- Table of Contents
-
- H3C S5500-SI Series Ethernet Switches Command Manual-Release 1205-(V1.03)
- 00-1Cover
- 01-Login Command
- 02-Basic System Configuration and Maintenance Command
- 03-File System Management Command
- 04-VLAN Command
- 05-QinQ-BPDU TUNNEL Command
- 06-Port Correlation Configuration Command
- 07-MAC Address Table Management Command
- 08-MSTP Commands
- 09-IP Address and Performance Command
- 10-IPv6 Configuration Command
- 11-Routing Overview Command
- 12-IPv4 Routing Command
- 13-IPv6 Routing Command
- 14-802.1x-HABP-MAC Authentication Command
- 15-AAA-RADIUS-HWTACACS Command
- 16-Multicast Protocol Command
- 17-ARP Command
- 18-DHCP Command
- 19-ACL Command
- 20-QoS Command
- 21-Port Mirroring Command
- 22-Cluster Command
- 23-SNMP-RMON Command
- 24-NTP Command
- 25-DNS Command
- 26-Information Center Command
- 27-NQA Command
- 28-SSH Terminal Service Command
- 29-UDP Helper Command
- 30-SSL-HTTPS Command
- 31-PKI Command
- 32-PoE-PoE Profile Command
- 33-Appendix
- Related Documents
-
Title | Size | Download |
---|---|---|
09-IP Address and Performance Command | 184 KB |
Table of Contents
Chapter 1 IP Address Configuration Commands
1.1 IP Address Configuration Commands
1.1.2 display ip interface brief
Chapter 2 IP Performance Configuration Commands
2.1 IP Performance Configuration Commands
2.1.10 ip forward-broadcast (system view)
2.1.11 ip forward-broadcast (VLAN interface view)
Chapter 1 IP Address Configuration Commands
1.1 IP Address Configuration Commands
1.1.1 display ip interface
Syntax
display ip interface [ interface-type interface-number ]
View
Any view
Parameter
interface-type interface-number: Specifies an interface by its type and number.
Description
Use the display ip interface command to display information about a specified or all Layer 3 interfaces.
Example
# Display information about interface Vlan-interface1.
<Sysname> display ip interface Vlan-interface 1
Vlan-interface1 current state :UP
Line protocol current state :UP
Internet Address is 192.168.0.52/16 Primary
Broadcast address : 192.168.255.255
The Maximum Transmit Unit : 1500 bytes
input packets : 15223, bytes : 802714, multicasts : 0
output packets : 14218, bytes : 744254, multicasts : 0
ARP packet input number: 665839
Request packet: 665744
Reply packet: 95
Unknown packet: 0
TTL invalid packet number: 0
ICMP packet input number: 3
Echo reply: 0
Unreachable: 3
Source quench: 0
Routing redirect: 0
Echo request: 0
Router advert: 0
Router solicit: 0
Time exceed: 0
IP header bad: 0
Timestamp request: 0
Timestamp reply: 0
Information request: 0
Information reply: 0
Netmask request: 0
Netmask reply: 0
Unknown type: 0
Table 1-1 Description on fields of the display ip interface command
Field |
Description |
current state |
Current physical state of an interface |
Line protocol current state |
Current state of the link layer protocol |
Internet Address |
IP address of an interface. Primary behind an IP address indicates the IP address is a primary one, and Sub indicates the IP address is a secondary one. |
Broadcast address |
Broadcast address of the subnet attached to an interface |
The Maximum Transmit Unit |
Maximum transmission units on an interface |
input packets : 0, bytes : 0, multicasts : 0 output packets : 0, bytes : 0, multicasts : 0 |
Unicast packets, bytes, and multicast packets received on an interface Unicast packets, bytes, and multicast packets sent on an interface |
ARP packet input number: 665839 Request packet: 665744 Reply packet: 95 Unknown packet: 0 |
Total number of ARP packets received on an interface, including ARP request packets, ARP reply packets, and unknown packets |
TTL invalid packet number |
Number of TTL-invalid packets received on an interface |
ICMP packet input number: 0 Echo reply: 0 Unreachable: 0 Source quench: 0 Routing redirect: 0 Echo request: 0 Router advert: 0 Router solicit: 0 Time exceed: 0 IP header bad: 0 Timestamp request: 0 Timestamp reply: 0 Information request: 0 Information reply: 0 Netmask request: 0 Netmask reply: 0 Unknown type: 0 |
Total number of ICMP packets received on an interface, including the following packets: Echo reply packet, unreachable packets, source quench packets, routing redirect packets, echo request packets, router advertisement packets, router solicitation packets, time exceed packets, IP header bad packets, timestamp request packets, timestamp reply packets, information request packets, information reply packets, netmask request packets, netmask reply packets, and unknown type packets |
1.1.2 display ip interface brief
Syntax
display ip interface brief [ interface-type interface-number ]
View
Any view
Parameter
interface-type interface-number: Specifies an interface by its type and number.
