU considerations for port channels and VLANs are as follows.
Page 574: Negotiation Auto
Layer 2 Overhead Link MTU and IP MTU Delta Tagged Packet 26 bytes with VLAN-Stack Header negotiation auto Enable auto-negotiation on an interface. Syntax negotiation auto To disable auto-negotiation, use the no negotiation auto command. Defaults Enabled. Command INTERFACE Modes Command Version 9.2(0.0) Introduced on the M I/O Aggregator.
Page 575 Dell(conf-if-autoneg)# Example Dell#show interfaces configured (Master/Slave, TenGigabitEthernet 13/18 is up, line protocol is up Hardware is Dell Force10Eth, address is 00:01:e8:05:f7:fc partial) Current address is 00:01:e8:05:f7:fc Interface index is 474791997 Internet address is 1.1.1.1/24 MTU 1554 bytes, IP MTU 1500 bytes...
Page 576: Portmode Hybrid
• Up at 100 Mb/s • Down • Down * You cannot disable auto-negotiation when the speed is set to 1000 or auto. Related speed (for 1000/10000 interfaces) — sets the link speed to 1000, 10000, or auto- Commands negotiate the speed. portmode hybrid To accept both tagged and untagged frames, set a physical port or port-channel.
Page 577 Dell(conf-if-te-0/20)#int vlan 10 Dell(conf-if-vl-10)#int tengig 0/20 Dell(conf-if-vl-20)# untag tengig 0/20 Dell (conf-if-vl-20)# Dell(conf)#do show interfaces switchport tengigabitethernet 3/20 Codes: U - Untagged, T - Tagged x - Dot1x untagged, X - Dot1x tagged G - GVRP tagged, M - Trunk, H - VSN tagged...
Page 578: Rate-Interval
— displays information on physical and virtual interfaces. Commands show config Display the interface configuration. Syntax show config Command INTERFACE Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell(conf-if)#show conf interface GigabitEthernet 1/7 no ip address switchport no shutdown Dell(conf-if)# Interfaces...
Page 579: Show Config (From Interface Range Mode)
CONFIGURATION INTERFACE (conf-if-range) Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell(conf)#interface range gigabitethernet 1/1 - 2 Dell(conf-if-range-gi-1/1-2)#show config interface GigabitEthernet 1/1 no ip address switchport no shutdown interface GigabitEthernet 1/2 no ip address...
Page 580 Introduced on the MXL 10/40GbE Switch IO Module. History Usage Starting with Dell Networking OS Release 9.3(0.0), you can also view the Information configuration of 40-Gigabit Ethernet interfaces by using the fortyGigE keyword with the show interface interface-type brief command. For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed by the slot/port information to indicate the interface.
Page 581 Line Description Last clearing... Displays the time when the show interfaces counters where cleared. Queuing States the packet queuing strategy. FIFO means first in first strategy... out. Input Statistics: Displays all the input statistics including: • Number of packets and bytes into the interface •...
Page 582 Example (10G Dell#show interfaces tengigabitethernet 2/0 port) TenGigabitEthernet 2/0 is up, line protocol is up Hardware is Dell Force10Eth, address is 00:01:e8:05:f7:3a Interface index is 100990998 Internet address is 213.121.22.45/28 MTU 1554 bytes, IP MTU 1500 bytes LineSpeed 10000 Mbit ARP type: ARPA, ARP Timeout 04:00:00 Last clearing of "show interfaces"...
Page 583 Input 00.00 Mbits/sec, 0 packets/sec, 0.00% of line-rate Output 00.00 Mbits/sec, 0 packets/sec, 0.00% of line-rate Time since last interface status change: 21:13:36 Dell# Example Dell#show interface managementethernet ? (ManagementE 0/0 Management Ethernet interface number Dell#show interface managementethernet 0/0 thernet)
Page 584: Show Interfaces Configured
— displays Layer 2 information about the interfaces. show inventory — displays the MXL switch type, components (including media), Dell Networking OS version including hardware identification numbers, and configured protocols. show ip interface — displays Layer 3 information about the interfaces.
Page 585: Show Interfaces Dampening
Defaults none Command EXEC Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell#show interfaces dampening Interface Supp Flaps Penalty Half-Life Reuse Suppress Max-Sup State Gi 3/2 4500 Gi 3/10 2500 Dell# Related dampening— configures dampening on an interface.
Page 586: Show Interfaces Description
show interfaces configured — displays any interface with a non-default configuration. show interfaces description Display the descriptions configured on the interface. Syntax show interfaces [interface] description Parameters interface (Optional) Enter one of the following keywords and slot/port or number information: •...
Page 587: Show Interfaces Stack-Unit
Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell#show interfaces stack-unit 0 TenGigabitEthernet 0/1 is down, line protocol is down Hardware is DellForce10Eth, address is 00:1e:c9:f1:00:05 Current address is 00:1e:c9:f1:00:05 Server Port AdminState is Down...
Page 588: Show Interfaces Status
Interface index is 34148609 Internet address is not set Mode of IP Address Assignment : NONE DHCP Client-ID :tenG130001ec9f10005 MTU 1554 bytes, IP MTU 1500 bytes LineSpeed auto Flowcontrol rx off tx off ARP type: ARPA, ARP Timeout 04:00:00 Last clearing of "show interface" counters 5d5h24m Queueing strategy: fifo Input Statistics: 0 packets, 0 bytes...
Page 589: Show Interfaces Switchport
Command • EXEC Modes • EXEC Privilege Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell#show interface status Port Description Status Speed Duplex Vlan Te 0/1 Down Auto Auto -- Te 0/2 Down Auto Auto --...
Page 590 VLANs by port 13/0. Vlan membership Lists the VLANs to which the interface is a member. Starting with the Dell Networking OS version 7.6.1, this field can display native VLAN membership by port 13/0. Example Dell#show interfaces switchport...
Page 591: Show Interfaces Transceiver
802.1QTagged: True Vlan membership: Vlans Dell# Related interface — configures a physical interface on the switch. Commands show ip interface — displays Layer 3 information about the interfaces. show interfaces — displays information on a specific physical interface or virtual interface.
Page 592 Line Description Bias High Alarm Factory-defined setting. Value can differ between SFP and threshold SFP+. TX Power High Factory-defined setting. Value can differ between SFP and Alarm threshold SFP+. RX Power High Factory-defined setting. Value can differ between SFP and Alarm threshold SFP+.
Page 593 Line Description Voltage Current voltage of the SFPs. If this voltage crosses voltage high alarm/warning thresholds, the voltage high alarm/ warning flag is set to true. Tx Bias Current Present transmission (Tx) bias current of the SFP. If this crosses bias high alarm/warning thresholds, the TX bias high alarm/warning flag is set to true.
Page 594 Rx Power Low This can be either true or false, depending on the Current Rx Warning Flag power value displayed above. Example Dell#show interfaces gigabitethernet 1/0 transceiver SFP is present. SFP 0 Serial Base ID fields SFP 0 Id = 0x03...
Page 595 SFP 0 Length(50um) 10m = 0x1e SFP 0 Length(62.5um) 10m = 0x0f SFP 0 Length(Copper) 10m = 0x00 SFP 0 Vendor Rev SFP 0 Laser Wavelength = 850 nm SFP 0 CheckCodeBase = 0x66 SFP 0 Serial Extended ID fields SFP 0 Options = 0x00 0x12 SFP 0 BR max= 0...
Page 596: Show Range
— displays information on a specific physical interface or virtual interface. show inventory — displays the switch type, components (including media), the Dell Networking OS version including hardware identification numbers, and configured protocols. show range Display all interfaces configured using the interface range command.
Page 597: Speed (For 1000/10000/Auto Interfaces)
Command INTERFACE Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Usage The shutdown command marks a physical interface as unavailable for traffic. To Information discover if an interface is disabled, use the show ip interface brief command.
Page 598: Stack-Unit Portmode
The range is 0 to 5. NOTE: The MXL switch commands accept Unit ID numbers from 0 to 5, though the MXL switch supports stacking up to three units only with the Dell Networking OS version 8.3.7.1. number Enter the port number of the 40G port to be split.
Page 599: Port Channel Commands
A link aggregation group (LAG) is a group of links that appear to a MAC client as if they were a single link according to IEEE 802.3ad. In the Dell Networking OS, a LAG is referred to as a Port Channel.
Page 600 Port Channel does not change its designated speed; disable and re-enable the Port Channel or change the order of the channel members configuration to change the designated speed. For more information about Port Channels, refer to the Dell Networking OS Configuration Guide. Interfaces...
Page 601: Group
Introduced on the M I/O Aggregator. This command is History supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Examle Dell(conf)#port-channel failover-group Dell(conf-po-failover-grp)#group 1 port-channel 1 port-channel Dell(conf-po-failover-grp)# Related port-channel failover-group — accesses PORT-CHANNEL FAILOVER-GROUP Commands mode to configure a LAG failover group.
Page 602: Interface Port-Channel
A Port Channel can contain both 100/1000 interfaces and GE interfaces. Based on the first interface configured in the Port Channel and enabled, the Dell Networking OS determines if the Port Channel uses 100 Mb/s or 1000 Mb/s as the common speed.
Page 603: Minimum-Links
minimum-links Configure the minimum number of links in a LAG (Port Channel) that must be in “oper up” status for the LAG to be also in “oper up” status. Syntax minimum-links number Parameters number Enter the number of links in a LAG that must be in “oper up” status.
Page 604: Show Config
Port Channel chapter in the Dell Networking OS Configuration Guide. Related group — groups two LAGs in a supergroup (“fate-sharing group”). Command show interfaces port-channel — displays information on configured Port Channel groups. show config Display the current configuration of the selected LAG.
Page 605 Usage The following describes the show interfaces port-channel command shown Information in the following example. Field Description Port-Channel 1... Displays the LAG’s status. In the Example, the status of the LAG’s LAG fate-sharing group (“Failover-group”) is listed. Hardware is... Displays the interface’s hardware information and its assigned MAC address.
Page 606 Example Dell#show interfaces port-channel (EtherScale) Port-channel 1 is down, line protocol is down Hardware address is 00:1e:c9:f1:00:05, Current address is 00:1e:c9:f1:00:05 Interface index is 1107755009 Minimum number of links to bring Port-channel up is 1 Internet address is not set...
Page 607: Time Domain Reflectometer (Tdr)
Field Description • In Layer 3 port channels, the primary port is not indicated. Example (brief) Dell#show int po 1 brief Codes: L - LACP Port-channel LAG Mode Status Uptime Ports down 00:00:00 Te 0/16 (Down) Dell# Related show lacp —...
Page 608: Show Tdr
Example is 93 meters. The open is accurate to plus or minus Open one meter. Status: There is an impedance mismatch in the cables. Impedance Mismatch Example Dell#show tdr tengigabitethernet 10/47 Time since last test: 00:00:02 Pair A, Length: OK Status: Terminated Interfaces...
Page 609: Udp Broadcast
Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell#debug ip udp-helper UDP helper debugging is on 01:20:22: Pkt rcvd on Gi 5/0 with IP DA (0xffffffff) will be sent on Gi 5/1 Gi 5/2 Vlan 3 01:44:54: Pkt rcvd on Gi 7/0 is handed over for DHCP processing.
Page 610: Ip Udp-Broadcast-Address
show ip udp-helper — displays the configured UDP helper(s) on all interfaces. ip udp-broadcast-address Configure an IP UDP address for broadcast. Syntax ip udp-broadcast-address address To delete the configuration, use the no ip udp-broadcast-address address command. Parameters address Enter an IP broadcast address in dotted decimal format (A.B.C.D).
Page 611: Show Ip Udp-Helper
Defaults none Command EXEC Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell#show ip udp-helper -------------------------------------------------- Port port list -------------------------------------------------- Gi 10/0 656, 658 Gi 10/1 Related debug ip udp-helper — enables debug and displays the debug information on a Commands console.
Page 612: Enhanced Validation Of Interface Ranges
ip udp-helper udp-port — enables the UDP broadcast feature on an interface either for all UDP ports or a specified list of UDP ports. Enhanced Validation of Interface Ranges This functionality is supported on the MXL platform. You can avoid specifying spaces between the range of interfaces, separated by commas, that you configure by using the interface range command.
Page 613: Ipv4 Routing
IPv4 Routing The basic IPv4 commands are supported by Dell Networking Operating System (OS). To associate an IP address with a multicast MAC address in the switch when you configure multicast mode of the network load balancing (NLB), use the address resolution protocol (ARP).
Page 614: Arp Learn-Enable
Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage For multicast mode of NLB, to associate an IP address with a multicast MAC Information address in the switch, use address resolution protocol (ARP) by entering the arp ip-address multicast-mac-address command in Global configuration mode.
Page 615: Arp Timeout
Usage Retries are 20 seconds apart. Information Related show arp retries — displays the configured number of ARP retries. Commands arp timeout Set the time interval for an ARP entry to remain in the ARP cache. Syntax arp timeout minutes Parameters minutes Enter the number of minutes.
Page 616: Clear Host
ip ip-address (OPTIONAL) Enter the keyword ip then the IP address of the ARP entry you wish to clear. no-refresh (OPTIONAL) Enter the keywords no-refresh to delete the ARP entry from CAM. Or use this option with interface or ip ip-address to specify which dynamic ARP entries you want to delete.
Page 617: Clear Ip Route
Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Usage To clear Layer 3 CAM inconsistencies, use this command. Information CAUTION: Executing this command causes traffic disruption. Related show ip fib stack-unit — shows FIB entries. Commands clear ip route Clear one or all routes in the routing table.
Page 618: Debug Arp
debug arp View information on ARP transactions. Syntax debug arp [interface] [count value] To stop debugging ARP transactions, use the no debug arp command. Parameters interface (OPTIONAL) Enter the following keywords and slot/port or number information: • For the Management interface, enter the keyword ManagementEthernet then the slot/port information.
Page 619: Debug Ip Icmp
Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell#debug ip dhcp 00:12:21 : %RELAY-I-PACKET: BOOTP REQUEST (Unicast) received at interface 113.3.3.17 BOOTP Request, hops = 0, XID = 0xbf05140f, secs = 0, hwaddr = 00:60:CF:20:7B:8C, giaddr = 0.0.0.0 00:12:21 : %RELAY-I-BOOTREQUEST: Forwarded BOOTREQUEST for 00:60:CF:20:7B:8C to 14.4.4.2...
Page 620: Debug Ip Packet
Parameters interface (OPTIONAL) Enter the following keywords and slot/port or number information: • For the Management interface, enter the keyword ManagementEthernet then the slot/port information. The slot range is from 0 to 1 and the port range is 0. • For a Port Channel interface, enter the keywords port- channel then a number.
Page 621 count value (OPTIONAL) Enter the keyword count then the count value. The range is from 1 to 65534. The default is Infinity. interface (OPTIONAL) Enter the following keywords and slot/port or number information: • For the Management interface, enter the keyword ManagementEthernet then the slot/port information.
Page 622 Field Description units) of this fragment (fragment offset) from the beginning of the original datagram. Example IP: s=10.1.2.62 (local), d=10.1.2.206 (Ma 0/0), len 54, sending TCP src=23, dst=40869, seq=2112994894, ack=606901739, win=8191 ACK PUSH IP: s=10.1.2.206 (Ma 0/0), d=10.1.2.62, len 40, rcvd TCP src=0, dst=0, seq=0, ack=0, win=0 IP: s=10.1.2.62 (local), d=10.1.2.206 (Ma 0/0), len 226, sending...
Page 623: Ip Address
Example (Error Dell#debug ip packet access-group test Messages) %Error: port operator GT not supported in access-list debug %Error: port operator LT not supported in access-list debug %Error: port operator RANGE not supported in access-list debug %Error: port operator NEQ not supported in access-list debug...
Page 624: Ip Domain-List
Defaults Disabled (that is, the interface does not receive directed broadcast packets) Command INTERFACE Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History ip domain-list Configure names to complete unqualified host names. Syntax ip domain-list name To remove the name, use the no ip domain-list name command.
Page 625: Ip Domain-Lookup
To fully enable DNS, also specify one or more domain name servers with the ip Information name-server command. The Dell Networking OS does not support sending DNS queries over a VLAN. DNS queries are sent out all other interfaces, including the Management port. To view current bindings, use the show hosts command.
Page 626: Ip Helper-Address
DHCP client. The Dell Networking OS uses standard DHCP ports, that is UDP ports 67 (server) and 68 (client) for DHCP relay services. It listens on port 67 and if it receives a broadcast, the software converts it to unicast, and forwards to it to the DHCP- server with source port=68 and destination port=67.
Page 627: Ip Helper-Address Hop-Count Disable
This command disables the incrementing of the hops field when boot requests are Information relayed to a DHCP server through the Dell Networking OS. If the incoming boot request already has a non-zero hops field, the message is relayed with the same value for hops.
Page 628: Ip Icmp Source-Interface
ip icmp source-interface Enable the ICMP error and unreachable messages to be sent with the source interface IP address, such as the loopback address, instead of the hops of the preceding devices along the network path to be used for easy debugging and diagnosis of network disconnections and reachability problems with IPv4 packets.
Page 629: Ipv6 Icmp Source-Interface
IP address to the hostname and does not translate the IP address of every interface of the switch to the hostname. Example Dell(conf)#ip icmp source-interface tengigabitethernet 0/0 Dell(conf)# ipv6 icmp source-interface Enable the ICMP error and unreachable messages to be sent with the source interface IP address, such as the loopback address, instead of the hops of the preceding devices along the network path to be used for easy debugging and diagnosis of network disconnections and reachability problems with IPv6 packets.
Page 630: Ip Max-Frag-Count
