10-Interface Command Reference

HomeSupportReference GuidesCommand ReferencesH3C SecPath Firewall Series Command References(V7)-6W40210-Interface Command Reference
02-Ethernet interface commands
Title Size Download
02-Ethernet interface commands 461.32 KB

Contents

Ethernet interface commands· 1

Common Ethernet interface commands· 1

bandwidth· 1

broadcast-suppression· 2

combo enable· 3

dampening· 5

default 6

description· 7

display counters· 8

display counters rate· 9

display ethernet statistics· 10

display interface· 12

display packet-drop· 23

duplex· 24

flow-control 25

flow-interval 26

ifmonitor crc-error 27

ifmonitor input-error 29

ifmonitor input-usage· 31

ifmonitor output-error 32

ifmonitor output-usage· 34

ifmonitor rx-pause· 36

ifmonitor sdh-b1-error 38

ifmonitor sdh-b2-error 39

ifmonitor sdh-error 41

ifmonitor tx-pause· 43

inner forwarding· 45

interface· 46

jumboframe enable· 47

link-delay· 49

loopback· 51

multicast-suppression· 52

port ifmonitor crc-error 53

port ifmonitor input-error 55

port ifmonitor input-usage· 56

port ifmonitor output-error 58

port ifmonitor output-usage· 60

port ifmonitor rx-pause· 62

port ifmonitor sdh-b1-error 63

port ifmonitor sdh-b2-error 65

port ifmonitor sdh-error 67

port ifmonitor tx-pause· 69

port link-mode· 71

reset counters interface· 72

reset ethernet statistics· 72

reset packet-drop interface· 73

shutdown· 73

snmp-agent trap enable ifmonitor 74

speed· 76

sub-interface rate-statistic· 78

unicast-suppression· 78

Layer 2 Ethernet interface commands· 80

display storm-constrain· 80

mdix-mode· 81

storm-constrain· 82

storm-constrain control 83

storm-constrain enable log· 84

storm-constrain enable trap· 84

storm-constrain interval 85

Layer 3 Ethernet interface or subinterface commands· 86

mac-address· 86

mac-address-filter enable· 86

mtu· 87

 

 


Ethernet interface commands

Physical interfaces on firewall modules can only be used as IRF physical interfaces.

Common Ethernet interface commands

bandwidth

Use bandwidth to set the expected bandwidth of an interface.

Use undo bandwidth to restore the default.

Syntax

bandwidth bandwidth-value

undo bandwidth

Default

The expected bandwidth (in kbps) is the interface baud rate divided by 1000.

Views

Ethernet interface view

Ethernet subinterface view

Predefined user roles

network-admin

context-admin

Parameters

bandwidth-value: Specifies the expected bandwidth in the range of 1 to 400000000 kbps.

Usage guidelines

The expected bandwidth is an informational parameter used only by higher-layer protocols for calculation. You cannot adjust the actual bandwidth of an interface by using this command.

Examples

# Set the expected bandwidth of GigabitEthernet 1/0/1 to 1000 kbps.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] bandwidth 1000

# Set the expected bandwidth of GigabitEthernet 1/0/1.1 to 1000 kbps.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1.1

[Sysname-GigabitEthernet1/0/1.1] bandwidth 1000

Related commands

speed

broadcast-suppression

Use broadcast-suppression to enable broadcast suppression and set the broadcast suppression threshold.

Use undo broadcast-suppression to disable broadcast suppression.

Syntax

broadcast-suppression { ratio | pps max-pps | kbps max-kbps }

undo broadcast-suppression

The following compatibility matrixes show the support of hardware platforms for this command:

 

Hardware

Command compatibility

F5010, F5020, F5020-GM, F5030, F5030-6GW, F5040, F5060, F5080, F5000-AI-20, F5000-AI-40, F5000-V30, F5000-C, F5000-S, F5000-M, F5000-A

Yes

F1000-AI-20, F1000-AI-30, F1000-AI-50, F1000-AI-60, F1000-AI-70, F1000-AI-80, F1000-AI-90

Yes

F1003-L, F1005-L, F1010-L

Yes

F1005, F1010

Yes

F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080, F1090, F1000-V70

Yes

F1000-AK1110, F1000-AK1120, F1000-AK1130, F1000-AK1140

Yes

F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1312, F1000-AK1322, F1000-AK1332

Yes

F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614

Yes

F1000-AK108, F1000-AK109, F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710

Yes

F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380, F1000-AK711

Yes

LSU3FWCEA0, LSUM1FWCEAB0, LSX1FWCEA1

Yes

LSXM1FWDF1, LSUM1FWDEC0, IM-NGFWX-IV, LSQM1FWDSC0, LSWM1FWD0, LSPM6FWD, LSQM2FWDSC0

Yes

vFW1000, vFW2000

No

 

Default

Ethernet interfaces do not suppress broadcast traffic.

Views

Ethernet interface view

Predefined user roles

network-admin

context-admin

Parameters

ratio: Sets the broadcast suppression threshold as a percentage of the interface bandwidth. The value range for this argument is 0 to 100. A smaller value means that less broadcast traffic is allowed to pass through.

pps max-pps: Specifies the maximum number of broadcast packets that the interface can forward per second. The value range for the max-pps argument (in pps) is 0 to 1.4881 × the interface bandwidth.

kbps max-kbps: Specifies the maximum number of kilobits of broadcast traffic that the Ethernet interface can forward per second. The value range for this argument (in kbps) is 0 to the interface bandwidth.

Usage guidelines

The broadcast storm suppression features limits the size of broadcast traffic to a threshold on an interface. When the broadcast traffic on the interface exceeds this threshold, the system drops packets until the traffic drops below this threshold.

Both the storm-constrain command and the broadcast-suppression command can suppress broadcast storms on a port. The broadcast-suppression command uses the chip to physically suppress broadcast traffic. It has less influence on the device performance than the storm-constrain command, which uses software to suppress broadcast traffic.

For the traffic suppression result to be determined, do not configure both the storm-constrain broadcast command and the broadcast-suppression command on an interface.

The configured suppression threshold value in pps or kbps might be converted into a multiple of a step supported by the chip. As a result, the effective suppression threshold might be different from the configured one. To determine the suppression threshold that takes effect, see the prompts on the device.

Examples

# Set the broadcast suppression threshold to 10000 kbps on GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] broadcast-suppression kbps 10000

The actual value is 10048 on port GigabitEthernet1/0/1 currently.

The output shows that the value that takes effect is 10048 kbps (157 times of 64), because the chip only supports step 64.

Related commands

·     multicast-suppression

unicast-suppression

combo enable

CAUTION

CAUTION:

·     In the BootWare menu, fiber combo ports are not available.

·     When the fiber combo port is active, it supports only the speeds autonegotiation and 1000 Mbps, and supports only duplex modes full and autonegotiation. If the copper combo port is configured with any other speed or duplex settings, the settings do not take effect after it is switched to the fiber combo port.

Use combo enable to activate the copper or fiber combo port of a combo interface.

Syntax

combo enable { copper | fiber }

The following compatibility matrix shows the support of hardware platforms for this command:

 

Hardware

Command compatibility

F5030, F5030-6GW, F5060, F5080, F5000-AI-20, F5000-AI-40, F5000-V30, F5000-M, F5000-A

Yes

F5010, F5020, F5020-GM, F5040, F5000-C, F5000-S

No

F1000-AI-20, F1000-AI-30, F1000-AI-50, F1000-AI-60, F1000-AI-70, F1000-AI-80, F1000-AI-90

No

F1010-L

Yes

F1003-L, F1005-L

No

F1005, F1010

Yes

F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080, F1090, F1000-V70

No

F1000-AK1130, F1000-AK1140

Yes

F1000-AK1110, F1000-AK1120

No

F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1312, F1000-AK1322, F1000-AK1332

No

F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614

No

F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710

Yes

F1000-AK108, F1000-AK109

No

F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380, F1000-AK711

No

LSU3FWCEA0, LSUM1FWCEAB0, LSX1FWCEA1

Yes

LSXM1FWDF1, LSUM1FWDEC0, IM-NGFWX-IV, LSQM1FWDSC0, LSWM1FWD0, LSPM6FWD

No

LSQM2FWDSC0

Yes

vFW1000, vFW2000

No

Default

The copper combo port of a combo interface is activated.

Views

Ethernet interface view

Predefined user roles

network-admin

context-admin

Parameters

copper: Activates the copper combo port. In this case, use twisted pairs to connect the port.

fiber: Activates the fiber combo port. In this case, use optical fibers to connect the port.

Usage guidelines

A combo interface is a logical interface that physically contains one fiber combo port and one copper combo port on the device panel. The two ports share one forwarding interface. As a result, they cannot work simultaneously. When you activate either port, the other port is automatically disabled. You can select to activate the copper combo port or fiber combo port.

Before using this command, perform the following tasks according to the marks on the device panel:

·     Determine the combo interfaces on your device.

·     Identify the two physical interfaces that belong to each combo interface.

Examples

# Activate the copper combo port of combo interface GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] combo enable copper

# Activate the fiber combo port of combo interface GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] combo enable fiber

dampening

Use dampening to enable the device to dampen an interface when the interface is flapping.

Use undo dampening to restore the default.

Syntax

dampening [ half-life reuse suppress max-suppress-time ]

undo dampening

Default

Interface dampening is disabled on Ethernet interfaces.

Views

Ethernet interface view

Predefined user roles

network-admin

context-admin

Parameters

half-life: Specifies the amount of time after which a penalty is decreased, in the range of 1 to 120 seconds. The default value is 54 seconds.

reuse: Specifies the reuse threshold in the range of 200 to 20000. The default value is 750. The reuse threshold must be less than the suppression threshold.

suppress: Specifies the suppression threshold in the range of 200 to 20000. The default value is 2000.

max-suppress-time: Specifies the maximum amount of time the interface can be dampened, in the range of 1 to 255 seconds. The default value is 162 seconds (three times the half-life timer).

Usage guidelines

When configuring the dampening command, follow these rules to set the values mentioned above:

·     The ceiling is equal to 2 (Max-suppress-time/Decay) × reuse-limits. It is not user configurable.

·     The configured suppress limit is lower than or equal to the ceiling.

·     The ceiling is lower than or equal to the maximum suppress limit supported.

This command and the link-delay command are mutually exclusive on an interface.

This command does not take effect on the administratively down events. When you execute the shutdown command, the penalty restores to 0, and the interface reports the down event to the higher layer protocols.

Do not enable the dampening function on an interface with spanning tree protocols or Smart Link enabled.

After an interface in down state is dampened, the interface state displayed through the display interface command, MIB, or Web is always down.

Examples

# Enable interface dampening on GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] dampening

# Enable interface dampening on GigabitEthernet 1/0/1, and set the following parameters:

·     Half life time to 2 seconds.

·     Reuse value to 800.

·     Suppression threshold to 3000.

·     Maximum suppression interval to 5 seconds.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] dampening 2 800 3000 5

Related commands

display interface

link-delay

default

Use default to restore the default settings for an interface.

Syntax

default

Views

Ethernet interface view

Ethernet subinterface view

Predefined user roles

network-admin

context-admin

Usage guidelines

CAUTION

CAUTION:

The default command might interrupt ongoing network services. Make sure you are fully aware of the impacts of this command when you use it in a live network.

This command might fail to restore the default settings for some commands because of command dependencies or system restrictions. You can use the display this command in interface view to identify these commands, and use their undo forms or follow the command reference to restore their default settings. If your restoration attempt still fails, follow the error message instructions to solve the problem.

Examples

# Restore the default settings for GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] default

This command will restore the default settings. Continue? [Y/N]:y

# Restore the default settings for GigabitEthernet 1/0/1.1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1.1

[Sysname-GigabitEthernet1/0/1.1] default

This command will restore the default settings. Continue? [Y/N]:y

description

Use description to configure the description of an interface.

Use undo description to restore the default.

Syntax

description text

undo description

Default

The description of an interface is the interface name plus Interface (for example, GigabitEthernet1/0/1 Interface).

Views

Ethernet interface view

Ethernet subinterface view

Predefined user roles

network-admin

context-admin

Parameters

text: Specifies the interface description, a case-sensitive string of 1 to 255 characters.

Examples

# Set the description of GigabitEthernet 1/0/1 to lan-interface.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] description lan-interface

# Set the description of GigabitEthernet 1/0/1.1 to subinterface1/0/1.1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1.1

[Sysname-GigabitEthernet1/0/1.1] description subinterface1/0/1.1

display counters

Use display counters to display interface traffic statistics.

Syntax

display counters { inbound | outbound } interface [ interface-type [ interface-number ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

context-admin

context-operator

Parameters

inbound: Displays inbound traffic statistics.

outbound: Displays outbound traffic statistics.

interface-type: Specifies an interface type.

interface-number: Specifies an interface number.

Usage guidelines

To clear the Ethernet interface traffic statistics, use the reset counters interface command.

If you do not specify an interface type, this command displays traffic statistics for all interfaces that have traffic counters.

If you specify an interface type but do not specify an interface number, this command displays traffic statistics for all interfaces of the specified type.

If you specify an interface type and number, this command displays traffic statistics for the specified interface.

Examples

# Display inbound traffic statistics for all interfaces.

<Sysname> display counters inbound interface

Interface            Total (pkts)    Broadcast (pkts)    Multicast (pkts)  Err (pkts)

GE1/0/1                       100                 100                   0           0

GE1/0/2                  Overflow            Overflow            Overflow    Overflow

 

 Overflow: More than 14 digits (7 digits for column "Err").

       --: Not supported.

Table 1 Command output

Field

Description

Interface

Abbreviated interface name.

Total (pkts)

Total number of packets received or sent through the interface.

Broadcast (pkts)

Total number of broadcast packets received or sent through the interface.

Multicast (pkts)

‌Total number of multicast packets received or sent through the interface.

Err (pkts)

Total number of error packets received or sent through the interface.

Overflow: More than 14 digits (7 digits for column "Err")

The command displays Overflow when any of the following conditions exist:

·     The data length of an Err field value is greater than 7 decimal digits.

·     The data length of a non-Err field value is greater than 14 decimal digits.

--: Not supported

The statistical item is not supported.

Related commands

reset counters interface

display counters rate

Use display counters rate to display traffic rate statistics for interfaces in up state for the most recent statistics polling interval.

Syntax

display counters rate { inbound | outbound } interface [ interface-type [ interface-number ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

context-admin

context-operator

Parameters

inbound: Displays inbound traffic rate statistics.

outbound: Displays outbound traffic rate statistics.

interface-type: Specifies an interface type.

interface-number: Specifies an interface number.

Usage guidelines

If you do not specify an interface type, this command displays traffic rate statistics for all up interfaces that have traffic counters.

If you specify an interface type but do not specify an interface number, this command displays traffic rate statistics for all up interfaces of the specified type.

If you specify an interface type and an interface, this command displays traffic rate statistics for the specified interface.

If an interface that you specify is always down for the most recent statistics polling interval, the system prompts that the interface does not support the command.

You can use the flow-interval command to set the statistics polling interval.

Examples

# Display the inbound traffic rate statistics for all interfaces.

<Sysname> display counters rate inbound interface

Usage: Bandwidth utilization in percentage

Interface            Usage (%)   Total (pps)   Broadcast (pps)   Multicast (pps)

GE1/0/1                     0             0                --               --

 

 Overflow: More than 14 digits.

       --: Not supported.

Table 2 Command output

Field

Description

Interface

Abbreviated interface name.

Usage (%)

Bandwidth usage (in percentage) of the interface for the last statistics polling interval.

Total (pps)

Average receiving or sending rate (in pps) for unicast packets for the last statistics polling interval.

Broadcast (pps)

Average receiving or sending rate (in pps) for broadcast packets for the last statistics polling interval.

Multicast (pps)

‌Average receiving or sending rate (in pps) for multicast packets for the last statistics polling interval. .

Overflow: more than 14 decimal digits

The command displays Overflow if the data length of a statistical item is greater than 14 decimal digits.

--: not supported

The statistical item is not supported.

Related commands

flow-interval

reset counters interface

display ethernet statistics

Use display ethernet statistics to display the Ethernet module statistics.

Syntax

display ethernet statistics slot slot-number

Views

Any view

Predefined user roles

network-admin

network-operator

context-admin

context-operator

Parameters

slot slot-number: Specifies an IRF member device by its member ID.

Examples

# Display the Ethernet module statistics for the specified slot.

<Sysname> display ethernet statistics slot 1

ETH receive packet statistics:

    Totalnum        : 10447          ETHIINum     : 4459

    SNAPNum         : 0              RAWNum       : 0

    LLCNum          : 0              UnknownNum   : 0

    ForwardNum      : 4459           ARP          : 0

    MPLS            : 0              ISIS         : 0

    ISIS2           : 0              IP           : 0

    IPV6            : 0

ETH receive error statistics:

    NullPoint       : 0              ErrIfindex   : 0

    ErrIfcb         : 0              IfShut       : 0

    ErrAnalyse      : 5988           ErrSrcMAC    : 5988

    ErrHdrLen       : 0

 

ETH send packet statistics:

    L3OutNum        : 211            VLANOutNum   : 0

    FastOutNum      : 155            L2OutNum     : 0

ETH send error statistics:

    MbufRelayNum    : 0              NullMbuf     : 0

    ErrAdjFwd       : 0              ErrPrepend   : 0

    ErrHdrLen       : 0              ErrPad       : 0

    ErrQoSTrs       : 0              ErrVLANTrs   : 0

    ErrEncap        : 0              ErrTagVLAN   : 0

    IfShut          : 0              IfErr        : 0

Table 3 Output description

Field

Description

ETH receive packet statistics

Statistics about the Ethernet packets received by the Ethernet module:

·     Totalnum—Total number of received packets.

·     ETHIINum—Number of packets encapsulated by using Ethernet II.

·     SNAPNum—Number of packets encapsulated by using SNAP.

·     RAWNum—Number of packets encapsulated by using RAW.

·     ISISNum—Number of packets encapsulated by using ISIS.

·     LLCNum—Number of packets encapsulated by using LLC.

·     UnknownNum—Number of packets encapsulated by using unknown methods.

·     ForwardNum—Number of packets forwarded at Layer 2 or sent to the CPU. 

·     ARP—Number of ARP packets.

·     ISIS—Number of IS-IS packets.

·     ISIS2—Number of large 802.3/802.2 frames encapsulated by using IS-IS.

·     IP—Number of IP packets.

·     IPv6—Number of IPv6 packets.

ETH receive error statistics

Statistics about the error Ethernet packets in the inbound direction on the Ethernet module. Errors might be included in packets or occur during the receiving process. The items include:

·     NullPoint—Number of packets that include null pointers.

·     ErrIfindex—Number of packets that include incorrect interface indexes.

·     ErrIfcb—Number of packets that include incorrect interface control blocks.

·     IfShut—Number of packets that are being received when the interface is shut down.

·     ErrAnalyse—Number of packets that include packet parsing errors.