Description
Use the display ip interface brief command to display brief information about a specified or all Layer 3 interfaces.
Related command: display ip interface.
Example
# Display brief information about interface Vlan-interface1.
<Sysname> display ip interface brief Vlan-interface 1
*down: administratively down
(s): spoofing
Interface Physical Protocol IP Address
Vlan-interface1 up up 192.168.0.52
Table 1-2 Description on fields of the display ip interface brief command
Field |
Description |
*down |
The interface is administratively shut down with the shutdown command. |
(s) |
Spoofing attribute of the interface. It indicates that an interface whose link layer protocol is displayed up may have no link present or the link is set up only on demand. |
Interface |
Interface name |
Physical |
Physical state of interface |
Protocol |
Link layer protocol state of interface |
IP Address |
IP address of interface |
1.1.3 ip address
Syntax
ip address ip-address { mask | mask-length } [ sub ]
undo ip address [ ip-address { mask | mask-length } [ sub ] ]
View
Interface view
Parameter
ip-address: IP address of interface, in dotted decimal notation.
mask: Subnet mask in dotted decimal notation.
mask-length: Subnet mask length, the number of consecutive ones in the mask.
sub: Secondary IP address for the interface.
Description
Use the ip address command to assign an IP address and mask to the interface.
Use the undo ip address command to remove all IP addresses.
Use the undo ip address ip-address { mask | mask-length } command to remove the primary IP address.
Use the undo ip address ip-address { mask | mask-length } sub command to remove a secondary IP address.
By default, no IP address is assigned to any interface.
When assigning IP addresses to an interface, consider the following:
l You can assign only one primary IP address to an interface.
l The primary and secondary IP addresses can be located in the same network segment.
l Before removing the primary IP address, remove all secondary IP addresses.
l You can assign a secondary IP address only when the interface is not configured to dynamically obtain IP address through BOOTP or DHCP.
Related command: display ip interface.
& Note:
With S5500-SI series Ethernet switches, you can configure IP addresses for VLAN interfaces and Loopback interfaces. Only 32-bit subnet masks can be configured on Loopback interfaces.
Example
# Assign Vlan-interface1 a primary IP address and a secondary IP address, with subnet masks being 255.255.255.0.
<Sysname> system-view
[Sysname] interface Vlan-interface 1
[Sysname-Vlan-interface1] ip address 129.12.0.1 255.255.255.0
[Sysname-Vlan-interface1] ip address 202.38.160.1 255.255.255.0 sub
Chapter 2 IP Performance Configuration Commands
2.1 IP Performance Configuration Commands
2.1.1 display fib
Syntax
display fib [ | { begin | include | exclude } text | acl acl-number | ip-prefix ip-prefix-name ]
View
Any view
Parameter
| { begin | include | exclude } text: Displays FIB information in the buffer related to the specified string according to a regular expression.
l The begin keyword specifies to display from the first FIB entry that contains the specified string text.
l The include keyword specifies to display only the FIB entries that include the specified string text.
l The exclude keyword specifies to display only the FIB entries that do not include the specified string text.
l The text argument is a string.
acl acl-number: Displays FIB information filtered through a specific ACL numbered from 2000 to 2999.
ip-prefix ip-prefix-name: Displays FIB information filtered through a specific prefix name (a string of 1 to 19 characters).
Description
Use the display fib command to display FIB forward information. If no parameters are specified, all FIB information will display.
