Table of Contents

Chapter 1 Port Correlation Commands. 1-1

1.1 Port Correlation Commands. 1-1

1.1.1 broadcast-suppression. 1-1

1.1.2 description. 1-2

1.1.3 display brief interface. 1-3

1.1.4 display interface. 1-5

1.1.5 display loopback-detection. 1-8

1.1.6 display port combo. 1-9

1.1.7 display port-group manual 1-10

1.1.8 display storm-constrain. 1-11

1.1.9 duplex. 1-12

1.1.10 flow-control 1-13

1.1.11 group-member 1-14

1.1.12 interface. 1-15

1.1.13 jumboframe enable. 1-15

1.1.14 loopback. 1-16

1.1.15 loopback-detection control enable. 1-17

1.1.16 loopback-detection enable. 1-17

1.1.17 loopback-detection interval-time. 1-19

1.1.18 loopback-detection per-vlan enable. 1-19

1.1.19 mdi 1-20

1.1.20 multicast-suppression. 1-21

1.1.21 port-group. 1-22

1.1.22 reset counters interface. 1-23

1.1.23 shutdown. 1-24

1.1.24 speed. 1-24

1.1.25 storm-constrain. 1-25

1.1.26 storm-constrain control 1-26

1.1.27 storm-constrain enable log. 1-27

1.1.28 storm-constrain enable trap. 1-28

1.1.29 storm-constrain interval 1-28

1.1.30 unicast-suppression. 1-29

1.1.31 virtual-cable-test 1-31

Chapter 2 Port Isolation Configuration Commands. 2-1

2.1 Port Isolation Configuration Commands. 2-1

2.1.1 display port-isolate group. 2-1

2.1.2 port-isolate enable. 2-2

 

Chapter 1  Port Correlation Commands

1.1  Port Correlation Commands

1.1.1  broadcast-suppression

Syntax

broadcast-suppression { ratio | pps max-pps }

undo broadcast-suppression

View

Ethernet port view, port group view

Parameters

ratio: Maximum ratio of broadcast traffic to the total transmission capability of an Ethernet port, in the range of 1 to 100. The smaller the ratio, the less broadcast traffic is allowed to pass through the port.

pps max-pps: Specifies the maximum broadcast packet number per second for an Ethernet port, in pps, representing packets per second.

l           For GE port, the max-pps argument ranges from 1 to 1,488,100.

l           For 10 GE port, the max-pps argument ranges from 1 to 14,881,000.

Description

Use the broadcast-suppression command to configure the broadcast storm suppression ratio for one or multiple ports.

Use the undo broadcast-suppression command to restore the default broadcast storm suppression ratio.

By default, all broadcast traffic is allowed to pass through an Ethernet port, that is, broadcast traffic is not suppressed.

If you execute this command in Ethernet port view, the configurations take effect only on the current port. If you execute this command in port-group view, the configurations take effect on all ports in the port group.

Note that when broadcast traffic exceeds the maximum value configured, the system will discard the extra packets so that the broadcast traffic ratio falls below the limit to ensure that the network functions properly.

Examples

# Allow broadcast traffic equivalent to 20% of the total transmission capability of GigabitEthernet1/0/1 to pass and suppress the excessive broadcast packets.

<Sysname> system-view

[Sysname] interface GigabitEthernet1/0/1

[Sysname-GigabitEthernet1/0/1] broadcast-suppression 20

# On all the ports of the manual port group named group1, allow broadcast traffic equivalent to 20% of the total transmission capability of each port to pass and suppress excessive broadcast packets.

<Sysname> system-view

[Sysname] port-group manual group1

[Sysname-port-group-manual-group1] group-member gigabitethernet 1/0/2

[Sysname-port-group-manual-group1] group-member gigabitethernet 1/0/3

[Sysname-port-group manual group1] broadcast-suppression 20

1.1.2  description

Syntax

description text

undo description

View

Ethernet port view

Parameters

text: Description of an Ethernet port, a string of 1 to 80 characters.

Description

Use the description command to configure the description of an Ethernet port.

Use the undo description command to remove the description.

By default, the description of an Ethernet port is the port name followed by the “interface” string, GigabitEthernet1/0/1 Interface for example.

Examples

# Configure the description of port GigabitEthernet1/0/1 as lanswitch-interface.

<Sysname> system-view

[Sysname] interface GigabitEthernet1/0/1

[Sysname-GigabitEthernet1/0/1] description lanswitch-interface

1.1.3  display brief interface

Syntax

display brief interface [ interface-type [ interface-number ] ] [ | { begin | exclude | include } text ]

View

Any view

Parameters

interface-type: Type of a specified port.

interface-number: Number of a specified port.

|: Uses a regular expression to filter output information.

begin: Displays the line that matches the regular expression and all the subsequent lines. For detailed description on regular expression, refer to System Maintaining and Debugging Configuration.

exclude: Displays the lines that do not match the regular expression.

include: Displays the lines that match the regular expression.

text: Regular expression. a string of 1 to 256 characters. Note that this argument is case-sensitive.