·     ErrSrcMAC—Number of packets that include incorrect source MAC addresses.

·     ErrHdrLen—Number of packets that include header length errors.

ETH send packet statistics

Statistics about the Ethernet packets sent by the Ethernet module:

·     L3OutNum—Number of packets sent out of Layer 3 Ethernet interfaces.

·     VLANOutNum—Number of packets sent out of VLAN interfaces.

·     FastOutNum—Number of packets fast forwarded.

·     L2OutNum—Number of packets sent out of Layer 2 Ethernet interfaces.

·     MbufRelayNum—Number of packets transparently sent.

ETH send error statistics

Statistics about the error Ethernet packets in the outbound direction on the Ethernet module:

·     NullMbuf—Number of packets with null pointers.

·     ErrAdjFwd—Number of packets with adjacency table errors.

·     ErrPrepend—Number of packets with extension errors.

·     ErrHdrLen—Number of packets with header length errors.

·     ErrPad—Number of packets with padding errors.

·     ErrQoSTrs—Number of packets that failed to be sent by QoS.

·     ErrVLANTrs—Number of packets that failed to be sent in VLANs.

·     ErrEncap—Number of packets that failed to be sent due to link header encapsulation failures.

·     ErrTagVLAN—Number of packets that failed to be sent due to VLAN tag encapsulation failures.

·     IfShut—Number of packets that are being sent when the interface is shut down.

·     IfErr—Number of packets with incorrect outgoing interfaces.

Related commands

reset ethernet statistics

display interface

Use display interface to display interface information.

Syntax

display interface [ interface-type [ interface-number | interface-number.subnumber ] ] [ brief [ description | down ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

context-admin

context-operator

Parameters

interface-type: Specifies an interface type.

interface-number: Specifies an interface number.

interface-number.subnumber: Specifies a subinterface number. The interface-number argument is an interface number. The subnumber argument is the number of a subinterface created under the interface. The value range for the subnumber argument is 1 to 4094.

brief: Displays brief interface information. If you do not specify this keyword, the command displays detailed interface information.

description: Displays complete interface descriptions. If you do not specify this keyword, the command displays only the first 27 characters of each interface description.

down: Displays information about interfaces in down state and the causes. If you do not specify this keyword, the command displays information about interfaces in all states.

Usage guidelines

If you do not specify an interface type, this command displays information about all interfaces except VA interfaces. For more information about VA interfaces, see PPP in Layer 2—WAN Access Configuration Guide.

If you specify an interface type but do not specify an interface number, this command displays information about all interfaces of the specified type.

Examples

# Display information about Layer 3 interface GigabitEthernet 1/0/1.

<Sysname> display interface gigabitethernet 1/0/1

GigabitEthernet1/0/1

Current state: Administratively DOWN

Line protocol state: DOWN

Description: GigabitEthernet1/0/1 Interface

Bandwidth: 1000000 kbps

Maximum transmission unit: 1500

Allow jumbo frames to pass

Broadcast max-ratio: 100%

Multicast max-ratio: 100%

Unicast max-ratio: 100%

Internet protocol processing: Disabled

IP packet frame type: Ethernet II, hardware address: 3822-d666-bd0c

IPv6 packet frame type: Ethernet II, hardware address: 3822-d666-bd0c

Media type is twisted pair, loopback not set, promiscuous mode set             

Speed Negotiation, Duplex Negotiation, link type is autonegotiation            

Output flow-control is disabled, input flow-control is disabled                

Last link flapping: Never                                                      

Last clearing of counters: Never                                               

Current system time:2078-11-09 17:58:38                                        

Last time when physical state changed to up:-                                  

Last time when physical state changed to down:2078-11-01 21:21:23              

 Peak input rate: 0 bytes/sec, at 00-00-00 00:00:00                            

 Peak output rate: 0 bytes/sec, at 00-00-00 00:00:00                           

 Last 300 second input: 0 packets/sec 0 bytes/sec -%                           

 Last 300 second output: 0 packets/sec 0 bytes/sec -%                          

 Input (total):  0 packets, 0 bytes                                             

          0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses                     

 Input (normal):  0 packets, 0 bytes                                           

          0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses                      

 Input:  0 input errors, 0 runts, 0 giants, - throttles                        

          0 CRC, 0 frame, 0 overruns, 0 aborts                                 

          0 ignored, - parity errors                                            

 Output (total): 0 packets, 0 bytes                                            

          0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses                     

 Output (normal): 0 packets, 0 bytes                                           

          0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses                     

 Output: 0 output errors, 0 underruns, - buffer failures                       

          0 aborts, 0 deferred, 0 collisions, 0 late collisions                

          0 lost carrier, 0 no carrier

# Display detailed information about Layer 2 interface GigabitEthernet 1/0/1.

<Sysname> display interface gigabitethernet 1/0/1

GigabitEthernet1/0/1

Current state: DOWN

Line protocol state: DOWN

IP packet frame type: Ethernet II, hardware address: 000c-2963-b767

Description: GigabitEthernet1/0/1 Interface

Bandwidth: 100000 kbps

Loopback is not set

Media type is twisted pair, port hardware type is 1000_BASE_T_AN_SFP

Unknown-speed mode, unknown-duplex mode

Link speed type is autonegotiation, link duplex type is autonegotiation

Flow-control is not enabled

Maximum frame length: 9216

Allow jumbo frame to pass

Broadcast max-ratio: 100%

Multicast max-ratio: 100%

Unicast max-ratio: 100%

PVID: 1

MDI type: Automdix

Port link-type: Access

 Tagged VLANs:   None

 UnTagged VLANs: 1

Port priority: 2

Last link flapping: 6 hours 39 minutes 25 seconds

Last clearing of counters:  14:34:09 Tue 11/01/2011

Current system time:2017-12-09 10:59:08

Last time when physical state changed to up:-

Last time when physical state changed to down:2017-12-09 10:59:07

 Peak input rate: 0 bytes/sec, at 2013-07-17 22:06:19

 Peak output rate: 0 bytes/sec, at 2013-07-17 22:06:19

 Last 300 second input:  0 packets/sec 0 bytes/sec -%

 Last 300 second output:  0 packets/sec 0 bytes/sec -%

 Input (total):  0 packets, 0 bytes

          0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses

 Input (normal):  0 packets, 0 bytes

          0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses

 Input:  0 input errors, 0 runts, 0 giants, 0 throttles

          0 CRC, 0 frame, 0 overruns, 0 aborts

          0 ignored, 0 parity errors

 Output (total): 0 packets, 0 bytes

          0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses

 Output (normal): 0 packets, 0 bytes

          0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses

 Output: 0 output errors, 0 underruns, 0 buffer failures

          0 aborts, 0 deferred, 0 collisions, 0 late collisions

          0 lost carrier, 0 no carrier

Table 4 Command output

Field

Description

Current state

Physical link state of the interface:

·     Administratively DOWN—The interface has been shut down by using the shutdown command.

·     DOWN—The interface is administratively up, but its physical state is down (possibly because no physical link exists or the link has failed).

·     DOWN ( Link-Aggregation interface down )—The aggregate interface to which the interface belongs has been shut down by using the shutdown command.

·     ETH-rddc Shutdown—The interface has been shut down by the Reth module.

·     mac-address moving down—The interface has been shut down by the MAC address move suppression feature.

·     MAD ShutDown—The interface has been shut down by IRF MAD. This state occurs if the interface is on an IRF fabric placed in Recovery state after an IRF split.

·     Storm-Constrain—The interface has been shut down because the storm control feature detected that multicast or broadcast traffic exceeded the upper threshold.

·     STP DOWN—The interface has been shut down by the BPDU guard feature.

·     UP—The interface is both administratively and physically up.

Line protocol state

Data link layer state of the interface. The state is determined through automatic parameter negotiation at the data link layer.

·     UP—The data link layer protocol is up.

·     UP (spoofing)—The data link layer protocol is up, but the link is an on-demand link or does not exist. This attribute is typical of null interfaces and loopback interfaces.

·     DOWN—The data link layer protocol is down.

·     DOWN (protocols)—The data link layer has been shut down by protocols included in the parentheses. Available protocols include:

¡     LAGG—Shuts down the data link layer when it detects that the aggregate interface does not have Selected ports.

¡     BFD—Shuts down the data link layer when it detects a link failure.

Bandwidth

Expected bandwidth of the interface.

Maximum transmission unit

MTU of the interface.

Internet protocol processing: Disabled

The interface is not assigned an IP address and cannot process IP packets.

Internet address: ip-address/mask-length (Type)

IP address of the interface and type of the address in parentheses.

Possible IP address types include:

·     Primary—Manually configured primary IP address.

·     Sub—Manually configured secondary IP address. If the interface has both primary and secondary IP addresses, the primary IP address is displayed. If the interface has only secondary IP addresses, the lowest secondary IP address is displayed.

·     DHCP-allocated—DHCP allocated IP address. For more information, see DHCP client configuration in Layer 3IP Services Configuration Guide.

·     BOOTP-allocatedBOOTP allocated IP address. For more information, see BOOTP client configuration in Layer 3IP Services Configuration Guide.

·     PPP-negotiated—IP address assigned by a PPP server during PPP negotiation. For more information, see PPP configuration in Layer 2WAN Access Configuration Guide.

·     Unnumbered—IP address borrowed from another interface.

·     Cellular-allocated—IP address allocated through the modem-manufacturer's proprietary protocol. For more information, see 3G/4G modem management in Layer 2WAN Access Configuration Guide.

·     MAD—IP address assigned to an IRF member device for MAD on the interface. For more information, see IRF configuration in Virtual Technologies Configuration Guide.  

IP packet frame type

IPv4 packet framing format.

hardware address

MAC address of the interface.

IPv6 packet frame type

IPv6 packet framing format.

Port priority

Port priority of the interface.

Loopback is set internal

An internal loopback test is running on the interface. This field depends on your configuration.

Loopback is set external

An external loopback test is running on the interface. This field depends on your configuration.

Loopback is not set

No loopback test is running on the interface. This field depends on your configuration.

10Mbps-speed mode

The interface is operating at 10 Mbps. This field depends on your configuration and the link parameter negotiation result.

100Mbps-speed mode

The interface is operating at 100 Mbps. This field depends on your configuration and the link parameter negotiation result.

1000Mbps-speed mode

The interface is operating at 1000 Mbps. This field depends on your configuration and the link parameter negotiation result.

10Gbps-speed mode

The interface is operating at 10 Gbps. This field depends on your configuration and the link parameter negotiation result.

40Gbps-speed mode

The interface is operating at 40 Gbps. This field depends on your configuration and the link parameter negotiation result.

Unknown-speed mode

The speed of the interface is unknown because the speed negotiation fails or the interface is physically disconnected.

half-duplex mode

The interface is operating in half duplex mode. This field depends on your configuration and the link parameter negotiation result.

full-duplex mode

The interface is operating in full duplex mode. This field depends on your configuration and the link parameter negotiation result.

unknown-duplex mode

The duplex mode of the interface is unknown because the duplex mode negotiation fails or the interface is physically disconnected.

Link speed type is autonegotiation

The interface is configured with the speed auto command.

Link speed type is force link

The interface is manually configured with a speed (for example, 1000 Mbps) by using the speed command.

link duplex type is autonegotiation

The interface is configured with the duplex auto command.

link duplex type is force link

The interface is manually configured with a duplex mode (for example, half or full) by using the duplex command.

Flow-control is not enabled

Generic flow control is disabled on the interface. This field depends on your configuration and the link parameter negotiation result.

Maximum frame length

Maximum length of Ethernet frames allowed to pass through the interface.

Allow jumbo frame to pass

The interface allows jumbo frames to pass through.

Broadcast max-

Broadcast storm suppression threshold in ratio, pps, or kbps. The unit of the threshold depends on your configuration.

Multicast max-

Multicast storm suppression threshold in ratio, pps, or kbps. The unit of the threshold depends on your configuration.

Unicast max-

Unknown unicast storm suppression threshold in ratio, pps, or kbps. The unit of the threshold depends on your configuration.

PVID

Port VLAN ID (PVID) of the interface.

MDI type

MDIX mode of the interface:

·     automdix.

·     mdi.

·     mdix.

Port link-type

Link type of the interface:

·     access.

·     trunk.

·     hybrid.

Tagged VLANs

VLANs for which the interface sends packets without removing VLAN tags.

Untagged VLANs

VLANs for which the interface sends packets after removing VLAN tags.

VLAN Passing

VLANs whose packets can be forwarded by the port. The VLANs must have been created.

VLAN permitted

VLANs whose packets are permitted by the port.

Trunk port encapsulation

Encapsulation protocol type for the trunk port.

Last link flapping

The amount of time that has elapsed since the most recent physical state change of the interface. This field displays Never if the interface has been physically down since device startup.

Last clearing of counters

Time when the reset counters interface command was last used to clear the interface statistics. This field displays Never if the reset counters interface command has never been used on the interface since device startup.

Current system time

Current system time in the YYYY/MM/DD HH:MM:SS format. If the time zone is configured, this field is in the YYYY/MM/DD HH:MM:SS UTC±HH:MM:SS format.

Last time when physical state changed to up

Last time when physical state of the interface changed to up.

A hyphen (-) indicates that the physical state of the interface has not changed to up.

Last time when physical state changed to down

Last time when physical state of the interface changed to down.

A hyphen (-) indicates that the physical state of the interface has not changed to down.

Last 300 second input:  0 packets/sec 0 bytes/sec 0%

Last 300 second output:  0 packets/sec 0 bytes/sec 0%

Average inbound or outbound traffic rate (in pps and Bps) in the last 300 seconds, and the ratio of the actual rate to the interface bandwidth.

A hyphen (-) indicates that the statistical item is not supported.

Input(total):  0 packets, 0 bytes

          0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses

The two fields on the first line represent the inbound traffic statistics (in packets and bytes) for the interface. All inbound normal packets, abnormal packets, and normal pause frames were counted.

The four fields on the second line represent:

·     Number of inbound unicast packets.

·     Number of inbound broadcasts.

·     Number of inbound multicasts.

·     Number of inbound pause frames.

A hyphen (-) indicates that the statistical item is not supported.

Input(normal):  0 packets, 0 bytes

          0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses

The two fields on the first line represent the inbound normal traffic and pause frame statistics (in packets and bytes) for the interface.

The four fields on the second line represent:

·     Number of inbound normal unicast packets.

·     Number of inbound normal broadcasts.

·     Number of inbound normal multicasts.

·     Number of inbound normal pause frames.

A hyphen (-) indicates that the statistical item is not supported.

input errors

Statistics of incoming error packets.

runts

Number of inbound frames meeting the following conditions:

·     Shorter than 64 bytes.

·     In correct format.

·     Containing valid CRCs.

giants

Number of inbound giants. Giants refer to frames larger than the maximum frame length supported on the interface.

For an Ethernet interface that does not permit jumbo frames, the maximum frame length is as follows:

·     1518 bytes (without VLAN tags).

·     1522 bytes (with VLAN tags).

For an Ethernet interface that permits jumbo frames, the maximum Ethernet frame length is set when you configure jumbo frame support on the interface.

throttles

Number of inbound frames that had a non-integer number of bytes.

CRC

Total number of inbound frames that had a normal length, but contained CRC errors.

frame

Total number of inbound frames that contained CRC errors and a non-integer number of bytes.

overruns

Number of packets dropped because the input rate of the port exceeded the queuing capability.

aborts

Total number of illegal inbound packets:

·     Fragment frames—CRC error frames shorter than 64 bytes. The length (in bytes) can be an integral or non-integral value.

·     Jabber frames—CRC error frames greater than the maximum frame length supported on the Ethernet interface (with an integral or non-integral length).

¡     For an Ethernet interface that does not permit jumbo frames, the maximum frame length is 1518 bytes (without VLAN tags) or 1522 bytes (with VLAN tags).

¡     For an Ethernet interface that permits jumbo frames, the maximum Ethernet frame length is set when you configure jumbo frame support on the interface.

·     Symbol error frames—Frames that contained a minimum of one undefined symbol.

·     Unknown operation code frames—Non-pause MAC control frames.

·     Length error frames—Frames whose 802.3 length fields did not match the actual frame length (46 to 1500 bytes).

ignored

Number of inbound frames dropped because the receiving buffer of the port ran low.

parity errors

Total number of frames with parity errors.

Output(total): 0 packets, 0 bytes

          0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses

The two fields on the first line represent the outbound traffic statistics (in packets and bytes) for the interface. All outbound normal packets, abnormal packets, and normal pause frames were counted.

‌The four fields on the second line represent:

·     Number of outbound unicast packets.

·     Number of outbound broadcasts.

·     Number of outbound multicasts.

·     Number of outbound pause frames.

A hyphen (-) indicates that the statistical item is not supported.

Output(normal): 0 packets, 0 bytes

          0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses

The two fields on the first line represent the outbound normal traffic and pause frame statistics (in packets and bytes) for the interface.

‌The four fields on the second line represent:

·     Number of outbound normal unicast packets.

·     Number of outbound normal broadcasts.

·     Number of outbound normal multicasts.

·     Number of outbound normal pause frames.

A hyphen (-) indicates that the statistical item is not supported.

output errors

Number of outbound packets with errors.

underruns

Number of packets dropped because the output rate of the interface exceeded the output queuing capability. This is a low-probability hardware anomaly.

buffer failures

Number of packets dropped because the transmitting buffer of the interface ran low.

aborts

Number of packets that failed to be transmitted, for example, because of Ethernet collisions.

deferred

Number of frames that the interface deferred to transmit because of detected collisions.

collisions

Number of frames that the interface stopped transmitting because Ethernet collisions were detected during transmission.

late collisions

Number of frames that the interface deferred to transmit after transmitting their first 512 bits because of detected collisions.

lost carrier

This field is not supported in the current software version. Number of carrier losses during transmission. This counter increases by one when a carrier is lost, and applies to serial WAN interfaces.

no carrier

This field is not supported in the current software version. Number of times that the port failed to detect the carrier when attempting to send frames. This counter increases by one when a port failed to detect the carrier, and applies to serial WAN interfaces.

Peak input rate

Peak rate of inbound traffic in Bps, and the time when the peak inbound traffic rate occurred.

Peak output rate

Peak rate of outbound traffic in Bps, and the time when the peak outbound traffic rate occurred.

