17-IP Addressing-IP Performance Optimization Commands
Chapters Download (86.33 KB)
Table of Contents
1 IP Addressing Configuration Commands
IP Addressing Configuration Commands
2 IP Performance Optimization Configuration Commands
IP Performance Optimization Configuration Commands
Syntax
display ip interface [ interface-type interface-number ]
View
Any view
Default Level
1: Monitor level
Parameters
interface-type interface-number: Specifies an interface by its type and number.
Description
Use the display ip interface command to display information about a specified or all Layer 3 interfaces.
Examples
# Display information about interface VLAN-interface 1.
<Sysname> display ip interface vlan-interface 1
Vlan-interface1 current state :UP
Line protocol current state :UP
Internet Address is 192.168.0.140/24 Primary
Broadcast address : 192.168.0.255
The Maximum Transmit Unit : 1500 bytes
input packets : 20386, bytes : 827449, multicasts : 0
output packets : 19774, bytes : 960682, multicasts : 0
ARP packet input number: 77659
Request packet: 77642
Reply packet: 17
Unknown packet: 0
TTL invalid packet number: 0
ICMP packet input number: 5
Echo reply: 5
Unreachable: 0
Source quench: 0
Routing redirect: 0
Echo request: 0
Router advert: 0
Router solicit: 0
Time exceed: 0
IP header bad: 0
Timestamp request: 0
Timestamp reply: 0
Information request: 0
Information reply: 0
Netmask request: 0
Netmask reply: 0
Unknown type: 0
Table 1-1 display ip interface command output description
|
Field |
Description |
|
current state |
Current physical state of the interface, which can be l Administrative DOWN: Indicates that the interface is administratively down; that is, the interface is shut down with the shutdown command. l DOWN: Indicates that the interface is administratively up but its physical state is down, which may be caused by a connection or link failure. l UP: Indicates that both the administrative and physical states of the interface are up. |
|
Line protocol current state |
Current state of the network layer protocol, which can be l DOWN: Indicates that the protocol state of the interface is down, which is usually because that no IP address is assigned to the interface. l UP: Indicates that the protocol state of the interface is up. |
|
Internet Address |
IP address of an interface followed by: l Primary: Identifies a primary IP address, or l Sub: Identifies a secondary IP address. |
|
Broadcast address |
Broadcast address of the subnet attached to an interface |
|
The Maximum Transmit Unit |
Maximum transmission units on the interface, in bytes |
|
input packets, bytes, multicasts output packets, bytes, multicasts |
Unicast packets, bytes, and multicast packets received on an interface (the statistics start at the device startup) |
|
ARP packet input number: Request packet: Reply packet: Unknown packet: |
Total number of ARP packets received on the interface (the statistics start at the device startup), including l ARP request packets l ARP reply packets l Unknown packets |
|
TTL invalid packet number |
Number of TTL-invalid packets received on the interface (the statistics start at the device startup) |
|
ICMP packet input number: Echo reply: Unreachable: Source quench: Routing redirect: Echo request: Router advert: Router solicit: Time exceed: IP header bad: Timestamp request: Timestamp reply: Information request: Information reply: Netmask request: Netmask reply: Unknown type: |
Total number of ICMP packets received on the interface (the statistics start at the device startup), including the following packets: l Echo reply packet l Unreachable packets l Source quench packets l Routing redirect packets l Echo request packets l Router advertisement packets l Router solicitation packets l Time exceeded packets l IP header bad packets l Timestamp request packets l Timestamp reply packets l Information request packets l Information reply packets l Netmask request packets l Netmask reply packets l Unknown type packets |
Syntax
display ip interface brief [ interface-type [ interface-number ] ]
View
Any view
Default Level
1: Monitor level
Parameters
interface-type: Interface type.
interface-number: Interface number.
Description
Use the display ip interface brief command to display brief information about a specified or all layer 3 interfaces.
Without the interface type and interface number specified, the information about all layer 3 interfaces is displayed; with only the interface type specified, the information about all layer 3 interfaces of the specified type is displayed; with both the interface type and interface number specified, only the information about the specified interface is displayed.
Related commands: display ip interface.