Description

Use the display brief interface command to display brief port information, including simple port name, link state, protocol link state, protocol type, and main IP address.

l           If neither port type nor port number is specified, all port information will be displayed;

l           If only port type is specified, then only information of this particular type of port will be displayed.

l           If both port type and port number are specified, then only information of the specified port will be displayed.

Related commands: interface.

Examples

# Display brief information of port(s).

<Sysname> display brief interface

The brief information of interface(s) under route mode:

Interface            Link      Protocol-link  Protocol type    Main IP

Loop0                UP        UP(spoofing)   LOOP             10.1.1.1

NULL0                UP        UP(spoofing)   NULL             --

Tun0                 DOWN      DOWN           TUNNEL           --

Vlan1                UP        UP             ETHERNET         2.2.2.2

Vlan2                DOWN      DOWN           ETHERNET         1.1.1.1

 

The brief information of interface(s) under bridge mode:

Interface            Link      Speed     Duplex   Link-type  PVID

GE1/0/1              DOWN      auto      auto     access     1

GE1/0/2              DOWN      auto      auto     access     2

GE1/0/3              DOWN      auto      auto     access     1

GE1/0/4              DOWN      auto      auto     access     1

GE1/0/5              DOWN      auto      auto     access     1

GE1/0/6              DOWN      auto      auto     hybrid     1

GE1/0/7              UP        auto      auto     access     1

(The remain output information is omitted.)

# Display brief port information that contains the string UP.

<Sysname> display brief interface | include UP

The brief information of interface(s) under route mode:

Interface            Link      Protocol-link  Protocol type    Main IP

Loop0                UP        UP(spoofing)   LOOP             10.1.1.1

NULL0                UP        UP(spoofing)   NULL             --

Vlan1                UP        UP             ETHERNET         2.2.2.2

 

The brief information of interface(s) under bridge mode:

Interface            Link      Speed     Duplex   Link-type  PVID

GE1/0/7              UP        auto      auto     access     1

Table 1-1 Description on the fields of the display brief interface command.

Field	Description
The brief information of interface(s) under route mode	Brief information of port(s) in route mode
Interface	Port name
Link	Port physical link state, which can be up or down
Protocol-link	Port protocol link state, which can be up or down
Protocol type	Port protocol type
Main IP	Main IP
The brief information of interface(s) under bridge mode	Brief information of port(s) in bridge mode
Speed	Port rate, in bps
Duplex	Duplex mode, which can be half (half duplex), full (full duplex), or auto (auto-negotiation).
PVID	Default VLAN ID

 

Table 1-2 Acronyms for different types of ports

Port name	Acronyms
Ethernet	Eth
GigabitEthernet	GE
Ten-GigabitEthernet	XGE

 

1.1.4  display interface

Syntax

display interface [ interface-type [ interface-number ] ]

View

Any view

Parameters

interface-type: Type of a specified port.

interface-number: Number of a specified port.

Description

Use the display interface command to display the current state of a specified port and related information.

l           If neither port type nor port number is specified, all port information will be displayed;

l           If only port type is specified, then only information of this particular type of port will be displayed.

l           If both port type and port number are specified, then only information of the specified port will be displayed.

Related commands: interface.

Examples

# Display the current state of port GigabitEthernet1/0/1 and related information.

 GigabitEthernet1/0/1 current state: DOWN

 IP Packet Frame Type: PKTFMT_ETHNT_2, Hardware Address: 000f-e200-2200

 Description: GigabitEthernet1/0/1 Interface

 Loopback is not set

 Media type is twisted pair

 Port hardware type is  1000_BASE_T

 Unknown-speed mode, unknown-duplex mode

 Link speed type is autonegotiation, link duplex type is autonegotiation

 Flow-control is not enabled

 The Maximum Frame Length is 9216

 Broadcast MAX-ratio: 100%

 Unicast MAX-ratio: 100%

 Multicast MAX-ratio: 100%

 Allow jumbo frame to pass

 PVID: 1

 Mdi type: auto

 Link delay is 0(sec)

 Port link-type: access

  Tagged   VLAN ID : none

  Untagged VLAN ID : 1

 Port priority: 0

 Last 300 seconds input:  0 packets/sec 0 bytes/sec      -%

 Last 300 seconds output:  0 packets/sec 0 bytes/sec     -%

 Input (total):  0 packets, 0 bytes

          0 broadcasts, 0 multicasts

 Input (normal):  0 packets, - bytes

          0 broadcasts, 0 multicasts

 Input:  0 input errors, 0 runts, 0 giants, 0 throttles

          0 CRC, 0 frame, - overruns, 0 aborts

          - ignored, - parity errors

 Output (total): 0 packets, 0 bytes

          0 broadcasts, 0 multicasts, 0 pauses

 Output (normal): 0 packets, - bytes

          0 broadcasts, 0 multicasts, 0 pauses

 Output: 0 output errors, - underruns, - buffer failures

          0 aborts, 0 deferred, 0 collisions, 0 late collisions

          0 lost carrier, - no carrier

Table 1-3 Description on the fields of the display interface command (in bridge mode)

