- Table of Contents
-
- H3C S6116 Ultra-Low Latency Switch Series Command References-Release 671x-6W101
- 00-Preface
- 01-Interface forwarding commands
- 02-CLI commands
- 03-RBAC commands
- 04-Login management commands
- 05-FTP and TFTP commands
- 06-File system management commands
- 07-Configuration file management commands
- 08-Software upgrade commands
- 09-Device management commands
- 10-Tcl commands
- 11-Bulk interface commands
- 12-IP addressing commands
- 13-IPv6 basics commands
- 14-Static routing commands
- 15-IPv6 static routing commands
- 16-AAA commands
- 17-Public key management commands
- 18-SSH commands
- 19-System maintenance and debugging commands
- 20-NTP commands
- 21-SNMP commands
- 22-RMON commands
- 23-Event MIB commands
- 24-Information center commands
- 25-PTP commands
- 26-Network synchronization commands
- Related Documents
-
Title | Size | Download |
---|---|---|
13-IPv6 basics commands | 398.17 KB |
Contents
IPv6 basics commands
Only the management Ethernet interfaces of this series support the IPv6 feature.
display ipv6 fib
Use display ipv6 fib to display IPv6 FIB entries.
Syntax
display ipv6 fib [ ipv6-address [ prefix-length ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
ipv6-address: Displays IPv6 FIB entries for a destination IPv6 address. If you do not specify an IPv6 address, this command displays all IPv6 FIB entries.
prefix-length: Specifies a prefix length for the IPv6 address, in the range of 0 to 128. If you do not specify the prefix length, this command displays the IPv6 FIB entry longest matching the IPv6 address.
Examples
# Display all IPv6 FIB entries for the public network.
<Sysname> display ipv6 fib
Destination count: 1 FIB entry count: 1
Flag:
U:Usable G:Gateway H:Host B:Blackhole D:Dynamic S:Static
R:Relay F:FRR
Destination: ::1 Prefix length: 128
Nexthop : ::1 Flags: UH
Time stamp : 0x1 Label: Null
Interface : InLoop0 Token: Invalid
Table 1 Command output
Field |
Description |
Destination count |
Total number of destination addresses. |
FIB entry count |
Total number of IPv6 FIB entries. |
Destination |
Destination address. |
Prefix length |
Prefix length of the destination address. |
Nexthop |
Next hop address. |
Flags |
Route flag: · U—Usable route. · G—Gateway route. · H—Host route. · B—Black hole route. · D—Dynamic route. · S—Static route. · R—Recursive route. · F—Fast re-route. |
Time stamp |
Time when the IPv6 FIB entry was generated. |
Label |
Inner MPLS label. For IPv6 FIB entries for the public network, this field displays Null. |
Interface |
Outgoing interface. |
Token |
Label switched path index number. |
display ipv6 fib usage
Use display ipv6 fib usage to display the IPv6 FIB table usage.
Syntax
display ipv6 fib usage
Views
Any view
Predefined user roles
network-admin
network-operator
Usage guidelines
You can view the FIB table usage in the most recent hour.
The IPv6 FIB entries that are deployed by ND host routes are not counted in the IPv6 FIB table usage.
The device counts multiple IPv6 FIB entries as one FIB entry if they are deployed by equal-cost routes that have the same destination IPv6 address and different next hops.
Examples
# Display the IPv6 FIB table usage.
<Sysname> display ipv6 fib usage
IPv6 FIB table upper limit: 65000
Time IPv6 FIB count Usage
Current 52000 80%
1 min ago 51351 79%
2 min ago 50711 78%
3 min ago 47748 77%
…
59 min ago 13656 21%
60 min ago 13007 20%
Table 2 Command output
Field |
Description |
IPv6 FIB table upper limit |
Maximum number of entries supported by the IPv6 FIB table. |
Time |
Time when the IPv6 FIB table usage was recorded. |
IPv6 FIB count |
Number of IPv6 FIB entries. |
Usage |
Usage of IPv6 FIB entries, which is the ratio of the real-time IPv6 FIB entry count to the IPv6 FIB table upper limit. |
Related commands
display ipv6 fib
display ipv6 icmp statistics
Use display ipv6 icmp statistics to display ICMPv6 packet statistics.
Syntax
display ipv6 icmp statistics [ slot slot-number ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
slot slot-number: Specifies the slot number of the device, which is fixed at 1.
Examples
# Display ICMPv6 packet statistics.
<Sysname> display ipv6 icmp statistics
Input: bad code 0 too short 0
checksum error 0 bad length 0
path MTU changed 0 destination unreachable 0
too big 0 parameter problem 0
echo request 0 echo reply 0
neighbor solicit 0 neighbor advertisement 0
router solicit 0 router advertisement 0
redirect 0 router renumbering 0
output: parameter problem 0 echo request 0
echo reply 0 unreachable no route 0
unreachable admin 0 unreachable beyond scope 0
unreachable address 0 unreachable no port 0
too big 0 time exceed transit 0
time exceed reassembly 0 redirect 0
ratelimited 0 other errors 0
Table 3 Command output
Field |
Description |
bad code |
Number of received packets with error codes. |
too short |
Number of received packets with the length too short. |
checksum error |
Number of received packets with checksum errors. |
bad length |
Number of received packets with incorrect packet size. |
path MTU changed |
Number of received packets with path MTU changed. |
destination unreachable |
Number of destination unreachable packets that have been received. |
too big |
Number of received or sent oversized packets. |
parameter problem |
Number of received or sent packets with incorrect parameters. |
echo request |
Number of received or sent echo request packets. |
echo reply |
Number of received or sent echo reply packets. |
neighbor solicit |
Number of received NS packets. |
neighbor advertisement |
Number of received NA packets. |
router solicit |
Number of received RS packets. |
router advertisement |
Number of received RA packets. |
redirect |
Number of received or sent redirect packets. |
router renumbering |
Number of received packets with router renumbering. |
unreachable no route |
Number of sent packets to report the error that no route is available to the destination. |
unreachable admin |
Number of sent packets to report the error that the communication with the destination is administratively prohibited. |
unreachable beyondscope |
Number of sent packets to report the error that the source addresses is beyond the scope. |
unreachable address |
Number of address unreachable packets that have been sent. |
unreachable no port |
Number of port unreachable packets that have been sent. |
time exceed transit |
Number of sent packets to report the time exceeded in transmit error. |
time exceed reassembly |
Number of sent packets to report the fragment reassembly time exceeded error. |
ratelimited |
Number of packets that were not sent out because of the rate limit. |
other errors |
Number of sent packets with other errors. |
display ipv6 interface
Use display ipv6 interface to display IPv6 interface information.
Syntax
display ipv6 interface [ interface-type [ interface-number ] ] [ brief [ description ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
interface-type: Specifies an interface by its type.
interface-number: Specifies an interface by its number.
brief: Displays brief IPv6 interface information, including physical status, link-layer protocols, and IPv6 address. If you do not specify the keyword, this command displays detailed IPv6 interface information, including IPv6 configuration and operating information, and IPv6 packet statistics.
description: Displays complete interface descriptions. If you do not specify this keyword, the command displays a maximum of 11 characters for each interface description. If the description is longer than 11 characters, the first 8 characters are displayed with an ellipsis (...) followed.
Usage guidelines
If you do not specify an interface, this command displays IPv6 information about all interfaces.
If you specify only the interface-type argument, this command displays IPv6 information about the interfaces of the specified type.
If you specify both the interface-type and the interface-number arguments, this command displays IPv6 information about the specified interface.