Example
# Display all the FIB information.
<Sysname> display fib
FIB Table:
Total number of Routes : 2
Flag:
U:Useable G:Gateway H:Host B:Blackhole D:Dynamic S:Static
R:Reject L:Generated by ARP or ESIS
Destination/Mask Nexthop Flag TimeStamp Interface
127.0.0.0/8 127.0.0.1 U t[1141138116] InLoop0
127.0.0.1/32 127.0.0.1 HU t[1141138116] InLoop0
Table 2-1 Description on fields of the display fib command
Field |
Description |
Total number of Routes |
Total number of routes in the FIB table |
Destination/Mask |
Destination address/length of mask |
Nexthop |
Address of next hop |
Flag |
Signs of routers: l “U”—Router is available l “G”—Gateway is available l “H”—Host router l “B”—Blackhole l “D”—Dynamic router l “S”—Static router l “R”—Refused router, which is not available l “L”—Router created by ARP or ESIS |
TimeStamp |
Time stamp |
Interface |
Forward interface |
# Display FIB information filtered through ACL 2000
<Sysname> system-view
[Sysname] acl number 2000
[Sysname-acl-basic-2000] rule permit source 10.2.0.0 0.0.255.255
[Sysname-acl-basic-2000] display fib acl 2000
Route entry matched by access-list 2000:
Summary counts: 2
Flag:
U:Useable G:Gateway H:Host B:Blackhole D:Dynamic S:Static
R:Reject L:Generated by ARP or ESIS
Destination/Mask Nexthop Flag TimeStamp Interface
127.0.0.0/8 127.0.0.1 U t[1141138116] InLoop0
127.0.0.1/32 127.0.0.1 HU t[1141138116] InLoop0
# Display all lines starting from the line that contains the string “127”
<Sysname> display fib | begin 127
Flag:
U:Useable G:Gateway H:Host B:Blackhole D:Dynamic S:Static
R:Reject L:Generated by ARP or ESIS
Destination/Mask Nexthop Flag TimeStamp Interface
127.0.0.0/8 127.0.0.1 U t[1141138116] InLoop0
127.0.0.1/32 127.0.0.1 HU t[1141138116] InLoop0
# Display FIB information filtered through the prefix abc0
<Sysname> display fib ip-prefix abc0
Route Entry matched by prefix-list abc0:
Summary count: 2
Flag:
U:Useable G:Gateway H:Host B:Blackhole D:Dynamic S:Static
R:Reject L:Generated by ARP or ESIS
Destination/Mask Nexthop Flag TimeStamp Interface
127.0.0.0/8 127.0.0.1 U t[1141138116] InLoop0
127.0.0.1/32 127.0.0.1 HU t[1141138116] InLoop0
2.1.2 display fib ip-address
Syntax
display fib ip-address1 [ { mask1 | mask-length1 } [ ip-address2 { mask2 | mask-length2 } | longer ] | longer ]
View
Any view
Parameter
ip-address1, ip-address2: Destination IP address, in dotted decimal notation. ip-address1 and ip-address2 together determine an address range for the FIB entries to be displayed.
mask1, mask2: IP address mask.
mask-length1, mask-length2: Length of IP address mask, namely, the number of “1” in succession in the masks.
longer: Specifies to display FIB entries that match with the specified address/mask. If no masks are specified, FIB entries that match the destination address of the natural network segment will be displayed.
Description
Use the display fib ip-address command to display FIB information that matches the specified destination IP address. Each line in the displayed information stands for a FIB entry.
Example
# Display the FIB entries whose destination address match 10.1.0.0 in the range of natural masks.
<Sysname> display fib 10.1.0.0 longer
Route Entry Count: 2
Flag:
U:Useable G:Gateway H:Host B:Blackhole D:Dynamic S:Static
R:Reject L:Generated by ARP or ESIS
Destination/Mask Nexthop Flag TimeStamp Interface
10.0.0.0/8 10.1.1.1 U t[1141140133] Vlan1
10.1.1.1/32 127.0.0.1 HU t[1141140133] InLoop0
For explanation about the information above, refer to Table 2-1.
2.1.3 display fib statistics
Syntax
display fib statistics
View
Any view
Parameter
None
Description
Use the display fib statistics command to display statistics about the FIB entries.
Example
# Display statistics about the FIB entries.
<Sysname> display fib statistics
Route Entry Count : 2
Table 2-2 Description on fields of the display fib statistics command
Field |
Description |
Route Entry Count |
Number of FIB entries |
2.1.4 display icmp statistics
Syntax
display icmp statistics
View
Any view
Parameter
None
Description
Use the display icmp statistics command to display statistics of ICMP flows.