Examples
# Display brief information about VLAN interfaces.
<Sysname> display ip interface brief vlan-interface
*down: administratively down
(s): spoofing
Interface Physical Protocol IP Address Description
Vlan-interface1 up up 6.6.6.6 Vlan-inte...
Table 1-2 display ip interface brief command output description
|
Field |
Description |
|
*down: administratively down |
The interface is administratively shut down with the shutdown command. |
|
(s) : spoofing |
Spoofing attribute of the interface. It indicates that an interface whose network layer protocol is displayed up may have no link present or the link is set up only on demand. |
|
Interface |
Interface name |
|
Physical |
Physical state of the interface, which can be l *down: Indicates that the interface is administratively down; that is, the interface is shut down with the shutdown command. l down: Indicates that the interface is administratively up but its physical state is down, which may be caused by a connection or link failure. l up: Indicates that both the administrative and physical states of the interface are up. |
|
Protocol |
Network layer protocol state of the interface, which can be l down: Indicates that the protocol state of the interface is down, which is usually because that no IP address is assigned to the interface. l up: Indicates that the protocol state of the interface is up. |
|
IP Address |
IP address of the interface (If no IP address is configured, “unassigned” is displayed.) |
|
Description |
Interface description information, for which at most 12 characters can be displayed. If there are more that 12 characters, only the first nine characters are displayed. |
Syntax
ip address ip-address { mask | mask-length } [ sub ]
undo ip address [ ip-address { mask | mask-length } [ sub ] ]
View
Interface view
Default Level
2: System level
Parameters
ip-address: IP address of interface, in dotted decimal notation.
mask: Subnet mask in dotted decimal notation.
mask-length: Subnet mask length, the number of consecutive ones in the mask.
sub: Secondary IP address for the interface.
Description
Use the ip address command to assign an IP address and mask to the interface.
Use the undo ip address command to remove all IP addresses from the interface.
Use the undo ip address ip-address { mask | mask-length } command to remove the primary IP address.
Use the undo ip address ip-address { mask | mask-length } sub command to remove a secondary IP address.
By default, no IP address is assigned to any interface.
When assigning IP addresses to an interface, consider the following:
l You can assign only one primary IP address to an interface.
l The primary and secondary IP addresses can be located in the same network segment.
l Before removing the primary IP address, remove all secondary IP addresses.
Related commands: display ip interface.
Examples
# Assign VLAN-interface 1 a primary IP address 129.12.0.1 and a secondary IP address 202.38.160.1, with subnet masks being 255.255.255.0.
<Sysname> system-view
[Sysname] interface vlan-interface 1
[Sysname-Vlan-interface1] ip address 129.12.0.1 255.255.255.0
[Sysname-Vlan-interface1] ip address 202.38.160.1 255.255.255.0 sub
Syntax
display fib [ | { begin | include | exclude } regular-expression | acl acl-number | ip-prefix ip-prefix-name ]
View
Any view
Default Level
1: Monitor level
Parameters
vpn-instance vpn-instance-name: Displays FIB entries of the specified VPN instance. The vpn-instance-name is a string of 1 to 31 case-sensitive characters.
|: Uses a regular expression to match FIB entries. For detailed information about regular expression, refer to CLI display in Basic System Configuration .
begin: Displays the first entry that matches the specified regular expression and all the FIB entries following it.
exclude: Displays the FIB entries that do not match the specified regular expression.
include: Displays the FIB entries that match the specified regular expression.
regular-expression: A case-sensitive string of 1 to 256 characters, excluding spaces.
acl acl-number: Displays FIB entries matching a specified ACL numbered from 2000 to 2999. If the specified ACL does not exist, all FIB entries are displayed.
ip-prefix ip-prefix-name: Displays FIB entries matching a specified IP prefix list, a string of 1 to 19 characters. If the specified IP prefix list does not exist, all FIB entries are displayed.
Description
Use the display fib command to display FIB entries. If no parameters are specified, all FIB entries will be displayed.