IP address to the hostname and does not translate the IP address of every interface of the switch to the hostname. Example Dell(conf)#ipv6 icmp source-interface tengigabitethernet 0/0 Dell(conf)# ip max-frag-count Set the maximum number of fragments allowed in one packet for packet re-assembly.
Page 631: Ip Name-Server
Usage To avoid denial of service (DOS) attacks, keep the number of fragments allowed for Information re-assembly low. ip name-server Enter up to six IPv4 addresses of name servers. The order you enter the addresses determines the order of their use. Syntax ip name-server ipv4-address [ipv4-address2...ipv4-address6] To remove a name server, use the no ip name-server ip-address command.
Page 632: Ip Route
Related show ip interface — displays the interface routing status and configuration. Commands ip route Assign a static route to the switch. Syntax ip route {destination mask {ip-address | interface [ip-address] | [distance] | [permanent] | tag tag-value}} To delete a specific static route, use the no ip route destination mask command.
Page 633: Ip Source-Route
Defaults Not configured. Command CONFIGURATION Modes Command Version 9.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Usage Using the following example of a static route: ip route 33.33.33.0 /24 Information tengigabitethernet 0/0 172.31.5.43 • The software installs a next hop that is not on the directly connected subnet but which recursively resolves to a next hop on the interface’s configured subnet.
Page 634: Show Ip Tcp Initial-Time
Parameters <8-75> Wait duration in seconds for the TCP connection to be established. Command CONFIGURATION Modes Command Version 9.3(0.0) Introduced on the MXL platform. History Usage You can configure the amount of time for which the device must wait before it Information attempts to establish a TCP connection.
Page 635: Management Route
Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History management route Configure a static route that points to the Management interface or a forwarding router. Syntax management route {{ipv4-address]/mask | {forwarding-router- address | managementethernet} To remove a static route, use the no management route{{ip-address mask | {ipv6-address prefix-length}}{forwarding-router-address | managementethernet} command.
Page 636 Parameters interface (OPTIONAL) Enter the following keywords and slot/port or interface number information: • For the Management interface, enter the keyword managementethernet then the slot/port information. • For a Port Channel interface, enter the keyword port- channel then a number. The range is from 1 to 128. •...
Page 637 ARP entry. VLAN Displays the VLAN ID, if any, associated with the ARP entry. Lists which CPU the entries are stored on. Example Dell>show arp Protocol Address Age(min) Hardware Address Interface VLAN ----------------------------------------------------- Internet 10.11.8.6 00:01:e9:45:00:03 Ma 0/0 - Internet 10.11.68.14...
Page 638: Show Arp Retries
Lists which CPU the entries are stored on. Example #show arp summary (Summary) TotalEntries Static Entries Dynamic Entries CPU ---------------------------------------------- Dell Related ip local-proxy-arp — enables/disables Layer 3 communication in secondary VLANs. Commands switchport mode private-vlan — sets PVLAN mode of the selected port.
Page 639 For dynamically learned entries only. Type Displays IP as the type of entry. Address Displays the IP addresses assigned to the host. Example Dell#show hosts Default domain is not set Name/address lookup uses static mappings Name servers are not set Host Flags...
Page 640: Show Ip Cam Stack-Unit
show ip cam stack-unit Display CAM entries. Syntax show ip cam stack-unit {0–5} [port-set {pipe-number} | {ip- address mask [longer-prefixes]| detail | member-info | summary] Parameters 0–5 Enter the stack-unit ID from 0 to 5 pipe-number Enter the number of the Port-Pipe number. The range is from 0 to 0 ip-address (OPTIONAL) Enter the IP address and mask of a route to...
Page 641 CP = control processor • Gi = Gigabit Ethernet interface • Te = 10–Gigabit Ethernet interface Example Dell#show ip cam stack-unit 0 port-set 0 10.10.10.10/32 longer- prefixes Destination EC CG V C VId Mac-Addr Port ----------------- -- -- - ------ -------------------- 10.10.10.10...
Page 642: Show Ip Fib Stack-Unit
Example Dell#show ip cam stack-unit 0 po 0 ecmp-group member-info (Member-Info) detail Group Index Member Count Mac-Addr Port VLan ID Gateway ----------- ------------------------------- ------------------ 00:01:e8:8a:d6:58 Te 0/3 1.1.1.2 00:01:e8:8a:d6:58 Te 0/8 2.1.1.2 Dell# show ip fib stack-unit View all FIB entries.
Page 643: Show Ip Interface
Field Description Displays the VLAN ID. If no VLAN is assigned, zero (0) is listed. Displays the number of ECMP paths. Example Dell#show ip fib stack-unit 0 Destination Gateway First-Hop Mac-Addr Port VId EC --------------------------------------------------------------- -------- 10.10.10.10/32 Direct, Nu 0 0.0.0.0...
Page 644 States if ICMP redirects are sent. ICMP States if ICMP unreachable messages are sent. unreachables... Example Dell#show ip int te 0/0 TenGigabitEthernet 0/0 is down, line protocol is down Internet address is not set IP MTU is 1500 bytes Inbound access list is not set...
Page 645: Show Ip Management-Route
Status States whether the interface is enabled (up) or disabled (administratively down). Protocol States whether IP is enabled (up) or disabled (down) on the interface. Example (Brief) Dell#show ip int brief Interface IP-Address OK? Method Status Protocol GigabitEthernet 1/0 unassigned...
Page 646: Show Ip Protocols
Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell#show ip management-route Destination Gateway State ----------- ------- ----- 10.1.2.0/24 ManagementEthernet 0/0 Connected 172.16.1.0/24 10.1.2.4 Active Dell# show ip protocols View information on all routing protocols enabled and active on the switch.
Page 647 Parameters ip-address (OPTIONAL) Specify a name of a device or the IP address of the device to view more detailed information about the route. mask (OPTIONAL) Specify the network mask of the route. Use this parameter with the IP address parameter. longer-prefixes (OPTIONAL) Enter the keywords longer-prefixes to view all routes with a common prefix.
Page 648 Identifies if the route has a specified distance or metric. Last Change Identifies when the route was last changed or configured. Example Dell#show ip route all Codes:C- connected, S - static, R - RIP B- BGP, IN - internal BGP, EX - external BGP, LO - Locally Originated...
Page 649: Show Ip Route List
Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell#show ip route list test Codes:C- connected, S - static, R - RIP, B- BGP, IN - internal BGP, EX - external BGP,LO - Locally Originated, O- OSPF, IA - OSPF inter area, N1 - OSPF NSSA external...
Page 650: Show Ip Route Summary
Displays the number of active and non-active routes and active... the memory usage of those routes. If there are no routes configured in the the system, this line does not appear. Example Dell>show ip route summary Route Source Active Routes Non-active Routes connected...
Page 651: Show Ip Traffic
show ip traffic View IP, ICMP, UDP, TCP and ARP traffic statistics. Syntax show ip traffic Command EXEC Privilege Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Usage The following describes the show ip traffic summary shown in the following Information example.
Page 652 • ARP Statistics: Sent: Proxy: Object = f10ArpProxySent, OIDs = 1.3.6.1.4.1.6027.3.3.5.2.5 Example Dell#show ip traffic IP statistics: Rcvd: 10021161 total, 3197480 local destination 2501 format errors, 390 checksum errors, 0 bad hop count 0 unknown protocol, 0 not a gateway...
Page 653: Show Tcp Statistics
show tcp statistics View information on TCP traffic through the switch. Syntax show tcp statistics Command EXEC Privilege Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Usage The following describes the show tcp statistics cp command shown in the Information following example.
Page 654 Lists the number of keepalive packets in timeout, the number keepalive probes and the number of TCP connections dropped during keepalive. Example Dell#show tcp statistics Rcvd: 9849 Total, 0 no port 0 checksum error, 0 bad offset, 0 too short 5735 packets (7919 bytes) in sequence...
Page 655 Dell# Related show ip cam stack-unit — displays the CAM table. Commands IPv4 Routing...
Page 656: Internet Protocol Security (Ipsec)
Internet Protocol Security (IPSec) Internet protocol security (IPSec) is an end-to-end security scheme for securing IP communications by authenticating and encrypting all packets in a session. Use IPSec between hosts, gateways, or hosts and gateways. IPSec uses a series of protocol functions to achieve information security: •...
Page 657 Both sides of the link must specify the same transform set. Information • You can create up to 64 transform sets. Example Dell(conf)#int ten 0/4 Dell(conf-if-te-0/4)#ipv6 address 200:1::/64 eui64 Dell(conf)#int ten 0/6 Dell(conf-if-te-0/6)#ipv6 address 801:10::/64 eui64 Internet Protocol Security (IPSec)
Page 658: Crypto Ipsec Policy
Usage This command creates a crypto policy entry and enters the crypto policy Information configuration mode for configuring the flow parameters. Example Dell(conf)#crypto ipsec policy West 10 ipsec-manual Dell(conf-crypto-policy)# management crypto-policy Apply the crypto policy to management traffic. Syntax management crypto-policy name To remove the management traffic crypto policy, use the no management crypto-policy name command.
Page 659: Match
UDP is not supported. Only TCP 23 telnet and 21 FTP are supported. Information Example Dell(conf-crypto-policy)#match 0 tcp a::1 /128 0 a::2 /128 23 Dell(conf-crypto-policy)#match 1 tcp a::1 /128 23 a::2 /128 0 Dell(conf-crypto-policy)#match 2 tcp a::1 /128 0 a::2 /128 21 Dell(conf-crypto-policy)#match 3 tcp a::1 /128 21 a::2 /128 0 Dell(conf-crypto-policy)#match 4 tcp 1.1.1.1 /32 0 1.1.1.2 /32...
Page 660: Session-Key
session-key Specify the session keys used in the crypto policy entry. Syntax session-key {inbound | outbound} {ah spi hex-key-string | esp spi encrypt hex-key-string auth hex-key-string To delete the session key information from the crypto policy, use the no session-key {inbound | outbound} {ah | esp} command. Parameters name Enter the name of the host to delete.
Page 661: Show Crypto Ipsec Policy
Enter the name of the transform set. Command EXEC Modes Command Version 9.2(0.2) Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell(conf)#do show crypto ipsec transform-set Transform-Set Name : ts1 Transform-Set refCnt AH Transform : md5 ESP Auth Transform ESP Encry Transform Dell(conf)# show crypto ipsec policy Display the crypto policy configuration.
Page 662 Protocol type : tcp IP or IPv6 : IPv6 Source address : a::1 Source mask : /128 Source port : 21 Destination address : a::2 Destination mask : /128 Destination port source-interface name : source-interface num Dell# Internet Protocol Security (IPSec)
Page 663: Transform-Set
transform-set Specify the transform set the crypto policy uses. Syntax transform-set transform-set-name To delete a transform set from the crypto policy, use the no transform-set transform-set-name command. Parameters transform-set- Enter the name for the crypto policy transform set. name Defaults none Command CONFIG-CRYPTO-POLICY...
Page 664: Ipv6 Access Control Lists (Ipv6 Acls)
IPv6 Access Control Lists (IPv6 ACLs) IPv6 ACLs and IPv6 Route Map commands are supported on Dell Networking MXL switch. NOTE: For IPv4 ACL commands, refer to the Access Control Lists (ACL) chapter. Important Points to Remember • Certain platforms require manual CAM usage space allotment. For more information, refer to the cam-acl (Configuration) command.
Page 665: Cam-Acl-Egress
• IPv6 L3 ACL (ipv6acl): 0 • L3 QoS (ipv4qos): 1 • L2 QoS (l2qos): 1 l2acl 1-10 Allocate space to support IPv6 ACLs. Enter all of the profiles ipv4acl 1-10 and a range. Enter the CAM profile name then the amount to ipv6acl 0-10 be allotted.
Page 666: Ipv6 Access-List
Set IPV4-ACL entries Dell(conf)#cam-acl-egress l2acl 1 ipv4acl 1 ? ipv6acl Set IPV6-ACL entries Dell(conf)#cam-acl-egress l2acl 1 ipv4acl 1 ipv6acl ? <0-4> Number of FP blocks for IPV6 (multiples of 2) Dell(conf)#cam-acl-egress l2acl 1 ipv4acl 1 ipv6acl 2 ipv6 access-list Configure an access list based on IPv6 addresses or protocols.
Page 667: Ipv6 Control-Plane Egress-Filter
ACL, refer to your line card documentation. You can create an IPv6 ACL for control-plane traffic policing for OSPFv3, in addition to the CoPP support for VRRP, BGP, and ICMP that existed in Dell Networking OS releases 9.3(0.0) and earlier...
Page 668 • Use the no permit {ipv6-protocol-number | icmp | ipv6 | tcp | udp} command Parameters ip-protocol- Enter an IPv6 protocol number. The range is from 0 to 255. number icmp Enter the keyword icmp to filter internet Control Message Protocol version 6.
Page 669: Permit Icmp
Command ACCESS-LIST Modes Command Version 9.4(0.0) Added support for logging of ACLs on the MXL 10/40GbE History Switch IO Module. Version 9.3(0.0) Added support for logging of ACLs on the MXL 10/40GbE Switch IO Module. Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. permit icmp To allow all or specific internet control message protocol (ICMP) messages, configure a filter.
Page 670 count (OPTIONAL) Enter the keyword count to count packets the filter processes. byte (OPTIONAL) Enter the keyword byte to count bytes the filter processes. (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages. threshold-in- (OPTIONAL) Enter the threshold-in-msgs keyword msgs count followed by a value to indicate the maximum number of ACL logs that can be generated, exceeding which the generation...
Page 671: Show Cam-Acl
Introduced on the MXL 10/40GbE Switch IO Module. History Example show cam-acl (non default) Dell(conf)#cam-acl l2acl 2 ipv4acl 4 ipv6acl 4 ipv4qos 2 l2qos 1 l2pt 0 ipmacacl 0 vman-qos 0 ecfmacl Dell#show cam-acl -- Chassis Cam ACL -- Current Settings(in block sizes)
Page 672: Show Cam-Acl-Egress
• EXEC Privilege Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell#show cam-acl-egress -- Chassis Egress Cam ACL -- Current Settings(in block sizes) 1 block = 256 entries L2Acl Ipv4Acl Ipv6Acl -- stack-unit 0 --...
Page 673: Ipv6 Basics
IPv6 Basics This chapter describes IPv6 basic commands for the MXL 10/40GbE Switch IO Module. clear ipv6 fib Clear (refresh) all forwarding information base (FIB) entries on a linecard or stack unit. Syntax clear ipv6 fib linecard slot | stack-unit unit-number Parameters slot Enter the slot number to clear the FIB for a linecard.
Page 674: Clear Ipv6 Mld_Host
clear ipv6 mld_host Clear the IPv6 MLD host counters and reset the elapsed time. Syntax clear ipv6 mld_host Command EXEC Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History ipv6 address autoconfig Configure IPv6 address auto-configuration for the management interface. Syntax ipv6 address autoconfig To disable the address autoconfig operation on the management interface, use the...
Page 675: Ipv6 Address
IP address and should not be in the same subnet as the virtual IP. Example Dell(conf)#interface tengigabitethernet x/x Dell(conf-if-te-x/x)#ipv6 address ? X:X:X:X::X IPv6 address Dell(conf-if-te-x/x)#ipv6 address 2002:1:2::3 ? <0-128> Prefix length in bits Dell(conf-if-te-x/x)#ipv6 address 2002:1:2::3 /96 ? Dell(conf-if-te-x/x)#ipv6 address 2002:1:2::3 /96 Dell(conf-if-te-x/x)#show config IPv6 Basics...
Page 676: Ipv6 Address Eui64
MAC address only. Prefixes may be configured on the interface using the ipv6 nd prefix command without creating an EUI64 address. Example Dell(conf)#int ten 0/4 Dell(conf-if-te-0/4)#ipv6 address 200:1::/64 eui64 Dell(conf)#int ten 0/6 Dell(conf-if-te-0/6)#ipv6 address 801:10::/64 eui64 ipv6 control-plane icmp error-rate-limit Configure the maximum number of ICMP error packets per second that can be sent per second.
Page 677: Ipv6 Flowlabel-Zero
Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History ipv6 flowlabel-zero Configure system to set the flow label field in the packets to zero. Syntax ipv6 flowlabel-zero To disable the 0 from being set in the field and allow the rotocol operations to fill the field, use the no ipv6 flowlabel-zero command.
Page 678: Ipv6 Name-Server
ipv6 name-server Enter up to six IPv6 addresses of name servers. The order you enter the addresses determines the order of their use. Syntax ipv6 name-server ipv6-address [ipv6-address2... ipv6-address6] To remove a name server, use the no ipv6 name—server ipv6–address command.
Page 679: Ipv6 Nd Dns-Server
Use this command to add, edit, or delete an IPv6 RDNSS address and lifetime value. Information You can configure up to four IPv6 RDNSS addresses. You must specify a lifetime using the lifetime or infinite parameter. Example Dell(conf-if-te-0/1)#ipv6 nd dns-server 1000::1 1 IPv6 Basics...
Page 680: Ipv6 Nd Prefix
ipv6 nd prefix Specify which IPv6 prefixes are included in Neighbor Advertisements. Syntax ipv6 nd prefix {ipv6-prefix | prefix-length | default} [no- advertise] | [no-autoconfig] [no-rtr-address] [off-link] [lifetime {valid | infinite} {preferred | infinite}] Parameters ipv6-prefix Enter an IPv6 prefix. prefix-length Enter the prefix then the prefix length.
Page 681: Ipv6 Route
ipv6 route Establish a static IPv6 route. Syntax ipv6 route ipv6-address prefix-length {ipv6-address | interface | interface ipv6-address} [distance] [tag value] [permanent] To remove the IPv6 route, use the no ipv6 route ipv6-address prefix- length {ipv6-address | interface | interface ipv6-address} [distance] [tag value] [permanent] command.
Page 682 <1-255> Distance metric for this route permanent Permanent route Set tag for this route Dell(conf)#ipv6 route 44::0 /64 33::1 Dell(conf)#ipv6 route 44::0 /64 tengigabitethernet 0/1 ? X:X:X:X::X Forwarding router's address Dell(conf)#ipv6 route 44::0 /64 tengigabitethernet 0/1 66::1 Dell(conf)# Related show ipv6 route —...
Page 683: Ipv6 Unicast-Routing
ipv6 unicast-routing Enable IPv6 Unicast routing. Syntax ipv6 unicast-routing To disable unicast routing, use the no ipv6 unicast-routing command. Defaults Enabled Command CONFIGURATION Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Usage Because this command is enabled by default, it does not appear in the running Information configuration.
Page 684: Show Ipv6 Control-Plane Icmp
NOTE: The :: notation specifies successive hexadecimal fields of zeros. Defaults none Command • EXEC Modes • EXEC Privilege Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Usage NOTE: If a route has a mask greater than 64, no output is displayed and no Information output is displayed for show ipv6 cam stack-unit unit-number port- set {0-1} ipv6-address, but an equivalent /64 entry would be listed in...