Examples
# Display IPv6 information about M-GigabitEthernet 1/0/1.
<Sysname> display ipv6 interface M-GigabitEthernet1/0/1
M-GigabitEthernet1/0/1 current state: UP
Line protocol current state: UP
IPv6 is enabled, link-local address is FE80::1234:56FF:FE65:4322/64 [TENTATIVE]
Global unicast address(es):
10::1234:56FF:FE65:4322, subnet is 10::/64 [TENTATIVE] [AUTOCFG]
[valid lifetime 4641s/preferred lifetime 4637s]
20::1234:56ff:fe65:4322, subnet is 20::/64 [TENTATIVE] [EUI-64]
30::1, subnet is 30::/64 [TENTATIVE] [ANYCAST]
40::2, subnet is 40::/64 [TENTATIVE] [DHCP]
50::3, subnet is 50::/64 [TENTATIVE]
Joined group address(es):
FF02::1
FF02::2
FF02::1:FF00:1
FF02::1:FF65:4322
MTU is 1500 bytes
ND DAD is enabled, number of DAD attempts: 1
ND reachable time is 1200000 milliseconds
ND retransmit interval is 1000 milliseconds
Hosts use stateless autoconfig for addresses
IPv6 Packet statistics:
InReceives: 0
InTooShorts: 0
InTruncatedPkts: 0
InHopLimitExceeds: 0
InBadHeaders: 0
InBadOptions: 0
ReasmReqds: 0
ReasmOKs: 0
InFragDrops: 0
InFragTimeouts: 0
OutFragFails: 0
InUnknownProtos: 0
InDelivers: 0
OutRequests: 0
OutForwDatagrams: 0
InNoRoutes: 0
InTooBigErrors: 0
OutFragOKs: 0
OutFragCreates: 0
InMcastPkts: 0
InMcastNotMembers: 0
OutMcastPkts: 0
InAddrErrors: 0
InDiscards: 0
OutDiscards: 0
Table 4 Command output
Field |
Description |
Vlan-interface2 current state |
Physical state of the interface: · Administratively DOWN—The interface has been administratively shut down by using the shutdown command. · DOWN—The interface is administratively up but its physical state is down, possibly because of a connection or link failure. · UP—The administrative and physical states of the interface are both up. |
Line protocol current state |
Link layer state of the interface: · DOWN—The link layer protocol state of the interface is down. · UP—The link layer protocol state of the interface is up. |
IPv6 is enabled |
IPv6 is enabled on the interface. This feature is automatically enabled after an IPv6 address is configured for an interface. |
link-local address |
Link-local address of the interface. |
Global unicast address(es) |
Global unicast addresses of the interface. IPv6 address states: · TENTATIVE—Initial state. DAD is being performed or is to be performed on the address. · DUPLICATE—The address is not unique on the link. · PREFERRED—The address is preferred and can be used as the source or destination address of a packet. If an address is in this state, the command does not display the address state. · DEPRECATED—The address is beyond the preferred lifetime but in the valid lifetime. It is valid, but it cannot be used as the source address for a new connection. Packets destined for the address are processed correctly. If a global unicast address is not manually configured, the following notations indicate how the address is obtained: · AUTOCFG—Stateless autoconfigured. · DHCP—Assigned by a DHCPv6 server. · EUI-64—Manually configured EUI-64 IPv6 address. · RANDOM—Random address automatically generated. If the address is a manually configured anycast address, it is noted with ANYCAST. |
valid lifetime |
Specifies how long autoconfigured global unicast addresses using a prefix are valid. |
preferred lifetime |
Specifies how long autoconfigured global unicast addresses using a prefix are preferred. |
Joined group address(es) |
Addresses of the multicast groups that the interface has joined. |
MTU |
MTU of the interface. |
ND DAD is enabled, number of DAD attempts |
DAD is enabled. · If DAD is enabled, this field displays the number of attempts to send an NS message for DAD (set by using the ipv6 nd dad attempts command). · If DAD is disabled, this field displays ND DAD is disabled. To disable DAD, set the number of attempts to 0. |
ND reachable time |
Time during which a neighboring device is reachable. |
ND retransmit interval |
Interval for retransmitting an NS message. |
Hosts use stateless autoconfig for addresses |
Hosts obtained IPv6 addresses through stateless autoconfiguration. |
InReceives |
Received IPv6 packets, including error messages. |
InTooShorts |
Received IPv6 packets that are too short. For example, the received IPv6 packet is less than 40 bytes. |
InTruncatedPkts |
Received IPv6 packets with a length less than the payload length field specified in the packet header. |
InHopLimitExceeds |
Received IPv6 packets with a hop count exceeding the hop limit field specified in the packet header. |
InBadHeaders |
Received IPv6 packets with incorrect basic headers. |
InBadOptions |
Received IPv6 packets with incorrect extension headers. |
ReasmReqds |
Received IPv6 fragments. |
ReasmOKs |
Number of reassembled IPv6 packets. |
InFragDrops |
Received IPv6 fragments that are discarded because of certain errors. |
InFragTimeouts |
Received IPv6 fragments that are discarded because the amount of time they stay in the system buffer exceeds the specified interval. |
OutFragFails |
IPv6 packets that fail to be fragmented on the output interface. |
InUnknownProtos |
Received IPv6 packets with unknown or unsupported protocol type. |
InDelivers |
Received IPv6 packets that are delivered to user protocols (such as ICMPv6, TCP, and UDP). |
OutRequests |
Local IPv6 packets sent by IPv6 user protocols. |
OutForwDatagrams |
IPv6 packets forwarded by the interface. |
InNoRoutes |
Received IPv6 packets that are discarded because no matching route can be found. |
InTooBigErrors |
Received IPv6 packets that fail to be forwarded because they exceeded the Path MTU. |
OutFragOKs |
Fragmented IPv6 packets on the output interface. |
OutFragCreates |
Number of IPv6 fragments on the output interface. |
InMcastPkts |
Received IPv6 multicast packets. |
InMcastNotMembers |
Received IPv6 multicast packets that are discarded because the interface is not in the multicast group. |
OutMcastPkts |
IPv6 multicast packets sent by the interface. |
InAddrErrors |
Received IPv6 packets that are discarded due to invalid destination addresses. |
InDiscards |
Received IPv6 packets that are discarded due to resource problems rather than packet errors. |
OutDiscards |
IPv6 packets that fail to be sent due to resource problems rather than packet errors. |
# Display brief IPv6 information about all interfaces. Each interface description contains a maximum of 11 characters.
<Sysname> display ipv6 interface brief
*down: administratively down
(s): spoofing
Interface Physical Protocol IPv6 Address/Prefix VPN instance Description
MGE1/0/1 down down 1::1/64 [TENTATIVE] -- Link to ...
# Display brief IPv6 information about all interfaces. Each interface description is complete.
<Sysname> display ipv6 interface brief description
*down: administratively down
(s): spoofing
Interface Physical Protocol IPv6 Address/Prefix VPN instance Description
MGE1/0/1 down down 1::1/64 [TENTATIVE] -- Link to Cor
eRouter
MGE1/0/2 down down Unassigned -- --
Table 5 Command output
Field |
Description |
*down: administratively down |
The interface has been administratively shut down by using the shutdown command. |
(s): spoofing |
Spoofing attribute of the interface. The link protocol state of the interface is up, but the link is temporarily established on demand or does not exist. |
Interface |
Name of the interface. |
Physical |
Physical state of the interface: · *down—The interface has been administratively shut down by using the shutdown command. · down—The interface is administratively up but its physical state is down, possibly because of a connection or link failure. · up—The administrative and physical states of the interface are both up. |
Protocol |
Link layer protocol state of the interface: · down—The network layer protocol state of the interface is down. · up—The network layer protocol state of the interface is up. |
IPv6 Address/Prefix |
IPv6 address and prefix of the interface. · If multiple global unicast addresses are configured, this field displays the lowest address. · If no global unicast address is configured, this field displays the link-local address. · If no address is configured, this field displays Unassigned. Available IPv6 address states include: · TENTATIVE—Initial state. DAD is being performed or is to be performed on the address. · DUPLICATE—The address is not unique on the link and is not usable. · PREFERRED—The address is preferred and can be used as the source or destination address of a packet. If an address is in this state, the command does not display the address state. · DEPRECATED—The address is beyond the preferred lifetime but in the valid lifetime. It is valid, but it cannot be used as the source address for a new connection. Packets destined for the address are processed correctly. |
VPN instance |
This field is not supported in the current software version. Name of the VPN instance to which the interface belongs. If the interface does not belong to any VPN instance, this field displays hyphens (--). |
Description |
Description of the interface. If no description is configured, this field displays hyphens (--). |
display ipv6 prefix
Use display ipv6 prefix to display information about IPv6 prefixes, including dynamic and static prefixes.
Syntax
display ipv6 prefix [ prefix-number ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
prefix-number: Specifies the ID of an IPv6 prefix, in the range of 1 to 1024. If you do not specify an IPv6 prefix ID, this command displays information about all IPv6 prefixes.
Usage guidelines
A static IPv6 prefix is configured by using the ipv6 prefix command.
A dynamic IPv6 prefix is obtained from the DHCPv6 server, and its prefix ID is configured by using the ipv6 dhcp client pd command.
Examples
# Display information about all IPv6 prefixes.
<Sysname> display ipv6 prefix
Number Prefix Type
1 1::/16 Static
2 11:77::/32 Dynamic
# Display information about the IPv6 prefix with prefix ID 1.
<Sysname> display ipv6 prefix 1
Number: 1
Type : Dynamic
Prefix: ABCD:77D8::/32
Preferred lifetime 90 sec, valid lifetime 120 sec
Table 6 Command output
Field |
Description |
Number |
Prefix ID. |
Type |
Prefix type: · Static—Static IPv6 prefix. · Dynamic—Dynamic IPv6 prefix. |
Prefix |
Prefix and its length. If no prefix is obtained, this field displays Not-available. |
Preferred lifetime 90 sec |
Preferred lifetime in seconds. For a static IPv6 prefix, this field is not displayed. |
valid lifetime 120 sec |
Valid lifetime in seconds. For a static IPv6 prefix, this field is not displayed. |
Related commands
ipv6 dhcp client pd
ipv6 prefix
display ipv6 rawip
Use display ipv6 rawip to display brief information about IPv6 RawIP connections.
Syntax
display ipv6 rawip [ slot slot-number ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
slot slot-number: Specifies the slot number of the device, which is fixed at 1.
Examples
# Display brief information about IPv6 RawIP connections.
<Sysname> display ipv6 rawip
Local Addr Foreign Addr Protocol Slot Cpu PCB
2001:2002:2003:2 3001:3002:3003:3 58 1 0 0x0000000000000009
004:2005:2006:20 004:3005:3006:30
07:2008 07:3008
2002::100 2002::138 58 2 0 0x0000000000000008
:: :: 58 5 0 0x0000000000000002
Table 7 Command output
Field |
Description |
Local Addr |
Local IPv6 address. |
Foreign Addr |
Peer IPv6 address. |
Protocol |
Protocol number. |
PCB |
PCB index. |
display ipv6 rawip verbose
Use display ipv6 rawip verbose to display detailed information about IPv6 RawIP connections.
Syntax
display ipv6 rawip verbose [ slot slot-number [ pcb pcb-index ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
slot slot-number: Specifies the slot number of the device, which is fixed at 1.
pcb pcb-index: Displays detailed information about IPv6 RawIP connections of the specified PCB. The value range for the pcb-index argument varies by device model.