Examples
# Display all FIB entries.
<Sysname> display fib
Destination count: 4 FIB entry count: 4
Flag:
U:Useable G:Gateway H:Host B:Blackhole D:Dynamic S:Static
R:Relay
Destination/Mask Nexthop Flag OutInterface InnerLabel Token
10.2.0.0/16 10.2.1.1 U Vlan1 Null Invalid
10.2.1.1/32 127.0.0.1 UH InLoop0 Null Invalid
127.0.0.0/8 127.0.0.1 U InLoop0 Null Invalid
127.0.0.1/32 127.0.0.1 UH InLoop0 Null Invalid
# Display FIB information passing ACL 2000.
<Sysname> system-view
[Sysname] acl number 2000
[Sysname-acl-basic-2000] rule permit source 10.2.0.0 0.0.255.255
[Sysname-acl-basic-2000] display fib acl 2000
Destination count: 2 FIB entry count: 2
Flag:
U:Useable G:Gateway H:Host B:Blackhole D:Dynamic S:Static
R:Relay
Destination/Mask Nexthop Flag OutInterface InnerLabel Token
10.2.0.0/16 10.2.1.1 U Vlan1 Null Invalid
10.2.1.1/32 127.0.0.1 UH InLoop0 Null Invalid
# Display all entries that contain the string 127 and start from the first one.
<Sysname> display fib | begin 127
Flag:
U:Useable G:Gateway H:Host B:Blackhole D:Dynamic S:Static
R:Relay
Destination/Mask Nexthop Flag OutInterface InnerLabel Token
10.2.1.1/32 127.0.0.1 UH InLoop0 Null Invalid
127.0.0.0/8 127.0.0.1 U InLoop0 Null Invalid
127.0.0.1/32 127.0.0.1 UH InLoop0 Null Invalid
# Display FIB information passing the IP prefix list abc0.
<Sysname> system-view
[Sysname] ip ip-prefix abc0 permit 10.2.0.0 16
[Sysname] display fib ip-prefix abc0
Destination count: 1 FIB entry count: 1
Flag:
U:Useable G:Gateway H:Host B:Blackhole D:Dynamic S:Static
R:Relay
Destination/Mask Nexthop Flag OutInterface InnerLabel Token
10.2.0.0/16 10.2.1.1 U Vlan1 Null Invalid
Table 2-1 display fib command output description
|
Field |
Description |
|
Destination count |
Total number of destination addresses |
|
FIB entry count |
Total number of FIB entries |
|
Destination/Mask |
Destination address/length of mask |
|
Nexthop |
Address of next hop |
|
Flag |
Flags of routes: l “U”—Usable route l “G”—Gateway route l “H”—Host route l “B”—Blackhole route l “D”—Dynamic route l “S”—Static route l “R”—Relay route |
|
OutInterface |
Outbound interface |
|
InnerLabel |
Inner label |
|
Token |
LSP index number |
Syntax
display fib ip-address [ mask | mask-length ]
View
Any view
Default Level
1: Monitor level
Parameters
ip-address: Destination IP address, in dotted decimal notation.
mask: IP address mask.
mask-length: Length of IP address mask.
Description
Use the display fib ip-address command to display FIB entries that match the specified destination IP address.
If no mask or mask length is specified, the FIB entry that matches the destination IP address and has the longest mask will be displayed; if the mask is specified, the FIB entry that exactly matches the specified destination IP address will be displayed.
Examples
# Display the FIB entries that match the destination IP address of 10.2.1.1.
<Sysname> display fib 10.2.1.1
Destination count: 1 FIB entry count: 1
Flag:
U:Useable G:Gateway H:Host B:Blackhole D:Dynamic S:Static
R:Relay
Destination/Mask Nexthop Flag OutInterface InnerLabel Token
10.2.1.1/32 127.0.0.1 UH InLoop0 Null Invalid
For description about the above output, refer to Table 2-1.
Syntax
display icmp statistics
View
Any view
Default Level
1: Monitor level
Parameters
None
Description
Use the display icmp statistics command to display ICMP statistics.
Related commands: display ip interface, reset ip statistics.