Page 685: Show Ipv6 Flowlabel-Zero
summary (OPTIONAL) Enter the keyword summary to view a summary of entries in IPv6 cam. ipv6-address Enter the IPv6 address in the x:x:x:x::x/n format to display networks that have more specific prefixes. The range is from /0 to /128. NOTE: The :: notation specifies successive hexadecimal fields of zeros.
Page 686 Parameters interface (OPTIONAL) Enter the following keywords and slot/port or number information: • For a Loopback interface, enter the keyword Loopback then a number from 0 to 16383. • For the Null interface, enter the keyword null then zero (0). •...
Page 687 The Management port is enabled by default (no shutdown). If necessary, use the Information ipv6 address command to assign an IPv6 address to the Management port. Example Dell#show ipv6 int te 0/12 TenGigabitEthernet 0/12 is up, line protocol is up IPV6 is enabled Link Local address: fe80::201:e8ff:fea7:497e...
Page 688: Show Ipv6 Mld_Host
300::1/64 Dell# Example Dell#show ipv6 int tun 1 (tunnel) Tunnel 1 is up, line protocol is up IPV6 is enabled Link Local address: fe80::201:e8ff:fea7:497e Global Unicast address(es): 400::1, subnet is 400::/64 (MANUAL) Remaining lifetime: infinite Global Anycast address(es): Joined Group address(es):...
Page 689: Show Ipv6 Route
Field Description MLDv2 queries The number of MLDv2 queries that have been received. Malformed The number of MLDv1 and MLDv2 packets that do not Packets match the requirement for a valid MLD packet. Example MLD Host Traffic Counters Elapsed time since counters cleared: 0028:33:52 Received Sent Valid MLD Packets...
Page 690 Last Change Identifies when the route was last changed or configured. Example Dell#show ipv6 route Codes: C - connected, L - local, S - static, R - RIP, B - BGP, IN - internal BGP, EX - external BGP,LO -...
Page 691: Trust Ipv6-Diffserv
400::/64 [0/0] Direct, Tu 1, 00:09:02 800::/64 [1/0] via 100::1, Te 0/12, 00:00:50 fe80::/10 [0/0] Direct, Nu 0, 20:00:18 Dell# Example Dell#show ipv6 route summary (Summary) Route Source Active Routes Non-active Routes connected static Total Total 4 active route(s) using 928 bytes...
Page 692 IPv6 Service Class Queue ID Field 111XXXXX 110XXXXX 101XXXXX 100XXXXX 011XXXXX 010XXXXX 001XXXXX 000XXXXX IPv6 Basics...
Page 693: Ipv6 Border Gateway Protocol (Ipv6 Bgp)
IPv6 Border Gateway Protocol (IPv6 BGP) IPv6 Border Gateway Protocol (IPv6 BGP) is supported on Dell Networking platforms. This chapter includes the following sections: • IPv6 BGP Commands • IPv6 MBGP Commands IPv6 BGP Commands BGP is an external gateway protocol that transmits interdomain routing information within and between autonomous systems (AS).
Page 694: Aggregate-Address
Usage After this command is executed, all subsequent commands apply to this address Information family. You can exit from this AFI/SAFI to the IPv6 Unicast (the default) family by entering the exit command and returning to the Router BGP context. aggregate-address Summarize a range of prefixes to minimize the number of entries in the routing table.
Page 695: Bgp Always-Compare-Med
Usage At least one of the routes included in the aggregate address must be in the BGP Information routing table for the configured aggregate to become active. Do not add the as-set parameter to the aggregate if routes within the aggregate are constantly changing as the aggregate will flap to keep track of the changes in the AS_PATH.
Page 696: Bgp Bestpath As-Path Ignore
bgp bestpath as-path ignore Ignore the AS PATH in BGP best path calculations. Syntax bgp bestpath as-path ignore To return to the default, use the no bgp bestpath as-path ignore command. Defaults Disabled (that is, the software considers the AS_PATH when choosing a route as best).
Page 697: Bgp Bestpath Med Missing-As-Best
bgp bestpath med missing-as-best During path selection, indicate a preference to paths with missing MED (MULTI_EXIT_DISC) over those paths with an advertised MED attribute. Syntax bgp bestpath med missing-as-best To return to the default selection, use the no bgp bestpath med missing-as- best command.
Page 698: Bgp Cluster-Id
bgp cluster-id Assign a cluster ID to a BGP cluster with more than one route reflector. Syntax bgp cluster-id {ip-address | number} To delete a cluster ID, use the no bgp cluster-id {ip-address | number} command. Parameters ip-address Enter an IP address as the route reflector cluster ID. number Enter a route reflector cluster ID as a number from 1 to 4294967295.
Page 699: Bgp Confederation Peers
Defaults Not configured. Command ROUTER BGP Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Usage The autonomous systems configured in this command are visible to the EBGP Information neighbors. Each autonomous system is fully meshed and contains a few connections to other autonomous systems.
Page 700: Bgp Dampening
bgp dampening Enable BGP route dampening and configure the dampening parameters. Syntax bgp dampening [half-life reuse suppress max-suppress-time] [route-map map-name] Parameters half-life (OPTIONAL) Enter the number of minutes after which the Penalty is decreased. After the router assigns a Penalty of 1024 to a route, the Penalty is decreased by half, after the half-life period expires.
Page 701: Bgp Default Local-Preference
bgp default local-preference Change the default local preference value for routes exchanged between internal BGP peers. Syntax bgp default local-preference value To return to the default value, use the no bgp default local-preference command. Parameters value Enter a number to assign to routes as the degree of preference for those routes.
Page 702: Bgp Fast-External-Fallover
Related show ip bgp ipv6 unicast neighbors — displays IPv6 routing information exchanged Commands by BGP neighbors. show ip protocols — views information on routing protocols. bgp fast-external-fallover Enable the fast external fallover feature, which immediately resets the BGP session if a link to a directly connected external peer fails.
Page 703: Bgp Graceful-Restart
Where the 2-Byte format is from 1 to 65535, the 4-Byte format is from 1 to 4294967295. Both formats are accepted, and the advertisements reflect the entered format. For more information about using the 2- or 4-Byte format, refer to the Dell Networking OS Configuration Guide. bgp graceful-restart Enable graceful restart on a BGP neighbor, a BGP node, or designate a local router to support graceful restart as a receiver only.
Page 704: Bgp Log-Neighbor-Changes
bgp log-neighbor-changes Enable logging of BGP neighbor resets. Syntax bgp log-neighbor-changes To disable logging, use the no bgp log-neighbor-changes command. Defaults Enabled. Command ROUTER BGP Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Usage The bgp log-neighbor-changes command appears in the show config Information command output.
Page 705: Bgp Recursive-Bgp-Next-Hop
bgp recursive-bgp-next-hop Enable next-hop resolution through other routes learned by BGP. Syntax bgp recursive-bgp-next-hop To disable next-hop resolution, use the no bgp recursive-bgp-next-hop command. Defaults Enabled. Command ROUTER BGP Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Usage This command is a knob to disable BGP next-hop resolution using BGP learned...
Page 706: Bgp Router-Id
BGP policies, containing regular expressions to match as-path and communities, tend to use a lot of CPU processing time, which in turn affects the BGP routing convergence. Additionally, the show bgp commands, which are filtered through regular expressions, use up CPU cycles particularly with large databases. The Regex Engine Performance Enhancement feature optimizes the CPU usage by caching and reusing regular expression evaluation results.
Page 707: Capture Bgp-Pdu Neighbor (Ipv6)
Command ROUTER BGPV6 ADDRESS FAMILY (conf-router_bgpv6_af) Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Usage When you enable soft-reconfiguration for a neighbor and you execute the clear Information ip bgp soft in command, the update database stored in the router replays and updates are reevaluated.
Page 708: Capture Bgp-Pdu Max-Buffer-Size
capture bgp-pdu max-buffer-size Set the size of the BGP packet capture buffer. This buffer size pertains to both IPv4 and IPv6 addresses. Syntax capture bgp-pdu max-buffer-size 100-102400000 Parameters 100-10240000 Enter a size for the capture buffer. Defaults 40960000 bytes Command •...
Page 709: Clear Ip Bgp As-Number
(OPTIONAL) Enter the keyword out to activate only outbound policies. Command EXEC Privilege Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History clear ip bgp as-number Reset BGP sessions. The soft parameter (BGP Soft Reconfiguration) clears the policies without resetting the TCP connection.
Page 710: Clear Ip Bgp Ipv6-Address
(OPTIONAL) Enter the keyword out to activate only outbound policies. Command EXEC Privilege Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History clear ip bgp ipv6-address Reset BGP sessions specific to an IPv6 address. The soft parameter (BGP Soft Reconfiguration) clears the policies without resetting the TCP connection.
Page 711: Clear Ip Bgp Peer-Group
Command EXEC Privilege Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History clear ip bgp peer-group Reset a peer-group’s BGP sessions. Syntax clear ip bgp peer-group peer-group-name Parameters peer-group- Enter the peer group name to reset the BGP sessions within name that peer group.
Page 712: Clear Ip Bgp Ipv6 Flap-Statistics
clear ip bgp ipv6 flap-statistics Clear BGP flap statistics, which includes number of flaps and the time of the last flap. Syntax clear ip bgp ipv6 unicast flap-statistics [ipv6-address | filter-list as-path-name | regexp regular-expression] Parameters ipv6-address (OPTIONAL) Enter the IPv6 address in the x:x:x:x::x format then the prefix length in the /x format.
Page 713: Clear Ip Bgp Ipv6 Unicast Soft
clear ip bgp ipv6 unicast soft Clear and reapply policies for IPv6 unicast routes without resetting the TCP connection; that is, perform BGP soft reconfiguration. Syntax clear ip bgp {* | as-number | ipv4-neighbor-addr | ipv6- neighbor-addr | peer-group name} ipv6 unicast soft [in | out] Parameters Clear and reapply policies for all BGP sessions.
Page 714: Debug Ip Bgp Events
NOTE: The :: notation specifies successive hexadecimal fields of zeros. peer-group Enter the keywords peer-group then the name of the peer peer-group- group. name (OPTIONAL) Enter the keyword in to view only information on inbound BGP routes. (OPTIONAL) Enter the keyword out to view only information on outbound BGP routes.
Page 715: Debug Ip Bgp Ipv6 Dampening
NOTE: The :: notation specifies successive hexadecimal fields of zeros. peer-group Enter the keywords peer-group then the name of the peer peer-group- group. name (OPTIONAL) Enter the keyword in to view only information on inbound BGP routes. (OPTIONAL) Enter the keyword out to view only information on outbound BGP routes.
Page 716: Debug Ip Bgp Ipv6 Unicast Soft-Reconfiguration
debug ip bgp ipv6 unicast soft-reconfiguration Enable soft-reconfiguration debugging for IPv6 unicast routes. Syntax debug ip bgp [ipv4-address | ipv6-address | peer-group-name] ipv6 unicast soft-reconfiguration To disable debugging, use the no debug ip bgp [ipv4-address | ipv6- address | peer-group-name] ipv6 unicast soft-reconfiguration command.
Page 717: Debug Ip Bgp Notifications
peer-group (OPTIONAL) Enter the keywords peer-group then the name peer-group- of the peer group. name (OPTIONAL) Enter the keyword in to view only inbound keepalive messages. (OPTIONAL) Enter the keyword out to view only outbound keepalive messages. Command EXEC Privilege Modes Command Version 9.2(0.0)
Page 718: Debug Ip Bgp Updates
Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Usage Entering a no debug ip bgp command removes all configured debug Information commands for BGP. debug ip bgp updates Allows you to view information about BGP updates. Syntax debug ip bgp [ipv6-address | peer-group peer-group-name | ipv6 unicast [ipv6-address]] updates [in | out | prefix-list prefix-...
Page 719: Default-Metric
default-metric Allows you to change the metrics of redistributed routes to locally originated routes. Use this command with the redistribute command. Syntax default-metric number To return to the default setting, use the no default-metric command. Parameters number Enter a number as the metric to be assigned to routes from other protocols.
Page 720: Distance Bgp
Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Usage CAUTION: Dell Force10 recommends that you do not change the Information administrative distance of internal routes. Changing the administrative distances may cause routing table inconsistencies. The higher the administrative distance assigned to a route means that your confidence in that route is low.
Page 721: Neighbor Activate
Parameters ebgp Enter the keyword ebgp to enable multipath support for External BGP routes. ibgp Enter the keyword ibgp to enable multipath support for Internal BGP routes. number Enter a number as the maximum number of parallel paths. The range is from 1 to 16. The default is 1. Defaults Command ROUTER BGPV6-ADDRESS FAMILY...
Page 722: Neighbor Advertisement-Interval
Usage By default, when you create a neighbor/peer group configuration in the Router Information BGP context, it is enabled for the IPv6/Unicast AFI/SAFI. By using activate in the new context, the neighbor/peer group is enabled for AFI/SAFI. neighbor advertisement-interval Set the advertisement interval between BGP neighbors or within a BGP peer group. Syntax neighbor {ipv6-address | peer-group-name} advertisement- interval seconds...
Page 723: Neighbor Default-Originate
Parameters ip-address Enter the IPv6 address in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zeros. peer-group- Enter the name of the peer group to set the advertisement name interval for all routers in the peer group. number Enter a number of times to allow this neighbor ID to use the AS path.
Page 724: Neighbor Description
Usage If you apply a route map to a BGP peer or neighbor with the neighbor default- Information originate command configured, the software does not apply the set filters in the route map to that BGP peer or neighbor. neighbor description Assign a character string describing the neighbor or group of neighbors (peer group).
Page 725: Neighbor Ebgp-Multihop
peer-group- Enter the name of the peer group. name prefix-list- Enter the name of an established prefix list. If the prefix list is name not configured, the default is permit (to allow all routes). Enter the keyword in to distribute only inbound traffic. Enter the keyword out to distribute only outbound traffic.
Page 726: Neighbor Fall-Over
Usage To prevent loops, the neighbor ebgp-multihop command does not install Information default routes of the multihop peer. Networks not directly connected are not considered valid for best path selection. neighbor fall-over Enable or disable fast fall-over for BGP neighbors. Syntax neighbor {ipv6-address | peer-group-name} fall-over To disable, use the no neighbor {ipv6-address | peer-group-name}...
Page 727: Neighbor Maximum-Prefix
Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zeros. peer-group- Enter the name of the peer group to apply the filter to all name routers in the peer group. Enter the keyword in to filter inbound BGP routes.
Page 728: Neighbor X:x:x::x Password
Defaults threshold = 75 Command ROUTER BGPV6-ADDRESS FAMILY Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Usage If you configure the neighbor maximum-prefix command and the neighbor Information receives more prefixes than allowed by the neighbor maximum-prefix command configuration, the neighbor goes down and the show ip bgp ipv6 unicast summary command displays (prfxd) in the State/PfxRcd column for that neighbor.
Page 729: Neighbor Next-Hop-Self
neighbor next-hop-self Allows you to configure the router as the next hop for a BGP neighbor. (This command is used for IBGP). Syntax neighbor {ipv6-address | peer-group-name} next-hop-self To return to the default setting, use the no neighbor {ipv6-address | peer- group-name} next-hop-self command.
Page 730: Neighbor Peer-Group (Creating Group)
Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Usage You can assign up to 64 peers to one peer group. Information When you add a peer to a peer group, it inherits all the peer group’s configured parameters.
Page 731: Neighbor Peer-Group Passive
Command ROUTER BGP Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Usage When a peer group is created, it is disabled (shut mode). Information Related neighbor peer-group (assigning peers) — assigns routers to a peer group. Commands neighbor remote-as —...
Page 732: Neighbor Remote-As
neighbor remote-as Create and specify the remote peer to the BGP neighbor. Syntax neighbor {ipv6-address | peer-group-name} remote-as number To delete a remote AS entry, use the no neighbor {ipv6-address | peer- group-name} remote-as number command. Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zeros.
Page 733: Neighbor Route-Map
peer-group- Enter the name of the peer group to remove the private AS name numbers. Defaults Disabled (that is, the private AS number are not removed). Command ROUTER BGPV6-ADDRESS FAMILY Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Usage Applies to external border gateway protocol (EBGP) neighbors only.
Page 734: Neighbor Route-Reflector-Client
Command ROUTER BGPV6-ADDRESS FAMILY Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Usage When you apply a route map to outbound routes, only routes that match at least Information one section of the route map are permitted. If you identify a peer group by name, the peers in that peer group inherit the characteristics in the Route map used in this command.
Page 735: Neighbor Send-Community
neighbor send-community Send a COMMUNITY attribute to a BGP neighbor or peer group. A COMMUNITY attribute indicates that all routes with that attribute belong to the same community grouping. Syntax neighbor {ipv6-address | peer-group-name} send-community To disable sending a COMMUNITY attribute, use the no neighbor {ipv6- address | peer-group-name} send-community command.
Page 736: Neighbor Soft-Reconfiguration Inbound
Usage Peers that are enabled within a peer group are disabled when their peer group is Information disabled. The neighbor shutdown command terminates all BGP sessions on the BGP neighbor or BGP peer group. Use this command with caution as it terminates the specified BGP sessions.
Page 737: Neighbor Subnet