Examples
# Display detailed information about an IPv6 RawIP connection.
<Sysname> display ipv6 rawip verbose
Total RawIP socket number: 1
Connection info: src = ::, dst = ::
Location: slot: 6 cpu: 0
Creator: ping ipv6[320]
State: N/A
Options: N/A
Error: 0
Receiving buffer(cc/hiwat/lowat/drop/state): 0 / 9216 / 1 / 0 / N/A
Sending buffer(cc/hiwat/lowat/state): 0 / 9216 / 512 / N/A
Type: 3
Protocol: 58
Inpcb flags: N/A
Inpcb extflag: INP_EXTRCVICMPERR INP_EXTFILTER
Inpcb vflag: INP_IPV6
Hop limit: 255 (minimum hop limit: 0)
Send VRF: 0xffff
Receive VRF: 0xffff
Table 8 Command output
Field |
Description |
Total RawIP socket number |
Total number of IPv6 RawIP sockets. |
Connection info |
Connection information, including the source and destination IPv6 addresses. |
Location |
Socket location. |
Creator |
Task name of the socket. The process number is in the square brackets. |
State |
Socket state: · NOFDREF—The user has closed the connection. · ISCONNECTED—The connection has been established. · ISCONNECTING—The connection is being established. · ISDISCONNECTING—The connection is being interrupted. · ASYNC—Asynchronous mode. · ISDISCONNECTED—The connection has been terminated. · ISSMOOTHING—Cross-card data smoothing is in progress. · CANBIND—The socket supports the bind operation. · PROTOREF—Indicates strong protocol reference. · ISPCBSYNCING—Cross-card PCB synchronization is in progress. · N/A—None of above state. |
Options |
Socket options: · SO_DEBUG—Records socket debugging information. · SO_ACCEPTCONN—Enables the server to listen connection requests. · SO_REUSEADDR—Allows the local address reuse. · SO_KEEPALIVE—Requires the protocol to test whether the connection is still alive. · SO_DONTROUTE—Bypasses the routing table query for outgoing packets because the destination is in a directly connected network. · SO_BROADCAST—Supports broadcast packets. · SO_LINGER—Closes the socket. The system can still send remaining data in the socket send buffer. · SO_OOBINLINE—Stores the out-of-band data in the input queue. · SO_REUSEPORT—Allows the local port reuse. · SO_TIMESTAMP—Records the timestamps of the incoming packets, accurate to milliseconds. This option is applicable to protocols that are not connection orientated. · SO_NOSIGPIPE—Disables the socket from sending data. As a result, a sigpipe cannot be established when a return failure occurs. · SO_TIMESTAMPNS—Has a similar function with the timestamp, accurate to nanoseconds. · SO_KEEPALIVETIME—Sets a keepalive time. This option is supported in TCP. · SO_FILTER—Supports setting the packet filter criterion. This option is available for OSI Socket and RawIP. · SO_USCBINDEX—Obtains the user profile index from the received packets. · SO_SEQPACKET—Preserves the boundaries of packets sent to the socket buffer. · SO_FILLTWAMPTIME—Sets the timestamp for TWAMP. · SO_LOCAL—Local socket option. · SO_NBMAADDR—Obtains the remote NBMA address of the ADVPN tunnel. · SO_DONTDELIVER—Do not deliver the data to the application. · SO_UCM—Sets the IPoE enabling status. · SO_RAWSLOT—Raw slot. · SO_LEASEDUSERID—Obtains a usable lease. · N/A—No options are set. |
Error |
Error code. |
Receiving buffer(cc/hiwat/lowat/drop/state) |
Displays receive buffer information in the following order: · cc—Used space. · hiwat—Maximum space. · lowat—Minimum space. · drop—Number of dropped packets. · state—Buffer state: ¡ CANTSENDMORE—Unable to send data to the peer. ¡ CANTRCVMORE—Unable to receive data from the peer. ¡ RCVATMARK—Receiving tag. ¡ N/A—None of the above states. |
Sending buffer(cc/hiwat/lowat/state) |
Displays send buffer information in the following order: · cc—Used space. · hiwat—Maximum space. · lowat—Minimum space. · state—Buffer state: ¡ CANTSENDMORE—Unable to send data to the peer. ¡ CANTRCVMORE—Unable to receive data from the peer. ¡ RCVATMARK—Receiving tag. ¡ N/A—None of the above states. |
Type |
Socket type: · 1—SOCK_STREAM. This socket uses TCP to provide reliable transmission of byte streams. · 2—SOCK_DGRAM. This socket uses UDP to provide datagram transmission. · 3—SOCK_RAW. This socket allows an application to change the next upper-layer protocol header. · N/A—None of the above types. |
Protocol |
Number of protocol using the socket. 58 represents ICMP. |
Inpcb flags |
Flags in the Internet PCB: · INP_RECVOPTS—Receives IPv6 options. · INP_RECVRETOPTS—Receives replied IPv6 options. · INP_RECVDSTADDR—Receives destination IPv6 address. · INP_HDRINCL—Provides the entire IPv6 header. · INP_REUSEADDR—Reuses the IPv6 address. · INP_REUSEPORT—Reuses the port number. · INP_ANONPORT—Port number not specified. · INP_PROTOCOL_PACKET—Identifies a protocol packet. · INP_RCVVLANID—Receives the VLAN ID of the packet. Only UDP and RawIP support this flag. · IN6P_IPV6_V6ONLY—Only supports IPv6 protocol stack. · IN6P_PKTINFO—Receives the source IPv6 address and input interface of the packet. · IN6P_HOPLIMIT—Receives the hop limit. · IN6P_HOPOPTS—Receives the hop-by-hop options extension header. · IN6P_DSTOPTS—Receives the destination options extension header. · IN6P_RTHDR—Receives the routing extension header. · IN6P_RTHDRDSTOPTS—Receives the destination options extension header preceding the routing extension header. · IN6P_TCLASS—Receives the traffic class of the packet. · IN6P_AUTOFLOWLABEL—Attaches a flow label automatically. · IN6P_RFC2292—Uses the API specified in RFC 2292. · IN6P_MTU—Discovers differences in the MTU size of every link along a given data path. TCP does not support this flag. · INP_RCVMACADDR—Receives the MAC address of the frame. · INP_USEICMPSRC—Uses the specified IPv6 address as the source IPv6 address for outgoing ICMP packets. · INP_SYNCPCB—Waits until Internet PCB is synchronized. · INP_LOCAL—Preferentially matches the INPCB with this flag on the same card. · N/A—None of the above flags. |
Inpcb extflag |
Extension flags in the Internet PCB: · INP_EXTRCVPVCIDX—Records the PVC index of the received packet. · INP_RCVPWID—Records the PW ID of the received packet. · INP_EXTRCVICMPERR—Receives an ICMP error packet. · INP_EXTFILTER—Filters the contents in the received packet. · INP_EXTDONTDROP—Do not drop the received packet. · INP_EXLISTEN—Adds the INPCB carrying this flag to the listen hash table. · INP_SELECTMATCHSRCBYFIB—Uses the FIB table to select a matching source. · INP_EXTPRIVATESOCKET—Associates the INPCB with the NSR private socket. · INP_EXTNOCACHEPKT—Do not cache packets. · INP_EXTRCVVLANDOT1P—Obtains the Dot1p value of the VLAN tag in the received packet. · INP_EXTSNDDATAIF—Sets the output interface of data. · INP_EXTFREEBIND—The socket is not bound to an address or port. · INP_EXTRCVUPID—Obtains the UP ID from the received packet in the UCM control-/user-plane separated (CUPS) network. · INP_EXTINNERPROXY—Receives packets forwarded by the proxy. · INP_EXLISTENNET—Sets this flag when the connection information is added to the network segment linked list. · N/A—None of the above flags. |
Inpcb vflag |
IP version flag in the Internet PCB: · INP_IPV4—IPv4 protocol. · INP_IPV6—IPv6 protocol. · INP_IPV6PROTO—Creates an Internet PCB based on IPv6 protocol. · INP_TIMEWAIT—In TIMEWAIT state. · INP_ONESBCAST—Sends broadcast packets. · INP_DROPPED—Protocol dropped flag. · INP_SOCKREF—Strong socket reference. · INP_DONTBLOCK—Do not block synchronization of the Internet PCB. · N/A—None of the above flags. |
Hop limit |
Hop limit in the Internet PCB. |
Send VRF |
This field is not supported in the current software version. VRF from which packets are sent. |
Receive VRF |
This field is not supported in the current software version. VRF from which packets are received. |
display ipv6 statistics
Use display ipv6 statistics to display IPv6 and ICMPv6 packet statistics.
Syntax
display ipv6 statistics [ slot slot-number ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
slot slot-number: Specifies the slot number of the device, which is fixed at 1.
Examples
# Display IPv6 and ICMPv6 packet statistics.
<Sysname> display ipv6 statistics
IPv6 statistics:
Sent packets:
Total: 0
Sent locally: 0 Forwarded: 0
Raw packets: 0 Discarded: 0
Fragments: 0 Fragments failed: 0
Routing failed: 0
Received packets:
Total: 0
Received locally: 0 Hop limit exceeded: 0
Fragments: 0 Reassembled: 0
Reassembly failures: 0 Reassembly timeout: 0
Format errors: 0 Option errors: 0
Protocol errors: 0
ICMPv6 statistics:
Sent packets:
Total: 0
Unreachable: 0 Too big: 0
Hop limit exceeded: 0 Reassembly timeouts: 0
Parameter problems: 0
Echo requests: 0 Echo replies: 0
Neighbor solicits: 0 Neighbor adverts: 0
Router solicits: 0 Router adverts: 0
Redirects: 0 Router renumbering: 0
Send failed:
Rate limitation: 0 Other errors: 0
Received packets:
Total: 0
Checksum errors: 0 Too short: 0
Bad codes: 0
Unreachable: 0 Too big: 0
Hop limit exceeded: 0 Reassembly timeouts: 0
Parameter problems: 0 Unknown error types: 0
Echo requests: 0 Echo replies: 0
Neighbor solicits: 0 Neighbor adverts: 0
Router solicits: 0 Router adverts: 0
Redirects: 0 Router renumbering: 0
Unknown info types: 0
Deliver failed:
Bad length: 0
Table 9 Command output
Field |
Description |
IPv6 statistics: |
IPv6 packet statistics. |
Sent packets: Total: Sent locally: Forwarded: Raw packets: Discarded: Fragments: Fragments failed: Routing failed: |
Statistics for sent IPv6 packets: · Total—Total number of packets that have been locally sent and forwarded. · Sent locally—Number of locally sent packets. · Forwarded—Number of forwarded packets. · Raw packets—Number of packets sent by using a raw socket. · Discarded—Number of discarded packets. · Fragments—Number of sent fragments. · Fragments failed—Number of fragments that were failed to send. · Routing failed—Number of packets with routing failures. |
Received packets: Total: Received locally: Hop limit exceeded: Fragments: Reassembled: Reassembly failures: Reassembly timeout: Format errors: Option errors: Protocol errors: |
Statistics for received IPv6 packets: · Total—Total number of received packets. · Received locally—Number of received packets that are destined for the device. · Hop limit exceeded—Number of packets with hop limit exceeded. · Fragments—Number of received fragments. · Reassembled—Number of reassembled packets. · Reassembly failures—Number of packets with reassembly failures. · Reassembly timeout—Number of packets with reassembly timed out. · Format errors—Number of packets with format errors. · Option errors—Number of packets with option errors. · Protocol errors—Number of packets with protocol errors. |
ICMPv6 statistics: |
ICMPv6 message statistics. |
Sent packets: Total: Unreached: Too big: Hop limit exceeded: Reassembly timeouts: Parameter problems: Echo requests: Echo replies: Neighbor solicits: Neighbor adverts: Router solicits: Router adverts: Redirects: Router renumbering Sent failed: Rate limitation: Other errors: |
Statistics for sent ICMPv6 messages: · Total—Total number of sent messages. · Unreached—Number of Destination Unreachable messages. · Too big—Number of Packet Too Big messages. · Hop limit exceeded—Number of Hop Limit Exceeded messages. · Reassembly timeouts—Number of Fragment Reassembly Time Exceeded messages. · Parameter problems—Number of Parameter Problem messages. · Echo requests—Number of Echo Requests. · Echo replies—Number of Echo Replies. · Neighbor solicits—Number of Neighbor Solicitation messages. · Neighbor adverts—Number of Neighbor Advertisement messages. · Router solicits—Number of Router Solicitation messages. · Router adverts—Number of Router Advertisement messages. · Redirects—Number of Redirect messages. · Router renumbering—Number of Router Renumbering messages. · Sent failed—Number of messages that were failed to send locally. · Rate limitation—Number of unsent messages because of rate limiting. · Other errors—Number of messages with other errors. |
Received packets: Total: Checksum errors: Too short: Bad codes: Unreachable: Too big: Hop limit exceeded: Reassembly timeouts: Parameter problems: Unknown error types: Echo requests: Echo replies: Neighbor solicits: Neighbor adverts: Router solicits: Router adverts: Redirects: Router renumbering: Unknown info types: Deliver failed: Bad length: |
Statistics for received ICMPv6 messages: · Total—Total number of received messages. · Checksum errors—Number of messages with checksum errors. · Too short—Number of messages with a too short length. · Bad codes—Number of messages with error codes. · Unreached—Number of Destination Unreachable messages. · Too big—Number of Packet Too Big messages. · Hop limit exceeded—Number of Hop Limit Exceeded messages. · Reassembly timeouts—Number of Fragment Reassembly Time Exceeded messages. · Parameter problems—Number of Parameter Problem messages. · Unknown error types—Number of messages with unknown error types. · Echo requests—Number of Echo Requests. · Echo replies—Number of Echo Replies. · Neighbor solicits—Number of Neighbor Solicitation messages. · Neighbor adverts—Number of Neighbor Advertisement messages. · Router solicits—Number of Router Solicitation messages. · Router adverts—Number of Router Advertisement messages. · Redirects—Number of Redirect messages. · Router renumbering—Number of Router Renumbering messages. · Unknown info types—Number of messages with unknown information types. · Deliver failed—Number of messages with local delivery failures. · Bad length—Number of messages with error length. |
Related commands
reset ipv6 statistics
display ipv6 tcp
Use display ipv6 tcp to display brief information about IPv6 TCP connections.