Examples
# Display ICMP statistics.
<Sysname> display icmp statistics
Input: bad formats 0 bad checksum 0
echo 5 destination unreachable 0
source quench 0 redirects 0
echo reply 10 parameter problem 0
timestamp 0 information request 0
mask requests 0 mask replies 0
time exceeded 0
Output:echo 10 destination unreachable 0
source quench 0 redirects 0
echo reply 5 parameter problem 0
timestamp 0 information reply 0
mask requests 0 mask replies 0
time exceeded 0
Table 2-2 display icmp statistics command output description
|
Field |
Description |
|
bad formats |
Number of input wrong format packets |
|
bad checksum |
Number of input wrong checksum packets |
|
echo |
Number of input/output echo packets |
|
destination unreachable |
Number of input/output destination unreachable packets |
|
source quench |
Number of input/output source quench packets |
|
redirects |
Number of input/output redirection packets |
|
echo reply |
Number of input/output replies |
|
parameter problem |
Number of input/output parameter problem packets |
|
timestamp |
Number of input/output time stamp packets |
|
information request |
Number of input information request packets |
|
mask requests |
Number of input/output mask requests |
|
mask replies |
Number of input/output mask replies |
|
information reply |
Number of output information reply packets |
|
time exceeded |
Number of input/output expiration packets |
Syntax
display ip socket [ socktype sock-type ] [ task-id socket-id ]
View
Any view
Default Level
1: Monitor level
Parameters
socktype sock-type: Displays the socket information of this type. The sock type is in the range 1 to 3, corresponding to TCP, UDP and raw IP respectively.
task-id: Displays the socket information of this task. Task ID is in the range 1 to 100.
socket-id: Displays the information of the socket. Socket ID is in the range 0 to 3072.
Description
Use the display ip socket command to display socket information.
Examples
# Display the TCP socket information.
<Sysname> display ip socket
SOCK_STREAM:
Task = VTYD(38), socketid = 1, Proto = 6,
LA = 0.0.0.0:23, FA = 0.0.0.0:0,
sndbuf = 8192, rcvbuf = 8192, sb_cc = 0, rb_cc = 0,
socket option = SO_ACCEPTCONN SO_KEEPALIVE SO_REUSEPORT SO_SENDVPNID(3073) SO_SETKEEPALIVE,
socket state = SS_PRIV SS_ASYNC
Task = HTTP(36), socketid = 1, Proto = 6,
LA = 0.0.0.0:80, FA = 0.0.0.0:0,
sndbuf = 8192, rcvbuf = 8192, sb_cc = 0, rb_cc = 0,
socket option = SO_ACCEPTCONN SO_REUSEPORT,
socket state = SS_PRIV SS_NBIO
Task = ROUT(69), socketid = 10, Proto = 6,
LA = 0.0.0.0:179, FA = 192.168.1.45:0,
sndbuf = 8192, rcvbuf = 8192, sb_cc = 0, rb_cc = 0,
socket option = SO_ACCEPTCONN SO_REUSEADDR SO_REUSEPORT SO_SENDVPNID(0),
socket state = SS_PRIV SS_ASYNC
Task = VTYD(38), socketid = 4, Proto = 6,
LA = 192.168.1.40:23, FA = 192.168.1.52:1917,
sndbuf = 8192, rcvbuf = 8192, sb_cc = 237, rb_cc = 0,
socket option = SO_KEEPALIVE SO_OOBINLINE SO_REUSEPORT SO_SENDVPNID(0) SO_SETKEEPALIVE,
socket state = SS_ISCONNECTED SS_PRIV SS_ASYNC
Task = VTYD(38), socketid = 3, Proto = 6,
LA = 192.168.1.40:23, FA = 192.168.1.84:1503,
sndbuf = 8192, rcvbuf = 8192, sb_cc = 0, rb_cc = 0,
socket option = SO_KEEPALIVE SO_OOBINLINE SO_REUSEPORT SO_SENDVPNID(0) SO_SETKEEPALIVE,