# Display brief information about all interfaces.

<Sysname> display interface brief

Brief information on interfaces in route mode:

Link: ADM - administratively down; Stby - standby

Protocol: (s) – spoofing

 

Interface            Link Protocol Primary IP      Description

GE1/0/1              DOWN DOWN     --

Loop0                UP   UP(s)    2.2.2.9

NULL0                UP   UP(s)    --

Vlan1                UP   UP       --

Vlan999              UP   UP       192.168.1.42

 

Brief information on interfaces in bridge mode:

Link: ADM - administratively down; Stby - standby

Speed: (a) - auto

Duplex: (a)/A - auto; H - half; F - full

Type: A - access; T - trunk; H - hybrid

Interface            Link Speed   Duplex Type PVID Description

GE1/0/2              DOWN auto    A      A    1

GE1/0/3              UP   1G(a)   F(a)   A    1    aaaaaaaaaaaaaaaaaaaaaaaaaaa

# Display brief information about GigabitEthernet 1/0/1, including the complete description of the interface.

<Sysname> display interface gigabitethernet 1/0/1 brief description

Brief information on interfaces in bridge mode:

Link: ADM - administratively down; Stby - standby

Speed: (a) - auto

Duplex: (a)/A - auto; H - half; F - full

Type: A - access; T - trunk; H - hybrid

Interface            Link Speed   Duplex Type PVID Description

GE1/0/1              UP   1G(a)   F(a)   A    1    aaaaaaaaaaaaaaaaaaaaaaaaaaaaa

aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa

# Display information about interfaces in DOWN state and the causes.

<Sysname> display interface brief down

Brief information on interfaces in route mode:

Link: ADM - administratively down; Stby - standby

Interface            Link Cause

GE1/0/1              DOWN Not connected

Vlan2                DOWN Not connected

 

Brief information on interfaces in bridge mode:

Link: ADM - administratively down; Stby - standby

Interface            Link Cause

GE1/0/2              DOWN Not connected

Table 5 Command output

Field

Description

Brief information on interfaces in route mode:

Brief information about Layer 3 interfaces.

Interface

Interface name.

Link

Physical link state of the interface:

·     UP—The interface is physically up.

·     DOWN—The interface is physically down.

·     ADM—The interface has been shut down by using the shutdown command. To restore the physical state of the interface, use the undo shutdown command.

·     Stby—The interface is a backup interface in standby state. To see the primary interface, use the display interface-backup state command.

Protocol

Data link layer protocol state of the interface:

·     UP—The data link layer protocol of the interface is up.

·     DOWN—The data link layer protocol of the interface is down.

·     UP(s)—The data link layer protocol of the interface is up, but the link is an on-demand link or does not exist. The (s) attribute represents the spoofing flag. This value is typical of null interfaces and loopback interfaces.

Primary IP

Primary IP address of the interface. This field displays two hyphens (--) if the interface does not have an IP address.

Description

Description of the interface.

Brief information of interfaces in bridge mode:

Brief information about Layer 2 interfaces.

Type: A - access; T - trunk; H – hybrid

Link type options for interfaces.

Speed

Speed of the interface, in bps.

This field displays the (a) flag next to the speed if the speed is automatically negotiated.

This field displays auto if the interface is configured to autonegotiate its speed but the autonegotiation has not started.

Duplex

Duplex mode of the interface:

·     A—Autonegotiation. The interface is configured to autonegotiate its duplex mode but the autonegotiation has not started.

·     F—Full duplex.

·     F(a)—Autonegotiated full duplex.

·     H—Half duplex.

·     H(a)—Autonegotiated half duplex.

Type

Link type of the interface:

·     A—Access.

·     H—Hybrid.

·     T—Trunk.

PVID

Port VLAN ID.

Cause

Cause for the physical link state of an interface to be DOWN:

·     Administratively—The interface has been manually shut down by using the shutdown command. To restore the physical state of the interface, use the undo shutdown command.

·     DOWN ( Link-Aggregation interface down )—The interface is a member port of an aggregate interface, and the aggregate interface is down.

·     MAD ShutDown—The interface is on an IRF fabric placed by IRF MAD in Recovery state after an IRF split.

·     Not connected—No physical connection exists (possibly because the network cable is disconnected or faulty).

·     Storm-Constrain—The storm control feature has detected that multicast or broadcast traffic exceeded the upper threshold.

·     STP DOWN—The interface has been shut down by the BPDU guard feature.

·     Standby—The interface is a backup interface in standby state.

Related commands

reset counters interface

display packet-drop

Use display packet-drop to display information about packets dropped on an interface.

Syntax

display packet-drop { interface [ interface-type [ interface-number ] ] | summary }

Views

Any view

Predefined user roles

network-admin

network-operator

context-admin

context-operator

Parameters

interface-type: Specifies an interface type.

interface-number: Specifies an interface number.

summary: Displays the summary of dropped packets on all interfaces.

Usage guidelines

If you do not specify an interface type, this command displays information about dropped packets on all interfaces on the device.

If you specify an interface type but do not specify an interface number, this command displays information about dropped packets on all interfaces of the specified type.

Examples

# Display information about dropped packets on GigabitEthernet 1/0/1.

<Sysname> display packet-drop interface gigabitethernet 1/0/1

GigabitEthernet1/0/1:

Packets dropped due to full GBP or insufficient bandwidth: 301

Packets dropped due to Fast Filter Processor (FFP): 261

Packets dropped due to STP non-forwarding state: 0

Packets dropped due to rate-limit: 143

Packets dropped due to broadcast-suppression: 301

Packets dropped due to unicast-suppression: 215

Packets dropped due to multicast-suppression: 241

Packets dropped due to Tx packet aging: 246

# Display the summary of dropped packets on all interfaces.

<Sysname> display packet-drop summary

All interfaces:

Packets dropped due to full GBP or insufficient bandwidth: 301

Packets dropped due to Fast Filter Processor (FFP): 261

Packets dropped due to STP non-forwarding state: 0

Packets dropped due to rate-limit: 143

Packets dropped due to broadcast-suppression: 301

Packets dropped due to unicast-suppression: 215

Packets dropped due to multicast-suppression: 241

Packets dropped due to Tx packet aging: 246

Table 6 Command output

Field

Description

Packets dropped due to full GBP or insufficient bandwidth

Packets that are dropped because the buffer is used up or the bandwidth is insufficient.

Packets dropped due to Fast Filter Processor (FFP)

Packets that are filtered out.

Packets dropped due to STP non-forwarding state

Packets that are dropped because STP is in the non-forwarding state.

Packets dropped due to rate-limit

Packets that are dropped due to the rate limit set on the device.

Packets dropped due to broadcast-suppression

Packets that are dropped due to broadcast suppression.

Packets dropped due to unicast-suppression

Packets that are dropped due to unknown unicast suppression.

Packets dropped due to multicast-suppression

‌Packets that are dropped due to multicast suppression.

Packets dropped due to Tx packet aging

Outbound packets that are timed out.

duplex

Use duplex to set the duplex mode for an Ethernet interface.

Use undo duplex to restore the default.

Syntax

duplex { auto | full | half }

undo duplex

Default

Ethernet interfaces operate in autonegotiation mode.

Views

Ethernet interface view

Predefined user roles

network-admin

context-admin

Parameters

auto: Configures the interface to autonegotiate the duplex mode with the peer.

full: Configures the interface to operate in full duplex mode. In this mode, the interface can receive and transmit packets simultaneously.

half: Configures the interface to operate in half duplex mode. In this mode, the interface can only receive or transmit packets at a given time.

Usage guidelines

For fiber ports, only fiber ports 14 through 17 on the F1000-AI-60 and F1000-AI-70 devices support the auto and full keywords of this command, and the other fiber ports support only the auto keyword of this command.

Examples

# Configure GigabitEthernet 1/0/1 to operate in full duplex mode.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] duplex full

flow-control

Use flow-control to enable TxRx-mode generic flow control on an Ethernet interface.

Use undo flow-control to disable TxRx-mode generic flow control on the Ethernet interface.

Syntax

flow-control

undo flow-control

Default

TxRx-mode generic flow control is disabled on an Ethernet interface.

Views

Ethernet interface view

Predefined user roles

network-admin

context-admin

Usage guidelines

With TxRx-mode generic flow control configured, an interface can both send and receive flow control frames:

·     When congested, the interface sends a flow control frame to its peer.

·     Upon receiving a flow control frame from the peer, the interface suspends sending packets.

To implement flow control on a link, enable generic flow control at both ends of the link.

Examples

# Enable TxRx-mode generic flow control on GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] flow-control

flow-interval

Use flow-interval to set the statistics polling interval.

Use undo flow-interval to restore the default.

Syntax

flow-interval interval

undo flow-interval

Default

The statistics polling interval is 300 seconds.

Views

System view

Ethernet interface view

The following compatibility matrix shows the support of hardware platforms for views:

 

Hardware

Views

F5010, F5020, F5020-GM, F5030, F5030-6GW, F5040, F5060, F5080, F5000-AI-20, F5000-AI-40, F5000-V30, F5000-C, F5000-S, F5000-M, F5000-A

Ethernet interface view

F1000-AI-20, F1000-AI-30, F1000-AI-50, F1000-AI-60, F1000-AI-70, F1000-AI-80, F1000-AI-90

Ethernet interface view

F1003-L, F1005-L, F1010-L

Ethernet interface view

F1005, F1010

Ethernet interface view

F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080, F1090, F1000-V70

Ethernet interface view

F1000-AK1110, F1000-AK1120, F1000-AK1130, F1000-AK1140

Ethernet interface view

F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1312, F1000-AK1322, F1000-AK1332

Ethernet interface view

F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614

Ethernet interface view

F1000-AK108, F1000-AK109, F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710

Ethernet interface view

F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380, F1000-AK711

Ethernet interface view

LSU3FWCEA0, LSUM1FWCEAB0, LSX1FWCEA1

Ethernet interface view

LSXM1FWDF1, LSUM1FWDEC0, IM-NGFWX-IV, LSQM1FWDSC0, LSWM1FWD0, LSPM6FWD, LSQM2FWDSC0

Ethernet interface view

vFW1000, vFW2000

System view

Predefined user roles

network-admin

context-admin

Parameters

interval: Sets the statistics polling interval in seconds. The interval is in the range of 5 to 300 and must be a multiple of 5.

Usage guidelines

The statistics polling interval configured in system view takes effect on all Ethernet interface.

The statistics polling interval configured in Ethernet interface view takes effect only on the current interface.

The statistics polling interval configured in Ethernet interface view takes precedence over the statistics polling interval configured in system view. The interval configured in system view takes effect on an Ethernet interface only when no interval is configured or the default interval is configured for the Ethernet interface.

This command is not applicable to interfaces assigned to contexts in shared mode.

Examples

# Set the statistics polling interval to 100 seconds on GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] flow-interval 100

ifmonitor crc-error

Use ifmonitor crc-error to configure global CRC error packet alarm parameters.

Use undo ifmonitor crc-error to restore the default.

Syntax

ifmonitor crc-error slot slot-number high-threshold high-value low-threshold low-value interval interval [ shutdown ]

undo ifmonitor crc-error slot slot-number

The following matrix shows the hardware and command compatibility:

 

Hardware

Compatibility

F5010, F5020, F5020-GM, F5030, F5030-6GW, F5040, F5060, F5080, F5000-AI-20, F5000-AI-40, F5000-V30, F5000-C, F5000-S, F5000-M, F5000-A

Yes

F1000-AI-20, F1000-AI-30, F1000-AI-50, F1000-AI-60, F1000-AI-70, F1000-AI-80, F1000-AI-90

Yes

F1003-L, F1005-L, F1010-L

No

F1005, F1010

No

F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080, F1090, F1000-V70

Yes

F1000-AK1110, F1000-AK1120, F1000-AK1130, F1000-AK1140

No

F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1312, F1000-AK1322, F1000-AK1332

Yes

F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614

Yes

F1000-AK108, F1000-AK109, F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710

No

F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380, F1000-AK711

Yes

LSU3FWCEA0, LSUM1FWCEAB0, LSX1FWCEA1

Yes

LSXM1FWDF1, LSUM1FWDEC0, IM-NGFWX-IV, LSQM1FWDSC0, LSWM1FWD0, LSPM6FWD, LSQM2FWDSC0

Yes

vFW1000, vFW2000

No

Default

The upper threshold is 1000, the lower threshold is 100, and the statistics collection and comparison interval is 10 seconds for CRC error packet alarms.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

high-threshold high-value: Specifies the upper threshold for CRC error packet alarms, in the range of 1 to 4294967295 packets.

low-threshold low-value: Specifies the lower threshold for CRC error packet alarms, in the range of 1 to 4294967295 packets.

interval interval: Specifies the statistics collection and comparison interval for CRC error packets, in the range of 1 to 65535 seconds.

shutdown: Shuts down an interface when the number of incoming CRC error packets on the interface exceeds the upper threshold. Then, the interface stops forwarding all packets. To recover the interface, execute the undo shutdown command on the interface. If you do not specify this keyword, an upper threshold exceeding alarm is generated and the interface enters the alarm state when the number of incoming CRC error packets exceeds the upper threshold on the interface.

slot slot-number: Specifies an IRF member device by its member ID.

Usage guidelines

With the CRC error packet alarm function enabled, when the number of incoming CRC error packets on an interface in normal state within the specified interval exceeds the upper threshold, the interface generates an upper threshold exceeding alarm and enters the alarm state. When the number of incoming CRC error packets on an interface in the alarm state within the specified interval drops below the lower threshold, the interface generates a recovery alarm and restores to the normal state.

You can configure the CRC error packet alarm parameters in system view and interface view.

·     The configuration in system view takes effect on all interfaces of the specified slot. The configuration in interface view takes effect only on the current interface.

·     For an interface, the configuration in interface view takes priority, and the configuration in system view is used only when no configuration is made in interface view.

 

When you execute this command multiple times, the most recent configuration takes effect.

Examples

# Set the upper threshold to 5000, lower threshold to 400, and statistics collection and comparison interval to 6 seconds for CRC error packet alarms.

<Sysname> system-view

[Sysname] ifmonitor crc-error slot 1 high-threshold 5000 low-threshold 400 interval 6

Related commands

snmp-agent trap enable ifmonitor

ifmonitor input-error

Use ifmonitor input-error to configure global input error packet alarm parameters.

Use undo ifmonitor input-error to restore the default.

Syntax

ifmonitor input-error slot slot-number high-threshold high-value low-threshold low-value interval interval [ shutdown ]

undo ifmonitor input-error slot slot-number

The following matrix shows the hardware and command compatibility:

 

Hardware

Compatibility

F5010, F5020, F5020-GM, F5030, F5030-6GW, F5040, F5060, F5080, F5000-AI-20, F5000-AI-40, F5000-V30, F5000-C, F5000-S, F5000-M, F5000-A

Yes

F1000-AI-20, F1000-AI-30, F1000-AI-50, F1000-AI-60, F1000-AI-70, F1000-AI-80, F1000-AI-90

Yes

F1003-L, F1005-L, F1010-L

No

F1005, F1010

No

F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080, F1090, F1000-V70

Yes

F1000-AK1110, F1000-AK1120, F1000-AK1130, F1000-AK1140

No

F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1312, F1000-AK1322, F1000-AK1332

Yes

F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614

Yes

F1000-AK108, F1000-AK109, F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710

No

F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380, F1000-AK711

Yes

LSU3FWCEA0, LSUM1FWCEAB0, LSX1FWCEA1

Yes

LSXM1FWDF1, LSUM1FWDEC0, IM-NGFWX-IV, LSQM1FWDSC0, LSWM1FWD0, LSPM6FWD, LSQM2FWDSC0

Yes

vFW1000, vFW2000

No

Default

The upper threshold is 1000, the lower threshold is 100, and the statistics collection and comparison interval is 10 seconds for input error packet alarms.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

high-threshold high-value: Specifies the upper threshold for input error packet alarms, in the range of 1 to 4294967295 packets.

low-threshold low-value: Specifies the lower threshold for input error packet alarms, in the range of 1 to 4294967295 packets.

interval interval: Specifies the statistics collection and comparison interval for input error packets, in the range of 1 to 65535 seconds.

shutdown: Shuts down an interface when the number of input error packets on the interface exceeds the upper threshold. Then, the interface stops forwarding all packets. To recover the interface, execute the undo shutdown command on the interface. If you do not specify this keyword, an upper threshold exceeding alarm is generated and the interface enters the alarm state when the number of input error packets exceeds the upper threshold on the interface.

slot slot-number: Specifies an IRF member device by its member ID.

Usage guidelines

With the input error packet alarm function enabled, when the number of input error packets on an interface in normal state within the specified interval exceeds the upper threshold, the interface generates an upper threshold exceeding alarm and enters the alarm state. When the number of input error packets on an interface in the alarm state within the specified interval drops below the lower threshold, the interface generates a recovery alarm and restores to the normal state.

You can configure the input error packet alarm parameters in system view and interface view.

·     The configuration in system view takes effect on all interfaces of the specified slot. The configuration in interface view takes effect only on the current interface.

·     For an interface, the configuration in interface view takes priority, and the configuration in system view is used only when no configuration is made in interface view.

When you execute this command multiple times, the most recent configuration takes effect.

Examples

# Set the upper threshold to 5000, lower threshold to 400, and statistics collection and comparison interval to 6 seconds for input error packet alarms.

<Sysname> system-view

[Sysname] ifmonitor input-error slot 1 high-threshold 5000 low-threshold 400 interval 6

Related commands

snmp-agent trap enable ifmonitor

ifmonitor input-usage

Use ifmonitor input-usage to configure global input bandwidth usage alarm parameters.

Use undo ifmonitor input-usage to restore the default.

Syntax

ifmonitor input-usage slot slot-number high-threshold high-value low-threshold low-value

undo ifmonitor input-usage slot slot-number

The following matrix shows the hardware and command compatibility:

 

Hardware

Compatibility

F5010, F5020, F5020-GM, F5030, F5030-6GW, F5040, F5060, F5080, F5000-AI-20, F5000-AI-40, F5000-V30, F5000-C, F5000-S, F5000-M, F5000-A

Yes

F1000-AI-20, F1000-AI-30, F1000-AI-50, F1000-AI-60, F1000-AI-70, F1000-AI-80, F1000-AI-90

Yes

F1003-L, F1005-L, F1010-L

No

F1005, F1010

No

F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080, F1090, F1000-V70

Yes

F1000-AK1110, F1000-AK1120, F1000-AK1130, F1000-AK1140

No

F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1312, F1000-AK1322, F1000-AK1332

Yes

F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614

Yes

F1000-AK108, F1000-AK109, F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710

No

F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380, F1000-AK711

Yes

LSU3FWCEA0, LSUM1FWCEAB0, LSX1FWCEA1

Yes

LSXM1FWDF1, LSUM1FWDEC0, IM-NGFWX-IV, LSQM1FWDSC0, LSWM1FWD0, LSPM6FWD, LSQM2FWDSC0

Yes

vFW1000, vFW2000

No

Default

The upper threshold is 90, and the lower threshold is 80.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

high-threshold high-value: Specifies the upper threshold for input bandwidth usage alarms, in the range of 1 to 100.

low-threshold low-value: Specifies the lower threshold for input bandwidth usage alarms, in the range of 1 to 100.

slot slot-number: Specifies an IRF member device by its member ID.

Usage guidelines

With the input bandwidth usage alarm function enabled, when the input bandwidth usage on an interface in normal state within the most recent statistics polling interval exceeds the upper threshold, the interface generates an upper threshold exceeding alarm and enters the alarm state. When the input bandwidth usage on an interface in the alarm state within the most recent statistics polling interval drops below the lower threshold, the interface generates a recovery alarm and restores to the normal state.