Field	Description
current state	Current physical link state of the Ethernet port
IP Packet Frame Type	Frame type of the Ethernet port
Hardware address	Hardware address
Description	Description of the port
Loopback is not set	Loopback is not configured
Unknown-speed mode	Unknown-speed mode, in which mode speed is negotiated between the current host and the peer
unknown-duplex mode	unknown-duplex mode, in which mode speed is negotiated between the current host and the peer
Link speed type is autonegotiation	Link speed type is autonegotiation
link duplex type is autonegotiation	Link duplex type is autonegotiation
Flow-control is not enabled	Flow-control is not enabled
The Maximum Frame Length	The maximum frame length allowed on a port
Broadcast MAX-ratio: 100%	Broadcast storm suppression ratio (the maximum ratio of allowed number of broadcast packets to overall traffic through a port)
Unicast MAX-ratio: 100%	Unicast storm suppression ratio (the maximum ratio of allowed number of unknown unicast packets to overall traffic through a port)
Multicast MAX-ratio: 100%	Multicast storm suppression ratio (the maximum ratio of allowed number of multicast packets to overall traffic through a port)
PVID	Default VLAN ID
Mdi type	Cable type
Link delay	Suppression time of physical-link-state changes on an Ethernet Port.
Port link-type	Port link type, which could be access, trunk, and hybrid.
Tagged   VLAN ID	Identify the VLANs that need Tag markers
Untagged VLAN ID	Identify the VLANs that do not need Tag markers
Last 300 seconds input:	Average input rate over the last 300 seconds,; among which: l      packets/sec indicates the average input rate in terms of the average number of the packets received per second. l      bytes/sec indicates the average input rate in terms of the average number of bytes received per second. l      x% indicates the percentage of this average input rate to the total bandwidth, where “-” indicates that the rate is greater than the maximum value that can be displayed.
Last 300 seconds output	Average output rate over the last 300 seconds, among which: l      packets/sec indicates the average output rate in terms of the average number of the packets output per second. l      bytes/sec indicates the average output rate in terms of the average number of bytes output per second. l      x% indicates the percentage of this average output rate to the total bandwidth, where “-” indicates that the rate is greater than the maximum value that can be displayed.
Input (total) Input (normal) Input Output (total) Output (normal) Output	Error statistics on the port inbound and outbound packets, underscore indicates that the corresponding entry is invalid

 

1.1.5  display loopback-detection

Syntax

display loopback-detection

View

Any view

Parameters

None

Description

Use the display loopback-detection command to display loopback detection information on a port

If loopback detection is already enabled, this command will also display the detection interval and information on the ports currently detected with a loopback.

Examples

# Display loopback detection information on a port.

<Sysname> display loopback-detection

 Loopback-detection is running

 Detection interval time is 30 seconds

 No port is detected with loopback

Table 1-4 Description on the fields of the display loopback-detection command.

Field	Description
Loopback-detection is running	Loopback-detection is running
Detection interval time is 30 seconds	Detection interval is 30 seconds
No port is detected with loopback	No port is currently being detected with a loopback

 

1.1.6  display port combo

Syntax

display port combo

View

Any view

Parameters

None

Description

Use the display port combo command to display the Combo ports of a device and the corresponding optical ports and electrical ports.

Examples

# Display the Combo ports of the device and the corresponding optical ports and electrical ports.

<Sysname> display port combo

  Combo-group         Active                      Inactive

       1         GigabitEthernet1/0/45       GigabitEthernet1/0/51

       2         GigabitEthernet1/0/46       GigabitEthernet1/0/49

       3         GigabitEthernet1/0/47       GigabitEthernet1/0/52

       4         GigabitEthernet1/0/48       GigabitEthernet1/0/50

Table 1-5 Description on the fields of the display port combo command

Field	Description
Combo-group	Combo ports of the device, represented by Combo port number, which is generated by the system.
Active	Ports of the Combo ports that are active
Inactive	Ports of the Combo ports that are inactive

 

As for the optical port and the electrical port of a Combo port, the one with the less smaller port number is active by default. The port number layout varies with device models. You can determine whether a port is an optical port or an electrical port by checking the “Media type is” field of the display interface command.

1.1.7  display port-group manual

Syntax

display port-group manual [ all | name port-group-name ]

View

Any view

Parameters

all: Specifies all the manual port groups.

name port-group-name: Specifies the name of a manual port group, a string of 1 to 32 characters.

Description

Use the display port-group manual command to display the information about a manual port group or all the manual port groups.

l           If you provide the port-group-name argument, this command displays the details for a specified manual port group, including its name and the Ethernet ports included.

l           If you provide the all keyword, this command displays the details for all manual port groups, including their names and the Ethernet ports included.

l           Absence of parameters indicates that the names of all the port groups will be displayed.