Related command: display ip interface, reset ip statistics.
Example
# Display ICMP statistics.
<Sysname> display icmp statistics
Input: bad formats 0 bad checksum 0
echo 5 destination unreachable 0
source quench 0 redirects 0
echo reply 10 parameter problem 0
timestamp 0 information request 0
mask requests 0 mask replies 0
time exceeded 0
Output:echo 10 destination unreachable 0
source quench 0 redirects 0
echo reply 5 parameter problem 0
timestamp 0 information reply 0
mask requests 0 mask replies 0
time exceeded 0
Table 2-3 Description on fields of the display icmp statistics command
Field |
Description |
bad formats |
Number of import packets of incorrect format. |
bad checksum |
Number of import packets of incorrect check sum. |
echo |
Number of import/export packets answering request. |
destination unreachable |
Number of packets with input/output destination unreachable |
source quench |
Number of import/export packets with source quenched. |
redirects |
Number of import/export packets to be redirected |
echo reply |
Number of import/export packets echoing reply. |
parameter problem |
Number of import/export packets with incorrect parameter |
timestamp |
Number of import/export packets for time stamp |
information request |
Number of import packets for information request |
mask requests |
Number of import/export packets with mask request |
mask replies |
Number of import/export packets for mask replies |
information reply |
Number of export packets for information reply |
time exceeded |
Number of import/export packets out of time |
2.1.5 display ip socket
Syntax
display ip socket [ socktype sock-type ] [ task-id socket-id ]
View
Any view
Parameter
sock-type: Type of a socket, in the range of 1 to 3, corresponding to TCP, UDP and raw IP respectively.
task-id: Identification of a task, ranging from 1 to 100
socket-id: Identification of a socket, ranging from 0 to 3072
Description
Use the display ip socket command to display socket information.
Example
# Display all socket information.
<Sysname> display ip socket
SOCK_STREAM:
Task = FTPS(69), socketid = 1, Proto = 6,
LA = 0.0.0.0:21, FA = 0.0.0.0:0,
sndbuf = 8192, rcvbuf = 8192, sb_cc = 0, rb_cc = 0,
socket option = SO_ACCEPTCONN SO_REUSEADDR SO_KEEPALIVE SO_SETKEEPALIVE,
socket state = SS_PRIV
Task = VTYD(44), socketid = 1, Proto = 6,
LA = 0.0.0.0:23, FA = 0.0.0.0:0,
sndbuf = 8192, rcvbuf = 8192, sb_cc = 0, rb_cc = 0,
socket option = SO_ACCEPTCONN SO_KEEPALIVE SO_REUSEPORT SO_SENDVPNID(3073) SO_SETKEEPALIVE,
socket state = SS_PRIV SS_ASYNC
Task = HTTP(42), socketid = 1, Proto = 6,
LA = 0.0.0.0:80, FA = 0.0.0.0:0,
sndbuf = 8192, rcvbuf = 8192, sb_cc = 0, rb_cc = 0,
socket option = SO_ACCEPTCONN SO_REUSEPORT,
socket state = SS_PRIV SS_NBIO
Task = VTYD(44), socketid = 5, Proto = 6,
LA = 192.168.0.52:23, FA = 192.168.0.10:1115,