You can use the flow-interval command to set the statistics polling interval.

You can configure the input bandwidth usage alarm parameters in system view and interface view.

·     The configuration in system view takes effect on all interfaces of the specified slot. The configuration in interface view takes effect only on the current interface.

·     For an interface, the configuration in interface view takes priority, and the configuration in system view is used only when no configuration is made in interface view.

For this command to take effect, you must use the snmp-agent trap enable ifmonitor command to enable the input bandwidth usage alarm function.

When you execute this command multiple times, the most recent configuration takes effect.

Examples

# Set the upper threshold to 95 and lower threshold to 80 for input bandwidth usage alarms.

<Sysname> system-view

[Sysname] ifmonitor input-usage slot 1 high-threshold 95 low-threshold 80

Related commands

flow-interval

snmp-agent trap enable ifmonitor

ifmonitor output-error

Use ifmonitor output-error to configure global output error packet alarm parameters.

Use undo ifmonitor output-error to restore the default.

Syntax

ifmonitor output-error slot slot-number high-threshold high-value low-threshold low-value interval interval [ shutdown ]

undo ifmonitor output-error slot slot-number

The following matrix shows the hardware and command compatibility:

 

Hardware

Compatibility

F5010, F5020, F5020-GM, F5030, F5030-6GW, F5040, F5060, F5080, F5000-AI-20, F5000-AI-40, F5000-V30, F5000-C, F5000-S, F5000-M, F5000-A

Yes

F1000-AI-20, F1000-AI-30, F1000-AI-50, F1000-AI-60, F1000-AI-70, F1000-AI-80, F1000-AI-90

Yes

F1003-L, F1005-L, F1010-L

No

F1005, F1010

No

F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080, F1090, F1000-V70

Yes

F1000-AK1110, F1000-AK1120, F1000-AK1130, F1000-AK1140

No

F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1312, F1000-AK1322, F1000-AK1332

Yes

F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614

Yes

F1000-AK108, F1000-AK109, F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710

No

F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380, F1000-AK711

Yes

LSU3FWCEA0, LSUM1FWCEAB0, LSX1FWCEA1

Yes

LSXM1FWDF1, LSUM1FWDEC0, IM-NGFWX-IV, LSQM1FWDSC0, LSWM1FWD0, LSPM6FWD, LSQM2FWDSC0

Yes

vFW1000, vFW2000

No

Default

The upper threshold is 1000, the lower threshold is 100, and the statistics collection and comparison interval is 10 seconds for output error packet alarms.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

high-threshold high-value: Specifies the upper threshold for output error packet alarms, in the range of 1 to 4294967295 packets.

low-threshold low-value: Specifies the lower threshold for output error packet alarms, in the range of 1 to 4294967295 packets.

interval interval: Specifies the statistics collection and comparison interval for output error packets, in the range of 1 to 65535 seconds.

shutdown: Shuts down an interface when the number of output error packets on the interface exceeds the upper threshold. Then, the interface stops forwarding all packets. To recover the interface, execute the undo shutdown command on the interface. If you do not specify this keyword, an upper threshold exceeding alarm is generated and the interface enters the alarm state when the number of output error packets exceeds the upper threshold on the interface.

slot slot-number: Specifies an IRF member device by its member ID.

Usage guidelines

With the output error packet alarm function enabled, when the number of output error packets on an interface in normal state within the specified interval exceeds the upper threshold, the interface generates an upper threshold exceeding alarm and enters the alarm state. When the number of output error packets on an interface in the alarm state within the specified interval drops below the lower threshold, the interface generates a recovery alarm and restores to the normal state.

You can configure the output error packet alarm parameters in system view and interface view.

·     The configuration in system view takes effect on all interfaces of the specified slot. The configuration in interface view takes effect only on the current interface.

·     For an interface, the configuration in interface view takes priority, and the configuration in system view is used only when no configuration is made in interface view.

When you execute this command multiple times, the most recent configuration takes effect.

Examples

# Set the upper threshold to 5000, lower threshold to 400, and statistics collection and comparison interval to 6 seconds for output error packet alarms.

<Sysname> system-view

[Sysname] ifmonitor output-error slot 1 high-threshold 5000 low-threshold 400 interval 6

Related commands

snmp-agent trap enable ifmonitor

ifmonitor output-usage

Use ifmonitor output-usage to configure global output bandwidth usage alarm parameters.

Use undo ifmonitor output-usage to restore the default.

Syntax

ifmonitor output-usage slot slot-number high-threshold high-value low-threshold low-value

undo ifmonitor output-usage slot slot-number

The following matrix shows the hardware and command compatibility:

 

Hardware

Compatibility

F5010, F5020, F5020-GM, F5030, F5030-6GW, F5040, F5060, F5080, F5000-AI-20, F5000-AI-40, F5000-V30, F5000-C, F5000-S, F5000-M, F5000-A

Yes

F1000-AI-20, F1000-AI-30, F1000-AI-50, F1000-AI-60, F1000-AI-70, F1000-AI-80, F1000-AI-90

Yes

F1003-L, F1005-L, F1010-L

No

F1005, F1010

No

F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080, F1090, F1000-V70

Yes

F1000-AK1110, F1000-AK1120, F1000-AK1130, F1000-AK1140

No

F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1312, F1000-AK1322, F1000-AK1332

Yes

F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614

Yes

F1000-AK108, F1000-AK109, F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710

No

F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380, F1000-AK711

Yes

LSU3FWCEA0, LSUM1FWCEAB0, LSX1FWCEA1

Yes

LSXM1FWDF1, LSUM1FWDEC0, IM-NGFWX-IV, LSQM1FWDSC0, LSWM1FWD0, LSPM6FWD, LSQM2FWDSC0

Yes

vFW1000, vFW2000

No

Default

The upper threshold is 90, and the lower threshold is 80.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

high-threshold high-value: Specifies the upper threshold for output bandwidth usage alarms, in the range of 1 to 100.

low-threshold low-value: Specifies the lower threshold for output bandwidth usage alarms, in the range of 1 to 100.

slot slot-number: Specifies an IRF member device by its member ID.

Usage guidelines

With the output bandwidth usage alarm function enabled, when the output bandwidth usage on an interface in normal state within the most recent statistics polling interval exceeds the upper threshold, the interface generates an upper threshold exceeding alarm and enters the alarm state. When the output bandwidth usage on an interface in the alarm state within the most recent statistics polling interval drops below the lower threshold, the interface generates a recovery alarm and restores to the normal state.

You can use the flow-interval command to set the statistics polling interval.

You can configure the output bandwidth usage alarm parameters in system view and interface view.

·     The configuration in system view takes effect on all interfaces of the specified slot. The configuration in interface view takes effect only on the current interface.

·     For an interface, the configuration in interface view takes priority, and the configuration in system view is used only when no configuration is made in interface view.

For this command to take effect, you must use the snmp-agent trap enable ifmonitor command to enable the output bandwidth usage alarm function.

When you execute this command multiple times, the most recent configuration takes effect.

Examples

# Set the upper threshold to 80 and lower threshold to 60 for output bandwidth usage alarms.

<Sysname> system-view

[Sysname] ifmonitor output-usage slot 1 high-threshold 80 low-threshold 60

Related commands

flow-interval

snmp-agent trap enable ifmonitor

ifmonitor rx-pause

Use ifmonitor rx-pause to configure global received pause frame alarm parameters.

Use undo ifmonitor rx-pause to restore the default.

Syntax

ifmonitor rx-pause slot slot-number high-threshold high-value low-threshold low-value interval interval

undo ifmonitor rx-pause slot slot-number

The following matrix shows the hardware and command compatibility:

 

Hardware

Compatibility

F5010, F5020, F5020-GM, F5030, F5030-6GW, F5040, F5060, F5080, F5000-AI-20, F5000-AI-40, F5000-V30, F5000-C, F5000-S, F5000-M, F5000-A

Yes

F1000-AI-20, F1000-AI-30, F1000-AI-50, F1000-AI-60, F1000-AI-70, F1000-AI-80, F1000-AI-90

Yes

F1003-L, F1005-L, F1010-L

No

F1005, F1010

No

F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080, F1090, F1000-V70

Yes

F1000-AK1110, F1000-AK1120, F1000-AK1130, F1000-AK1140

No

F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1312, F1000-AK1322, F1000-AK1332

Yes

F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614

Yes

F1000-AK108, F1000-AK109, F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710

No

F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380, F1000-AK711

Yes

LSU3FWCEA0, LSUM1FWCEAB0, LSX1FWCEA1

Yes

LSXM1FWDF1, LSUM1FWDEC0, IM-NGFWX-IV, LSQM1FWDSC0, LSWM1FWD0, LSPM6FWD, LSQM2FWDSC0

Yes

F1000-910-AI, F1000-905-AI

No

vFW1000, vFW2000

No

Default

The upper threshold is 500, the lower threshold is 100, and the statistics collection and comparison interval is 10 seconds for received pause frame alarms.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

high-threshold high-value: Specifies the upper threshold for received pause frame alarms, in the range of 1 to 4294967295 packets.

low-threshold low-value: Specifies the lower threshold for received pause frame alarms, in the range of 1 to 4294967295 packets.

interval interval: Specifies the statistics collection and comparison interval for received pause frames, in the range of 1 to 65535 seconds.

slot slot-number: Specifies an IRF member device by its member ID.

Usage guidelines

With the received pause frame alarm function enabled, when the number of received pause frames on an interface in normal state within the specified interval exceeds the upper threshold, the interface generates an upper threshold exceeding alarm and enters the alarm state. When the number of received pause frames on an interface in the alarm state within the specified interval drops below the lower threshold, the interface generates a recovery alarm and restores to the normal state.

You can configure the received pause frame alarm parameters in system view and interface view.

·     The configuration in system view takes effect on all interfaces of the specified slot. The configuration in interface view takes effect only on the current interface.

·     For an interface, the configuration in interface view takes priority, and the configuration in system view is used only when no configuration is made in interface view.

For this command to take effect, you must use the snmp-agent trap enable ifmonitor command to enable the received pause frame alarm function.

When you execute this command multiple times, the most recent configuration takes effect.

Examples

# Set the upper threshold to 30, lower threshold to 20, and statistics collection and comparison interval to 4 seconds for received pause frame alarms.

<Sysname> system-view

[Sysname] ifmonitor rx-pause slot 1 high-threshold 30 low-threshold 20 interval 4

Related commands

snmp-agent trap enable ifmonitor

ifmonitor sdh-b1-error

Use ifmonitor sdh-b1-error to configure global SDH-B1 error packet alarm parameters.

Use undo ifmonitor sdh-b1-error to restore the default.

Syntax

ifmonitor sdh-b1-error slot slot-number high-threshold high-value low-threshold low-value interval interval [ shutdown ]

undo ifmonitor sdh-b1-error slot slot-number

The following matrix shows the hardware and command compatibility:

 

Hardware

Compatibility

F5010, F5020, F5020-GM, F5030, F5030-6GW, F5040, F5060, F5080, F5000-AI-20, F5000-AI-40, F5000-V30, F5000-C, F5000-S, F5000-M, F5000-A

Yes

F1000-AI-20, F1000-AI-30, F1000-AI-50, F1000-AI-60, F1000-AI-70, F1000-AI-80, F1000-AI-90

Yes

F1003-L, F1005-L, F1010-L

No

F1005, F1010

No

F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080, F1090, F1000-V70

Yes

F1000-AK1110, F1000-AK1120, F1000-AK1130, F1000-AK1140

No

F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1312, F1000-AK1322, F1000-AK1332

Yes

F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614

Yes

F1000-AK108, F1000-AK109, F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710

No

F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380, F1000-AK711

Yes

LSU3FWCEA0, LSUM1FWCEAB0, LSX1FWCEA1

Yes

LSXM1FWDF1, LSUM1FWDEC0, IM-NGFWX-IV, LSQM1FWDSC0, LSWM1FWD0, LSPM6FWD, LSQM2FWDSC0

Yes

vFW1000, vFW2000

No

Default

The upper threshold is 1000, the lower threshold is 100, and the statistics collection and comparison interval is 10 seconds for SDH-B1 error packet alarms.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

high-threshold high-value: Specifies the upper threshold for SDH-B1 error packet alarms, in the range of 1 to 4294967295 packets.

low-threshold low-value: Specifies the lower threshold for SDH-B1 error packet alarms, in the range of 1 to 4294967295 packets.

interval interval: Specifies the statistics collection and comparison interval for SDH-B1 error packets, in the range of 1 to 65535 seconds.

shutdown: Shuts down an interface when the number of incoming SDH-B1 error packets on the interface exceeds the upper threshold. Then, the interface stops forwarding all packets. To recover the interface, execute the undo shutdown command on the interface. If you do not specify this keyword, an upper threshold exceeding alarm is generated and the interface enters the alarm state when the number of incoming SDH-B1 error packets exceeds the upper threshold on the interface.

slot slot-number: Specifies an IRF member device by its member ID.

Usage guidelines

With the SDH-B1 error packet alarm function enabled, when the number of incoming SDH-B1 error packets on an interface in normal state within the specified interval exceeds the upper threshold, the interface generates an upper threshold exceeding alarm and enters the alarm state. When the number of incoming SDH-B1 error packets on an interface in the alarm state within the specified interval drops below the lower threshold, the interface generates a recovery alarm and restores to the normal state.

You can configure the SDH-B1 error packet alarm parameters in system view and interface view.

·     The configuration in system view takes effect on all interfaces of the specified slot. The configuration in interface view takes effect only on the current interface.

·     For an interface, the configuration in interface view takes priority, and the configuration in system view is used only when no configuration is made in interface view.

For this command to take effect, you must use the snmp-agent trap enable ifmonitor command to enable the SDH-B1 error packet alarm function.

When you execute this command multiple times, the most recent configuration takes effect.

Examples

# Set the upper threshold to 65, lower threshold to 25, and statistics collection and comparison interval to 20 seconds for SDH-B1 error packet alarms.

<Sysname> system-view

[Sysname] ifmonitor sdh-b1-error slot 1 high-threshold 65 low-threshold 25 interval 20

Related commands

snmp-agent trap enable ifmonitor

ifmonitor sdh-b2-error

Use ifmonitor sdh-b2-error to configure global SDH-B2 error packet alarm parameters.

Use undo ifmonitor sdh-b2-error to restore the default.

Syntax

ifmonitor sdh-b2-error slot slot-number high-threshold high-value low-threshold low-value interval interval [ shutdown ]

undo ifmonitor sdh-b2-error slot slot-number

The following matrix shows the hardware and command compatibility:

 

Hardware

Compatibility

F5010, F5020, F5020-GM, F5030, F5030-6GW, F5040, F5060, F5080, F5000-AI-20, F5000-AI-40, F5000-V30, F5000-C, F5000-S, F5000-M, F5000-A

Yes

F1000-AI-20, F1000-AI-30, F1000-AI-50, F1000-AI-60, F1000-AI-70, F1000-AI-80, F1000-AI-90

Yes

F1003-L, F1005-L, F1010-L

No

F1005, F1010

No

F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080, F1090, F1000-V70

Yes

F1000-AK1110, F1000-AK1120, F1000-AK1130, F1000-AK1140

No

F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1312, F1000-AK1322, F1000-AK1332

Yes

F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614

Yes

F1000-AK108, F1000-AK109, F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710

No

F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380, F1000-AK711

Yes

LSU3FWCEA0, LSUM1FWCEAB0, LSX1FWCEA1

Yes

LSXM1FWDF1, LSUM1FWDEC0, IM-NGFWX-IV, LSQM1FWDSC0, LSWM1FWD0, LSPM6FWD, LSQM2FWDSC0

Yes

vFW1000, vFW2000

No

Default

The upper threshold is 1000, the lower threshold is 100, and the statistics collection and comparison interval is 10 seconds for SDH-B2 error packet alarms.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

high-threshold high-value: Specifies the upper threshold for SDH-B2 error packet alarms, in the range of 1 to 4294967295 packets.

low-threshold low-value: Specifies the lower threshold for SDH-B2 error packet alarms, in the range of 1 to 4294967295 packets.

interval interval: Specifies the statistics collection and comparison interval for SDH-B2 error packets, in the range of 1 to 65535 seconds.

shutdown: Shuts down an interface when the number of incoming SDH-B2 error packets on the interface exceeds the upper threshold. Then, the interface stops forwarding all packets. To recover the interface, execute the undo shutdown command on the interface. If you do not specify this keyword, an upper threshold exceeding alarm is generated and the interface enters the alarm state when the number of incoming SDH-B2 error packets exceeds the upper threshold on the interface.

slot slot-number: Specifies an IRF member device by its member ID.

Usage guidelines

With the SDH-B2 error packet alarm function enabled, when the number of incoming SDH-B2 error packets on an interface in normal state within the specified interval exceeds the upper threshold, the interface generates an upper threshold exceeding alarm and enters the alarm state. When the number of incoming SDH-B2 error packets on an interface in the alarm state within the specified interval drops below the lower threshold, the interface generates a recovery alarm and restores to the normal state.

You can configure the SDH-B2 error packet alarm parameters in system view and interface view.

·     The configuration in system view takes effect on all interfaces of the specified slot. The configuration in interface view takes effect only on the current interface.

·     For an interface, the configuration in interface view takes priority, and the configuration in system view is used only when no configuration is made in interface view.

For this command to take effect, you must use the snmp-agent trap enable ifmonitor command to enable the SDH-B2 error packet alarm function.

When you execute this command multiple times, the most recent configuration takes effect.

Examples

# Set the upper threshold to 6, lower threshold to 5, and statistics collection and comparison interval to 2 seconds for SDH-B2 error packet alarms.

<Sysname> system-view

[Sysname] ifmonitor sdh-b2-error slot 1 high-threshold 6 low-threshold 5 interval 2

Related commands

snmp-agent trap enable ifmonitor

ifmonitor sdh-error

Use ifmonitor sdh-error to configure global SDH error packet alarm parameters.

Use undo ifmonitor sdh-error to restore the default.