Examples

# Display the names of all the port groups.

<Sysname> display port-group manual

 The following manual port group exist(s):       

    group1                                 group2

# Display details of all the manual port groups.

<Sysname> display port-group manual all

 Member of group1: 

    GigabitEthernet1/0/4            GigabitEthernet1/0/6 

 

 Member of group2:  

    None

Table 1-6 Description on the fields of the display port-group manual command

Field	Description
The following manual port group exist(s)	List of the existing port groups
Member of group	Member of the manual port group

 

1.1.8  display storm-constrain

Syntax

display storm-constrain [ broadcast | multicast ] [ interface interface-type interface-number ]

View

Any view

Parameters

broadcast: Displays the information about storm constrain for broadcast packets.

multicast: Displays the information about storm constrain for multicast packets.

interface interface-type interface-number: Specifies a port by its number and type. The storm constrain information about the port will be displayed.

Description

Use the display storm-constrain command to display the information about storm constrain.

If you provide no argument or keyword, this command displays the information about storm constrain for all types of packets on all the ports.

Examples

# Display the information about storm constrain for all types of packets on all the ports.

<Sysname> display storm-constrain

Flow Statistic Interval: 10(second)

PortName      StormType LowerLimit UpperLimit Ctr-mode Status  Trap Log Swi-num

--------------------------------------------------------------------------

GE1/0/9     broadcast 200       2000       block    normal  on   on  0

Table 1-7 Description on the fields of the display storm-constrain command

Field	Description
Flow Statistic Interval	Interval for generating storm constrain statistics
PortName	Simplified port index
StormType	Type of the packets for which storm constrain function is enabled, which can be broadcast (for broadcast packets), multicast (for multicast packets).
LowerLimit	Lower threshold (in pps)
UpperLimit	Upper threshold (in pps)
Ctr-mode	Action to be taken when the upper threshold is reached, which can be block, shutdown, and N/A.
Status	Port state, which can be normal (indicating the port operates properly), control (indicating the port is blocked or shut down).
Trap	State of trap messages sending. “on” indicates trap message sending is enabled; “off” indicates trap message sending is disabled.
Log	State of log sending. “on” indicates log sending is enabled; “off” indicates log sending is disabled.
Swi-num	Number of the forwarding state switching. This field is numbered modulo 65,536.

 

1.1.9  duplex

Syntax

duplex { auto | full | half }

undo duplex

View

Ethernet port view

Parameters

auto: Indicates that the port is in auto-negotiation state.

full: Indicates that the port is in full-duplex state.

half: Indicates that the port is in half-duplex state.

Description

Use the duplex command to configure the duplex mode for an Ethernet port.

Use the undo duplex command to restore the duplex mode for an Ethernet port to the default.

By default, the duplex mode for an Ethernet port is auto.

Related commands: speed.

Examples

# Configure the port GigabitEthernet1/0/1 to work in full-duplex mode.

<Sysname> system-view

[Sysname] interface GigabitEthernet1/0/1

[Sysname-GigabitEthernet1/0/1] duplex full

1.1.10  flow-control

Syntax

flow-control

undo flow-control

View

Ethernet port view

Parameters

None

Description

Use the flow-control command to enable flow control on an Ethernet port.

 Use the undo flow-control command to disable flow control on an Ethernet port.

By default, flow control on an Ethernet port is disabled.

 

 

Examples

# Enable flow control on port GigabitEthernet1/0/1.

<Sysname> system-view

[Sysname] interface GigabitEthernet1/0/1

[Sysname-GigabitEthernet1/0/1] flow-control

1.1.11  group-member

Syntax

group-member interface-list

undo group-member interface-list

View

Port group view

Parameters

interface-list: Ethernet port list, in the form of interface-type interface-number [ to interface-type interface-number ] &<1-10>, where &<1-10> indicates that you can specify up to 10 port or port ranges.

Description

Use the group-member command to add an Ethernet port to a specified manual port group.

Use the undo group-member command to remove a specified Ethernet port from a manual port group.

By default, there is no Ethernet port in a manual port group.

Examples

# Add port GigabitEthernet1/0/1 to the manual port group named group 1.

<Sysname> system-view

[Sysname] port-group manual group1

[Sysname-port-group-manual-group1] group-member GigabitEthernet1/0/1

1.1.12  interface

Syntax

interface interface-type interface-number

View

System view

Parameters

interface-type interface-number: Port type and port number.

Description

Use the interface command to enter the related port view.

Examples

# Enter GigabitEthernet1/0/1 port view.

<Sysname> system-view

[Sysname] interface GigabitEthernet1/0/1

[Sysname-GigabitEthernet1/0/1]

1.1.13  jumboframe enable

Syntax

jumboframe enable

undo jumboframe enable

View

Ethernet port view, port group view

Parameters

None

Description

Use the jumboframe enable command to set the maximum frame length allowed on an Ethernet port to 9216 bytes.

Use the undo jumboframe enable command to set the maximum frame length allowed on an Ethernet port to 1536 bytes.

By default, the maximum frame length allowed on an Ethernet port is 9216 bytes.

You can configure in Ethernet port view or port-group view to allow jumbo frames with specified length to pass through Ethernet ports.

l           Execution of this command under Ethernet port view will only apply the configuration to the current Ethernet port.

l           Execution of this command under port group view will apply the configurations to all the ports in the port group.