socket state = SS_ISCONNECTED SS_PRIV SS_ASYNC
Task = ROUT(69), socketid = 11, Proto = 6,
LA = 192.168.1.40:1025, FA = 192.168.1.45:179,
sndbuf = 8192, rcvbuf = 8192, sb_cc = 0, rb_cc = 0,
socket option = SO_REUSEADDR SO_LINGER SO_SENDVPNID(0),
socket state = SS_ISCONNECTED SS_PRIV SS_ASYNC
SOCK_DGRAM:
Task = NTPT(37), socketid = 1, Proto = 17,
LA = 0.0.0.0:123, FA = 0.0.0.0:0,
sndbuf = 9216, rcvbuf = 41600, sb_cc = 0, rb_cc = 0,
socket option = SO_UDPCHECKSUM SO_SENDVPNID(3073),
socket state = SS_PRIV
Task = AGNT(51), socketid = 1, Proto = 17,
LA = 0.0.0.0:161, FA = 0.0.0.0:0,
sndbuf = 9216, rcvbuf = 41600, sb_cc = 0, rb_cc = 0,
socket option = SO_UDPCHECKSUM SO_SENDVPNID(3073),
socket state = SS_PRIV SS_NBIO SS_ASYNC
Task = RDSO(56), socketid = 1, Proto = 17,
LA = 0.0.0.0:1024, FA = 0.0.0.0:0,
sndbuf = 9216, rcvbuf = 41600, sb_cc = 0, rb_cc = 0,
socket option = SO_UDPCHECKSUM,
socket state = SS_PRIV
Task = TRAP(52), socketid = 1, Proto = 17,
LA = 0.0.0.0:1025, FA = 0.0.0.0:0,
sndbuf = 9216, rcvbuf = 0, sb_cc = 0, rb_cc = 0,
socket option = SO_UDPCHECKSUM,
socket state = SS_PRIV
Task = RDSO(56), socketid = 2, Proto = 17,
LA = 0.0.0.0:1812, FA = 0.0.0.0:0,
sndbuf = 9216, rcvbuf = 41600, sb_cc = 0, rb_cc = 0,
socket option = SO_UDPCHECKSUM,
socket state = SS_PRIV
SOCK_RAW:
Task = ROUT(69), socketid = 8, Proto = 89,
LA = 0.0.0.0, FA = 0.0.0.0,
sndbuf = 262144, rcvbuf = 262144, sb_cc = 0, rb_cc = 0,
socket option = SO_SENDVPNID(0) SO_RCVVPNID(0),
socket state = SS_PRIV SS_ASYNC
Task = ROUT(69), socketid = 3, Proto = 2,
LA = 0.0.0.0, FA = 0.0.0.0,
sndbuf = 32767, rcvbuf = 256000, sb_cc = 0, rb_cc = 0,
socket option = SO_SENDVPNID(0) SO_RCVVPNID(0),
socket state = SS_PRIV SS_NBIO SS_ASYNC
Task = ROUT(69), socketid = 2, Proto = 103,
LA = 0.0.0.0, FA = 0.0.0.0,
sndbuf = 65536, rcvbuf = 256000, sb_cc = 0, rb_cc = 0,
socket option = SO_SENDVPNID(0) SO_RCVVPNID(0),
socket state = SS_PRIV SS_NBIO SS_ASYNC
Task = ROUT(69), socketid = 1, Proto = 65,
LA = 0.0.0.0, FA = 0.0.0.0,
sndbuf = 32767, rcvbuf = 256000, sb_cc = 0, rb_cc = 0,
socket option = 0,
socket state = SS_PRIV SS_NBIO SS_ASYNC
Task = RSVP(73), socketid = 1, Proto = 46,
LA = 0.0.0.0, FA = 0.0.0.0,
sndbuf = 4194304, rcvbuf = 4194304, sb_cc = 0, rb_cc = 0,
socket option = 0,
socket state = SS_PRIV SS_NBIO SS_ASYNC
Table 2-3 display ip socket command output description
|
Field |
Description |
|
SOCK_STREAM |
TCP socket |
|
SOCK_DGRAM |
UDP socket |
|
SOCK_RAW |
Raw IP socket |
|
Task |
Task number |
|
socketid |
Socket ID |
|
Proto |
Protocol number of the socket, indicating the protocol type that IP carries |
|
LA |
Local address and local port number |
|
FA |
Remote address and remote port number |
|
sndbuf |
Sending buffer size of the socket, in bytes |
|
rcvbuf |
Receiving buffer size of the socket, in bytes |
|
sb_cc |
Current data size in the sending buffer (It is available only for TCP that can buffer data) |
|
rb_cc |
Data size currently in the receiving buffer |
|
socket option |
Socket option |
|
socket state |
Socket state |
Syntax
display ip statistics
View
Any view
Default Level
1: Monitor level
Parameters
None
Description
Use the display ip statistics command to display statistics of IP packets.