Syntax

ifmonitor sdh-error slot slot-number high-threshold high-value low-threshold low-value interval interval [ shutdown ]

undo ifmonitor sdh-error slot slot-number

The following matrix shows the hardware and command compatibility:

 

Hardware

Compatibility

F5010, F5020, F5020-GM, F5030, F5030-6GW, F5040, F5060, F5080, F5000-AI-20, F5000-AI-40, F5000-V30, F5000-C, F5000-S, F5000-M, F5000-A

Yes

F1000-AI-20, F1000-AI-30, F1000-AI-50, F1000-AI-60, F1000-AI-70, F1000-AI-80, F1000-AI-90

Yes

F1003-L, F1005-L, F1010-L

No

F1005, F1010

No

F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080, F1090, F1000-V70

Yes

F1000-AK1110, F1000-AK1120, F1000-AK1130, F1000-AK1140

No

F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1312, F1000-AK1322, F1000-AK1332

Yes

F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614

Yes

F1000-AK108, F1000-AK109, F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710

No

F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380, F1000-AK711

Yes

LSU3FWCEA0, LSUM1FWCEAB0, LSX1FWCEA1

Yes

LSXM1FWDF1, LSUM1FWDEC0, IM-NGFWX-IV, LSQM1FWDSC0, LSWM1FWD0, LSPM6FWD, LSQM2FWDSC0

Yes

vFW1000, vFW2000

No

Default

The upper threshold is 1000, the lower threshold is 100, and the statistics collection and comparison interval is 10 seconds for SDH error packet alarms.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

high-threshold high-value: Specifies the upper threshold for SDH error packet alarms, in the range of 1 to 4294967295 packets.

low-threshold low-value: Specifies the lower threshold for SDH error packet alarms, in the range of 1 to 4294967295 packets.

interval interval: Specifies the statistics collection and comparison interval for SDH error packets, in the range of 1 to 65535 seconds.

shutdown: Shuts down an interface when the number of incoming SDH error packets on the interface exceeds the upper threshold. Then, the interface stops forwarding all packets. To recover the interface, execute the undo shutdown command on the interface. If you do not specify this keyword, an upper threshold exceeding alarm is generated and the interface enters the alarm state when the number of incoming SDH error packets exceeds the upper threshold on the interface.

slot slot-number: Specifies an IRF member device by its member ID.

Usage guidelines

With the SDH error packet alarm function enabled, when the number of incoming SDH error packets on an interface in normal state within the specified interval exceeds the upper threshold, the interface generates an upper threshold exceeding alarm and enters the alarm state. When the number of incoming SDH error packets on an interface in the alarm state within the specified interval drops below the lower threshold, the interface generates a recovery alarm and restores to the normal state.

You can configure the SDH error packet alarm parameters in system view and interface view.

·     The configuration in system view takes effect on all interfaces of the specified slot. The configuration in interface view takes effect only on the current interface.

·     For an interface, the configuration in interface view takes priority, and the configuration in system view is used only when no configuration is made in interface view.

For this command to take effect, you must use the snmp-agent trap enable ifmonitor command to enable the SDH error packet alarm function.

When you execute this command multiple times, the most recent configuration takes effect.

Examples

# Set the upper threshold to 35, lower threshold to 20, and statistics collection and comparison interval to 8 seconds for SDH error packet alarms.

<Sysname> system-view

[Sysname] ifmonitor sdh-error slot 1 high-threshold 35 low-threshold 20 interval 8

Related commands

snmp-agent trap enable ifmonitor

ifmonitor tx-pause

Use ifmonitor tx-pause to configure global sent pause frame alarm parameters.

Use undo ifmonitor tx-pause to restore the default.

Syntax

ifmonitor tx-pause slot slot-number high-threshold high-value low-threshold low-value interval interval

undo ifmonitor tx-pause slot slot-number

The following matrix shows the hardware and command compatibility:

 

Hardware

Compatibility

F5010, F5020, F5020-GM, F5030, F5030-6GW, F5040, F5060, F5080, F5000-AI-20, F5000-AI-40, F5000-V30, F5000-C, F5000-S, F5000-M, F5000-A

Yes

F1000-AI-20, F1000-AI-30, F1000-AI-50, F1000-AI-60, F1000-AI-70, F1000-AI-80, F1000-AI-90

Yes

F1003-L, F1005-L, F1010-L

No

F1005, F1010

No

F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080, F1090, F1000-V70

Yes

F1000-AK1110, F1000-AK1120, F1000-AK1130, F1000-AK1140

No

F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1312, F1000-AK1322, F1000-AK1332

Yes

F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614

Yes

F1000-AK108, F1000-AK109, F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710

No

F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380, F1000-AK711

Yes

LSU3FWCEA0, LSUM1FWCEAB0, LSX1FWCEA1

Yes

LSXM1FWDF1, LSUM1FWDEC0, IM-NGFWX-IV, LSQM1FWDSC0, LSWM1FWD0, LSPM6FWD, LSQM2FWDSC0

Yes

vFW1000, vFW2000

No

Default

The upper threshold is 500, the lower threshold is 100, and the statistics collection and comparison interval is 10 seconds for sent pause frame alarms.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

high-threshold high-value: Specifies the upper threshold for sent pause frame alarms, in the range of 1 to 4294967295 packets.

low-threshold low-value: Specifies the lower threshold for sent pause frame alarms, in the range of 1 to 4294967295 packets.

interval interval: Specifies the statistics collection and comparison interval for sent pause frames, in the range of 1 to 65535 seconds.

slot slot-number: Specifies an IRF member device by its member ID.

Usage guidelines

With the sent pause frame alarm function enabled, when the number of sent pause frames on an interface in normal state within the specified interval exceeds the upper threshold, the interface generates an upper threshold exceeding alarm and enters the alarm state. When the number of sent pause frames on an interface in the alarm state within the specified interval drops below the lower threshold, the interface generates a recovery alarm and restores to the normal state.

You can configure the sent pause frame alarm parameters in system view and interface view.

·     The configuration in system view takes effect on all interfaces of the specified slot. The configuration in interface view takes effect only on the current interface.

·     For an interface, the configuration in interface view takes priority, and the configuration in system view is used only when no configuration is made in interface view.

For this command to take effect, you must use the snmp-agent trap enable ifmonitor command to enable the sent pause frame alarm function.

When you execute this command multiple times, the most recent configuration takes effect.

Examples

# Set the upper threshold to 20, lower threshold to 10, and statistics collection and comparison interval to 5 seconds for sent pause frame alarms.

<Sysname> system-view

[Sysname] ifmonitor tx-pause slot 1 high-threshold 20 low-threshold 10 interval 5

Related commands

snmp-agent trap enable ifmonitor

inner forwarding

Use inner forwarding to enable an inner interface to forward hot backup or relay packets.

Use undo inner forwarding to disable an inner interface from forwarding hot backup or relay packets.

Syntax

inner forwarding { hotbackup | relay } interface interface-type interface-number [ vlan vlan-id ]

undo inner forwarding { hotbackup | relay } interface interface-type interface-number [ vlan vlan-id ]

The following compatibility matrix shows the support of hardware platforms for this command:

 

Hardware

Command compatibility

F5010, F5020, F5020-GM, F5030, F5030-6GW, F5040, F5060, F5080, F5000-AI-20, F5000-AI-40, F5000-V30, F5000-C, F5000-S, F5000-M, F5000-A

No

F1000-AI-20, F1000-AI-30, F1000-AI-50, F1000-AI-60, F1000-AI-70, F1000-AI-80, F1000-AI-90

No

F1003-L, F1005-L, F1010-L

No

F1005, F1010

No

F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080, F1090, F1000-V70

No

F1000-AK1110, F1000-AK1120, F1000-AK1130, F1000-AK1140

No

F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1312, F1000-AK1322, F1000-AK1332

No

F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614

No

F1000-AK108, F1000-AK109, F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710

No

F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380, F1000-AK711

No

LSU3FWCEA0, LSUM1FWCEAB0, LSX1FWCEA1

No

LSXM1FWDF1, LSUM1FWDEC0, IM-NGFWX-IV, LSQM1FWDSC0, LSWM1FWD0, LSPM6FWD, LSQM2FWDSC0

Yes

vFW1000, vFW2000

No

Default

An inner interface does not forward hot backup or relay packets.

Views

System view

Predefined user roles

network-admin

Parameters

hotbackup: Specifies hot backup packets.

relay: Specifies relay packets.

interface interface-type interface-number: Specifies an inner interface by its type and number.

vlan vlan-id: Specifies a VLAN by its ID in the range of 2 to 4094. Packets are forwarded in the VLAN. If you do not specify this option, packets are forwarded in VLAN 2. The VLAN ID cannot be the PVID of an inner interface on a peer.

Usage guidelines

On an IRF fabric formed by SecBlade modules, the IRF physical interfaces forward hot backup and relay packets by default. Enable this feature to avoid unstable IRF connections when the IRF physical interface bandwidth is insufficient for hot backup and relay packets between SecBlade modules.

The inner interface is the inner Ethernet interface through which a SecBlade module communicates with the device.

Hot backup packets are exchanged between SecBlade modules to realtime back up the session entries and session-based service (NAT, ALG, and ASPF) entries. Relay packets are packets transparently transmitted between SecBlade modules.

Hot backup and relay packets can be forwarded through the same inner interface or different inner interfaces.

You can execute this command multiple times to specify multiple inner interfaces to forward hot backup and relay packets.

As a best practice, do not enable a spanning tree protocol on an inner interface with this feature enabled and its peer interface. The forwarding of relay, hot backup, and batch backup packets fails during spanning tree topology convergence. For more information about spanning tree protocols, see spanning tree in Layer 2—LAN Switching Configuration Guide.

Examples

# Enable inner interface FortyGigE 1/0/2 to forward hot backup packets.

<Sysname> system-view

[Sysname] inner forwarding hotbackup interface fortygige 1/0/2 vlan 300

interface

Use interface to enter interface view, create a subinterface and enter its view, or enter the view of an existing subinterface.

Syntax

interface interface-type { interface-number | interface-number.subnumber }

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

interface-type: Specifies an interface type.

interface-number: Specifies an interface number.

interface-number.subnumber: Specifies a subinterface number. The interface-number argument is an interface number. The subnumber argument is the number of a subinterface created under the interface. The value range for the subnumber argument is 1 to 4094.

Examples

# Enter the view of GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1]

# Create Ethernet subinterface GigabitEthernet 1/0/1.1 and enter its view.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1.1

[Sysname-GigabitEthernet1/0/1.1]

jumboframe enable

Use jumboframe enable to allow jumbo frames within the specified length to pass through.

Use undo jumboframe enable to prevent jumbo frames from passing through.

Use undo jumboframe enable size to restore the default.

Syntax

jumboframe enable [ size ]

undo jumboframe enable [ size ]

Default

The device allows jumbo frames within a specific length to pass through. The length of jumbo frames that are allowed to pass through varies by device model.

 

Hardware

Default

F5010, F5020, F5020-GM, F5030, F5030-6GW, F5040, F5060, F5080, F5000-AI-20, F5000-AI-40, F5000-V30, F5000-C, F5000-S, F5000-M, F5000-A

9216

F1000-AI-20, F1000-AI-30, F1000-AI-50, F1000-AI-60, F1000-AI-70, F1000-AI-80, F1000-AI-90

9216

F1003-L, F1005-L, F1010-L

1600

F1005, F1010

1600

F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080, F1090, F1000-V70

9216

F1000-AK1110, F1000-AK1120, F1000-AK1130, F1000-AK1140

1600

F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1312, F1000-AK1322, F1000-AK1332

9216

F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614

9216

F1000-AK108, F1000-AK109, F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710

1600

F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380, F1000-AK711

9216

LSU3FWCEA0, LSUM1FWCEAB0, LSX1FWCEA1

9216

LSXM1FWDF1, LSUM1FWDEC0, IM-NGFWX-IV, LSQM1FWDSC0, LSWM1FWD0, LSPM6FWD, LSQM2FWDSC0

9216

vFW1000, vFW2000

16384

Views

Layer 2 Ethernet interface view

Layer 3 Ethernet interface view

Predefined user roles

network-admin

context-admin

Parameters

size: Sets the maximum length (in bytes) of Ethernet frames that are allowed to pass through.

The following compatibility matrix shows the value ranges for the maximum jumbo frame size:

 

Hardware

Value range

F5010, F5020, F5020-GM, F5030, F5030-6GW, F5040, F5060, F5080, F5000-AI-20, F5000-AI-40, F5000-V30, F5000-C, F5000-S, F5000-M, F5000-A

9216

F1000-AI-20, F1000-AI-30, F1000-AI-50, F1000-AI-60, F1000-AI-70, F1000-AI-80, F1000-AI-90

9216

F1003-L, F1005-L, F1010-L

1600

F1005, F1010

1600

F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080, F1090, F1000-V70

9216

F1000-AK1110, F1000-AK1120, F1000-AK1130, F1000-AK1140

1600

F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1312, F1000-AK1322, F1000-AK1332

9216

F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614

9216

F1000-AK108, F1000-AK109, F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710

1600

F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380, F1000-AK711

9216

LSU3FWCEA0, LSUM1FWCEAB0, LSX1FWCEA1

9216

LSXM1FWDF1, LSUM1FWDEC0, IM-NGFWX-IV, LSQM1FWDSC0, LSWM1FWD0, LSPM6FWD, LSQM2FWDSC0

1536 to 9216

vFW1000, vFW2000

1536 to 16384

Usage guidelines

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Allow jumbo frames to pass through GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] jumboframe enable

link-delay

Use link-delay to set the physical state change suppression interval on an Ethernet interface.

Use undo link-delay to restore the default.

Syntax

link-delay [ msec ] delay-time [ mode { up | updown } ]

undo link-delay [ msec ] delay-time [ mode { up | updown } ]

The following compatibility matrix shows the support of hardware platforms for this command:

 

Hardware

Command compatibility

F5010, F5020, F5020-GM, F5030, F5030-6GW, F5040, F5060, F5080, F5000-AI-20, F5000-AI-40, F5000-V30, F5000-C, F5000-S, F5000-M, F5000-A

No

F1000-AI-20, F1000-AI-30, F1000-AI-50, F1000-AI-60, F1000-AI-70, F1000-AI-80, F1000-AI-90

No

F1003-L, F1005-L, F1010-L

No

F1005, F1010

No

F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080, F1090, F1000-V70

No

F1000-AK1110, F1000-AK1120, F1000-AK1130, F1000-AK1140

No

F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1312, F1000-AK1322, F1000-AK1332

No

F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614

No

F1000-AK108, F1000-AK109, F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710

No

F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380, F1000-AK711

No

LSU3FWCEA0, LSUM1FWCEAB0, LSX1FWCEA1

No

LSXM1FWDF1, LSUM1FWDEC0, IM-NGFWX-IV, LSQM1FWDSC0, LSWM1FWD0, LSPM6FWD, LSQM2FWDSC0

Yes

vFW1000, vFW2000

No

Default

Physical state change suppression is disabled.

Views

Ethernet interface view

Predefined user roles

network-admin

context-admin

Parameters

msec: Enables the physical state change suppression interval to be accurate to milliseconds. If you do not specify this keyword, the suppression interval is accurate to seconds.

delay-time: Sets the physical state change suppression interval on the Ethernet interface. A value of 0 means that physical state changes are immediately reported to the CPU and are not suppressed.

·     If you do not specify the msec keyword, the value range is 0 to 30 seconds.

·     If you specify the msec keyword, the value range is 0 to 10000 milliseconds, and the value must be a multiple of 100.

mode up: Suppresses the link-up events.

mode updown: Suppresses both the link-up and link-down events.

Usage guidelines

You can configure this feature to suppress only link-down events, only link-up events, or both. If an event of the specified type still exists when the suppression interval expires, the system reports the event.

When you configure this feature, follow these guidelines:

·     To suppress only link-down events, configure the link-delay [ msec ] delay-time command.

·     To suppress only link-up events, configure the link-delay [ msec ] delay-time mode up command.

·     To suppress both link-down and link-up events, configure the link-delay [ msec ] delay-time mode updown command.

On an interface, you can configure different suppression intervals for link-up and link-down events. If you configure the link-delay command multiple times for link-up or link-down events, the most recent configuration takes effect.

Do not execute this command on an interface that has spanning tree protocols or Smart Link enabled.

This command and the dampening command are mutually exclusive on an Ethernet interface.

Examples

# Set the link-down event suppression interval to 8 seconds on GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] link-delay 8

# Set the link-up event suppression interval to 800 milliseconds on GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] link-delay msec 800 mode up

Related commands

dampening

loopback

CAUTION

CAUTION:

After you enable loopback testing on an Ethernet interface, the interface does not forward data traffic.

Use loopback to enable loopback testing on an Ethernet interface.

Use undo loopback to disable loopback testing on an Ethernet interface.

Syntax

loopback { external | internal }

undo loopback

Default

Loopback testing is disabled on an Ethernet interface.

Views

Ethernet interface view

Predefined user roles

network-admin

context-admin

Parameters

external: Enables external loopback testing on the Ethernet interface.

internal: Enables internal loopback testing on the Ethernet interface.

Usage guidelines

After you enable loopback testing on an Ethernet interface, the Ethernet interface switches to full duplex mode. After you disable loopback testing, the Ethernet interface restores to its duplex setting.

The shutdown and loopback commands are mutually exclusive.

With loopback testing enabled on an interface on an F1005, F1010, F1000-AK108, F1000-AK109, F1000-AK110, or F1000-AK120 device, the speed of the interface changes to 100 Mbps. The speed restores to the original settings when loopback testing is disabled on the interface.

Examples

# Enable internal loopback testing on GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] loopback internal

multicast-suppression

Use multicast-suppression to enable multicast storm suppression and set the multicast storm suppression threshold.

Use undo multicast-suppression to disable multicast storm suppression.

 

Syntax

multicast-suppression { ratio | pps max-pps | kbps max-kbps }

undo multicast-suppression

Default

Ethernet interfaces do not suppress multicast traffic.

Views

Layer 2 Ethernet interface view

Predefined user roles

network-admin

context-admin

Parameters

ratio: Sets the multicast suppression threshold as a percentage of the interface bandwidth. The value range for this argument (in percentage) is 0 to 100. A smaller value means that less multicast traffic is allowed to pass through.

pps max-pps: Specifies the maximum number of multicast packets that the interface can forward per second. The value range for the max-pps argument (in pps) is 0 to 1.4881 × the interface bandwidth.

kbps max-kbps: Specifies the maximum number of kilobits of multicast traffic that the Ethernet interface can forward per second. The value range for this argument (in kbps) is 0 to the interface bandwidth.

Usage guidelines

The multicast storm suppression feature limits the size of multicast traffic to a threshold on an interface. When the multicast traffic on the interface exceeds this threshold, the system drops packets until the traffic drops below this threshold.

Both the storm-constrain command and the multicast-suppression command can suppress multicast storms on a port. The multicast-suppression command uses the chip to physically suppress multicast traffic. It has less influence on the device performance than the storm-constrain command, which uses software to suppress multicast traffic.

For the traffic suppression result to be determined, do not configure both the storm-constrain multicast command and the multicast-suppression command on an interface.

The configured suppression threshold value in pps or kbps might be converted into a multiple of a step supported by the chip. As a result, the effective suppression threshold might be different from the configured one. To determine the suppression threshold that takes effect, see the prompts on the device.

Examples

# Set the multicast storm suppression threshold to 10000 kbps on GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] multicast-suppression kbps 10000

The actual value is 10048 on port GigabitEthernet1/0/1 currently.

The output shows that the value that takes effect is 10048 kbps (157 times of 64), because the chip only supports step 64.

Related commands

broadcast-suppression

unicast-suppression

 

 

port ifmonitor crc-error

Use port ifmonitor crc-error to configure CRC error packet alarm parameters for an interface.