Syntax
display ipv6 tcp [ slot slot-number ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
slot slot-number: Specifies the slot number of the device, which is fixed at 1.
Examples
# Display brief information about IPv6 TCP connections.
<Sysname> display ipv6 tcp
*: TCP connection with authentication
LAddr->port FAddr->port State Slot CPU PCB
LInt
*2001:2002:2003:2 3001:3002:3003:3 ESTABLISHED 1 0 0x000000000000c387
004:2005:2006:20 004:3005:3006:30
07:2008->1200 07:3008->1200
N/A
2001::1->23 2001::5->1284 ESTABLISHED 2 0 0x0000000000000008
N/A
2003::1->25 2001::2->1283 LISTEN 3 0 0x0000000000000009
N/A
2003::1->179 fe80::2->1283 LISTEN 3 0 0x000000000000000a
MGE1/0/2
Table 10 Command output
Field |
Description |
* |
Indicates that the TCP connection uses authentication. |
LAddr->port |
Local IPv6 address and port number. |
FAddr->port |
Peer IPv6 address and port number. |
State |
IPv6 TCP connection state: · CLOSED—The server receives a disconnection request's reply from the client. · LISTEN—The server is waiting for connection requests. · SYN_SENT—The client is waiting for the server to reply to the connection request. · SYN_RCVD—The server receives a connection request. · ESTABLISHED—The server and client have established connections and can transmit data bidirectionally. · CLOSE_WAIT—The server receives a disconnection request from the client. · FIN_WAIT_1—The client is waiting for the server to reply to a disconnection request. · CLOSING—The server and client are waiting for peer's disconnection reply when receiving disconnection requests from each other. · LAST_ACK—The server is waiting for the client to reply to a disconnection request. · FIN_WAIT_2—The client receives a disconnection reply from the server. · TIME_WAIT—The client receives a disconnection request from the server. |
PCB |
PCB index. |
LInt |
Local interface. If no input interface is specified for any TCP-based feature (for example, BGP peer) on the local end, this field displays N/A. |
display ipv6 tcp verbose
Use display ipv6 tcp verbose to display detailed information about IPv6 TCP connections.
Syntax
display ipv6 tcp verbose [ slot slot-number [ pcb pcb-index ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
slot slot-number: Specifies the slot number of the device, which is fixed at 1.
pcb pcb-index: Displays detailed information about IPv6 TCP connections of the specified PCB. The value range for the pcb-index argument varies by device model.
Examples
# Display detailed information about an IPv6 TCP connection.
<Sysname> display ipv6 tcp verbose
TCP inpcb number: 1(tcpcb number: 1)
Connection info: src = 2001::1->179 , dst = 2001::2->4181
Location: Slot: 6 Cpu: 0
NSR standby: N/A
Creator: bgpd[199]
State: ISCONNECTED
Options: N/A
Error: 0
Receiving buffer(cc/hiwat/lowat/drop/state): 0 / 65536 / 1 / 0 / N/A
Sending buffer(cc/hiwat/lowat/state): 0 / 65536 / 512 / N/A
Type: 1
Protocol: 6
Inpcb flags: N/A
Inpcb extflag: N/A
Inpcb vflag: INP_IPV6
Hop limit: 255 (minimum hop limit: 0)
Connection state: ESTABLISHED
TCP options: TF_REQ_SCALE TF_REQ_TSTMP TF_SACK_PERMIT TF_NSR
NSR state: READY(M)
Send VRF: 0x0
Receive VRF: 0x0
Local interface: N/A
Error count in abnormal-packet-defend period: 0
Checksum errors: 0
Duplicate packets: 0
Part-Duplicate packets: 0
Out-of-order packets: 0
Duplicate ACK packets: 0
Out-of-order ACK packets: 0
Packets with data out of window: 0
MD5 authentication errors: 0
Keychain authentication errors: 0
Timestamp errors: 0
Maximum Segment Size (MSS): 512
Window Scale (wscale): 0
Retransmission Timeout (rto): 3000000.0ms
Retransmission Count/Total: 0/0
Round-trip Time (rtt/rtvar): 0.0ms/12000000.0ms
Delayed Ack Timeout (ato): 100000.0ms
Congestion Window (cwnd): 1073725440
TCP Throughput: 0.00 Mbps
sendpps/sendkbps/recvpps/recvkbps/: 0/0.000/0/0.000
iss/unack/next/max/wnd: 0/0/0/0/0
irs/undeliver/next/adv/wnd: 0/0/0/0/0
NSR Info:
Total Recv/Send Count(history Recv/history Send): 41/43(41/43)
EnableMsg Recv/Send Count(history Recv/history Send): 1/2(1/2)
DisableMsg Recv/Send Count(history Recv/history Send): 0/1(0/1)
SlotchangeMsg Recv/Send Count(history Recv/history Send): 0/1(0/1)
ReadyMsg Recv/Send Count(history Recv/history Send): 2/1(2/1)
PullMsg Recv/Send Count(history Recv/history Send): 2/1(2/1)
BriefdataMsg Recv/Send Count(history Recv/history Send): 1/2(1/2)
PktMsg Recv/Send Count(history Recv/history Send): 35/35(35/35)
CmdMsg Recv/Send Count(history Recv/history Send): 0/0(0/0)
Recent Recv/Send Seq: 41/43
Recent Recv/Send Time: 11:14:44:469624 May 23 2022/11:14:44:467624 May 23 2022
Option Value:
rcvsb_timeo/sndsb_timeo/pd_type/pd_len: 0/0/0/0
so_linger: 1
ka_idle/ka_intval/ka_count: 0/0/0
so_accept_filter_str: filter1
Md5 Password:123
Tcp Key Chain: key123
Out Interface/NextHop/Local Address: 0/0.0.0.0/0.0.0.0
Filter Offset/Length/Value/Mask: 0/0/00 00 00 00 00 00 00 00 /00 00 0 00 00 00 00 00
Ip Tos/McastTTL/McastLoop/ Mcast Interface Index: 192/0/0/0
Acl Index/MacIndex: 4294967295/4294967295
Mpls Flag/Label: 0/4294967295
Kernel Event ID: 0
Send Mac: 0000-0000-0000
Bier TTL/Entropy/TunnelID: 0/0/0
Ip Option Hdr: 0x01 02 03
Table 11 Command output
Field |
Description |
TCP inpcb number |
Number of IPv6 TCP Internet PCBs. |
Connection info |
Connection information, including source IPv6 address, source port number, destination IPv6 address, and destination port number. |
Location |
Socket location. |
NSR standby |
|
tcpcb number |
Number of IPv6 TCP PCBs (excluding PCBs of TCP in TIME_WAIT state). |
Creator |
Task name of the socket. The process number is in the square brackets. |
State |
Socket state: · NOFDREF—The user has closed the connection. · ISCONNECTED—The connection has been established. · ISCONNECTING—The connection is being established. · ISDISCONNECTING—The connection is being interrupted. · ASYNC—Asynchronous mode. · ISDISCONNECTED—The connection has been terminated. · ISSMOOTHING—Cross-card data smoothing is in progress. · CANBIND—The socket supports the bind operation. · PROTOREF—Indicates strong protocol reference. · ISPCBSYNCING—Cross-card PCB synchronization is in progress. · N/A—None of above state. |
Options |
Socket options: · SO_DEBUG—Records socket debugging information. · SO_ACCEPTCONN—Enables the server to listen connection requests. · SO_REUSEADDR—Allows the local address reuse. · SO_KEEPALIVE—Requires the protocol to test whether the connection is still alive. · SO_DONTROUTE—Bypasses the routing table query for outgoing packets because the destination is in a directly connected network. · SO_BROADCAST—Supports broadcast packets. · SO_LINGER—Closes the socket. The system can still send remaining data in the socket send buffer. · SO_OOBINLINE—Stores the out-of-band data in the input queue. · SO_REUSEPORT—Allows the local port reuse. · SO_NOSIGPIPE—Disables the socket from sending data. As a result, a sigpipe cannot be established when a return failure occurs. · SO_TIMESTAMPNS—Has a similar function with the timestamp, accurate to nanoseconds. · SO_KEEPALIVETIME—Sets a keepalive time. This option is supported in TCP. · SO_FILTER—Supports setting the packet filter criterion. This option is available for OSI Socket and RawIP. · SO_SEQPACKET—Preserves the boundaries of packets sent to the socket buffer. · SO_USCBINDEX—Obtains the user profile index from the received packets. · SO_FILLTWAMPTIME—Sets the timestamp for TWAMP. · SO_LOCAL—Local socket option. · SO_NBMAADDR—Obtains the remote NBMA address of the ADVPN tunnel. · SO_DONTDELIVER—Do not deliver the data to the application. · SO_UCM—Sets the IPoE enabling status. · SO_RAWSLOT—Raw slot. · SO_LEASEDUSERID—Obtains a usable lease. · N/A—No options are set. |
Error |
Error code. |
Receiving buffer(cc/hiwat/lowat/drop/state) |
Displays receive buffer information in the following order: · cc—Used space. · hiwat—Maximum space. · lowat—Minimum space. · drop—Number of dropped packets. · state—Buffer state: ¡ CANTSENDMORE—Unable to send data to the peer. ¡ CANTRCVMORE—Unable to receive data from the peer. ¡ RCVATMARK—Receiving tag. ¡ N/A—None of the above states. |
Sending buffer(cc/hiwat/lowat/drop/state) |
Displays send buffer information in the following order: · cc—Used space. · hiwat—Maximum space. · lowat—Minimum space. · drop—Number of dropped packets. · state—Buffer state: ¡ CANTSENDMORE—Unable to send data to the peer. ¡ CANTRCVMORE—Unable to receive data from the peer. ¡ RCVATMARK—Receiving tag. ¡ N/A—None of the above states. |
Type |
Socket type: · 1—SOCK_STREAM. This socket uses TCP to provide reliable transmission of byte streams. · 2—SOCK_DGRAM. This socket uses UDP to provide datagram transmission. · 3—SOCK_RAW. This socket allows an application to change the next upper-layer protocol header. · N/A—None of the above types. |
Protocol |
Number of the protocol using the socket. 6 represents TCP. |
Inpcb flags |