neighbor subnet Enable passive peering so that the members of the peer group are dynamic. Syntax neighbor peer-group-name subnet subnet-number mask To remove passive peering, use the no neighbor peer-group-name subnet subnet-number mask command. Parameters subnet-number Enter a subnet number in dotted decimal format (A.B.C.D.) as the allowable range of addresses included in the Peer group.
Page 738: Neighbor Update-Source
Defaults • keepalive = 60 seconds • holdtime = 180 seconds Command ROUTER BGP Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Usage Timer values configured with the neighbor timers command override the timer Information values configured with the timers bgp command.
Page 739: Neighbor Weight
Usage Loopback interfaces are up constantly and the BGP session may need one Information interface constantly up to stabilize the session. The neighbor update-source command is not necessary for directly connected internal BGP sessions. neighbor weight Assign a weight to the neighbor connection, which is used to determine the best path. Syntax neighbor {ipv6-address | peer-group-name} weight weight To remove a weight value, use the no neighbor {ipv6-address | peer-...
Page 740: Network Backdoor
Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format then the prefix prefix-length length in the /x format. The range is from /0 to /128. NOTE: The :: notation specifies successive hexadecimal fields of zeros. mask Enter the mask of the IP address in the slash prefix length format (for example, /24).
Page 741: Redistribute
Command ROUTER BGPV6-ADDRESS FAMILY Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Usage Though the system does not generate a route due to backdoor config, there is an Information option for injecting/ sourcing a local route in presence of network backdoor config on a learned route.
Page 742: Redistribute Isis
redistribute isis Redistribute IS-IS routes into BGP. Syntax redistribute isis [level-1 | level-1-2 | level-2] [metric metric-value | metric-type {external | internal}] [route-map map-name] To stop redistribution of IS-IS routes, use the no redistribute isis command. Parameters level-1 | (OPTIONAL) Enter the type (level) of routes to redistribute. level-1-2 | level-2] metric...
Page 743: Router Bgp
match external (OPTIONAL) Enter the keywords match external to {1 | 2} redistribute OSPF external routes. You can specify 1 or 2 to redistribute those routes only. match internal (OPTIONAL) Enter the keywords match internal to redistribute OSPFv3 internal routes only. route-map (OPTIONAL) Enter the keywords route-map then the name map-name...
Page 744: Show Capture Bgp-Pdu Neighbor
ROUTER BGPV6-ADDRESS FAMILY Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell(conf-router_bgp)#show conf router bgp 18508 neighbor RR-CLIENT peer-group neighbor RR-CLIENT remote-as 18508 neighbor RR-CLIENT no shutdown neighbor RR-CLIENT-PASSIV peer-group passive neighbor RR-CLIENT-PASSIV remote-as 18508...
Page 745: Show Ip Bgp Ipv6 Unicast
4000::60 remote-as 18508 neighbor 4000::60 no shutdown neighbor 9000::1:2 remote-as 640 no neighbor 9000::1:2 activate neighbor 9000::1:2 no shutdown Dell# show ip bgp ipv6 unicast View the current BGP information. Syntax show ip bgp ipv6 unicast [network [network-mask] [longer-...
Page 746: Show Ip Bgp Ipv6 Unicast Community
Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History show ip bgp ipv6 unicast community View information on all routes with community attributes or view specific BGP community groups. Syntax show ip bgp ipv6 unicast community [community-number] [local- as] [no-export] [no-advertise] Paramters community-...
Page 747: Show Ip Bgp Ipv6 Unicast Community-List
show ip bgp ipv6 unicast community-list View routes that are affected by a specific community list. Syntax show ip bgp ipv6 unicast community-list community-list-name [exact-match] Paramters community- Enter the name of a configured IP community list. list-name exact-match (OPTIONAL) Enter the keywords exact-match to display only for an exact match of the communities.
Page 748: Show Ip Bgp Ipv6 Unicast Extcommunity-List
Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History show ip bgp ipv6 unicast extcommunity-list View information on all routes with Extended Community attributes. Syntax show ip bgp ipv6 unicast extcommunity-list [list name] Parameters list name Enter the extended community list name you wish to view. Command •...
Page 749: Show Ip Bgp Ipv6 Unicast Flap-Statistics
show ip bgp ipv6 unicast flap-statistics View flap statistics on BGP routes. Syntax show ip bgp ipv6 unicast flap-statistics [ipv6-address prefix- length] [filter-list as-path-name] [regexp regular-expression] Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format then the prefix prefix-length length in the /x format.
Page 750: Show Ip Bgp Ipv6 Unicast Neighbors
Command • EXEC Modes • EXEC Privilege Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History show ip bgp ipv6 unicast neighbors Displays information on IPv6 unicast routes exchanged by BGP neighbors. Syntax show ip bgp ipv6 unicast neighbors [ipv4-neighbor-addr | ipv6- neighbor-addr] [advertised-routes | dampened-routes | detail | flap-statistics | routes | received-routes [network [network- mask]] | denied-routes [network [network-mask]]]...
Page 751 Command • EXEC Modes • EXEC Privilege Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Usage The following describes the show ip bgp ipv6 unicast neighbors Information command shown in the Example below. Lines Beginning Description With BGP neighbor Displays the BGP neighbor address and its AS number.
Page 752 Displays the peering address of the neighbor and the TCP port number. Example Dell#show ip bgp ipv6 unicast neighbors BGP neighbor is 5ffe:10::3, remote AS 1, external link BGP version 4, remote router ID 5.5.5.3 BGP state ESTABLISHED, in this state for 00:00:32...
Page 753: Show Ip Bgp Ipv6 Unicast Peer-Group
2 accepted prefixes consume 32 bytes Prefixes accepted 1 (consume 4 bytes), withdrawn 0 by peer Prefixes advertised 0, rejected 0, withdrawn 0 from peer Connections established 3; dropped 2 Last reset 00:00:39, due to Closed by neighbor Notification History 'OPEN error/Bad AS' Sent : 0 Recv: 1 Local host: 5ffe:10::4, Local port: 179 Foreign host: 5ffe:10::3, Foreign port: 35470...
Page 754: Show Ip Bgp Ipv6 Unicast Summary
Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell#show ip bgp peer-group Peer-group RR-CLIENT, remote AS 18508 BGP version 4 Minimum time between advertisement runs is 5 seconds For address family: IPv4 Unicast BGP neighbor is RR-CLIENT, peer-group internal,...
Page 755: Show Ip Bgp Next-Hop
Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell# show ip bgp summary BGP router identifier 55.55.55.55, local AS number 18508 BGP table version is 0, main routing table version 0 6 BGP path attribute entrie(s) using 392 bytes of memory...
Page 756: Show Ip Bgp Paths
show ip bgp paths View all the BGP path attributes in the BGP database. Syntax show ip bgp paths [regexp regular-expression] Parameters regexp regular- Enter a regular expression then use one or a combination of expression the following characters to match: •...
Page 757: Show Ip Bgp Paths Community
show ip bgp paths community View all unique COMMUNITY numbers in the BGP database. Syntax show ip bgp paths community Command • EXEC Modes • EXEC Privilege Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History show ip bgp paths extcommunity View all unique extended community information in the BGP database.
Page 758: Timers Bgp
• ^ = (caret) the beginning of the input string. If the caret is used at the beginning of a sequence or range, it matches on everything BUT the characters specified. • $ = (dollar sign) the end of the output string. Command •...
Page 759: Ipv6 Mbgp Commands
IPv6 MBGP Commands Multiprotocol BGP (MBGP) is an enhanced BGP that enables multicast routing policy throughout the Internet and connecting multicast topologies between BGP and autonomous systems (AS). The Dell Networking MBGP is implemented as per IETF RFC 1858. address family This command changes the context to subsequent address family identifier (SAFI).
Page 760 advertise-map (OPTIONAL) Enter the keywords advertise-map then the map-name name of a configured route map to set filters for advertising an aggregate route. as-set (OPTIONAL) Enter the keywords as-set to generate path attribute information and include it in the aggregate. AS_SET includes AS_PATH and community information from the routes included in the aggregated route.
Page 761: Bgp Dampening
bgp dampening Enable MBGP route dampening. Syntax bgp dampening [half-life time] [route-map map-name] To disable route dampening, use the no bgp dampening [half-life time] [route-map map-name] command. Parameters half-life time (OPTIONAL) Enter the number of minutes after which the Penalty is decreased. After the router assigns a Penalty of 1024 to a route, the Penalty is decreased by half, after the half-life period expires.
Page 762: Clear Ip Bgp Ipv6 Unicast Dampening
Command EXEC Privilege Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History clear ip bgp ipv6 unicast dampening Clear information on route dampening. Syntax clear ip bgp dampening ipv6 unicast [network network-mask] Parameters network (OPTIONAL) Enter the IPv6 network address in x:x:x:x::x format.
Page 763: Debug Ip Bgp Ipv6 Unicast Dampening
• [ ] (brackets) matches a range of single-character patterns. • ^ (caret) matches the beginning of the input string. (If the caret is used at the beginning of a sequence or range, it matches on everything BUT the characters specified.) •...
Page 764: Debug Ip Bgp Ipv6 Unicast Updates
updates Enter the keyword updates to view BGP update information. (OPTIONAL) Enter the keyword in to view only BGP updates received from neighbors. (OPTIONAL) Enter the keyword out to view only BGP updates sent to neighbors. Command EXEC Privilege Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
Page 765: Distance Bgp
Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Usage CAUTION: Dell Networking recommends that you do not change the Information administrative distance of internal routes. Changing the administrative distances may cause routing table inconsistencies. The higher the administrative distance assigned to a route means that your confidence in that route is low.
Page 766: Neighbor Advertisement-Interval
Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zeros. peer-group- Identify a peer group by name. name activate Enter the keyword activate to enable the identified neighbor or peer group in the new AFI/SAFI. Defaults Disabled.
Page 767: Neighbor Default-Originate
• seconds = 30 seconds (external peers) Command ROUTER BGPV6-ADDRESS FAMILY Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History neighbor default-originate Inject the default route to a BGP peer or neighbor. Syntax neighbor {ipv6-address | peer-group-name} default-originate [route-map map-name] To remove a default route, use the no neighbor {ipv6-address | peer- group-name} default-originate command.
Page 768: Neighbor Filter-List
Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format. NOTE: The :: notation specifies successive hexadecimal fields of zeros. peer-group- Enter the name of the peer group. name prefix-list- Enter the name of an established prefix list. If the prefix list is name not configured, the default is permit (to allow all routes).
Page 769: Neighbor Maximum-Prefix
Enter the keyword out to filter outbound BGP routes. Defaults Not configured. Command ROUTER BGPV6-ADDRESS FAMILY Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History neighbor maximum-prefix Control the number of network prefixes received. Syntax neighbor {ipv6-address | peer-group-name} maximum-prefix maximum [threshold] [warning-only] To return to the default values, use the no neighbor {ipv6-address | peer- group-name} maximum-prefix maximum [threshold] [warning-only]...
Page 770: Neighbor Next-Hop-Self
neighbor next-hop-self Allows you to configure the router as the next hop for a BGP neighbor. Syntax neighbor {ipv6-address | peer-group-name} next-hop-self To return to the default setting, use the no neighbor {ipv6-address | peer- group-name} next-hop-self command. Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format.
Page 771: Neighbor Route-Map
Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History neighbor route-map Apply an established route map to either incoming or outbound routes of a BGP neighbor or peer group. Syntax neighbor {ipv6-address | peer-group-name} route-map map-name {in | out} To remove the route map, use the no neighbor {ipv6-address | peer- group-name} route-map map-name {in | out} command.
Page 772: Neighbor Route-Reflector-Client
neighbor route-reflector-client Configure a neighbor as a member of a route reflector cluster. Syntax neighbor {ipv6-address | peer-group-name} route-reflector- client To indicate that the neighbor is not a route reflector client or to delete a route reflector configuration, use the no neighbor {ipv6-address | peer-group- name} route-reflector-client command.
Page 773: Redistribute
route-map (OPTIONAL) Enter the keywords route-map then the name map-name of an established route map. If the route map is not configured, the default is deny (to drop all routes). Defaults Not configured. Command ROUTER BGPV6-ADDRESS FAMILY Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
Page 774: Show Ip Bgp Ipv6 Unicast
Usage If you do not configure the default-metric command, in addition to the Information redistribute command, or there is no route map to set the metric, the metric for redistributed static and connected is “0”. To redistribute the default route (0::0/0), configure the neighbor default- originate command.
Page 775: Show Ip Bgp Ipv6 Unicast Community
Command • EXEC Modes • EXEC Privilege Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History show ip bgp ipv6 unicast community View information on all routes with community attributes or view specific BGP community groups. Syntax show ip bgp ipv6 unicast community [community-number] [local- as] [no-export] [no-advertise] Paramters...
Page 776: Show Ip Bgp Ipv6 Unicast Community-List
show ip bgp ipv6 unicast community-list View routes that are affected by a specific community list. Syntax show ip bgp ipv6 unicast community-list community-list-name Paramters community- Enter the name of a configured IP community list. list-name Command • EXEC Modes •...
Page 777: Show Ip Bgp Ipv6 Unicast Filter-List
NdAuto 1 : NdEqCost 1 : NdSync 0 : NdDefOrg 0 NdV6ListSoc 14 NdDefDid 0 : NdConfedId 0 : NdMedConfed 0 : NdMedMissVal -1 : NdIgnrIllId 0 : NdRRC2C 1 : NdClstId 33686273 : NdPaTblP 0x41a19088 NdASPTblP 0x41a19090 : NdCommTblP 0x41a19098 : NhOptTransTblP 0x41a190a0 : NdRRClsTblP 0x41a190a8 NdPktPA 0 : NdLocCBP 0x41a6f000 : NdTmpPAP 0x419efc80 :...
Page 778 Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell#show ip bgp ipv6 unicast flap-statistics BGP table version is 8, local router ID is 5.5.10.4 Status codes: s suppressed, S stale, d damped, h history, * valid, > best Path...
Page 779: Show Ip Bgp Ipv6 Unicast Inconsistent-As
show ip bgp ipv6 unicast inconsistent-as View routes with inconsistent originating autonomous system (AS) numbers; that is, prefixes that are announced from the same neighbor AS but with a different AS-Path. Syntax show ip bgp ipv6 unicast inconsistent-as Command • EXEC Modes •...
Page 780 Usage The following describes the show ip bgp ipv6 unicast neighbors Information command shown in the Example below. Lines Beginning Description With BGP neighbor Displays the BGP neighbor address and its AS number. The last phrase in the line indicates whether the link between the BGP router and its neighbor is an external or internal one.
Page 781 Displays the peering address of the neighbor and the TCP port number. Example Dell#show ip bgp ipv6 unicast neighbors BGP neighbor is 5ffe:10::3, remote AS 1, external link BGP version 4, remote router ID 5.5.5.3 BGP state ESTABLISHED, in this state for 00:00:32...
Page 782: Show Ip Bgp Ipv6 Unicast Peer-Group
Foreign host: 5ffe:10::3, Foreign port: 35470 Notification History 'Connection Reset' Sent : 1 Recv: 0 BGP neighbor is 5ffe:11::3, remote AS 1, external link BGP version 4, remote router ID 5.5.5.3 BGP state ESTABLISHED, in this state for 00:00:28 Last read 00:00:28, last write 00:00:28 Hold time is 180, keepalive interval is 60 seconds Received 27 messages, 3 notifications, 0 in queue Sent 0 messages, 0 notifications, 0 in queue...
Page 783: Show Ip Bgp Ipv6 Unicast Summary
Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Related neighbor peer-group (assigning peers) — assigns a peer to a peer-group. Commands neighbor peer-group (creating group) — creates a peer group. show ip bgp ipv6 unicast summary Allows you to view the status of all BGP connections.
Page 784 If the neighbor is disabled, the phrase (Admin shut) appears in this column. Example Dell#show ip bgp ipv6 unicast summary BGP router identifier 5.5.10.4, local AS number 100 BGP table version is 12, main routing table version 12 2 network entrie(s) and 4 paths using 536 bytes of memory...
Page 785: Iscsi Optimization
Optimization Internet small computer system interface (iSCSI) optimization enables quality-of-service (QoS) treatment for iSCSI storage traffic. To configure and verify the iSCSI optimization feature, use the following Dell Networking Operating System (OS) commands. advertise dcbx-app-tlv Configure DCBX to send iSCSI TLV advertisements.
Page 786: Iscsi Cos
Defaults 10 minutes Command CONFIGURATION Modes Command Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is History supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. iscsi cos Set the QoS policy that is applied to the iSCSI flows. Syntax iscsi cos {enable | disable | dot1p vlan-priority-value [remark] | dscp dscp-value [remark]}...
Page 787: Iscsi Enable
Command Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is History supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. iscsi enable Globally enable iSCSI optimization. Syntax iscsi enable To disable iSCSI optimization, use the no iscsi enable command. Parameters enable Enter the keyword enable to enable the iSCSI optimization...
Page 788: Iscsi Profile-Compellant
Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. iscsi profile-compellant Configure the auto-detection of Dell Compellent arrays on a port. Syntax iscsi profile-compellent Defaults Dell Compellent disk arrays are not detected. Command INTERFACE Modes Command Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is History supported in Programmable-Mux (PMUX) mode only.
Page 789: Show Iscsi
Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell#show iscsi iSCSI is enabled iSCSI session monitoring is disabled iSCSI COS : dot1p is 4 no-remark Session aging time: 10 Maximum number of connections is 256...
Page 790: Show Iscsi Session
Command • EXEC Modes • EXEC Privilege Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell# show isci session Session 0: ------------------------------------------------------ Target: iqn.2001-05.com.equallogic: 0-8a0906-0e70c2002-10a0018426a48c94-iom010 Initiator: iqn.1991-05.com.microsoft:win-x9l8v27yajg ISID: 400001370000 Session 1: --------------------------------------------------------- Target: iqn.2001-05.com.equallogic: 0-8a0906-0f60c2002-0360018428d48c94-iom011 Initiator: iqn.1991-05.com.microsoft:win-x9l8v27yajg...
Page 791: Show Run Iscsi
Example Dell# show isci session detailed Session 0 : --------------------------------------------------- Target:iqn.2010-11.com.ixia:ixload:iscsi-TG1 Initiator:iqn.2010-11.com.ixia.ixload:initiator-iscsi-2c Up Time:00:00:01:28(DD:HH:MM:SS) Time for aging out:00:00:09:34(DD:HH:MM:SS) ISID:806978696102 Initiator Initiator Target Target Connection IP Address TCP Port IP Address TCPPort ID 10.10.0.44 33345 10.10.0.101 3260 Session 1 : ---------------------------------------------------- Target:iqn.2010-11.com.ixia:ixload:iscsi-TG1...
Page 792: Intermediate System To Intermediate System (Is-Is)
(Level 1 and Level 1-2 devices). Only Level 1-2 and Level 2 devices communicate with other areas. IS-IS protocol standards are listed in the Standard Compliance chapter in the Dell Networking OS Configuration Guide. NOTE: The fundamental mechanisms of IS-IS are the same between IPv4 and IPv6. Where there are differences between the two versions, they are identified and clarified in this chapter.
Page 793: Advertise
advertise Leak routes between levels (distribute IP prefixes between Level 1 and Level 2 and vice versa). Syntax advertise {level1-into-level2 | level2-into-level1} prefix- list-name To return to the default, use the no advertise {level1-into-level2 | level2-into-level1}[prefix-list-name] command. Parameters level1-into- Enter the keywords level1-into-level2 to advertise level2 Level 1 routes into Level 2 LSPs.
Page 794: Clear Config
password Enter a 1 to 16-character length alphanumeric string to prevent unauthorized access or incorrect routing information corrupting the link state database. The password is processed as plain text, which only provides limited security. Defaults Not configured. Command ROUTER ISIS Modes Command Version 9.2(0.0)
Page 795: Clear Isis
clear isis Restart the IS-IS process. All IS-IS data is cleared. Syntax clear isis [tag] {* | database | traffic} Parameters (Optional) Enter an alphanumeric string to specify the IS-IS routing tag area. Enter the keyword * to clear all IS-IS information and restart the IS-IS process.
Page 796: Debug Isis
debug isis Enable debugging for all IS-IS operations. Syntax debug isis To disable debugging of IS-IS, use the no debug isis command. Command EXEC Privilege Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Usage Entering debug isis enables all debugging parameters. Information To display all debugging information in one output, use this command.
Page 797: Debug Isis Local-Updates
debug isis local-updates To debug IS-IS local update packets, enable debugging on a specific interface and provides diagnostic information. Syntax debug isis local-updates [interface] To turn off debugging, use the no debug isis local-updates [interface] command. Parameters interface (OPTIONAL) Identifies the interface type slot/port as one of the following: •...
Page 798: Debug Isis Spf-Triggers
Command EXEC Privilege Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History debug isis spf-triggers Enable debugging on the events that triggered IS-IS shortest path first (SPF) events for debugging purposes. Syntax debug isis spf-triggers To turn off debugging, use the no debug isis spf-triggers command. Command EXEC Privilege Modes...
Page 799: Default-Information Originate
default-information originate Generates a default route into an IS-IS routing domain and controls the distribution of default information. Syntax default-information originate [always] [metric metric] [route- map map-name] To disable the generation of a default route into the specified IS-IS routing domain, use the no default-information originate [always] [metric metric] [route-map map-name] command.
Page 800: Description
description Enter a description of the IS-IS routing protocol. Syntax description {description} To remove the description, use the no description {description} command. Parameters description Enter a description to identify the IS-IS protocol (80 characters maximum). Defaults none Command ROUTER ISIS Modes Command Version 9.2(0.0)
Page 801: Distribute-List In
Usage The administrative distance indicates the trust value of incoming packets. A low Information administrative distance indicates a high trust rate. A high value indicates a lower trust rate. For example, a weight of 255 is interpreted that the routing information source is not trustworthy and should be ignored.
Page 802: Distribute-List Out
distribute-list out Suppress network prefixes from being advertised in outbound updates. Syntax distribute-list prefix-list-name out [connected | bgp as number | ospf process-id | rip | static] To return to the default values, use the no distribute-list prefix-list- name out [bgp as number connected | ospf process-id | rip | static] command.
Page 803: Domain-Password
To return to the default, use the no distribute-list redistributed- override in command. Defaults none Command • ROUTER ISIS (for IPv4) Modes • CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6) Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Usage When you execute this command, IS-IS does not download the route to the Information routing table if the same route was redistributed into IS-IS routing protocol on the same router.
Page 804: Graceful-Restart Ietf
graceful-restart ietf Enable graceful restart on an IS-IS router. Syntax graceful-restart ietf To return to the default, use the no graceful-restart ietf command. Parameters ietf Enter ietf to enable graceful restart on the IS-IS router. Defaults Graceful restart disabled. Command ROUTER ISIS Modes Command...
Page 805: Graceful-Restart T1
graceful-restart t1 Set the graceful restart wait time before unacknowledged restart requests are generated. This wait time is the interval before the system sends a restart request (an IIH with RR bit set in Restart TLV) until the CSNP is received from the helping router. Syntax graceful-restart t1 {interval seconds | retry-times value} To return to the default, use the no graceful-restart t1 command.
Page 806: Graceful-Restart T3
graceful-restart t3 Configure the overall wait time before graceful restart completes. Syntax graceful-restart t3 {adjacency | manual} seconds To return to the default, use the no graceful-restart t3 command. Parameters adjacency Enter the keyword adjacency so that the restarting router receives the remaining time value from its peer and adjusts its T3 value so if you have configured this option.
Page 807: Hello Padding
Parameters seconds Enter the graceful restart time in seconds. The range is from 5 to 300 seconds. The default is 30 seconds. Defaults 30 seconds Command ROUTER ISIS Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Related graceful-restart t3...
Page 808: Hostname Dynamic
hostname dynamic Enables dynamic learning of hostnames from routers in the domain and allows the routers to advertise the hostname in LSPs. Syntax hostname dynamic To disable this command, use the no hostname dynamic command. Defaults Enabled. Command ROUTER ISIS Modes Command Version 9.2(0.0)
Page 809: Ip Router Isis
ip router isis Configure IS-IS routing processes on an interface and attach an area tag name to the routing process. Syntax ip router isis [tag] To disable IS-IS on an interface, use the no ip router isis [tag] command. Parameters (OPTIONAL) The tag you specify identifies a specific area routing process.
Page 810: Isis Circuit-Type
To establish adjacencies and establish dynamic routing, enable routing on one or more interfaces. You can configure only one IS-IS routing process to perform Level 2 routing. A level-1-2 designation performs Level 1 and Level 2 routing at the same time. Related •...
Page 811: Isis Csnp-Interval
isis csnp-interval Configure the IS-IS complete sequence number PDU (CSNP) interval on an interface. Syntax isis csnp-interval seconds [level-1 | level-2] To return to the default values, use the no isis csnp-interval [seconds] [level-1 | level-2] command. Parameters seconds Interval of transmission time between CSNPs on multi- access networks for the designated intermediate system.
Page 812: Isis Hello-Multiplier
Defaults seconds = 10; level-1 (if not otherwise specified) Command INTERFACE Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Usage The default values of this command are typically satisfactory transmission times for Information a specific interface on a designated intermediate system. To maintain database synchronization, the designated routers send CSNPs.
Page 813: Isis Hello Padding
isis hello padding Turn ON or OFF padding of hello PDUs from INTERFACE mode. Syntax isis hello padding To return to the default, use the no isis hello padding command. Defaults Padding of hello PDUs is enabled (ON). Command INTERFACE Modes Command Version 9.2(0.0)
Page 814: Isis Metric
Usage Dell Networking recommends configuring metrics on all interfaces. Without Information configuring this command, the IS-IS metrics are similar to hop-count metrics. isis metric Assign a metric to an interface. Syntax isis metric default-metric [level-1 | level-2] To return to the default values, use the no isis metric [default-metric] [level-1 | level-2] command.
Page 815: Isis Password
Defaults Not enabled. Command INTERFACE Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History isis password Configure an authentication password for an interface. Syntax isis password [hmac-md5] password [level-1 | level-2] To delete a password, use the no isis password [password] [level-1 | level-2] command.
Page 816: Isis Priority
This password provides limited security as it is processed as plain text. isis priority Set the priority of the designated router you select. Syntax isis priority value [level-1 | level-2] To return to the default values, use the no isis priority [value] [level-1 | level-2] command.
Page 817: Log-Adjacency-Changes
Parameters level-1 Allows a router to act as a Level 1 router. level-1-2 Allows a router to act as both a Level 1 and Level 2 router. This setting is the default. level-2-only Allows a router to act as a Level 2 router. Defaults level-1-2 Command...
Page 818: Lsp-Mtu
To restore default values, use the no lsp-gen-interval [level-l | level-2] interval seconds [initial_wait_interval seconds [second_wait_interval seconds]] command. Parameters level-l (OPTIONAL) Enter the keywords level-1 to apply the configuration to generation of Level-1 LSPs. level-2 (OPTIONAL) Enter the keywords level-2 to apply the configuration to generation of Level-2 LSPs.
Page 819: Lsp-Refresh-Interval
To return to the default values, use the no lsp-mtu command. Parameters size The maximum LSP size, in bytes. The range is from 128 to 1497 for Non-Jumbo mode and from 128 to 9195 for Jumbo mode. The default is 1497. Defaults 1497 bytes.
Page 820: Max-Area-Addresses
state database corruption can persist at the cost of increased link utilization. A higher value reduces the link utilization the flooding of refreshed packets causes. Related max-lsp-lifetime — sets the maximum interval that LSPs persist without being Commands refreshed. max-area-addresses Configure manual area addresses.
Page 821: Maximum-Paths
Command ROUTER ISIS Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Usage Change the maximum LSP lifetime with this command. The maximum LSP lifetime Information must always be greater than the LSP refresh interval. The seconds parameter enables the router to keep LSPs for the specified length of time.
Page 822: Multi-Topology
Parameters narrow Allows you to generate and accept old-style TLVs. The metric range is from 0 to 63. transition Allows you to generate both old-style and new-style TLVs. The metric range is from 0 to 63. wide Allows you to generate and accept only new-style TLVs. The metric range is from 0 to 16777215.
Page 823: Passive-Interface
To configure an IS-IS network entity title (NET) for a routing process, use this mandatory command. If you did not configure a NET, the IS-IS process does not start. Syntax net network-entity-title To remove a net, use the no net network-entity-title command. Parameters network- Specify the area address and system ID for an IS-IS routing...
Page 824: Redistribute
Defaults Not configured. Command ROUTER ISIS Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Usage Although the passive interface does not send nor receive routing updates, the Information network on that interface is still included in the IS-IS updates sent using other interfaces.
Page 825: Redistribute Bgp
route-map (OPTIONAL) If you do not enter the route-map argument, all map-name routes are redistributed. If a map-name value is not specified, no routers are imported. Defaults • metric metric-value = 0 • metric-type= internal; level-2 Command • ROUTER ISIS (for IPv4) Modes •...
Page 826 You can “set” more advanced options using route maps. Example Dell(conf)#router is Dell(conf-router_isis)#redistribute bgp 1 level-1 metric 32 metric-type external route-map rmap-isis-to-bgp Dell(conf-router_bgp)#show running-config isis router isis...
Page 827: Redistribute Ospf
route-map rmap-isis-to-bgp redistribute ospf Redistribute routing information from an OSPF process. Syntax redistribute ospf process-id [level-1| level-1-2 | level-2] [match {internal | external}] [metric metric-value] [metric- type {external | internal}] [route-map map-name] To return to the default values, use the no redistribute ospf process-id [level-1| level-1-2 | level-2] [match {internal | external}] [metric metric-value][metric-type {external | internal}] [route-map map-name] command.
Page 828: Router Isis
If you do not specify a map-name, all routes are redistributed. If you specify a keyword, but fail to list route map tags, no routes are imported. Defaults Refer to Parameters. Command • ROUTER ISIS (for IPv4) Modes • CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6) Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
Page 829: Set-Overload-Bit
• CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6) Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Example The bold section identifies that Multi-Topology IS-IS is enabled in Transition mode. (Router-Isis) Dell(conf-router_isis)#show config router isis Intermediate System to Intermediate System (IS-IS)
Page 830: Show Isis Database
100 15 20 spf-interval level-2 120 20 25 exit-address-family Example The bold section identifies that Multi-Topology IS-IS is enabled in Transition mode. (Address- Dell(conf-router_isis-af_ipv6)#show conf Family_IPv6) address-family ipv6 unicast maximum-paths 16 multi-topology transition set-overload-bit spf-interval level-1 100 15 20...
Page 831 Level 2 router. This value represents the P bit. This bit is always set to zero as Dell Networking does not support area partition repair. This value represents the overload bit, determining congestion. If the overload bit is set, other routers do not use this system as a transit router when calculating routes.
Page 832 IS-IS Level-2 Link State Database LSPID LSP Seq Num LSP Checksum LSP Holdtime ATT/P/OL ISIS.00-00 * 0x00000006 0xCF43 0/0/0 Dell#show isis database detail ISIS.00-00 IS-IS Level-1 Link State Database LSPID LSP Seq Num LSP Checksum LSP Holdtime ATT/P/OL ISIS.00-00 * 0x0000002B 0x853B...
Page 833: Show Isis Graceful-Restart Detail
EXEC Modes • EXEC Privilege Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell#show isis graceful-restart detail Configured Timer Value ====================== Graceful Restart : Enabled T3 Timer : Manual T3 Timeout Value : 30 T2 Timeout Value...
Page 834: Show Isis Interface
Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell>show isis int GigabitEthernet 0/7 is up, line protocol is up MTU 1497, Encapsulation SAP Routing Protocol: IS-IS Circuit Type: Level-1-2 Interface Index 37847070, Local circuit ID 1 Level-1 Metric: 10, Priority: 64, Circuit ID: systest-3.01...
Page 835: Show Isis Neighbors
show isis neighbors Display information about neighboring (adjacent) routers. Syntax show isis neighbors [level-1 | level-2] [detail] [interface] Parameters level-1 (OPTIONAL) Displays information about Level 1 IS-IS neighbors. level-2 (OPTIONAL) Displays information about Level 2 IS-IS neighbors. detail (OPTIONAL) Displays detailed information about neighbors. interface (OPTIONAL) Enter the following keywords and slot/port or number information:...
Page 836: Show Isis Protocol
System Id Interface State Type Priority Uptime Circuit Id TEST Gi 7/1 Up L1L2(M) 127 09:28:01 TEST.02 Dell#show isis neighbors detail System Id Interface State Type Priority Uptime Circuit Id TEST Gi 7/1 Up L1L2(M) 127 09:28:04 TEST.02 Area Address(es): 49.0000.0001...
Page 837: Show Isis Traffic
Generate wide metrics: none Accept wide metrics: none Multi Topology Routing is enabled in transition mode. Dell# show isis traffic This command allows you to display IS-IS traffic interface information. Syntax show isis traffic [interface] Parameters interface (OPTIONAL) Identifies the interface type slot/port as one of the following: •...
Page 838: Spf-Interval
Displays the number of LSP authentication failures. authentication failures Example Dell#sho is traffic IS-IS: Level-1 Hellos (sent/rcvd) : 0/721 IS-IS: Level-2 Hellos (sent/rcvd) : 900/943 IS-IS: PTP Hellos (sent/rcvd) : 0/0 IS-IS: Level-1 LSPs sourced (new/refresh) : 0/0...
Page 839 level-2 (OPTIONAL) Enter the keyword level-2 to apply the configuration to Level-2 SPF calculations. interval Enter the maximum number of seconds between SPF seconds calculations. The range is from 0 to 120 seconds. The default is 10 seconds. initial_wait_inte (OPTIONAL) Enter the initial wait time, in seconds, before rval seconds running the first SPF calculations.
Page 840: Link Aggregation Control Protocol (Lacp)
Link Aggregation Control Protocol (LACP) This chapter contains commands for Dell Networks’s implementation of the link aggregation control protocol (LACP) for creating dynamic link aggregation groups (LAGs) — known as port-channels in the Dell Networking Operating System (OS). NOTE: For static LAG commands, refer to the...