sndbuf = 8192, rcvbuf = 8192, sb_cc = 714, rb_cc = 0,
socket option = SO_KEEPALIVE SO_OOBINLINE SO_REUSEPORT SO_SENDVPNID(0) SO_SETKEEPALIVE,
socket state = SS_ISCONNECTED SS_PRIV SS_ASYNC
SOCK_DGRAM:
Task = DHCP(45), socketid = 1, Proto = 17,
LA = 0.0.0.0:67, FA = 0.0.0.0:0,
sndbuf = 9216, rcvbuf = 41600, sb_cc = 0, rb_cc = 0,
socket option = SO_BROADCAST SO_REUSEPORT SO_UDPCHECKSUM,
socket state = SS_PRIV SS_ASYNC
Task = DHCC(46), socketid = 1, Proto = 17,
LA = 0.0.0.0:68, FA = 0.0.0.0:0,
sndbuf = 9216, rcvbuf = 41600, sb_cc = 0, rb_cc = 0,
socket option = SO_BROADCAST SO_REUSEPORTSO_SENDDATAIF SO_UDPCHECKSUM,
socket state = SS_PRIV SS_ASYNC
Task = NTPT(43), socketid = 1, Proto = 17,
LA = 0.0.0.0:123, FA = 0.0.0.0:0,
sndbuf = 9216, rcvbuf = 41600, sb_cc = 0, rb_cc = 0,
socket option = SO_UDPCHECKSUM,
socket state = SS_PRIV
Task = AGNT(52), socketid = 1, Proto = 17,
LA = 0.0.0.0:161, FA = 0.0.0.0:0,
sndbuf = 9216, rcvbuf = 41600, sb_cc = 0, rb_cc = 0,
socket option = SO_UDPCHECKSUM,
socket state = SS_PRIV SS_NBIO SS_ASYNC
Task = RDSO(59), socketid = 1, Proto = 17,
LA = 0.0.0.0:1024, FA = 0.0.0.0:0,
sndbuf = 9216, rcvbuf = 41600, sb_cc = 0, rb_cc = 0,
socket option = SO_UDPCHECKSUM,
socket state = SS_PRIV
Task = TRAP(53), socketid = 1, Proto = 17,
LA = 0.0.0.0:1026, FA = 0.0.0.0:0,
sndbuf = 9216, rcvbuf = 41600, sb_cc = 0, rb_cc = 0,
socket option = SO_UDPCHECKSUM,
socket state = SS_PRIV
Task = LSSO(57), socketid = 1, Proto = 17,
LA = 0.0.0.0:1645, FA = 0.0.0.0:0,
sndbuf = 9216, rcvbuf = 41600, sb_cc = 0, rb_cc = 0,
socket option = SO_UDPCHECKSUM,
socket state = SS_PRIV
Task = LSSO(57), socketid = 2, Proto = 17,
LA = 0.0.0.0:1646, FA = 0.0.0.0:0,
sndbuf = 9216, rcvbuf = 41600, sb_cc = 0, rb_cc = 0,
socket option = SO_UDPCHECKSUM,
socket state = SS_PRIV
Task = RDSO(59), socketid = 2, Proto = 17,
LA = 0.0.0.0:1812, FA = 0.0.0.0:0,
sndbuf = 9216, rcvbuf = 41600, sb_cc = 0, rb_cc = 0,
socket option = SO_UDPCHECKSUM,
socket state = SS_PRIV
SOCK_RAW:
Table 2-4 Description on fields of the display ip socket command
Field |
Description |
SOCK_STREAM |
Socket type of TCP |
SOCK_DGRAM |
Socket type of UDP |
SOCK_RAW |
Socket type of raw IP |
Task |
Task number |
socketid |
Socket ID |
Proto |
Protocol used by the socket |
LA |
Local address and local port number |
FA |
Remote address and remote port number |
sndbuf |
Size of socket sending buffer |
rcvbuf |
Size of socket receiving buffer |
sb_cc |
Current data size in the sending buffer (It is available only when TCP can buffer the data) |
rb_cc |
Current data size in the receiving buffer |
socket option |
Socket option |
socket state |
Socket state |
2.1.6 display ip statistics
Syntax
display ip statistics
View
Any view
Parameter
None
Description
Use the display ip statistics command to display statistics of IP traffic
Related command: display ip interface, reset ip statistics.