Related commands: display ip interface , reset ip statistics.
Examples
# Display statistics of IP packets.
<Sysname> display ip statistics
Input: sum 7120 local 112
bad protocol 0 bad format 0
bad checksum 0 bad options 0
Output: forwarding 0 local 27
dropped 0 no route 2
compress fails 0
Fragment:input 0 output 0
dropped 0
fragmented 0 couldn't fragment 0
Reassembling:sum 0 timeouts 0
Table 2-4 display ip statistics command output description
|
Field |
Description |
|
|
Input: |
sum |
Total number of packets received |
|
local |
Total number of packets with destination being local |
|
|
bad protocol |
Total number of unknown protocol packets |
|
|
bad format |
Total number of packets with incorrect format |
|
|
bad checksum |
Total number of packets with incorrect checksum |
|
|
bad options |
Total number of packets with incorrect option |
|
|
Output: |
forwarding |
Total number of packets forwarded |
|
local |
Total number of packets sent from the local |
|
|
dropped |
Total number of packets discarded |
|
|
no route |
Total number of packets for which no route is available |
|
|
compress fails |
Total number of packets failed to be compressed |
|
|
Fragment: |
input |
Total number of fragments received |
|
output |
Total number of fragments sent |
|
|
dropped |
Total number of fragments dropped |
|
|
fragmented |
Total number of packets successfully fragmented |
|
|
couldn't fragment |
Total number of packets that failed to be fragmented |
|
|
Reassembling |
sum |
Total number of packets reassembled |
|
timeouts |
Total number of reassembly timeout fragments |
|
Syntax
display tcp statistics
View
Default Level
1: Monitor level
Parameters
None
Description
Use the display tcp statistics command to display statistics of TCP traffic.
Related commands: display tcp status, reset tcp statistics.
Examples
# Display statistics of TCP traffic.
<Sysname> display tcp statistics
Received packets:
Total: 8457
packets in sequence: 3660 (5272 bytes)
window probe packets: 0, window update packets: 0
checksum error: 0, offset error: 0, short error: 0
duplicate packets: 1 (8 bytes), partially duplicate packets: 0 (0 bytes)
out-of-order packets: 17 (0 bytes)
packets of data after window: 0 (0 bytes)
packets received after close: 0
ACK packets: 4625 (141989 bytes)
duplicate ACK packets: 1702, too much ACK packets: 0
Sent packets:
Total: 6726
urgent packets: 0
control packets: 21 (including 0 RST)
window probe packets: 0, window update packets: 0
data packets: 6484 (141984 bytes) data packets retransmitted: 0 (0 bytes)
ACK-only packets: 221 (177 delayed)
Retransmitted timeout: 0, connections dropped in retransmitted timeout: 0
Keepalive timeout: 1682, keepalive probe: 1682, Keepalive timeout, so connections disconnected : 0
Initiated connections: 0, accepted connections: 22, established connections: 22
Closed connections: 49 (dropped: 0, initiated dropped: 0)
Packets dropped with MD5 authentication: 0
Packets permitted with MD5 authentication: 0
Table 2-5 display tcp statistics command output description
|
Field |
Description |
|
|
Received packets: |
Total |
Total number of packets received |
|
packets in sequence |
Number of packets arriving in sequence |
|
|
window probe packets |
Number of window probe packets received |
|
|
window update packets |
Number of window update packets received |
|
|
checksum error |
Number of checksum error packets received |
|
|
offset error |
Number of offset error packets received |
|
|
short error |
Number of received packets with length being too small |
|
|
duplicate packets |
Number of completely duplicate packets received |
|
|
partially duplicate packets |
Number of partially duplicate packets received |
|
|
out-of-order packets |
Number of out-of-order packets received |
|
|
packets of data after window |
Number of packets outside the receiving window |
|
|
packets received after close |
Number of packets that arrived after connection is closed |
|
|
ACK packets |
Number of ACK packets received |
|
|
duplicate ACK packets |
Number of duplicate ACK packets received |
|
|
too much ACK packets |
