- Table of Contents
- Related Documents
-
Title | Size | Download |
---|---|---|
01-Text | 1.07 MB |
Contents
Common Ethernet interface commands
priority-flow-control no-drop dot1p
Layer 2 Ethernet interface commands
Layer 3 Ethernet interface or subinterface commands
Loopback, null, and inloopback interface commands
reset counters interface loopback
Bulk interface configuration commands
display mac-address aging-time
display mac-address mac-learning
display mac-address statistics
mac-address mac-learning enable
mac-address mac-learning ingress
mac-address mac-roaming enable
mac-address information enable (interface view)
mac-address information enable (system view)
mac-address information interval
mac-address information queue-length
Ethernet link aggregation commands
display link-aggregation capability
display link-aggregation load-sharing mode
display link-aggregation load-sharing path
display link-aggregation member-port
display link-aggregation summary
display link-aggregation verbose
link-aggregation global load-sharing mode
link-aggregation lacp traffic-redirect-notification enable
link-aggregation load-sharing mode
link-aggregation load-sharing mode local-first
link-aggregation port-priority
link-aggregation selected-port maximum
link-aggregation selected-port minimum
display stp region-configuration
stp global config-digest-snooping
loopback-detection global action
loopback-detection global enable
loopback-detection interval-time
display interface vlan-interface
display reserve-vlan-interface
display lldp local-information
display lldp neighbor-information
lldp compliance admin-status cdp
lldp management-address-format string
lldp notification med-topology-change enable
lldp notification remote-change enable
lldp timer notification-interval
Ethernet interface commands
Common Ethernet interface commands
bandwidth
Use bandwidth to configure the expected bandwidth of an interface.
Use undo bandwidth to restore the default.
Syntax
bandwidth bandwidth-value
undo bandwidth
Default
The expected bandwidth (in kbps) is the interface baud rate divided by 1000.
Views
Ethernet interface view, Layer 3 Ethernet subinterface view
Predefined user roles
network-admin
mdc-admin
Parameters
bandwidth-value: Specifies the expected bandwidth in the range of 1 to 400000000 kbps.
Usage guidelines
The expected bandwidth of an interface affects the following items:
· Bandwidth assignment with CBQ. For more information, see ACL and QoS Configuration Guide.
· Link costs in OSPF and IS-IS. For more information, see Layer 3—IP Routing Configuration Guide.
Examples
# Set the expected bandwidth of interface FortyGigE 1/0/1 to 1000 kbps.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] bandwidth 1000
# Set the expected bandwidth of subinterface FortyGigE 1/0/1.1 to 1000 kbps.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1.1
[Sysname-FortyGigE1/0/1.1] bandwidth 1000
Related commands
speed
default
Use default to restore the default settings for an Ethernet interface.
Syntax
default
Views
Ethernet interface view, Layer 3 Ethernet subinterface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
CAUTION: The default command might interrupt ongoing network services. Make sure you are fully aware of the impacts of this command when you use it in a live network. |
This command might fail to restore the default settings for some commands for reasons such as command dependencies or system restrictions. Use the display this command in interface view to identify these commands, and then use their undo forms or follow the command reference to individually restore their default settings. If your restoration attempt still fails, follow the error message instructions to resolve the problem.
Examples
# Restore the default settings for interface FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] default
# Restore the default settings for subinterface FortyGigE 1/0/1.1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1.1
[Sysname-FortyGigE1/0/1.1] default
description
Use description to change the description of an interface.
Use undo description to restore the default.
Syntax
description text
undo description
Default
The description of an interface is the interface name plus Interface (for example, FortyGigE1/0/1 Interface).
Views
Ethernet interface view, Layer 3 Ethernet subinterface view
Predefined user roles
network-admin
mdc-admin
Parameters
text: Specifies the interface description, a case-sensitive string of 1 to 255 characters.
Examples
# Change the description of interface FortyGigE 1/0/1 to lanswitch-interface.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] description lanswitch-interface
# Change the description of subinterface FortyGigE 1/0/1.1 to l3-subinterface1/0/1.1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1.1
[Sysname-FortyGigE1/0/1.1] description l3-subinterface1/0/1.1
display counters
Use display counters to display interface traffic statistics.
Syntax
display counters { inbound | outbound } interface [ interface-type [ interface-number ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
inbound: Displays inbound traffic statistics.
outbound: Displays outbound traffic statistics.
interface-type: Specifies an interface type.
interface-number: Specifies an interface number.
Usage guidelines
This command displays traffic statistics within a statistics polling interval specified by the flow-interval command.
To clear the Ethernet interface traffic statistics, use the reset counters interface command. For more information, see "reset counters interface."
If no interface type is specified, this command displays traffic statistics for all interfaces that have traffic counters.
If an interface type is specified but no interface number is specified, this command displays traffic statistics for all interfaces of the specified type.
If an interface type and an interface number are specified, this command displays traffic statistics of the specified interface.
Examples
# Display inbound traffic statistics for all FortyGigE interfaces.
<Sysname> display counters inbound interface fortygige
Interface Total (pkts) Broadcast (pkts) Multicast (pkts) Err (pkts)
FGE1/0/1 100 100 0 0
FGE1/0/2 0 0 0 0
FGE1/0/3 Overflow Overflow Overflow Overflow
FGE1/0/4 0 0 0 0
Overflow: More than 14 digits (7 digits for column "Err").
--: Not supported.
Table 1 Command output
Field |
Description |
Interface |
Abbreviated interface name. |
Total (pkts) |
Total number of packets received or sent through the interface. |
Broadcast (pkts) |
Total number of broadcast packets received or sent through the interface. |
Multicast (pkts) |
Total number of multicast packets received or sent through the interface. |
Err (pkts) |
Total number of error packets received or sent through the interface. |
Overflow: More than 14 digits (7 digits for column "Err") |
The command displays Overflow if any of the following cases applies: · The data length of an Err field value is greater than 7 decimal digits. · The data length of a non-Err field value is greater than 14 decimal digits. |
--: Not supported |
The statistical item is not supported. |
Related commands
· flow-interval
· reset counters interface
display counters rate
Use display counters rate to display traffic rate statistics of interfaces in up state over the last statistics polling interval.
Syntax
display counters rate { inbound | outbound } interface [ interface-type [ interface-number ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
inbound: Displays inbound traffic rate statistics.
outbound: Displays outbound traffic rate statistics.
interface-type: Specifies an interface type.
interface-number: Specifies an interface number.
Usage guidelines
The statistics cover only interfaces in up state.
If an interface type is specified, the command displays traffic rate statistics for all up interfaces of the specified type over the last statistics polling interval.
If no interface type is specified, the command displays traffic rate statistics for all up interfaces that have traffic counters over the last statistics polling interval.
If an interface which is always down over the last statistics polling interval is specified, the system prompts that the interface does not support the command.
You can use the flow-interval command to set the statistics polling interval.
Examples
# Display the inbound traffic rate statistics for all FortyGigE interfaces.
<Sysname> display counters rate inbound interface fortygige
Interface Total (pps) Broadcast (pps) Multicast (pps)
FGE1/0/1 200 -- --
FGE1/0/2 300 -- --
FGE1/0/3 300 -- --
Overflow: More than 14 digits.
--: Not supported.
Table 2 Command output
Field |
Description |
Interface |
Abbreviated interface name. |
Total (pkts/sec) |
Average rate (in pps) of receiving or sending packets during the statistics polling interval. |
Broadcast (pkts/sec) |
Average rate (in pps) of receiving or sending broadcast packets during the statistics polling interval. |
Multicast (pkts/sec) |
Average rate (in pps) of receiving or sending multicast packets during the statistics polling interval. |
Overflow: more than 14 decimal digits |
The command displays Overflow if the data length of a statistical item is greater than 14 decimal digits. |
--: not supported |
The statistical item is not supported. |
Related commands
· flow-interval
· reset counters interface
display ethernet statistics
Use display ethernet statistics to display the Ethernet module statistics.
Syntax
In standalone mode:
display ethernet statistics slot slot-number
In IRF mode:
display ethernet statistics chassis chassis-number slot slot-number
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
slot slot-number: Displays the Ethernet module statistics on the specified card. The slot-number argument represents the number of the slot that houses the card. (In standalone mode.)
chassis chassis-number slot slot-number: Displays the Ethernet module statistics on the specified card of the specified IRF member device. The chassis-number argument represents the ID of the IRF member device. The slot-number argument represents the number of the slot that houses the card. (In IRF mode.)
Examples
# (In standalone mode.) Display the Ethernet module statistics on slot 2.
<Sysname> display ethernet statistics slot 2
ETH receive packet statistics:
Totalnum : 10447 ETHIINum : 4459
SNAPNum : 0 RAWNum : 0
LLCNum : 0 UnknownNum : 0
ForwardNum : 4459 ARP : 0
MPLS : 0 ISIS : 0
ISIS2 : 0 IP : 0
IPV6 : 0
ETH receive error statistics:
NullPoint : 0 ErrIfindex : 0
ErrIfcb : 0 IfShut : 0
ErrAnalyse : 5988 ErrSrcMAC : 5988
ErrHdrLen : 0
ETH send packet statistics:
L3OutNum : 211 VLANOutNum : 0
FastOutNum : 155 L2OutNum : 0
ETH send error statistics:
MbufRelayNum : 0 NullMbuf : 0
ErrAdjFwd : 0 ErrPrepend : 0
ErrHdrLen : 0 ErrPad : 0
ErrQoSTrs : 0 ErrVLANTrs : 0
ErrEncap : 0 ErrTagVLAN : 0
IfShut : 0 IfErr : 0
# (In IRF mode.) Display the Ethernet module statistics on the card in slot 1 of IRF member device 1.
<Sysname> display ethernet statistics chassis 1 slot 1
ETH receive packet statistics:
Totalnum : 10447 ETHIINum : 4459
SNAPNum : 0 RAWNum : 0
LLCNum : 0 UnknownNum : 0
ForwardNum : 4459 ARP : 0
MPLS : 0 ISIS : 0
ISIS2 : 0 IP : 0
IPV6 : 0
ETH receive error statistics:
NullPoint : 0 ErrIfindex : 0
ErrIfcb : 0 IfShut : 0
ErrAnalyse : 5988 ErrSrcMAC : 5988
ErrHdrLen : 0
ETH send packet statistics:
L3OutNum : 211 VLANOutNum : 0
FastOutNum : 155 L2OutNum : 0
ETH send error statistics:
MbufRelayNum : 0 NullMbuf : 0
ErrAdjFwd : 0 ErrPrepend : 0
ErrHdrLen : 0 ErrPad : 0
ErrQoSTrs : 0 ErrVLANTrs : 0
ErrEncap : 0 ErrTagVLAN : 0
IfShut : 0 IfErr : 0
Table 3 Output description
Field |
Description |
ETH receive packet statistics |
Statistics about the Ethernet packets received on the Ethernet module. |
Totalnum |
Total number of received packets: · ETHIINum—Number of packets encapsulated by using Ethernet-II. · SNAPNum—Number of packets encapsulated by using SNAP. · RAWNum—Number of packets encapsulated by using RAW. · ISIS—Number of packets encapsulated by using IS-IS. · LLCNum—Number of packets encapsulated by using LLC. · UnknownNum—Number of packets encapsulated by using unknown methods. · ForwardNum—Number of packets forwarded at Layer 2 or sent to the CPU. · ARP—Number of ARP packets. · MPLS—Number of MPLS packets. · ISIS—Number of IS-IS packets. · ISIS2—Number of large 802.3/802.2 frames encapsulated by using IS-IS. · IP—Number of IP packets. |
ETH receive error statistics |
Statistics about the error Ethernet packets in the outbound direction on the Ethernet module. Errors might be included in packets or occur during the receiving process. The items include: · NullPoint—Number of packets that include null pointers. · ErrIfindex—Number of packets that include incorrect interface indexes. · ErrIfcb—Number of packets that include incorrect interface control blocks. · IfShut—Number of packets that are being received when the interface is shut down. · ErrAnalyse—Number of packets that include packet parsing errors. · ErrSrcMAC—Number of packets that include incorrect source MAC addresses. · ErrHdrLen—Number of packets that include header length errors. |
ETH send packet statistics |
Statistics about the Ethernet packets sent by the Ethernet module: · L3OutNum—Number of packets sent out of Layer 3 Ethernet interfaces. · VLANOutNum—Number of packets sent out of VLAN interfaces. · FastOutNum—Number of packets fast forwarded. · L2OutNum—Number of packets sent out of Layer 2 Ethernet interfaces. · MbufRelayNum—Number of packets transparently sent. |
ETH send error statistics |
Statistics about the error Ethernet packets in the outbound direction on the Ethernet module: · NullMbuf—Number of packets with null pointers. · ErrAdjFwd—Number of packets with adjacency table errors. · ErrPrepend—Number of packets with extension errors. · ErrHdrLen—Number of packets with header length errors. · ErrPad—Number of packets with padding errors. · ErrQoSTrs—Number of packets that failed to be sent by QoS. · ErrVLANTrs—Number of packets that failed to be sent in VLANs. · ErrEncap—Number of packets that failed to be sent due to link header encapsulation failures. · ErrTagVLAN—Number of packets that failed to be sent due to VLAN tag encapsulation failures. · IfShut—Number of packets that are being sent when the interface is shut down. · IfErr—Number of packets with incorrect outgoing interfaces. |
display interface
Use display interface to display Ethernet interface information.
Syntax
display interface [ interface-type ] [ brief [ down ] ]
display interface [ interface-type [ interface-number | interface-number.subnumber ] ] [ brief [ description ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
interface-type: Specifies an interface type.
interface-number: Specifies an interface number.
interface-number.subnumber: Specifies a subinterface number. The interface-number argument represents the number of the interface. The subnumber argument represents the number of the subinterface, in the range of 1 to 4094.
brief: Displays brief interface information. If you do not specify this keyword, the command displays detailed interface information.
down: Displays information about interfaces in the down state and the causes. If you do not specify this keyword, this command displays information about interfaces in all states.
description: Displays complete interface descriptions. If you do not specify this keyword, the command displays only the first 27 characters of each interface description.
Usage guidelines
If no interface type is specified, this command displays information about all interfaces.
If an interface type is specified but no interface number is specified, this command displays information about all interfaces of that type.
If both the interface type and interface number are specified, this command displays information about the specified interface.
Examples
# Display information about Layer 3 interface FortyGigE 1/0/1.
<Sysname> display interface fortygige 1/0/1
FortyGigE1/0/1
Current state: DOWN
Line protocol state: DOWN
Description: FortyGigE1/0/1 Interface
Bandwidth: 40000000kbps
Maximum transmission unit: 1500
Internet protocol processing: Disabled
IP packet frame type: Ethernet II, hardware address: 000c-2963-b75d
IPv6 packet frame type: Ethernet II, hardware address: 000c-2963-b75d
Media type is not sure,Port hardware type is No connector
Port priority: 0
Unknown-speed mode, unknown-duplex mode
Link speed type is autonegotiation, link duplex type is autonegotiation
Flow-control is not enabled
Maximum frame length is 12288
Last link flapping: Never
Last clearing of counters: Never
Peak input rate: 0 bytes/sec, at 2015-01-05 13:51:00
Peak output rate: 0 bytes/sec, at 2015-01-05 13:51:00
Last 300 second input: 0 packets/sec 0 bytes/sec
Last 300 second output: 0 packets/sec 0 bytes/sec
Input (total): 0 packets, 0 bytes
0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses
Input (normal): 0 packets, - bytes
0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses
Input: 0 input errors, 0 runts, 0 giants, 0 throttles
0 CRC, 0 frame, - overruns, 0 aborts
- ignored, - parity errors
Output (total): 0 packets, 0 bytes
0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses
Output (normal): 0 packets, - bytes
0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses
Output: 0 output errors, - underruns, - buffer failures
0 aborts, 0 deferred, 0 collisions, 0 late collisions
0 lost carrier, - no carrier
Table 4 Command output
Field |
Description |
|
Current state |
State of the interface: · Administratively DOWN—The Ethernet interface was shut down with the shutdown command. The interface is administratively down. · DOWN—The Ethernet interface is administratively up but physically down (possibly because no physical link is present or the link has failed). · UP—The Ethernet interface is both administratively and physically up. |
|
Line protocol state |
Link layer state of the interface. The state is determined through parameter negotiation on the link layer. · UP—The interface is up at the data link layer. · UP (spoofing)—The link layer protocol of an interface is UP, but its link is an on-demand link or not present at all. This attribute is typical of Null interfaces and loopback interfaces. · DOWN—The interface is down at the data link layer. · DOWN (DLDP DOWN)—The link layer protocol of the interface is down because DLDP detected that the link was unidirectional. · DOWN (LAGG DOWN)—The link layer protocol of the interface is down because the aggregate interface does not have Selected ports. · DOWN (OAM DOWN)—The link layer of the interface is down because OAM detected remote link failures. · DOWN (DLDP and LAGG DOWN)—The link layer of the interface is shut down by DLDP and LAGG. · DOWN (DLDP and OAM DOWN)—The link layer of the interface is shut down by DLDP and OAM. · DOWN (OAM and LAGG DOWN)—The link layer of the interface is shut down by OAM and LAGG. · DOWN (DLDP, OAM and LAGG DOWN)—The link layer of the interface is shut down by DLDP, OAM, and LAGG. |
|
Hold timer is |
Link-up or link-down event suppression interval. |
|
Bandwidth |
Expected bandwidth of the interface. |
|
Internet protocol processing: Disabled |
Indicates that the interface cannot process IP packets. |
|
Last link flapping |
Duration since the most recent interface state change. Never indicates the interface state has never changed. |
|
Last clearing of counters |
Time when the reset counters interface command was last used to clear the interface statistics. Never indicates the reset counters interface command has never been used on the interface since the device's startup. |
|
Peak input rate |
Peak rate of inbound traffic in Bps, and the time when the peak inbound traffic rate occurred. |
|
Peak output rate |
Peak rate of outbound traffic in Bps, and the time when the peak outbound traffic rate occurred. |
|
Last 300 second input |
Average input rate over the last 300 seconds in Bps, bps, and pps. |
|
Last 300 second output |
Average output rate over the last 300 seconds in Bps, bps, and pps. |
|
# Display detailed information about Layer 2 interface FortyGigE 1/0/1.
<Sysname> display interface fortygige 1/0/1
FortyGigE1/0/1
Current state: DOWN
Line protocol state: DOWN
IP packet frame type: Ethernet II, hardware address: 000c-2963-b767
Description: FortyGigE1/0/1 Interface
Bandwidth: 40000000kbps
Loopback is not set
Media type is not sure,port hardware type is No connector
Unknown-speed mode, unknown-duplex mode
Link speed type is autonegotiation, link duplex type is autonegotiation
Maximum frame length is 12288
Allow jumbo frame to pass
Broadcast max-ratio: 100%
Multicast max-ratio: 100%
Unicast max-ratio: 100%
PVID: 1
MDI type: automdix
Port link-type: access
Tagged VLANs: none
UnTagged VLANs: 1
Port priority: 2
Last link flapping: Never
Last clearing of counters: Never
Peak input rate: 0 bytes/sec, at 2015-01-05 13:51:00
Peak output rate: 0 bytes/sec, at 2015-01-05 13:51:00
Last 300 second input: 0 packets/sec 0 bytes/sec 0%
Last 300 second output: 0 packets/sec 0 bytes/sec 0%
Input (total): 0 packets, 0 bytes
0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses
Input (normal): 0 packets, - bytes
0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses
Input: 0 input errors, 0 runts, 0 giants, 0 throttles
0 CRC, 0 frame, - overruns, 0 aborts
- ignored, - parity errors
Output (total): 0 packets, 0 bytes
0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses
Output (normal): 0 packets, - bytes
0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses
Output: 0 output errors, - underruns, - buffer failures
0 aborts, 0 deferred, 0 collisions, 0 late collisions
0 lost carrier, - no carrier
Table 5 Command output
Field |
Description |
Current state |
State of the Ethernet interface: · Administratively DOWN—The Ethernet interface was shut down with the shutdown command. The interface is administratively down. · DOWN—The Ethernet interface is administratively up but physically down (possibly because no physical link is present or the link has failed). · UP—The Ethernet interface is both administratively and physically up. |
Line protocol current state |
Link layer state of the interface. The state is determined through parameter negotiation on the link layer. · UP—The interface is up at the data link layer. · UP (spoofing)—The link layer protocol of an interface is UP, but its link is an on-demand link or not present at all. This attribute is typical of Null interfaces and loopback interfaces. · DOWN—The interface is down at the data link layer. · DOWN (DLDP DOWN)—The link layer protocol of the interface is down because DLDP detects that the link is unidirectional. · DOWN (LAGG DOWN)—The link layer protocol of the interface is down because the aggregate interface does not have Selected ports. · DOWN (OAM DOWN)—The link layer of the interface is down because OAM detects remote link failures. · DOWN (DLDP and LAGG DOWN)—The link layer of the interface is shut down by DLDP and LAGG. · DOWN (DLDP and OAM DOWN)—The link layer of the interface is shut down by DLDP and OAM. · DOWN (OAM and LAGG DOWN)—The link layer of the interface is shut down by OAM and LAGG. · DOWN (DLDP, OAM and LAGG DOWN)—The link layer of the interface is shut down by DLDP, OAM, and LAGG. |
IP packet frame type |
Ethernet framing format. PKTFMT_ETHNT_2 indicates that the frames are encapsulated in Ethernet II framing format. |
hardware address |
MAC address of the interface. |
Bandwidth |
Expected bandwidth of the interface. |
Loopback is set internal |
An internal loopback test is running on the Ethernet interface. |
Loopback is set external |
An external loopback test is running on the Ethernet interface. . |
Loopback is not set |
No loopback test is running on the Ethernet interface. |
10Mbps-speed mode |
The interface is operating at 10 Mbps. |
100Mbps-speed mode |
The interface is operating at 100 Mbps. |
1000Mbps-speed mode |
The interface is operating at 1000 Mbps. |
10Gbps-speed mode |
The interface is operating at 10 Gbps. |
40Gbps-speed mode |
The interface is operating at 40 Gbps. |
Unknown-speed mode |
The speed of the interface is unknown because the speed negotiation fails or the interface is physically disconnected. |
full-duplex mode |
The interface is operating in full duplex mode. |
unknown-duplex mode |
The duplex mode of the interface is unknown because the duplex mode negotiation fails or the interface is physically disconnected. |
Link speed type is autonegotiation |
The interface is configured with the speed auto command. |
Link speed type is force link |
The interface is configured with a specific speed, for example, 10 Mbps or 100 Mbps, by using the speed command. |
link duplex type is autonegotiation |
The interface is configured with the duplex auto command. |
link duplex type is force link |
The interface is configured with a specific duplex mode, for example, half or full, by using the duplex command. |
Maximum frame length |
Maximum Ethernet frame length allowed on the interface. |
Allow jumbo frames to pass |
The interface allows jumbo frames to pass through. |
Broadcast max- |
Broadcast storm suppression threshold in ratio, pps, or kbps. The unit of the threshold depends on your configuration. |
Multicast max- |
Multicast storm suppression threshold in ratio, pps, or kbps. The unit of the threshold depends on your configuration. |
Unicast max- |
Unicast storm suppression threshold in ratio, pps, or kbps. The unit of the threshold depends on your configuration. |
PVID |
PVID of the Ethernet interface. |
MDI type |
Cable type (depending on your configuration): · automdix. · mdi. · mdix. |
Port link-type |
Link type of the interface (depending on your configuration): · access. · trunk. · hybrid. |
Tagged VLANs |
VLANs for which the interface sends packets without removing VLAN tags. |
Untagged VLANs |
VLANs for which the interface sends packets after removing VLAN tags. |
Port priority |
Priority of the interface. |
Last link flapping |
Duration since the most recent interface state change. Never indicates the interface state has never changed. |
Last clearing of counters: Never |
Time when the reset counters interface command was last used to clear statistics on the interface. Never indicates that the reset counters interface command was never used since the device was started. |
Peak input rate |
Peak rate of inbound traffic in Bps, and the time when the peak inbound traffic rate occurred. |
Peak output rate |
Peak rate of outbound traffic in Bps, and the time when the peak outbound traffic rate occurred. |
Last 300 second input |
Average rate of inbound traffic in the last 300 seconds, in pps and Bps, and the ratio of the actual rate to the maximum interface rate. A hyphen (-) indicates that the statistical item is not supported. |
Last 300 second output: |
Average rate of outbound traffic in the last 300 seconds, in pps and Bps, and the ratio of the actual rate to the maximum interface rate. A hyphen (-) indicates that the statistical item is not supported. |
Input(total): 0 packets, 0 bytes 0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses |
Inbound traffic statistics (in packets and bytes) for the interface. All inbound normal and abnormal packets and normal pause frames were counted. Number of inbound unicast packets, number of inbound broadcasts, number of inbound multicasts, and number of inbound pause frames. A hyphen (-) indicates that the statistical item is not supported. |
Input(normal): 0 packets, - bytes 0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses |
Inbound normal traffic and pause frame statistics (in packets and bytes) for the interface. Number of inbound normal unicast packets, number of inbound normal broadcasts, number of inbound normal multicasts, and number of inbound normal pause frames. A hyphen (-) indicates that the statistical item is not supported. |
input errors |
Statistics of incoming error packets. |
runts |
Number of inbound frames shorter than 64 bytes, in correct format, and containing valid CRCs. |
giants |
Number of inbound frames larger than the maximum frame length supported on the interface. · For an Ethernet interface that does not permit jumbo frames, giants refer to frames larger than 1518 bytes (without VLAN tags) or 1522 bytes (with VLAN tags). · For an Ethernet interface that permits jumbo frames, giants refer to frames larger than the maximum length of Ethernet frames that are allowed to pass through, which is configured when you configure jumbo frame support on the interface. |
throttles |
Number of times the port is shut down due to buffer or CPU overload. |
CRC |
Total number of inbound frames that had a normal length, but contained CRC errors. |
frame |
Total number of inbound frames that contained CRC errors and a non-integer number of bytes. |
overruns |
Number of packets dropped because the input rate of the port exceeded the queuing capability. |
aborts |
Total number of illegal inbound packets: · Fragment frames—CRC error frames shorter than 64 bytes. The length can be an integral or non-integral value. · Jabber frames—CRC error frames greater than the maximum frame length supported on the Ethernet interface (with an integral or non-integral length). ¡ For an Ethernet interface that does not permit jumbo frames, jabber frames refer to CRC error frames greater than 1518 bytes (without VLAN tags) or 1522 bytes (with VLAN tags). ¡ For an Ethernet interface that permits jumbo frames, jabber frames refer to CRC error frames greater than the maximum length of Ethernet frames that are allowed to pass through the interface. The maximum length is configured when you configure jumbo frame support on the interface. · Symbol error frames—Frames that contained at least one undefined symbol. · Unknown operation code frames—Non-pause MAC control frames. · Length error frames—Frames whose 802.3 length fields did not match the actual frame length (46 to 1500 bytes). |
ignored |
Number of inbound frames dropped because the receiving buffer of the port ran low. |
parity errors |
Total number of frames with parity errors. |
Output(total): 0 packets, 0 bytes 0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses |
Outbound traffic statistics (in packets and bytes) for the interface. All outbound normal and abnormal packets and normal pause frames were counted. Number of outbound unicast packets, number of outbound broadcasts, number of outbound multicasts, and number of outbound pause frames. A hyphen (-) indicates that the statistical item is not supported. |
Output(normal): 0 packets, - bytes 0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses |
Outbound normal traffic and pause frame statistics (in packets and bytes) for the interface. Number of outbound normal unicast packets, number of outbound normal broadcasts, number of outbound normal multicasts, and number of outbound normal pause frames. A hyphen (-) indicates that the statistical item is not supported. |
output errors |
Number of outbound packets with errors. |
underruns |
Number of packets dropped because the output rate of the interface exceeded the output queuing capability. This is a low-probability hardware anomaly. |
buffer failures |
Number of packets dropped because the transmit buffer of the interface ran low. |
aborts |
Number of packets that failed to be transmitted, for example, because of Ethernet collisions. |
deferred |
Number of frames that the interface deferred to transmit because of detected collisions. |
collisions |
Number of frames that the interface stopped transmitting because Ethernet collisions were detected during transmission. |
late collisions |
Number of frames that the interface deferred to transmit after transmitting their first 512 bits because of detected collisions. |
lost carrier |
Number of carrier losses during transmission. This counter increases by one when a carrier is lost, and applies to serial WAN interfaces. |
no carrier |
Number of times that the port failed to detect the carrier when attempting to send frames. This counter increases by one when a port failed to detect the carrier, and applies to serial WAN interfaces. |
# Display brief information about all interfaces.
<Sysname> display interface brief
Brief information on interfaces in route mode:
Link: ADM - administratively down; Stby - standby
Protocol: (s) – spoofing
Interface Link Protocol Primary IP Description
FGE1/0/11 DOWN DOWN --
InLoop0 UP UP(s) --
M-GE0/0/0 UP UP 192.168.0.98
NULL0 UP UP(s) --
REG0 DOWN -- --
Brief information on interfaces in bridge mode:
Link: ADM - administratively down; Stby - standby
Speed: (a) - auto
Duplex: (a)/A - auto; H - half; F - full
Type: A - access; T - trunk; H - hybrid
Interface Link Speed Duplex Type PVID Description
FGE1/0/1 DOWN auto A A 1
FGE1/0/2 DOWN auto A A 10
FGE1/0/3 DOWN auto A A 1 aaaaaaaaaaaaaaaaaaaaaaaaaaa
FGE1/0/4 DOWN auto A A 1
FGE1/0/5 DOWN auto A A 1
FGE1/0/6 DOWN auto A A 1
FGE1/0/7 DOWN auto A A 1
FGE1/0/8 DOWN auto A A 1
FGE1/0/9 DOWN auto A A 1
# Display brief information about interface FortyGigE 1/0/3, including the complete description of the interface.
<Sysname> display interface fortygige 1/0/3 brief description
Brief information on interfaces in bridge mode:
Link: ADM - administratively down; Stby - standby
Speed: (a) - auto
Duplex: (a)/A - auto; H - half; F - full
Type: A - access; T - trunk; H - hybrid
Interface Link Speed Duplex Type PVID Description
FGE1/0/3 DOWN auto A A 1 aaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
# Display information about interfaces in DOWN state and the causes.
<Sysname> display interface brief down
Brief information on interfaces in route mode:
Link: ADM - administratively down; Stby - standby
Interface Link Cause
FGE1/0/11 DOWN Not connected
REG0 DOWN Not connected
Brief information on interfaces in bridge mode:
Link: ADM - administratively down; Stby - standby
Interface Link Cause
FGE1/0/1 DOWN Not connected
FGE1/0/2 DOWN Not connected
FGE1/0/3 DOWN Not connected
Table 6 Command output
Field |
Description |
Brief information on interfaces in route mode: |
Brief information about Layer 3 interfaces. |
Link: ADM - administratively down; Stby - standby |
Link status: · ADM—The interface has been shut down by the network administrator. To recover its physical layer state, run the undo shutdown command. · Stby—The interface is a standby interface. |
Protocol: (s) – spoofing |
The data link layer protocol of the interface is up. However, the link is an on-demand link or not present. This value is typical of interface Null 0 and loopback interfaces. |
Interface |
Interface name. |
Link |
Physical link state of the interface: · UP—The link is up. · DOWN—The link is physically down. · ADM—The link has been administratively shut down. To recover its physical state, run the undo shutdown command. · Stby—The interface is a standby interface. |
Protocol |
Link layer protocol state of the interface: · UP. · DOWN. · UP(s)—The link of the interface is an on-demand link or not present at all. |
Description |
Partial or complete interface description configured by using the description command: · If the description keyword is not specified in the display interface brief command, the Description field displays only the first 27 characters. · If the description keyword is specified in the display interface brief command, the field displays the complete interface description. |
Brief information on interfaces in bridge mode: |
Brief information about Layer 2 interfaces. |
Speed: (a) - auto |
If the speed of an interface is automatically negotiated, its speed attribute includes the autonegotiation flag, indicated by the letter a in parentheses. |
Duplex: (a)/A - auto; H - half; F – full |
If the duplex mode of an interface is automatically negotiated, the duplex mode attribute of the interface includes the letter a in parentheses. H indicates the half duplex mode. F indicates the full duplex mode. If an interface is configured to autonegotiate its duplex mode but the autonegotiation has not started, its duplex mode attribute is displayed as A. |
Type: A - access; T - trunk; H – hybrid |
Link type options for Ethernet interfaces. |
Speed |
Interface rate, in bps. |
Duplex |
Duplex mode of the interface: · A—Autonegotiation. · F—Full duplex. · F(a)—Autonegotiated full duplex. · H—Half duplex. · H(a)—Autonegotiated half duplex. |
Type |
Link type of the interface: · A—Access. · H—Hybrid. · T—Trunk. |
PVID |
Port VLAN ID. |
Cause |
Cause for the physical link state of an interface to be DOWN: · Administratively—The port is manually shut down with the shutdown command. To restore the physical state of the interface, use the undo shutdown command. · DOWN ( Link-Aggregation interface down )—The interface is a member port of an aggregate interface, and the aggregate interface is shut down. · DOWN (Loopback detection down)—The port is shut down because the loopback detection module has detected loops. · IRF-link-down—When IRF detects that the IRF link is down on an MDC of a member device, the physical interfaces except the excluded ports on the MDC are physically down. · MAD ShutDown—After an IRF split, all interfaces except the excluded ports in the IRF in recovery state are physically down. · Not connected—No physical connection exists (possibly because the network cable is disconnected or faulty). · Storm-Constrain—The port is shut down because the unknown unicast traffic, multicast traffic, or broadcast traffic exceeds the upper limit. · STP DOWN—The port is shut down by the STP BPDU guard function. · Port Security Disabled—The port is shut down by the intrusion detection mechanism because the port receives illegal packets. · Standby—The interface is in the Standby state. |
reset counters interface
display packet-drop
Use display packet-drop to display information about packets dropped on an interface or multiple interfaces.