Example
# Display statistics of IP traffic.
<Sysname> display ip statistics
Input: sum 7120 local 112
bad protocol 0 bad format 0
bad checksum 0 bad options 0
Output: forwarding 0 local 27
dropped 0 no route 2
compress fails 0
Fragment:input 0 output 0
dropped 0
fragmented 0 couldn't fragment 0
Reassembling:sum 0 timeouts 0
Table 2-5 Description on fields of the display ip statistics command
Field |
Description |
|
Input: |
sum |
Total number of packets received |
local |
Total number of packets with destination being local |
|
bad protocol |
Total number of known packets |
|
bad format |
Total number of packets with incorrect format |
|
bad checksum |
Total number of packets with incorrect checksum . |
|
bad options |
Total number of packets with incorrect options |
|
Output: |
forwarding |
Total number of packets forwarded |
local |
Total number of packets sent from local |
|
dropped |
Total number of packets lost while transmitting |
|
no route |
Can’t find out the total number of packets routed |
|
compress fails |
Total number of packets whose compression fails |
|
Fragment: |
input |
Total number of fragment packets received |
output |
Total number of fragment packets sent |
|
dropped |
Total number of fragment packets dropped |
|
fragmented |
Total number of packets successfully fragmented |
|
couldn't fragment |
Total number of packets that can’t be fragmented |
|
Reassembling: |
sum |
Total number of packets reassembled |
timeouts |
Total number of fragment packets that timeout in reassembling |
2.1.7 display tcp statistics
Syntax
display tcp statistics
View
Parameter
None
Description
Use the display tcp statistics command to display statistics of TCP traffic
Related command: display tcp status and reset tcp statistics.
Example
# Display statistics of TCP traffic.
<Sysname> display tcp statistics
Received packets:
Total: 753
packets in sequence: 412 (11032 bytes)
window probe packets: 0, window update packets: 0
checksum error: 0, offset error: 0, short error: 0
duplicate packets: 4 (88 bytes), partially duplicate packets: 5 (7 bytes)
out-of-order packets: 0 (0 bytes)
packets of data after window: 0 (0 bytes)
packets received after close: 0
ACK packets: 481 (8776 bytes)
duplicate ACK packets: 7, too much ACK packets: 0
Sent packets:
Total: 665
urgent packets: 0
control packets: 5 (including 1 RST)
window probe packets: 0, window update packets: 2
data packets: 618 (8770 bytes) data packets retransmitted: 0 (0 bytes)
ACK-only packets: 40 (28 delayed)
Retransmitted timeout: 0, connections dropped in retransmitted timeout: 0
Keepalive timeout: 0, keepalive probe: 0, Keepalive timeout, so connections disconnected : 0
Initiated connections: 0, accepted connections: 0, established connections:0
Closed connections: 0 (dropped: 0, initiated dropped: 0)
Packets dropped with MD5 authentication: 0
Packets permitted with MD5 authentication: 0
Table 2-6 Description on fields of the display tcp statistics command
Field |
Description |
|
Received packets: |
Total |
Total number of packets received |
packets in sequence |
Number of packets arriving in a sequence, with size in bytes in brackets |
|
window probe packets |
Number of window probe packets received |
|
window update packets |
Number of window update packets received |
|
checksum error |
Number of checksum error packets received |
|
offset error |
Number of offset error packets received |
|
short error |
Number of packets received with length being too small |
|
duplicate packets |
Completely duplicate packets received, with size in bytes in brackets |
|
partially duplicate packets |
Partially duplicate packets received, with size in bytes in brackets |
|
out-of-order packets |
Out-of-order packets received, with size in bytes in brackets |
|
packets of data after window |
Number of packets loaded out of receiving window, with size in bytes in brackets |
|
packets received after close |
Number of packets arriving after connection closes |
|
ACK packets |
ACK packets received, with size in bytes in brackets |
|
duplicate ACK packets |
Duplicate ACK packets received |
|
too much ACK packets |
Number of ACK packets received that sent no data |
|
Sent packets: |
Total |
Total number of packets sent |
urgent packets |
Number of urgent packets sent |
|
control packets |
Number of control packets sent, with number of packets containing double sent data in brackets |
|
window probe packets |
Number of window probe packets sent |
|
window update packets |
Number of window update packets sent |
|
data packets |
Number of packets sent, with size in bytes in brackets |
|
data packets retransmitted |
Number of packets retransmitted, with size in bytes in brackets |
|
ACK-only packets |
Number of ACK packets sent, with number of delayed ACK packets in brackets |
|
Retransmitted timeout |
Retransmit a timer’s timeout |
|
connections dropped in retransmitted timeout |
Number of connections dropped due to retransmission timeout |
|
Keepalive timeout |
Times of timeout of a keepalive timer |
|
keepalive probe |
Number of keepalive probe packets sent |
|
Keepalive timeout, so connections disconnected |
Number of connections dropped due to failure of keepalive probe timer |
|
Initiated connections |
Number of connections initiated |
|
accepted connections |
Number of connections accepted |
|
established connections |
Number of connections established |
|
Closed connections |
Number of connections closed with number of connections dropped by accident (after receiving peer SYN) or failed (before receiving peer SYN) in the brackets |
|
Packets dropped with MD5 authentication |
Number of packets with MD5 authentication dropped |
|
Packets permitted with MD5 authentication |
Number of packets with MD5 authentication permitted |
2.1.8 display tcp status
Syntax
display tcp status
View
Any view
Parameter
None
Description
Use the display tcp status command to display the status of all the TCP connections so that a user can monitor TCP connections at any time.