Page 841: Lacp Long-Timeout
events (OPTIONAL) Enter the keyword events to debug the LACP event information. (OPTIONAL) Enter the keyword pdu to debug the LACP Protocol Data Unit information. interface in | (OPTIONAL) Enter the following keywords and slot/port or number information: • For a Ten-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
Page 842: Lacp Port-Priority
lacp port-priority To influence which ports will be put in Standby mode when there is a hardware limitation that prevents all compatible ports from aggregating, configure the port priority. Syntax lacp port-priority priority-value To return to the default setting, use the no lacp port-priority priority- value command.
Page 843: Port-Channel Mode
port-channel mode Configure the LACP port channel mode. Syntax port-channel number mode [active] [passive] [off] Parameters number Enter the keywords number then a number. active Enter the keyword active to set the mode to the active state. NOTE: LACP modes are defined in Usage Information. passive Enter the keyword passive to set the mode to the passive state.
Page 844: Port-Channel-Protocol Lacp
Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Example Dell(conf)#interface TenGigabitethernet 3/15 Dell(conf-if-tengig-3/15)#no shutdown Dell(conf-if-tengig-3/15)#port-channel-protocol lacp Dell(conf-if-tengig-3/15-lacp)#port-channel 32 mode active Dell(conf)#interface TenGigabitethernet 3/16 Dell(conf-if-tengig-3/16)#no shutdown Dell(conf-if-tengig-3/16)#port-channel-protocol lacp Dell(conf-if-tengig-3/16-lacp)#port-channel 32 mode active show lacp Display the LACP matrix.
Page 845 Priority 128 Partner Admin: State BDFHJLMP Key 0 Priority 0 Oper: State BCEGIKNP Key 1 Priority 128 Dell# Example (Sys- Dell#show lacp 1 sys-id Actor System ID: Priority 32768, Address 0001.e800.a12b Partner System ID: Priority 32768, Address 0001.e801.45a5 Dell# Example...
Page 846: Layer
Layer 2 This chapter describes commands to configure Layer 2 features. This chapter contains: • MAC Addressing Commands MAC Addressing Commands The following commands are related to configuring, managing, and viewing MAC addresses. clear mac-address-table Clear the MAC address table. Syntax clear mac-address-table dynamic {address mac-address | all | interface interface | vlan vlan-id}...
Page 847: Mac-Address-Table Aging-Time
Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History mac-address-table aging-time Specify an aging time for MAC addresses to remove from the MAC address table. Syntax mac-address-table aging-time seconds To delete the configured aging time, use the no mac-address-table aging- time seconds command.
Page 848: Mac-Address-Table Station-Move Refresh-Arp
For details about using this command, refer to the “NIC Teaming” section of the Information Layer 2 chapter in the Dell Networking OS Configuration Guide. mac learning-limit Limit the maximum number of MAC addresses (static + dynamic) learned on a selected interface.
Page 849 dynamic (OPTIONAL) Enter the keyword dynamic to allow aging of MACs even though a learning limit is configured. no-station- (OPTIONAL) Enter the keywords no-station-move to move disallow a station move (associate the learned MAC address with the most recently accessed port) on learned MAC addresses.
Page 850: Mac Learning-Limit Learn-Limit-Violation
show mac learning-limit — displays MAC learning-limit configuration. mac learning-limit learn-limit-violation Configure an action for a MAC address learning-limit violation. Syntax mac learning-limit learn-limit-violation {log | shutdown} To return to the default, use the no mac learning-limit learn-limit- violation {log | shutdown} command. Parameters Enter the keyword log to generate a syslog message on a learning-limit violation.
Page 851: Mac Learning-Limit Reset
shutdown- Enter the keywords shutdown-offending to shut down offending the offending interface and generate a syslog message. shutdown- Enter the keywords shutdown-original to shut down the original original interface and generate a syslog message. Defaults none Command INTERFACE (conf-if-interface-slot/port) Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
Page 852: Show Mac-Address-Table
port-set port- (REQUIRED) Enter the keywords port-set then a Port-Pipe pipe number to select the Port-Pipe for which to gather information. The range is 0. address mac- (OPTIONAL) Enter the keyword address then a MAC addr address in the nn:nn:nn:nn:nn:nn format to display information on that MAC address.
Page 853 static (OPTIONAL) Enter the keyword static to display only those MAC addresses specifically configured on the switch. Optionally, you can also add one of these combinations: address/mac-address, interface/interface, or vlan vlan-id. address mac- (OPTIONAL) Enter the keyword address then a MAC address address in the nn:nn:nn:nn:nn:nn format to display information on that MAC address.
Page 854 —SONET then a slot/port. • te — 10 Gigabit Ethernet then a slot/port. State Lists if the MAC address is in use (Active) or not in use (Inactive). Example Dell#show mac-address-table VlanId Mac Address Type Interface State 00:00:c9:ad:f6:12 Dynamic Te 0/3...
Page 855: Show Mac-Address-Table Aging-Time
Static Address... Lists the number of user-defined MAC addresses. Total MAC... Lists the total number of MAC addresses the switch uses. Example Dell#show mac-address-table count (Count) MAC Entries for all vlans : Dynamic Address Count : Static Address (User-defined) Count :...
Page 856: Show Mac Learning-Limit
Command • EXEC Modes • EXEC Privilege Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell#show mac learning-limit Interface Learning Dynamic Static Unknown Slot/port Limit MAC count MAC count Drops Dell# Virtual LAN (VLAN) Commands The following commands configure and monitor virtual LANs (VLANs).
Page 857: Description
description Add a description about the selected VLAN. Syntax description description Parameters description Enter a text string description to identify the VLAN (80 characters maximum). Defaults none Command INTERFACE VLAN Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Related show vlan...
Page 858: Default-Vlan Disable
default-vlan disable Disable the default VLAN so that all switchports are placed in the Null VLAN until they are explicitly configured as a member of another VLAN. Defaults Enabled. Command CONFIGURATION Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Usage The no default vlan disable command is not listed in the running-...
Page 859: Show Config
Command INTERFACE VLAN Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell(conf-if-vl-100)#show config interface Vlan 1 description a no ip address mtu 2500 shutdown Dell(conf-if-vl-100)# show vlan Display the current VLAN configurations on the switch.
Page 860 Gi = gigabit Ethernet • Te = ten-gigabit Ethernet Example Dell#show vlan Codes: * - Default VLAN, G - GVRP VLANs, R - Remote Port Mirroring VLANs, P - Primary, C - Community, I - Isolated Q: U - Untagged, T - Tagged...
Page 861: Tagged
1002 Active T Te 0/3,13,55-56 Dell# Example (VLAN Dell# show vlan id 40 Codes: * - Default VLAN, G - GVRP VLANs, R - Remote Port Mirroring VLANs, P - Primary, C - Community, I - Isolated Q: U - Untagged, T - Tagged...
Page 862: Track Ip
Parameters interface Enter the following keywords and slot/port or number information: • For a Port Channel interface, enter the keywords port- channel then a number. The range is from 1 to 128. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
Page 863: Untagged
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. Defaults Not configured. Command INTERFACE VLAN Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Usage When this command is configured, the VLAN is operationally UP if any of the...
Page 864 Defaults All interfaces in Layer 2 mode are untagged. Command INTERFACE VLAN Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Usage Untagged interfaces can only belong to one VLAN. Information In the Default VLAN, you cannot use the no untagged interface command. To remove an untagged interface from all VLANs, including the Default VLAN, enter INTERFACE mode and use the no switchport command.
Page 865: Link Layer Discovery Protocol (Lldp)
IEEE 802 LAN. LLDP facilitates multi-vendor interoperability by using standard management tools to discover and make available a physical topology for network management. The Dell Networking operating software implementation of LLDP is based on IEEE standard 801.1ab.
Page 866: Advertise Dot3-Tlv
Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Related protocol lldp (Configuration) — enables LLDP globally. Commands debug lldp interface — debugs LLDP. show lldp neighbors — displays the LLDP neighbors. show running-config lldp — displays the LLDP running configuration. advertise dot3-tlv Advertise dot3 TLVs (Type, Length, Value).
Page 867: Clear Lldp Counters
Parameters system- Enter the keywords system-capabilities to advertise the capabilities system capabilities TLVs to the LLDP peer. system- Enter the keywords system-description to advertise the description system description TLVs to the LLDP peer. system-name Enter the keywords system-name to advertise the system name TLVs to the LLDP peer.
Page 868: Clear Lldp Neighbors
clear lldp neighbors Clear LLDP neighbor information for all interfaces or a specific interface. Syntax clear lldp neighbors {interface} Parameters interface Enter the following keywords and slot/port or number information: • For a 10-Gigabit Ethernet interface, enter the keyword tenGigabitEthernet then the slot/port information. •...
Page 869: Disable
packet (OPTIONAL) Enter the keyword packet to display information regarding packets coming in or going out. brief (OPTIONAL) Enter the keyword brief to display brief packet information. detail (OPTIONAL) Enter the keyword detail to display detailed packet information. (OPTIONAL) Enter the keyword tx to display transmit-only packet information.
Page 870: Hello
show lldp neighbors — displays the LLDP neighbors. hello Configure the rate at which the LLDP control packets are sent to its peer. Syntax hello seconds To revert to the default, use the no hello seconds command. Parameters seconds Enter the rate, in seconds, at which the control packets are sent to its peer.
Page 871: Multiplier
Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Related protocol lldp (Configuration) — enables LLDP globally. Commands show lldp neighbors — displays the LLDP neighbors. multiplier Set the number of consecutive misses before LLDP declares the interface dead. Syntax multiplier integer To return to the default, use the no multiplier integer command.
Page 872: Protocol Lldp (Interface)
protocol lldp (Interface) Enter the LLDP protocol in INTERFACE mode. Syntax [no] protocol lldp To return to the global LLDP configuration mode, use the no protocol lldp command from Interface mode. Defaults LLDP is not enabled on the interface. Command INTERFACE (conf-if-interface-lldp) Modes Command...
Page 873: Show Lldp Statistics
Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell#show lldp statistics --------- LLDP GLOBAL STATISTICS ON CHASSIS ------------ Total number of neighbors: 2 Last table change time: 1w5d4h, In ticks: 52729764 Total number of Table Inserts: 56...
Page 874: Lldp-Med Commands
• LLDP-MED Network Connectivity Device — any device that provides access to an IEEE 802 LAN to an LLDP-MED endpoint device, and supports IEEE 802.1AB (LLDP) and TIA-1057 (LLDP-MED). The Dell Networking system is an LLDP-MED network connectivity device. Regarding connected endpoint devices, LLDP-MED provides network connectivity devices with the ability •...
Page 875: Advertise Med Guest-Voice-Signaling
Parameters vlan-id Enter the VLAN ID. The range is from 1 to 4094. layer2_priority Enter the Layer 2 priority. The range is from 0 to 7. DSCP_value Enter the DSCP value. The range is from 0 to 63. priority-tagged Enter the keywords priority-tagged followed the Layer 2 number priority.
Page 876: Advertise Med Location-Identification
Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Related debug lldp interface — debugs LLDP. Commands show lldp neighbors — displays the LLDP neighbors. show running-config lldp — displays the LLDP running configuration. advertise med location-identification To advertise a location identifier, configure the system.
Page 877: Advertise Med Power-Via-Mdi
show running-config lldp — displays the LLDP running configuration. advertise med power-via-mdi To advertise the Extended Power via MDI TLV, configure the system. Syntax advertise med power-via-mdi To return to the default, use the no advertise med power-via-mdi command. Defaults unconfigured.
Page 878: Advertise Med Streaming-Video
Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Related debug lldp interface — debugs LLDP. Commands show lldp neighbors — displays the LLDP neighbors. show running-config lldp — displays the LLDP running configuration. advertise med streaming-video To advertise streaming video services for broadcast or multicast-based video, configure the system.
Page 879: Advertise Med Voice-Signaling
To return to the default, use the no advertise med video-conferencing {vlan-id} | {priority-tagged number} command. Parameters vlan-id Enter the VLAN ID. The range is from 1 to 4094. priority-tagged Enter the keywords priority-tagged then the Layer 2 number priority. The range is from 0 to 7. Defaults unconfigured.
Page 880: Advertise Med Voice
show running-config lldp — displays the LLDP running configuration. advertise med voice To advertise a dedicated IP telephony handset or other appliances supporting interactive voice services, configure the system. Syntax advertise med voice {vlan-id} | {priority-tagged number} To return to the default, use the no advertise med voice {vlan-id} | {priority-tagged number} command.
Page 881 Defaults unconfigured. Command CONFIGURATION (conf-lldp) Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Related debug lldp interface — debugs LLDP. Commands show lldp neighbors — displays the LLDP neighbors. show running-config lldp — displays the LLDP running configuration. Link Layer Discovery Protocol (LLDP)
Page 882: Microsoft Network Load Balancing
Microsoft Network Load Balancing This functionality is supported on the MXL platforms. Network Load Balancing (NLB) is a clustering functionality that is implemented by Microsoft on Windows 2000 Server and Windows Server 2003 operating systems. NLB uses a distributed methodology or pattern to equally split and balance the network traffic load across a set of servers that are part of the cluster or group.
Page 883 If the active server sends a reply, the Dell switch learns the active server’s MAC address. If all servers reply, the switch registers only the last received ARP reply, and the switch learns one server’s actual MAC address;...
Page 884: Mac-Address-Table Static (For Multicast Mac Address)
VLAN connected to the cluster. To ensure that this happens, you must configure the ip vlan-flooding command on the Dell switch at the time that the Microsoft cluster is configured. The server MAC address is given in the Ethernet frame header of the ARP reply, while the virtual MAC address representing the cluster is given in the payload.
Page 885 NOTE: Use this option if you want multicast functionality in an L2 VLAN without IGMP protocols. For a multicast MAC address, enter the keyword output output interface then one of the following interfaces for which traffic is forwarded: • For a Port Channel interface, enter the keywords port- channel then a number.
Page 886: Ip Vlan-Flooding
ip vlan-flooding Enable unicast data traffic flooding on VLAN member ports. Syntax ip vlan-flooding To disable, use the no ip vlan-flooding command. Command CONFIGURATION Modes Command Version 9.3(0.0) Introduced on the MXL 10/40GbE Switch IO Module History platform. Default Disabled Usage By default this command is disabled.
Page 887: Multicast Source Discovery Protocol (Msdp)
Multicast Source Discovery Protocol (MSDP) Multicast source discovery protocol (MSDP) connects multiple PIM Sparse-Mode (PIM-SM) domains together. MSDP peers connect using TCP port 639. Peers send keepalives every 60 seconds. A peer connection is reset after 75 seconds if no MSDP packets are received. MSDP connections are parallel with MBGP connections.
Page 888: Clear Ip Msdp Statistic
local Enter the keyword local to clear out local PIM advertised entries. It applies the redistribute filter (if present) while adding the local PIM SA entries to the SA cache. Defaults Without any options, this command clears the entire source-active cache. Command EXEC Privilege Modes...
Page 889: Ip Msdp Cache-Rejected-Sa
Parameters event peer Enter the keyword event then the peer address in a dotted address decimal format (A.B.C.D.). packet peer Enter the keyword packet then the peer address in a dotted address decimal format (A.B.C.D.). Enter the keyword pim to debug advertisement from PIM. Defaults Not configured.
Page 890: Ip Msdp Log-Adjacency-Changes
Parameters peer address Enter the peer address in a dotted decimal format (A.B.C.D.) list name Enter the keywords list name and specify a standard access list that contains the RP address that should be treated as the default peer. If no access list is specified, then all SAs from the peer are accepted.
Page 891: Ip Msdp Originator-Id
Defaults Not configured. Command CONFIGURATION Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Usage An MSDP mesh group is a mechanism for reducing SA flooding, typically in an Information intra-domain setting. When some subset of a domain’s MSDP speakers are fully meshed, they can be configured into a mesh-group.
Page 892: Ip Msdp Peer
ip msdp peer Configure an MSDP peer. Syntax ip msdp peer peer address [connect-source] [description] [sa- limit number] To remove the MSDP peer, use the no ip msdp peer peer address [connect-source interface] [description name] [sa-limit number] command. Parameters peer address Enter the peer address in a dotted decimal format (A.B.C.D.).
Page 893: Ip Msdp Redistribute
Related ip msdp sa-limit — configures the MSDP SA Limit. Commands clear ip msdp peer — clears the MSDP peer. show ip msdp — displays the MSDP information. ip msdp redistribute Filter local PIM SA entries in the SA cache. SAs which the ACL denies time out and are not refreshed. Until they time out, they continue to reside in the MSDP SA cache.
Page 894: Ip Msdp Sa-Limit
peer-address Enter the peer address of the MSDP peer in a dotted decimal format (A.B.C.D.). access-list Enter the name of an extended ACL that contains permitted name SAs. If you do not use this option, all local entries are blocked. Defaults Not configured.