Examples

# Enable jumbo frames under 9216 bytes to pass through port GigabitEthernet1/0/1.

<Sysname> system-view

[Sysname] interface GigabitEthernet1/0/1

[Sysname-GigabitEthernet1/0/1] jumboframe enable

1.1.14  loopback

Syntax

loopback { external | internal }

View

Ethernet port view

Parameters

external: Enables external loopback test on an Ethernet port.

internal: Enables internal loopback test on an Ethernet port.

Description

Use the loopback command to enable Ethernet port loopback test.

By default, Ethernet port loopback test is disabled.

 

 

Examples

# Enable internal loopback test on GigabitEthernet1/0/1.

<Sysname> system-view

[Sysname] interface GigabitEthernet1/0/1

[Sysname-GigabitEthernet1/0/1] loopback internal

 Loop internal succeeded!

1.1.15  loopback-detection control enable

Syntax

loopback-detection control enable

undo loopback-detection control enable

View

Ethernet port view

Parameters

None

Description

Use the loopback-detection control enable command to enable loopback detection for a Trunk port or Hybrid port.

Use the undo loopback-detection control enable command to restore the default.

By default, loopback detection for a Trunk port or Hybrid port is disabled.

l           When the loopback detection is enabled, if a port has been detected with loopback, it will be shutdown. A Trap message will be sent to the terminal and the corresponding MAC address forwarding entries will be deleted.

l           When the loopback detection is disabled, if a port has been detected with loopback, a Trap message will be sent to the terminal. The port is still working properly.

Note that this command is inapplicable to an Access port as its loopback detection is enabled by default.

Examples

# Enable loopback detection for trunk port GigabitEthernet1/0/1.

<Sysname> system-view

[Sysname] loopback-detection enable

[Sysname] interface GigabitEthernet1/0/1

[Sysname-GigabitEthernet1/0/1] port link-type trunk

[Sysname-GigabitEthernet1/0/1] loopback-detection enable

[Sysname-GigabitEthernet1/0/1] loopback-detection control enable

1.1.16  loopback-detection enable

Syntax

loopback-detection enable

undo loopback-detection enable

View

System view, Ethernet port view

Parameters

None

Description

Use the loopback-detection enable command to enable loopback detection globally or on a specified port.

Use the undo loopback-detection enable command to disable loopback detection globally or on a specified port.

By default, loopback detection is disabled for an Access, Trunk, or Hybrid port.

l           If an Access port has been detected with loopback, it will be shutdown. A Trap message will be sent to the terminal and the corresponding MAC address

l           If a Trunk port or Hybrid port has been detected with loopback, a Trunk message will be sent to the terminal. They will be shutdown if the loopback testing function is enabled on them. In addition, a Trap message will be sent to the terminal and the corresponding MAC address forwarding entries will be deleted.

Related commands: loopback-detection control enable.

 

 

Examples

# Enable loopback detection on port GigabitEthernet1/0/1.

<Sysname> system-view

[Sysname] loopback-detection enable

[Sysname] interface GigabitEthernet1/0/1

[Sysname-GigabitEthernet1/0/1] loopback-detection enable

1.1.17  loopback-detection interval-time

Syntax

loopback-detection interval-time time

undo loopback-detection interval-time

View

System view

Parameters

time: Time interval for performing port loopback detection, in the range 5 to 300 (in seconds).

Description

Use the loopback-detection interval-time command to configure time interval for performing port loopback detection.

Use the undo loopback-detection interval-time command to restore the default time interval for port loopback detection, which is 30 seconds.

Related commands: display loopback-detection.

Examples

# Set the time interval for performing port loopback detection to 10 seconds.

<Sysname> system-view

[Sysname] loopback-detection interval-time 10

1.1.18  loopback-detection per-vlan enable

Syntax

loopback-detection per-vlan enable

undo loopback-detection per-vlan enable

View

Ethernet port view

Parameters

None

Description

Use the loopback-detection per-vlan enable command to enable loopback detection in all VLANs with Trunk ports or Hybrid ports.

Use the undo loopback-detection per-vlan enable command to enable loopback detection in the default VLAN with Trunk ports or Hybrid ports.

By default, loopback detection is only enabled in the default VLAN(s) with Trunk ports or Hybrid ports.

Note that the loopback-detection per-vlan enable command is not applicable to Access ports.

Examples

# Enable loopback detection in all the VLANs to which the Hybrid port GigabitEthernet1/0/1 belongs.

<Sysname> system-view

[Sysname] loopback-detection enable

[Sysname] interface GigabitEthernet1/0/1

[Sysname-GigabitEthernet1/0/1] loopback-detection enable

[Sysname-GigabitEthernet1/0/1] port link-type trunk

[Sysname-GigabitEthernet1/0/1] loopback-detection per-vlan enable

1.1.19  mdi

Syntax

mdi { across | auto | normal }

undo mdi

View

Ethernet port view

Parameters

across: Specifies crossover cables for the Ethernet port.

auto: Configures the Ethernet port to sense the cable type automatically.

normal: Specifies straight-through cables for the Ethernet port.