Example
# Display the status of all the TCP connections
<Sysname> display tcp status
*: TCP MD5 Connection
TCPCB Local Add:port Foreign Add:port State
03e37dc4 0.0.0.0:4001 0.0.0.0:0 Listening
04217174 100.0.0.204:23 100.0.0.253:65508 Established
Table 2-7 Description on fields of the display tcp status command
Field |
Description |
* |
A connection with this mark is an MD5 encrypted TCP connection |
TCPCB |
TCP control block |
Local Add:port |
Local address and port number |
Foreign Add:port |
Remote IP address and port number |
State |
State of TCP connections |
2.1.9 display udp statistics
Syntax
display udp statistics
View
Any view
Parameter
None
Description
Use the display udp statistics command to display statistics of UDP flows.
Related command: reset udp statistics.
Example
# Display statistics of UDP flows.
<Sysname> display udp statistics
Received packets:
Total: 0
checksum error: 0
shorter than header: 0, data length larger than packet: 0
unicast(no socket on port): 0
broadcast/multicast(no socket on port): 0
not delivered, input socket full: 0
input packets missing pcb cache: 0
Sent packets:
Total: 0
Table 2-8 Description on fields of the display udp statistics command
Field |
Description |
|
Received packets: |
Total |
Total number of UDP packets received |
checksum error |
Total number of packets with incorrect checksum . |
|
shorter than header |
Number of packets with body shorter than head |
|
data length larger than packet |
Number of packets with data longer than body |
|
unicast(no socket on port) |
Number of unicast packets with no socket on port |
|
broadcast/multicast(no socket on port) |
Number of broadcast/multicast packets without socket on port |
|
not delivered, input socket full |
Number of packets not delivered to upper layer due to socket buffer being full |
|
input packets missing pcb cache |
Number of packets without matching PCB cache |
|
Sent packets: |
Total |
Total number of UDP packets sent |
2.1.10 ip forward-broadcast (system view)
Syntax
ip forward-broadcast
undo ip forward-broadcast
View
System view
Parameter
None
Description
Use the ip forward-broadcast command to allow an interface to receive directed broadcasts.
Use the undo ip forward-broadcast command to forbid an interface to receive directed broadcasts..
By default, an interface cannot receive directed broadcasts.
Example
# Permit the receiving of directed broadcasts.
<Sysname> system-view
[Sysname] ip forward-broadcast
2.1.11 ip forward-broadcast (VLAN interface view)
Syntax
ip forward-broadcast [ acl acl-number ]
undo ip forward-broadcast
View
VLAN interface view
Parameter
acl-number: Number of the ACL whose rules are used to filter the broadcast packets from a directly connected network segment, so as to determine whether these packets are to be forwarded based on the filtering result. The value of this argument ranges from 2000 to 3999, of which 2000 to 2999 are for basic ACL rules and 3000 to 3999 for advanced ACL rules.
Description
Use the ip forward-broadcast command to allow an interface to forward broadcast packets from directly connected network segments.
Use the undo ip forward-broadcast command to disable an interface from forwarding any broadcast packet from directly connected network segments.
By default, an interface cannot forward broadcast packets from directly connected network segments.
Example
# Allow Vlan-interface2 to forward broadcast packets from directly connected network segments passing ACL 2001.
<Sysname> system-view
[Sysname] interface Vlan-interface 2
[Sysname-Vlan-interface2] ip forward-broadcast acl 2001
2.1.12 ip redirects enable
Syntax
ip redirects enable
undo ip redirects
View
System view
Parameter
None
Description
Use the ip redirects enable command to enable sending a device’s ICMP redirection packet.
Use the undo ip redirects command to disable sending a device’s ICMP redirection packet.
Sending a device’s ICMP redirection packet is enabled by default.