Page 895: Ip Msdp Shutdown
ip msdp shutdown Administratively shut down a configured MSDP peer. Syntax ip msdp shutdown {peer address} Parameters peer address Enter the peer address in a dotted decimal format (A.B.C.D.). Defaults Not configured. Command CONFIGURATION Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History ip multicast-msdp Enable MSDP.
Page 896: Show Ip Msdp Sa-Cache Rejected-Sa
Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell#show ip msdp peer 100.1.1.1 Peer Addr: 100.1.1.1 Local Addr: 100.1.1.2(639) Connect Source: none State: Established Up/Down Time: 00:00:08 Timers: KeepAlive 60 sec, Hold time 75 sec...
Page 897 00:00:13 225.1.2.14 10.1.1.4 110.1.1.1 13.1.1.2 Rpf-Fail 00:00:13 225.1.2.15 10.1.1.3 110.1.1.1 13.1.1.2 Rpf-Fail 00:00:13 225.1.2.16 10.1.1.4 110.1.1.1 13.1.1.2 Rpf-Fail 00:00:13 225.1.2.17 10.1.1.3 110.1.1.1 13.1.1.2 Rpf-Fail 00:00:13 225.1.2.18 10.1.1.4 110.1.1.1 13.1.1.2 Rpf-Fail 00:00:13 225.1.2.19 10.1.1.3 110.1.1.1 13.1.1.2 Rpf-Fail Dell# Multicast Source Discovery Protocol (MSDP)
Page 898: Multiple Spanning Tree Protocol (Mstp)
Multiple Spanning Tree Protocol (MSTP) Multiple spanning tree protocol (MSTP), as implemented by the Dell Networking Operating System (OS), conforms to IEEE 802.1s. debug spanning-tree mstp Enable debugging of the multiple spanning tree protocol and view information on the protocol.
Page 899: Description
Example Dell#debug spanning-tree mstp bpdu tengigabitethernet 0/16 ? in Receive (in) out Transmit (out) Dell# description Enter a description of the multiple spanning tree. Syntax description {description} To remove the description, use the no description {description} command. Parameters description Enter a description to identify the multiple spanning tree (maximum 80 characters).
Page 900: Disable
disable Enable bridge protocol data units (BPDU) filter globally to filter transmission of BPDU on port-fast enabled interfaces. Syntax edge-port bpdufilter default To disable global bpdu filter default, use the no edge-port bpdufilter default command. Defaults disabled. Command MULTIPLE SPANNING TREE Modes Command Version 8.3.16.1...
Page 901: Hello-Time
hello-time Set the time interval between generation of MSTB bridge protocol data units (BPDUs). Syntax hello-time seconds To return to the default value, use the no hello-time command. Parameters seconds Enter a number as the time interval between transmission of BPDUs.
Page 902: Max-Hops
hello-time — changes the time interval between BPDUs. max-hops Configure the maximum hop count. Syntax max-hops number To return to the default values, use the no max-hops command. Parameters range Enter a number for the maximum hop count. The range is from 1 to 40.
Page 903: Name
Valid priority values are: 0, 4096, 8192, 12288, 16384, 20480, 24576, 28672, 32768, 36864, 40960, 45056, 49152, 53248, 57344, and 61440. All other values are rejected. Defaults default bridge-priority is 32768. Command INTERFACE Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Usage By default, all VLANs are mapped to MST instance zero (0) unless you use the vlan...
Page 904: Protocol Spanning-Tree Mstp
MSTP is not enabled when you enter MULTIPLE SPANNING TREE mode. To enable Information MSTP globally on the switch, enter the no disable command while in MULTIPLE SPANNING TREE mode. For more information about the multiple spanning tree protocol, refer to the Dell Networking OS Configuration Guide. Example Dell(conf)#protocol spanning-tree mstp...
Page 905: Show Config
Introduced on the MXL 10/40GbE Switch IO Module. History Usage Enable the multiple spanning tree protocol prior to using this command. Information Example Dell#show spanning-tree mst configuration MST region name: CustomerSvc Revision: 2 MSTI VID Multiple Spanning Tree Protocol (MSTP)
Page 906: Show Spanning-Tree Msti
Usage Enable the multiple spanning tree protocol prior to using this command. Information Example Dell#show spanning-tree msti 0 brief MSTI 0 VLANs mapped 1-4094 Executing IEEE compatible Spanning Tree Protocol Root ID Priority 32768, Address 0001.e800.0204 Root Bridge hello time 2, max age 20, forward delay 15, max hops 20 Bridge ID Priority 32768, Address 0001.e800.0204...
Page 907 Dell# Example (EDS The bold line shows the loopback BPDU inconsistency (LBK_INC). and LBK) Dell#show spanning-tree msti 0 brief MSTI 0 VLANs mapped 1-4094 Executing IEEE compatible Spanning Tree Protocol Root ID Priority 32768, Address 0001.e801.6aa8 Root Bridge hello time 2, max age 20, forward delay 15, max hops 20 Bridge ID Priority 32768, Address 0001.e801.6aa8...
Page 908: Spanning-Tree
(FWD), listening (LIS), blocking (BLK), or shut down (EDS Shut). Guard Type Type of STP guard configured (Root, Loop, or BPDU guard). Example Dell#show spanning-tree msti 0 guard (Guard) Executing IEEE compatible Spanning Tree Protocol Bpdu filter disabled globally Interface...
Page 909: Spanning-Tree Msti
spanning-tree msti Configure multiple spanning tree instance cost and priority for an interface. Syntax spanning-tree msti instance {cost cost | priority priority} Parameters msti instance Enter the keyword msti and the MST instance number. The range is from zero (0) to 63. cost cost (OPTIONAL) Enter the keyword cost then the port cost value.
Page 910: Tc-Flush-Standard
bpdufilter (OPTIONAL) Enter the keyword edgeport to enable edge port configuration to move the interface into forwarding mode immediately after the root fails. Enter the keyword bpdufilter to stop sending and receiving BPDUs on the port-fast enabled ports. shutdown-on- (OPTIONAL) Enter the keywords shutdown-on-violation violation to hardware disable an interface when a BPDU is received and the port is disabled.
Page 911 Defaults Disabled. Command CONFIGURATION Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Usage By default, the sytem implements an optimized flush mechanism for MSTP. This Information mechanism helps in flushing the MAC addresses only when necessary (and less often) allowing for faster convergence during topology changes.
Page 912: Multicast
Multicast The multicast commands are supported by Dell Networking Operating System (OS). This chapter contains the following sections: • IPv4 Multicast Commands • IPv6 Multicast Commands IPv4 Multicast Commands The following section contains the IPv4 multicast commands. clear ip mroute Clear learned multicast routes on the multicast forwarding table.
Page 913: Ip Mroute
ip mroute Assign a static mroute. Syntax ip mroute destination mask {ip-address | null 0| {{bgp| ospf} process-id | isis | rip | static} {ip-address | tag | null 0}} [distance] To delete a specific static mroute, use the ip mroute destination mask {ip- address | null 0| {{bgp| ospf} process-id | isis | rip | static} {ip-address | tag | null 0}} [distance] command.
Page 914: Ip Multicast-Limit
Related show ip mroute — views the multicast routing table. Commands ip multicast-limit To limit the number of multicast entries on the system, use this feature. Syntax ip multicast-limit limit Parameters limit Enter the desired maximum number of multicast entries on the system.
Page 915: Show Ip Mroute
Usage After you enable multicast, you can enable IGMP and PIM on an interface. In Information INTERFACE mode, enter the ip pim sparse-mode command to enable IGMP and PIM on the interface. Related ip pim sparse-mode — enables IGMP and PIM on an interface. Commands show ip mroute View the multicast routing table.
Page 916 EXEC Privilege Command Version 9.2. Introduced on the MXL 10/40GbE Switch IO Module. History (0.0) Example Dell#show ip mroute static (Static) Mroute: 23.23.23.0/24, interface: Lo 2 Protocol: static, distance: 0, route-map: none, last change: 00:00:23 Example Dell#show ip mroute snooping...
Page 917: Show Ip Rpf
Group • statically configured member of the Group • received a (*,G) or (S,G) Join message Example Dell#show ip mroute IP Multicast Routing Table (*, 224.10.10.1), uptime 00:05:12 Incoming interface: GigabitEthernet 3/12 Outgoing interface list: GigabitEthernet 3/13 (1.13.1.100, 224.10.10.1), uptime 00:04:03...
Page 918: Ipv6 Multicast Commands
PIM selects for reach-ability. NOTE: The default distance of mroutes is zero (0) and is CLI configurable on a per route basis. Example Dell#show ip rpf RPF information for 10.10.10.9 RPF interface: Gi 3/4 RPF neighbor: 165.87.31.4 RPF route/mask: 10.10.10.9/255.255.255.255...
Page 919: Ip Multicast-Limit
Command EXEC Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Usage To debug the MLD protocol for all ports or for specified ports, use the debug Information ipv6 mld_host command. Displayed information includes when a query is received, when a report is sent, when a mcast joins or leaves a group, and some reasons why an MLD query is rejected.
Page 920: Neighbor Discovery Protocol (Ndp)
Neighbor Discovery Protocol (NDP) The Dell Networking Operating System (OS) supports the network discovery protocol for IPv6. The neighbor discovery protocol for IPv6 is defined in RFC 2461 as part of the Stateless Address Autoconfiguration protocol. It replaces the Address Resolution Protocol used with IPv4. NDP defines mechanisms for solving the following problems: •...
Page 921: Ipv6 Neighbor
• For a Fast Ethernet interface, enter the keyword fastEthernet then the slot/port information. • For a Port Channel interface, enter the keywords port- channel then a number. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information. •...
Page 922: Show Ipv6 Neighbors
hardware_addr Enter a 48-bit hardware MAC address in nn:nn:nn:nn:nn:nn format. Defaults none Command CONFIGURATION Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History show ipv6 neighbors Display IPv6 discovery information. Entering the command without options shows all IPv6 neighbor addresses stored on the control processor (CP).
Page 923 Example Dell# show ipv6 neighbors IPv6 Address Expires(min) Hardware Address State Interface VLAN --------------------------------------------------------------- -------------------------------------------------------- 100::1 0.03 00:00:00:00:00:22 DELAY Te 0/12 fe80::200:ff:fe00:22 00:00:00:00:00:22 STALE Te 0/12 500::1 0.60 00:01:e8:17:5c:af REACH Te 0/13 fe80::200:ff:fe00:17 00:00:00:00:00:29 REACH Te 0/14 900::1 0.60 00:01:e8:17:5c:b1...
Page 924: Open Shortest Path First (Ospfv2 And Ospfv3)
OSPFv2 process only. OSPFv2 Commands The Dell Networking implementation of OSPFv2 is based on IETF RFC 2328. area default-cost Set the metric for the summary default route the area border router (ABR) generates into the stub area.
Page 925: Area Nssa
ROUTER OSPF Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Usage In the Dell Networking operating software, cost is defined as reference bandwidth. Information Related area stub — creates a stub area. Commands area nssa Specify an area as a not so stubby area (NSSA).
Page 926: Area Range
area range Summarize routes matching an address/mask at an area border router (ABR). Syntax area area-id range ip-address mask [not-advertise] To disable route summarization, use the no area area-id range ip-address mask command. Parameters area-id Specify the OSPF area in dotted decimal format (A.B.C.D.) or enter a number from zero (0) to 65535.
Page 927: Auto-Cost
Defaults Disabled. Command ROUTER OSPF Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Usage To configure all routers and access servers within a stub, use this command. Information Related router ospf — enters ROUTER OSPF mode to configure an OSPF instance. Commands auto-cost Specify how the OSPF interface cost is calculated based on the reference bandwidth method.
Page 928: Clear Ip Ospf Statistics
Command EXEC Privilege Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History clear ip ospf statistics Clear the packet statistics in interfaces and neighbors. Syntax clear ip ospf process-id statistics [interface name {neighbor router-id}] Parameters process-id Enter the OSPF Process ID to clear a specific process.
Page 929: Debug Ip Ospf
debug ip ospf Display debug information on OSPF. Entering the debug ip ospf commands enables OSPF debugging for the first OSPF process. Syntax debug ip ospf process-id [bfd |event | packet | spf | database- timer rate-limit] To cancel the debug command, use the no debug ip ospf command. Parameters process-id Enter the OSPF Process ID to clear a specific process.
Page 930 Field Description rid: Displays the OSPF router ID. aid: Displays the Autonomous System ID. chk: Displays the OSPF checksum. aut: States if OSPF authentication is configured. One of the following is listed: • 0 - no authentication configured • 1 - simple authentication configured using the ip ospf authentication-key command •...
Page 931: Default-Information Originate
Example Dell#debug ip ospf 1 packet OSPF process 90, packet debugging is on Dell# 08:14:24 : OSPF(100:00): Xmt. v:2 t:1(HELLO) l:44 rid:192.1.1.1 aid:0.0.0.1 chk:0xa098 aut:0 auk: keyid:0 to:Gi 4/3 dst: 224.0.0.5 netmask:255.255.255.0 pri:1 N-, MC-, E+, T-, hi:10 di:40 dr:90.1.1.1 bdr:0.0.0.0 default-information originate To generate a default external route into an OSPF routing domain, configure the system.
Page 932: Default-Metric
default-metric Change the metrics of redistributed routes to a value useful to OSPF. Use this command with the redistribute command. Syntax default-metric number To return to the default values, use the no default-metric [number] command. Parameters number Enter a number as the metric. The range is from 1 to 16777214.
Page 933: Distance
distance Define an administrative distance for particular routes to a specific IP address. Syntax distance weight [ip-address mask access-list-name] To delete the settings, use the no distance weight [ip-address mask access-list-name] command. Parameters weight Specify an administrative distance. The range is from 1 to 255.
Page 934: Distribute-List In
Defaults • external dist3 = 110 • inter-area dist2 = 110 • intra-area dist1 = 110 Command ROUTER OSPF Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Usage To specify a distance for routes learned from other routing domains, use the Information redistribute command.
Page 935: Distribute-List Out
distribute-list out To restrict certain routes destined for the local routing table after the SPF calculation, apply a filter. Syntax distribute-list prefix-list-name out [bgp | connected | isis | rip | static] To remove a filter, use the no distribute-list prefix-list-name out [bgp | connected | isis | rip | static] command.
Page 936: Flood-2328
This behavior impacts CPU utilization and may impact adjacency stability in larger topologies. Generally, convergence level 1 meets most convergence requirements. Higher convergence levels should only be selected following consultation with Dell Networking technical support. flood-2328 Enable RFC-2328 flooding behavior.
Page 937: Graceful-Restart Grace-Period
graceful-restart grace-period Specifies the time duration, in seconds, that the router’s neighbors continue to advertise the router as fully adjacent regardless of the synchronization state during a graceful restart. Syntax graceful-restart grace-period seconds To disable the grace period, use the no graceful-restart grace-period command.
Page 938: Graceful-Restart Mode
graceful-restart mode Enable the graceful restart mode. Syntax graceful-restart mode [planned-only | unplanned-only] To disable graceful restart mode, use the no graceful-restart mode command. Parameters planned-only (OPTIONAL) Enter the keywords planned-only to indicate graceful restart is supported in a planned restart condition only.
Page 939: Ip Ospf Auth-Change-Wait-Time
ip ospf auth-change-wait-time OSPF provides a grace period while OSPF changes its interface authentication type. During the grace period, OSPF sends out packets with new and old authentication scheme until the grace period expires. Syntax ip ospf auth-change-wait-time seconds To return to the default, use the no ip ospf auth-change-wait-time command.
Page 940: Ip Ospf Cost
ip ospf cost Change the cost associated with the OSPF traffic on an interface. Syntax ip ospf cost cost To return to default value, use the no ip ospf cost command. Parameters cost Enter a number as the cost. The range is from 1 to 65535. Defaults The default cost is based on the reference bandwidth.
Page 941: Ip Ospf Hello-Interval
Related ip ospf hello-interval — sets the time interval between the hello packets. Commands ip ospf hello-interval Specify the time interval between the hello packets sent on the interface. Syntax ip ospf hello-interval seconds To return to the default value, use the no ip ospf hello-interval command. Parameters seconds Enter the number of seconds for the interval.
Page 942: Ip Ospf Mtu-Ignore
After the reply is received and the new key is authenticated, delete the old key. Dell recommends keeping only one key per interface.
Page 943: Ip Ospf Priority
Defaults Not configured. Command ROUTER OSPF Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History ip ospf priority To determine the designated router for the OSPF network, set the priority of the interface. Syntax ip ospf priority number To return to the default setting, use the no ip ospf priority command.
Page 944: Ip Ospf Transmit-Delay
This interval must be greater than the expected round-trip time for a packet to travel between two routers. Defaults 5 seconds Command INTERFACE Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Usage Set the time interval to a number large enough to prevent unnecessary Information retransmissions.
Page 945: Maximum-Paths
Defaults Disabled. Command ROUTER OSPF Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History maximum-paths Enable the software to forward packets over multiple paths. Syntax maximum-paths number To disable packet forwarding over multiple paths, use the no maximum-paths command.
Page 946: Network Area
Usage This command is either enabled or disabled. If no OSPF process is identified as the Information MIB manager, the first OSPF process is used. If an OSPF process has been selected, it must be disabled prior to assigning new process ID the MIB responsibility.
Page 947: Passive-Interface
passive-interface Suppress both receiving and sending routing updates on an interface. Syntax passive-interface {default | interface} To enable both the receiving and sending routing, use the no passive- interface interface command. To return all OSPF interfaces (current and future) to active, use the no passive- interface default command.
Page 948: Redistribute