Flags in the Internet PCB: · INP_RECVOPTS—Receives IPv6 options. · INP_RECVRETOPTS—Receives replied IPv6 options. · INP_RECVDSTADDR—Receives destination IPv6 address. · INP_HDRINCL—Provides the entire IPv6 header. · INP_REUSEADDR—Reuses the IPv6 address. · INP_REUSEPORT—Reuses the port number. · INP_ANONPORT—Port number not specified. · INP_PROTOCOL_PACKET—Identifies a protocol packet. · INP_RCVVLANID—Receives the VLAN ID of the packet. Only UDP and RawIP support this flag. · IN6P_IPV6_V6ONLY—Only supports IPv6 protocol stack. · IN6P_PKTINFO—Receives the source IPv6 address and input interface of the packet. · IN6P_HOPLIMIT—Receives the hop limit. · IN6P_HOPOPTS—Receives the hop-by-hop options extension header. · IN6P_DSTOPTS—Receives the destination options extension header. · IN6P_RTHDR—Receives the routing extension header. · IN6P_RTHDRDSTOPTS—Receives the destination options extension header preceding the routing extension header. · IN6P_TCLASS—Receives the traffic class of the packet. · IN6P_AUTOFLOWLABEL—Attaches a flow label automatically. · IN6P_RFC2292—Uses the API specified in RFC 2292. · IN6P_MTU—Discovers differences in the MTU size of every link along a given data path. TCP does not support this flag. · INP_RCVMACADDR—Receives the MAC address of the frame. · INP_SYNCPCB—Waits until Internet PCB is synchronized. · INP_LOCAL—Preferentially matches the INPCB with this flag on the same card. · N/A—None of the above flags. |
Inpcb extflag |
Extension flags in the Internet PCB: · INP_EXTRCVPVCIDX—Records the PVC index of the received packet. · INP_RCVPWID—Records the PW ID of the received packet. · INP_EXTDONTDROP—Does not drop the received packet. · INP_EXLISTEN—Listening socket. · INP_EXTFILTER—Filters the contents in the received packets. · INP_SELECTMATCHSRCBYFIB—Uses the FIB table to select a matching source. · INP_EXTRCVICMPERR—Receives an ICMP error packet. · INP_EXTPRIVATESOCKET—Associates the INPCB with the NSR private socket. · INP_EXTNOCACHEPKT—Do not cache packets. · INP_EXTRCVVLANDOT1P—Obtains the Dot1p value of the VLAN tag in the received packet. · INP_EXTSNDDATAIF—Sets the output interface of data. · INP_EXTFREEBIND—The socket is not bound to an address or port. · INP_EXTRCVUPID—Obtains the UP ID from the received packet in the UCM control-/user-plane separated (CUPS) network. · INP_EXTINNERPROXY—Receives packets forwarded by the proxy. · INP_EXLISTENNET—Sets this flag when the connection information is added to the network segment linked list. · N/A—None of the above flags. |
Inpcb vflag |
IP version flags in the Internet PCB: · INP_IPV4—IPv4 protocol. · INP_IPV6—IPv6 protocol. · INP_IPV6PROTO—Creates an Internet PCB based on IPv6 protocol. · INP_TIMEWAIT—In TIMEWAIT state. · INP_ONESBCAST—Sends broadcast packets. · INP_DROPPED—Protocol dropped flag. · INP_SOCKREF—Strong socket reference. · INP_DONTBLOCK—Do not block synchronization of the Internet PCB. · N/A—None of the above flags. |
Hop limit |
Hop limit in the Internet PCB. |
Connection state |
TCP connection state: · CLOSED—The server receives a disconnection request's reply from the client. · LISTEN—The server is waiting for connection requests. · SYN_SENT—The client is waiting for the server to reply to the connection request. · SYN_RCVD—The server receives a connection request. · ESTABLISHED—The server and client have established connections and can transmit data bidirectionally. · CLOSE_WAIT—The server receives a disconnection request from the client. · FIN_WAIT_1—The client is waiting for the server to reply to a disconnection request. · CLOSING—The server and client are waiting for peer's disconnection reply when receiving disconnection requests from each other. · LAST_ACK—The server is waiting for the client to reply to a disconnection request. · FIN_WAIT_2—The client receives a disconnection reply from the server. · TIME_WAIT—The client receives a disconnection request from the server. |
TCP options |
TCP options: · TF_DELACK—Delays sending ACK packets. · TF_SENTFIN—A FIN packet has been sent. · TF_RCVD_SCALE—Requests the receive window size scale factor. · TF_RCVD_TSTMP—A timestamp was received in the SYN packet. · TF_NEEDSYN—Sends a SYN packet. · TF_NEEDFIN—Sends a FIN packet. · TF_MORETOCOME—More data is to be added to the socket. · TF_LQ_OVERFLOW—The listening queue overflows. · TF_LASTIDLE—Idle connection. · TF_RXWIN0SENT—A reply with receive window size 0 was sent. · TF_FASTRECOVERY—Enters NewReno fast recovery mode. · TF_WASFRECOVERY—In NewReno fast recovery mode. · TF_SIGNATURE—MD5 signature. · TF_FORCEDATA—Forces to send one byte. · TF_TSO—TSO is enabled. · TF_PMTU—Supports RFC 1191. · TF_PMTUD—Starts Path MTU discovery. · TF_PASSIVE_CONN—Passive connection. · TF_APP_SEND—The application sends data. · TF_ABNORMAL_CLOSE—The application was abnormally closed. · TF_NODELAY—Disables the Nagle algorithm that buffers the sent data inside the TCP. · TF_NOOPT—No TCP options. · TF_NOPUSH—Forces TCP to delay sending any TCP data until a full sized segment is buffered in the TCP buffers. · TF_NSR—Enables TCP NSR. · TF_REQ_SCALE—Enables the TCP window scale option. · TF_REQ_TSTMP—Enables the time stamp option. · TF_SACK_PERMIT—Enables the TCP selective acknowledgement option. · TF_ENHANCED_AUTH—Enables the enhanced authentication option. |
NSR state |
NSR state of the TCP connection: · CLOSED—Closed (initial) state. · CLOSING—The connection is to be closed. · ENABLED—The connection backup is enabled. · OPEN—The connection synchronization has started. · PENDING—The connection backup is not ready. · READY—The connection backup is ready. · SMOOTH—The connection data is being smoothed. Between the parentheses is the role of the connection: · M—Main connection. · S—Standby connection. |
Send VRF |
This field is not supported in the current software version. VRF from which packets are sent. |
Receive VRF |
This field is not supported in the current software version. VRF from which packets are received. |
Local interface |
Interface on the local end. If no input interface is specified for any TCP-based feature (for example, BGP peer) on the local end, this field displays N/A. |
Error count in abnormal-packet-defend period |
Number of error packets received in one abnormal-packet-defend period if attack prevention is enabled for TCP connections. |
Checksum errors |
Number of received packets with checksum errors. |
Duplicate packets |
Number of received duplicate packets. |
Part-Duplicate packets |
Number of received partially duplicate packets. |
Out-of-order packets |
Number of received out-of-order packets. |
Duplicate ACK packets |
Number of received duplicate ACK packets. |
Out-of-order ACK packets |
Number of received out-of-order ACK packets. |
Packets with data out of window |
Number of received packets whose serial number is out of the sliding window range. |
MD5 authentication errors |
Number of packets with failed MD5 authentication. |
Keychain authentication errors |
Number of packets with failed Keychain authentication. |
Timestamp errors |
Number of packets with timestamp errors. |
Maximum Segment Size (MSS) |
Maximum segment size. |
Window Scale (wscale) |
Window scale. |
Retransmission Timeout (rto) |
Retransmission timeout in milliseconds. |
Retransmission Count/Total |
Current number retransmissions/total number of retransmissions. |
Round-trip Time (rtt/rtvar) |
Average round-trip time in milliseconds. |
Delayed Ack Timeout (ato) |
Delayed acknowledgement timeout in milliseconds. |
Congestion Window (cwnd) |
Sequance number of the packet at the congestion window. |
TCP Throughput |
TCP throughput in Mbps. |
sendpps/sendbps/recvpps/recvbps |
· sendpps—Number of packets sent per second. · sendbps—Bytes sent per second. · recvpps—Number of packets received per second. · recvbps—Bytes received per second. |
Iss/unack/next/max/wnd |
· Iss—Local initial sequence number. · unack—Sequence number of sent packet that has not been acknowledged. · next—Sequence number for next sending. · max—Maximum sequence number for sending. · wnd—Sequence number of the packet at the sending window. |
Irs/undeliver/next/adv/wnd |
· Irs—Peer initial sequence number. · undeliver—Sequence number of the packet that has not been reported. · next—Sequence number for next sending. · adv—Size of the receiving buffer. · wnd—Sequence number of the packet at the notification receiving window. |
Total Recv/Send Count |
Total number of received/sent packets through the LIPC connection between TCP NSR main and standby connections. |
EnableMsg Recv/Send Count |
Number of received/sent EnableMsg messages through the LIPC connection between TCP NSR main and standby connections. |
DisableMsg Recv/Send Count |
Number of received/sent DisableMsg messages through the LIPC connection between TCP NSR main and standby connections. |
SlotchangeMsg Recv/Send Count |
Number of received/sent SlotchangeMsg messages through the LIPC connection between TCP NSR main and standby connections. |
ReadyMsg Recv/Send Count |
Number of received/sent ReadyMsg messages through the LIPC connection between TCP NSR main and standby connections. |
PullMsg Recv/Send Count |
Number of received/sent PullMsg messages through the LIPC connection between TCP NSR main and standby connections. |
BriefdataMsg Recv/Send Count |
Number of received/sent BriefdataMsg messages through the LIPC connection between TCP NSR main and standby connections. |