Example
# Disable sending a device’s ICMP redirection packet.
<Sysname> system-view
[Sysname] undo ip redirects
The function is disabled!
2.1.13 ip ttl-expires enable
Syntax
ip ttl-expires enable
undo ip ttl-expires
View
System view
Parameter
None
Description
Use the ip ttl-expires enable command to enable sending a device’s ICMP timeout packet.
Use the undo ip ttl-expires command to disable sending a device’s ICMP timeout packet.
Sending a device’s ICMP timeout packet is enabled by default.
Note: The device stops sending “TTL timeout” ICMP error packets after sending ICMP timeout packets is disabled. But “reassembly timeout” error packets will be sent normally.
Example
# Disable sending a device’s ICMP timeout packet.
<Sysname> system-view
[Sysname] undo ip ttl-expires
The function is disabled!
2.1.14 ip unreachables enable
Syntax
ip unreachables enable
undo ip unreachables
View
System view
Parameter
None
Description
Use the ip unreachables enable command to enable sending a device’s ICMP destination unreachable packet.
Use the undo ip unreachables command to disable sending a device’s ICMP destination unreachable packet.
Sending a device’s ICMP destination unreachable packet is enabled by default.
Note: The device stops sending “network unreachable” and “source route unsuccessful” ICMP error packets after sending ICMP destination unreachable packets is disabled. But other destination unreachable packets will be sent normally.
Example
# Disable sending a device’s ICMP destination unreachable packet.
<Sysname> system-view
[Sysname] undo ip unreachables
The function is disabled!
2.1.15 reset ip statistics
Syntax
reset ip statistics
View
User view
Parameter
None
Description
Use the reset ip statistics command to clear IP statistics.
Related command: display ip interface, display ip statistics.
Example
# Clear IP statistics.
<Sysname> reset ip statistics
2.1.16 reset tcp statistics
Syntax
reset tcp statistics
View
User view
Parameter
None
Description
Use the reset tcp statistics command to clear statistics of TCP traffic.
Related command: display tcp statistics.
Example
# Clear statistics of TCP traffic.
<Sysname> reset tcp statistics
2.1.17 reset udp statistics
Syntax
reset udp statistics
View
User view
Parameter
None
Description
Use the reset udp statistics command to clear statistics of UDP traffic.
Example
# Clear statistics of UDP traffic.
<Sysname> reset udp statistics
2.1.18 tcp timer fin-timeout
Syntax
tcp timer fin-timeout time-value
undo tcp timer fin-timeout
View
System view
Parameter
time-value: TCP finwait timer value in seconds, ranging from 76 to 3600 with the default as 675 seconds.
Description
Use the tcp timer fin-timeout command to configure the TCP finwait timer.
Use the undo tcp timer fin-timeout command to resume the default configuration.
TCP finwait timer is 675 seconds by default.
Related command: tcp timer syn-timeout and tcp window.
Example
# Configure the value of TCP finwait timer as 800 seconds.
<Sysname> system-view
[Sysname] tcp timer fin-timeout 800
2.1.19 tcp timer syn-timeout
Syntax
tcp timer syn-timeout time-value
undo tcp timer syn-timeout
View
System view
Parameter
time-value: TCP finwait timer value in seconds, ranging from 2 to 600 with the default as 75 seconds.
Description
Use the tcp timer syn-timeout command to configure the TCP synwait timer.
Use the undo tcp timer syn-timeout command to resume the default configuration.
TCP synwait timer is 75 seconds by default.
Related command: tcp timer fin-timeout and tcp window.
Example
# Configure the value of TCP synwait timer as 80 seconds.
<Sysname> system-view
[Sysname] tcp timer syn-timeout 80
2.1.20 tcp window
Syntax
tcp window window-size
undo tcp window
View
System view
Parameter
window-size: The receiving/sending buffer size of TCP connection in KB, ranging from 1 to 32, with the default as 8 KB.
Description
Use the tcp window command to configure the receiving/sending buffer size of TCP connection.
Use the undo tcp window command to resume the default configuration.
The TCP receiving/sending buffer is 8 KB by default.
Related command: tcp timer fin-timeout and tcp timer syn-timeout.
Example
# Configure the receiving/sending buffer of TCP connection as 3 KB.
<Sysname> system-view
[Sysname] tcp window 3