Use undo port ifmonitor crc-error to restore the default.

Syntax

port ifmonitor crc-error [ ratio ] high-threshold high-value low-threshold low-value interval interval [ shutdown ]

undo port ifmonitor crc-error

The following matrix shows the hardware and command compatibility:

 

Hardware

Compatibility

F5010, F5020, F5020-GM, F5030, F5030-6GW, F5040, F5060, F5080, F5000-AI-20, F5000-AI-40, F5000-V30, F5000-C, F5000-S, F5000-M, F5000-A

Yes

F1000-AI-20, F1000-AI-30, F1000-AI-50, F1000-AI-60, F1000-AI-70, F1000-AI-80, F1000-AI-90

Yes

F1003-L, F1005-L, F1010-L

No

F1005, F1010

No

F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080, F1090, F1000-V70

Yes

F1000-AK1110, F1000-AK1120, F1000-AK1130, F1000-AK1140

No

F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1312, F1000-AK1322, F1000-AK1332

Yes

F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614

Yes

F1000-AK108, F1000-AK109, F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710

No

F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380, F1000-AK711

Yes

LSU3FWCEA0, LSUM1FWCEAB0, LSX1FWCEA1

Yes

LSXM1FWDF1, LSUM1FWDEC0, IM-NGFWX-IV, LSQM1FWDSC0, LSWM1FWD0, LSPM6FWD, LSQM2FWDSC0

Yes

vFW1000, vFW2000

No

Default

An interface uses the global CRC error packet alarm parameters.

Views

Ethernet interface view

Predefined user roles

network-admin

context-admin

Parameters

ratio: Specifies the alarm thresholds in percentage. If you do not specify this keyword, you configure the alarm thresholds in absolute value.

high-threshold high-value: Specifies the upper threshold for CRC error packet alarms. If you specify the ratio keyword, the value range is 1 to 100. If you do not specify the ratio keyword, the value range is 1 to 4294967295 packets.

low-threshold low-value: Specifies the lower threshold for CRC error packet alarms. If you specify the ratio keyword, the value range is 1 to 100. If you do not specify the ratio keyword, the value range is 1 to 4294967295 packets.

interval interval: Specifies the statistics collection and comparison interval for CRC error packets, in the range of 1 to 65535 seconds.

shutdown: Shuts down an interface when the number of incoming CRC error packets on the interface exceeds the upper threshold. Then, the interface stops forwarding all packets. To recover the interface, execute the undo shutdown command on the interface. If you do not specify this keyword, an upper threshold exceeding alarm is generated and the interface enters the alarm state when the number of incoming CRC error packets exceeds the upper threshold on the interface.

Usage guidelines

With the CRC error packet alarm function enabled, when the number of incoming CRC error packets on an interface in normal state within the specified interval exceeds the upper threshold, the interface generates an upper threshold exceeding alarm and enters the alarm state. When the number of incoming CRC error packets on an interface in the alarm state within the specified interval drops below the lower threshold, the interface generates a recovery alarm and restores to the normal state.

You can configure the CRC error packet alarm parameters in system view and interface view.

·     The configuration in system view takes effect on all interfaces of the specified slot. The configuration in interface view takes effect only on the current interface.

·     For an interface, the configuration in interface view takes priority, and the configuration in system view is used only when no configuration is made in interface view.

When you execute this command multiple times, the most recent configuration takes effect.

Examples

# Set the upper threshold to 5000, lower threshold to 400, and statistics collection and comparison interval to 6 seconds for CRC error packet alarms on GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] port ifmonitor crc-error high-threshold 5000 low-threshold 400 interval 6

Related commands

snmp-agent trap enable ifmonitor

port ifmonitor input-error

Use port ifmonitor input-error to configure input error packet alarm parameters for an interface.

Use undo port ifmonitor input-error to restore the default.

Syntax

port ifmonitor input-error high-threshold high-value low-threshold low-value interval interval [ shutdown ]

undo port ifmonitor input-error

The following matrix shows the hardware and command compatibility:

 

Hardware

Compatibility

F5010, F5020, F5020-GM, F5030, F5030-6GW, F5040, F5060, F5080, F5000-AI-20, F5000-AI-40, F5000-V30, F5000-C, F5000-S, F5000-M, F5000-A

Yes

F1000-AI-20, F1000-AI-30, F1000-AI-50, F1000-AI-60, F1000-AI-70, F1000-AI-80, F1000-AI-90

Yes

F1003-L, F1005-L, F1010-L

No

F1005, F1010

No

F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080, F1090, F1000-V70

Yes

F1000-AK1110, F1000-AK1120, F1000-AK1130, F1000-AK1140

No

F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1312, F1000-AK1322, F1000-AK1332

Yes

F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614

Yes

F1000-AK108, F1000-AK109, F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710

No

F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380, F1000-AK711

Yes

LSU3FWCEA0, LSUM1FWCEAB0, LSX1FWCEA1

Yes

LSXM1FWDF1, LSUM1FWDEC0, IM-NGFWX-IV, LSQM1FWDSC0, LSWM1FWD0, LSPM6FWD, LSQM2FWDSC0

Yes

vFW1000, vFW2000

No

Default

An interface uses the global input error packet alarm parameters.

Views

Ethernet interface view

Predefined user roles

network-admin

context-admin

Parameters

high-threshold high-value: Specifies the upper threshold for input error packet alarms, in the range of 1 to 4294967295 packets.

low-threshold low-value: Specifies the lower threshold for input error packet alarms, in the range of 1 to 4294967295 packets.

interval interval: Specifies the statistics collection and comparison interval for input error packets, in the range of 1 to 65535 seconds.

shutdown: Shuts down an interface when the number of input error packets on the interface exceeds the upper threshold. Then, the interface stops forwarding all packets. To recover the interface, execute the undo shutdown command on the interface. If you do not specify this keyword, an upper threshold exceeding alarm is generated and the interface enters the alarm state when the number of input error packets exceeds the upper threshold on the interface.

Usage guidelines

With the input error packet alarm function enabled, when the number of input error packets on an interface in normal state within the specified interval exceeds the upper threshold, the interface generates an upper threshold exceeding alarm and enters the alarm state. When the number of input error packets on an interface in the alarm state within the specified interval drops below the lower threshold, the interface generates a recovery alarm and restores to the normal state.

You can configure the input error packet alarm parameters in system view and interface view.

·     The configuration in system view takes effect on all interfaces of the specified slot. The configuration in interface view takes effect only on the current interface.

·     For an interface, the configuration in interface view takes priority, and the configuration in system view is used only when no configuration is made in interface view.

When you execute this command multiple times, the most recent configuration takes effect.

Examples

# Set the upper threshold to 5000, lower threshold to 400, and statistics collection and comparison interval to 6 seconds for input error packet alarms on GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] port ifmonitor input-error high-threshold 5000 low-threshold 400 interval 6

Related commands

snmp-agent trap enable ifmonitor

port ifmonitor input-usage

Use port ifmonitor input-usage to configure input bandwidth usage alarm parameters.

Use undo port ifmonitor input-usage to restore the default.

Syntax

port ifmonitor input-usage high-threshold high-value low-threshold low-value

undo port ifmonitor input-usage

The following matrix shows the hardware and command compatibility:

 

Hardware

Compatibility

F5010, F5020, F5020-GM, F5030, F5030-6GW, F5040, F5060, F5080, F5000-AI-20, F5000-AI-40, F5000-V30, F5000-C, F5000-S, F5000-M, F5000-A

Yes

F1000-AI-20, F1000-AI-30, F1000-AI-50, F1000-AI-60, F1000-AI-70, F1000-AI-80, F1000-AI-90

Yes

F1003-L, F1005-L, F1010-L

No

F1005, F1010

No

F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080, F1090, F1000-V70

Yes

F1000-AK1110, F1000-AK1120, F1000-AK1130, F1000-AK1140

No

F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1312, F1000-AK1322, F1000-AK1332

Yes

F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614

Yes

F1000-AK108, F1000-AK109, F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710

No

F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380, F1000-AK711

Yes

LSU3FWCEA0, LSUM1FWCEAB0, LSX1FWCEA1

Yes

LSXM1FWDF1, LSUM1FWDEC0, IM-NGFWX-IV, LSQM1FWDSC0, LSWM1FWD0, LSPM6FWD, LSQM2FWDSC0

Yes

vFW1000, vFW2000

No

Default

An interface uses the global input bandwidth usage alarm parameters.

Views

Interface view

Predefined user roles

network-admin

context-admin

Parameters

high-threshold high-value: Specifies the upper threshold for input bandwidth usage alarms, in the range of 1 to 100.

low-threshold low-value: Specifies the lower threshold for input bandwidth usage alarms, in the range of 1 to 100.

Usage guidelines

With the input bandwidth usage alarm function enabled, when the input bandwidth usage on an interface in normal state within the most recent statistics polling interval exceeds the upper threshold, the interface generates an upper threshold exceeding alarm and enters the alarm state. When the input bandwidth usage on an interface in the alarm state within the most recent statistics polling interval drops below the lower threshold, the interface generates a recovery alarm and restores to the normal state.

You can use the flow-interval command to set the statistics polling interval.

You can configure the input bandwidth usage alarm parameters in system view and interface view.

·     The configuration in system view takes effect on all interfaces of the specified slot. The configuration in interface view takes effect only on the current interface.

·     For an interface, the configuration in interface view takes priority, and the configuration in system view is used only when no configuration is made in interface view.

 

For this command to take effect, you must use the snmp-agent trap enable ifmonitor command to enable the input bandwidth usage alarm function.

When you execute this command multiple times, the most recent configuration takes effect.

Examples

# Set the upper threshold to 80 and lower threshold to 60 for input bandwidth usage alarms on GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] port ifmonitor input-usage high-threshold 80 low-threshold 60

Related commands

flow-interval

snmp-agent trap enable ifmonitor

port ifmonitor output-error

Use port ifmonitor output-error to configure output error packet alarm parameters for an interface.

Use undo port ifmonitor output-error to restore the default.

Syntax

port ifmonitor output-error high-threshold high-value low-threshold low-value interval interval [ shutdown ]

undo port ifmonitor output-error

The following matrix shows the hardware and command compatibility:

 

Hardware

Compatibility

F5010, F5020, F5020-GM, F5030, F5030-6GW, F5040, F5060, F5080, F5000-AI-20, F5000-AI-40, F5000-V30, F5000-C, F5000-S, F5000-M, F5000-A

Yes

F1000-AI-20, F1000-AI-30, F1000-AI-50, F1000-AI-60, F1000-AI-70, F1000-AI-80, F1000-AI-90

Yes

F1003-L, F1005-L, F1010-L

No

F1005, F1010

No

F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080, F1090, F1000-V70

Yes

F1000-AK1110, F1000-AK1120, F1000-AK1130, F1000-AK1140

No

F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1312, F1000-AK1322, F1000-AK1332

Yes

F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614

Yes

F1000-AK108, F1000-AK109, F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710

No

F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380, F1000-AK711

Yes

LSU3FWCEA0, LSUM1FWCEAB0, LSX1FWCEA1

Yes

LSXM1FWDF1, LSUM1FWDEC0, IM-NGFWX-IV, LSQM1FWDSC0, LSWM1FWD0, LSPM6FWD, LSQM2FWDSC0

Yes

vFW1000, vFW2000

No

Default

An interface uses the global output error packet alarm parameters.

Views

Ethernet interface view

Predefined user roles

network-admin

context-admin

Parameters

high-threshold high-value: Specifies the upper threshold for output error packet alarms, in the range of 1 to 4294967295 packets.

low-threshold low-value: Specifies the lower threshold for output error packet alarms, in the range of 1 to 4294967295 packets.

interval interval: Specifies the statistics collection and comparison interval for output error packets, in the range of 1 to 65535 seconds.

shutdown: Shuts down an interface when the number of output error packets on the interface exceeds the upper threshold. Then, the interface stops forwarding all packets. To recover the interface, execute the undo shutdown command on the interface. If you do not specify this keyword, an upper threshold exceeding alarm is generated and the interface enters the alarm state when the number of output error packets exceeds the upper threshold on the interface.

Usage guidelines

With the output error packet alarm function enabled, when the number of output error packets on an interface in normal state within the specified interval exceeds the upper threshold, the interface generates an upper threshold exceeding alarm and enters the alarm state. When the number of output error packets on an interface in the alarm state within the specified interval drops below the lower threshold, the interface generates a recovery alarm and restores to the normal state.

You can configure the output error packet alarm parameters in system view and interface view.

·     The configuration in system view takes effect on all interfaces of the specified slot. The configuration in interface view takes effect only on the current interface.

·     For an interface, the configuration in interface view takes priority, and the configuration in system view is used only when no configuration is made in interface view.

When you execute this command multiple times, the most recent configuration takes effect.

Examples

# Set the upper threshold to 5000, lower threshold to 400, and statistics collection and comparison interval to 6 seconds for output error packet alarms on GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] port ifmonitor output-error high-threshold 5000 low-threshold 400 interval 6

Related commands

snmp-agent trap enable ifmonitor

port ifmonitor output-usage

Use port ifmonitor output-usage to configure output bandwidth usage alarm parameters.

Use undo port ifmonitor output-usage to restore the default.

Syntax

port ifmonitor output-usage high-threshold high-value low-threshold low-value

undo port ifmonitor output-usage

The following matrix shows the hardware and command compatibility:

 

Hardware

Compatibility

F5010, F5020, F5020-GM, F5030, F5030-6GW, F5040, F5060, F5080, F5000-AI-20, F5000-AI-40, F5000-V30, F5000-C, F5000-S, F5000-M, F5000-A

Yes

F1000-AI-20, F1000-AI-30, F1000-AI-50, F1000-AI-60, F1000-AI-70, F1000-AI-80, F1000-AI-90

Yes

F1003-L, F1005-L, F1010-L

No

F1005, F1010

No

F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080, F1090, F1000-V70

Yes

F1000-AK1110, F1000-AK1120, F1000-AK1130, F1000-AK1140

No

F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1312, F1000-AK1322, F1000-AK1332

Yes

F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614

Yes

F1000-AK108, F1000-AK109, F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710

No

F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380, F1000-AK711

Yes

LSU3FWCEA0, LSUM1FWCEAB0, LSX1FWCEA1

Yes

LSXM1FWDF1, LSUM1FWDEC0, IM-NGFWX-IV, LSQM1FWDSC0, LSWM1FWD0, LSPM6FWD, LSQM2FWDSC0

Yes

vFW1000, vFW2000

No

Default

An interface uses the global output bandwidth usage alarm parameters.

Views

Interface view

Predefined user roles

network-admin

context-admin

Parameters

high-threshold high-value: Specifies the upper threshold for output bandwidth usage alarms, in the range of 1 to 100.

low-threshold low-value: Specifies the lower threshold for output bandwidth usage alarms, in the range of 1 to 100.

Usage guidelines

With the output bandwidth usage alarm function enabled, when the output bandwidth usage on an interface in normal state within the most recent statistics polling interval exceeds the upper threshold, the interface generates an upper threshold exceeding alarm and enters the alarm state. When the output bandwidth usage on an interface in the alarm state within the most recent statistics polling interval drops below the lower threshold, the interface generates a recovery alarm and restores to the normal state.

To set the statistics polling interval, use the flow-interval command.

You can configure the output bandwidth usage alarm parameters in system view and interface view.

·     The configuration in system view takes effect on all interfaces of the specified slot. The configuration in interface view takes effect only on the current interface.

·     For an interface, the configuration in interface view takes priority, and the configuration in system view is used only when no configuration is made in interface view.

For this command to take effect, you must use the snmp-agent trap enable ifmonitor command to enable the output bandwidth usage alarm function.

When you execute this command multiple times, the most recent configuration takes effect.

Examples

# Set the upper threshold to 9 and lower threshold to 7 for output bandwidth usage alarms on GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] port ifmonitor output-usage high-threshold 9 low-threshold 7

Related commands

flow-interval

snmp-agent trap enable ifmonitor

port ifmonitor rx-pause

Use port ifmonitor rx-pause to configure received pause frame alarm parameters for an interface.

Use undo port ifmonitor rx-pause to restore the default.

Syntax

port ifmonitor rx-pause high-threshold high-value low-threshold low-value interval interval

undo port ifmonitor rx-pause

The following matrix shows the hardware and command compatibility:

 

Hardware

Compatibility

F5010, F5020, F5020-GM, F5030, F5030-6GW, F5040, F5060, F5080, F5000-AI-20, F5000-AI-40, F5000-V30, F5000-C, F5000-S, F5000-M, F5000-A

Yes

F1000-AI-20, F1000-AI-30, F1000-AI-50, F1000-AI-60, F1000-AI-70, F1000-AI-80, F1000-AI-90

Yes

F1003-L, F1005-L, F1010-L

No

F1005, F1010

No

F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080, F1090, F1000-V70

Yes

F1000-AK1110, F1000-AK1120, F1000-AK1130, F1000-AK1140

No

F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1312, F1000-AK1322, F1000-AK1332

Yes

F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614

Yes

F1000-AK108, F1000-AK109, F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710

No

F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380, F1000-AK711

Yes

LSU3FWCEA0, LSUM1FWCEAB0, LSX1FWCEA1

Yes

LSXM1FWDF1, LSUM1FWDEC0, IM-NGFWX-IV, LSQM1FWDSC0, LSWM1FWD0, LSPM6FWD, LSQM2FWDSC0

Yes

vFW1000, vFW2000

No

Default

An interface uses the global received pause frame alarm parameters.

Views

Ethernet interface view

Predefined user roles

network-admin

context-admin

Parameters

high-threshold high-value: Specifies the upper threshold for received pause frame alarms, in the range of 1 to 4294967295.

low-threshold low-value: Specifies the lower threshold for received pause frame alarms, in the range of 1 to 4294967295.

interval interval: Specifies the statistics collection and comparison interval for received pause frames, in the range of 1 to 65535 seconds.

Usage guidelines

With the received pause frame alarm function enabled, when the number of received pause frames on an interface in normal state within the specified interval exceeds the upper threshold, the interface generates an upper threshold exceeding alarm and enters the alarm state. When the number of received pause frames on an interface in the alarm state within the specified interval drops below the lower threshold, the interface generates a recovery alarm and restores to the normal state.

You can configure the received pause frame alarm parameters in system view and interface view.

·     The configuration in system view takes effect on all interfaces of the specified slot. The configuration in interface view takes effect only on the current interface.

·     For an interface, the configuration in interface view takes priority, and the configuration in system view is used only when no configuration is made in interface view.

For this command to take effect, you must use the snmp-agent trap enable ifmonitor command to enable the received pause frame alarm function.

When you execute this command multiple times, the most recent configuration takes effect.

Examples

# Set the upper threshold to 90, lower threshold to 50, and statistics collection and comparison interval to 5 seconds for received pause frame alarms on GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] port ifmonitor rx-pause high-threshold 90 low-threshold 50 interval 5

Related commands

snmp-agent trap enable ifmonitor

port ifmonitor sdh-b1-error

Use port ifmonitor sdh-b1-error to configure SDH-B1 error packet alarm parameters for an interface.