Syntax
display packet-drop { interface [ interface-type [ interface-number ] ] | summary }
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
interface-type: Specifies an interface type. If you do not specify an interface type, this command displays information about dropped packets on all the interfaces on the device.
interface-number: Specifies an interface number. If you specify an interface type only, this command displays information about dropped packets on the specified type of interfaces.
summary: Displays the summary of dropped packets on all interfaces.
Examples
# Display information about dropped packets on FortyGigE 1/0/1.
<Sysname> display packet-drop interface fortygige 1/0/1
FortyGigE1/0/1:
Packets dropped due to STP non-forwarding state: 321
Packets dropped due to TM: 0
Packets dropped due to insufficient data buffer. Input dropped: 0 Output dropped:0
# Display the summary of dropped packets on all interfaces.
<Sysname> display packet-drop summary
All interfaces:
Packets dropped due to STP non-forwarding state: 321
Packets dropped due to TM: 0
Table 7 Command output
Field |
Description |
Packets dropped due to STP non-forwarding state |
Packets that are dropped because STP is in the non-forwarding state. |
Packets dropped due to TM |
Packets that are dropped because of insufficient TM bandwidth. |
duplex
Use duplex to set the duplex mode for an Ethernet interface.
Use undo duplex to restore the default duplex mode of the Ethernet interface.
Syntax
duplex { auto | full | half }
undo duplex
Default
100-GE CXP interfaces and 100-GE CFP2 interfaces operate in full duplex mode, and other Ethernet interfaces automatically negotiate a duplex mode with the peer end.
Views
Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Parameters
auto: Configures the interface to autonegotiate the duplex mode with the peer.
full: Configures the interface to operate in full duplex mode. In this mode, the interface can receive and transmit packets at the same time.
half: Configures the interface to operate in half duplex mode. In this mode, the interface can only receive or transmit packets at a given time.
Usage guidelines
This command is not applicable to 100-GE CXP interfaces and 100-GE CFP2 interfaces.
Copper ports operating at 1000 Mbps and 10 Gbps and fiber ports do not support the half keyword.
Examples
# Configure interface FortyGigE 1/0/1 to operate in full duplex mode.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] duplex full
eee enable
IMPORTANT: · Fiber ports do not support this command. · Ports on an LSXM1GT48FX1 card do not support this command when they operate at 100 Mbps. |
Use eee enable to enable Energy Efficient Ethernet (EEE) on an interface.
Use undo eee enable to restore the default.
Syntax
eee enable
undo eee enable
Default
EEE is disabled.
Views
Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
With EEE enabled, a link-up interface enters low power state if it has not received any packets for a period of time. The time period depends on the chip specifications and is not configurable. When a packet arrives later, the interface restores to the normal state.
Examples
# Enable EEE on Ten-GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] eee enable
flow-control
Use flow-control to enable TxRx mode generic flow control on an Ethernet interface.
Use undo flow-control to disable generic flow control on the Ethernet interface.
Syntax
flow-control
undo flow-control
Default
Generic flow control is disabled on an Ethernet interface.
Views
Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
To implement flow control on a link, enable the generic flow control function at both ends of the link.
TxRx mode generic flow control enables an Ethernet interface to receive common pause frames from its peer, and send common pause frames to notify its peer of congestions.
With the flow-control command configured, an interface can both send and receive flow control frames:
· When congested, the interface sends a flow control frame to its peer.
· Upon receiving a flow control frame from the peer, the interface suspends sending packets.
Examples
# Enable TxRx mode generic flow control on the interface FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] flow-control
flow-control receive enable
Use flow-control receive enable to enable Rx mode generic flow control on an Ethernet port.
Use undo flow-control to disable generic flow control on an Ethernet interface.
Syntax
flow-control receive enable
undo flow-control
Default
Rx flow control is disabled on Ethernet interfaces.
Views
Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
With the flow-control receive enable command configured, an interface can receive, but not send, flow control frames. When the interface receives a flow control frame from its peer, it suspends sending packets to the peer. When traffic congestion occurs on the interface, it cannot send flow control frames to the peer.
To handle unidirectional traffic congestion on a link, configure the flow-control receive enable command at one end, and the flow-control command at the other. To enable both ends of the link to handle traffic congestion, configure the flow-control command at both ends.
Examples
# Enable Rx mode generic flow control on FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] flow-control receive enable
Related commands
flow-control
interface
Use interface to enter interface or subinterface view. If the specified subinterface does not exist, the command creates the subinterface and enters its view.
Syntax
interface interface-type { interface-number | interface-number.subnumber }
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
interface-type: Specifies an interface type.
interface-number: Specifies an interface number.
interface-number.subnumber: Specifies a subinterface number. The interface-number argument represents the number of the interface. The subnumber argument represents the number of the subinterface, in the range of 1 to 4094.
Usage guidelines
Each of the Layer 3 interfaces and subinterfaces use one VLAN interface resource. Use the reserve-vlan-interface command to reserve VLAN interface resources for Layer 3 interfaces and subinterfaces before you create them. Otherwise, the Layer 3 interfaces and subinterfaces might not be created. For example, before creating four Layer 3 subinterfaces on a Layer 3 interface, you must reserve five VLAN interface resources by using the reserve-vlan-interface command.
To reserve global VLAN interface resources, specify the global keyword in the reserve-vlan-interface command. To reserve local VLAN interface resources, do not specify the global keyword. Reserved VLAN interface resources are local in this chapter.
Before creating a Layer 3 Ethernet subinterface, do not reserve a resource for the VLAN interface whose interface number matches the subinterface number. After you reserve a VLAN interface resource, do not create a Layer 3 Ethernet subinterface whose subinterface number is the VLAN interface number. A Layer 3 Ethernet subinterface uses the VLAN interface resource in processing tagged packets whose VLAN ID matches the subinterface number.
For more information about reserving VLAN interface resources, see Layer 2—LAN Switching Configuration Guide.
Examples
# Enter FortyGigE 1/0/1 interface view.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1]
# Create Ethernet subinterface FortyGigE 1/0/1.1 and enter its view.
<Sysname> system-view
[Sysname] reserve-vlan-interface 3000
[Sysname] interface fortygige 1/0/1.1
[Sysname-FortyGigE1/0/1.1]
jumboframe enable
Use jumboframe enable to allow jumbo frames within the specified length to pass through.
Use undo jumboframe enable to prevent jumbo frames from passing through.
Syntax
jumboframe enable [ value ]
undo jumboframe enable
Default
The device allows jumbo frames within 12288 bytes to pass through.
Views
Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Parameters
value: Sets the maximum length of Ethernet frames that are allowed to pass through. The value range is 1536 to 12288 bytes.
Usage guidelines
If you set the value argument multiple times, the most recent configuration takes effect.
Examples
# Enable jumbo frames to pass through FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] jumboframe enable
link-delay
Use link-delay to set the physical state change suppression interval on an Ethernet interface.
Use undo link-delay to restore the default.
Syntax
link-delay [ msec ] delay-time [ mode { up | updown } ]
undo link-delay [ [ msec ] delay-time [ mode { up | updown } ] ]
Default
Each time the physical link of a port goes up or comes down, the interface immediately reports the change to the CPU.
Views
Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Parameters
msec: Enables the physical state change suppression interval to be accurate to milliseconds. If you do not specify this keyword, the suppression interval is accurate to seconds.
delay-time: Sets the physical state change suppression interval on the Ethernet interface. A value of 0 indicates that physical state changes are immediately reported to the CPU and are not suppressed.
· If you do not specify the msec keyword, the value range for this argument is 0 to 30 seconds.
· If you specify the msec keyword, the value range for this argument is 0 to 10000 milliseconds, and the value must be an integer multiple of 100.
mode up: Suppresses the link-up events.
mode updown: Suppresses both the link-up and link-down events.
Usage guidelines
You can configure this feature to suppress only link-down events, only link-up events, or both. If an event of the specified type still exists when the suppression interval expires, the system reports the event.
When you configure this feature, follow these guidelines:
· To suppress only link-down events, configure the link-delay [ msec ] delay-time command.
· To suppress only link-up events, configure the link-delay [ msec ] delay-time mode up command.
· To suppress both link-down and link-up events, configure the link-delay [ msec ] delay-time mode updown command.
When you separately enable state change suppression for link-up and link-down events, both configurations take effect. For example, if you configure the link-delay [ msec ] delay-time mode up command and then the link-delay [ msec ] delay-time command, both commands take effect.
If you configure the link-delay command multiple times for link-up or link-down events, the most recent configuration takes effect.
You can disable suppression for only link-up events, only link-down events, or both. For example, when both link-up and link-down events are suppressed on an interface, you can use the undo link-delay delay-time mode up command to disable suppression only for link-up events.
Do not configure this command on a port with MSTP enabled.
Examples
# Set the link-down event suppression interval to 8 seconds on interface FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] link-delay 8
# Set the link-up event suppression interval to 8 milliseconds on interface FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] link-delay msec 8 mode up
port auto-power-down
IMPORTANT: Fiber ports do not support this command. |
Use port auto-power-down to enable auto power-down on an Ethernet interface.
Use undo port auto-power-down to restore the default.
Syntax
port auto-power-down
undo port auto-power-down
Default
Auto power-down is disabled on Ethernet interfaces.
Views
Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
When an interface with auto power-down enabled has been down for a specific period of time, both of the following events occur:
· The device automatically stops supplying power to the interface.
· The interface enters the power save mode.
The time period depends on the chip specifications and is not configurable.
When the interface comes up, both of the following events occur:
· The device automatically restores the power supply to the interface.
· The interface restores to its normal state.
Examples
# Enable auto power-down on interface Ten-GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] port auto-power-down
port link-mode
Use port link-mode to change the link mode of an Ethernet interface.
Use undo port link-mode to restore the default.
Syntax
port link-mode { bridge | route }
undo port link-mode
Default
Ethernet interfaces operate in bridge mode.
Views
Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Parameters
bridge: Specifies the Layer 2 mode.
route: Specifies the Layer 3 mode.
Usage guidelines
On the switch, Ethernet interfaces can operate either as Layer 2 or Layer 3 Ethernet interfaces (you can use commands to set the link mode to bridge or route).
Each of the Layer 3 interfaces and subinterfaces use one VLAN interface resource. Before configuring an Ethernet interface to operate in route mode, use the reserve-vlan-interface command to reserve a VLAN interface resource for the interface. Otherwise, the operation might fail. For example, before configuring four Layer 2 interfaces to operate in route mode, you must reserve four VLAN interface resources by using the reserve-vlan-interface command.
To reserve global VLAN interface resources, specify the global keyword in the reserve-vlan-interface command. To reserve local VLAN interface resources, do not specify the global keyword. Reserved VLAN interface resources are local in this chapter.
For more information about reserving VLAN interface resources, see Layer 2—LAN Switching Configuration Guide.
Changing the link mode of an Ethernet interface also restores all commands (except shutdown) on the Ethernet interface to their defaults in the new link mode.
Examples
# Configure FortyGigE 1/0/1 to operate in bridge mode.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] port link-mode bridge
# Configure FortyGigE 1/0/1 to operate in route mode.
<Sysname> system-view
[Sysname] reserve-vlan-interface 3000
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] port link-mode route
priority-flow-control
Use priority-flow-control to enable PFC on an Ethernet interface through automatic negotiation or forcibly.
Use undo priority-flow-control to disable PFC on the interface.
Syntax
priority-flow-control { auto | enable }
undo priority-flow-control
Default
PFC is disabled on Ethernet interfaces.
Views
Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Parameters
auto: Specifies the Ethernet interface to automatically negotiate with its peer to enable PFC.
enable: Forcibly enables PFC.
Usage guidelines
This command is available only when the system operates in advanced mode. For more information about system operating modes, see Fundamentals Configuration Guide.
The state of the PFC function is co-determined by the PFC configurations on the local port and on the peer. In Table 8:
· The first line lists the PFC configuration on the local port.
· The first column lists the PFC configuration on the peer.
· The fields enabled and disabled are the two possible negotiation results.
Table 8 PFC configurations and negotiation results
Local (right) Peer (below) |
enable |
auto |
Default |
enable |
Enabled |
Enabled. |
Disabled |
auto |
Enabled |
· Enabled if negotiation succeeds. · Disabled if negotiation fails. |
Disabled |
Default |
Disabled |
Disabled. |
Disabled |
Examples
# Configure FortyGigE 1/0/1 to automatically negotiate with its peer to enable PFC.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] priority-flow-control auto
Related commands
priority-flow-control no-drop dot1p
priority-flow-control no-drop dot1p
Use priority-flow-control no-drop dot1p to enable PFC for specific 802.1p priorities on an Ethernet interface.
Use undo priority-flow-control no-drop dot1p to restore the default.
Syntax
priority-flow-control no-drop dot1p dot1p-list
undo priority-flow-control no-drop dot1p
Default
PFC is disabled for all 802.1p priorities.
Views
Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Parameters
dot1p-list: Specifies an 802.1p priority (or dot1p priority) list to identify flows that are subject to PFC(for example: 1,3-5). A hyphen (-) connects two numeric values, which together indicate a continuous value range. Different values or value ranges are separated with commas (,). You can configure up to 16 characters for this argument.
Usage guidelines
You can enable PFC for certain 802.1p priorities at the two ends of a link. When network congestion occurs, the local device checks the PFC status for the 802.1p priority carried in each arriving packet. The device processes the packet depending on the PFC status as follows:
· If PFC is enabled for the 802.1p priority, the local device accepts the packet and sends a PFC pause frame to the peer. The peer stops sending packets carrying this 802.1p priority for an interval as specified in the PFC pause frame. This process is repeated until the congestion is removed.
· If PFC is disabled for the 802.1p priority, the local interface drops the packet.
The relationship between the PFC function and the generic flow control function is shown in Table 9.
Table 9 The relationship between the PFC function and the generic flow control function
flow-control |
priority-flow-control enable |
priority-flow-control no-drop dot1p |
Remarks |
Unconfigurable |
Configured |
Configured |
You cannot enable flow control by using the flow-control command on an interface where PFC is enabled and PFC is enabled for the specified 802.1p priority values. |
Configured |
Configurable |
Unconfigurable |
· On an interface configured with the flow-control command, you can enable PFC, but you cannot enable PFC for specific 802.1p priorities. · Enabling both generic flow control and PFC on an interface disables the interface from sending common or PFC pause frames to inform the peer of congestion conditions. However, the interface can still handle common and PFC pause frames from the peer. |
When you configure PFC, follow these guidelines:
· As a best practice to ensure correct operations of IRF and other protocols, do not enable PFC for 802.1p priorities 0, 6, and 7.
· Make the same PFC configuration on all interfaces that traffic travels through.
For more information about the 802.1p priority, priority trust mode, and port priority, see ACL and QoS Configuration Guide.
Examples
# Configure FortyGigE 1/0/1 to automatically negotiate with the peer interface to enable PFC, and enable PFC for 802.1p priority 5.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] priority-flow-control auto
[Sysname-FortyGigE1/0/1] priority-flow-control no-drop dot1p 5
Related commands
· priority-flow-control
· flow-control
· flow-control receive enable
reset counters interface
Use reset counters interface to clear the Ethernet interface statistics.
Syntax
reset counters interface [ interface-type [ interface-number ] ]
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
interface-type: Specifies an interface type.
interface-number: Specifies an interface number.
Usage guidelines
Before collecting traffic statistics for a specific period of time on an interface, clear the old statistics first.
If no interface type is specified, this command clears statistics for all interfaces.
If only the interface type is specified, this command clears statistics for all interfaces of that type.
If both the interface type and the interface number are specified, this command clears statistics for the specified interface.
Examples
# Clear the statistics of FortyGigE 1/0/1.
<Sysname> reset counters interface fortygige 1/0/1
Related commands
· display interface
· display counters interface
· display counters rate interface
reset ethernet statistics
Use reset ethernet statistics to clear the Ethernet module statistics.
Syntax
In standalone mode:
reset ethernet statistics slot slot-number
In IRF mode:
reset ethernet statistics chassis chassis-number slot slot-number
Views
User view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
slot slot-number: Clears the Ethernet module statistics on the specified card. The slot-number argument represents the number of the slot that houses the card. (In standalone mode.)
chassis chassis-number slot slot-number: Clears the Ethernet module statistics on the specified card of the specified IRF member device. The chassis-number argument represents the ID of the IRF member device. The slot-number argument represents the number of the slot that houses the card. (In IRF mode.)
Examples
# (In standalone mode.) Clear the Ethernet module statistics on slot 6.
<Sysname> reset ethernet statistics slot 6
# (In IRF mode.) Clear the Ethernet module statistics on the card in slot 1 of IRF member device 1.
<Sysname> reset ethernet statistics chassis 1 slot 1
Related commands
display ethernet statistics
reset packet-drop interface
Use reset packet-drop interface to clear the dropped packet statistics on an interface or multiple interfaces.
Syntax
reset packet-drop interface [ interface-type [ interface-number ] ]
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
interface-type: Specify an interface type. If you do not specify an interface type, this command clears dropped packet statistics on all the interfaces on the device.
interface-number: Specify an interface number. If you do not specify this argument, this command clears dropped packet statistics on all interfaces of the specified type.
Examples
# Clear dropped packet statistics on FortyGigE 1/0/1.
<Sysname> reset packet-drop interface fortygige1/0/1
# Clear dropped packet statistics on all interfaces.
<Sysname> reset packet-drop interface
Related commands
display packet-drop
shutdown
Use shutdown to shut down an Ethernet interface or subinterface.
Use undo shutdown to bring up an Ethernet interface or subinterface.
Syntax
shutdown
undo shutdown
Default
Ethernet interfaces are in up state.
Views
Ethernet interface view, Layer 3 Ethernet subinterface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
You might need to shut down and then bring up an Ethernet interface to make some interface configurations take effect.
Examples
# Shut down and then bring up FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] shutdown
[Sysname-FortyGigE1/0/1] undo shutdown
# Shut down and then bring up FortyGigE 1/0/1.1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1.1
[Sysname-FortyGigE1/0/1.1] shutdown
[Sysname-FortyGigE1/0/1.1] undo shutdown
speed
Use speed to set the speed of an Ethernet interface.
Use undo speed to restore the default.
Syntax
speed { 10 | 100 | 1000 | 10000 | 40000 | 100000 | auto }
undo speed
Default
100-GE CXP interfaces and 100-GE CFP2 interfaces operate at 100 Gbps, and other Ethernet interfaces automatically negotiate a speed with the peer.
Views
Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Parameters
10: Sets the interface speed to 10 Mbps.
100: Sets the interface speed to 100 Mbps.
1000: Sets the interface speed to 1000 Mbps.
10000: Sets the interface speed to 10000 Mbps.
40000: Sets the interface speed to 40000 Mbps.
100000: Sets the interface speed to 100 Gbps.
auto: Enables the interface to negotiate a speed with its peer.
Usage guidelines
For a copper port, use the speed command to set its speed to match the rate of the remote end.
For a fiber port, use the speed command to set its speed to match the rate of a transceiver module.
Support for the keywords varies by interface type. For more information, execute the speed ? command in interface view.
Examples
# Configure FortyGigE 1/0/1 to autonegotiate the speed.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] speed auto
Related commands
speed auto
using fortygige
Use using fortygige to combine four 10-GE breakout interfaces that are split from a 40-GE QSFP+ interface into a 40-GE interface.
Use undo using fortygige to cancel the configuration.
Syntax
using fortygige
undo using fortygige
Default
A 40-GE interface is not split and operates as a single interface.
Views
10-GE breakout interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
If you need higher bandwidth, you can combine four 10-GE breakout interfaces that are split from a 40-GE interface into a 40-GE interface. To make this command take effect on the four 10-GE breakout interfaces, execute this command on only one of the 10-GE breakout interfaces.
After you configure this command on a 10-GE breakout interface, reboot the device. The system deletes the four 10-GE breakout interfaces and creates the 40-GE interface.
Before rebooting a switch configured with this command, save the combining configuration even if the switch is an IRF member switch.
Examples
# Combine 10-GE breakout interfaces Ten-GigabitEthernet 1/0/16:1 through Ten-GigabitEthernet 1/0/16:4 into a 40-GE interface.
<System> system-view
[System] interface ten-gigabitethernet1/0/16:1
[System-Ten-GigabitEthernet1/0/16:1] using fortygige
The interfaces Ten-GigabitEthernet1/0/16:1 through Ten-GigabitEthernet1/0/16:4 will be deleted. Continue? [Y/N]:y
Reboot line card to make the configuration take effect.
Related commands
using tengige
using tengige
Use using tengige to split a 40-GE interface into four 10-GE breakout interfaces.
Use undo using tengige to cancel the configuration.
Syntax
using tengige
undo using tengige
Default
A 40-GE interface is not split and operates as a single interface.
Views
40-GE interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
To improve port density, reduce costs, and improve network flexibility, you can split a 40-GE interface into four 10-GE breakout interfaces.
For example, you can split a 40-GE interface FortyGigE 1/0/1 into four 10-GE breakout interfaces Ten-GigabitEthernet 1/0/1:1 through Ten-GigabitEthernet 1/0/1:4.
The 10-GE breakout interfaces support the same configuration and attributes as common 10-GE interfaces, except that they are numbered differently.
After you configure this command on a 40-GE interface, reboot the device. The system deletes the 40-GE interface and creates the four 10-GE breakout interfaces.
Before rebooting a switch configured with this command, save the splitting configuration even if the switch is an IRF member switch.
Examples
# Split 40-GE interface FortyGigE 1/0/1 into four 10-GE breakout interfaces.
<System> system-view
[System] interface fortygige 1/0/1
[System-FortyGigE1/0/1] using tengige
The interface FortyGigE1/0/1 will be deleted. Continue? [Y/N]:y
Reboot line card to make the configuration take effect.
Related commands
using fortygige
virtual-cable-test
IMPORTANT: Fiber ports do not support this command. |
Use virtual-cable-test to test the cable connection of an Ethernet interface and display the test result.
Syntax
virtual-cable-test
Views
Layer 2 Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
If the link of an Ethernet interface is up, testing its cable connection will cause the link to go down and then up.
The test result is for reference only. The cable length detection error is up to 5 meters (16 ft).
If a test item is not available, a hyphen (-) is displayed.
Examples
# Test the cable connection of Ten-GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] virtual-cable-test
Cable status: abnormal(open), 140 metre(s)
Pair Impedance mismatch: -
Pair skew: - ns
Pair swap: -
Pair polarity: -
Insertion loss: - db
Return loss: - db
Near-end crosstalk: - db
Table 10 Command output
Field |
Description |
Cable status |
Cable status: · normal—The cable is in good condition. · abnormal—The cable is abnormal. · abnormal (open)—An open circuit is detected. · abnormal (short)—A short circuit is detected. · failure—The test failed. |
n metres |
If the cable connection is working correctly, this field displays the total length of the cable. If the cable connection fails, this field displays the length from the local port to the faulty point. |
Layer 2 Ethernet interface commands
broadcast-suppression
Use broadcast-suppression to enable broadcast suppression and set the broadcast suppression threshold.
Use undo broadcast-suppression to restore the default.
Syntax
broadcast-suppression { ratio | pps max-pps | kbps max-kbps }
undo broadcast-suppression
Default
Ethernet interfaces do not suppress broadcast traffic.
Views
Layer 2 Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Parameters
ratio: Sets the broadcast suppression threshold as a percentage of the maximum interface rate. The value range for this argument is 0 to 100. The smaller the percentage, the less broadcast traffic is allowed to pass through.
pps max-pps: Specifies the maximum number of broadcast packets that the interface can forward per second. The value range for the max-pps argument (in pps) is 0 to 1.4881 × the maximum interface rate. For example, the value range for this argument is 0 to 59524000 on a 40-GE interface.
kbps max-kbps: Specifies the maximum number of kilobits of broadcast traffic that the Ethernet interface can forward per second. The value range for this argument (in kbps) is 0 to the maximum interface rate.
Usage guidelines
You can use the broadcast storm suppression function to limit the size of broadcast traffic on an interface. When the broadcast traffic on the interface exceeds this threshold, the system drops packets until the traffic drops below this threshold.
Both storm-constrain and broadcast-suppression can suppress broadcast storm on a port. The storm-constrain command uses software to suppress broadcast traffic, and it affects the device performance to a certain extent. The broadcast-suppression command uses the chip to physically suppress broadcast traffic, and it has less influence on the device performance than the storm-constrain command. Do not configure the storm constrain command and the broadcast-suppression command at the same time. Otherwise, the traffic suppression result is not determined.
When you configure the suppression threshold in kbps, the actual suppression threshold might be different from the configured one as follows:
· If the configured value is smaller than 64, the value of 64 takes effect.
· If the configured value is greater than 64 but not an integer multiple of 64, the integer multiple of 64 that is greater than and closest to the configured value takes effect.
To determine the suppression threshold that takes effect, see the prompts on the device.
Examples
# Set the broadcast suppression threshold to 10000 kbps on FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] broadcast-suppression kbps 10000
The actual value is 10048 on port FortyGigE1/0/1 currently.
The output shows the configured threshold is 10000 kbps, but the value that takes effect is 10048 kbps (157 times of 64), because the chip only supports step 64.
Related commands
· multicast-suppression
· unicast-suppression
display storm-constrain
Use display storm-constrain to display storm control settings and statistics.
Syntax
display storm-constrain [ broadcast | multicast | unicast ] [ interface interface-type interface-number ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
broadcast: Displays broadcast storm control settings and statistics.
multicast: Displays multicast storm control settings and statistics.
unicast: Displays unknown unicast storm control settings and statistics.
interface interface-type interface-number: Specifies an interface by its type and number.
Usage guidelines
If you specify no argument or keyword, this command displays all storm control settings on all storm control-enabled interfaces.
Examples
# Display the storm control settings on all storm control-enabled ports.
<Sysname> display storm-constrain
Abbreviation: BC - broadcast; MC - multicast; UC - unicast
FW – forwarding
Flow Statistic Interval: 5 (in seconds)
Port Type Lower Upper Unit CtrlMode Status Trap Log SwitchNum
---------------------------------------------------------------------------------------
FGE1/0/1 BC 12345 23456 pps block FW on off 0
FGE1/0/2 MC 43 100 ratio block block on off 1
FGE1/0/4 UC 200 300 kbps shutdown normal off on 33
FGE1/0/5 BC 500 1500 pps N/A normal on on 0
Table 11 Command output
Field |
Description |
Flow Statistic Interval |
Traffic polling interval (in seconds) of the storm control module. |
Port |
Abbreviated port name. |
Type |
Type of traffic subjected to storm control: · BC—Broadcast packets. · MC—Multicast packets. · UC—Unknown unicast packets. |
Lower |
Lower storm control threshold, in pps, kbps, or percentage. |
Upper |
Upper storm control threshold, in pps, kbps, or percentage. |
Unit |
Storm control threshold unit: · pps. · kbps. · percentage. |
CtrlMode |
Protective action (block or shutdown) taken on the port when the upper threshold is reached. N/A indicates that no protective action is configured. |
Status |
Packet forwarding status: · FW—The port is forwarding traffic correctly. · shutdown—The port has been shut down. · block—The port drops the type of traffic. |
Trap |
Status of the storm control threshold event trap switch: · on—The port sends threshold event traps. · off—The port does not send threshold event traps. |
Log |
Status of the storm control threshold event log switch: · on—The port sends threshold event log messages. · off—The port does not send threshold event log messages. |
SwitchNum |
Number of forwarding state changes of the interface. When the SwitchNum count reaches 65535, it resets automatically. |
mdix-mode
IMPORTANT: Fiber ports do not support this command. |
Use mdix-mode to set the Medium Dependent Interface Cross-Over (MDIX) mode of an Ethernet interface.
Use undo mdix-mode to restore the default.
Syntax
mdix-mode { automdix | mdi | mdix }
undo mdix-mode
Default
Ethernet interfaces operate in automdix mode.
Views
Layer 2 Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Parameters
automdix: Configures the interface to negotiate pin roles with its peer.
mdi: Specifies pins 1 and 2 as transmit pins and pins 3 and 6 as receive pins.
mdix: Specifies pins 1 and 2 as receive pins and pins 3 and 6 as transmit pins.
Examples
# Set the MDIX mode for Ten-GigabitEthernet 1/0/1 to mdi.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] mdix-mode mdi
multicast-suppression
Use multicast-suppression to enable multicast storm suppression and set the multicast storm suppression threshold.
Use undo multicast-suppression to restore the default.
Syntax
multicast-suppression { ratio | pps max-pps | kbps max-kbps }
undo multicast-suppression
Default
Ethernet interfaces do not suppress multicast traffic.
Views
Layer 2 Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Parameters
ratio: Sets the multicast suppression threshold as a percentage of the maximum interface rate. The value range for this argument (in percentage) is 0 to 100. The smaller the percentage, the less multicast traffic is allowed to pass through.
pps max-pps: Specifies the maximum number of multicast packets that the interface can forward per second. The value range for the max-pps argument (in pps) is 0 to 1.4881 × the maximum interface rate. For example, the value range for this argument is 0 to 59524000 on a 40-GE interface.
kbps max-kbps: Specifies the maximum number of kilobits of multicast traffic that the Ethernet interface can forward per second. The value range for this argument (in kbps) is 0 to the maximum interface rate.
Usage guidelines
You can use the multicast storm suppression function to limit the size of multicast traffic on an interface. When the multicast traffic on the interface exceeds this threshold, the system drops packets until the traffic drops below this threshold.
Both the storm-constrain and multicast-suppression can suppress multicast storm on a port. The storm-constrain command uses software to suppress traffic, and it affects the device performance to a certain extent. The multicast-suppression command uses the chip to physically suppress multicast traffic, and it has less influence on the device performance than the storm-constrain command. Do not configure the storm constrain command and the multicast-suppression command at the same time. Otherwise, the traffic suppression result is not determined.
When you configure the suppression threshold in kbps, the actual suppression threshold might be different from the configured one as follows:
· If the configured value is smaller than 64, the value of 64 takes effect.
· If the configured value is greater than 64 but not an integer multiple of 64, the integer multiple of 64 that is greater than and closest to the configured value takes effect.
To determine the suppression threshold that takes effect, see the prompts on the device.
Examples
# Set the multicast storm suppression threshold to 10000 kbps on FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] multicast-suppression kbps 10000
The actual value is 10048 on port FortyGigE1/0/1 currently.
The output shows the configured threshold is 10000 kbps, but the value that takes effect is 10048 kbps (157 times of 64), because the chip only supports step 64.
Related commands
· broadcast-suppression
· unicast-suppression
port up-mode
CAUTION: The following operations on a fiber port will cause link updown events before the port finally stays up: · Configure both the port up-mode command and the speed or duplex command. · Install or remove fiber links or transceiver modules after you forcibly bring up the fiber port. |
IMPORTANT: Copper ports do not support this command. |
Use port up-mode to forcibly bring up a fiber port.