Description

Use the mdi command to configure the cable type that can be sensed by an Ethernet port.

Use the undo mdi command to restore the system default.

By default, an Ethernet port senses the type of the network cable connected to it automatically.

 

 

Examples

# Configure the port GigabitEthernet1/0/1 to use cross over cable.

<Sysname> system-view

[Sysname] interface GigabitEthernet1/0/1

[Sysname-GigabitEthernet1/0/1] mdi across

1.1.20  multicast-suppression

Syntax

multicast-suppression { ratio | pps max-pps }

undo multicast-suppression

View

Ethernet port view, port group view

Parameters

ratio: Maximum ratio of multicast traffic to the total transmission capability of an Ethernet port, in the range of 1 to 100. The smaller the ratio is, the less multicast traffic is allowed to pass through the port.

pps max-pps: Specifies the maximum number of multicast packets passing an Ethernet port, in pps, representing packets per second.

l           For GE port, the max-pps argument ranges from 1 to 1,488,100.

l           For 10 GE port, the max-pps argument ranges from 1 to 14,881,000.

Description

Use the multicast-suppression command to configure multicast storm suppression ratio on an port.

Use the undo multicast-suppression command to restore the default multicast suppression ratio.

By default, all multicast traffic is allowed to go through an Ethernet port, that is, multicast traffic is not suppressed.

If you execute this command in Ethernet port view, the configurations take effect only on the current port. If you execute this command in port-group view, the configurations take effect on all ports in the port group.

Note that when multicast traffic exceeds the maximum value configured, the system will discard the extra packets so that the multicast traffic ratio can drop below the limit to ensure that the network functions properly.

 

 

Examples

# Allow multicast traffic equivalent to 20% of the total transmission capability to pass through GigabitEthernet1/0/1 and suppress the excessive multicast packets.

<Sysname> system-view

[Sysname] interface GigabitEthernet1/0/1

[Sysname-GigabitEthernet1/0/1] multicast-suppression 20

# On all the ports of the manual port group named group1, allow multicast traffic equivalent to 20% of the total transmission capability of each port to pass and suppress excessive multicast packets.

<Sysname> system-view

[Sysname] port-group manual group1

[Sysname-port-group-manual-group1] group-member gigabitethernet 1/0/2

[Sysname-port-group-manual-group1] group-member gigabitethernet 1/0/3

[Sysname-port-group manual group1] multicast-suppression 20

1.1.21  port-group

Syntax

port-group { manual port-group-name | aggregation agg-id }

undo port-group manual port-group-name

View

System view

Parameters

manual port-group-name: Specifies name of a specified manual port group, a string of 1 to 32 characters.

aggregation agg-id: Specifies number of a port aggregation group. The specified port aggregation group must already exist. You can use the display link-aggregation summary command to display brief information of all existing port aggregation groups.

Description

Use the port-group manual command to create a manual port group and enter manual port group view.

Use the port-group aggregation command to enter aggregation group view.

Use the undo port-group manual command to remove a manual port group.

By default, no manual port group is created.

Examples

# Create a manual port group named group1.

<Sysname> system-view

[Sysname] port-group manual group1

[Sysname-port-group-manual-group1]

1.1.22  reset counters interface

Syntax

reset counters interface [ interface-type [ interface-number ] ]

View

User view

Parameters

interface-type: Port type.

interface-number: Port number.

Description

Use the reset counters interface command to reset statistics for a specified port.

To sample network traffic within a period of time for a port, you need to reset the original port statistics.

l           If neither port type nor port number is specified, all port information will be reset;

l           If only port type is specified, then only information of this particular type of ports will be reset.

l           If both port type and port number are specified, then only information of the specified port will be reset.

Examples

# Clear the statistics on GigabitEthernet1/0/1.

<Sysname> reset counters interface GigabitEthernet1/0/1

1.1.23  shutdown

Syntax

shutdown

undo shutdown

View

Ethernet port view

Parameters

None

Description

Use the shutdown command to shut down an Ethernet port.

Use the undo shutdown command to bring up an Ethernet port.

In certain circumstances, modification to the port parameters does not immediately take effect, and therefore, you need to shut down the relative port to make the modification work.

Examples

# Shut down the port GigabitEthernet1/0/1.

<Sysname> system-view

[Sysname] interface GigabitEthernet1/0/1

[Sysname-GigabitEthernet1/0/1] shutdown

# Bring up the port GigabitEthernet1/0/1.

<Sysname> system-view

[Sysname] interface GigabitEthernet1/0/1

[Sysname-GigabitEthernet1/0/1] undo shutdown

1.1.24  speed

Syntax

speed { 10 | 100 | 1000 | auto }

undo speed

View

Ethernet port view

Parameters

10: Specifies the port rate as 10 Mbps.

100: Specifies the port rate as 100 Mbps.

1000: Specifies the port rate as 1,000 Mbps.

auto: Specifies to determine the port rate through auto-negotiation.