Use undo port ifmonitor sdh-b1-error to restore the default.

Syntax

port ifmonitor sdh-b1-error high-threshold high-value low-threshold low-value interval interval [ shutdown ]

undo port ifmonitor sdh-b1-error

The following matrix shows the hardware and command compatibility:

 

Hardware

Compatibility

F5010, F5020, F5020-GM, F5030, F5030-6GW, F5040, F5060, F5080, F5000-AI-20, F5000-AI-40, F5000-V30, F5000-C, F5000-S, F5000-M, F5000-A

Yes

F1000-AI-20, F1000-AI-30, F1000-AI-50, F1000-AI-60, F1000-AI-70, F1000-AI-80, F1000-AI-90

Yes

F1003-L, F1005-L, F1010-L

No

F1005, F1010

No

F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080, F1090, F1000-V70

Yes

F1000-AK1110, F1000-AK1120, F1000-AK1130, F1000-AK1140

No

F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1312, F1000-AK1322, F1000-AK1332

Yes

F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614

Yes

F1000-AK108, F1000-AK109, F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710

No

F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380, F1000-AK711

Yes

LSU3FWCEA0, LSUM1FWCEAB0, LSX1FWCEA1

Yes

LSXM1FWDF1, LSUM1FWDEC0, IM-NGFWX-IV, LSQM1FWDSC0, LSWM1FWD0, LSPM6FWD, LSQM2FWDSC0

Yes

vFW1000, vFW2000

No

Default

An interface uses the global SDH-B1 error packet alarm parameters.

Views

Ethernet interface view

Predefined user roles

network-admin

context-admin

Parameters

high-threshold high-value: Specifies the upper threshold for SDH-B1 error packet alarms, in the range of 1 to 4294967295 packets.

low-threshold low-value: Specifies the lower threshold for SDH-B1 error packet alarms, in the range of 1 to 4294967295 packets.

interval interval: Specifies the statistics collection and comparison interval for SDH-B1 error packets, in the range of 1 to 65535 seconds.

shutdown: Shuts down an interface when the number of incoming SDH-B1 error packets on the interface exceeds the upper threshold. Then, the interface stops forwarding all packets. To recover the interface, execute the undo shutdown command on the interface. If you do not specify this keyword, an upper threshold exceeding alarm is generated and the interface enters the alarm state when the number of incoming SDH-B1 error packets exceeds the upper threshold on the interface.

Usage guidelines

With the SDH-B1 error packet alarm function enabled, when the number of incoming SDH-B1 error packets on an interface in normal state within the specified interval exceeds the upper threshold, the interface generates an upper threshold exceeding alarm and enters the alarm state. When the number of incoming SDH-B1 error packets on an interface in the alarm state within the specified interval drops below the lower threshold, the interface generates a recovery alarm and restores to the normal state.

You can configure the SDH-B1 error packet alarm parameters in system view and interface view.

·     The configuration in system view takes effect on all interfaces of the specified slot. The configuration in interface view takes effect only on the current interface.

·     For an interface, the configuration in interface view takes priority, and the configuration in system view is used only when no configuration is made in interface view.

For this command to take effect, you must use the snmp-agent trap enable ifmonitor command to enable the SDH-B1 error packet alarm function.

When you execute this command multiple times, the most recent configuration takes effect.

Examples

# Set the upper threshold to 20, lower threshold to 10, and statistics collection and comparison interval to 10 seconds for SDH-B1 error packet alarms on GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] port ifmonitor sdh-b1-error high-threshold 20 low-threshold 10 interval 10

Related commands

snmp-agent trap enable ifmonitor

port ifmonitor sdh-b2-error

Use port ifmonitor sdh-b2-error to configure SDH-B2 error packet alarm parameters for an interface.

Use undo port ifmonitor sdh-b2-error to restore the default.

Syntax

port ifmonitor sdh-b2-error high-threshold high-value low-threshold low-value interval interval [ shutdown ]

undo port ifmonitor sdh-b2-error

The following matrix shows the hardware and command compatibility:

 

Hardware

Compatibility

F5010, F5020, F5020-GM, F5030, F5030-6GW, F5040, F5060, F5080, F5000-AI-20, F5000-AI-40, F5000-V30, F5000-C, F5000-S, F5000-M, F5000-A

Yes

F1000-AI-20, F1000-AI-30, F1000-AI-50, F1000-AI-60, F1000-AI-70, F1000-AI-80, F1000-AI-90

Yes

F1003-L, F1005-L, F1010-L

No

F1005, F1010

No

F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080, F1090, F1000-V70

Yes

F1000-AK1110, F1000-AK1120, F1000-AK1130, F1000-AK1140

No

F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1312, F1000-AK1322, F1000-AK1332

Yes

F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614

Yes

F1000-AK108, F1000-AK109, F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710

No

F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380, F1000-AK711

Yes

LSU3FWCEA0, LSUM1FWCEAB0, LSX1FWCEA1

Yes

LSXM1FWDF1, LSUM1FWDEC0, IM-NGFWX-IV, LSQM1FWDSC0, LSWM1FWD0, LSPM6FWD, LSQM2FWDSC0

Yes

vFW1000, vFW2000

No

Default

An interface uses the global SDH-B2 error packet alarm parameters.

Views

Ethernet interface view

Predefined user roles

network-admin

context-admin

Parameters

high-threshold high-value: Specifies the upper threshold for SDH-B2 error packet alarms, in the range of 1 to 4294967295 packets.

low-threshold low-value: Specifies the lower threshold for SDH-B2 error packet alarms, in the range of 1 to 4294967295 packets.

interval interval: Specifies the statistics collection and comparison interval for SDH-B2 error packets, in the range of 1 to 65535 seconds.

shutdown: Shuts down an interface when the number of incoming SDH-B2 error packets on the interface exceeds the upper threshold. Then, the interface stops forwarding all packets. To recover the interface, execute the undo shutdown command on the interface. If you do not specify this keyword, an upper threshold exceeding alarm is generated and the interface enters the alarm state when the number of incoming SDH-B2 error packets exceeds the upper threshold on the interface.

Usage guidelines

With the SDH-B2 error packet alarm function enabled, when the number of incoming SDH-B2 error packets on an interface in normal state within the specified interval exceeds the upper threshold, the interface generates an upper threshold exceeding alarm and enters the alarm state. When the number of incoming SDH-B2 error packets on an interface in the alarm state within the specified interval drops below the lower threshold, the interface generates a recovery alarm and restores to the normal state.

You can configure the SDH-B2 error packet alarm parameters in system view and interface view.

·     The configuration in system view takes effect on all interfaces of the specified slot. The configuration in interface view takes effect only on the current interface.

·     For an interface, the configuration in interface view takes priority, and the configuration in system view is used only when no configuration is made in interface view.

For this command to take effect, you must use the snmp-agent trap enable ifmonitor command to enable the SDH-B2 error packet alarm function.

When you execute this command multiple times, the most recent configuration takes effect.

Examples

# Set the upper threshold to 10, lower threshold to 8, and statistics collection and comparison interval to 3 seconds for SDH-B2 error packet alarms on GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] port ifmonitor sdh-b2-error high-threshold 10 low-threshold 8 interval 3

Related commands

snmp-agent trap enable ifmonitor

port ifmonitor sdh-error

Use port ifmonitor sdh-error to configure SDH error packet alarm parameters for an interface.

Use undo port ifmonitor sdh-error to restore the default.

Syntax

port ifmonitor sdh-error high-threshold high-value low-threshold low-value interval interval [ shutdown ]

undo port ifmonitor sdh-error

The following matrix shows the hardware and command compatibility:

 

Hardware

Compatibility

F5010, F5020, F5020-GM, F5030, F5030-6GW, F5040, F5060, F5080, F5000-AI-20, F5000-AI-40, F5000-V30, F5000-C, F5000-S, F5000-M, F5000-A

Yes

F1000-AI-20, F1000-AI-30, F1000-AI-50, F1000-AI-60, F1000-AI-70, F1000-AI-80, F1000-AI-90

Yes

F1003-L, F1005-L, F1010-L

No

F1005, F1010

No

F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080, F1090, F1000-V70

Yes

F1000-AK1110, F1000-AK1120, F1000-AK1130, F1000-AK1140

No

F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1312, F1000-AK1322, F1000-AK1332

Yes

F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614

Yes

F1000-AK108, F1000-AK109, F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710

No

F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380, F1000-AK711

Yes

LSU3FWCEA0, LSUM1FWCEAB0, LSX1FWCEA1

Yes

LSXM1FWDF1, LSUM1FWDEC0, IM-NGFWX-IV, LSQM1FWDSC0, LSWM1FWD0, LSPM6FWD, LSQM2FWDSC0

Yes

vFW1000, vFW2000

No

Default

An interface uses the global SDH error packet alarm parameters.

Views

Ethernet interface view

Predefined user roles

network-admin

context-admin

Parameters

high-threshold high-value: Specifies the upper threshold for SDH error packet alarms, in the range of 1 to 4294967295 packets.

low-threshold low-value: Specifies the lower threshold for SDH error packet alarms, in the range of 1 to 4294967295 packets.

interval interval: Specifies the statistics collection and comparison interval for SDH error packets, in the range of 1 to 65535 seconds.

shutdown: Shuts down an interface when the number of incoming SDH error packets on the interface exceeds the upper threshold. Then, the interface stops forwarding all packets. To recover the interface, execute the undo shutdown command on the interface. If you do not specify this keyword, an upper threshold exceeding alarm is generated and the interface enters the alarm state when the number of incoming SDH error packets exceeds the upper threshold on the interface.

Usage guidelines

With the SDH error packet alarm function enabled, when the number of incoming SDH error packets on an interface in normal state within the specified interval exceeds the upper threshold, the interface generates an upper threshold exceeding alarm and enters the alarm state. When the number of incoming SDH error packets on an interface in the alarm state within the specified interval drops below the lower threshold, the interface generates a recovery alarm and restores to the normal state.

You can configure the SDH error packet alarm parameters in system view and interface view.

·     The configuration in system view takes effect on all interfaces of the specified slot. The configuration in interface view takes effect only on the current interface.

·     For an interface, the configuration in interface view takes priority, and the configuration in system view is used only when no configuration is made in interface view.

For this command to take effect, you must use the snmp-agent trap enable ifmonitor command to enable the SDH error packet alarm function.

When you execute this command multiple times, the most recent configuration takes effect.

Examples

# Set the upper threshold to 50, lower threshold to 30, and statistics collection and comparison interval to 10 seconds for SDH error packet alarms on GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] port ifmonitor sdh-error high-threshold 50 low-threshold 30 interval 10

Related commands

snmp-agent trap enable ifmonitor

port ifmonitor tx-pause

Use port ifmonitor tx-pause to configure sent pause frame alarm parameters for an interface.

Use undo port ifmonitor tx-pause to restore the default.

Syntax

port ifmonitor tx-pause high-threshold high-value low-threshold low-value interval interval

undo port ifmonitor tx-pause

The following matrix shows the hardware and command compatibility:

 

Hardware

Compatibility

F5010, F5020, F5020-GM, F5030, F5030-6GW, F5040, F5060, F5080, F5000-AI-20, F5000-AI-40, F5000-V30, F5000-C, F5000-S, F5000-M, F5000-A

Yes

F1000-AI-20, F1000-AI-30, F1000-AI-50, F1000-AI-60, F1000-AI-70, F1000-AI-80, F1000-AI-90

Yes

F1003-L, F1005-L, F1010-L

No

F1005, F1010

No

F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080, F1090, F1000-V70

Yes

F1000-AK1110, F1000-AK1120, F1000-AK1130, F1000-AK1140

No

F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1312, F1000-AK1322, F1000-AK1332

Yes

F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614

Yes

F1000-AK108, F1000-AK109, F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710

No

F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380, F1000-AK711

Yes

LSU3FWCEA0, LSUM1FWCEAB0, LSX1FWCEA1

Yes

LSXM1FWDF1, LSUM1FWDEC0, IM-NGFWX-IV, LSQM1FWDSC0, LSWM1FWD0, LSPM6FWD, LSQM2FWDSC0

Yes

vFW1000, vFW2000

No

Default

An interface uses the global sent pause frame alarm parameters.

Views

Ethernet interface view

Predefined user roles

network-admin

context-admin

Parameters

high-threshold high-value: Specifies the upper threshold for sent pause frame alarms, in the range of 1 to 4294967295.

low-threshold low-value: Specifies the lower threshold for sent pause frame alarms, in the range of 1 to 4294967295.

interval interval: Specifies the statistics collection and comparison interval for sent pause frames, in the range of 1 to 65535 seconds.

Usage guidelines

With the sent pause frame alarm function enabled, when the number of sent pause frames on an interface in normal state within the specified interval exceeds the upper threshold, the interface generates an upper threshold exceeding alarm and enters the alarm state. When the number of sent pause frames on an interface in the alarm state within the specified interval drops below the lower threshold, the interface generates a recovery alarm and restores to the normal state.

You can configure the sent pause frame alarm parameters in system view and interface view.

·     The configuration in system view takes effect on all interfaces of the specified slot. The configuration in interface view takes effect only on the current interface.

·     For an interface, the configuration in interface view takes priority, and the configuration in system view is used only when no configuration is made in interface view.

 

For this command to take effect, you must use the snmp-agent trap enable ifmonitor command to enable the sent pause frame alarm function.

When you execute this command multiple times, the most recent configuration takes effect.

Examples

# Set the upper threshold to 50, lower threshold to 40, and statistics collection and comparison interval to 8 seconds for sent pause frame alarms on GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] port ifmonitor tx-pause high-threshold 50 low-threshold 40 interval 8

Related commands

snmp-agent trap enable ifmonitor

 

port link-mode

Use port link-mode to change the link mode of an Ethernet interface.

Use undo port link-mode to restore the default.

Syntax

port link-mode { bridge | route }

undo port link-mode

Default

An Ethernet interface operates in Layer 3 mode.

Views

Ethernet interface view

Predefined user roles

network-admin

context-admin

Parameters

bridge: Specifies the Layer 2 mode.

route: Specifies the Layer 3 mode.

Usage guidelines

Interfaces operate differently depending on the hardware structure of interface cards. For a device:

·     Some Ethernet interfaces can operate only as Layer 2 Ethernet interfaces (in bridge mode).

·     Some Ethernet interfaces can operate only as Layer 3 Ethernet interfaces (in route mode).

·     Some Ethernet interfaces can operate either as Layer 2 or Layer 3 Ethernet interfaces. You can use this command to set the link mode to bridge or route for these Ethernet interfaces.

Changing the link mode of an Ethernet interface also restores all commands (except shutdown and combo enable) on the Ethernet interface to their defaults in the new link mode.

Examples

# Configure GigabitEthernet 1/0/1 to operate in Layer 2 mode.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] port link-mode bridge

reset counters interface

Use reset counters interface to clear the interface statistics.

Syntax

reset counters interface [ interface-type [ interface-number ] ]

Views

User view

Predefined user roles

network-admin

context-admin

Parameters

interface-type: Specifies an interface type.

interface-number: Specifies an interface number.

Usage guidelines

Use this command to clear history statistics if you want to collect traffic statistics for a specific time period.

If you do not specify an interface type, this command clears statistics for all interfaces except VA interfaces. For more information about VA interfaces, see PPPoE in Layer 2—WAN Access Configuration Guide.

If you specify an interface type but do not specify an interface number, this command clears statistics for all interfaces of the specified type.

Examples

# Clear the statistics for GigabitEthernet 1/0/1.

<Sysname> reset counters interface gigabitethernet 1/0/1

Related commands

display counters interface

display counters rate interface

display interface

reset ethernet statistics

Use reset ethernet statistics to clear the Ethernet module statistics.

Syntax

reset ethernet statistics [ slot slot-number ]

Views

User view

Predefined user roles

network-admin

context-admin

Parameters

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command clears statistics for all IRF member devices.

Examples

# Clear the Ethernet module statistics for the specified slot.

<Sysname> reset ethernet statistics slot 1

Related commands

display ethernet statistics

reset packet-drop interface

Use reset packet-drop interface to clear the dropped packet statistics for an interface.

Syntax

reset packet-drop interface [ interface-type [ interface-number ] ]

Views

User view

Predefined user roles

network-admin

context-admin

Parameters

interface-type: Specify an interface type.

interface-number: Specify an interface number.

Usage guidelines

If you do not specify an interface type, this command clears dropped packet statistics for all interfaces on the device.

If you specify an interface type but do not specify an interface number, the command clears dropped packet statistics for all interfaces of the specified type.

Examples

# Clear dropped packet statistics for GigabitEthernet 1/0/1.

<Sysname> reset packet-drop interface gigabitethernet 1/0/1

# Clear dropped packet statistics for all interfaces.

<Sysname> reset packet-drop interface

Related commands

display packet-drop

shutdown

Use shutdown to shut down an Ethernet interface or subinterface.

Use undo shutdown to bring up an Ethernet interface or subinterface.

Syntax

shutdown

undo shutdown

Default

An Ethernet interface or subinterface is up.

Views

Ethernet interface view

Ethernet subinterface view

Predefined user roles

network-admin

context-admin

Usage guidelines

Some interface configurations might require an interface restart before taking effect.

The shutdown and loopback commands are mutually exclusive.

Examples

# Shut down and then bring up GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] shutdown

[Sysname-GigabitEthernet1/0/1] undo shutdown

# Shut down and then bring up GigabitEthernet 1/0/1.1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1.1

[Sysname-GigabitEthernet1/0/1.1] shutdown

[Sysname-GigabitEthernet1/0/1.1] undo shutdown

snmp-agent trap enable ifmonitor

Use snmp-agent trap enable ifmonitor to enable interface alarm functions.

Use undo snmp-agent trap enable ifmonitor to disable interface alarm functions.