Use undo port up-mode to restore the default.
Syntax
port up-mode
undo port up-mode
Default
A fiber port is not forcibly brought up, and the physical state of a fiber port depends on the physical state of the fibers.
Views
Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
This command forcibly brings up a fiber port and enables the port to forward packets unidirectionally over a single link. In this way, transmission links are well utilized.
This command is applicable only to fiber port that operates in bridge mode.
The port up-mode, shutdown, and loopback commands are exclusive with each other.
A GE fiber port forcibly brought up cannot correctly forward traffic if it is installed with a fiber-to-copper converter, 100/1000-Mbps transceiver module, or 100-Mbps transceiver module. To solve the problem, use the undo port up-mode command on the fiber port.
Examples
# Forcibly bring up the fiber port FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] port up-mode
storm-constrain
Use storm-constrain to enable broadcast, multicast, or unknown unicast storm control on an Ethernet port.
Use undo storm-constrain to disable storm control.
Syntax
storm-constrain { broadcast | multicast | unicast } { pps | kbps | ratio } upperlimit lowerlimit
undo storm-constrain { all | broadcast | multicast | unicast }
Default
Traffic storm control is disabled.
Views
Layer 2 Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Parameters
all: Disables storm control for all types of packets: broadcast, multicast, and unknown unicast.
broadcast: Enables or disables broadcast storm control.
multicast: Enables or disables multicast storm control.
unicast: Enables or disables unknown unicast storm control.
pps: Sets storm control thresholds in pps.
kbps: Sets storm control thresholds in kbps.
ratio: Sets storm control thresholds as a percentage of the transmission capacity of the interface.
upperlimit: Sets the upper threshold, in pps, kbps, or percentage.
lowerlimit: Sets the lower threshold, in pps, kbps, or percentage.
Usage guidelines
After you configure this command, the device collects statistics for a particular type of traffic at the interval configured by using the storm-constrain interval command. When a particular type of traffic exceeds its upper threshold, the interface takes the action configured by using the storm-constrain control command.
Either of the storm-constrain, broadcast-suppression, multicast-suppression, and unicast-suppression commands can suppress storm on a port. The storm-constrain command uses software to suppress traffic, and affects the device performance to a certain extent. The broadcast-suppression, multicast-suppression, and unicast-suppression commands use the chip to physically suppress traffic, and have less influence on the device performance compared with the storm-constrain command. On the same type of traffic, do not configure the storm constrain command and either of the broadcast-suppression, multicast-suppression, and unicast-suppression commands at the same time. Otherwise, the traffic suppression result is not determined.
When configuring this command, make sure upperlimit is greater than lowerlimit.
Examples
# Enable unknown unicast storm control on FortyGigE 1/0/1, setting the upper and lower thresholds to 200 pps and 150 pps.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] storm-constrain unicast pps 200 150
# Enable broadcast storm control on FortyGigE 1/0/2, setting the upper and lower thresholds to 2000 kbps and 1500 kbps.
<Sysname> system-view
[Sysname] interface fortygige 1/0/2
[Sysname-FortyGigE1/0/2] storm-constrain broadcast kbps 2000 1500
# Enable multicast storm control on FortyGigE 1/0/3, setting the upper and lower thresholds to 80% and 15%.
<Sysname> system-view
[Sysname] interface fortygige 1/0/3
[Sysname-FortyGigE1/0/3] storm-constrain multicast ratio 80 15
Related commands
· storm-constrain control
· storm-constrain interval
storm-constrain control
Use storm-constrain control to set the protective action to take on an Ethernet interface when a type of traffic (unknown unicast, multicast, or broadcast) exceeds the upper storm control threshold.
Use undo storm-constrain control to restore the default.
Syntax
storm-constrain control { block | shutdown }
undo storm-constrain control
Default
No action is taken on an Ethernet interface when a type of traffic exceeds the upper storm control threshold.
Views
Layer 2 Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Parameters
block: Blocks this type of traffic while forwarding other types of traffic. Even though the interface does not forward the blocked traffic, it still counts the traffic. When the blocked traffic is detected dropping below the lower threshold, the port begins to forward the traffic.
shutdown: Goes down automatically. The interface goes down automatically and stops forwarding traffic. When the blocked traffic is detected dropping below the lower threshold, the port does not forward the traffic. To bring up the interface, use the undo shutdown command or disable the storm control function.
Examples
# Configure FortyGigE 1/0/1 to block the traffic detected exceeding the upper storm control threshold.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] storm-constrain control block
Related commands
· storm-constrain
· storm-constrain control
storm-constrain enable log
Use storm-constrain enable log to enable an Ethernet interface to log storm control threshold events.
Use undo storm-constrain enable log to disable log sending.
Syntax
storm-constrain enable log
undo storm-constrain enable log
Default
An interface generates logs when monitored traffic exceeds the upper threshold or falls below the lower threshold.
Views
Layer 2 Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Examples
# Enable FortyGigE 1/0/1 to generate logs when it detects storm control threshold events.
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] storm-constrain enable log
storm-constrain enable trap
Use storm-constrain enable trap to enable an Ethernet interface to send storm control threshold event traps.
Use undo storm-constrain enable trap to disable trap sending.
Syntax
storm-constrain enable trap
undo storm-constrain enable trap
Default
An interface sends out traps when monitored traffic exceeds the upper threshold or falls below the lower threshold.
Views
Layer 2 Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Examples
# Enable FortyGigE 1/0/1 to send traps when it detects storm control threshold events.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] storm-constrain enable trap
storm-constrain interval
Use storm-constrain interval to set the traffic polling interval of the storm control module.
Use undo storm-constrain interval to restore the default.
Syntax
storm-constrain interval seconds
undo storm-constrain interval
Default
The storm control module polls traffic statistics every 10 seconds.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
seconds: Sets the traffic polling interval of the storm control module. The value range is 1 to 300 seconds.
Usage guidelines
The interval set by the storm-constrain interval command is specific to storm control. To set the statistics polling interval of an interface, use the flow-interval command.
For network stability, use the default or a higher polling interval.
Examples
# Set the traffic statistics polling interval of the storm control module to 60 seconds.
<Sysname> system-view
[Sysname] storm-constrain interval 60
Related commands
· storm-constrain
· storm-constrain control
unicast-suppression
Use unicast-suppression to enable unicast storm suppression and set the unicast storm suppression threshold.
Use undo unicast-suppression to restore the default.
Syntax
unicast-suppression { ratio | pps max-pps | kbps max-kbps }
undo unicast-suppression
Default
Ethernet interfaces do not suppress unicast traffic.
Views
Layer 2 Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Parameters
ratio: Sets the unicast suppression threshold as a percentage of the maximum interface rate. The value range for this argument (in percentage) is 0 to 100. The smaller the percentage, the less unicast traffic is allowed to pass through.
pps max-pps: Specifies the maximum number of unicast packets that the interface can forward per second. The value range for the max-pps argument (in pps) is 0 to 1.4881 × the maximum interface rate. For example, the value range for the argument is 0 to 59524000 on a 40-GE interface.
kbps max-kbps: Specifies the maximum number of kilobits of unicast traffic that the Ethernet interface can forward per second. The value range for this argument (in kbps) is 0 to the maximum interface rate.
Usage guidelines
You can use the unicast storm suppression function to limit the size of unicast traffic on an interface. When the unicast traffic on the interface exceeds this threshold, the system discards packets until the unicast traffic drops below this threshold.
Both the storm-constrain and unicast-suppression can suppress unicast storm on a port. The storm-constrain command uses software to suppress unicast traffic, and it affects the device performance to a certain extent. The unicast-suppression command use the chip to physically suppress unicast traffic, and it has less influence on the device performance than the storm-constrain command. Do not configure the storm constrain command and the unicast-suppression command at the same time. Otherwise, the unicast traffic suppression result is not determined.
When you configure the suppression threshold in kbps, the actual suppression threshold might be different from the configured one as follows:
· If the configured value is smaller than 64, the value of 64 takes effect.
· If the configured value is greater than 64 but not an integer multiple of 64, the integer multiple of 64 that is greater than and closest to the configured value takes effect.
To determine the suppression threshold that takes effect, see the prompts on the device.
Examples
# Set the unicast storm suppression threshold to 10000 kbps on FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] unicast-suppression kbps 10000
The actual value is 10048 on port FortyGigE1/0/1 currently.
The output shows the configured threshold is 10000 kbps, but the value that takes effect is 10048 kbps (157 times of 64), because the chip only supports step 64.
Related commands
· broadcast-suppression
Layer 3 Ethernet interface or subinterface commands
mtu
Use mtu to set the MTU for an Ethernet interface or subinterface.
Use undo mtu to restore the default.
Syntax
mtu size
undo mtu
Default
The MTU for an Ethernet interface or subinterface is 1500 bytes.
Views
Layer 3 Ethernet interface view, Layer 3 Ethernet subinterface view
Predefined user roles
network-admin
mdc-admin
Parameters
size: Sets the MTU in bytes. For versions earlier than Release 1138P01, the value range for this argument is 46 to 1560 bytes. For Release 1138P01 and later versions, the value range for this argument is 46 to 9008 bytes.
Usage guidelines
The ip mtu or mtu command takes effect only on packets sent to the CPU for software forwarding, including packets destined to or sourced from the interface.
If both the mtu and ip mtu commands are configured on an interface, the MTU set by the ip mtu command is used for fragmentation. Configure an appropriate MTU to avoid packet fragmentation. For more information about the ip mtu command, see Layer 3—IP Services Command Reference.
Examples
# Set the MTU to 1492 bytes for the Layer 3 Ethernet interface FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] mtu 1492
Loopback, null, and inloopback interface commands
bandwidth
Use bandwidth to configure the expected bandwidth of an interface.
Use undo bandwidth to restore the default.
Syntax
bandwidth bandwidth-value
undo bandwidth
Default
The expected bandwidth of a loopback interface is 0 kbps.
Views
Loopback interface view
Predefined user roles
network-admin
mdc-admin
Parameters
bandwidth-value: Specifies the expected bandwidth in the range of 1 to 400000000 kbps.
Usage guidelines
The expected bandwidth of an interface affects the following items:
· Bandwidth assignment with CBQ. For more information, see ACL and QoS Configuration Guide.
· Link costs in OSPF and IS-IS. For more information, see Layer 3—IP Routing Configuration Guide.
Examples
# Set the expected bandwidth of Loopback 1 to 1000 kbps.
<Sysname> system-view
[Sysname] interface loopback 1
[Sysname-LoopBack1] bandwidth 1000
default
Use default to restore the default settings for a loopback or null interface.
Syntax
default
Views
Loopback interface view, null interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
CAUTION: The default command might interrupt ongoing network services. Make sure you are fully aware of the impacts of this command before using it on a live network. |
This command might fail to restore the default settings for some commands for reasons such as command dependencies and system restrictions. Use the display this command in interface view to identify these commands, and then use their undo forms or follow the command reference to individually restore their default settings. If your restoration attempt still fails, follow the error message instructions to resolve the problem.
Examples
# Restore the default settings for interface loopback 1.
<Sysname> system-view
[Sysname] interface loopback 1
[Sysname-LoopBack1] default
description
Use description to set a description for an interface.
Use undo description to restore the default.
Syntax
description text
undo description
Default
The description of a loopback or null interface is the interface name plus Interface (for example, LoopBack1 Interface).
Views
Loopback interface view, null interface view
Predefined user roles
network-admin
mdc-admin
Parameters
text: Specifies an interface description, a string of 1 to 255 characters.
Usage guidelines
Configure a description for an interface for easy identification and management purposes.
You can use the display interface command to view the configured description.
Examples
# Set the description to for RouterID for interface loopback 1.
<Sysname> system-view
[Sysname] interface loopback 1
[Sysname-LoopBack1] description for RouterID
display interface inloopback
Use display interface inloopback to display information about the inloopback interface.
Syntax
display interface [ inloopback [ 0 ] ] [ brief [ description ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
0: Specifies interface Inloopback 0.
brief: Displays brief interface information. If you do not specify this keyword, the command displays detailed interface information.
description: Displays complete interface descriptions. If you do not specify this keyword, the command displays only the first 27 characters of interface descriptions. The description of an inloopback interface is always InLoopBack0 Interface and cannot be configured.
Usage guidelines
If the inloopback keyword is not specified, the command displays information about all interfaces of the device.
If the inloopback keyword is specified but the 0 keyword is not specified, the command displays information about interface Inloopback 0. This is because the device has only one inloopback interface Inloopback 0.
Examples
# Display detailed information about interface Inloopback 0.
<Sysname> display interface inloopback 0
InLoopBack0
Current state: UP
Line protocol state: UP (spoofing)
Description: InLoopBack0 Interface
Bandwidth: 0kbps
Maximum transmission unit: 1536
Internet protocol processing: Disabled
Physical: InLoopBack
Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec
Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec
Input: 0 packets, 0 bytes, 0 drops
Output: 0 packets, 0 bytes, 0 drops
Table 12 Command output
Field |
Description |
Current state |
Physical layer state of the interface, which is always UP, meaning that the inloopback interface can receive and transmit packets. |
Line protocol state |
Data link layer protocol state of the interface, which is always UP (spoofing). UP (spoofing) means that the data link layer protocol state of the interface is up, but the link is an on-demand link or is not present. |
Description |
Description string of the interface, which is always InLoopBack0 Interface and cannot be configured. |
Bandwidth |
Expected bandwidth of the interface. |
Maximum transmission unit |
MTU of the interface, which is always 1536 and cannot be configured |
Internet protocol processing: Disabled |
IP address configuration is disabled on the inloopback interface. |
Physical: InLoopBack |
The physical type of the interface is inloopback. |
Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec |
Average input rate during the last 300 seconds: · bytes/sec—Average number of bytes received per second. · bits/sec—Average number of bits received per second. · packets/sec—Average number of packets received per second. |
Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec |
Average output rate over the last 300 seconds: · bytes/sec—Average number of bytes sent per second. · bits/sec—Average number of bits sent per second. · packets/sec—Average number of packets sent per second. |
Input: 0 packets, 0 bytes, 0 drops |
Total number and size (in bytes) of incoming packets of the interface and the number of dropped packets. |
Output: 0 packets, 0 bytes, 0 drops |
Total number and size (in bytes) of outgoing packets of the interface and the number of dropped packets. |
# Display brief information about interface Inloopback 0.
<Sysname> display interface inloopback 0 brief
Brief information on interfaces in route mode:
Link: ADM - administratively down; Stby - standby
Protocol: (s) - spoofing
Interface Link Protocol Primary IP Description
InLoop0 UP UP(s) --
# Display brief information about interface Inloopback 0, including the full description of the inloopback interface.
<Sysname> display interface inloopback 0 brief description
Brief information on interfaces in route mode:
Link: ADM - administratively down; Stby - standby
Protocol: (s) - spoofing
Interface Link Protocol Primary IP Description
InLoop0 UP UP(s) --
Table 13 Command output
Field |
Description |
Brief information on interfaces in route mode |
Brief information about the inloopback interface. |
Link: ADM - administratively down; Stby - standby |
Explains the Link field values: · ADM—The interface has been shut down by the network administrator. To recover its physical layer state, run the undo shutdown command. · Stby—The interface is a standby interface. |
Protocol: (s) - spoofing |
Explains the Protocol field value. (s) represents spoofing. If the data link layer protocol of an interface is up, but its link is an on-demand link or is not present, the Protocol field displays UP(s). This attribute is typical of interface Null 0, Inloopback 0, and loopback interfaces. |
Interface |
Interface name. |
Link |
Physical layer state of the interface, which is always UP. |
Protocol |
Data link layer protocol state of the interface, which is always UP(s). |
Primary IP |
IP address of the interface. Because inloopback interfaces do not support CLI configuration, this field does not display a value. |
Description |
Interface description configured by using the description command. Because inloopback interfaces do not support CLI configuration, this field does not display a value. |
display interface loopback
Use display interface loopback to display information about the specified or all existing loopback interfaces.
Syntax
display interface [ loopback ] [ brief [ down ] ]
display interface [ loopback [ interface-number ] ] [ brief [ description ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
interface-number: Specifies a loopback interface by its number, which can be the number of any existing loopback interface. If you do not specify this argument, the command displays information about all existing loopback interfaces on the device.
brief: Displays brief interface information. If you do not specify this keyword, the command displays detailed interface information.
down: Displays information about interfaces in down state and the causes. Without this keyword, the command displays information about interfaces in all states.
description: Displays complete interface descriptions. If you do not specify this keyword, the command displays only the first 27 characters of interface descriptions.
Usage guidelines
This command is supported only after a loopback interface is created.
If the loopback keyword is not specified, the command displays information about all interfaces of the device.
If the loopback keyword is specified but the interface-number argument is not specified, the command displays information about all existing loopback interfaces.
Examples
# Display detailed information about interface loopback 0.
<Sysname> display interface loopback 0
LoopBack0
Current state: UP
Line protocol state: UP (spoofing)
Description: LoopBack0 Interface
Bandwidth: 0kbps
Maximum transmission unit: 1536
Internet protocol processing: Disabled
Physical: Loopback
Last clearing of counters: Never
Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec
Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec
Input: 0 packets, 0 bytes, 0 drops
Output: 0 packets, 0 bytes, 0 drops
Field |
Description |
Current state |
Physical layer state of the loopback interface: · UP—The loopback interface can receive and transmit packets. · Administratively DOWN—The interface was manually shut down by using the shutdown command. |
Line protocol state |
Data link layer protocol state of the interface. UP (spoofing) means that the data link layer protocol state of the interface is up, but the link is an on-demand link or is not present. |
Description |
Description string of the interface. |
Bandwidth |
Expected bandwidth of the interface. |
Maximum transmission unit |
MTU of the interface. |
Internet protocol processing: Disabled |
Indicates that the interface cannot process Layer 3 packets (displayed when the interface is not configured with an IP address). |
Internet address |
Primary IP address of the interface (displayed when the interface is configured with a primary IP address). |
Physical: Loopback |
The physical type of the interface is loopback. |
Last clearing of counters |
Time when statistics on the logical interface were last cleared by using the reset counters interface command. If the statistics of the interface have never been cleared by using the reset counters interface command since the device started, this field displays Never. |
Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec |
Average input rate during the last 300 seconds: · bytes/sec—Average number of bytes received per second. · bits/sec—Average number of bits received per second. · packets/sec—Average number of packets received per second. |
Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec |
Average output rate over the last 300 seconds: · bytes/sec—Average number of bytes sent per second. · bits/sec—Average number of bits sent per second. · packets/sec—Average number of packets sent per second. |
Input: 0 packets, 0 bytes, 0 drops |
Total number and size (in bytes) of incoming packets of the interface and the number of dropped packets. |
Output: 0 packets, 0 bytes, 0 drops |
Total number and size (in bytes) of outgoing packets of the interface and the number of dropped packets. |
# Display brief information about all loopback interfaces.
<Sysname> display interface loopback brief
Brief information on interfaces in route mode:
Link: ADM - administratively down; Stby - standby
Protocol: (s) - spoofing
Interface Link Protocol Primary IP Description
Loop1 UP UP(s) -- aaaaaaaaaaaaaaaaaaaaaaaaaaa
# Display brief information about all existing loopback interfaces, including the full description of each loopback interface.
<Sysname> display interface loopback brief description
Brief information on interfaces in route mode:
Link: ADM - administratively down; Stby - standby
Protocol: (s) - spoofing
Interface Link Protocol Primary IP Description
Loop1 UP UP(s) -- aaaaaaaaaaaaaaaaaaaaaaaaaaaaa
Aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
# Display information about all loopback interfaces in down state and the causes.
<Sysname> display interface loopback brief down
Brief information on interfaces in route mode:
Link: ADM - administratively down; Stby - standby
Interface Link Cause
Loop1 ADM Administratively
Field |
Description |
Brief information on interfaces in route mode: |
Brief information about loopback interfaces. |
Link: ADM - administratively down; Stby - standby |
Explains the Link field values: · ADM—Represents administratively down. The interface has been shut down by the network administrator. To recover its physical layer state, run the undo shutdown command. · Stby—Represents standby. The interface is a standby interface. To view the primary interface information, use the display standby state command in High Availability Command Reference. |
Protocol: (s) - spoofing |
Explains the Protocol field value. (s) represents spoofing. If the data link layer protocol of an interface is up, but its link is an on-demand link or is not present, the Protocol field displays UP(s). This attribute is typical of interface Null 0, Inloopback 0, and loopback interfaces. |
Interface |
Interface name. |
Link |
Physical layer state of the interface: · UP—The interface is up. · DOWN—The interface is physically down. · ADM—The interface has been administratively shut down. To recover its physical state, run the undo shutdown command. · Stby—The interface is a standby interface. |
Protocol |
Data link layer protocol state of the interface. |
Description |
Interface description configured by using the description command. If the description keyword is not specified in the display interface brief command, the Description field allows a maximum of 27 characters. If the description keyword is specified in the display interface brief command, the field displays the full interface description. |
Cause |
Cause of the interface down event. If the interface has been shut down by using the shutdown command, this field displays Administratively. To restore the physical state of the interface, execute the undo shutdown command. |
Related commands
· interface loopback
· reset counters interface loopback
display interface null
Use display interface null to display information about the null interface.
Syntax
display interface [ null [ 0 ] ] [ brief [ description ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
0: Specifies interface Null 0.
brief: Displays brief interface information. If you do not specify this keyword, the command displays detailed interface information.
description: Displays complete interface descriptions. If you do not specify this keyword, the command displays only the first 27 characters of interface descriptions.
Usage guidelines
If the null keyword is not specified, the command displays information about all interfaces of the device.
If the null keyword is specified but the 0 keyword is not specified, the command displays information about interface Null 0. This is because the device has only one null interface Null 0.
Examples
# Display detailed information about interface Null 0.
<Sysname> display interface null 0
NULL0
Current state: UP
Line protocol state: UP (spoofing)
Description: NULL0 Interface
Bandwidth: 0kbps
Maximum transmission unit: 1500
Internet protocol processing: Disabled
Physical: NULL DEV
Last clearing of counters: Never
Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec
Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec
Input: 0 packets, 0 bytes, 0 drops
Output: 0 packets, 0 bytes, 0 drops
# Display brief information about interface Null 0.
<Sysname> display interface null 0 brief
Brief information on interfaces in route mode:
Link: ADM - administratively down; Stby - standby
Protocol: (s) - spoofing
Interface Link Protocol Primary IP Description
NULL0 UP UP(s) -- aaaaaaaaaaaaaaaaaaaaaaaaaaa
# Display brief information about interface Null 0, including the full description of the null interface.
<Sysname> display interface null 0 brief description
Brief information on interfaces in route mode:
Link: ADM - administratively down; Stby - standby
Protocol: (s) - spoofing
Interface Link Protocol Primary IP Description
NULL0 UP UP(s) -- aaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
For the command output, see Table 14 and Table 15.
Related commands
· interface null
· reset counters interface null
interface loopback
Use interface loopback to create a loopback interface and enter loopback interface view.
Use undo interface loopback to remove a loopback interface.
Syntax
interface loopback interface-number
undo interface loopback interface-number
Default
No loopback interface exists.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
interface-number: Specifies a loopback interface by its number in the range of 0 to 1023.
Usage guidelines
The physical layer state and link layer protocols of a loopback interface are always up unless the loopback interface is manually shut down. You can establish a connection to a loopback interface to do the following:
· Prevent the connection from being affected by the physical state of the interface.
· Improve the reliability of the connection.
For example, you can:
· Configure a loopback interface as the source interface for establishing an FTP connection.
· Use the loopback interface address as the Router ID in BGP.
Examples
# Create interface loopback 1.
<Sysname> system-view
[Sysname] interface loopback 1
interface null
Use interface null to enter null interface view.
Syntax
interface null 0
Default
A device has only one null interface (Null 0), which cannot be created or deleted.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
0: Specifies interface Null 0. The null interface number is always 0.
Examples
# Enter Null 0 interface view.
<Sysname> system-view
[Sysname] interface null 0
reset counters interface loopback
Use reset counters interface loopback to clear the statistics on the specified or all loopback interfaces.
Syntax
reset counters interface loopback [ interface-number ]
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
interface-number: Specifies a loopback interface by its number, which can be the number of any existing loopback interface. If you do not specify the interface-number argument, the command clears the statistics on all loopback interfaces.
Usage guidelines
To determine whether a loopback interface works correctly within a period by collecting the traffic statistics within that period, first use the reset counters interface [ loopback [ interface-number ] ] command to clear the statistics. Then have the interface automatically collect the statistics.
This command is available only if at least one loopback interface has been created.
Examples
# Clear the statistics on loopback interface Loopback 1.
<Sysname> reset counters interface loopback 1
Related commands
display interface loopback
reset counters interface null
Use reset counters interface null to clear the statistics on the null interface.
Syntax
reset counters interface [ null [ 0 ] ]
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
0: Specifies the number of the null interface, which is always 0.
Usage guidelines
To determine whether the null interface works correctly within a period by collecting the traffic statistics within that period, first use the reset counters interface [ null [ 0 ] ] command to clear the statistics. Then have the interface automatically collect the statistics.
Examples
# Clear the statistics on interface Null 0.
<Sysname> reset counters interface null 0
Related commands
display interface null
shutdown
Use shutdown to shut down a loopback interface.
Use undo shutdown to bring up a loopback interface.
Syntax
shutdown
undo shutdown
Default
A loopback interface is up.
Views
Loopback interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
Use the shutdown command with caution, because the command disconnects the connection of the interface and disables the interface from communicating.
Examples
# Shut down interface loopback 1.
<Sysname> system-view
[Sysname] interface loopback 1
[Sysname-LoopBack1] shutdown
Bulk interface configuration commands
display interface range
Use display interface range to display information about interface ranges configured through the interface range name command.
Syntax
display interface range [ name name ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
name name: Specifies an interface range by its name, a case-sensitive string of 1 to 32 characters. If you do not specify an interface range name, this command displays information about all existing interface ranges.
Examples
# Display information about all existing interface ranges configured through the interface range name command.
<Sysname> display interface range
Interface range name t2 FortyGigE1/0/1 FortyGigE1/0/2
Interface range name test FortyGigE1/0/11 FortyGigE1/0/12
The output shows that interfaces FortyGigE 1/0/1 and FortyGigE 1/0/2 are added to interface range named t2, and interfaces FortyGigE 1/0/11 and FortyGigE 1/0/12 are added to interface range named test.
Related commands
interface range name
interface range
Use interface range to create an interface range and enter the interface range view.
Syntax
interface range interface-list
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
interface-list: Specifies an interface list in the format of interface-list = { interface-type interface-number [ to interface-type interface-number ] }&<1-24>. The interface-type interface-number argument specifies an interface by its type and number. &<1-24> indicates that you can specify up to 24 interfaces or interface lists. When you specify the to keyword in interface-type interface-number1 to interface-type interface-number2, the interfaces before and after the to keyword must be on the same interface card. The last-tier value of the interface number before to must not be greater than the one after to, and the values of the other tiers of the interface number before to must be the same as the one after to.
Usage guidelines
Use this command to enter interface range view to bulk configure multiple interfaces with the same feature instead of configuring them one by one. For example, run the shutdown command in interface range view to shut down a range of interfaces.
In interface range view, only the commands supported by the first interface are available. The first interface is specified with the interface range command. To view these commands in the interface range, enter the interface range view, and then enter ? at the prompt.
After a command is executed in interface range view, one of the following situations might occur:
· The system stays in interface range view and displays no error messages. It means that the execution succeeded on all member interfaces in the interface range.
· The system displays an error message and stays in interface range view. It means that the execution failed on member interfaces in the interface range.
¡ If the execution failed on the first member interface in the interface range, the command is not executed on any member interfaces.
¡ If the execution failed on non-first member interfaces, the command takes effect on the other member interfaces.
· The system returns to system view. It means that:
¡ The command is supported in both system view and interface view.
¡ The execution failed on a member interface in interface range view and succeeded in system view.
¡ The command is not executed on the subsequent member interfaces.
You can use the display this command to verify the configuration in interface view of each member interface. In addition, if the configuration in system view is not needed, use the undo form of the command to remove the configuration.
To verify the configuration of the first interface in the interface range, execute the display this command in interface range view.
When you bulk configure interfaces, follow these restrictions and guidelines:
· If you cannot enter the view of an interface by using the interface interface-type interface-number command, do not configure the interface as the first interface in the interface range.
· Do not assign an aggregate interface together with any of its member interfaces to an interface range at the same time. Some commands, after being executed on both an aggregate interface and its member interfaces, can break up the aggregation.
· No limit is set on the maximum number of interfaces in an interface range. The more interfaces in an interface range, the longer the command execution time.
Examples
# Shut down interfaces FortyGigE 1/0/1 through FortyGigE 1/0/24, VLAN interface 2.
<Sysname> system-view
[Sysname] interface range fortygige 1/0/1 to fortygige 1/0/24 vlan-interface 2
[Sysname-if-range] shutdown
interface range name
Use interface range name name interface interface-list to create an interface range, configure a name for the interface range, and enter the interface range view.
Use interface range name name without the interface keyword to enter the view of an interface range with the specified name.
Use undo interface range name to delete the interface range with the specified name.
Syntax
interface range name name [ interface interface-list ]
undo interface range name name
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
name: Specifies an interface range name, a case-sensitive string of 1 to 32 characters.
interface-list: Specifies an interface list in the format of interface-list = { interface-type interface-number [ to interface-type interface-number ] }&<1-24>. The interface-type interface-number argument specifies an interface by its type and number. &<1-24> indicates that you can specify up to 24 interfaces or interface lists. When you specify the to keyword in interface-type interface-number1 to interface-type interface-number2, the interfaces before and after the to keyword must be on the same interface card. The last-tier value of the interface number before to must not be greater than the one after to, and the values of the other tiers of the interface number before to must be the same as the one after to.
Usage guidelines
You can use this command to assign a name to an interface range and can specify this name rather than the interface range to enter the interface range view.
In interface range view, only the commands supported by the first interface are available. The first interface is specified with the interface range command. To view the commands supported by the first interface in the interface range, enter the interface range view and enter a question mark (?) at the command line interface prompt.
After a command is executed in interface range view, one of the following situations might occur:
· The system stays in interface range view and displays no error messages. It means that the execution succeeded on all member interfaces in the interface range.
· The system displays an error message and stays in interface range view. It means that the execution failed on member interfaces in the interface range.
¡ If the execution failed on the first member interface in the interface range, the command is not executed on any member interfaces.
¡ If the execution failed on non-first member interfaces, the command takes effect on the other member interfaces.
· The system returns to system view. It means that:
¡ The command is supported in both system view and interface view.
¡ The execution failed on a member interface in interface range view and succeeded in system view.
¡ The command is not executed on the subsequent member interfaces.
You can use the display this command to verify the configuration in interface view of each member interface. In addition, if the configuration in system view is not needed, use the undo form of the command to remove the configuration.
To verify the configuration of the first interface in the interface range, execute the display this command in interface range view.
To view the member interfaces of an interface range, use the display interface range command.
When you bulk configure interfaces, follow these restrictions and guidelines:
· If you cannot enter the view of an interface by using the interface interface-type interface-number command, do not configure the interface as the first interface in the interface range.
· Do not assign an aggregate interface and any of its member interfaces to an interface range at the same time. Some commands, after being executed on both an aggregate interface and its member interfaces, can break up the aggregation.
· No limit is set on the maximum number of interfaces in an interface range. The more interfaces in an interface range, the longer the command execution time.
· The maximum number of interface range names is only limited by the system resources. As a best practice to guarantee bulk interface configuration performance, configure fewer than 1000 interface range names.
Examples
# Add FortyGigE 1/0/1 through FortyGigE 1/0/12 to interface range named myEthPort, and enter the interface range view.
<Sysname> system-view
[Sysname] interface range name myEthPort interface fortygige 1/0/1 to fortygige 1/0/12
[Sysname-if-range-myEthPort]
# Enter the view of interface range named myEthPort.
<Sysname> system-view
[Sysname] interface range name myEthPort
[Sysname-if-range-myEthPort]
Related commands
display interface range
MAC address table commands
This document covers the configuration of unicast MAC address entries, including static, dynamic, blackhole, and multiport unicast MAC address entries. For more information about configuring static multicast MAC address entries, see IP Multicast Configuration Guide.
display mac-address
Use display mac-address to display MAC address entries.