Description

Use the speed command to configure Ethernet port data rate.

Use the undo speed command to restore Ethernet port data rate.

By default, Ethernet port data rate is automatically negotiated between peer Ethernet ports.

Note that the speed 1000 command is only applicable to Gigabit Ethernet ports.

Related commands: duplex.

Examples

# Configure the port rate as 100 Mbps for port GigabitEthernet1/0/1.

<Sysname> system-view

[Sysname] interface GigabitEthernet1/0/1

[Sysname-GigabitEthernet1/0/1] speed 100

1.1.25  storm-constrain

Syntax

storm-constrain { broadcast | multicast } pps max-pps-values min-pps-values

undo storm-constrain { all | broadcast | multicast }

View

Ethernet port view

Parameters

all: Disables the storm constrain function for all types of packets (that is, unicast packets, multicast packets, and broadcast packets).

broadcast: Enables/Disables the storm constrain function for broadcast packets.

multicast: Enables/Disables the storm constrain function for multicast packets.

pps: Specifies that the thresholds to be configured are measured in pps.

max-pps-values: Upper threshold to be set, in pps, representing packets per second.

l           For GE port, the max-pps-values argument ranges from 1 to 1,488,100 (in pps).

l           For 10 GE port, the max-pps-values argument ranges from 1 to 14,881,000 (in pps).

min-pps-values: Lower threshold to be set, in the range 1 to max-pps-values (in pps).

Description

Use the storm-constrain command to enable the storm constrain function for specific type of packets and set the upper and lower thresholds.

Use the undo storm-constrain command to disable the storm constrain function for specific type of packets.

By default, the storm constrain function is not enabled.

 

 

Examples

# Enable the storm constrain function for broadcast packets on GigabitEthernet1/0/1, setting the upper and lower threshold to 200 pps and 150 pps.

<Sysname> system-view

[Sysname] interface GigabitEthernet1/0/1

[Sysname-GigabitEthernet1/0/1] storm-constrain broadcast pps 200 150

1.1.26  storm-constrain control

Syntax

storm-constrain control { block | shutdown }

undo storm-constrain control

View

Ethernet port view

Parameters

block: Blocks the traffic of a specific type on a port when the traffic detected exceeds the upper threshold.

shutdown: Shuts down a port when a type of traffic exceeds the corresponding upper threshold. A port shut down by the storm constrain function stops forwarding all types of packets.

Description

Use the storm-constrain control command to set the action to be taken when a type of traffic exceeds the corresponding upper threshold.

Use the undo storm-constrain control command to restore the default.

By default, no action is taken when a type of traffic exceeds the corresponding threshold.

Examples

# Configure to block port GigabitEthernet1/0/1 when a type of traffic reaching it exceeds the corresponding upper threshold.

<Sysname> system-view

[Sysname] interface GigabitEthernet1/0/1

[Sysname-GigabitEthernet1/0/1] storm-constrain control block

1.1.27  storm-constrain enable log

Syntax

storm-constrain enable log

undo storm-constrain enable log

View

Ethernet port view

Parameters

None

Description

Use the storm-constrain enable log command to enable log sending. With log sending enabled, the system sends log when traffic reaching a port exceeds the corresponding threshold or the traffic drops down below the lower threshold after exceeding the upper threshold.

Use the undo storm-constrain enable log command to disable log sending.

By default, log sending is enabled.

Examples

# Disable log sending for GigabitEthernet1/0/1.

<Sysname> system-view

[Sysname] interface GigabitEthernet1/0/1

[Sysname-GigabitEthernet1/0/1] undo storm-constrain enable log

1.1.28  storm-constrain enable trap

Syntax

storm-constrain enable trap

undo storm-constrain enable trap

View

Ethernet port view

Parameters

None

Description

Use the storm-constrain enable trap command to enable trap message sending. With trap message sending enabled, the system sends trap messages when traffic reaching a port exceeds the corresponding threshold or the traffic drops down below the lower threshold after exceeding the upper threshold.

Use the undo storm-constrain enable trap command to disable trap message sending.

By default, trap message sending is enabled.

Examples

# Disable trap message sending on GigabitEthernet1/0/1.

<Sysname> system-view

[Sysname] interface GigabitEthernet1/0/1

[Sysname-GigabitEthernet1/0/1] undo storm-constrain enable trap

1.1.29  storm-constrain interval

Syntax

storm-constrain interval seconds

undo storm-constrain interval

View

System view

Parameters

seconds: Interval for generating traffic statistics, in the range 1 to 300 (in seconds).

Description

Use the storm-constrain interval command to set the interval for generating traffic statistics.

Use the undo storm-constrain interval command to restore the default.

By default, the interval for generating traffic statistics is 10 seconds.