Syntax

snmp-agent trap enable ifmonitor [ crc-error | input-error | input-usage | output-error | output-usage | rx-pause | sdh-b1-error | sdh-b2-error | sdh-error | tx-pause ] *

undo snmp-agent trap enable ifmonitor [ crc-error | input-error | input-usage | output-error | output-usage | rx-pause | sdh-b1-error | sdh-b2-error | sdh-error | tx-pause ] *

The following matrix shows the hardware and command compatibility:

 

Hardware

Compatibility

F5010, F5020, F5020-GM, F5030, F5030-6GW, F5040, F5060, F5080, F5000-AI-20, F5000-AI-40, F5000-V30, F5000-C, F5000-S, F5000-M, F5000-A

Yes

F1000-AI-20, F1000-AI-30, F1000-AI-50, F1000-AI-60, F1000-AI-70, F1000-AI-80, F1000-AI-90

Yes

F1003-L, F1005-L, F1010-L

No

F1005, F1010

No

F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080, F1090, F1000-V70

Yes

F1000-AK1110, F1000-AK1120, F1000-AK1130, F1000-AK1140

No

F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1312, F1000-AK1322, F1000-AK1332

Yes

F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614

Yes

F1000-AK108, F1000-AK109, F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710

No

F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380, F1000-AK711

Yes

LSU3FWCEA0, LSUM1FWCEAB0, LSX1FWCEA1

Yes

LSXM1FWDF1, LSUM1FWDEC0, IM-NGFWX-IV, LSQM1FWDSC0, LSWM1FWD0, LSPM6FWD, LSQM2FWDSC0

Yes

vFW1000, vFW2000

No

Default

Interface alarm functions are enabled.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

crc-error: Enables the CRC error packet alarm function for interfaces.

input-error: Enables the input error packet alarm function for interfaces.

input-usage: Enables the input bandwidth usage alarm function for interfaces.

output-error: Enables the output error packet alarm function for interfaces.

output-usage: Enables the output bandwidth usage alarm function for interfaces.

rx-pause: Enables the received pause frame alarm function for interfaces.

sdh-b1-error: Enables the SDH-B1 error packet alarm function for interfaces.

sdh-b2-error: Enables the SDH-B2 error packet alarm function for interfaces.

sdh-error: Enables the SDH error packet alarm function for interfaces.

tx-pause: Enables the sent pause frame alarm function for interfaces.

Examples

# Enable the CRC error packet alarm function for interfaces.

<Sysname> system-view

[Sysname] snmp-agent trap enable ifmonitor crc-error

speed

Use speed to set the speed of an Ethernet interface.

Use undo speed to restore the default.

Syntax

speed { 10 | 100 | 1000 | 10000 | 40000 | auto }

undo speed

Default

An Ethernet interface autonegotiates its speed.

Views

Ethernet interface view

Predefined user roles

network-admin

context-admin

Parameters

10: Sets the interface speed to 10 Mbps.

100: Sets the interface speed to 100 Mbps.

 

1000: Sets the interface speed to 1000 Mbps.

10000: Sets the interface speed to 10000 Mbps.

The following compatibility matrix shows the support of hardware platforms for this keyword:

 

Hardware

Parameter compatibility

F5010, F5020, F5020-GM, F5030, F5030-6GW, F5040, F5060, F5080, F5000-AI-20, F5000-AI-40, F5000-V30, F5000-C, F5000-S, F5000-M, F5000-A

Yes

F1000-AI-20, F1000-AI-30, F1000-AI-50, F1000-AI-60, F1000-AI-70, F1000-AI-80, F1000-AI-90

Yes

F1003-L, F1005-L, F1010-L

No

F1005, F1010

No

F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080, F1090, F1000-V70

Yes

F1000-AK1110, F1000-AK1120, F1000-AK1130, F1000-AK1140

No

F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1312, F1000-AK1322, F1000-AK1332

Yes

F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614

Yes

F1000-AK108, F1000-AK109, F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710

No

F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380, F1000-AK711

Yes

LSU3FWCEA0, LSUM1FWCEAB0, LSX1FWCEA1

Yes

LSQM1FWDSC0, LSPM6FWD, LSQM2FWDSC0

Yes

LSXM1FWDF1, LSUM1FWDEC0, IM-NGFWX-IV, LSWM1FWD0

No

vFW1000, vFW2000

No

40000: Sets the interface speed to 40000 Mbps.

The following compatibility matrix shows the support of hardware platforms for this keyword:

 

Hardware

Parameter compatibility

F5030, F5030-6GW, F5060, F5080, F5000-AI-20, F5000-AI-40, F5000-V30, F5000-M, F5000-A

Yes

F5010, F5020, F5020-GM, F5040, F5000-C, F5000-S

No

F1000-AI-20, F1000-AI-30, F1000-AI-50, F1000-AI-60, F1000-AI-70, F1000-AI-80, F1000-AI-90

No

F1003-L, F1005-L, F1010-L

No

F1005, F1010

No

F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080, F1090, F1000-V70

No

F1000-AK1110, F1000-AK1120, F1000-AK1130, F1000-AK1140

No

F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1312, F1000-AK1322, F1000-AK1332

No

F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614

No

F1000-AK108, F1000-AK109, F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710

No

F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380, F1000-AK711

No

LSU3FWCEA0, LSUM1FWCEAB0, LSX1FWCEA1

No

LSXM1FWDF1, LSUM1FWDEC0, IM-NGFWX-IV, LSWM1FWD0

Yes

LSQM1FWDSC0, LSPM6FWD, LSQM2FWDSC0

No

vFW1000, vFW2000

No

auto: Enables the interface to negotiate a speed with its peer.

Usage guidelines

For an Ethernet copper port, use the speed command to set its speed to match the speed of the peer interface.

For fiber ports, only fiber ports 14 through 17 on the F1000-AI-60 and F1000-AI-70 devices support the auto and 1000 keywords of this command, and the other fiber ports support only the auto keyword of this command.

Support of an interface for the keywords depends on the interface type. For more information, use the speed ? command in interface view.

Examples

# Configure GigabitEthernet 1/0/1 to autonegotiate the speed.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] speed auto

sub-interface rate-statistic

Use sub-interface rate-statistic to enable rate statistics collection for the subinterfaces of an Ethernet interface.

Use undo sub-interface rate-statistic to disable rate statistics collection for the subinterfaces of an Ethernet interface.

Syntax

sub-interface rate-statistic

undo sub-interface rate-statistic

Default

The system does not collect rate statistics for the subinterfaces of an Ethernet interface.

Views

Ethernet interface view

Predefined user roles

network-admin

context-admin

Usage guidelines

This command is resource intensive. When you use this command, make sure you fully understand its impact on system performance.

Examples

# Enable rate statistics collection for the subinterfaces of GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] sub-interface rate-statistic

This configuration may make a negative effect on the performance. Are you sure to continue? [Y/N]:y

unicast-suppression

Use unicast-suppression to enable unknown unicast storm suppression and set the unknown unicast storm suppression threshold.

Use undo unicast-suppression to disable unknown unicast storm suppression.

Syntax

unicast-suppression { ratio | pps max-pps | kbps max-kbps }

undo unicast-suppression

Default

Ethernet interfaces do not suppress unknown unicast traffic.

Views

Layer 2 Ethernet interface view

Predefined user roles

network-admin

context-admin

Parameters

ratio: Sets the unknown unicast suppression threshold as a percentage of the interface bandwidth. The value range for this argument (in percentage) is 0 to 100. A smaller value means that less unknown unicast traffic is allowed to pass through.

pps max-pps: Specifies the maximum number of unknown unicast packets that the interface can forward per second. The value range for the max-pps argument (in pps) is 0 to 1.4881 × the interface bandwidth.

kbps max-kbps: Specifies the maximum number of kilobits of unknown unicast traffic that the Ethernet interface can forward per second. The value range for this argument (in kbps) is 0 to the interface bandwidth.

Usage guidelines

The unknown unicast storm suppression feature limits the size of unknown unicast traffic to a threshold on an interface. When the unknown unicast traffic on the interface exceeds this threshold, the system discards packets until the unknown unicast traffic drops below this threshold.

The configured suppression threshold value in pps or kbps might be converted into a multiple of a step supported by the chip. As a result, the effective suppression threshold might be different from the configured one. To determine the suppression threshold that takes effect, see the prompts on the device.

Examples

# Set the unknown unicast storm suppression threshold to 10000 kbps on GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] unicast-suppression kbps 10000

The actual value is 10048 on port GigabitEthernet1/0/1 currently.

The output shows that the value that takes effect is 10048 kbps (157 times of 64), because the chip only supports step 64.

Related commands

broadcast-suppression

multicast-suppression

Layer 2 Ethernet interface commands

display storm-constrain

Use display storm-constrain to display storm control settings and statistics.

Syntax

display storm-constrain [ broadcast | multicast ] [ interface interface-type interface-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

context-admin

context-operator

Parameters

broadcast: Displays broadcast storm control settings and statistics.

multicast: Displays multicast storm control settings and statistics.

interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify this option, the command displays storm control settings and statistics for all storm control-enabled interfaces.

Usage guidelines

If you do not specify the broadcast or multicast keyword, this command displays all storm control settings on all storm control-enabled interfaces.

Examples

# Display the storm control settings on all storm control-enabled ports.

<Sysname> display storm-constrain

Abbreviation: BC - broadcast; MC - multicast; UC - unicast;

              FW - forwarding

Flow Statistic Interval: 5 (in seconds)

Port          Type Lower     Upper     Unit  Mode     Status   Trap Log StateChg

--------------------------------------------------------------------------------

GE1/0/1       MC   100       200       kbps  shutdown shutdown off  on  10

Table 7 Command output

Field

Description

Flow Statistic Interval

Traffic polling interval (in seconds) of the storm control module.

Port

Abbreviated interface name.

Type

Type of traffic subjected to storm control:

·     BC—Broadcast packets.

·     MC—Multicast packets.

·     UC—Unicast packets. This field is not supported in the current software version.

Lower

Lower storm control threshold, in pps, kbps, or percentage.

Upper

Upper storm control threshold, in pps, kbps, or percentage.

Unit

Storm control threshold unit:

·     pps.

·     kbps.

·     percentage.

Mode

Action (block or shutdown) taken on the interface when the upper threshold is reached. N/A indicates that no action is configured.

Status

Packet forwarding status:

·     FW—The port is forwarding traffic correctly.

·     shutdown—The port has been shut down.

·     block—The port drops the type of traffic.

Trap

Status of the storm control threshold event trap switch:

·     on—The port sends threshold event traps.

·     off—The port does not send threshold event traps.

Log

Status of the storm control threshold event log switch:

·     on—The port sends threshold event log messages.

·     off—The port does not send threshold event log messages.

StateChg

Number of forwarding state changes of the interface.

When the StateChg field reaches 65535, it resets automatically.

mdix-mode

IMPORTANT

IMPORTANT:

Fiber ports do not support this command.

Use mdix-mode to configure the Medium Dependent Interface Cross-Over (MDIX) mode of an Ethernet interface.

Use undo mdix-mode to restore the default.

Syntax

mdix-mode { automdix | mdi| mdix }

undo mdix-mode

Default

Ethernet interfaces operate in automdix mode.

Views

Layer 2 Ethernet interface view

Predefined user roles

network-admin

context-admin

Parameters

automdix: Specifies that the interface negotiates pin roles with its peer.

mdi: Specifies that pins 1 and 2 are transmit pins and pins 3 and 6 are receive pins.

mdix: Specifies that pins 1 and 2 are receive pins and pins 3 and 6 are transmit pins.

Examples

# Configure GigabitEthernet 1/0/1 to operate in automdix mode.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] mdix-mode automdix

storm-constrain

Use storm-constrain to enable storm control and set thresholds for broadcast, multicast, or unknown unicast packets on an Ethernet interface.

Use undo storm-constrain to disable storm control for broadcast, multicast, unknown unicast, or all types of traffic.

Syntax

storm-constrain { broadcast | multicast } pps upperlimit lowerlimit

undo storm-constrain { all | broadcast | multicast }

Default

Traffic storm control is disabled.

Views

Layer 2 Ethernet interface view

Predefined user roles

network-admin

context-admin

Parameters

all: Disables storm control for all types of traffic: multicast and broadcast.

broadcast: Enables or disables broadcast storm control.

multicast: Enables or disables multicast storm control.

pps: Sets storm control thresholds in pps.

upperlimit: Sets the upper threshold. If you specify the pps keyword, the value range for the upperlimit argument is 0 to 1.4881 × the interface bandwidth.

lowerlimit: Sets the lower threshold. If you specify the pps keyword, the value range for the lowerlimit argument is 0 to 1.4881 × the interface bandwidth.

Usage guidelines

After you configure storm control for a type of traffic, the device collects the statistics for the type of traffic at the interval configured by using the storm-constrain interval command. When the type of traffic exceeds its upper threshold, the interface takes an action configured by using the storm-constrain control command.

The storm-constrain, broadcast-suppression, multicast-suppression, and unicast-suppression commands can suppress storms on an interface. The broadcast-suppression, multicast-suppression, and unicast-suppression commands use the chip to physically suppress traffic. They have less influence on the device performance than the storm-constrain command, which uses software to suppress traffic.

For the traffic suppression result to be determined, do not configure both storm control and storm suppression for the same type of traffic.

When configuring this command, make sure upperlimit is greater than lowerlimit.

Examples

# Enable broadcast storm control on GigabitEthernet 1/0/1 and set the upper and lower thresholds to 200 pps and 150 pps, respectively.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] storm-constrain broadcast pps 200 150

Related commands

storm-constrain control

storm-constrain interval

storm-constrain control

Use storm-constrain control to set the action to take on an Ethernet interface when a type of traffic (multicast or broadcast) exceeds the upper storm control threshold.

Use undo storm-constrain control to restore the default.

Syntax

storm-constrain control { block | shutdown }

undo storm-constrain control

Default

No action is taken on an Ethernet interface when a type of traffic exceeds the upper storm control threshold.

Views

Layer 2 Ethernet interface view

Predefined user roles

network-admin

context-admin

Parameters

block: Blocks the type of traffic exceeding the upper threshold and forwards other types of traffic. Even though the interface does not forward the blocked type of traffic, it still counts the traffic. When the blocked type of traffic drops below the lower threshold, the port begins to forward the traffic.

shutdown: Goes down automatically and stops forwarding any traffic. When the type of traffic exceeding the upper threshold drops below the lower threshold, the interface does not forward traffic. To bring up the interface, use the undo shutdown command or disable storm control on the interface.

Examples

# Configure GigabitEthernet 1/0/1 to block a specific type of traffic when the type of traffic exceeds the upper storm control threshold.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] storm-constrain control block

Related commands

storm-constrain

storm-constrain control

storm-constrain enable log

Use storm-constrain enable log to enable an Ethernet interface to output log messages when it detects storm control threshold events.

Use undo storm-constrain enable log to disable an Ethernet interface from outputting log messages for storm control threshold events.

Syntax

storm-constrain enable log

undo storm-constrain enable log

Default

An Ethernet interface outputs log messages when monitored traffic exceeds the upper threshold or drops below the lower threshold from a value above the upper threshold.

Views

Layer 2 Ethernet interface view

Predefined user roles

network-admin

context-admin

Examples

# Enable GigabitEthernet 1/0/1 to output log messages when it detects storm control threshold events.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] storm-constrain enable log

storm-constrain enable trap

Use storm-constrain enable trap to enable an Ethernet interface to send storm control threshold event traps.

Use undo storm-constrain enable trap to disable an Ethernet interface from sending storm control threshold event traps.

Syntax

storm-constrain enable trap

undo storm-constrain enable trap

Default

An interface sends out storm control threshold event traps when monitored traffic exceeds the upper threshold or drops below the lower threshold from a value above the upper threshold.

Views

Layer 2 Ethernet interface view

Predefined user roles

network-admin

context-admin

Examples

# Enable GigabitEthernet 1/0/1 to send traps when it detects storm control threshold events.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] storm-constrain enable trap

storm-constrain interval

Use storm-constrain interval to set the traffic polling interval of the storm control module.

Use undo storm-constrain interval to restore the default.

Syntax

storm-constrain interval interval

undo storm-constrain interval

Default

The storm control module polls traffic statistics every 10 seconds.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

interval: Sets the traffic polling interval of the storm control module. The value range is 1 to 300 seconds. To ensure network stability, as a best practice, do not use a traffic polling interval shorter than 10 seconds.

Usage guidelines

The traffic polling interval set by using the storm-constrain interval command is specific to storm control. To set the statistics polling interval of an interface, use the flow-interval command.

Examples

# Set the traffic statistics polling interval of the storm control module to 60 seconds.

<Sysname> system-view

[Sysname] storm-constrain interval 60

Related commands

storm-constrain

storm-constrain control

Layer 3 Ethernet interface or subinterface commands

mac-address

Use mac-address to set the MAC address of an Ethernet interface.

Use undo mac-address to restore the default.

Syntax

mac-address mac-address

undo mac-address

Default

No MAC address is configured for an Ethernet interface.

Views

Layer 3 Ethernet interface view

Layer 3 Ethernet subinterface view

Predefined user roles

network-admin

context-admin

Parameters

mac-address: Specifies a MAC address in the format of H-H-H.

Usage guidelines

When you set a MAC address for a Layer 3 Ethernet subinterface, select a MAC address different from that of the main interface.

Examples

# Set the MAC address of GigabitEthernet 1/0/1 to 0001-0001-0001.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] mac-address 1-1-1

mac-address-filter enable

Use mac-address-filter enable to enable destination MAC filtering.

Use undo mac-address-filter enable to disable destination MAC filtering.

Syntax

mac-address-filter enable

undo mac-address-filter enable

Views

System view

Default

Destination MAC filtering is enabled.

Predefined user roles

network-admin

Usage guidelines

This feature takes effect only on Layer 3 Ethernet interfaces/subinterfaces, Layer 3 aggregate interfaces, and Layer 3 Reth interfaces. These interfaces are referred to as interfaces in this command.

Typically, use the default settings.

With this feature enabled, when an interface receives a packet, the interface operates as follows:

·     If the destination MAC address of the packet is the MAC address of the interface, the interface accepts and processes the packet.

·     If the destination MAC address of the packet is not the MAC address of the interface, the interface drops the packet.

With this feature disabled, an interface accepts and processes a packet, without checking the destination MAC address of the packet.

Examples

# Enable destination MAC filtering.

<Sysname> system-view

[Sysname] mac-address-filter enable

mtu

Use mtu to set the MTU for an Ethernet interface or subinterface.

Use undo mtu to restore the default.

Syntax

mtu size

undo mtu

Default

The MTU of an Ethernet interface or subinterface is 1500 bytes.

Views

Layer 3 Ethernet interface view

Layer 3 Ethernet subinterface view

Predefined user roles

network-admin

context-admin

Parameters

size: Sets the MTU in bytes. The value range for this argument varies by interface type.

Usage guidelines

A smaller MTU size results in more fragments. When you set the MTU for an interface, consider QoS queue lengths, for example, consider that the default FIFO queue length is 75. To prevent a too small MTU from causing packet drops in QoS queuing, you can perform one of the following configurations:

·     Tune the MTU with the mtu command.

·     Tune QoS queue lengths with the qos fifo queue-length command.

For more information about the qos fifo queue-length command, see ACL and QoS Command Reference.

Examples

# Set the MTU to 1430 bytes for GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] mtu 1430

# Set the MTU to 1430 bytes for GigabitEthernet 1/0/1.1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1.1

[Sysname-GigabitEthernet1/0/1.1] mtu 1430

 

  • Cloud & AI
  • InterConnect
  • Intelligent Computing
  • Security
  • SMB Products
  • Intelligent Terminal Products
  • Product Support Services
  • Technical Service Solutions
All Services
  • Resource Center
  • Policy
  • Online Help
All Support
  • Become a Partner
  • Partner Resources
  • Partner Business Management
All Partners
  • Profile
  • News & Events
  • Online Exhibition Center
  • Contact Us
All About Us
新华三官网