Syntax
display mac-address [ mac-address [ vlan vlan-id ] | [ [ dynamic | static ] [ interface interface-type interface-number ] | blackhole | multiport ] [ vlan vlan-id ] [ count ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
mac-address: Specifies a MAC address in the format of H-H-H. When entering a MAC address, you can omit the leading zeros in each H section. For example, enter f-e2-1 for 000f-00e2-0001.
vlan vlan-id: Specifies a VLAN. The value range for the vlan-id argument is 1 to 4094.
dynamic: Displays dynamic MAC address entries.
static: Displays static MAC address entries.
interface interface-type interface-number: Specifies an interface by its type and number.
blackhole: Displays blackhole MAC address entries.
multiport: Displays multiport unicast MAC address entries.
count: Displays only the number of MAC address entries that match all entry attributes you specify in the command. Detailed information about MAC address entries is not displayed. For example, you can use the display mac-address vlan 20 dynamic count command to display the number of dynamic entries for VLAN 20. If no entry attribute is specified, the command displays the total number of entries in the MAC address table. If this keyword is not specified, the command displays detailed information about specified MAC address entries.
Usage guidelines
A MAC address entry includes a destination MAC address, an outgoing interface, and a VLAN ID.
If you execute this command without specifying any parameters, it displays all MAC address entries.
This command displays dynamic MAC address entries for an aggregate interface only when the aggregate interface has at least one Selected member port.
Examples
# Display MAC address entries for VLAN 100.
<Sysname> display mac-address vlan 100
MAC Address VLAN ID State Port/NickName Aging
0001-0101-0101 100 Multiport FGE1/0/1 N
FGE1/0/2
0033-0033-0033 100 Blackhole N/A N
0000-0000-0002 100 Static FGE1/0/3 N
00e0-fc00-5829 100 Learned FGE1/0/4 Y
# Display the total number of MAC address entries.
<Sysname> display mac-address count
1 mac address(es) found.
Table 16 Command output
Field |
Description |
VLAN ID |
ID of the VLAN to which the outgoing interface of the MAC address entry belongs. |
State |
MAC address entry state: · Static—Static MAC address entry. · Learned—Dynamic MAC address entry. Dynamic entries can be manually configured, or learned. · Blackhole—Blackhole MAC address entry. · Multiport—Multiport unicast MAC address entry. |
Port/NickName |
When the field displays an interface name, the field indicates the outgoing interface for packets that are destined for the MAC address. This field displays N/A for a blackhole MAC address entry. When the field displays a 16-bit number in hexadecimal format (for example, 0x12ab), the field indicates the RB through which the packets destined for the MAC address leaves the TRILL network. Switches of this series do not support the TRILL function in the current software version. |
Aging |
Aging time: · Y—The entry is aging. · N—The entry does not age. |
mac address(es) found |
Number of matching MAC address entries. |
Related commands
· mac-address
· mac-address timer
display mac-address aging-time
Use display mac-address aging-time to display the aging timer for dynamic MAC address entries.
Syntax
display mac-address aging-time
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Examples
# Display the aging timer for dynamic MAC address entries.
<Sysname> display mac-address aging-time
MAC address aging time: 300s.
Related commands
mac-address timer
display mac-address mac-learning
Use display mac-address mac-learning to display the global MAC address learning status and the MAC learning status of the specified interface or all interfaces.
Syntax
display mac-address mac-learning [ interface interface-type interface-number ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, the command displays the global MAC address learning status and the MAC address learning status of all interfaces.
Examples
# Display the global MAC address learning status and the MAC learning status of all interfaces.
<Sysname> display mac-address mac-learning
Global MAC address learning status: Enabled.
Port Learning Status
FGE1/0/1 Enabled
FGE1/0/2 Enabled
FGE1/0/3 Enabled
FGE1/0/4 Enabled
Table 17 Command output
Field |
Description |
Global MAC address learning status |
Global MAC address learning status: · Enabled. · Disabled. |
Learning Status |
MAC address learning status of an interface: · Enabled. · Disabled. |
Related commands
mac-address mac-learning enable
display mac-address statistics
Use display mac-address statistics to display MAC address table statistics.
Syntax
display mac-address statistics
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Usage guidelines
This command displays the number of MAC address entries per type and the maximum number of MAC address entries allowed for each type.
Examples
# Display the statistics of the MAC address table.
<Sysname> display mac-address statistics
MAC Address Count:
Dynamic Unicast Address (Learned) Count: 0
Dynamic Unicast Address (Security-service-defined) Count: 0
Static Unicast Address (User-defined) Count: 0
Static Unicast Address (System-defined) Count: 0
Total Unicast MAC Addresses In Use: 0
Total Unicast MAC Addresses Available: 262143
Multicast and Multiport MAC Address Count: 1
Static Multicast and Multiport MAC Address (User-defined) Count: 1
Total Multicast and Multiport MAC Addresses Available: 256
Table 18 Command output
Field |
Description |
Dynamic Unicast Address (Learned) Count |
Number of dynamic unicast MAC address entries triggered by packets. |
Dynamic Unicast Address (Security-service-defined) Count |
Number of dynamic unicast MAC address entries triggered by the security service. |
Static Unicast Address (User-defined) Count |
Number of static unicast MAC address entries added by users. |
Static Unicast Address (System-defined) Count |
Number of static unicast MAC address entries added by the system. |
Total Unicast MAC Addresses In Use |
Total number of unicast MAC address entries. |
Total Unicast MAC Addresses Available |
Maximum number of unicast MAC address entries allowed. |
Multicast and Multiport MAC Address Count |
Number of multicast and multiport unicast MAC address entries. |
Static Multicast and Multiport MAC Address (User-defined) Count |
Number of static multicast and multiport unicast MAC address entries added by users. |
Total Multicast and Multiport MAC Addresses Available |
Maximum number of multicast and multiport unicast MAC address entries allowed. |
mac-address (interface view)
Use mac-address to add or modify a MAC address entry on an interface.
Use undo mac-address to delete a MAC address entry on an interface.
Syntax
mac-address { dynamic | multiport | static } mac-address vlan vlan-id
undo mac-address { dynamic | multiport | static } mac-address vlan vlan-id
Default
An interface is not configured with any MAC address entry.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
dynamic: Specifies dynamic MAC address entries.
static: Specifies static MAC address entries.
multiport: Specifies multiport unicast MAC address entries. A frame whose destination MAC address matches a multiport unicast MAC address entry is sent out of multiple ports.
mac-address: Specifies a MAC address in the format of H-H-H, excluding multicast and all-zero MAC addresses. When entering a MAC address, you can omit the leading zeros in each H section. For example, enter f-e2-1 for 000f-00e2-0001.
Usage guidelines
Typically, the device automatically builds the MAC address table by learning the source MAC addresses of incoming frames on each interface. However, you can manually configure static MAC address entries. For a MAC address, a manually configured static entry takes precedence over a dynamically learned entry. To improve the security for the user device connected to an interface, manually configure a static entry to bind the user device to the interface. Then, the frames destined for the user device (for example, Host A) are always sent out of the interface. Other hosts using the forged MAC address of Host A cannot obtain the frames destined for Host A.
The MAC address entries configuration cannot survive a reboot unless you save it. The dynamic MAC address entries, however, are lost upon reboot regardless of whether you save the configuration.
This command displays manually configured dynamic MAC address entries for an aggregate interface only when the aggregate interface has at least one Selected member port.
Examples
# Add a static entry for MAC address 000f-e201-0101 on interface FortyGigE 1/0/1 that belongs to VLAN 2.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] mac-address static 000f-e201-0101 vlan 2
# Add a static entry for MAC address 000f-e201-0101 on Layer 2 aggregate interface Bridge-Aggregation 1 that belongs to VLAN 1.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] mac-address static 000f-e201-0102 vlan 1
# Add a multiport unicast MAC address entry for MAC address 0001-0001-0101 on FortyGigE 1/0/1 and FortyGigE 1/0/2 that belong to VLAN 2.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] mac-address multiport 0001-0001-0101 vlan 2
[Sysname-FortyGigE1/0/1] quit
[Sysname] interface fortygige 1/0/2
[Sysname-FortyGigE1/0/2] mac-address multiport 0001-0001-0101 vlan 2
Related commands
· display mac-address
· mac-address (system view)
mac-address (system view)
Use mac-address to add or modify a MAC address entry.
Use undo mac-address to delete one or all MAC address entries.
Syntax
mac-address { dynamic | static } mac-address interface interface-type interface-number vlan vlan-id
mac-address blackhole mac-address vlan vlan-id
mac-address multiport mac-address interface interface-list vlan vlan-id
undo mac-address [ [ dynamic | static ] mac-address interface interface-type interface-number vlan vlan-id ]
undo mac-address [ blackhole | dynamic | static ] [ mac-address ] vlan vlan-id
undo mac-address [ dynamic | static ] interface interface-type interface-number
undo mac-address multiport mac-address interface interface-list vlan vlan-id
undo mac-address [ multiport ] [ [ mac-address ] vlan vlan-id ]
Default
The system is not configured with any MAC address entry.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
dynamic: Specifies dynamic MAC address entries.
static: Specifies static MAC address entries.
blackhole: Specifies blackhole MAC address entries. The packets whose destination MAC addresses match blackhole MAC address entries are dropped.
multiport: Specifies multiport unicast MAC address entries. A frame whose destination MAC address matches a multiport unicast MAC address entry is sent out of multiple ports.
mac-address: Specifies a MAC address in the format of H-H-H, excluding multicast and all-zero MAC addresses. When entering a MAC address, you can omit the leading zeros in each H section. For example, enter f-e2-1 for 000f-00e2-0001.
vlan vlan-id: Specifies an existing VLAN to which the interface belongs. The value range for the vlan-id argument is 1 to 4094.
interface interface-type interface-number: Specifies an outgoing interface by its type and number.
interface interface-list: Specifies interfaces in the format of { interface-type interface-number [ to interface-type interface-number ] } &<1-4>. The interface type can be the Layer 2 Ethernet interface or Layer 2 aggregate interface. &<1-4> specifies that you can configure up to four interfaces or interface ranges.
Usage guidelines
Typically, the device automatically builds the MAC address table by learning the source MAC addresses of incoming frames on each interface. However, you can manually configure static MAC address entries. For a MAC address, a manually configured static entry takes precedence over a dynamically learned entry. To improve the security for the user device connected to an interface, manually configure a static entry to bind the user device to the interface. Then, the frames destined for the user device (for example, Host A) are always sent out of the interface. Other hosts using the forged MAC address of Host A cannot obtain the frames destined for Host A.
To drop the packets with the specified source MAC addresses or destination MAC addresses, you can configure blackhole MAC address entries.
A multiport unicast MAC address entry is used to send frames with a specific destination MAC address out of multiple ports. When you execute this command for the first time, the command adds a MAC address entry. When you execute the command again with the same MAC address and VLAN but with different interfaces, this command adds the specified interfaces for this entry.
A static or blackhole MAC address entry can overwrite a dynamic MAC address entry, but not vice versa.
If you execute the undo mac-address command without specifying any parameters, this command deletes all unicast MAC address entries and static multicast MAC address entries.
You can delete all the MAC address entries (including unicast MAC address entries and static multicast MAC address entries) of the specified VLAN. You can also delete only one type (dynamic, static, blackhole, or multiport unicast) of MAC address entries. You can single out an interface and delete the corresponding unicast MAC address entries, but not the corresponding static multicast MAC address entries.
Examples
# Add a static entry for MAC address 000f-e201-0101. All frames that are destined for this MAC address are sent out of interface FortyGigE 1/0/1, which belongs to VLAN 2.
<Sysname> system-view
[Sysname] mac-address static 000f-e201-0101 interface fortygige 1/0/1 vlan 2
# Add a multiport unicast MAC address entry for MAC address 000f-e201-0101 to send all frames destined for this MAC address out of FortyGigE 1/0/1 through FortyGigE 1/0/3 that belong to VLAN 2.
<Sysname> system-view
[Sysname] mac-address multiport 000f-e201-0101 interface fortygige 1/0/1 to fortygige 1/0/3 vlan 2
Related commands
· display mac-address
· mac-address (interface view)
mac-address mac-learning enable
Use mac-address mac-learning enable to enable MAC address learning.
Use undo mac-address mac-learning enable to disable MAC address learning.
Syntax
mac-address mac-learning enable
undo mac-address mac-learning enable
Default
MAC address learning is enabled.
Views
System view, Layer 2 Ethernet interface, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
To prevent the MAC address table from becoming saturated, you can disable MAC address learning.
For example, a number of packets with different source MAC addresses reaching a device can affect the MAC address table update. You can disable MAC address learning to avoid such attacks, but the following guidelines apply:
· You can disable MAC address learning on a per-interface basis. If you disable MAC address learning globally, MAC address learning is disabled for all interfaces, and the device stops learning MAC addresses and cannot dynamically update the MAC address table.
· Because disabling MAC address learning can result in broadcast storms, enable broadcast storm suppression after you disable MAC address learning on an interface. For more information about broadcast storm suppression, see Layer 2—LAN Switching Configuration Guide.
· With MAC address learning enabled globally, you can disable MAC address learning for the specific interface.
When MAC address learning is disabled, the learned dynamic MAC addresses remain valid until they age out.
Examples
# Disable MAC address learning globally.
<Sysname> system-view
[Sysname] undo mac-address mac-learning enable
# Disable MAC address learning on interface FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] undo mac-address mac-learning enable
# Disable MAC address learning on interface Bridge-Aggregation 1.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] undo mac-address mac-learning enable
Related commands
display mac-address mac-learning
mac-address mac-learning ingress
Use mac-address mac-learning ingress to configure the device to learn MAC addresses at ingress.
Use undo mac-address mac-learning ingress to restore the default.
Syntax
mac-address mac-learning ingress
undo mac-address mac-learning ingress
Default
The device learns MAC addresses at egress.
Views
System view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
This command is available in Release 11xx.
The device can learn the source MAC address of a packet when it receives the packet or when it sends out the packet.
For the device to correctly learn source MAC addresses of Layer 3 forwarded packets, you must enable MAC address learning at ingress.
At egress, the source MAC address of Layer 3 forwarded packets is replaced by the outgoing interface's MAC address. The device cannot learn the original source MAC address.
Examples
# Enable MAC address learning at ingress.
<Sysname> system-view
[Sysname] mac-address mac-learning ingress
mac-address mac-roaming enable
Use mac-address mac-roaming enable to enable MAC address synchronization.
Use undo mac-address mac-roaming enable to restore the default.
Syntax
mac-address mac-roaming enable
undo mac-address mac-roaming enable
Default
MAC address synchronization is disabled.
Views
System view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
If ports on different cards of the same device or of different IRF member devices are selected ports from the same aggregation group, MAC address entries are synchronized among these cards regardless of whether MAC address synchronization is enabled. For more information about aggregation groups, see Layer 2—LAN Switching Configuration Guide.
The MAC address table size might vary with different cards. With MAC address synchronization enabled, MAC address table entries exceeding the table size of a card cannot be synchronized to the MAC address table.
Examples
# Enable MAC address synchronization.
<Sysname> system-view
[Sysname] mac-address mac-roaming enable
mac-address timer
Use mac-address timer to configure the aging timer for dynamic MAC address entries.
Use undo mac-address timer to restore the default.
Syntax
mac-address timer { aging seconds | no-aging }
undo mac-address timer
Default
The aging timer for dynamic MAC address entries is 300 seconds.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
aging seconds: Sets an aging timer for dynamic MAC address entries, in the range of 10 to 2400 seconds.
no-aging: Sets dynamic MAC address entries not to age.
Usage guidelines
To set the aging timer appropriately, follow these guidelines:
· A long aging interval causes the MAC address table to retain outdated entries and fail to accommodate the most recent network changes.
· A short aging interval results in removal of valid entries and unnecessary broadcasts that affect device performance.
Examples
# Set the aging time to 500 seconds for dynamic MAC address entries.
<Sysname> system-view
[Sysname] mac-address timer aging 500
Related commands
display mac-address aging-time
MAC Information commands
mac-address information enable (interface view)
Use mac-address information enable to enable MAC Information on an interface.
Use undo mac-address information enable to disable MAC Information on an interface.
Syntax
mac-address information enable { added | deleted }
undo mac-address information enable { added | deleted }
Default
MAC Information is disabled on an interface.
Views
Layer 2 Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Parameters
added: Enables the device to record MAC address change information when a new MAC address is learned on an interface.
deleted: Enables the device to record MAC address change information when an existing MAC address is deleted.
Usage guidelines
Before you enable MAC Information on an interface, enable MAC Information globally.
Examples
# Enable MAC Information on FortyGigE 1/0/1 to enable FortyGigE 1/0/1 to record MAC address change information when learning a new MAC address.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] mac-address information enable added
Related commands
mac-address information enable (system view)
mac-address information enable (system view)
Use mac-address information enable to enable MAC Information globally.
Use undo mac-address information enable to disable MAC Information globally.
Syntax
mac-address information enable
undo mac-address information enable
Default
MAC Information is disabled globally.
Views
System view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
Before you enable MAC Information on an interface, enable MAC Information globally.
Examples
# Enable MAC Information globally.
<Sysname> system-view
[Sysname] mac-address information enable
Related commands
mac-address information enable (interface view)
mac-address information interval
Use mac-address information interval to set the MAC change notification interval.
Use undo mac-address information interval to restore the default.
Syntax
mac-address information interval interval-time
undo mac-address information interval
Default
The MAC change notification interval is 1 second.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
interval-time: Specifies the MAC change notification interval in the range of 1 to 20000 seconds.
Usage guidelines
To prevent syslog messages or SNMP notifications from being sent too frequently, set the MAC change notification interval to a larger value.
Examples
# Set the MAC change notification interval to 200 seconds.
<Sysname> system-view
[Sysname] mac-address information interval 200
mac-address information mode
Use mac-address information mode to set the MAC Information mode. The MAC Information mode specifies the type of messages (syslog messages or SNMP notifications) used to notify MAC changes.
Use undo mac-address information mode to restore the default.
Syntax
mac-address information mode { syslog | trap }
undo mac-address information mode
Default
SNMP notifications are sent to notify MAC changes.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
syslog: Specifies that the device sends syslog messages to notify MAC address changes.
trap: Specifies that the device sends SNMP notifications to notify MAC address changes.
Examples
# Configure the MAC Information mode as trap.
<Sysname> system-view
[Sysname] mac-address information mode trap
mac-address information queue-length
Use mac-address information queue-length to set the MAC Information queue length.
Use undo mac-address information queue-length to restore the default.
Syntax
mac-address information queue-length value
undo mac-address information queue-length
Default
The MAC Information queue length is 50.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
value: Specifies the MAC Information queue length in the range of 0 to 1000. The MAC Information queue length indicates the number of MAC change messages,.
Usage guidelines
If the MAC Information queue length is 0, the device sends a syslog message or SNMP notification immediately after learning or deleting a MAC address.
If the MAC Information queue length is not 0, the device stores MAC address changes in the queue:
· The device overwrites the oldest MAC change written into the queue with the most recent MAC change when the following conditions exist:
¡ The MAC change notification interval does not expire.
¡ The queue has been exhausted.
· The device sends syslog messages or SNMP notifications only if the MAC change notification interval expires.
Examples
# Set the MAC Information queue length to 600.
<Sysname> system-view
[Sysname] mac-address information queue-length 600
Ethernet link aggregation commands
bandwidth
Use bandwidth to set the expected bandwidth for an interface.
Use undo bandwidth to restore the default.
Syntax
bandwidth bandwidth-value
undo bandwidth
Default
The expected bandwidth (in kbps) is the interface baud rate divided by 1000.
Views
Layer 2 aggregate interface view, Layer 3 aggregate interface view, Layer 3 aggregate subinterface view
Predefined user roles
network-admin
mdc-admin
Parameters
bandwidth-value: Specifies the expected bandwidth in the range of 1 to 400000000 kbps.
Usage guidelines
The expected bandwidth of an interface affects the following items:
· Bandwidth assignment with CBQ. For more information, see ACL and QoS Configuration Guide.
· Link costs in OSPF and IS-IS. For more information, see Layer 3—IP Routing Configuration Guide.
Examples
# Set the expected bandwidth to 10000 kbps for Layer 2 aggregate interface Bridge-Aggregation 1.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] bandwidth 10000
default
Use default to restore the default settings for an aggregate interface.
Syntax
default
Views
Layer 2 aggregate interface view, Layer 3 aggregate interface view, Layer 3 aggregate subinterface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
CAUTION: The default command might interrupt ongoing network services. Make sure you are fully aware of the impacts of this command when you execute it on a live network. |
This command might fail to restore the default settings for some commands for reasons such as command dependencies and system restrictions. Use the display this command in interface view to identify these commands, and then use their undo forms or follow the command reference to restore their default settings. If your restoration attempt still fails, follow the error message instructions to resolve the problem.
Examples
# Restore the default settings for Layer 2 aggregate interface Bridge-Aggregation 1.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] default
description
Use description to set a description for an interface.
Use undo description to restore the default.
Syntax
description text
undo description
Default
The description of an interface is the interface-name plus Interface. For example, the default description of Bridge-Aggregation 1 is Bridge-Aggregation1 Interface.
Views
Layer 2 aggregate interface view, Layer 3 aggregate interface view, Layer 3 aggregate subinterface view
Predefined user roles
network-admin
mdc-admin
Parameters
text: Specifies the interface description, a string of 1 to 255 characters.
Examples
# Set the description to connect to the lab for Layer 2 aggregate interface Bridge-Aggregation 1.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] description connect to the lab
display interface
Use display interface to display aggregate interface information.
Syntax
display interface [ bridge-aggregation | route-aggregation ] [ brief [ down | description ] ]
display interface { bridge-aggregation | route-aggregation } interface-number [ brief [ description ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
bridge-aggregation: Specifies Layer 2 aggregate interfaces.
route-aggregation: Specifies Layer 3 aggregate interfaces.
interface-number: Specifies an existing aggregate interface number. The value range for the interface-number argument is the set of all existing aggregate interface numbers.
brief: Displays brief interface information. If you do not specify this keyword, the command displays detailed interface information.
down: Displays information about interfaces in the down state and the causes for the down state. If you do not specify this keyword, the command displays information about interfaces in all states.
description: Displays complete interface descriptions. If you do not specify this keyword, the command displays only the first 27 characters of interface descriptions.
Usage guidelines
If you do not specify the bridge-aggregation and route-aggregation keywords, the command displays information about all interfaces.
If you specify the bridge-aggregation or route-aggregation keyword and do not specify any interface number, the command displays information about all aggregate interfaces of that type.
If you specify the bridge-aggregation interface-number or route-aggregation interface-number option, the command displays information about the specified aggregate interface.
Examples
# Display detailed information about Layer 2 aggregate interface Bridge-Aggregation 1.
<Sysname> display interface bridge-aggregation 1
Bridge-Aggregation1
Current state: UP
IP packet frame type: Ethernet II, hardware Address: 000f-e207-f2e0
Description: Bridge-Aggregation1 Interface
Bandwidth: 0kbps
Unknown-speed mode, unknown-duplex mode
Link speed type is autonegotiation, link duplex type is autonegotiation
PVID: 1
Port link-type: Access
Tagged VLANs: None
UnTagged VLANs: 1
Last clearing of counters: Never
Last 300 seconds input: 6900 packets/sec 885160 bytes/sec -%
Last 300 seconds output: 3150 packets/sec 404430 bytes/sec -%
Input (total): 5364747 packets, 686688416 bytes
2682273 unicasts, 1341137 broadcasts, 1341337 multicasts, 0 pauses
Input (normal): 5364747 packets, 686688416 bytes
2682273 unicasts, 1341137 broadcasts, 1341337 multicasts, 0 pauses
Input: 0 input errors, 0 runts, 0 giants, 0 throttles
0 CRC, 0 frame, 0 overruns, - aborts
- ignored, - parity errors
Output (total): 1042508 packets, 133441832 bytes
1042306 unicasts, 0 broadcasts, 202 multicasts, - pauses
Output (normal): 1042508 packets, 133441832 bytes
1042306 unicasts, 0 broadcasts, 202 multicasts, 0 pauses
Output: 0 output errors, - underruns, - buffer failures
0 aborts, 0 deferred, 0 collisions, 0 late collisions
- lost carrier, - no carrier
# Display detailed information about Layer 3 aggregate interface Route-Aggregation 1.
<Sysname> display interface route-aggregation 1
Route-Aggregation1
Current state: UP
Line protocol state: UP
Description: Route-Aggregation1 Interface
Bandwidth: 0kbps
Maximum transmission unit: 1500
Internet protocol processing: Disabled
IP packet frame type: Ethernet II, hardware Address: 0000-fc00-2670
IPv6 packet frame type: Ethernet II, hardware Address: 0000-fc00-2670
Last clearing of counters: Never
Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec
Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec
0 packets input, 0 bytes, 0 drops
0 packets output, 0 bytes, 0 drops
# Display brief information about Layer 2 aggregate interface Bridge-Aggregation 1.
<Sysname> display interface bridge-aggregation 1 brief
Brief information on interfaces in bridge mode:
Link: ADM - administratively down; Stby - standby
Speed: (a) - auto
Duplex: (a)/A - auto; H - half; F - full
Type: A - access; T - trunk; H - hybrid
Interface Link Speed Duplex Type PVID Description
BAGG1 UP auto A A 1
# Display brief information about Layer 3 aggregate interface Route-Aggregation 1.
<Sysname> display interface route-aggregation 1 brief
Brief information on interfaces in route mode:
Link: ADM - administratively down; Stby - standby
Protocol: (s) - spoofing
Interface Link Protocol Primary IP Description
RAGG1 UP UP --
Table 19 Command output
Field |
Description |
Bridge-Aggregation1 |
Layer 2 aggregate interface name. |
Layer 3 aggregate interface name. |
|
Current state |
Aggregate interface status: · DOWN (Administratively down)—The interface is administratively shut down with the shutdown command. · DOWN—The interface is administratively up but physically down (possibly because no physical link is present or the link is faulty). · UP—The Ethernet interface is both administratively and physically up. |
IP packet frame type |
IPv4 packet frame format. The value PKTFMT_ETHNT_2 indicates that packets are encapsulated in Ethernet II format. |
Bandwidth |
Expected bandwidth of the interface. |
Unknown-speed mode, unknown-duplex mode |
The interface speed and duplex mode are unknown. |
PVID |
Port VLAN ID (PVID). |
Port link-type |
Port link type: access, trunk, or hybrid. |
Tagged VLANs |
Packets from the specified VLANs are sent out of this interface with a VLAN tag: · Tagged Vlan: none—All packets are sent out of this interface without a VLAN tag. · Tagged Vlan: 1—Packets from VLAN 1 are sent out of this interface with a VLAN tag. This field is displayed when the port link type is access or hybrid. |
Untagged VLANs |
Packets from the specified VLANs are sent out of this interface without a VLAN tag: · Untagged Vlan: none—All packets are sent out of this interface with a VLAN tag. · Untagged Vlan: 1—Packets from VLAN 1 are sent out of this interface without a VLAN tag. This field is displayed when the port link type is access or hybrid. |
Last clearing of counters |
Time when the reset counters interface command was last used to clear the interface statistics. Never indicates the reset counters interface command has never been used on the interface since the device's startup. |
Last 300 seconds input/output rate |
Average input/output rate over the last 300 seconds. |
Input/Output (total) |
Statistics of all packets received/sent on the interface. |
Input/Output (normal) |
Statistics of all normal packets received/sent on the interface. |
Line protocol state |
Link layer state of the interface. |
Internet protocol processing |
IP packet processing. Disabled indicates that IP packets cannot be processed. For an interface configured with an IP address, this field changes to Internet Address is. |
Brief information on interfaces in bridge mode |
Brief information about Layer 2 interfaces. |
Brief information about Layer 3 interfaces. |
|
Link: ADM - administratively down; Stby - standby |
Link status: · ADM—The interface has been administratively shut down. To recover its physical layer state, run the undo shutdown command. · Stby—The interface is operating as a backup interface. |
If the speed of an interface is automatically negotiated, the speed attribute of the interface includes the autonegotiation flag (the letter a in parentheses). |
|
Duplex: (a)/A - auto; H - half; F - full |
If the duplex mode of an interface is automatically negotiated, its duplex mode attribute includes the autonegotiation flag, indicated by the letter a in parentheses or a capital A. The letter H indicates the half duplex mode, and the letter F indicates the full duplex mode. |
Type: A - access; T - trunk; H - hybrid |
Link type options for Ethernet interfaces. |
Protocol: (s) - spoofing |
If the data link layer protocol state of an interface is shown as UP, but its link is an on-demand link or not present, its protocol attribute includes the spoofing flag (an s in parentheses). |
Interface |
Abbreviated interface name. |
Link |
Physical link state of the interface. |
Speed |
Interface speed, in bps. |
Data link layer protocol state of an interface. |
|
Cause |
Cause of a DOWN physical link. |
display lacp system-id
Use display lacp system-id to display the system ID of the local system.
Syntax
display lacp system-id
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Usage guidelines
You can use the lacp system-priority command to change the LACP priority of the local system. You specify the LACP priority value in decimal format in the lacp system-priority command, but it is displayed as a hexadecimal value by the display lacp system-id command.
Examples
# Display the local system ID.
<Sysname> display lacp system-id
Actor System ID: 0x8000, 0000-fc00-6504
Table 20 Command output
Field |
Description |
Actor System ID: 0x8000, 0000-fc00-6504 |
Local system ID, which contains the system LACP priority (0x8000 in this sample output) and the system MAC address (0000-FC00-6504 in this sample output). |
lacp system-priority
display link-aggregation capability
Use display link-aggregation capability to display the link aggregation capability for the device.
Syntax
display link-aggregation capability
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Usage guidelines
This command is available in Release 1138P01 and later versions.
Examples
# Display the link aggregation capability for the device.
<Sysname> display link-aggregation capability
Default link aggregation capability:
Maximum groups: 1024
Maximum Selected ports per group: 16
Current link aggregation capability:
Maximum groups: 1024
Maximum Selected ports per group: 16
Link aggregation capability at the next reboot:
Maximum groups: 1024
Maximum Selected ports per group: 16
Supported link aggregation capability list:
1024*16 512*32 256*64
Table 21 Command output
Field |
Description |
Supported link aggregation capability list |
Link aggregation capabilities supported by the device. Each item in the list is in the format of maximum number of aggregation groups*maximum number of Selected ports per aggregation group. |
display link-aggregation load-sharing mode
Use display link-aggregation load-sharing mode to display global or group-specific link-aggregation load sharing modes.
Syntax
display link-aggregation load-sharing mode [ interface [ { bridge-aggregation | route-aggregation } interface-number ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
bridge-aggregation: Specifies Layer 2 aggregation interfaces.
route-aggregation: Specifies Layer 3 aggregation interfaces.
interface-number: Specifies an existing aggregate interface number.
Usage guidelines
If you do not specify the interface keyword, the command displays the global link-aggregation load sharing modes.
If you specify the interface keyword, but do not specify any interface, the command displays all group-specific load sharing modes.
If you specify the bridge-aggregation interface-number or route-aggregation interface-number option, the command displays the load sharing mode of the specified aggregation group.
The bridge-aggregation or route-aggregation keyword is available only when Layer 2 or Layer 3 aggregate interfaces exist on the switch.
Examples
# Display the global link-aggregation load sharing modes.
<Sysname> display link-aggregation load-sharing mode
Link-Aggregation Load-Sharing Algorithm:
Default
Link-Aggregation Load-Sharing Mode:
Layer 2 traffic: destination-mac address source-mac address
Layer 3 traffic: destination-ip address source-ip address
# Display the link-aggregation load sharing modes of Layer 2 aggregation group 10.
<Sysname> display link-aggregation load-sharing mode interface bridge-aggregation 10
Bridge-Aggregation10 Load-Sharing Mode:
Layer 2 traffic: destination-mac address source-mac address
Layer 3 traffic: destination-ip address source-ip address
Table 22 Command output
Field |
Description |
Link-Aggregation Load-Sharing Algorithm |
Per-flow load sharing algorithm for Ethernet link aggregation. By default, this field displays Default. If you have configured the load sharing algorithm, this field displays the configured algorithm. |
Link-Aggregation Load-Sharing Mode |
Global link-aggregation load sharing mode. · By default, this field displays the packet type-based link-aggregation load sharing mode. · If you have configured the global link-aggregation load sharing mode, this field displays the configured mode. |
Bridge-Aggregation10 Load-Sharing Mode |
Link-aggregation load sharing mode of Layer 2 aggregation group 10. |
Route-Aggregation10 Load-Sharing Mode |
Link-aggregation load sharing mode of Layer 3 aggregation group 10. |
Layer 2 traffic: destination-mac address, source-mac address |
Default link-aggregation load sharing mode for Layer 2 traffic. In this sample output, Layer 2 traffic is load shared based on source and destination MAC addresses. |
Default link-aggregation load sharing mode for Layer 3 traffic. In this sample output, Layer 3 traffic is load shared based on source and destination IP addresses. |
display link-aggregation load-sharing path
Use display link-aggregation load-sharing path to display forwarding information for the specified traffic flow.