PktMsg Recv/Send Count |
Number of received/sent PktMsg messages through the LIPC connection between TCP NSR main and standby connections. |
CmdMsg Recv/Send Count |
Number of received/sent CmdMsg messages through the LIPC connection between TCP NSR main and standby connections. |
history Recv/history Send |
Number of received/sent history messages through the LIPC connection between TCP NSR main and standby connections. |
Recent Recv/Send Seq |
Sequence number of the message received/sent most recently between TCP NSR main and standby connections. |
Recent Recv/Send Time |
Absolute time of the most recent message receiving/sending between TCP NSR main and standby connections. |
rcvsb_timeo/sndsb_timeo/pd_type/pd_len |
· rcvsb_timeo—Socket receiving buffer timeout. · sndsb_timeo—Socket sending buffer timeout in jiffies. · pd_type—Socket private data type. · pd_len—Socket private data length in bytes. |
so_linger |
Socket linger value. |
ka_idle/ka_interval/ka_cout |
· ka_idle—Socket keepalive idle timeout. · ka_interval—Socket keepalive interval. · ka_cout—Socket keepalive count. |
so_accept_filter_str |
Name of the socket packet receiving filter. |
Md5 Password |
TCP MD5 password. |
Tcp Key Chain |
TCP keychain name. |
Out Interface/NextHop/Local Address |
· Out Interface—Outgoing interface. · NextHop. · Local Address. |
Filter Offset/Length/Value/Mask |
Pcb filter offset, length, value, and mask. |
Ip Tos/McastTTL/McastLoop/Mcast Interface Index: |
· Ip Tos—IP TOS value. · McastTTL—Multicast TTL. · McastLoop—Multicast loop. · Mcast Interface Index—Multicast interface index. |
Acl Index/MacIndex |
· Acl Index—ACL filtering parameters. · MacIndex—Layer 2 ACL parameters. |
Mpls Flag/Label |
MPLS flag and MPLS label. |
Send Mac |
Peer MAC address specified for packet sending of upper-layer applications. |
Bier TTL/Entropy/TunnelID |
· Bier TTL. · Entropy—BIER grouping flag. · TunnelID—BIER tunnel ID. |
Ip Option Hdr |
IP options required in a TCP packet. |
display ipv6 udp
Use display ipv6 udp to display brief information about IPv6 UDP connections.
Syntax
display ipv6 udp [ slot slot-number ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
slot slot-number: Specifies the slot number of the device, which is fixed at 1.
Examples
# Displays brief information about IPv6 UDP connections.
<Sysname> display ipv6 udp
LAddr->port FAddr->port Slot Cpu PCB
2001:2002:2003:2 3001:3002:3003:3 1 0 0x000000000000c387
004:2005:2006:20 004:3005:3006:30
07:2008->1200 07:3008->1200
2001::1->23 2001::5->1284 2 0 0x0000000000000008
2003::1->25 2001::2->1283 3 0 0x0000000000000009
Table 12 Command output
Field |
Description |
LAddr->port |
Local IPv6 address and port number. |
FAddr->port |
Peer IPv6 address and port number. |
PCB |
PCB index. |
display ipv6 udp verbose
Use display ipv6 udp verbose to display detailed information about IPv6 UDP connections.
Syntax
display ipv6 udp verbose [ slot slot-number [ pcb pcb-index ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
slot slot-number: Specifies the slot number of the device, which is fixed at 1.
pcb pcb-index: Displays detailed information about IPv6 UDP connections of the specified PCB. The value range for the pcb-index argument varies by device model.
Examples
# Display detailed information about an IPv6 UDP connection.
<Sysname> display ipv6 udp verbose
Total UDP socket number: 1
Connection info: src = ::->69, dst = ::->0
Location: slot: 6 cpu: 0
Creator: sock_test_mips[250]
State: N/A
Options: N/A
Error: 0
Receiving buffer(cc/hiwat/lowat/drop/state): 0 / 41600 / 1 / 0 / N/A
Sending buffer(cc/hiwat/lowat/state): 0 / 9216 / 512 / N/A
Type: 2
Protocol: 17
Inpcb flags: N/A
Inpcb extflag: N/A
Inpcb vflag: INP_IPV6
Hop limit: 255 (minimum hop limit: 0)
Send VRF: 0xffff
Receive VRF: 0xffff
Table 13 Command output
Field |
Description |
Total UDP socket number |
Total number of IPv6 UDP sockets. |
Connection info |
Connection information, including source IPv6 address, source port number, destination IPv6 address, and destination port number. |
Location |
Socket location. |
Creator |
Task name of the socket. The progress number is in the square brackets. |
State |
Socket state: · NOFDREF—The user has closed the connection. · ISCONNECTED—The connection has been established. · ISCONNECTING—The connection is being established. · ISDISCONNECTING—The connection is being interrupted. · ASYNC—Asynchronous mode. · ISDISCONNECTED—The connection has been terminated. · ISSMOOTHING—Cross-card data smoothing is in progress. · CANBIND—The socket supports the bind operation. · PROTOREF—Indicates strong protocol reference. · ISPCBSYNCING—Cross-card PCB synchronization is in progress. · N/A—None of above state. |
Options |
Socket options: · SO_DEBUG—Records socket debugging information. · SO_ACCEPTCONN—Enables the server to listen connection requests. · SO_REUSEADDR—Allows the local address reuse. · SO_KEEPALIVE—Requires the protocol to test whether the connection is still alive. · SO_DONTROUTE—Bypasses the routing table query for outgoing packets because the destination is in a directly connected network. · SO_BROADCAST—Supports broadcast packets. · SO_LINGER—Closes the socket. The system can still send remaining data in the socket send buffer. · SO_OOBINLINE—Stores the out-o-band data in the input queue. · SO_REUSEPORT—Allows the local port reuse. · SO_TIMESTAMP—Records the timestamps of the input packets, accurate to milliseconds. This option is applicable to protocols that are not connection orientated. · SO_NOSIGPIPE—Disables the socket from sending data. As a result, a sigpipe cannot be established when a return failure occurs. · SO_TIMESTAMPNS—Has a similar function with the timestamp, accurate to nanoseconds. · SO_KEEPALIVETIME—Sets a keepalive time. This option is supported in TCP. · SO_FILTER—Supports setting the packet filter criterion. This option is available for OSI Socket and RawIP. · SO_USCBINDEX—Obtains the user profile index from the received packets. · SO_SEQPACKET—Preserves the boundaries of packets sent to the socket buffer. · SO_FILLTWAMPTIME—Sets the timestamp for TWAMP. · SO_LOCAL—Local socket option. · SO_NBMAADDR—Obtains the remote NBMA address of the ADVPN tunnel. · SO_DONTDELIVER—Do not deliver the data to the application. · SO_UCM—Sets the IPoE enabling status. · SO_RAWSLOT—Raw slot. · SO_LEASEDUSERID—Obtains a usable lease. · N/A—No options are set. |
Error |
Error code. |
Receiving buffer(cc/hiwat/lowat/drop/state) |
Displays receive buffer information in the following order: · cc—Used space. · hiwat—Maximum space. · lowat—Minimum space. · drop—Number of dropped packets. · state—Buffer state: ¡ CANTSENDMORE—Unable to send data to the peer. ¡ CANTRCVMORE—Unable to receive data from the peer. ¡ RCVATMARK—Receiving tag. ¡ N/A—None of the above states. |
Sending buffer(cc/hiwat/lowat/state) |
Displays send buffer information in the following order: · cc—Used space. · hiwat—Maximum space. · lowat—Minimum space. · state—Buffer state: ¡ CANTSENDMORE—Unable to send data to the peer. ¡ CANTRCVMORE—Unable to receive data from the peer. ¡ RCVATMARK—Receiving tag. ¡ N/A—None of the above states. |
Type |
Socket type: · 1—SOCK_STREAM. This socket uses TCP to provide reliable transmission of byte streams. · 2—SOCK_DGRAM. This socket uses UDP to provide datagram transmission. · 3—SOCK_RAW. This socket allows an application to change the next upper-layer protocol header. · N/A—None of the above types. |
Protocol |
Number of the protocol using the socket. 17 represents UDP. |
Inpcb flags |
Flags in the Internet PCB: · INP_RECVOPTS—Receives IPv6 options. · INP_RECVRETOPTS—Receives replied IPv6 options. · INP_RECVDSTADDR—Receives destination IPv6 address. · INP_HDRINCL—Provides the entire IPv6 header. · INP_REUSEADDR—Reuses the IPv6 address. · INP_REUSEPORT—Reuses the port number. · INP_ANONPORT—Port number not specified. · INP_PROTOCOL_PACKET—Identifies a protocol packet. · INP_RCVVLANID—Receives the VLAN ID of the packet. Only UDP and RawIP support this flag. · IN6P_IPV6_V6ONLY—Only supports IPv6 protocol stack. · IN6P_PKTINFO—Receives the source IPv6 address and input interface of the packet. · IN6P_HOPLIMIT—Receives the hop limit. · IN6P_HOPOPTS—Receives the hop-by-hop options extension header. · IN6P_DSTOPTS—Receives the destination options extension header. · IN6P_RTHDR—Receives the routing extension header. · IN6P_RTHDRDSTOPTS—Receives the destination options extension header preceding the routing extension header. · IN6P_TCLASS—Receives the traffic class of the packet. · IN6P_AUTOFLOWLABEL—Attaches a flow label automatically. · IN6P_RFC2292—Uses the API specified in RFC 2292. · IN6P_MTU—Discovers differences in the MTU size of every link along a given data path. TCP does not support this flag. · INP_RCVMACADDR—Receives the MAC address of the frame. · INP_SYNCPCB—Waits until Internet PCB is synchronized. · INP_LOCAL—Preferentially matches the INPCB with this flag on the same card. · N/A—None of the above flags. |
Inpcb extflag |