Number of ACK packets for data unsent |
|
|
Sent packets: |
Total |
Total number of packets sent |
|
urgent packets |
Number of urgent packets sent |
|
|
control packets |
Number of control packets sent |
|
|
window probe packets |
Number of window probe packets sent; in the brackets are resent packets |
|
|
window update packets |
Number of window update packets sent |
|
|
data packets |
Number of data packets sent |
|
|
data packets retransmitted |
Number of data packets retransmitted |
|
|
ACK-only packets |
Number of ACK packets sent; in brackets are delayed ACK packets |
|
|
Retransmitted timeout |
Number of retransmission timer timeouts |
|
|
connections dropped in retransmitted timeout |
Number of connections broken due to retransmission timeouts |
|
|
Keepalive timeout |
Number of keepalive timer timeouts |
|
|
keepalive probe |
Number of keepalive probe packets sent |
|
|
Keepalive timeout, so connections disconnected |
Number of connections broken due to timeout of the keepalive timer |
|
|
Initiated connections |
Number of connections initiated |
|
|
accepted connections |
Number of connections accepted |
|
|
established connections |
Number of connections established |
|
|
Closed connections |
Number of connections closed; in brackets are connections closed accidentally (before receiving SYN from the peer) and connections closed initiatively (after receiving SYN from the peer) |
|
|
Packets dropped with MD5 authentication |
Number of packets dropped by MD5 authentication |
|
|
Packets permitted with MD5 authentication |
Number of packets permitted by MD5 authentication |
|
Syntax
display tcp status
View
Any view
Default Level
1: Monitor level
Parameters
None
Description
Use the display tcp status command to display status of all TCP connections for monitoring TCP connections.
Examples
# Display status of all TCP connections.
<Sysname> display tcp status
*: TCP MD5 Connection
TCPCB Local Add:port Foreign Add:port State
03e37dc4 0.0.0.0:4001 0.0.0.0:0 Listening
04217174 100.0.0.204:23 100.0.0.253:65508 Established
Table 2-6 display tcp status command output description
|
Field |
Description |
|
* |
If the status information of a TCP connection contains *, the TCP adopts the MD5 algorithm for authentication. |
|
TCPCB |
TCP control block |
|
Local Add:port |
Local IP address and port number |
|
Foreign Add:port |
Remote IP address and port number |
|
State |
State of the TCP connection |
Syntax
display udp statistics
View
Any view
Default Level
1: Monitor level
Parameters
None
Description
Use the display udp statistics command to display statistics of UDP packets.
Related commands: reset udp statistics.
Examples
# Display statistics of UDP packets.
<Sysname> display udp statistics
Received packets:
Total: 0
checksum error: 0
shorter than header: 0, data length larger than packet: 0
unicast(no socket on port): 0
broadcast/multicast(no socket on port): 0
not delivered, input socket full: 0
input packets missing pcb cache: 0
Sent packets:
Total: 0
Table 2-7 display udp statistics command output description
|
Field |
Description |
|
|
Received packets: |
Total |
Total number of UDP packets received |
|
checksum error |
Total number of packets with incorrect checksum |
|
|
shorter than header |
Number of packets with data shorter than head |
|
|
data length larger than packet |
Number of packets with data longer than packet |
|
|
unicast(no socket on port) |
Number of unicast packets with no socket on port |
|
|
broadcast/multicast(no socket on port) |
Number of broadcast/multicast packets without socket on port |
|
|
not delivered, input socket full |
Number of packets not delivered to an upper layer due to a full socket cache |
|
|
input packets missing pcb cache |
Number of packets without matching protocol control block (PCB) cache |
|
|
Sent packets: |
Total |
Total number of UDP packets sent |
Syntax
ip redirects enable
undo ip redirects
View
System view
Default Level
2: System level
Parameters
None
Description
Use the ip redirects enable command to enable sending of ICMP redirection packets.