Syntax
display link-aggregation load-sharing path interface { bridge-aggregation | route-aggregation } interface-number ingress-port interface-type interface-number [ route ] { { destination-ip ip-address | destination-ipv6 ipv6-address } | { source-ip ip-address | source-ipv6 ipv6-address } | destination-mac mac-address | destination-port port-id | ethernet-type type-number | ip-protocol protocol-id | source-mac mac-address | source-port port-id | vlan vlan-id }*
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
bridge-aggregation: Specifies Layer 2 aggregate interfaces.
route-aggregation: Specifies Layer 3 aggregate interfaces.
interface-number: Specifies an existing aggregate interface by its number.
ingress-port interface-type interface-number: Specifies an ingress port by its type and number.
route: Displays forwarding information for Layer 3 traffic.
destination-ip ip-address: Specifies a destination IPv4 address.
destination-ipv6 ipv6-address: Specifies a destination IPv6 address.
source-ip ip-address: Specifies a source IPv4 address.
source-ipv6 ipv6-address: Specifies a source IPv6 address.
destination-mac mac-address: Specifies a destination MAC address in H-H-H format.
destination-port port-id: Specifies a destination port number in the range of 1 to 65535.
ethernet-type type-number: Specifies an Ethernet type code in the range of 1 to 65535.
ip-protocol protocol-id: Specifies an IP protocol by its ID in the range of 0 to 255.
source-mac mac-address: Specifies a source MAC address in H-H-H format.
source-port port-id: Specifies a source port number in the range of 1 to 65535.
vlan vlan-id: Specifies a VLAN by its ID in the range of 1 to 4094.
Usage guidelines
A parameter specified in the command might not be used for selecting the egress port. The Load sharing parameters field displays the parameters that are used in egress port selection.
If an unspecified parameter is required for selecting the egress port, the default value of the parameter is used. If the parameter does not have any default values, the parameter is set to 0.
Examples
# Display forwarding information for the specified traffic flow to be sent out of Layer 2 aggregate interface Bridge-Aggregation 1.
<Sysname> display link-aggregation load-sharing path interface bridge-aggregation 1 ingress-port fortygige 1/0/1 destination-mac 0000-fc00-0001 source-mac 0000-fc00-0002 source-ip 10.100.0.2 destination-ip 10.100.0.1
Load sharing mode: destination-mac, source-mac, source-ip, destination-ip
Unspecified parameters are set to 0.
Load sharing parameters:
Ingress port: FortyGigE1/0/1
Destination MAC: 0000-fc00-0001
Source MAC: 0000-fc00-0002
Destination IP: 10.100.0.1
Source IP: 10.100.0.2
Egress port: FortyGigE1/0/3
Table 23 Command output
Field |
Description |
Load sharing mode: |
Load sharing mode set for the aggregation group: · destination-mac—Traffic is load shared based on destination MAC addresses. · source-mac—Traffic is load shared based on source MAC addresses. · destination-ip—Traffic is load shared based on destination IP addresses. · source-ip—Traffic is load shared based on source IP addresses. · ip-protocol—Traffic is load shared based on IP protocol types. · destination-port—Traffic is load shared based on destination ports. · source-port—Traffic is load shared based on source ports. · ingress-port—Traffic is load shared based on ingress ports. |
Load sharing parameters |
Parameters that are used in egress port selection. |
Egress port |
Egress port of the specified traffic flow. If no egress port is found, this field displays N/A. |
display link-aggregation member-port
Use display link-aggregation member-port to display detailed link aggregation information for the specified member ports.
Syntax
display link-aggregation member-port [ interface-list ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
interface-list: Specifies a list of link aggregation member ports, in the format interface-type interface-number [ to interface-type interface-number ], where interface-type interface-number specifies an interface by its type and number.
Usage guidelines
A member port in a static aggregation group cannot obtain information about the peer group. For such member ports, the command displays the port number, port priority, and operational key of the local end only.
Examples
# Display detailed link aggregation information for FortyGigE 1/0/1, which is a member port of a static aggregation group.
<Sysname> display link-aggregation member-port fortygige 1/0/1
Flags: A -- LACP_Activity, B -- LACP_Timeout, C -- Aggregation,
D -- Synchronization, E -- Collecting, F -- Distributing,
G -- Defaulted, H -- Expired
FortyGigE1/0/1:
Aggregate Interface: Bridge-Aggregation1
Port Number: 1
Port Priority: 32768
Oper-Key: 1
# Display detailed link aggregation information for FortyGigE 1/0/2, which is a member port of a dynamic aggregation group.
<Sysname> display link-aggregation member-port fortygige 1/0/2
Flags: A -- LACP_Activity, B -- LACP_Timeout, C -- Aggregation,
D -- Synchronization, E -- Collecting, F -- Distributing,
G -- Defaulted, H -- Expired
FortyGigE1/0/2:
Aggregate Interface: Bridge-Aggregation10
Local:
Port Number: 2
Port Priority: 32768
Oper-Key: 2
Flag: {ACDEF}
Remote:
System ID: 0x8000, 000f-e267-6c6a
Port Number: 26
Port Priority: 32768
Oper-Key: 2
Flag: {ACDEF}
Received LACP Packets: 5 packet(s)
Illegal: 0 packet(s)
Sent LACP Packets: 7 packet(s)
Table 24 Command output
Field |
Description |
Flags |
LACP state flags. This field is one byte long, represented by ABCDEFGH from the least significant bit to the most significant bit. The letter is present when its bit is 1 and absent when its bit is 0. · A—Indicates whether LACP is enabled. 1 indicates enabled, and 0 indicates disabled. · B—Indicates the LACP short or long timeout. 1 indicates short timeout, and 0 indicates long timeout. · C—Indicates whether the sending system considers that the link is aggregatable. 1 indicates yes, and 0 indicates no. · D—Indicates whether the sending system considers that the link is synchronized. 1 indicates yes, and 0 indicates no. · E—Indicates whether the sending system considers that the incoming frames are collected. 1 indicates yes, and 0 indicates no. · F—Indicates whether the sending system considers that the outgoing frames are distributed. 1 indicates yes, and 0 indicates no. · G—Indicates whether the sending system receives frames in the default state. 1 indicates yes, and 0 indicates no. · H—Indicates whether the sending system receives frames in the expired state. 1 indicates yes, and 0 indicates no. |
Aggregate Interface |
Aggregate interface to which the member port belongs. |
Local |
Information about the local end. |
Oper-key |
Operational key. |
Flag |
LACP protocol state flag. |
Remote |
Information about the remote end. |
System ID |
Remote end system ID, containing the system LACP priority and the system MAC address. |
Received LACP Packets |
Total number of LACP packets received. |
Illegal |
Total number of illegal packets. |
Sent LACP Packets |
Total number of LACP packets sent. |
display link-aggregation summary
Use display link-aggregation summary to display the summary information for all aggregation groups.
Syntax
display link-aggregation summary
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Usage guidelines
Static link aggregation groups cannot obtain information about the peer groups. As a result, the Partner ID field displays none for a static link aggregation group.
Examples
# Display the summary information for all aggregation groups.
<Sysname> display link-aggregation summary
Aggregate Interface Type:
BAGG -- Bridge-Aggregation, RAGG -- Route-Aggregation
Aggregation Mode: S -- Static, D -- Dynamic
Loadsharing Type: Shar -- Loadsharing, NonS -- Non-Loadsharing
Actor System ID: 0x8000, 000f-e267-6c6a
AGG AGG Partner ID Selected Unselected Individual Share
Interface Mode Ports Ports Ports Type
-------------------------------------------------------------------------------
BAGG1 S none 1 0 0 Shar
BAGG10 D 0x8000, 000f-e267-57ad 2 0 0 Shar
Table 25 Command output
Field |
Description |
Aggregate Interface Type |
BAGG indicates Layer 2 aggregate interface. |
Aggregation Mode |
Aggregation group type: · S—Static link aggregation. · D—Dynamic aggregation. |
Loadsharing Type |
Load-sharing type: · Shar—Load sharing. · NonS—Non-load sharing. |
Actor System ID |
Local system ID, which contains the system LACP priority and the system MAC address. |
AGG Interface |
Type and number of the aggregate interface. |
AGG Mode |
Aggregation group type. |
Partner ID |
System ID of the partner, which contains the system LACP priority and the system MAC address. |
Selected Ports |
Total number of Selected ports. |
Unselected Ports |
Total number of Unselected ports. |
Total number of Individual ports. |
|
Share Type |
Load-sharing type. |
display link-aggregation verbose
Use display link-aggregation verbose to display detailed information about the aggregation groups that correspond to the aggregate interfaces.
Syntax
display link-aggregation verbose [ { bridge-aggregation | route-aggregation } [ interface-number ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
bridge-aggregation: Specifies Layer 2 aggregate interfaces.
route-aggregation: Specifies Layer 3 aggregate interfaces.
interface-number: Specifies an existing aggregate interface by its number.
Usage guidelines
If you specify only the bridge-aggregation or route-aggregation keyword, the command displays information about all Layer 2 or Layer 3 aggregation groups.
If you do not specify the bridge-aggregation and route-aggregation keywords, the command displays information about all aggregation groups.
The bridge-aggregation or route-aggregation keyword is available only when Layer 2 or Layer 3 aggregate interfaces exist on the switch.
Examples
# Display detailed information about Layer 2 aggregation group 10, which is a dynamic aggregation group.
<Sysname> display link-aggregation verbose bridge-aggregation 10
Loadsharing Type: Shar -- Loadsharing, NonS -- Non-Loadsharing
Port Status: S -- Selected, U -- Unselected, I -- Individual
Flags: A -- LACP_Activity, B -- LACP_Timeout, C -- Aggregation,
D -- Synchronization, E -- Collecting, F -- Distributing,
G -- Defaulted, H -- Expired
Aggregate Interface: Bridge-Aggregation10
Aggregation Mode: Dynamic
Loadsharing Type: Shar
System ID: 0x8000, 000f-e267-6c6a
Local:
Port Status Priority Oper-Key Flag
--------------------------------------------------------------------------------
FGE1/0/1 S 32768 2 {ACDEF}
FGE1/0/2 S 32768 2 {ACDEF}
Remote:
Actor Partner Priority Oper-Key SystemID Flag
--------------------------------------------------------------------------------
FGE1/0/1 1 32768 2 0x8000, 000f-e267-57ad {ACDEF}
FGE1/0/2 2 32768 2 0x8000, 000f-e267-57ad {ACDEF}
# Display detailed information about Layer 2 aggregation group 20, which is a static aggregation group.
<Sysname> display link-aggregation verbose bridge-aggregation 20
Loadsharing Type: Shar -- Loadsharing, NonS -- Non-Loadsharing
Port Status: S -- Selected, U -- Unselected, I -- Individual
Flags: A -- LACP_Activity, B -- LACP_Timeout, C -- Aggregation,
D -- Synchronization, E -- Collecting, F -- Distributing,
G -- Defaulted, H -- Expired
Aggregate Interface: Bridge-Aggregation20
Aggregation Mode: Static
Loadsharing Type: Shar
Port Status Priority Oper-Key
--------------------------------------------------------------------------------
FGE1/0/1 U 32768 1
FGE1/0/2 U 32768 1
FGE1/0/3 U 32768 1
Table 26 Command output
Field |
Description |
Loadsharing Type |
Load-sharing type: · Shar—Load sharing. · NonS—Non-load sharing. |
Port Status |
Port state: Selected, Unselected, or Individual. |
Flags |
LACP state flags. This field is one byte long, represented by ABCDEFGH from the least significant bit to the most significant bit. The letter is present when its bit is 1 and absent when its bit is 0. · A—Indicates whether LACP is enabled. 1 indicates enabled, and 0 indicates disabled. · B—Indicates the LACP short or long timeout. 1 indicates short timeout, and 0 indicates long timeout. · C—Indicates whether the sending system considers that the link is aggregatable. 1 indicates yes, and 0 indicates no. · D—Indicates whether the sending system considers that the link is synchronized. 1 indicates yes, and 0 indicates no. · E—Indicates whether the sending system considers that the incoming frames are collected. 1 indicates yes, and 0 indicates no. · F—Indicates whether the sending system considers that the outgoing frames are distributed. 1 indicates yes, and 0 indicates no. · G—Indicates whether the sending system receives frames in the default state. 1 indicates yes, and 0 indicates no. · H—Indicates whether the sending system receives frames in the expired state. 1 indicates yes, and 0 indicates no. |
Aggregate Interface |
Name of the aggregate interface. |
Aggregation Mode |
Mode of the aggregation group: · Static for static aggregation. · Dynamic for dynamic aggregation. |
System ID |
Local system ID, containing the system LACP priority and the system MAC address. |
Local |
Information about the local end: · Port—Port type and number. · Status—Selected or Unselected state of the port. · Priority—Port priority. · Oper-Key—Operational key. · Flag—LACP state flag. NOTE: For static aggregation groups, only local information (without the Flag field) is displayed. |
Remote |
Information about the remote end: · Actor—Port type and number of the local end. · Partner—Port index of the remote end. · Priority—Port priority of the remote end. · Oper-Key—Operational key of the remote port. · System ID—System ID of the remote end. · Flag—LACP state flag of the remote end. |
interface bridge-aggregation
Use interface bridge-aggregation to create a Layer 2 aggregate interface and enter the Layer 2 aggregate interface view.
Use undo interface bridge-aggregation to remove a Layer 2 aggregate interface.
Syntax
interface bridge-aggregation interface-number
undo interface bridge-aggregation interface-number
Default
No Layer 2 aggregate interface is created.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
interface-number: Specifies a Layer 2 aggregate interface number in the range of 1 to 1024.
Usage guidelines
When you create a Layer 2 aggregate interface, the system automatically creates a Layer 2 aggregation group with the same number. The aggregation group operates in static aggregation mode by default.
Deleting a Layer 2 aggregate interface also deletes the Layer 2 aggregation group. At the same time, the member ports of the aggregation group, if any, leave the aggregation group.
Examples
# Create Layer 2 aggregate interface Bridge-Aggregation 1, and enter its view.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1]
interface route-aggregation
Use interface route-aggregation to create a Layer 3 aggregate interface or subinterface and enter the Layer 3 aggregate interface or subinterface view.
Use undo interface route-aggregation to delete a Layer 3 aggregate interface or subinterface.
Syntax
interface route-aggregation { interface-number | interface-number.subnumber }
undo interface route-aggregation { interface-number | interface-number.subnumber }
Default
No Layer 3 aggregate interface or subinterface is created.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
interface-number: Specifies a Layer 3 aggregate interface by its number in the range of 1 to 1024.
interface-number.subnumber: Specifies a subinterface of a Layer 3 aggregate interface. The interface-number argument specifies the main interface number. The subnumber argument specifies the subinterface number and is separated from the main interface number by a dot (.). The value range for the subnumber argument is 1 to 4094.
Usage guidelines
· Before creating a Layer 3 aggregate interface or subinterface, use the reserve-vlan-interface command to reserve enough VLAN interface resources. If not enough VLAN interface resources are reserved, the system fails to create the Layer 3 aggregate interface or subinterface.
Before creating a Layer 3 aggregate interface, reserve a VLAN interface resource for each of the following interfaces:
¡ Layer 3 aggregate interface.
¡ Member ports in the corresponding Layer 3 aggregation group.
For example, before creating a Layer 3 aggregation group containing three member ports, reserve four VLAN interface resources. The Layer 3 aggregate interface uses one VLAN interface resource and each of the member ports uses one VLAN interface resource.
Before creating Layer 3 aggregate subinterfaces on a Layer 3 aggregate interface, reserve a VLAN interface resource for each of the following interface:
¡ Layer 3 aggregate interface.
¡ Member ports in the corresponding Layer 3 aggregation group.
¡ Layer 3 aggregate subinterfaces.
For example, before creating four Layer 3 aggregate subinterfaces on a Layer 3 aggregate interface whose corresponding aggregation group has two member ports, reserve seven VLAN interface resources. The aggregate interface uses one VLAN interface resource. Each of the member ports and aggregate subinterfaces uses one VLAN interface resource.
Before creating a Layer 3 aggregate subinterface, do not reserve a resource for the VLAN interface whose interface number matches the subinterface number. After you reserve a VLAN interface resource, do not create a Layer 3 aggregate subinterface whose subinterface number is the VLAN interface number. A Layer 3 aggregate subinterface uses the VLAN interface resource in processing tagged packets whose VLAN ID matches the subinterface number.
To reserve global-type VLAN interface resources, specify the global keyword in the reserve-vlan-interface command. To reserve local-type VLAN interface resources, do not specify the global keyword. Reserved VLAN interface resources are of the local type in this chapter.
For more information about reserving VLAN interface resources, see VLAN configuration in Layer 2—LAN Switching Configuration Guide.
· When you create a Layer 3 aggregate interface, the system automatically creates a Layer 3 static aggregation group numbered the same.
· Deleting an aggregate interface also deletes its aggregation group. At the same time, the member ports of the aggregation group, if any, leave the aggregation group.
· Deleting a Layer 3 aggregate subinterface does not affect its main interface and the corresponding Layer 3 aggregation group.
Examples
# Create Layer 3 aggregate interface Route-Aggregation 1 and enter its view.
[Sysname] reserve-vlan-interface 3000
[Sysname]interface route-aggregation 1
[Sysname-Route-Aggregation1]
# Create Layer 3 aggregate subinterface Route-Aggregation 1.1 and enter its view.
[Sysname] reserve-vlan-interface 3001
[Sysname] interface route-aggregation 1.1
[Sysname-Route-Aggregation1.1]
lacp edge-port
Use lacp edge-port to configure an aggregate interface as an edge aggregate interface.
Use undo lacp edge-port to restore the default.
Syntax
lacp edge-port
undo lacp edge-port
Default
An aggregate interface does not operate as an edge aggregate interface.
Views
Layer 2 aggregate interface view, Layer 3 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
Use this command on the aggregate interface that connects the device to a server if dynamic link aggregation is configured only on the device. This feature improves link reliability by enabling all member ports of the aggregation group to forward packets.
This command takes effect only on an aggregate interface corresponding to a dynamic aggregation group.
Examples
# Configure Layer 2 aggregate interface Bridge-aggregation 1 as an edge aggregate interface.
<Sysname> System-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] lacp edge-port
lacp period short
Use lacp period short to set the short LACP timeout interval (3 seconds) on an interface.
Use undo lacp period to restore the default.
Syntax
lacp period short
undo lacp period
Default
The LACP timeout interval is the long timeout interval (90 seconds) on an interface.
Views
Layer 2 Ethernet interface view, Layer 3 Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Examples
# Set the short LACP timeout interval (3 seconds) on FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] lacp period short
lacp system-priority
Use lacp system-priority to set the system LACP priority.
Use undo lacp system-priority to restore the default.
Syntax
lacp system-priority system-priority
undo lacp system-priority
Default
The system LACP priority is 32768.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
system-priority: Specifies the system LACP priority in the range of 0 to 65535. The smaller the value, the higher the system LACP priority.
Examples
# Set the system LACP priority to 64.
<Sysname> system-view
[Sysname] lacp system-priority 64
Related commands
link-aggregation port-priority
link-aggregation bfd ipv4
Use link-aggregation bfd ipv4 to enable BFD for an aggregation group.
Use undo link-aggregation bfd to restore the default.
Syntax
link-aggregation bfd ipv4 source ip-address destination ip-address
undo link-aggregation bfd
Default
BFD is disabled for an aggregation group.
Views
Layer 2 aggregate interface view, Layer 3 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
source ip-address: Specifies the source IP address of BFD sessions.
destination ip-address: Specifies the destination IP address of BFD sessions.
Usage guidelines
For BFD to take effect on an aggregation group, configure BFD on both ends of the aggregate link.
Make sure the source and destination IP addresses are consistent at the two ends of an aggregate link. For example, if you execute link-aggregation bfd ipv4 source 1.1.1.1 destination 2.2.2.2 on the local end, execute link-aggregation bfd ipv4 source 2.2.2.2 destination 1.1.1.1 on the peer end.
The BFD parameters configured on an aggregate interface take effect on all BFD sessions in the aggregation group. For more information about configuring BFD parameters, see High Availability Configuration Guide.
As a best practice, do not configure other protocols to collaborate with BFD on a BFD-enabled aggregate interface.
Examples
# Enable BFD for Layer 2 aggregation group 1, and specify the source and destination IP addresses as 1.1.1.1 and 2.2.2.2 for BFD sessions.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] link-aggregation bfd ipv4 source 1.1.1.1 destination 2.2.2.2
link-aggregation capability
Use link-aggregation capability to configure the link aggregation capability for the device.
Use undo link-aggregation capability to restore the default.
Syntax
link-aggregation capability max-group max-group-number max-selected-port max-selected-port-number
undo link-aggregation capability
Default
The device supports a maximum of 1024 aggregation groups, and an aggregation group can have a maximum of 16 Selected ports.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
max-group max-group-number: Specifies the maximum number of aggregation groups that the device supports. The value for the max-group-number argument must be 256, 512, or 1024.
max-selected-port max-selected-port-number: Specifies the maximum number of Selected ports per aggregation group. The value for the max-selected-port-number argument must be 16, 32, or 64.
Usage guidelines
This command is available in Release 1138P01 and later versions.
After you execute this command, save the configuration and reboot the device for the configuration to take effect. Before rebooting the device, make sure you know the possible impact on the network.
This command fails if the number of existing aggregation groups exceeds the configured maximum number.
If you create aggregation groups after executing the link-aggregation capability command and the number of aggregation groups exceeds the configured number, some aggregation groups are deleted at the next reboot.
The maximum number of Selected ports allowed in an aggregation group is limited by one of the following values, whichever value is smaller:
· Maximum number set by using the link-aggregation selected-port maximum command.
· Maximum number of Selected ports allowed by the link aggregation capability.
If you execute this command multiple times, the most recent configuration takes effect at the next reboot.
Examples
# Configure the device to support a maximum of 1024 aggregation groups and a maximum of 16 Selected ports per aggregation group.
<Sysname> system-view
[Sysname] link-aggregation capability max-group 1024 max-selected-port 16
The configuration will take effect at the next reboot. Continue? [Y/N]:y
Please save the configuration, and reboot the device.
link-aggregation global load-sharing mode
Use link-aggregation global load-sharing mode to set the global link-aggregation load sharing mode.
Use undo link-aggregation global load-sharing mode to restore the default.
Syntax
link-aggregation global load-sharing mode { destination-ip | destination-mac | destination-port | ingress-port | ip-protocol | source-ip | source-mac | source-port } *
undo link-aggregation global load-sharing mode
Default
The system automatically chooses link-aggregation load sharing mode based on packet types.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
destination-ip: Load shares traffic based on destination IP addresses.
destination-mac: Load shares traffic based on destination MAC addresses.
destination-port: Load shares traffic based on destination ports.
ingress-port: Load shares traffic based on ingress ports.
ip-protocol: Load shares traffic based on IP protocol types.
source-ip: Load shares traffic based on source IP addresses.
source-mac: Load shares traffic based on source MAC addresses.
source-port: Load shares traffic based on source ports.
Usage guidelines
The load sharing mode that you configure overwrites the previous mode.
If you configure both link aggregation load sharing and per-flow load sharing over equal-cost routes, the latest configuration takes effect. Per-flow load sharing over equal-cost routes identifies a flow based on five tuples (source IP address, destination IP address, source port number, destination port number, and IP protocol number). For information about configuring per-flow load sharing over equal-cost routes, see Layer 3—IP Services Configuration Guide.
If an unsupported load sharing mode is configured, an error prompt appears.
|
NOTE: If you set the global load-sharing mode to source MAC address, the setting takes effect only on Layer 2 aggregation groups. A Layer 3 aggregation group forwards traffic by using one of its Selected ports rather than load shares traffic. When the Selected port fails, traffic is switched to another Selected port in the aggregation group. |
Examples
# Set the global load sharing mode to load share packets based on destination MAC addresses.
<Sysname> system-view
[Sysname] link-aggregation global load-sharing mode destination-mac
link-aggregation ignore vlan
Use link-aggregation ignore vlan to configure a Layer 2 aggregate interface to ignore the specified VLANs.
Use undo link-aggregation ignore vlan to restore the default.
Syntax
link-aggregation ignore vlan vlan-id-list
undo link-aggregation ignore vlan vlan-id-list
Default
A Layer 2 aggregate interface does not ignore any VLANs.
Views
Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
vlan-id-list: Specifies a list of VLANs to be ignored in the format of vlan-id-list = { vlan-id1 [ to vlan-id2 ] }&<1-10>, where vlan-id1 and vlan-id2 are both in the range of 1 to 4094, vlan-id2 cannot be smaller than vlan-id1, and &<1-10> indicates that you can specify up to 10 vlan-id1 [ to vlan-id2 ] parameters.
Usage guidelines
With this command configured, a Layer 2 aggregate interface ignores the permitted VLAN and VLAN tagging mode configuration of the specified VLANs when determining Selected ports. Inconsistent configuration about these VLANs does not affect the member ports that will become Selected ports.
Examples
# Configure Layer 2 aggregate interface bridge-aggregation 1 to ignore VLAN 50.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] link-aggregation ignore vlan 50
link-aggregation lacp traffic-redirect-notification enable
Use link-aggregation lacp traffic-redirect-notification enable to enable link-aggregation traffic redirection.
Use undo link-aggregation lacp traffic-redirect-notification enable to disable link-aggregation traffic redirection.
Syntax
link-aggregation lacp traffic-redirect-notification enable
undo link-aggregation lacp traffic-redirect-notification enable
Default
Link-aggregation traffic redirection is disabled.
Views
System view, Layer 2 aggregate interface view, Layer 3 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
This command is available in Release 1138P01 and later versions.
When you restart a card that contains Selected ports, this feature redirects traffic of the card to other cards. Zero packet loss is guaranteed for known unicast traffic, but not for unknown unicast traffic. (In standalone mode.)
When you restart an IRF member device that contains Selected ports, this feature redirects traffic of the IRF member device to other IRF member devices. When you restart a card that contains Selected ports, this feature redirects traffic of the card to other cards. Zero packet loss is guaranteed for known unicast traffic, but not for unknown unicast traffic. (In IRF mode.)
Link-aggregation traffic redirection applies only to dynamic link aggregation groups.
To prevent traffic interruption, enable link-aggregation traffic redirection on devices at both ends of the aggregate link.
Do not enable both spanning tree and link-aggregation traffic redirection on a device. Otherwise, light packet loss might occur when a card or the device reboots.
Link-aggregation traffic redirection cannot operate correctly on an edge aggregate interface.
Global link-aggregation traffic redirection settings take effect on all aggregation groups. A link aggregation group preferentially uses the group-specific link-aggregation traffic redirection settings. If group-specific link-aggregation traffic redirection is not configured, the group uses the global link-aggregation traffic redirection settings.
As a best practice, enable link-aggregation traffic redirection on aggregate interfaces. If you enable this feature globally, communication with a third-party peer device might be affected if the peer is not compatible with this feature.
Examples
# Enable link-aggregation traffic redirection.
<Sysname> system-view
[Sysname] link-aggregation lacp traffic-redirect-notification enable
link-aggregation load-sharing mode
Use link-aggregation load-sharing mode to configure an aggregation group to load share traffic on a per-packet basis.
Use undo link-aggregation load-sharing mode to restore the default.
Syntax
link-aggregation load-sharing mode flexible
undo link-aggregation load-sharing mode
Default
The load sharing mode of a group is the same as the global load sharing mode.
Views
Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
flexible: Load shares traffic on a per-packet basis.
Examples
# Configure Layer 2 aggregation group 1 to load share traffic on a per-packet basis.
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] link-aggregation load-sharing mode flexible
Related commands
link-aggregation global load-sharing mode
link-aggregation load-sharing mode local-first
Use link-aggregation load-sharing mode local-first to enable local-first load sharing for link aggregation.
Use undo link-aggregation load-sharing mode local-first to disable local-first load sharing for link aggregation.
Syntax
link-aggregation load-sharing mode local-first
undo link-aggregation load-sharing mode local-first
Default
Local-first load sharing is enabled for link aggregation.
Views
System view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
You can configure this feature only when the system operates in the IRF mode.
When you disable local-first load sharing for link aggregation, the packets will be load-shared among all Selected ports of the aggregate interface on all IRF member devices.
Local-first load sharing for link aggregation takes effect on only known unicast packets.
Examples
# Disable local-first load sharing for link aggregation.
<Sysname> system-view
[Sysname] undo link-aggregation load-sharing mode local-first
link-aggregation mode
Use link-aggregation mode dynamic to configure an aggregation group to operate in dynamic aggregation mode and enable LACP.
Use undo link-aggregation mode to restore the default.
Syntax
link-aggregation mode dynamic
undo link-aggregation mode
Default
An aggregation group operates in static aggregation mode.
Views
Layer 2 aggregate interface view, Layer 3 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Examples
# Configure Layer 2 aggregation group 1 to operate in dynamic aggregation mode.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] link-aggregation mode dynamic
link-aggregation port-priority
Use link-aggregation port-priority to set the port priority of an interface.
Use undo link-aggregation port-priority to restore the default.
Syntax
link-aggregation port-priority port-priority
undo link-aggregation port-priority
Default
The port priority of an interface is 32768.
Views
Layer 2 Ethernet interface view, Layer 3 Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Parameters
port-priority: Specifies the port priority in the range of 0 to 65535. The smaller the value, the higher the port priority.
Examples
# Set the port priority to 64 for Layer 2 Ethernet interface FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] link-aggregation port-priority 64
Related commands
lacp system-priority
link-aggregation selected-port maximum
Use link-aggregation selected-port maximum to set the maximum number of Selected ports allowed in an aggregation group.
Use undo link-aggregation selected-port maximum to restore the default.
Syntax
link-aggregation selected-port maximum number
undo link-aggregation selected-port maximum
Default
The maximum number of Selected ports allowed in an aggregation group is 16.
Views
Layer 2 aggregate interface view, Layer 3 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
number: Specifies the maximum number of Selected ports allowed in an aggregation group. The value range is 1 to 64.
Usage guidelines
Executing this command might cause some of the Selected ports in an aggregation group to become unselected.
The maximum numbers of Selected ports allowed in the aggregation groups of the local and peer ends must be consistent.
The maximum number of Selected ports allowed in an aggregation group is limited by either the configured maximum number or hardware capability, whichever value is smaller.
You can configure backup between two ports by assigning two ports to an aggregation group and configuring the maximum number of Selected ports allowed in the aggregation group as 1. In this way, only one Selected port is allowed in the aggregation group at any point in time, while the Unselected port serves as a backup port.
Examples
# Set the maximum number of Selected ports to 5 for Layer 2 aggregation group 1.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] link-aggregation selected-port maximum 5
Related commands
· link-aggregation irf-enhanced
· link-aggregation selected-port minimum
link-aggregation selected-port minimum
Use link-aggregation selected-port minimum to set the minimum number of Selected ports in the aggregation group.
Use undo link-aggregation selected-port minimum to restore the default.
Syntax
link-aggregation selected-port minimum number
undo link-aggregation selected-port minimum
Default
The minimum number of Selected ports in an aggregation group is not specified.
Views
Layer 2 aggregate interface view, Layer 3 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
number: Specifies the minimum number of Selected ports in an aggregation group required to bring up the aggregate interface. The value range is 1 to 64.
Usage guidelines
Executing this command might cause all member ports in the aggregation group to become unselected.
The minimum number of Selected ports allowed in the aggregation groups of the local and peer ends must be consistent.
Examples
# Set the minimum number of Selected ports to 3 for Layer 2 aggregation group 1.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] link-aggregation selected-port minimum 3
Related commands
link-aggregation selected-port maximum
mtu
Use mtu to set the MTU for a Layer 3 aggregate interface or subinterface.
Use undo mtu to restore the default.
Syntax
mtu size
undo mtu
Default
The MTU for Layer 3 aggregate interfaces and subinterfaces is 1500 bytes.