Extension flags in the Internet PCB: · INP_EXTRCVPVCIDX—Records the PVC index of the received packet. · INP_RCVPWID—Records the PW ID of the received packet. · INP_EXTDONTDROP—Do not drop the received packet. · INP_EXLISTEN—Adds the INPCB carrying this flag to the listen hash table. · INP_EXTFILTER—Filters the contents in the received packets. · INP_SELECTMATCHSRCBYFIB—Uses the FIB table to select a matching source. · INP_EXTRCVICMPERR—Receives an ICMP error packet. · INP_EXTPRIVATESOCKET—Associates the INPCB with the NSR private socket. · INP_EXTNOCACHEPKT—Do not cache packets. · INP_EXTRCVVLANDOT1P—Obtains the Dot1p value of the VLAN tag in the received packet. · INP_EXTSNDDATAIF—Sets the output interface of data. · INP_EXTFREEBIND—The socket is not bound to an address or port. · INP_EXTRCVUPID—Obtains the UP ID from the received packet in the UCM control-/user-plane separated (CUPS) network. · INP_EXTINNERPROXY—Receives packets forwarded by the proxy. · INP_EXLISTENNET—Sets this flag when the connection information is added to the network segment linked list. · N/A—None of the above flags. |
Inpcb vflag |
IP version flags in the Internet PCB: · INP_IPV4—IPv4 protocol. · INP_IPV6—IPv6 protocol. · INP_IPV6PROTO—Creates an Internet PCB based on IPv6 protocol. · INP_TIMEWAIT—In TIMEWAIT state. · INP_ONESBCAST—Sends broadcast packets. · INP_DROPPED—Protocol dropped flag. · INP_SOCKREF—Strong socket reference. · INP_DONTBLOCK—Do not block synchronization of the Internet PCB. · N/A—None of the above flags. |
Hop limit |
Hop limit in the Internet PCB. |
Send VRF |
This field is not supported in the current software version. VRF from which packets are sent. |
Receive VRF |
This field is not supported in the current software version. VRF from which packets are received. |
ipv6 address
Use ipv6 address to configure an IPv6 global unicast address for an interface.
Use undo ipv6 address to delete an IPv6 global unicast address of the interface.
Syntax
ipv6 address { ipv6-address prefix-length | ipv6-address/prefix-length }
undo ipv6 address [ ipv6-address prefix-length | ipv6-address/prefix-length ]
Default
No IPv6 global unicast address is configured for an interface.
Views
Interface view
Predefined user roles
network-admin
Parameters
ipv6-address: Specifies an IPv6 address.
prefix-length: Specifies a prefix length in the range of 1 to 128.
Usage guidelines
Like public IPv4 addresses, IPv6 global unicast addresses are assigned to ISPs. This type of address allows for prefix aggregation to reduce the number of global routing entries.
If you do not specify any parameters, the undo ipv6 address command deletes all IPv6 addresses of an interface.
Examples
# Set the IPv6 global unicast address of M-GigabitEthernet 1/0/1 to 2001::1 with prefix length 64.
Method 1:
<Sysname> system-view
[Sysname] interface M-GigabitEthernet1/0/1
[Sysname-M-GigabitEthernet1/0/1] ipv6 address 2001::1/64
Method 2:
<Sysname> system-view
[Sysname] interface M-GigabitEthernet1/0/1
[Sysname-M-GigabitEthernet1/0/1] ipv6 address 2001::1 64
ipv6 address anycast
Use ipv6 address anycast to configure an IPv6 anycast address for an interface.
Use undo ipv6 address anycast to delete the IPv6 anycast address of the interface.
Syntax
ipv6 address { ipv6-address prefix-length | ipv6-address/prefix-length } anycast
undo ipv6 address { ipv6-address prefix-length | ipv6-address/prefix-length } anycast
Default
No IPv6 anycast address is configured for an interface.
Views
Interface view
Predefined user roles
network-admin
Parameters
ipv6-address: Specifies an IPv6 anycast address.
prefix-length: Specifies a prefix length in the range of 1 to 128.
Examples
# Set the IPv6 anycast address of M-GigabitEthernet 1/0/1 to 2001::1 with prefix length 64.
Method 1:
<Sysname> system-view
[Sysname] interface M-GigabitEthernet1/0/1
[Sysname-M-GigabitEthernet1/0/1] ipv6 address 2001::1/64 anycast
Method 2:
<Sysname> system-view
[Sysname] interface M-GigabitEthernet1/0/1
[Sysname-M-GigabitEthernet1/0/1] ipv6 address 2001::1 64 anycast
ipv6 address auto
Use ipv6 address auto to enable the stateless address autoconfiguration feature on an interface, so that the interface can automatically generate a global unicast address.
Use undo ipv6 address auto to disable this feature.
Syntax
ipv6 address auto
undo ipv6 address auto
Default
The stateless address autoconfiguration feature is disabled.
Views
Interface view
Predefined user roles
network-admin
Usage guidelines
After a global unicast address is generated through stateless autoconfiguration, a link-local address is generated automatically.
To delete the global unicast address and the link-local address that are automatically generated, use either of the following commands:
· undo ipv6 address auto
· undo ipv6 address
An interface ID is used for generating the global unicast address and the link-local address for an interface. On an IEEE 802 interface (such as an Ethernet interface), the interface ID is derived from the MAC address of the interface. If the MAC address changes, the interface ID, global unicast address, and link-local address will also change. This will cause the entry table to rebuild for some protocols. If you do not want this situation to occur, use other IPv6 address configuration methods that do not use MAC addresses, for example, manually specify an IPv6 address.
Examples
# Enable stateless address autoconfiguration on M-GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface M-GigabitEthernet1/0/1
[Sysname-M-GigabitEthernet1/0/1] ipv6 address auto
ipv6 address auto link-local
Use ipv6 address auto link-local to automatically generate a link-local address for an interface.
Use undo ipv6 address auto link-local to restore the default.
Syntax
ipv6 address auto link-local
undo ipv6 address auto link-local
Default
No link-local address is configured on an interface. A link-local address is automatically generated after an IPv6 global unicast address is configured for the interface.
Views
Interface view
Predefined user roles
network-admin
Usage guidelines
Link-local addresses are used for neighbor discovery and stateless autoconfiguration on the local link. Packets using link-local addresses as the source or destination addresses cannot be forwarded to other links.
After an IPv6 global unicast address is configured for an interface, a link-local address is automatically generated. This link-local address is the same as the one generated by using the ipv6 address auto link-local command.
The undo ipv6 address auto link-local command deletes only the link-local addresses generated through the ipv6 address auto link-local command. If the undo command is executed on an interface with an IPv6 global unicast address configured, the interface still has a link-local address.
You can also manually assign an IPv6 link-local address for an interface by using the ipv6 address link-local command. Manual assignment takes precedence over automatic generation for IPv6 link-local addresses.
· If you first use automatic generation and then manual assignment, the manually assigned link-local address overwrites the automatically generated address.
· If you first use manual assignment and then automatic generation, both of the following occur:
¡ The automatically generated link-local address does not take effect.
¡ The link-local address of an interface is still the manually assigned address.
If you delete the manually assigned address, the automatically generated link-local address takes effect.
An interface ID is used for generating the global unicast address and the link-local address for an interface. On an IEEE 802 interface (such as an Ethernet interface), the interface ID is derived from the MAC address of the interface. If the MAC address changes, the interface ID, global unicast address, and link-local address will also change. This will cause the entry table to rebuild for some protocols. If you do not want this situation to occur, use other IPv6 address configuration methods that do not use MAC addresses, for example, manually specify an IPv6 address.
Examples
# Configure M-GigabitEthernet 1/0/1 to automatically generate a link-local address.
<Sysname> system-view
[Sysname] interface M-GigabitEthernet1/0/1
[Sysname-M-GigabitEthernet1/0/1] ipv6 address auto link-local
Related commands
ipv6 address link-local
ipv6 address eui-64
Use ipv6 address eui-64 to configure an EUI-64 IPv6 address for an interface.
Use undo ipv6 address eui-64 to delete an EUI-64 IPv6 address from an interface.
Syntax
ipv6 address { ipv6-address prefix-length | ipv6-address/prefix-length } eui-64
undo ipv6 address { ipv6-address prefix-length | ipv6-address/prefix-length } eui-64
Default
No EUI-64 IPv6 address is configured for an interface.
Views
Interface view
Predefined user roles
network-admin
Parameters
ipv6-address prefix-length: Specifies an IPv6 address and IPv6 prefix length. The ipv6-address and prefix-length arguments jointly specify the prefix of an EUI-64 IPv6 address. The value range for the prefix-length argument is 1 to 64. The IPv6 address and IPv6 prefix length support the following formats:
· ipv6-address/prefix-length. For example: 2001::1/64.
· ipv6-address prefix-length. For example: 2001::1 64.