Use the undo ip redirects command to disable sending of ICMP redirection packets.
This feature is disabled by default.
Examples
# Enable sending of ICMP redirect packets.
<Sysname> system-view
[Sysname] ip redirects enable
Syntax
ip ttl-expires enable
undo ip ttl-expires
View
System view
Default Level
2: System level
Parameters
None
Description
Use the ip ttl-expires enable command to enable the sending of ICMP timeout packets.
Use the undo ip ttl-expires command to disable sending ICMP timeout packets.
Sending ICMP timeout packets is enabled by default.
If the feature is disabled, the device will not send TTL timeout ICMP packets, but still send “reassembly timeout” ICMP packets.
Examples
# Disable sending ICMP timeout packets.
<Sysname> system-view
[Sysname] undo ip ttl-expires
Syntax
ip unreachables enable
undo ip unreachables
View
System view
Default Level
2: System level
Parameters
None
Description
Use the ip unreachables enable command to enable the sending of ICMP destination unreachable packets.
Use the undo ip unreachables command to disable sending ICMP destination unreachable packets.
Sending ICMP destination unreachable packets is disabled by default.
Examples
# Enable sending ICMP destination unreachable packets.
<Sysname> system-view
[Sysname] ip unreachables enable
Syntax
reset ip statistics
View
User view
Default Level
2: System level
Parameters
None
Description
Use the reset ip statistics command to clear statistics of IP packets.
Related commands: display ip interface, display ip statistics.
Examples
# Clear statistics of IP packets.
<Sysname> reset ip statistics
Syntax
reset tcp statistics
View
User view
Default Level
2: System level
Parameters
None
Description
Use the reset tcp statistics command to clear statistics of TCP traffic.
Related commands: display tcp statistics.
Examples
# Display statistics of TCP traffic.
<Sysname> reset tcp statistics
Syntax
reset udp statistics
View
User view
Default Level
2: System level
Parameters
None
Description
Use the reset udp statistics command to clear statistics of UDP traffic.
Examples
# Display statistics of UDP traffic.
<Sysname> reset udp statistics
Syntax
tcp timer fin-timeout time-value
undo tcp timer fin-timeout
View
System view
Default Level
2: System level
Parameters
time-value: Length of the TCP finwait timer in seconds, in the range 76 to 3,600.
Description
Use the tcp timer fin-timeout command to configure the length of the TCP finwait timer.
Use the undo tcp timer fin-timeout command to restore the default.
By default, the length of the TCP finwait timer is 675 seconds.
Note that the actual length of the finwait timer is determined by the following formula:
Actual length of the finwait timer = (Configured length of the finwait timer – 75) + configured length of the synwait timer
Related commands: tcp timer syn-timeout, tcp window.
Examples
# Set the length of the TCP finwait timer to 800 seconds.
<Sysname> system-view
[Sysname] tcp timer fin-timeout 800
Syntax
tcp timer syn-timeout time-value
undo tcp timer syn-timeout
View
System view
Default Level
2: System level
Parameters
time-value: TCP finwait timer in seconds, in the range 2 to 600.
Description
Use the tcp timer syn-timeout command to configure the length of the TCP synwait timer.
Use the undo tcp timer syn-timeout command to restore the default.
By default, the value of the TCP synwait timer is 75 seconds.
Related commands: tcp timer fin-timeout, tcp window.
Examples
# Set the length of the TCP synwait timer to 80 seconds.
<Sysname> system-view
[Sysname] tcp timer syn-timeout 80
Syntax
tcp window window-size
undo tcp window
View
System view
Default Level
2: System level
Parameters
window-size: Size of the send/receive buffer in KB, in the range 1 to 32.
Description
Use the tcp window command to configure the size of the TCP send/receive buffer.
Use the undo tcp window command to restore the default.
The size of the TCP send/receive buffer is 8 KB by default.
Related commands: tcp timer fin-timeout, tcp timer syn-timeout.
Examples
# Configure the size of the TCP send/receive buffer as 3 KB.
<Sysname> system-view
[Sysname] tcp window 3