 

 

Examples

# Set the interval for generating traffic statistics to 60 seconds.

<Sysname> system-view

[Sysname] storm-constrain interval 60

1.1.30  unicast-suppression

Syntax

unicast-suppression { ratio | pps max-pps }

undo unicast-suppression

View

Ethernet port view, port group view

Parameters

ratio: Maximum ratio of unicast traffic to the total transmission capability of an Ethernet port, in the range of 1 to 100. The smaller the ratio is, the less unicast traffic is allowed through the port.

pps max-pps: Specifies the maximum number of unknown unicast packets passing through an Ethernet port, in pps, representing packets per second.

l           For GE port, the max-pps argument ranges from 1 to 1,488,100.

l           For 10 GE port, the max-pps argument ranges from 1 to 14,881,000.

Description

Use the unicast-suppression command to configure a unicast storm suppression ratio.

Use the undo unicast-suppression command to restore the default unicast suppression ratio.

By default, all unicast traffic is allowed to go through an Ethernet port, that is, unicast traffic is not suppressed.

If you execute this command in Ethernet port view, the configurations take effect only on the current port. If you execute this command in port-group view, the configurations take effect on all ports in the port group

Note that when unicast traffic exceeds the maximum value configured, the system will discard the extra packets so that the unknown unicast traffic ratio can drop below the limit to ensure that the network functions properly.

 

 

Examples

# Allow unicast traffic equivalent to 20% of the total transmission capability of the port to pass through GigabitEthernet1/0/1 and suppress the excessive unknown unicast packets.

<Sysname> system-view

[Sysname] interface GigabitEthernet1/0/1

[Sysname-GigabitEthernet1/0/1] unicast-suppression 20

# On all ports of the manual port group “group1”, allow unknown unicast traffic equivalent to 20% of the total transmission capability of each port to pass and suppress excessive unknown unicast packets.

[Sysname-GigabitEthernet1/0/1] quit

[Sysname] port-group manual group1

[Sysname-port-group-manual-group1] group-member gigabitethernet 1/0/2

[Sysname-port-group-manual-group1] group-member gigabitethernet 1/0/3

[Sysname-port-group manual group1] unicast-suppression 20

1.1.31  virtual-cable-test

Syntax

virtual-cable-test

View

Ethernet port view

Parameters

None

Description

Use the virtual-cable-test command to enable the virtual cable test for an Ethernet port and to display the testing result. The tested items include:

l           Cable status: Could be normal, abnormal, abnormal-open, abnormal-short, and failure;

l           Cable length;

l           Pair Impedance mismatch;

l           Pair skew;

l           Pair swap;

l           Pair polarity;

l           Insertion loss;

l           Return loss;

l           Near-end crosstalk.

By default, virtual cable test is disabled.

Note that:

l           When the cable is functioning properly, the cable length in the test result represents the total cable length;

l           When the cable is not functioning properly, the cable length in the test result represents the length from the current port to the failed position.

 

 

Examples

# Enable the virtual cable test for the port GigabitEthernet1/0/1.

<Sysname> system-view

[Sysname] interface GigabitEthernet1/0/1

[Sysname-GigabitEthernet1/0/1] virtual-cable-test

Cable status: abnormal(open), 0 metres

Pair Impedance mismatch: -

Pair skew: - ns

Pair swap: -

Pair polarity: -

Insertion loss: - db

Return loss: - db

Near-end crosstalk: - db

 

Chapter 2  Port Isolation Configuration Commands

2.1  Port Isolation Configuration Commands

2.1.1  display port-isolate group

Syntax

display port-isolate group

View

Any view

Parameters

None

Description

Use the display port-isolate group command to display the information about the system default isolation group group1.

Examples

# Display the information about the system default isolation group.

<Sysname> display port-isolate group

 Port-isolate group information:

 Uplink port support: NO

 Group ID: 1

    GigabitEthernet1/0/4            GigabitEthernet1/0/5

Table 2-1 Description on the fields of the display port-isolate group command

Field	Description
Port-isolate group information	Display information of a port-isolation group
Uplink port support	Whether support uplink port
Group ID	Isolation group number
GigabitEthernet1/0/4 GigabitEthernet1/0/5	Ordinary ports (non-uplink ports) in a isolation group

 

2.1.2  port-isolate enable

Syntax

port-isolate enable

undo port-isolate enable

View

Ethernet port view, port group view

Parameters

None

Description

Use the port-isolate enable command to add a port to the isolation group as ordinary port only.

Use the undo port-isolate enable command to remove the port from the isolation group.

Note that the port-isolate enable command adds a port to the system default isolation group group1.

Configured in Ethernet port view, the setting is effective on the current port only; configured in port group view, the setting is effective on all ports in the port group.

Examples

# Add port GigabitEthernet1/0/1 to the isolation group.

<Sysname> system-view

[Sysname] interface GigabitEthernet1/0/1

[Sysname-GigabitEthernet1/0/1] port-isolate enable

# Add all the ports in port group aa to the isolation group.

[Sysname-GigabitEthernet1/0/1] quit

[Sysname] port-group manual aa

[Sysname-port-group-manual-aa] group-member gigabitethernet 1/0/2

[Sysname-port-group-manual-aa] group-member gigabitethernet 1/0/3

[Sysname-port-group-manual-aa] group-member gigabitethernet 1/0/4

[Sysname-port-group-manual-aa] port-isolate enable