Views
Layer 3 aggregate interface view, Layer 3 aggregate subinterface view
Predefined user roles
network-admin
mdc-admin
Parameters
size: Specifies the MTU in bytes. In versions earlier than Release 1138P01, the value range for the size argument is 46 to 1560. In Release 1138P01 and later versions, the value range for the size argument is 46 to 9008.
Usage guidelines
The MTU configured for an interface takes effect only on packets that are sent to the CPU for software forwarding, including packets sent from or destined for this interface.
If an interface is configured with both the mtu and ip mtu commands, the device fragments a packet based on the MTU set by using the ip mtu command. To avoid fragmentation, set an appropriate MTU for an interface. For information about the ip mtu command, see Layer 3—IP Services Command Reference.
Examples
# Set the MTU to 1492 bytes for Layer 3 aggregate interface Route-Aggregation 1.
[Sysname] interface route-aggregation 1
[Sysname-Route-Aggregation1] mtu 1492
port link-aggregation group
Use port link-aggregation group to assign an Ethernet interface to an aggregation group.
Use undo port link-aggregation group to remove an Ethernet interface from the aggregation group to which it belongs.
Syntax
port link-aggregation group number
undo port link-aggregation group
Default
An Ethernet interface does not belong to any aggregation group.
Views
Layer 2 Ethernet interface view, Layer 3 Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Parameters
number: Specifies an aggregation group by its aggregate interface number. The value range is 1 to 1024.
Usage guidelines
A Layer 2 Ethernet interface can be assigned to a Layer 2 aggregation group only. A Layer 3 Ethernet interface can be assigned to a Layer 3 aggregation group only.
An Ethernet interface can belong to only one aggregation group.
Examples
# Assign Layer 2 Ethernet interface FortyGigE 1/0/1 to Layer 2 aggregation group 1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] port link-aggregation group 1
reset counters interface
Use reset counters interface to clear statistics for the specified aggregate interfaces.
Syntax
reset counters interface [ { bridge-aggregation | route-aggregation } [ interface-number ] ]
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
bridge-aggregation: Specifies Layer 2 aggregate interfaces.
route-aggregation: Specifies Layer 3 aggregate interfaces.
interface-number: Specifies an existing aggregate interface number.
Usage guidelines
Use this command to clear history statistics before you collect traffic statistics for a time period.
If you do not specify any option, the command clears statistics for all interfaces in the system.
If you specify only the bridge-aggregation or route-aggregation keyword, the command clears statistics for all Layer 2 or Layer 3 aggregate interfaces.
If you specify the bridge-aggregation interface-number or route-aggregation interface-number option, the command clears statistics for the specified Layer 2 or Layer 3 aggregate interface.
The bridge-aggregation or route-aggregation keyword is available only when Layer 2 or Layer 3 aggregate interfaces exist on the switch.
Examples
# Clear the statistics for Layer 2 aggregate interface Bridge-Aggregation 1.
<Sysname> reset counters interface bridge-aggregation 1
reset lacp statistics
Use reset lacp statistics to clear LACP statistics for the specified link aggregation member ports.
Syntax
reset lacp statistics [ interface interface-list ]
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
interface interface-list: Specifies a list of link aggregation member ports, in the format interface-type interface-number [ to interface-type interface-number ]. interface-type interface-number specifies an interface by its type and number. If you do not specify any member ports, the command clears LACP statistics for all member ports.
Examples
# Clear LACP statistics for all link aggregation member ports.
<Sysname> reset lacp statistics
display link-aggregation member-port
shutdown
Use shutdown to shut down an aggregate interface.
Use undo shutdown to bring up an aggregate interface.
Syntax
shutdown
undo shutdown
Default
Aggregate interfaces are up.
Views
Layer 2 aggregate interface view, Layer 3 aggregate interface view, Layer 3 aggregate subinterface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
Shutting down or bringing up a Layer 3 aggregate interface shuts down or brings up its subinterfaces. Shutting down or bringing up a Layer 3 aggregate subinterface does not affect its main interface.
Examples
# Bring up Layer 2 aggregate interface Bridge-Aggregation 1.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] undo shutdown
Port isolation commands
display port-isolate group
Use display port-isolate group to display port isolation group information.
Syntax
display port-isolate group [ group-number ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
group-number: Specifies an isolation group by its number in the range of 1 to 8.
Examples
# Display all isolation groups.
<Sysname> display port-isolate group
Port isolation group information:
Group ID: 1
Group members:
FortyGigE1/0/1
# Display information about isolation group 1.
<Sysname> display port-isolate group 1
Port isolation group information:
Group ID: 1
Group members:
FortyGigE1/0/1
Table 27 Command output
Field |
Description |
Group ID |
Isolation group number. |
Group members |
Isolated ports in the isolation group. |
Related commands
port-isolate enable
port-isolate enable
Use port-isolate enable to assign a port to an isolation group.
Use undo port-isolate enable to remove a port from an isolation group.
Syntax
port-isolate enable group group-number
undo port-isolate enable
Default
No ports are assigned to an isolation group.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
group group-number: Specifies an isolation group by its number in the range of 1 to 8. For this switch series, you can assign ports to only isolation group 1.
Usage guidelines
The configuration in Layer 2 Ethernet interface view applies only to the interface.
The configuration in Layer 2 aggregate interface view applies to the Layer 2 aggregate interface and its aggregation member ports. If the device fails to apply the configuration to the aggregate interface, it does not assign any aggregation member port to the isolation group. If the failure occurs on an aggregation member port, the device skips the port and continues to assign other aggregation member ports to the isolation group.
To assign ports to the specified isolation group, make sure the isolation group already exists.
Examples
# Assign ports FortyGigE 1/0/1 and FortyGigE 1/0/2 to isolation group 1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] port-isolate enable group 1
[Sysname-FortyGigE1/0/1] quit
[Sysname] interface fortygige 1/0/2
[Sysname-FortyGigE1/0/2] port-isolate enable group 1
Related commands
display port-isolate group
port-isolate group
Use port-isolate group to create an isolation group.
Use undo port-isolate group to delete isolation groups.
Syntax
port-isolate group group-number
undo port-isolate group { group-number | all }
Default
No isolation group exists.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
group-number: Specifies an isolation group by its number in the range of 1 to 8. For this switch series, only the isolation group numbered 1 is valid.
all: Deletes all isolation groups.
Usage guidelines
If you execute this command multiple times, the most recent configuration takes effect.
Examples
# Create isolation group 1.
<Sysname> system-view
[Sysname] port-isolate group 1
Spanning tree commands
active region-configuration
Use active region-configuration to activate your MST region configuration.
Syntax
active region-configuration
Views
MST region view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
When you configure MST region parameters, MSTP launches a new spanning tree calculation process that might cause network topology instability. This is most likely to occur when you configure the VLAN-to-instance mapping table. The launch occurs after the MST region parameters are activated with the active region-configuration command or you enable the spanning tree feature with the stp global enable command.
As a best practice, use the check region-configuration command to determine whether the MST region configurations to be activated are correct. Run this command only when they are correct.
Examples
# Map VLAN 2 to MSTI 1 and manually activate the MST region configuration.
<Sysname> system-view
[Sysname] stp region-configuration
[Sysname-mst-region] instance 1 vlan 2
[Sysname-mst-region] active region-configuration
Related commands
· check region-configuration
· instance
· region-name
· revision-level
· stp global enable
· vlan-mapping modulo
check region-configuration
Use check region-configuration to display MST region pre-configuration information, including the region name, revision level, and VLAN-to-instance mapping settings.
Syntax
check region-configuration
Views
MST region view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
Two or more spanning tree devices belong to the same MST region only if they are configured with the same format selector (0 by default and not configurable), MST region name, and MST region revision level, have the same VLAN-to-instance mapping entries in the MST region, and are connected through a physical link.
As a best practice, use this command to determine whether the MST region configurations to be activated are correct. Activate them only when they are correct.
Examples
# Display MST region pre-configurations.
<Sysname> system-view
[Sysname] stp region-configuration
[Sysname-mst-region] check region-configuration
Admin Configuration
Format selector : 0
Region name : 001122334400
Revision level : 0
Configuration digest : 0x3ab68794d602fdf43b21c0b37ac3bca8
Instance VLANs Mapped
0 1, 3 to 4094
15 2
Table 28 Command output
Field |
Description |
Format selector |
Format selector of the MST region, which is 0 (not configurable). |
Region name |
MST region name. |
Revision level |
Revision level of the MST region. |
Instance VLANs Mapped |
VLAN-to-instance mappings in the MST region. |
Related commands
· active region-configuration
· instance
· region-name
· revision-level
· vlan-mapping modulo
display stp
Use display stp to display the spanning tree status and statistics information. Based on the information, you can analyze and maintain the network topology or determine whether the spanning tree is working correctly.
Syntax
In standalone mode:
display stp [ instance instance-list ] [ interface interface-list | slot slot-number ] [ brief ]
In IRF mode:
display stp [ instance instance-list ] [ interface interface-list | chassis chassis-number slot slot-number ] [ brief ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
instance instance-list: Displays the status and statistics information of the MSTIs that are specified by an instance list, in the format of instance-list = { instance-id [ to instance-id ] }&<1-10>, where &<1-10> indicates that you can specify up to 10 instances or instance ranges. The value range for the instance-id argument is 0 to 4094, and the value 0 represents the CIST.
interface interface-list: Displays the spanning tree status and statistics on the ports that are specified by a port list, in the format of interface-list = { interface-type interface-number [ to interface-type interface-number ] }&<1-10>, where &<1-10> indicates that you can specify up to 10 ports or port ranges.
brief: Displays brief spanning tree status and statistics. If this keyword is not specified, the command displays the detailed spanning tree status and statistics.
slot slot-number: Displays the spanning tree status and statistics on the specified card. slot-number represents the number of the slot that houses the card. If this option is not specified, this command displays the spanning tree status and statistics on all cards. (In standalone mode.)
chassis chassis-number slot slot-number: Displays the spanning tree status and statistics on the specified card of the specified IRF member device. The chassis-number argument represents the ID of the IRF member device. The slot-number argument represents the number of the slot that houses the card. If this option is not specified, this command displays the spanning tree status and statistics on all cards of all member devices in the IRF fabric. (In IRF mode.)
Usage guidelines
In STP or RSTP mode:
· If you do not specify any port, this command displays the spanning tree information for all ports. The displayed information is sorted by port name.
· If you specify a port list, this command displays the spanning tree information for the specified ports. The displayed information is sorted by port name.
In MSTP mode:
· If you do not specify any MSTI or port, this command displays the spanning tree information of all MSTIs on all ports. The displayed information is sorted by MSTI ID and by port name in each MSTI.
· If you specify an MSTI but not a port, this command displays the spanning tree information on all ports in that MSTI. The displayed information is sorted by port name.
· If you specify some ports but not an MSTI, this command displays the spanning tree information of all MSTIs on the specified ports. The displayed information is sorted by MSTI ID and by port name in each MSTI.
· If you specify both an MSTI ID and a port list, this command displays the spanning tree information on the specified ports in the specified MSTI. The displayed information is sorted by port name.
Examples
# In MSTP mode, display the brief spanning tree status and statistics of MSTI 0 on ports FortyGigE 1/0/1 through FortyGigE 1/0/4.
<Sysname> display stp instance 0 interface fortygige 1/0/1 to fortygige 1/0/4 brief
MSTID Port Role STP State Protection
0 FortyGigE1/0/1 ALTE DISCARDING LOOP
0 FortyGigE1/0/2 DESI FORWARDING NONE
0 FortyGigE1/0/3 DESI FORWARDING NONE
0 FortyGigE1/0/4 DESI FORWARDING NONE
Table 29 Command output
Field |
Description |
MSTID |
MSTI ID in the MST region. |
Port |
Port name, corresponding to each MSTI. |
Role |
Port role: · ALTE—The port is an alternate port. · BACK—The port is a backup port. · ROOT—The port is a root port. · DESI—The port is a designated port. · MAST—The port is a master port. · DISA—The port is disabled. |
STP State |
Spanning tree status on the port: · FORWARDING—The port can receive and send BPDUs and also forward user traffic. · DISCARDING—The port can receive and send BPDUs but cannot forward user traffic. · LEARNING—The port is in a transitional state. It can receive and send BPDUs but cannot forward user traffic. |
Protection |
Protection type on the port: · ROOT—Root guard. · LOOP—Loop guard. · BPDU—BPDU guard. · NONE—No protection. |
# In MSTP mode, display the detailed spanning tree status and statistics of all MSTIs on all ports.
<Sysname> display stp
-------[CIST Global Info][Mode MSTP]-------
Bridge ID : 32768.000f-e200-2200
Bridge times : Hello 2s MaxAge 20s FwdDelay 15s MaxHops 20
Root ID/ERPC : 0.00e0-fc0e-6554, 200200
RegRoot ID/IRPC : 32768.000f-e200-2200, 0
RootPort ID : 128.48
BPDU-Protection : Disabled
Bridge Config-
Digest-Snooping : Disabled
TC or TCN received : 2
Time since last TC : 0 days 0h:5m:42s
----[Port153(FortyGigE1/0/1)][FORWARDING]----
Port protocol : Enabled
Port role : Designated Port (Boundary)
Port ID : 128.153
Port cost(Legacy) : Config=auto, Active=200
Desg.bridge/port : 32768.000f-e200-2200, 128.2
Port edged : Config=disabled, Active=disabled
Point-to-Point : Config=auto, Active=true
Transmit limit : 10 packets/hello-time
TC-Restriction : Disabled
Role-Restriction : Disabled
Protection type : None
MST BPDU format : Config=auto, Active=legacy
Port Config-
Digest-Snooping : Disabled
Rapid transition : False
Num of VLANs mapped : 1
Port times : Hello 2s MaxAge 20s FwdDelay 15s MsgAge 2s RemHops 20
BPDU sent : 186
TCN: 0, Config: 0, RST: 0, MST: 186
BPDU received : 0
TCN: 0, Config: 0, RST: 0, MST: 0
-------[MSTI 1 Global Info]-------
Bridge ID : 0.000f-e23e-9ca4
RegRoot ID/IRPC : 0.000f-e23e-9ca4, 0
RootPort ID : 0.0
Root type : Primary root
Master bridge : 32768.000f-e23e-9ca4
Cost to master : 0
TC received : 0
# Display the spanning tree status and statistics when the spanning tree feature is disabled.
<Sysname> display stp
Protocol status : Disabled
Protocol Std. : IEEE 802.1s
Version : 3
CIST Bridge-Prio. : 32768
MAC address : 000f-e200-8048
Max age(s) : 20
Forward delay(s) : 15
Hello time(s) : 2
Max hops : 20
Table 30 Command output
Field |
Description |
Bridge ID |
Bridge ID, which comprises the device's priority in the MSTI and its MAC address. For example, in output "32768.000f-e200-2200," the value preceding the dot is the device's priority in the MSTI, and the value following the dot is the device's MAC address. |
Bridge times |
Major parameters for the bridge: · Hello—Hello timer. · MaxAge—Maximum age timer. · FwdDelay—Forward delay timer. · MaxHops—Maximum hops within the MST region. |
Root ID/ERPC |
CIST root ID and external path cost (the path cost from the device to the CIST root). |
RegRoot ID/IRPC |
CIST regional root ID and internal path cost (the path cost from the device to the CIST regional root). |
RootPort ID |
Root port ID. "0.0" indicates that the device is the root and there is no root port. |
BPDU-Protection |
Global status of the BPDU guard feature. |
Bridge Config- Digest-Snooping |
Global status of Digest Snooping. |
TC or TCN received |
Number of TC/TCN BPDUs received in the MSTI. |
Time since last TC |
Time since the latest topology change in the MSTI. |
[FORWARDING] |
The port is in forwarding state. |
[DISCARDING] |
The port is in discarding state. |
[LEARNING] |
The port is in learning state. |
Port protocol |
Status of the spanning tree feature on the port. |
Port role |
Port role: · Alternate. · Backup. · Root. · Designated. · Master. · Disabled. |
(Boundary) |
The port is a regional boundary port. |
Port cost(Legacy) |
Path cost of the port. The field in parentheses indicates the standard (legacy, dot1d-1998, or dot1t) used for port path cost calculation. · Config—Configured value. · Active—Actual value. |
Desg.bridge/port |
Designated bridge ID and port ID of the port. The port ID displayed is insignificant for a port which does not support port priority. |
Port edged |
The port is an edge port or non-edge port. · Config—Configured value. · Active—Actual value. |
Point-to-Point |
The port is connected to a point-to-point link or not. · Config—Configured value. · Active—Actual value. |
Transmit limit |
Number of BPDUs sent within each hello time. |
Protection type |
Protection type on the port: · Root—Root guard. · Loop—Loop guard. · BPDU—BPDU guard. · None—No protection. |
TC-Restriction |
Status of TC transmission restriction on the port. |
Role-Restriction |
Status of port role restriction on the port. |
MST BPDU format |
Format of the MST BPDUs that the port can send: · Config—Configured value (legacy or 802.1s). · Active—Actual value (legacy or 802.1s). |
Port Config- Digest-Snooping |
Status of Digest Snooping on the port. |
Rapid transition |
Indicates whether the port rapidly transits to the forwarding state in the MSTI. |
Num of VLANs mapped |
Number of VLANs that are mapped to the MSTI. |
Port times |
Major parameters for the port: · Hello—Hello timer. · MaxAge—Maximum age timer. · FwdDelay—Forward delay timer. · MsgAge—Message age timer. · RemHops—Remaining hops. |
BPDU sent |
Statistics on sent BPDUs. |
BPDU received |
Statistics on received BPDUs. |
RegRoot ID/IRPC |
MSTI regional root/internal path cost. |
Root Type |
MSTI root type: · Primary root. · Secondary root. |
Master bridge |
MSTI root bridge ID. |
Cost to master |
Path cost from the MSTI to the master bridge. |
TC received |
Number of received TC BPDUs. |
Protocol status |
Spanning tree protocol status. |
Protocol Std. |
Spanning tree protocol standard. |
Version |
Spanning tree protocol version. |
CIST Bridge-Prio. |
Device's priority in the CIST. |
Max age(s) |
Aging timer (in seconds) for BPDUs. |
Forward delay(s) |
Port state transition delay (in seconds). |
Hello time(s) |
Interval (in seconds) for the root bridge to send BPDUs. |
Max hops |
Maximum hops in the MSTI. |
Related commands
reset stp
display stp abnormal-port
Use display stp abnormal-port to display information about ports that are blocked by spanning tree protection features.
Syntax
display stp abnormal-port
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Examples
# In MSTP mode, display information about ports that are blocked by spanning tree protection features.
<Sysname> display stp abnormal-port
MSTID Blocked Port Reason
1 FortyGigE1/0/1 Root-Protected
2 FortyGigE1/0/2 Loop-Protected
12 FortyGigE1/0/3 Loopback-Protected
Table 31 Command output
Field |
Description |
MSTID |
MSTI of the blocked port. |
Blocked Port |
Name of a blocked port. |
Reason |
Reason that the port was blocked: · Root-Protected—Root guard feature. · Loop-Protected—Loop guard feature. · Loopback-Protected—Self-loop protection. A port in the MSTI receives a BPDU that it sends. · Disputed—Dispute protection. A port receives a low-priority BPDU from a non-blocked designated port. |
display stp bpdu-statistics
Use display stp bpdu-statistics to display the BPDU statistics on ports.
Syntax
display stp bpdu-statistics [ interface interface-type interface-number [ instance instance-list ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
interface interface-type interface-number: Displays the BPDU statistics on a specified port, where interface-type interface-number indicates the port type and number.
instance instance-list: Displays the BPDU statistics of the MSTIs that are specified by an instance list, in the format of instance-list = { instance-id [ to instance-id ] }&<1-10>, where &<1-10> indicates that you can specify up to 10 instances or instance ranges. The value range for the instance-id argument is 0 to 4094, and the value 0 represents the CIST.
Usage guidelines
In MSTP mode:
· If you do not specify any MSTI or port, this command displays the BPDU statistics of all MSTIs on all ports. The displayed information is sorted by port name and by MSTI ID on each port.
· If you specify a port but not an MSTI, this command displays the BPDU statistics of all MSTIs on the port. The displayed information is sorted by MSTI ID.
· If you specify both an MSTI ID and a port, this command displays the BPDU statistics of the specified MSTI on the port.
In STP or RSTP mode:
· If you do not specify any port, this command displays the BPDU statistics of on all ports. The displayed information is sorted by port name.
· If you specify a port, this command displays the BPDU statistics on the port.
Examples
# In MSTP mode, display the BPDU statistics of all MSTIs on FortyGigE 1/0/1.
<Sysname> display stp bpdu-statistics interface fortygige 1/0/1
Port: FortyGigE1/0/1
Instance-Independent:
Type Count Last Updated
--------------------------- ---------- -----------------
Invalid BPDUs 0
Looped-back BPDUs 0
MAX-aged BPDUs 0
TCN sent 0
TCN received 0
TCA sent 0
TCA received 2 10:33:12 01/13/2011
Config sent 0
Config received 0
RST sent 0
RST received 0
MST sent 4 10:33:11 01/13/2011
MST received 151 10:37:43 01/13/2011
Instance 0:
Type Count Last Updated
--------------------------- ---------- -----------------
Timeout BPDUs 0
MAX-hoped BPDUs 0
TC detected 1 10:32:40 01/13/2011
TC sent 3 10:33:11 01/13/2011
TC received 0
Table 32 Command output
Field |
Description |
Port |
Port name. |
Instance-Independent |
Statistics not related to any particular MSTI. |
Type |
Statistical item. |
Looped-back BPDUs |
BPDUs sent and then received by the same port. |
MAX-aged BPDUs |
BPDUs whose max age was exceeded. |
TCN sent |
TCN BPDUs sent. |
TCN received |
TCN BPDUs received. |
TCA sent |
TCA BPDUs sent. |
TCA received |
TCA BPDUs received. |
Config sent |
Configuration BPDUs sent. |
Config received |
Configuration BPDUs sent. |
RST sent |
Configuration BPDUs received. |
RST received |
RSTP BPDUs sent. |
MST sent |
RSTP BPDUs received. |
MST received |
MSTP BPDUs sent. |
Instance |
Statistical information for a particular MSTI. |
Timeout BPDUs |
Expired BPDUs. |
MAX-hoped BPDUs |
BPDUs whose maximum hops were exceeded. |
TC detected |
TC BPDUs detected. |
TC sent |
TC BPDUs sent. |
TC received |
TC BPDUs received. |
display stp down-port
Use display stp down-port to display information about ports that were shut down by spanning tree protection features.
Syntax
display stp down-port
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Examples
# Display information about ports that were shut down by spanning tree protection features.
<Sysname> display stp down-port
Down Port Reason
FortyGigE1/0/1 BPDU-Protected
Table 33 Command output
Field |
Description |
Down Port |
Name of a port that was shut down by the spanning tree protection features. |
Reason |
Reason that the port was shut down. BPDU-Protected indicates the BPDU guard feature. |
display stp history
Use display stp history to display historical port role calculation information.
Syntax
In standalone mode:
display stp [ instance instance-list ] history [ slot slot-number ]
In IRF mode:
display stp [ instance instance-list ] history [ chassis chassis-number slot slot-number ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
instance instance-list: Displays the historical port role calculation information for the MSTIs that are specified by an instance list, in the format of instance-list = { instance-id [ to instance-id ] }&<1-10>, where &<1-10> indicates that you can specify up to 10 instances or instance ranges. The value range for the instance-id argument is 0 to 4094, and the value 0 represents the CIST.
slot slot-number: Displays the historical port role calculation information on the specified card. slot-number represents the number of the slot that houses the card. If this option is not specified, this command displays the historical port role calculation information on all cards. (In standalone mode.)
chassis chassis-number slot slot-number: Displays the historical port role calculation information on the specified card of the specified IRF member device. The chassis-number argument represents the ID of the IRF member device. The slot-number argument represents the number of the slot that houses the card. If this option is not specified, this command displays the historical port role calculation information on all cards of all member devices in the IRF fabric. (In IRF mode.)
Usage guidelines
In STP or RSTP mode, the displayed information is sorted by port role calculation time.
In MSTP mode:
· If you do not specify any MSTI, this command displays the historical port role calculation information for all MSTIs. The displayed information is sorted by MSTI ID and by port role calculation time in each MSTI.
· If you specify an MSTI, this command displays the historical port role calculation information for the specified MSTI by the sequence of port role calculation time.
Examples
In standalone mode:
# In MSTP mode, display the historical port role calculation information for the card on slot 1 in MSTI 2.
<Sysname> display stp instance 2 history slot 1
--------------- STP slot 1 history trace ---------------
------------------- Instance 2 ---------------------
Port FortyGigE1/0/1
Role change : ROOT->DESI (Aged)
Time : 2009/02/08 00:22:56
Port priority : 0.00e0-fc01-6510 0 0.00e0-fc01-6510 128.1
Designated priority : 0.00e0-fc01-6510 0 0.00e0-fc01-6510 128.1
Port FortyGigE1/0/2
Role change : ALTER->ROOT
Time : 2009/02/08 00:22:56
Port priority : 0.00e0-fc01-6510 0 0.00e0-fc01-6510 128.2
128.153
Designated priority : 0.00e0-fc01-6510 0 0.00e0-fc01-6510 128.2
128.153
In IRF mode:
# In MSTP mode, display the historical port role calculation information for the card on slot 1 of IRF member device 1 in MSTI 2.
<Sysname> display stp instance 2 history chassis 1 slot 1
---------- STP chassis 1 slot 1 history trace --------
------------------- Instance 2 ---------------------
Port FortyGigE1/1/0/1
Role change : ROOT->DESI (Aged)
Time : 2009/02/08 00:22:56
Port priority : 0.00e0-fc01-6510 0 0.00e0-fc01-6510 128.1
Designated priority : 0.00e0-fc01-6510 0 0.00e0-fc01-6510 128.1
Port FortyGigE1/1/0/2
Role change : ALTER->ROOT
Time : 2009/02/08 00:22:56
Port priority : 0.00e0-fc01-6510 0 0.00e0-fc01-6510 128.2
128.153
Designated priority : 0.00e0-fc01-6510 0 0.00e0-fc01-6510 128.2
128.153
Table 34 Command output
Field |
Description |
Port |
Port name. |
Role change |
Role change of the port ("Aged" means that the change was caused by expiration of the received configuration BPDU). |
Time |
Time of port role calculation. |
Port priority |
Port priority. |
display stp region-configuration
Use display stp region-configuration to display effective MST region configuration information, including the region name, revision level, and user-configured VLAN-to-instance mappings.
Syntax
display stp region-configuration
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Examples
# In MSTP mode, display effective MST region configuration information.
<Sysname> display stp region-configuration
Oper Configuration
Format selector : 0
Region name : hello
Revision level : 0
Configuration digest : 0x5f762d9a46311effb7a488a3267fca9f
Instance VLANs Mapped
0 21 to 4094
1 1 to 10
2 11 to 20
Table 35 Command output
Field |
Description |
Format selector |
Format selector that is defined by the spanning tree protocol. The default value is 0, and the selector cannot be configured. |
Region name |
MST region name. |
Revision level |
Revision level of the MST region. The default value is 0, and the level can be configured by using the revision-level command. |
VLANs Mapped |
VLANs mapped to the MSTI. |
Related commands
· instance
· region-name
· revision-level
· vlan-mapping modulo
display stp root
Use display stp root to display the root bridge information of spanning trees.
Syntax
display stp root
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Examples
# In MSTP mode, display the root bridge information of all spanning trees.
<Sysname> display stp root
MSTID Root Bridge ID ExtPathCost IntPathCost Root Port
0 0.00e0-fc0e-6554 200200 0 FortyGigE1/0/1
Table 36 Command output
Field |
Description |
ExtPathCost |
External path cost. The device automatically calculates the default path cost of a port. Or, you can use the stp cost command to configure the path cost of a port. |
IntPathCost |
Internal path cost. The device automatically calculates the default path cost of a port. Or, you can use the stp cost command to configure the path cost of a port. |
Root Port |
Root port name (displayed only if a port of the device is the root port of MSTIs). |
display stp tc
Use display stp tc to display the statistics of TC/TCN BPDUs received and sent by ports.
Syntax
In standalone mode:
display stp [ instance instance-list ] tc [ slot slot-number ]
In IRF mode:
display stp [ instance instance-list ] tc [ chassis chassis-number slot slot-number ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
instance instance-list: Displays the statistics of TC/TCN BPDUs received and sent by all ports in the MSTIs that are specified by an instance list, in the format of instance-list = { instance-id [ to instance-id ] }&<1-10>, where &<1-10> indicates that you can specify up to 10 instances or instance ranges. The value range for the instance-id argument is 0 to 4094, and the value 0 represents the CIST.
slot slot-number: Displays the statistics of TC/TCN BPDUs received and sent by all ports in the specified MSTI on the specified card. slot-number represents the number of the slot that houses the card. If this option is not specified, this command displays the statistics of TC/TCN BPDUs received and sent by all ports in the specified MSTI on all cards. (In standalone mode.)
chassis chassis-number slot slot-number: Displays the statistics of TC/TCN BPDUs received and sent by all ports in the specified MSTI on the specified card of the specified IRF member device. The chassis-number argument represents the ID of the IRF member device. The slot-number argument represents the number of the slot that houses the card. If this option is not specified, this command displays the statistics of TC/TCN BPDUs received and sent by all ports in the specified MSTI on all cards of all member devices in the IRF fabric. (In IRF mode.)
Usage guidelines
In STP or RSTP mode, the displayed information is sorted by port name.
In MSTP mode:
· If you do not specify any MSTI, this command displays the statistics of TC/TCN BPDUs that are received and sent by all ports in all MSTIs. The displayed information is sorted by instance ID and by port name in each MSTI.
· If you specify an MSTI, this command displays the statistics of TC/TCN BPDUs that are received and sent by all ports in the specified MSTI, in port name order.
Examples
In standalone mode:
# In MSTP mode, display the statistics of TC/TCN BPDUs received and sent by all ports on the card on slot 1 in MSTI 0.
<Sysname> display stp instance 0 tc slot 1
-------------- STP slot 1 TC or TCN count -------------
MSTID Port Receive Send
0 FortyGigE1/0/1 6 4
0 FortyGigE1/0/2 0 2
In IRF mode:
# In MSTP mode, display the statistics of TC/TCN BPDUs received and sent by all ports on slot 1 of IRF member device 1 in MSTI 0.
<Sysname> display stp instance 0 tc chassis 1 slot 1
--------- STP chassis 1 slot 1 TC or TCN count --------
MSTID Port Receive Send
0 FortyGigE1/1/0/1 6 4
0 FortyGigE1/1/0/2 0 2
Table 37 Command output
Field |
Description |
Port |
Port name. |
Receive |
Number of TC/TCN BPDUs received on each port. |
Send |
Number of TC/TCN BPDUs sent by each port. |
instance
Use instance to map a list of VLANs to an MSTI.
Use undo instance to remap the specified VLAN or all VLANs to the CIST (MSTI 0).
Syntax
instance instance-id vlan vlan-id-list
undo instance instance-id [ vlan vlan-id-list ]
Default
All VLANs are mapped to the CIST.
Views
MST region view
Predefined user roles
network-admin
mdc-admin
Parameters
instance-id: Specifies an MSTI ID. The minimum value is 0, representing the CIST, and the maximum value is 4094. The value range for the instance-id argument is 1 to 4094 for the undo instance command.
vlan vlan-id-list: Specifies a VLAN list in the format of vlan-id-list = { vlan-id [ to vlan-id ] }&<1-10>, where the vlan-id argument represents the VLAN ID in the range of 1 to 4094, and &<1-10> indicates that you can specify up to 10 VLAN IDs or VLAN ID ranges.
Usage guidelines
If you specify no VLAN in the undo instance command, all VLANs mapped to the specified MSTI are remapped to the CIST.
You cannot map the same VLAN to different MSTIs. If you map a VLAN that has been mapped to an MSTI to a new MSTI, the old mapping is automatically removed.
You can configure VLAN-to-instance mapping for up to 63 MSTIs.
After configuring this command, run the active region-configuration command to activate the VLAN-to-instance mapping.
With Digest Snooping enabled globally, modify the VLAN-to-instance mappings or execute the undo stp region-configuration command to restore the default MST region configuration with caution. Such operations might cause loops or traffic disruption because the VLAN-to-instance mappings are inconsistent with those on the neighboring devices.