Usage guidelines
An EUI-64 IPv6 address is generated based on the specified prefix and the automatically generated interface ID. To display the EUI-64 IPv6 address, use the display ipv6 interface command. The interface ID is derived from the MAC address of the interface. If the MAC address changes, the interface ID, global unicast address, and link-local address will also change. This will cause the entry table to rebuild for some protocols. If you do not want this situation to occur, use other IPv6 address configuration methods that do not use MAC addresses, for example, manually specify an IPv6 address.
The prefix length of an EUI-64 IPv6 address cannot be greater than 64.
Examples
# Configure an EUI-64 IPv6 address for M-GigabitEthernet 1/0/1. The prefix of the address is the same as that of 2001::1/64, and the interface ID is generated based on the MAC address of the device.
Method 1:
<Sysname> system-view
[Sysname] interface M-GigabitEthernet1/0/1
[Sysname-M-GigabitEthernet1/0/1] ipv6 address 2001::1/64 eui-64
Method 2:
<Sysname> system-view
[Sysname] interface M-GigabitEthernet1/0/1
[Sysname-M-GigabitEthernet1/0/1] ipv6 address 2001::1 64 eui-64
Related commands
display ipv6 interface
ipv6 address link-local
Use ipv6 address link-local to configure a link-local address for the interface.
Use undo ipv6 address link-local to restore the default.
Syntax
ipv6 address { ipv6-address [ prefix-length ] | ipv6-address/prefix-length } link-local
undo ipv6 address { ipv6-address [ prefix-length ] | ipv6-address/prefix-length } link-local
Default
No link-local address is configured for the interface.
Views
Interface view
Predefined user roles
network-admin
Parameters
ipv6-address: Specifies an IPv6 link-local address. The first 10 bits of an address must be 1111111010 (binary). The first group of hexadecimals in the address must be FE80 to FEBF.
prefix-length: Specifies an IPv6 prefix length, in the range of 1 to 128.
Usage guidelines
Manual assignment takes precedence over automatic generation.
If you use automatic generation, and then use manual assignment, the manually assigned link-local address overwrites the one that is automatically generated.
If you use manual assignment and then use automatic generation, both of the following occur:
· The automatically generated link-local address does not take effect.
· The manually assigned link-local address of an interface remains.
After you delete the manually assigned address, the automatically generated link-local address takes effect. For automatic generation of an IPv6 link-local address, see the ipv6 address auto link-local command.
When you configure a link-local address, make sure the prefix length is equal to or greater than 10. Otherwise, the configuration fails.
Examples
# Configure a link-local address for M-GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface M-GigabitEthernet1/0/1
[Sysname-M-GigabitEthernet1/0/1] ipv6 address fe80::1 link-local
# Configure a link-local address for M-GigabitEthernet 1/0/1 and set the prefix length to 64.
<Sysname> system-view
[Sysname] interface M-GigabitEthernet1/0/1
[Sysname-M-GigabitEthernet1/0/1] ipv6 address fe80::1 64 link-local
Related commands
ipv6 address auto link-local
ipv6 address
Use ipv6 address prefix-number to specify an IPv6 prefix for an interface to automatically generate an IPv6 global unicast address and advertise the prefix.
Use undo ipv6 address prefix-number to restore the default.
Syntax
ipv6 address prefix-number sub-prefix/prefix-length
undo ipv6 address prefix-number
Default
No IPv6 prefix is specified for IPv6 address autoconfiguration.
Views
Interface view
Predefined user roles
network-admin
Parameters
prefix-number: Specifies an IPv6 prefix by its ID in the range of 1 to 1024. The specified IPv6 prefix can be manually configured or obtained through DHCPv6.
sub-prefix: Specifies the sub-prefix bit and host bit for the IPv6 global unicast address.
prefix-length: Specifies the sub-prefix length in the range of 1 to 128.
Usage guidelines
This command enables an interface to automatically generate an IPv6 global unicast address based on the specified IPv6 prefix, sub-prefix bit, and host bit.
An interface can generate only one IPv6 global unicast address based on the prefix specified by using the ipv6 address command. To configure the interface to generate a new IPv6 address, execute the undo ipv6 address command to delete the configuration, and then execute the ipv6 address command.
Examples
# Configure a static IPv6 prefix AAAA::/16 and assign ID 1 to the prefix. Configure VLAN-interface 100 to use this prefix to generate the IPv6 address AAAA:CCCC:DDDD::10/32 and advertise this prefix.
<Sysname> system-view
[Sysname] ipv6 prefix 1 AAAA::/16
[Sysname] interface M-GigabitEthernet1/0/1
[Sysname-M-GigabitEthernet1/0/1] ipv6 address 1 BBBB:CCCC:DDDD::10/32
# Configure M-GigabitEthernet 1/0/1 to obtain an IPv6 prefix through DHCPv6 and assign ID 2 to the obtained prefix. Configure M-GigabitEthernet 1/0/2 to use the obtained prefix to generate the IPv6 address AAAA:CCCC:DDDD::10/32 and advertise the prefix.
<Sysname> system-view
[Sysname] interface M-GigabitEthernet1/0/1
[Sysname-M-GigabitEthernet1/0/1] ipv6 dhcp client pd 2 rapid-commit option-group 1
[Sysname-M-GigabitEthernet1/0/1] quit
[Sysname] interface M-GigabitEthernet1/0/2
[Sysname-M-GigabitEthernet1/0/2] ipv6 address 2 BBBB:CCCC:DDDD::10/32
Related commands
ipv6 prefix
ipv6 prefer temporary-address
Use ipv6 prefer temporary-address to enable the system to preferentially use the temporary IPv6 address of the sending interface as the source address of a packet.
Use undo ipv6 prefer temporary-address to disable the system to preferentially use the temporary IPv6 address of the sending interface as the source address of a packet.
Syntax
ipv6 prefer temporary-address
undo ipv6 prefer temporary-address
Default
The system is disabled to preferentially use the temporary IPv6 address of the sending interface as the source address of a packet.
Views
System view
Predefined user roles
network-admin
Usage guidelines
The temporary address feature enables the system to generate and preferentially use the temporary IPv6 address of the sending interface as the source address of a packet. If the temporary IPv6 address cannot be used because of a DAD conflict, the system uses the public IPv6 address.
Examples
# Enable the system to preferentially use the temporary IPv6 address of the sending interface as the source address of the packet.
<Sysname> system-view
[Sysname] ipv6 prefer temporary-address
Related commands
ipv6 address auto
ipv6 temporary-address
ipv6 prefix
Use ipv6 prefix to configure a static IPv6 prefix.
Use undo ipv6 prefix to delete a static IPv6 prefix.
Syntax
ipv6 prefix prefix-number ipv6-prefix/prefix-length
undo ipv6 prefix prefix-number
Default
No static IPv6 prefix is configured.
Views
System view
Predefined user roles
network-admin
Parameters
prefix-number: Specifies a prefix ID in the range of 1 to 1024.
ipv6-prefix/prefix-length: Specifies a prefix and its length. The value range for the prefix-length argument is 1 to 128.
Usage guidelines
To modify an existing static prefix, execute the undo ipv6 prefix command to delete the existing static prefix, and then execute the ipv6 prefix command.
Dynamic IPv6 prefixes obtained from DHCPv6 servers cannot be manually removed or modified.
A static IPv6 prefix can have the same prefix ID with a dynamic IPv6 prefix, but the static one takes precedence over the dynamic one.
Examples
# Create static IPv6 prefix 2001:0410::/32 with prefix ID 1.
<Sysname> system-view
[Sysname] ipv6 prefix 1 2001:0410::/32
Related commands
display ipv6 prefix
ipv6 temporary-address
Use ipv6 temporary-address to enable the temporary IPv6 address feature.
Use undo ipv6 temporary-address to restore the default.
Syntax
ipv6 temporary-address [ valid-lifetime preferred-lifetime ]
undo ipv6 temporary-address
Default
The system does not generate any temporary IPv6 address.
Views
System view
Predefined user roles
network-admin
Parameters
valid-lifetime: Specifies the valid lifetime for temporary IPv6 addresses, in the range of 600 to 4294967295 seconds. The default valid lifetime is 604800 seconds (7 days).
preferred-lifetime: Specifies the preferred lifetime for temporary IPv6 addresses, in the range of 600 to 4294967295 seconds. The default preferred lifetime is 86400 seconds (1 day).
Usage guidelines
You must enable stateless autoconfiguration before enabling the temporary address feature.
The valid lifetime for temporary IPv6 addresses must be greater than or equal to the preferred lifetime for temporary IPv6 addresses.
In stateless address autoconfiguration, an interface automatically generates an IPv6 global unicast address by using the address prefix in the received RA message and the interface ID. On an IEEE 802 interface (such as an Ethernet interface), the interface ID is generated based on the interface's MAC address and is globally unique. An attacker can exploit this rule to easily identify the sending device.
To fix the vulnerability, you can enable the temporary address feature. An IEEE 802 interface generates the following addresses:
· Public IPv6 address—Includes an address prefix in the RA message and a fixed interface ID generated based on the interface's MAC address.
· Temporary IPv6 address—Includes an address prefix in the RA message and a random interface ID generated through MD5.
When the valid lifetime of a temporary IPv6 address expires, the system deletes the address and generates a new one. This enables the system to send packets with different source addresses through the same interface. The preferred lifetime and valid lifetime for a temporary IPv6 address are determined as follows:
· The preferred lifetime of a temporary IPv6 address takes the smaller of the following values:
¡ The preferred lifetime of the address prefix in the RA message.
¡ The preferred lifetime configured for temporary IPv6 addresses minus DESYNC_FACTOR (a random number in the range of 0 to 600 seconds).
· The valid lifetime of a temporary IPv6 address takes the smaller of the following values:
¡ The valid lifetime of the address prefix.
¡ The valid lifetime configured for temporary IPv6 addresses.
Examples
# Enable the system to generate a temporary IPv6 address.
<Sysname> system-view
[Sysname] ipv6 temporary-address
Related commands
ipv6 address auto
ipv6 prefer temporary-address
reset ipv6 statistics
Use reset ipv6 statistics to clear IPv6 and ICMPv6 packet statistics.
Syntax
reset ipv6 statistics [ slot slot-number ]
Views
User view
Predefined user roles
network-admin
Parameters
slot slot-number: Specifies the slot number of the device, which is fixed at 1.
Examples
# Clear IPv6 and ICMPv6 packet statistics.
<Sysname> reset ipv6 statistics
Related commands
display ipv6 statistics