• The ABR status for the router is updated. • Save passive-interface interface into the running configuration. passive-interface default • All present and future OSPF interfaces are marked as passive. • Any adjacency is explicitly terminated from all OSPF interfaces. •...
Page 949: Redistribute Bgp
• 1 = OSPF External type 1 • 2 = OSPF External type 2 route-map (OPTIONAL) Enter the keywords route-map then the name map-name of the route map. tag tag-value (OPTIONAL) Enter the keyword tag then a number. The range is from 0 to 4294967295. Defaults Not configured.
Page 950: Redistribute Isis
Command ROUTER OSPF Modes Command Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History redistribute isis Redistribute IS-IS routing information throughout the OSPF instance. Syntax redistribute isis [tag] [level-1 | level-1-2 | level-2] [metric metric-value | metric-type type-value] [route-map map-name] [tag tag-value] To disable redistribution, use the no redistribute isis [tag] [level-1 | level-1-2 | level-2] [metric metric-value | metric-type type-...
Page 951: Router-Id
(that is, has neighbors), a prompt reminding you that changing the router-id brings down the existing OSPF adjacency. The new router ID is effective at the next reload. Example Dell(conf)#router ospf 100 Dell(conf-router_ospf)#router-id 1.1.1.1 Changing router-id will bring down existing OSPF adjacency [y/ Dell(conf-router_ospf)#show config router ospf 100 router-id 1.1.1.1...
Page 952: Show Config
History Usage You must have an IP address assigned to an interface to enter ROUTER OSPF mode Information and configure OSPF. Example Dell(conf)#router ospf 2 Dell(conf-router_ospf)# show config Display the non-default values in the current OSPF configuration. Syntax show config...
Page 953: Show Ip Ospf Asbr
Displays the number and type of areas configured for this process ID. Example Dell#show ip ospf 10 Routing Process ospf 10 with ID 1.1.1.1 Virtual router default- Supports only single TOS (TOS0) routes SPF schedule delay 5 secs, Hold time between two SPFs 10 secs...
Page 954: Show Ip Ospf Database
For ASBRs in a directly connected area, E flags are set. In the following example, router 1.1.1.1 is in a directly connected area since the Flag is E/-/-/. For remote ASBRs, the E flag is clear (-/-/-/). Example Dell#show ip ospf 1asbr RouterID Flags Cost Nexthop Interface Area 3.3.3.3...
Page 955 Displays the Fletcher checksum of an LSA’s complete contents. Link count Displays the number of interfaces for that router. Example Dell>show ip ospf 1 database OSPF Router with ID (11.1.2.1) (Process ID 1) Router (Area 0.0.0.0) Link ID ADV Router...
Page 956: Show Ip Ospf Database Asbr-Summary
Related show ip ospf database asbr-summary — displays only ASBR summary LSA Commands information. show ip ospf database asbr-summary Display information about autonomous system (AS) boundary LSAs. Syntax show ip ospf process-id database asbr-summary [link-state-id] [adv-router ip-address] Parameters process-id Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process.
Page 957 Displays the Type of Service (TOS) options. Option 0 is the only option. Metric Displays the LSA metric. Example Dell#show ip ospf 100 database asbr-summary OSPF Router with ID (1.1.1.10) (Process ID 100) Summary Asbr (Area 0.0.0.0) LS age: 1437 Options: (No TOS-capability, No DC, E) LS type: Summary Asbr Link State ID: 103.1.50.1...
Page 958: Show Ip Ospf Database External
show ip ospf database external Display information on the AS external (type 5) LSAs. Syntax show ip ospf process-id database external [link-state-id] [adv- router ip-address] Parameters process-id Enter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process.
Page 959 Displays the 32-bit field attached to each external route. The OSPF protocol does not use this field, but you can use the field for external route management. Example Dell#show ip ospf 1 database external OSPF Router with ID (20.20.20.5) (Process ID 1) Type-5 AS External LS age: 612...
Page 960: Show Ip Ospf Database Network
Forward Address: 0.0.0.0 External Route Tag: 701 Dell# Related show ip ospf database — displays OSPF database information. Commands show ip ospf database network Display the network (type 2) LSA information. Syntax show ip ospf process-id database network [link-state-id] [adv-...
Page 961 Displays the length in bytes of the LSA. Attached Router Identifies the IP address of routers attached to the network. Example Dell#show ip ospf 1 data network OSPF Router with ID (20.20.20.5) (Process ID 1) Network (Area 0.0.0.0) LS age: 1372...
Page 962: Show Ip Ospf Database Nssa-External
show ip ospf database nssa-external Display NSSA-External (type 7) LSA information. Syntax show ip ospf database nssa-external [link-state-id] [adv-router ip-address] Parameters link-state-id (OPTIONAL) Specify LSA ID in dotted decimal format. The LSA ID value depends on the LSA type, and it can be one of the following: •...
Page 963 Opaque ID Displays the Opaque type-specific ID (the remaining 24 bits of the Link State ID). Example Dell>show ip ospf 1 database opaque-area OSPF Router with ID (3.3.3.3) (Process ID 1) Type-10 Opaque Link Area (Area 0) LS age: 1133...
Page 964: Show Ip Ospf Database Opaque-As
Checksum: 0x376 Length: 28 Opaque Type: 1 Opaque ID: 1 Unable to display opaque data LS age: 833 Options: (No TOS-capability, No DC, E) LS type: Type-10 Opaque Link Area Link State ID: 1.0.0.2 Advertising Router: 10.16.1.160 LS Seq Number: 0x80000002 Checksum: 0x19c2 --More-- Related...
Page 965: Show Ip Ospf Database Opaque-Link
show ip ospf database opaque-link Display the opaque-link (type 9) LSA information. Syntax show ip ospf process-id database opaque-link [link-state-id] [adv-router ip-address] Parameters process-id Enter the OSPF process ID to show a specific process. If you do not enter the process ID, the command applies only to the first OSPF process.
Page 966 • the network’s IP address for Type 3 LSAs or Type 5 LSAs • the router’s OSPF router ID for Type 1 LSAs or Type 4 LSAs • the default destination (0.0.0.0) for Type 5 LSAs adv-router ip- (OPTIONAL) Enter the keywords adv-router then the IP address address of an Advertising Router to display only the LSA information about that router.
Page 967 Lists the number of TOS metrics. Metric TOS 0 Metric Lists the number of TOS 0 metrics. Example Dell#show ip ospf 100 database router OSPF Router with ID (1.1.1.10) (Process ID 100) Router (Area 0) LS age: 967 Options: (No TOS-capability, No DC, E) LS type: Router Link State ID: 1.1.1.10...
Page 968: Show Ip Ospf Database Summary
Related show ip ospf database — displays OSPF database information. Commands show ip ospf database summary Display the network summary (type 3) LSA routing information. Syntax show ip ospf process-id database summary [link-state-id] [adv- router ip-address] Parameters process-id Enter the OSPF process ID to show a specific process. If you do not enter a process ID, the command applies only to the first OSPF process.
Page 969 Item Description • E or No E is displayed on whether the originating router can accept AS External LSAs. LS Type Displays the LSA type. Link State ID Displays the Link State ID. Advertising Router Identifies the router ID of the LSA’s originating router. LS Seq Number Displays the link state sequence number.
Page 970: Show Ip Ospf Interface
Related show ip ospf database — displays OSPF database information. Commands show ip ospf interface Display the OSPF interfaces configured. If OSPF is not enabled on the switch, no output is generated. Syntax show ip ospf process-id interface [interface] Parameters process-id Enter the OSPF process ID to show a specific process.
Page 971 This line displays the number of neighbors and adjacent neighbors. Listed below this line are the details about each adjacent neighbor. Example Dell>show ip ospf int TenGigabitEthernet 13/17 is up, line protocol is up Internet Address 192.168.1.2/30, Area 0.0.0.1 Process ID 1, Router ID 192.168.253.2, Network Type...
Page 972: Show Ip Ospf Neighbor
Displays the IP address of the neighbor. Interface Displays the interface type slot/port information. Area Displays the neighbor’s area (process ID). Example Dell#show ip ospf 34 neighbor Neighbor ID Pri State Dead Time Address Interface Area 20.20.20.7 1 FULL/DR 00:00:32 182.10.10.3 Gi 0/0 0.0.0.2 192.10.10.2 1 FULL/DR...
Page 973: Show Ip Ospf Routes
• The display output is sorted by prefixes; intra-area ECMP routes are not displayed together. • For Type 2 external routes, Type 1 cost is not displayed. Example Dell#show ip ospf 100 route Prefix Cost Nexthop Interface Area Type 1.1.1.1 0.0.0.0...
Page 974 global Enter the keyword global to display the packet counts received on all running OSPF interfaces and packet counts OSPF neighbors receive and transmit. interface name (OPTIONAL) Enter the keyword interface then one of the following interface keywords and slot/port or number information: •...
Page 975 A sequence no errors occurred during the database exchange process. Socket Socket Read/Write operation error. Q-overflow Packets dropped due to queue overflow. Unknown-Pkt Received packet is not an OSPF packet. Example Dell#show ip ospf 10 statistics global OSPF Packet Count Open Shortest Path First (OSPFv2 and OSPFv3)
Page 976 • The LSU Q length and its highest mark for each neighbor • The LSR Q length and its highest mark for each neighbor Example Dell#show ip ospf 10 statistics (Statistics) Interface TenGigabitEthernet 4/45 Error packets (Receive statistics) Intf-Down 0 Non-Dr...
Page 977: Show Ip Ospf Timers Rate-Limit
Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. History Example Dell#show ip ospf 10 timers rate-limit List of LSAs in rate limit Queue LSA id: 1.1.1.0 Type: 3 Adv Rtid: 3.3.3.3 Expiry time: 00:00:09.111 LSA id: 3.3.3.3 Type: 1 Adv Rtid: 3.3.3.3 Expiry time: 00:00:23.96...
Page 978: Summary-Address
If an inter-area or external route is not of correct cost, the display can determine if the path to the originating router is correct or not. Example Dell#show ip ospf 1 topology Router ID Flags Cost...
Page 979: Timers Spf
to OSPF, but you don't want OSPF to advertise routes with prefix 1.1.0.0, you can configure the summary-address 1.1.0.0 255.255.0.0 not-advertise to filter out all the routes fall in range 1.1.0.0/16. Related area range — summarizes routes within an area. Commands timers spf Set the time interval between when the switch receives a topology change and starts a shortest path first...
Page 980: Timers Throttle Lsa Arrival
hold-interval Set the next interval to send the same LSA. This interval is the time between sending the same LSA after the start-interval has been attempted. The range is from 1 to 600,000 milliseconds. max-interval Set the maximum amount of time the system waits before sending the LSA.
Page 981: Ospfv3 Commands
However, OSPFv3 runs on a per-link basis instead of on a per-IP-subnet basis. Most changes were necessary to handle the increased address size of IPv6. The Dell Networking implementation of OSPFv3 is based on IETF RFC 2740. area authentication Configure an IPsec authentication policy for OSPFv3 packets in an OFSPFv3 area.
Page 982: Area Encryption
Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Usage Before you enable IPsec authentication on an OSPFv3 area, you must first enable Information OSPFv3 globally on the router. Configure the same authentication policy (same SPI and key) on each interface in an OSPFv3 link. An SPI number must be unique to one IPsec security policy (authentication or encryption) on the router.
Page 983 key- (OPTIONAL) Specifies if the key is encrypted. encryption- algorithm Valid values: 0 (key is not encrypted) or 7 (key is encrypted). Text string used in encryption. The required lengths of a non-encrypted or encrypted key are: 3DES - 48 or 96 hex digits; DES - 16 or 32 hex digits; AES- CBC -32 or 64 hex digits for AES-128 and 48 or 96 hex digits for AES-192.
Page 984: Clear Ipv6 Ospf Process
you enable authentication on an area with the area authentication command, you do not enable encryption at the same time. If you have enabled IPsec authentication in an OSPFv3 area with the area authentication command, you cannot use the area encryption command in the area at the same time.
Page 985 Sending Ver:3 Sending OSPF3 version.. Example Dell(conf-if-te-0/2)#do debug ipv6 ospf bfd te 0/2 OSPFv3 bfd related debugging is on for TenGigabitEthernet 0/2 00:59:26 : OSPFv3INFO: Received Interface mode bfd config command on interface Te 0/2 Enable 1, interval 0, min_rx 0,...
Page 986: Debug Ipv6 Ospf
debug ipv6 ospf Display debug information and interface types on OSPF IPv6 packets or events. Syntax debug ipv6 ospf {packet | events} [interface] Parameters interface (OPTIONAL) Enter one of the following keywords and slot/ port or number information: • For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet then the slot/port information.
Page 987: Graceful-Restart Grace-Period
• 1 = Type 1 external route • 2 = Type 2 external route route-map (OPTIONAL) Enter the keywords route-map then the name map-name of an established route map. Defaults Disabled. Command ROUTER OSPFv3 Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History graceful-restart grace-period Enable OSPFv3 graceful restart globally by setting the grace period (in seconds) that an OSPFv3 router’s...
Page 988: Graceful-Restart Mode
function in a “restarting-only” role. In a “restarting-only” role, OSPFv3 does not participate in the graceful restart of a neighbor. graceful-restart mode Specify the type of events that trigger an OSPFv3 graceful restart. Syntax graceful-restart mode {planned-only | unplanned-only} To disable graceful restart mode, enter no graceful-restart mode. Parameters planned-only (OPTIONAL) Enter the keywords planned-only to indicate...
Page 989: Ipv6 Ospf Area
ipv6 ospf area Enable IPv6 OSPF on an interface. Syntax ipv6 ospf process id area area id To disable OSPFv6 routing for an interface, use the no ipv6 ospf process-id area area-id command. Parameters process-id Enter the process identification number. area area-id Specify the OSPF area.
Page 990: Ipv6 Ospf Bfd All-Neighbors
For MD5 authentication, the key must be 32 hex digits (non- encrypted) or 64 hex digits (encrypted). For SHA-1 authentication, the key must be 40 hex digits (non-encrypted) or 80 hex digits (encrypted). Defaults Not configured. Command INTERFACE Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
Page 991: Ipv6 Ospf Cost
role [active | Enter the role that the local system assumes: passive] • active — The active system initiates the BFD session. Both systems can be active for the same session. • passive — The passive system does not initiate a session. It only responds to a request for session initialization from the active system.
Page 992: Ipv6 Ospf Dead-Interval
Using this formula, the default path cost is calculated as: • GigabitEthernet—Default cost is 1 • TenGigabitEthernet—Default cost is 1 • FortygigEthernet — Default cost is 1 • Ethernet—Default cost is 10 ipv6 ospf dead-interval Set the time interval since the last hello-packet was received from a router. After the time interval elapses, the neighboring routers declare the router down.
Page 993 Parameters null Causes an encryption policy configured for the area to not be inherited on the interface. ipsec spi Security Policy index (SPI) value that identifies an IPsec number security policy. The range is from 256 to 4294967295. Encryption algorithm used with ESP. encryption- algorithm Valid values are: 3DES, DES, AES-CBC, and NULL.
Page 994: Ipv6 Ospf Graceful-Restart Helper-Reject
Usage Before you enable IPsec encryption on an OSPFv3 interface, first enable IPv6 Information unicast routing globally, configure an IPv6 address and enable OSPFv3 on the interface, and assign the interface to an area. An SPI value must be unique to one IPsec security policy (authentication or encryption) on the router.
Page 995: Ipv6 Ospf Priority
Defaults 10 seconds (Ethernet). Command INTERFACE Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History Usage The time interval between hello packets must be the same for routers in a network. Information ipv6 ospf priority To determine the Designated Router for the OSPFv3 network, set the priority of the interface. Syntax ipv6 ospf priority number To return to the default time interval, use the no ipv6 ospf priority...
Page 996: Maximum-Paths
Parameters process-id Enter the process identification number. The range is from 1 to 65535. Defaults none Command CONFIGURATION Modes Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module. History maximum-paths Enable the software to forward packets over multiple paths. Syntax maximum-paths number To disable packet forwarding over multiple paths, use the no maximum-paths...
Page 997: Redistribute
Parameters Default Enter the keyword default to make all OSPF interfaces (current and future) passive. interface Enter the following keywords and slot/port or number information: • For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information. • For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then the slot/port information.
Page 998 Parameters bgp as number Enter the keyword bgp then the autonomous system number. The range is from 1 to 65535. connected Enter the keyword connected to redistribute routes from physically connected interfaces. static Enter the keyword static to redistribute manually configured routes.
Page 999: Router-Id
If this command is used on an OSPFv3 process that is already active (has neighbors), all the neighbor adjacencies are brought down immediately and new sessions are initiated with the new router ID. Example Dell(conf)#router ospf 100 Dell(conf-router_ospf)#router-id 1.1.1.1 Changing router-id will bring down existing OSPF adjacency [y/ Dell(conf-router_ospf)#show config router ospf 100 router-id 1.1.1.1...
Page 1000: Show Crypto Ipsec Policy
show crypto ipsec policy Display the configuration of IPsec authentication and encryption policies. Syntax show crypto ipsec policy [name name] Parameters name name (OPTIONAL) Displays configuration details about a specified policy. Defaults none Command EXEC Modes EXEC Privilege Command Version 9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.

This manual is also suitable for:

Mxl 40gbe

Dell MXL 10GbE Reference Manual

1 About this Guide

151 CLI Basics

3 File Management

4 Control and Monitoring

5 802.1X

6 Access Control Lists (ACL)

7 Access Control List (ACL) VLAN Groups and Content Addressable

8 Bidirectional Forwarding Detection (BFD)

9 Border Gateway Protocol Ipv4 (Bgpv4)

10 Content Addressable Memory (CAM)

11 Control Plane Policing (Copp)

13 Debugging and Diagnostics

Quick Links

Related Manuals for Dell MXL 10GbE

Summary of Contents for Dell MXL 10GbE