Examples
# Map VLAN 2 to MSTI 1.
<Sysname> system-view
[Sysname] stp region-configuration
[Sysname-mst-region] instance 1 vlan 2
Related commands
· active region-configuration
· check region-configuration
· display stp region-configuration
region-name
Use region-name to configure the MST region name.
Use undo region-name to restore the default MST region name.
Default
The MST region name of a device is its MAC address.
Predefined user roles
network-admin
mdc-admin
name: Specifies the MST region name, a string of 1 to 32 characters.
The MST region name, the VLAN-to-instance mapping table, and the MSTP revision level of a device determine the device's MST region.
After configuring this command, run the active region-configuration command to activate the configured MST region name.
# Set the MST region name of the device to hello.
[Sysname] stp region-configuration
[Sysname-mst-region] region-name hello
Related commands
· active region-configuration
· check region-configuration
· display stp region-configuration
· instance
· revision-level
· vlan-mapping modulo
reset stp
Use reset stp to clear spanning tree statistics. The spanning tree statistics include the numbers of TCN BPDUs, configuration BPDUs, RST BPDUs, and MST BPDUs that are sent and received through the specified ports.
Syntax
reset stp [ interface interface-list ]
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
interface interface-list: Clears the spanning tree statistics of the ports that are specified in the format of interface-list = { interface-type interface-number [ to interface-type interface-number ] }&<1-10>, where &<1-10> indicates that you can specify up to 10 ports or port ranges. If you don't specify this option, this command clears the spanning tree-related statistics information on all ports.
Examples
# Clear the spanning tree-related statistics on ports FortyGigE 1/0/1 through FortyGigE 1/0/3.
<Sysname> reset stp interface fortygige 1/0/1 to fortygige 1/0/3
Related commands
display stp
revision-level
Use revision-level to configure the MSTP revision level.
Use undo revision-level to restore the default MSTP revision level.
Syntax
revision-level level
undo revision-level
Default
The MSTP revision level is 0.
Views
MST region view
Predefined user roles
network-admin
mdc-admin
Parameters
level: Specifies an MSTP revision level in the range of 0 to 65535.
Usage guidelines
The MSTP revision level, the MST region name, and the VLAN-to-instance mapping table of a device determine the device's MST region. When the MST region name and VLAN-to-instance mapping table are both the same for two MST regions, they can still be differentiated by their MSTP revision levels.
After configuring this command, run the active region-configuration command to activate the configured MST region level.
Examples
# Set the MSTP revision level of the MST region to 5.
<Sysname> system-view
[Sysname] stp region-configuration
[Sysname-mst-region] revision-level 5
Related commands
· active region-configuration
· check region-configuration
· display stp region-configuration
· instance
· region-name
· vlan-mapping modulo
stp bpdu-protection
Use stp bpdu-protection to enable the BPDU guard feature.
Use undo stp bpdu-protection to disable the BPDU guard feature.
Syntax
stp bpdu-protection
undo stp bpdu-protection
Default
The BPDU guard feature is disabled.
Views
System view
Predefined user roles
network-admin
mdc-admin
Examples
# Enable the BPDU guard feature.
<Sysname> system-view
[Sysname] stp bpdu-protection
stp bridge-diameter
Use stp bridge-diameter to set the network diameter, which is the maximum possible number of stations between any two terminal devices on the switched network.
Use undo stp bridge-diameter to restore the default.
Syntax
stp bridge-diameter diameter
undo stp bridge-diameter
Default
The network diameter of the switched network is 7.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
diameter: Specifies the switched network diameter in the range of 2 to 7.
Usage guidelines
An appropriate setting of hello time, forward delay, and max age can speed up network convergence. The values of these timers are related to the network size, and you can set the timers by setting the network diameter. With the network diameter set to 7 (the default), the three timers are also set to their defaults.
Each MST region is considered a device, and the configured network diameter of the switched network is effective only on MSTI 0 (or the common root bridge).
Examples
# In MSTP mode, set the network diameter of the switched network to 5.
<Sysname> system-view
[Sysname] stp bridge-diameter 5
Related commands
· stp timer forward-delay
· stp timer hello
· stp timer max-age
stp compliance
Use stp compliance to configure the mode that a port uses to recognize and send MSTP BPDUs.
Use undo stp compliance to restore the default.
Syntax
stp compliance { auto | dot1s | legacy }
undo stp compliance
Default
A port automatically recognizes the formats of received MSTP packets and determines the formats of MSTP packets to be sent based on the recognized formats.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
auto: Configures the port to recognize the MSTP BPDU format automatically and determine the format of MSTP BPDUs to send.
dot1s: Configures the port to receive and send only standard-format (802.1s-compliant) MSTP BPDUs.
legacy: Configures the port to receive and send only compatible-format MSTP BPDUs.
Usage guidelines
When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only the interface.
When the setting is configured in Layer 2 aggregate interface view, it takes effect on only the aggregate interface.
When the setting is configured on a member port in an aggregation group, it takes effect only after the port leaves the aggregation group.
Examples
# Configure FortyGigE 1/0/1 to send only standard-format (802.1s) MSTP packets.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] stp compliance dot1s
stp config-digest-snooping
Use stp config-digest-snooping to enable Digest Snooping.
Use undo stp config-digest-snooping to disable Digest Snooping.
Syntax
stp config-digest-snooping
undo stp config-digest-snooping
Default
Digest Snooping is disabled.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
Enable this feature both globally and on ports connected to other vendors' devices. To minimize impact, enable the feature on all associated ports before you enable it globally.
When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only the interface.
When the setting is configured in Layer 2 aggregate interface view, it takes effect on only the aggregate interface.
When the setting is configured on a member port in an aggregation group, it takes effect only after the port leaves the aggregation group.
Examples
# Enable Digest Snooping on FortyGigE 1/0/1 and then globally.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] stp config-digest-snooping
[Sysname-FortyGigE1/0/1] quit
[Sysname] stp global config-digest-snooping
Related commands
· display stp
· stp global config-digest-snooping
stp cost
Use stp cost to set the path cost of a port.
Use undo stp cost to restore the default.
Syntax
stp [ instance instance-list ] cost cost
undo stp [ instance instance-list ] cost
Default
The device automatically calculates the path costs of ports in each spanning tree based on the corresponding standard.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
instance instance-list: Sets the path cost of the port in the MSTIs that are specified by an instance list, in the format of instance-list = { instance-id [ to instance-id ] }&<1-10>, where &<1-10> indicates that you can specify up to 10 instances or instance ranges. The value range for the instance-id argument is 0 to 4094, and the value 0 represents the CIST.
cost: Specifies the path cost of the port, with an effective range that depends on the path cost calculation standard that is adopted.
· When the IEEE 802.1d-1998 standard is selected for path cost calculation, the value range for the cost argument is 1 to 65535.
· When the IEEE 802.1t standard is selected for path cost calculation, the value range for the cost argument is 1 to 200000000.
· When the private standard is selected for path cost calculation, the value range for the cost argument is 1 to 200000.
Usage guidelines
Path cost is an important factor in spanning tree calculation. Setting different path costs for a port in MSTIs allows VLAN traffic flows to be forwarded along different physical links, which results in VLAN-based load balancing.
The path cost setting of a port can affect the role selection of the port. When the path cost of a port is changed, the system calculates the role of the port and initiates a state transition.
When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only the interface.
When the setting is configured in Layer 2 aggregate interface view, it takes effect on only the aggregate interface.
When the setting is configured on a member port in an aggregation group, is takes effect only after the port leaves the aggregation group.
Examples
# In MSTP mode, set the path cost of port FortyGigE 1/0/3 in MSTI 2 to 200.
<Sysname> system-view
[Sysname] interface fortygige 1/0/3
[Sysname-FortyGigE1/0/3] stp instance 2 cost 200
Related commands
· display stp
· stp pathcost-standard
stp edged-port
Use stp edged-port to configure a port as an edge port.
Use undo stp edged-port to configure a port as a non-edge port.
Syntax
stp edged-port
undo stp edged-port
Default
All ports are non-edge ports.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
If a port directly connects to a user terminal rather than to another device or a shared LAN segment, this port is regarded as an edge port. In case the network topology changes, an edge port does not cause a temporary loop. You can enable the port to transit to the forwarding state rapidly by configuring it as an edge port. As a best practice, configure ports that directly connect to user terminals as edge ports.
Typically, configuration BPDUs from other devices cannot reach an edge port, because the edge port does not connect to any other device. If a port receives a configuration BPDU when the BPDU guard feature is disabled, the port functions as a non-edge port, even if you configure it as an edge port.
On a port, the loop guard feature and the edge port setting are mutually exclusive.
When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only the interface.
When the setting is configured in Layer 2 aggregate interface view, it takes effect on only the aggregate interface.
When the setting is configured on a member port in an aggregation group, it takes effect only after the port leaves the aggregation group.
Examples
# Configure FortyGigE 1/0/1 as an edge port.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] stp edged-port
Related commands
· stp bpdu-protection
· stp loop-protection
· stp root-protection
stp enable
Use stp enable to enable the spanning tree feature.
Use undo stp enable to disable the spanning tree feature.
Syntax
stp enable
undo stp enable
Default
The spanning tree feature is enabled on all ports.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
When you enable the spanning tree feature, the device operates in STP, RSTP, or MSTP mode, depending on the spanning tree mode setting.
When you enable the spanning tree feature, the device dynamically maintains the spanning tree status of VLANs, based on received configuration BPDUs.
When you disable the spanning tree feature, the device stops maintaining the spanning tree status.
When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only the interface.
When the setting is configured in Layer 2 aggregate interface view, it takes effect on only the aggregate interface.
When the setting is configured on a member port in an aggregation group, it takes effect only after the port leaves the aggregation group.
Examples
# In MSTP mode, disable the spanning tree feature on port FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] undo stp enable
Related commands
· stp global enable
· stp mode
stp global config-digest-snooping
Use stp global config-digest-snooping to enable Digest Snooping globally.
Use undo stp global config-digest-snooping to disable Digest Snooping globally.
Syntax
stp global config-digest-snooping
undo stp global config-digest-snooping
Default
Digest Snooping is disabled globally.
Views
System view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
Enable this feature both globally and on ports connected to other vendors' devices. To minimize impact, enable the feature on all associated ports before you enable it globally.
Examples
# Enable Digest Snooping on FortyGigE 1/0/1 and then globally.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] stp config-digest-snooping
[Sysname-FortyGigE1/0/1] quit
[Sysname] stp global config-digest-snooping
Related commands
· display stp
· stp config-digest-snooping
stp global enable
Use stp global enable to enable the spanning tree feature globally.
Use undo stp global enable to disable the spanning tree feature globally.
Syntax
stp global enable
undo stp global enable
Default
The spanning tree feature is globally disabled.
Views
System view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
When you enable the spanning tree feature, the device operates in STP, RSTP, or MSTP mode, depending on the spanning tree mode setting.
When the spanning tree feature is enabled, the device dynamically maintains the spanning tree status of VLANs based on received configuration BPDUs. When the spanning tree feature is disabled, the device stops maintaining the spanning tree status.
Examples
# Enable the spanning tree feature globally.
<Sysname> system-view
[Sysname] stp global enable
Related commands
· stp enable
· stp mode
stp global mcheck
Use stp global mcheck to perform the mCheck operation globally.
Syntax
stp global mcheck
Views
System view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
If a port on a device running MSTP or RSTP connects to an STP device, this port automatically transits to the STP mode when the port receives STP BPDUs. However, if the peer STP device is shut down or removed and the local device cannot detect the change, the local device cannot automatically transit back to the original mode. In this case, you can perform an mCheck operation to forcibly transit the port to operate in the original mode.
The device operates in STP, RSTP, or MSTP mode, depending on the spanning tree mode setting.
The stp global mcheck command is effective only when the device operates in MSTP or RSTP mode.
Examples
# Perform mCheck globally.
<Sysname> system-view
[Sysname] stp global mcheck
Related commands
· stp mcheck
· stp mode
stp loop-protection
Use stp loop-protection to enable the loop guard feature on a port.
Use undo stp loop-protection to disable the loop guard feature on a port.
Syntax
stp loop-protection
undo stp loop-protection
Default
The loop guard feature is disabled.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
On a port, the loop guard feature is mutually exclusive with the root guard feature or the edge port setting.
When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only the interface.
When the setting is configured in Layer 2 aggregate interface view, it takes effect on only the aggregate interface.
When the setting is configured on a member port in an aggregation group, it takes effect only after the port leaves the aggregation group.
Examples
# Enable the loop guard feature on FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] stp loop-protection
Related commands
· stp edged-port
· stp root-protection
stp max-hops
Use stp max-hops to set the maximum number of hops for an MST region.
Use undo stp max-hops to restore the default.
Syntax
stp max-hops hops
undo stp max-hops
Default
The maximum number of hops for an MST region is 20.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
hops: Specifies the maximum hops in the range of 1 to 40.
Examples
# Set the maximum hops to 35 for an MST region.
<Sysname> system-view
[Sysname] stp max-hops 35
Related commands
display stp
stp mcheck
Use stp mcheck to perform the mCheck operation on a port.
Syntax
stp mcheck
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
If a port on a device that is running MSTP or RSTP connects to an STP device, the port automatically transits to the STP mode when the port receives STP BPDUs. If the peer STP device is shut down or removed and the local device cannot detect the change, the local device cannot automatically transit back to the original mode. In this case, you can perform an mCheck operation to forcibly transit the port to operation in the original mode.
Suppose a scenario where Device A, Device B, and Device C are connected in sequence. Device A runs STP, Device B does not run any spanning tree protocol, and Device C runs RSTP or MSTP. In this case, when Device C receives an STP BPDU transparently transmitted by Device B, the receiving port transits to the STP mode. If you configure Device B to run RSTP or MSTP with Device C, perform mCheck operations on the ports that connect Device B and Device C.
The device operates in STP, RSTP, or MSTP mode, depending on the spanning tree mode setting.
The stp mcheck command is effective only when the device operates in MSTP or RSTP mode.
When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only the interface.
When the setting is configured in Layer 2 aggregate interface view, it takes effect on only the aggregate interface.
When the setting is configured on a member port in an aggregation group, it takes effect only after the port leaves the aggregation group.
Examples
# Perform mCheck on FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] stp mcheck
Related commands
· stp global mcheck
· stp mode
stp mode
Use stp mode to configure the spanning tree operating mode.
Use undo stp mode to restore the default.
Syntax
stp mode { mstp | rstp | stp }
undo stp mode
Default
A spanning tree device operates in MSTP mode.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
mstp: Configures the spanning tree device to operate in MSTP mode.
rstp: Configures the spanning tree device to operate in RSTP mode.
stp: Configures the spanning tree device to operate in STP mode.
Usage guidelines
MSTP mode is compatible with RSTP mode, and RSTP mode is compatible with STP mode.
Examples
# Configure the spanning tree device to operate in STP mode.
<Sysname> system-view
[Sysname] stp mode stp
Related commands
· stp enable
· stp global enable
· stp global mcheck
stp no-agreement-check
Use stp no-agreement-check to enable No Agreement Check on a port.
Use undo stp no-agreement-check to disable No Agreement Check on a port.
Syntax
stp no-agreement-check
undo stp no-agreement-check
Default
No Agreement Check is disabled.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
This command takes effect only after you enable it on the root port.
When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only the interface.
When the setting is configured in Layer 2 aggregate interface view, it takes effect on only the aggregate interface.
When the setting is configured on a member port in an aggregation group, it takes effect only after the port leaves the aggregation group.
Examples
# Enable No Agreement Check on FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] stp no-agreement-check
stp pathcost-standard
Use stp pathcost-standard to specify a standard for the device to use when calculating the default path costs for ports.
Use undo stp pathcost-standard to restore the default.
Syntax
stp pathcost-standard { dot1d-1998 | dot1t | legacy }
undo stp pathcost-standard
Default
The devices uses the legacy standard to calculate the default path costs for ports.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
dot1d-1998: Configures the device to calculate the default path cost for ports based on IEEE 802.1d-1998.
dot1t: Configures the device to calculate the default path cost for ports based on IEEE 802.1t.
legacy: Configures the device to calculate the default path cost for ports based on a private standard.
Usage guidelines
If you change the standard that the device uses in calculating the default path costs, you restore the path costs to the default.
Examples
# Configure the device to calculate the default path cost for ports based on IEEE 802.1d-1998.
<Sysname> system-view
[Sysname] stp pathcost-standard dot1d-1998
Related commands
· display stp
· stp cost
stp point-to-point
Use stp point-to-point to configure the link type of a port.
Use undo stp point-to-point to restore the default.
Syntax
stp point-to-point { auto | force-false | force-true }
undo stp point-to-point
Default
The default setting is auto, and the spanning tree device automatically detects whether a port connects to a point-to-point link.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
auto: Specifies automatic detection of the link type.
force-false: Specifies the non-point-to-point link type.
force-true: Specifies the point-to-point link type.
Usage guidelines
When connecting to a non-point-to-point link, a port is incapable of rapid state transition.
You can configure the link type as point-to-point for a Layer 2 aggregate interface or a port that operates in full duplex mode. As a best practice, use the default setting for the device to automatically detect the port link type.
The stp point-to-point force-false or stp point-to-point force-true command configured on a port in MSTP mode is effective on all MSTIs or VLANs.
If the physical link to which the port connects is not a point-to-point link but you set it to be one, the configuration might cause a temporary loop.
When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only the interface.
When the setting is configured in Layer 2 aggregate interface view, it takes effect on only the aggregate interface.
When the setting is configured on a member port in an aggregation group, it takes effect only after the port leaves the aggregation group.
Examples
# Configure the link that connects FortyGigE 1/0/3 as a point-to-point link.
<Sysname> system-view
[Sysname] interface fortygige 1/0/3
[Sysname-FortyGigE1/0/3] stp point-to-point force-true
Related commands
display stp
stp port priority
Use stp port priority to set the priority of a port. The port priority affects the role of a port in a spanning tree.
Use undo stp port priority to restore the default.
Syntax
stp [ instance instance-list ] port priority priority
undo stp [ instance instance-list ] port priority
Default
The port priority is 128.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
instance instance-list: Sets the priority of the port in the MSTIs that are specified by an instance list, in the format of instance-list = { instance-id [ to instance-id ] }&<1-10>, where &<1-10> indicates that you can specify up to 10 instances or instance ranges. The value range for the instance-id argument is 0 to 4094, and the value 0 represents the CIST.
priority: Specifies the port priority in the range of 0 to 240 in increments of 16 (as in 0, 16, 32).
Usage guidelines
The smaller the value, the higher the port priority. If all ports on your device use the same priority value, the port priority depends on the port index. The smaller the index, the higher the priority.
When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only the interface.
When the setting is configured in Layer 2 aggregate interface view, it takes effect on only the aggregate interface.
When the setting is configured on a member port in an aggregation group, it takes effect only after the port leaves the aggregation group.
Examples
# In MSTP mode, set the priority of port FortyGigE 1/0/3 to 16 in MSTI 2.
<Sysname> system-view
[Sysname] interface fortygige 1/0/3
[Sysname-FortyGigE1/0/3] stp instance 2 port priority 16
Related commands
display stp
stp port-log
Use stp port-log to enable outputting port state transition information.
Use undo stp port-log to disable outputting port state transition information.
Syntax
stp port-log { all | instance instance-list }
undo stp port-log { all | instance instance-list }
Default
This feature is disabled.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
all: Specifies all MSTIs.
instance instance-list: Specifies the MSTIs by an instance list, in the format of instance-list = { instance-id [ to instance-id ] }&<1-10>, where &<1-10> indicates that you can specify up to 10 instances or instance ranges. The value range for the instance-id argument is 0 to 4094, and the value 0 represents the CIST.
Examples
# In MSTP mode, enable outputting port state transition information for MSTI 2.
<Sysname> system-view
[Sysname] stp port-log instance 2
%Aug 16 00:49:41:856 2011 Sysname MSTP/3/MSTP_DISCARDING: Instance 2's port FortyGigE1/0/1 has been set to discarding state.
%Aug 16 00:49:41:856 2011 Sysname MSTP/3/MSTP_FORWARDING: Instance 2's port FortyGigE1/0/2 has been set to forwarding state.
The output shows that FortyGigE 1/0/1 in MSTI 2 transited to the discarding state and FortyGigE 1/0/2 in MSTI 2 transited to the forwarding state.
stp priority
Use stp priority to set the priority of the device.
Use undo stp priority to restore the default priority.
Syntax
stp [ instance instance-list ] priority priority
undo stp [ instance instance-list ] priority
Default
The device priority is 32768.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
instance instance-list: Sets the priority of the device in the MSTIs that are specified by an instance list, in the format of instance-list = { instance-id [ to instance-id ] }&<1-10>, where &<1-10> indicates that you can specify up to 10 instances or instance ranges. The value range for the instance-id argument is 0 to 4094, and the value 0 represents the CIST.
priority: Specifies the device priority in the range of 0 to 61440 in increments of 4096 (as in 0, 4096, 8192). You can set up to 16 priority values on the device. The smaller the value, the higher the device priority.
Examples
# In MSTP mode, set the device priority to 4096 in MSTI 1.
<Sysname> system-view
[Sysname] stp instance 1 priority 4096
stp region-configuration
Use stp region-configuration to enter MST region view.
Use undo stp region-configuration to restore the default MST region configurations.
Syntax
stp region-configuration
undo stp region-configuration
Default
The default settings for the MST region are as follows:
· The MST region name of the device is the MAC address of the device.
· All VLANs are mapped to the CIST.
· The MSTP revision level is 0.
Views
System view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
After you enter MST region view, you can configure the MST region parameters, including the region name, VLAN-to-instance mappings, and revision level.
Examples
# Enter MST region view.
<Sysname> system-view
[Sysname] stp region-configuration
[Sysname-mst-region]
stp role-restriction
Use stp role-restriction to enable port role restriction.
Use undo stp role-restriction to disable port role restriction.
Syntax
stp role-restriction
undo stp role-restriction
Default
Port role restriction is disabled.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
When port role restriction is enabled on a port, the port cannot become a root port.
When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only the interface.
When the setting is configured in Layer 2 aggregate interface view, it takes effect on only the aggregate interface.
When the setting is configured on a member port in an aggregation group, it takes effect only after the port leaves the aggregation group.
Examples
# Enable port role restriction on interface FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] stp role-restriction
stp root primary
Use stp root primary to configure the device as the root bridge.
Use undo stp root to restore the default.
Syntax
stp [ instance instance-list ] root primary
undo stp [ instance instance-list ] root
Default
A device is not a root bridge.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
instance instance-list: Configures the device as the root bridge in the MSTIs that are specified by an instance list, in the format of instance-list = { instance-id [ to instance-id ] }&<1-10>, where &<1-10> indicates that you can specify up to 10 instances or instance ranges. The value range for the instance-id argument is 0 to 4094, and the value 0 represents the CIST. If you do not specify this option, the command configures the device as the primary root bridge in the MSTP CIST or as the primary root bridge of STP or RSTP.
Usage guidelines
Once you specify the device as the root bridge, you cannot change the priority of the device.
Examples
# In MSTP mode, specify the device as the root bridge of MSTI 1.
<Sysname> system-view
[Sysname] stp instance 1 root primary
Related commands
· stp priority
· stp root secondary
stp root secondary
Use stp root secondary to configure the device as a secondary root bridge.
Use undo stp root to restore the default.
Syntax
stp [ instance instance-list ] root secondary
undo stp [ instance instance-list ] root
Default
A device is not a secondary root bridge.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
instance instance-list: Configures the device as a secondary root bridge in the MSTIs that are specified by an instance list, in the format of instance-list = { instance-id [ to instance-id ] }&<1-10>, where &<1-10> indicates that you can specify up to 10 instances or instance ranges. The value range for the instance-id argument is 0 to 4094, and the value 0 represents the CIST. If you do not specify this option, the command configures the device as the secondary root bridge in the MSTP CIST or as the primary root bridge of STP or RSTP.
Usage guidelines
Once you specify the device as a secondary root bridge, you cannot change the priority of the device.
Examples
# In MSTP mode, specify the device as a secondary root bridge in MSTI 1.
<Sysname> system-view
[Sysname] stp instance 1 root secondary
Related commands
· stp priority
· stp root primary
stp root-protection
Use stp root-protection to enable the root guard feature on a port.
Use undo stp root-protection to disable the root guard feature on a port.
Syntax
stp root-protection
undo stp root-protection
Default
The root guard feature is disabled.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
On a port, the loop guard feature and the root guard feature are mutually exclusive.
When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only the interface.
When the setting is configured in Layer 2 aggregate interface view, it takes effect on only the aggregate interface.
When the setting is configured on a member port in an aggregation group, it takes effect only after the port leaves the aggregation group.
Examples
# Enable the root guard feature for FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] stp root-protection
Related commands
· stp edged-port
· stp loop-protection
stp tc-protection
Use stp tc-protection to enable the TC-BPDU attack guard feature for the device.
Use undo stp tc-protection to disable the TC-BPDU attack guard feature for the device.
Syntax
stp tc-protection
undo stp tc-protection
Default
The TC-BPDU attack guard feature is enabled.
Views
System view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
With the TC-BPDU guard feature, you can set the maximum number of immediate forwarding address entry flushes that the device can perform within a certain interval (every 10 seconds). For TC-BPDUs received that exceed the limit, the device performs a forwarding address entry flush when the interval elapses. This prevents frequent flushing of forwarding address entries.
Examples
# Disable the TC-BPDU attack guard feature for the device.
<Sysname> system-view
[Sysname] undo stp tc-protection
Related commands
stp tc-protection threshold
stp tc-protection threshold
Use stp tc-protection threshold to set the maximum number of forwarding address entry flushes that the device can perform within a certain interval (every 10 seconds).
Use undo stp tc-protection threshold to restore the default.
Syntax
stp tc-protection threshold number
undo stp tc-protection threshold
Default
By default, the device can perform a maximum of 6 forwarding address entry flushes every 10 seconds.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
number: Specifies the maximum number of immediate forwarding address entry flushes that the device can perform within a certain interval (10 seconds). The value is in the range of 1 to 255.
Examples
# Configure the device to perform up to 10 forwarding address entry flushes every 10 seconds.
<Sysname> system-view
[Sysname] stp tc-protection threshold 10
Related commands
stp tc-protection
stp tc-restriction
Use stp tc-restriction to enable TC-BPDU transmission restriction.
Use undo stp tc-restriction to disable TC-BPDU transmission restriction.
Syntax
stp tc-restriction
undo stp tc-restriction
Default
TC-BPDU transmission restriction is disabled.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
When TC-BPDU transmission restriction is enabled on a port, the port does not send TC-BPDUs to the other ports, and it does not delete the MAC address entries.
When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only the interface.
When the setting is configured in Layer 2 aggregate interface view, it takes effect on only the aggregate interface.
When the setting is configured on a member port in an aggregation group, it takes effect only after the port leaves the aggregation group.
Examples
# Enable TC-BPDU transmission restriction on FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] stp tc-restriction
stp timer forward-delay
Use stp timer forward-delay to set the forward delay timer of the device.
Use undo stp timer forward-delay to restore the default.
Syntax
stp timer forward-delay time
undo stp timer forward-delay
Default
The forward delay timer is 1500 centiseconds.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
time: Specifies the forward delay in centiseconds in the range of 400 to 3000 in increments of 100 (as in 400, 500, 600).
Usage guidelines
The forward delay timer determines the time interval of state transition. To prevent temporary loops, a spanning tree port goes through the learning (intermediate) state before it transits from the discarding state to the forwarding state. To stay synchronized with the remote device, the port has a wait period between transition states that is determined by the forward delay timer.
As a best practice, specify the network diameter of the switched network by using the stp bridge-diameter command instead of setting the forward delay with this command. The spanning tree protocols will automatically calculate the optimal settings for the forward delay timer. If the network diameter uses the default value, the forward delay timer also uses the default value.
Examples
# In MSTP mode, set the forward delay timer to 2000 centiseconds.
<Sysname> system-view
[Sysname] stp timer forward-delay 2000
Related commands
· stp bridge-diameter
· stp timer hello
· stp timer max-age
stp timer hello
Use stp timer hello to set the hello time of the device.
Use undo stp timer hello to restore the default.
Syntax
stp timer hello time
undo stp timer hello
Default
The hello time is 200 centiseconds.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
time: Specifies the hello time in centiseconds in the range of 100 to 1000 in increments of 100 (as in 100, 200, 300).
Usage guidelines
Hello time is the time interval at which spanning tree devices send configuration BPDUs to maintain the spanning tree. If a device fails to receive configuration BPDUs within the set period of time, a new spanning tree calculation process is triggered due to timeout.
As a best practice, specify the network diameter of the switched network by using the stp bridge-diameter command instead of setting the hello time with this command. The spanning tree protocols will automatically calculate the optimal settings for the hello timer. If the network diameter uses the default value, the hello timer also uses the default value.
Examples
# In MSTP mode, set the hello time to 400 centiseconds.
<Sysname> system-view
[Sysname] stp timer hello 400
Related commands
· stp bridge-diameter
· stp timer forward-delay
· stp timer max-age
stp timer max-age
Use stp timer max-age to set the max age timer of the device.
Use undo stp timer max-age to restore the default.
Syntax
stp timer max-age time
undo stp timer max-age
Default
The max age is 2000 centiseconds.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
time: Specifies the max age in centiseconds in the range of 600 to 4000 in increments of 100 (as in 600, 700, 800).
Usage guidelines
In the CIST of an MSTP network, the device determines whether a configuration BPDU received on a port has expired based on the max age timer. If the configuration BPDU has expired, a new spanning tree calculation process starts. The max age timer takes effect only on the CIST (or MSTI 0).
As a best practice, specify the network diameter of the switched network by using the stp bridge-diameter command instead of setting the max age timer with this command. The spanning tree protocols will automatically calculate the optimal settings for the max age timer. If the network diameter uses the default value, the max age timer also uses the default value.
Examples
# In MSTP mode, set the max age timer to 1000 centiseconds.
<Sysname> system-view
[Sysname] stp timer max-age 1000
Related commands
· stp bridge-diameter
· stp timer forward-delay
· stp timer hello
stp timer-factor
Use stp timer-factor to configure the timeout interval by setting the timeout factor.
Timeout interval = timeout factor × 3 × hello time.
Use undo stp timer-factor to restore the default.
Syntax
stp timer-factor factor
undo stp timer-factor
Default
The timeout factor of a device is set to 3.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
factor: Specifies the timeout factor in the range of 1 to 20.
Usage guidelines
After the network topology is stabilized, each non-root-bridge device forwards configuration BPDUs to the surrounding devices at the interval of hello time to determine whether any link is faulty. If a device does not receive a BPDU from the upstream device within nine times of the hello time, it assumes that the upstream device has failed and starts a new spanning tree calculation process.
An upstream device might be too busy to forward configuration BPDUs in time, for example, many Layer 2 interfaces are configured on the upstream device. As a result, the downstream device fails to receive a BPDU within the timeout period and then starts an undesired spanning tree calculation. The calculation might fail, and it also wastes network resources. To prevent undesired spanning tree calculation and save network resources on a stable network, you can set the timeout factor to 5, 6, or 7.
Examples
# Set the timeout factor of the device to 7.
<Sysname> system-view
[Sysname] stp timer-factor 7
Related commands
stp timer hello
stp transmit-limit
Use stp transmit-limit to set the BPDU transmission rate of a port.
Use undo stp transmit-limit to restore the default.
Syntax
stp transmit-limit limit
undo stp transmit-limit
Default
The BPDU transmission rate of all ports is 10. Each port can send 10 BPDUs within each hello time.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
limit: Specifies the BPDU transmission rate in the range of 1 to 255.
Usage guidelines
The maximum number of BPDUs a port can send within each hello time equals the BPDU transmission rate plus the hello timer value.
A larger BPDU transmission rate value requires more system resources. An appropriate BPDU transmission rate setting can prevent spanning tree protocols from using excessive bandwidth resources during network topology changes. As a best practice, use the default value.
When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only the interface.
When the setting is configured in Layer 2 aggregate interface view, it takes effect on only the aggregate interface.
When the setting is configured on a member port in an aggregation group, it takes effect only after the port leaves the aggregation group.
Examples
# Set the BPDU transmission rate of port FortyGigE 1/0/1 to 5.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] stp transmit-limit 5
vlan-mapping modulo
Use vlan-mapping modulo to map VLANs in the MST region to MSTIs according to the specified modulo value and quickly create a VLAN-to-instance mapping table.
Syntax
vlan-mapping modulo modulo
Default
All VLANs are mapped to the CIST (MSTI 0).
Views
MST region view
Predefined user roles
network-admin
mdc-admin
Parameters
modulo: Specifies the modulo value in the range of 1 to 62.
Usage guidelines
You cannot map a VLAN to different MSTIs. If you map a VLAN that has been mapped to an MSTI to a new MSTI, the old mapping is automatically removed.
This command maps each VLAN to the MSTI whose ID is (VLAN ID – 1) % modulo + 1, where (VLAN ID – 1) % modulo is the modulo operation for (VLAN ID – 1). If the modulo value is 15, then VLAN 1 is mapped to MSTI 1, VLAN 2 to MSTI 2, …, VLAN 15 to MSTI 15, VLAN 16 to MSTI 1, and so on.
Examples
# Map VLANs to MSTIs as per modulo 8.
<Sysname> system-view
[Sysname] stp region-configuration
[Sysname-mst-region] vlan-mapping modulo 8
Related commands
· active region-configuration
· check region-configuration
· display stp region-configuration
· region-name
· revision-level
Loop detection commands
display loopback-detection
Use display loopback-detection to display the loop detection configuration and status.
Syntax
display loopback-detection
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Example
# Display the loop detection configuration and status.
<Sysname> display loopback-detection
Loopback detection is enabled.
Loopback detection interval is 30 second(s).
Loopback is detected on following interfaces:
Interface Action mode
FortyGigE1/0/1 Block
FortyGigE1/0/2 Shutdown
FortyGigE1/0/3 None
FortyGigE1/0/4 No-learning
Table 38 Command output
Field |
Description |
Action mode |
Loop protection action: · Block—When a loop is detected on a port, the device generates a log, disables the port from learning MAC addresses, and blocks inbound traffic on the port. · None—When a loop is detected on a port, the device generates a log but performs no action on the port. · No-learning—When a loop is detected on a port, the device generates a log and disables the port from learning MAC addresses. · Shutdown—When a loop is detected on a port, the device performs the following tasks: ¡ Generates a log. ¡ Shuts down the port to disable the port from receiving or sending frames. The device automatically sets the port to the forwarding state after a time interval configured by using the shutdown-interval command (see Fundamentals Command Reference). |
loopback-detection action
Use loopback-detection action to configure the loop protection action on a port.
Use undo loopback-detection action to restore the default.
Syntax
In Layer 2 Ethernet interface view:
loopback-detection action { block | no-learning | shutdown }
undo loopback-detection action
In Layer 2 aggregate interface view:
loopback-detection action shutdown
undo loopback-detection action
Default
When the device detects a loop on a port, it generates a log but performs no action on the port.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
block: Enables the block mode. If a loop is detected, the device disables MAC address learning and blocks inbound traffic on the port, in addition to generating a log. Layer 2 aggregate interfaces do not support this keyword.
no-learning: Enables the no-learning mode. If a loop is detected, the device generates a log and disables MAC address learning on the port. Layer 2 aggregate interfaces do not support this keyword.
shutdown: Enables the shutdown mode. If a loop is detected, the device generates a log and shuts down the port. The device automatically sets the port to the forwarding state after the time interval configured by using the shutdown-interval command (see Fundamentals Command Reference).
Usage guidelines
Use this command to configure the loop protection action on a per-port basis.
To configure the loop protection action globally, use the loopback-detection global action command.
The global configuration applies to all ports. The per-port configuration applies to the individual ports. The per-port configuration takes precedence over the global configuration.
Example
# Set the loop protection action to shutdown on port FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[System-FortyGigE1/0/1] loopback-detection action shutdown
· display loopback-detection
· loopback-detection global action
loopback-detection enable
Use loopback-detection enable to enable loop detection on a port.
Use undo loopback-detection enable to disable loop detection on a port.
Syntax
loopback-detection enable vlan { vlan-list | all }
undo loopback-detection enable vlan { vlan-list | all }
Default
The loop detection feature is disabled on ports.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
vlan-list: Specifies a VLAN list, in the format of { vlan-id [ to vlan-id ] }&<1-10>, where vlan-id represents the VLAN ID in the range of 1 to 4094, and &<1-10> indicates that you can specify up to 10 vlan-id [ to vlan-id ] parameters.
all: Specifies all existing VLANs.
Usage guidelines
Use this command to enable loop detection on specific ports. The port-specific loop detection configuration takes effect only after you enable loop detection globally. To enable loop detection globally, use the loopback-detection global enable command.
The global configuration applies to all ports in the specified VLAN. The per-port configuration applies to the individual port only when the port belongs to the specified VLAN. The per-port configuration takes precedence over the global configuration.
Example
# Enable loop detection on port FortyGigE 1/0/1 for VLAN 10 through VLAN 20.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[System-FortyGigE1/0/1] loopback-detection enable vlan 10 to 20
· display loopback-detection
· loopback-detection global enable
loopback-detection global action
Use loopback-detection global action to configure the global loop protection action.
Use undo loopback-detection global action to restore the default.
Syntax
loopback-detection global action shutdown
undo loopback-detection global action
Default
When the device detects a loop on a port, it generates a log but performs no action on the port.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
shutdown: Enables the shutdown mode. If a loop is detected, the device generates a log and shuts down the port. The device automatically sets the port to the forwarding state after you set the time interval by using the shutdown-interval command (see Fundamentals Command Reference).
Usage guidelines
Use this command to configure the loop protection action globally.
To configure the loop protection action on specific ports, use the loopback-detection action command in interface view.
The global configuration applies to all ports. The per-port configuration applies to the individual ports. The per-port configuration takes precedence over the global configuration.
Example
# Set the global loop protection action to shutdown.
<Sysname> system-view
[System] loopback-detection global action shutdown
Related commands
· display loopback-detection
· loopback-detection action
loopback-detection global enable
Use loopback-detection global enable to enable loop detection globally.
Use undo loopback-detection global enable to disable loop detection globally.
Syntax
loopback-detection global enable vlan { vlan-list | all }
undo loopback-detection global enable vlan { vlan-list | all }
Default
The loop detection feature is globally disabled.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
vlan-list: Specifies a VLAN list, in the format of { vlan-id [ to vlan-id ] }&<1-10>, where vlan-id represents the VLAN ID in the range of 1 to 4094, and &<1-10> indicates that you can specify up to 10 vlan-id [ to vlan-id ] parameters.
all: Specifies all existing VLANs.
Usage guidelines
Use this command to enable loop detection globally.
To enable loop detection on specific ports, use the loopback-detection enable command in interface view.
The global configuration applies to all ports in the specified VLAN. The per-port configuration applies to the individual port only when the port belongs to the specified VLAN. The per-port configuration takes precedence over the global configuration.
Example
# Globally enable loop detection for VLAN 10 through VLAN 20.
<Sysname> system-view
[System] loopback-detection global enable vlan 10 to 20
Related commands
· display loopback-detection
· loopback-detection enable
loopback-detection interval-time
Use loopback-detection interval-time to set the loop detection interval.
Use undo loopback-detection interval-time to restore the default.
Syntax
loopback-detection interval-time interval
undo loopback-detection interval-time
Default
The loop detection interval is 30 seconds.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
interval: Sets the loop detection interval in the range of 1 to 300 seconds.
Usage guidelines
With loop detection enabled, the device sends loop detection frames at the specified interval. A shorter interval offers more sensitive detection but consumes more resources. Consider the system performance and loop detection speed when you set the loop detection interval.
Example
# Set the loop detection interval to 10 seconds.
<Sysname> system-view
[Sysname] loopback-detection interval-time 10
Related commands
display loopback-detection
VLAN commands
Basic VLAN commands
bandwidth
Use bandwidth to configure the expected bandwidth of an interface.
Use undo bandwidth to restore the default.
Syntax
bandwidth bandwidth-value
undo bandwidth
Default
The expected bandwidth (in kbps) is the interface baud rate divided by 1000.
Views
VLAN interface view
Predefined user roles
network-admin
mdc-admin
Parameters
bandwidth-value: Specifies the expected bandwidth in the range of 1 to 400000000 kbps.
Usage guidelines
The expected bandwidth of an interface affects link costs in OSPF and IS-IS. For more information, see Layer 3—IP Routing Configuration Guide.
Examples
# Set the expected bandwidth of VLAN-interface 1 to 10000 kbps.
<Sysname> system-view
[Sysname] interface vlan-interface 1
[Sysname-Vlan-interface1] bandwidth 10000
default
Use default to restore the default settings for a VLAN interface.
Syntax
default
Views
VLAN interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
CAUTION: The default command might interrupt ongoing network services. Make sure you are fully aware of the impacts of this command when you use it on a live network. |
This command might fail to restore the default settings for some commands for reasons such as command dependencies or system restrictions. Use the display this command in interface view to identify these commands, and then use their undo forms or follow the command reference to restore their default settings. If your restoration attempt still fails, follow the error message instructions to resolve the problem.
Examples
# Restore the default settings for VLAN-interface 1.
<Sysname> system-view
[Sysname] interface vlan-interface 1
[Sysname-Vlan-interface1] default
description
Use description to configure the description for a VLAN or VLAN interface.
Use undo description to restore the default.
Syntax
description text
undo description
Default
For a VLAN, the description is VLAN vlan-id. The vlan-id argument specifies the VLAN ID in the four-digit form. If the VLAN ID has less than four digits, leading zeros are added. For example, the default description of VLAN 100 is VLAN 0100.
For a VLAN interface, the description is the name of the interface. For example, Vlan-interface1 Interface.
Views
VLAN view, VLAN interface view
Predefined user roles
network-admin
mdc-admin
Parameters
text: Specifies a description for a VLAN or VLAN interface, a string of 1 to 255 characters. The string can include case-sensitive letters, digits, special symbols (see Table 39), spaces, and other Unicode characters and symbols.
Table 39 Special symbols
Name |
Symbol |
Name |
Symbol |
Tilde |
~ |
Left angle bracket |
< |
Exclamation point |
! |
Right angle bracket |
> |
At sign |
@ |
Hyphen |
- |
Pound sign |
# |
Underscore |
_ |
Dollar sign |
$ |
Plus sign |
+ |
Percent sign |
% |
Equal sign |
= |
Caret |
^ |
Vertical bar |
| |
Ampersand sign |
& |
Back slash |
\ |
Asterisk |
* |
Colon |
: |
Left brace |
{ |
Semi-colon |
; |
Right brace |
} |
Quotation marks |
" |
Left parenthesis |
( |
Apostrophe |
' |
Right parenthesis |
) |
Comma |
, |
Left bracket |
[ |
Dot |
. |
Right bracket |
] |
Slash |
/ |
Usage guidelines
You can configure a description to describe the function or connection of a VLAN or VLAN interface. The descriptions are helpful when a large number of VLANs and VLAN interfaces are created on the device.
Examples
# Configure the description of VLAN 2 as sales-private.
<Sysname> system-view
[Sysname] vlan 2
[Sysname-vlan2] description sales-private
# Configure the description of VLAN-interface 2 as linktoPC56.
<Sysname> system-view
[Sysname] vlan 2
[Sysname-vlan2] quit
[Sysname] interface vlan-interface 2
[Sysname-Vlan-interface2] description linktoPC56
Related commands
· display interface vlan-interface
· display vlan
display interface vlan-interface
Use display interface vlan-interface to display VLAN interface information.
Syntax
display interface vlan-interface [ vlan-interface-id ] [ brief [ description ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
vlan-interface-id: Specifies a VLAN interface number. If you do not specify this argument, the command displays information about all VLAN interfaces.
brief: Displays brief interface information. If you do not specify this keyword, the command displays detailed interface information.
description: Displays complete interface descriptions. If you do not specify this keyword, the command displays only the first 27 characters of each interface description.
Examples
# Display information for VLAN-interface 10.
<Sysname> display interface vlan-interface 10
Vlan-interface10
Current state: UP
Line protocol state: UP
Description: Vlan-interface10 Interface
Bandwidth: 100000 kbps
Maximum transmission unit: 1500
Internet address: 192.168.1.54/24 (primary)
IP packet frame type: Ethernet II, hardware address: 1231-2312-3134
IPv6 packet frame type: Ethernet II, hardware address: 1231-2312-3134
Last clearing of counters: Never
# Display brief information for VLAN-interface 2.
<Sysname> display interface vlan-interface 2 brief
Brief information on interfaces in route mode:
Link: ADM - administratively down; Stby - standby
Protocol: (s) - spoofing
Interface Link Protocol Primary IP Description
Vlan2 DOWN DOWN --
Table 40 Command output
Field |
Description |
Vlan-interface2 |
VLAN interface name. |
Current state |
Physical state of a VLAN interface: · DOWN ( Administratively )—The administrative state of the VLAN interface is down, because it has been shut down with the shutdown command. · DOWN—The administrative state of the VLAN interface is up, but its physical state is down. The VLAN of this interface does not contain any physical port in up state. The ports might not be connected correctly or the lines might have failed. · UP—Both the administrative state and the physical state of the VLAN interface are up. |
Line protocol state |
Link layer protocol state of a VLAN interface: · DOWN—The link layer protocol state of the VLAN interface is down. · UP—The link layer protocol state of the VLAN interface is up. |
Description |
Description string of a VLAN interface. |
Bandwidth |
Expected bandwidth of a VLAN interface. |
Maximum transmission unit |
MTU of a VLAN interface. |
Internet protocol processing : Disabled |
The interface cannot process IP packets. This information is displayed when the interface is not configured with an IP address. |
Internet address: 192.168.1.54/24 (primary) |
The primary IP address of the interface is 192.168.1.54/24. This information is displayed only when the primary IP address is configured for the interface. |
IP packet frame type |
Framing format of sent IPv4 packets. |
hardware address |
MAC address of the VLAN interface. |
IPv6 packet frame type |
Framing format of sent IPv6 packets. |
Brief information on interfaces in route mode |
Brief information about Layer 3 interfaces. |
Link: ADM - administratively down; Stby – standby |
Link layer state of the interface: · ADM—The interface has been administratively shut down. To bring up the interface, use the undo shutdown command. · Stby—The interface is operating as a backup interface. |
Protocol: (s) - spoofing |
The protocol attribute of an interface includes the spoofing flag (the letter s in parentheses) when the following conditions exist: · The data link layer protocol state of an interface is shown as UP. · Its link is an on-demand link or is not present. |
Interface |
Abbreviated interface name. |
Link |
Physical link state of the interface: · UP—The link is up. · ADM—The link has been administratively shut down. To bring up the interface, use the undo shutdown command. |
Protocol |
Data link protocol connection state of the interface: · UP—The data link layer protocol state of the interface is up. · DOWN—The data link layer protocol state of the interface is down. · UP(s)—The data link layer protocol state of an interface is shown as UP, but its link is an on-demand link or not present at all. |
Primary IP |
Primary IP address of the interface. |
Description |
Partial or complete interface description configured by using the description command: · If you do not specify the description keyword in the display interface brief command, this field displays only the first 27 characters of the interface description. · If you specify the description keyword in the display interface brief command, this field displays the complete interface description. |
display reserve-vlan-interface
Use display reserve-vlan-interface to display VLANs whose VLAN interface resources have been reserved.
Syntax
display reserve-vlan-interface [ global ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
global: Specifies VLANs whose reserved VLAN interface resources are of the global type. If you do not specify this keyword, the command displays VLANs whose reserved VLAN interface resources are of the local type.
Examples
# Display VLANs whose reserved VLAN interface resources are of the local type.
<Sysname> display reserve-vlan-interface
3000-3400
# Display VLANs whose reserved VLAN interface resources are of the global type.
<Sysname> display reserve-vlan-interface global
3401
Related commands
reserve-vlan-interface
display vlan
Use display vlan to display VLAN information.
Syntax
display vlan [ vlan-id1 [ to vlan-id2 ] | all | dynamic | reserved | static ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
vlan-id1: Specifies a VLAN by its ID in the range of 1 to 4094.
vlan-id1 to vlan-id2: Specifies a VLAN ID range. Both the vlan-id1 and the vlan-id2 arguments are in the range of 1 to 4094. The ID for vlan-id2 must be equal to or greater than the ID for vlan-id1.
all: Specifies all VLANs except the reserved VLANs.
dynamic: Specifies dynamic VLANs. If you specify this keyword, the command displays the number of dynamic VLANs and the ID for each dynamic VLAN.
reserved: Specifies reserved VLANs. Protocol modules determine which VLANs are reserved according to function implementation. The reserved VLANs provide services for protocol modules. You cannot configure reserved VLANs.
static: Specifies static VLANs. If you specify this keyword, the command displays the number of static VLANs and the ID for each static VLAN. The static VLANs are manually created.
Examples
# Display VLAN 2 information.
<Sysname> display vlan 2
VLAN ID: 2
VLAN type: Static
Route interface: Not configured
Description: VLAN 0002
Name: VLAN 0002
Tagged ports: None
Untagged ports:
FortyGigE1/0/1 FortyGigE1/0/2 FortyGigE1/0/3
# Display VLAN 3 information.
<Sysname> display vlan 3
VLAN ID: 3
VLAN type: static
Route interface: Configured
IPv4 address: 1.1.1.1
IPv4 subnet mask: 255.255.255.0
Description: VLAN 0003
Name: VLAN 0003
Tagged ports: None
Untagged ports: None
Table 41 Command output
Field |
Description |
VLAN type |
VLAN type, static or dynamic. |
Route interface |
Whether a VLAN interface is configured for the VLAN. · Not configured. · Configured. |
Description |
Description of the VLAN. |
Name |
Name configured for the VLAN. |
IP address |
Primary IP address of the VLAN interface. This field is displayed only when an IPv4 address is configured for the VLAN interface. When the VLAN interface is also configured with secondary IPv4 addresses, you can view them by using one of the following commands: · display interface vlan-interface. · display this (VLAN interface view). |
Subnet mask |
Subnet mask of the primary IP address. This field is available only when an IP address is configured for the VLAN interface. |
Tagged ports |
Tagged members of the VLAN. |
Untagged ports |
Untagged members of the VLAN. |
Related commands
vlan
display vlan brief
Use display vlan brief to display brief VLAN information.
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
# Display brief VLAN information.
Brief information about all VLANs:
Supported Minimum VLAN ID: 1
Supported Maximum VLAN ID: 4094
Default VLAN ID: 1
VLAN ID Name Port
1 VLAN 0001 XGE1/0/1 XGE1/0/2 XGE1/0/3 XGE1/0/4
XGE1/0/5 XGE1/0/6 XGE1/0/7 XGE1/0/8
XGE1/0/9 XGE1/0/10 XGE1/0/11
XGE1/0/12 XGE1/0/13 XGE1/0/14
XGE1/0/15 XGE1/0/16 XGE1/0/17
XGE1/0/18 XGE1/0/19 XGE1/0/20
XGE1/0/21 XGE1/0/22 XGE1/0/23
XGE1/0/24 XGE1/0/25 XGE1/0/26
XGE1/0/27 XGE1/0/28 XGE1/0/29
XGE1/0/30 XGE1/0/31 XGE1/0/32
XGE1/0/33 XGE1/0/34 XGE1/0/35
XGE1/0/36 XGE1/0/37 XGE1/0/38
XGE1/0/39 XGE1/0/40 XGE1/0/41
XGE1/0/42 XGE1/0/43 XGE1/0/44
XGE1/0/45 XGE1/0/46 XGE1/0/47
XGE1/0/48
2 VLAN 0002
Field |
Description |
Default VLAN ID |
System default VLAN ID. |
Name |
VLAN name. |
Port |
Ports that are assigned to the VLAN. |
interface vlan-interface
Use interface vlan-interface to create a VLAN interface and enter its view or to enter the view of an existing VLAN interface.
Use undo interface vlan-interface to delete a VLAN interface.
Syntax
interface vlan-interface vlan-interface-id
undo interface vlan-interface vlan-interface-id
Default
No VLAN interface is created.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
vlan-interface-id: Specifies a VLAN interface number in the range of 1 to 4094.
Usage guidelines
Create the VLAN before you create the VLAN interface for the VLAN.
Examples
# Create VLAN-interface 2, and enter its view.
<Sysname> system-view
[Sysname] vlan 2
[Sysname-vlan2] quit
[Sysname] interface vlan-interface 2
[Sysname-Vlan-interface2]
Related commands
display interface vlan-interface
mtu
Use mtu to set the MTU for a VLAN interface.
Use undo mtu to restore the default.
Syntax
mtu size
undo mtu
Default
The MTU of a VLAN interface is 1500 bytes.
Views
VLAN interface view
Predefined user roles
network-admin
mdc-admin
Parameters
size: Sets the MTU in bytes. In versions earlier than Release 1138P01, the value range for this argument is 46 to 1500. In Release 1138P01 and later versions, the value range for this argument is 46 to 9008.
Usage guidelines
The mtu or ip mtu command configured on a VLAN interface takes effect only on packets that the interface delivers to the CPU for software forwarding. For example, packets originated from or destined for the VLAN interface.
If both the mtu and ip mtu commands are configured on a VLAN interface, the MTU set by the ip mtu command is used for fragmentation. Set an appropriate MTU to avoid packet fragmentation.
For more information about the ip mtu command, see Layer 3—IP Services Command Reference.
Examples
# Set the MTU to 1492 bytes for VLAN-interface 1.
<Sysname> system-view
[Sysname] interface vlan-interface 1
[Sysname-Vlan-interface1] mtu 1492
Related commands
display interface vlan-interface
name
Use name to configure a name for a VLAN.
Use undo name to restore the default name of a VLAN.
Syntax
name text
undo name
Default
The name of a VLAN is VLAN vlan-id. The vlan-id argument specifies the VLAN ID in the four-digit form. If the VLAN ID has less than four digits, leading zeros are added. For example, the name of VLAN 100 is VLAN 0100.
Views
VLAN view
Predefined user roles
network-admin
mdc-admin
Parameters
text: Specifies a VLAN name, a string of 1 to 32 characters. The string can include case-sensitive letters, digits, special symbols (see Table 39), spaces, and other Unicode characters and symbols.
Usage guidelines
You can use VLAN names to distinguish a large number of VLANs.
Examples
# Configure the name of VLAN 2 as test vlan.
<Sysname> system-view
[Sysname] vlan 2
[Sysname-vlan2] name test vlan
Related commands
display vlan
reserve-vlan-interface
Use reserve-vlan-interface to reserve the specified VLAN interface resources.
Use undo reserve-vlan-interface to remove the reservation of the specified VLAN interface resources.
Syntax
reserve-vlan-interface { vlan-interface-id1 [ to vlan-interface-id2 ] [ global ] }
undo reserve-vlan-interface { vlan-interface-id1 [ to vlan-interface-id2 ] [ global ] }
Default
No VLAN interface resources are reserved.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
vlan-interface-id1: Specifies a VLAN by its ID in the range of 1 to 4094.
vlan-interface-id1 to vlan-interface-id2: Specifies a range of VLAN IDs. The value ranges for the vlan-interface-id1 and vlan-interface-id2 arguments are both 1 to 4094. The value for the vlan-interface-id2 argument must be greater or equal to the value for the vlan-interface-id1 argument.
global: Specifies global-type VLAN interface resources. If you do not specify this keyword, the command reserves local-type VLAN interface resources.
Usage guidelines
As a best practice to simplify management and configuration, reserve VLAN interface resources as follows:
· Bulk reserve resources of VLAN interfaces that are numbered in consecutive order.
· Preferentially reserve resources of VLAN interfaces whose VLAN IDs are in the range of 3000 to 3500.
Select the VLAN interfaces of unused VLANs rather than used VLANs for resource reservation. As a best practice, do not create or use a VLAN if the VLAN interface resource of this VLAN is reserved.
The VLAN interface resource reservation of a VLAN conflicts with the VLAN interface creation of this VLAN.
Before creating a Layer 3 Ethernet subinterface or aggregate subinterface, do not reserve a resource for the VLAN interface whose interface number matches the subinterface number. After you reserve a VLAN interface resource, do not create a Layer 3 Ethernet subinterface or aggregate subinterface whose subinterface number is the VLAN interface number. A Layer 3 Ethernet subinterface or aggregate subinterface uses the VLAN interface resource in processing tagged packets whose VLAN ID matches the subinterface number.
A reserved VLAN interface resource can be of the local or global type. To change the type of a reserved VLAN interface resource, first remove the reservation.
You cannot remove the reservation of a VLAN interface resource if this resource has been used.
This command is available in Feature 1108 and later versions. After the software upgrades to support this feature, first reserve VLAN interface resources for existing configurations that require the reservation.
Examples
# Reserve the local-type resource of VLAN-interface 3000.
<Sysname> system-view
[Sysname] reserve-vlan-interface 3000
# Reserve local-type resources of VLAN-interfaces 3000 through 3400.
<Sysname> system-view
[Sysname] reserve-vlan-interface 3000 to 3400
# Reserve global-type resources of VLAN-interfaces 3400 through 3500.
<Sysname> system-view
[Sysname] reserve-vlan-interface 3400 to 3500 global
Related commands
display reserve-vlan-interface
service
Use service to specify an LPU for forwarding the traffic on a VLAN interface.
Use undo service to restore the default.
Syntax
In IRF mode:
service chassis chassis-number slot slot-number
Default
No LPU is specified for forwarding the traffic on the VLAN interface.
VLAN interface view
network-admin
mdc-admin
slot slot-number: Specifies an LPU. The slot-number argument represents the number of the slot that holds the LPU. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies an LPU of an IRF member device. The chassis-number argument represents the ID of the IRF member device. The slot-number argument represents the number of the slot that holds the LPU. (In IRF mode.)
If no LPU is specified for forwarding the traffic on the current VLAN interface, the traffic is processed on the card or member device that receives the traffic.
Some functions, such as IPsec anti-replay, require that traffic for the same VLAN interface be processed on the same card or member device. If such a function is configured, you must use this command to specify an LPU for forwarding the traffic on a VLAN interface.
If the specified LPU is removed, traffic on the VLAN interface cannot be forwarded even if the VLAN interface is up. After the specified slot is installed with an LPU, traffic forwarding recovers.
# (In standalone mode.) Specify the LPU in slot 2 for forwarding traffic on VLAN-interface 200.
[Sysname] interface vlan-interface200
[Sysname-Vlan-interface200] service slot 2
[Sysname] interface vlan-interface200
[Sysname-Vlan-interface200] service chassis 2 slot 2
shutdown
Use shutdown to shut down a VLAN interface.
Use undo shutdown to bring up a VLAN interface.
Syntax
shutdown
undo shutdown
Default
A VLAN interface is not manually shut down. The VLAN interface is up if one or more ports in the VLAN is up, and it goes down if all ports in the VLAN go down.
Views
VLAN interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
When you use this command to shut down a VLAN interface, the VLAN interface remains in DOWN (Administratively) state. In this case, the VLAN interface state is not affected by the state of the ports in the VLAN.
Before you configure parameters for a VLAN interface, use this command to shut it down to prevent the configurations from affecting the network. After you complete the VLAN interface configuration, use the undo shutdown command to make the settings take effect.
To troubleshoot a failed interface, you can use the shutdown command and then the undo shutdown command on the interface to see whether it recovers.
In a VLAN, the state of any Ethernet port is independent of the state of the VLAN interface.
Examples
# Shut down VLAN-interface 2, and then bring it up.
<Sysname> system-view
[Sysname] interface vlan-interface 2
[Sysname-Vlan-interface2] shutdown
[Sysname-Vlan-interface2] undo shutdown
vlan
Use vlan vlan-id to create a VLAN and enter its view or to enter the view of an existing VLAN.
Use vlan vlan-id1 to vlan-id2 to create VLANs from vlan-id1 through vlan-id2, except reserved VLANs.
Use vlan all to create VLANs 1 through 4094.
Use undo vlan to delete the specified VLANs.
Syntax
vlan { vlan-id1 [ to vlan-id2 ] | all }
undo vlan { vlan-id1 [ to vlan-id2 ] | all }
Default
VLAN 1 (system default VLAN) exists.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
vlan-id1, vlan-id2: Specifies a VLAN ID. The value range is 1 to 4094.
vlan-id1 to vlan-id2: Specifies a VLAN ID range. The vlan-id1 and vlan-id2 arguments specify VLAN IDs. The value ranges for the two arguments are both 1 to 4094. The value for the vlan-id2 argument must be equal to or greater than the value for the vlan-id1 argument.
all: Creates or removes all VLANs except reserved VLANs.
Usage guidelines
You cannot create or delete the system default VLAN (VLAN 1) or reserved VLANs.
Before you delete a dynamic VLAN, a VLAN configured with a QoS policy, or a VLAN locked by an application, you must first remove the configuration from the VLAN.
Examples
# Create VLAN 2 and enter its view.
<Sysname> system-view
[Sysname] vlan 2
[Sysname-vlan2]
# Create VLAN 4 through VLAN 100.
<Sysname> system-view
[Sysname] vlan 4 to 100
Related commands
display vlan
Port-based VLAN commands
display port
Use display port to display information about hybrid or trunk ports.
Syntax
display port { hybrid | trunk }
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
hybrid: Specifies hybrid ports.
trunk: Specifies trunk ports.
Examples
# Display information about hybrid ports.
<Sysname> display port hybrid
Interface PVID VLAN Passing
FGE1/0/4 100 Tagged: 1000, 1002, 1500, 1600-1611, 2000,
2555-2558, 3000, 4000
Untagged:1, 10, 15, 18, 20-30, 44, 55, 67, 100,
150-160, 200, 255, 286, 300-302
# Display information about trunk ports.
<Sysname> display port trunk
Interface PVID VLAN Passing
FGE1/0/8 2 1-4, 6-100, 145, 177, 189-200, 244, 289, 400,
555, 600-611, 1000, 2006-2008
Table 43 Command output
Field |
Description |
Interface |
Interface name. |
PVID |
Port VLAN ID. |
VLAN Passing |
Existing VLANs allowed on the port. |
Tagged |
VLANs for which the port sends packets without removing VLAN tags. |
Untagged |
VLANs for which the port sends packets after removing VLAN tags. |
port
Use port to assign the specified access ports to a VLAN.
Use undo port to remove the specified access ports from a VLAN.
Syntax
port interface-list
undo port interface-list
Default
All ports are in VLAN 1.
Views
VLAN view
Predefined user roles
network-admin
mdc-admin
Parameters
interface-list: Specifies a space-separated list of up to 10 Ethernet interface items. Each item specifies an Ethernet interface or a range of Ethernet interfaces in the form of interface-type interface-number1 to interface-type interface-number2. The value for the interface-number2 argument must be equal to or greater than the value for the interface-number1 argument.
Usage guidelines
This command is applicable only to access ports.
By default, all ports are access ports. You can manually configure the port type. For more information, see "port link-type."
Examples
# Assign FortyGigE 1/0/1 through FortyGigE 1/0/3 to VLAN 2.
<Sysname> system-view
[Sysname] vlan 2
[Sysname-vlan2] port fortygige 1/0/1 to fortygige 1/0/3
Related commands
display vlan
port access vlan
Use port access vlan to assign an access port to the specified VLAN.
Use undo port access vlan to restore the default.
Syntax
port access vlan vlan-id
undo port access vlan
Default
All access ports belong to VLAN 1.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
vlan-id: Specifies a VLAN by its ID in the range of 1 to 4094.
Usage guidelines
Before assigning an access port to a VLAN, make sure the VLAN has been created.
The configuration made in Layer 2 Ethernet interface view applies only to the port.
The configuration made in Layer 2 aggregate interface view applies to the aggregate interface and its aggregation member ports.
· If the system fails to apply the configuration to the aggregate interface, it stops applying the configuration to aggregation member ports.
· If the system fails to apply the configuration to an aggregation member port, it skips the port and moves to the next member port.
Examples
# Assign FortyGigE 1/0/1 to VLAN 3.
<Sysname> system-view
[Sysname] vlan 3
[Sysname-vlan3] quit
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] port access vlan 3
port hybrid pvid
Use port hybrid pvid to configure the PVID of a hybrid port.
Use undo port hybrid pvid to configure the PVID of a hybrid port as 1.
Syntax
port hybrid pvid vlan vlan-id
undo port hybrid pvid
Default
The PVID of a hybrid port is the ID of the VLAN to which the port belongs when its link type is access.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
vlan-id: Specifies a VLAN by its ID in the range of 1 to 4094.
Usage guidelines
You can configure a nonexistent VLAN as the PVID of a hybrid port. When you delete the PVID of a hybrid port by using the undo vlan command, the PVID setting of the port does not change.
To correctly transmit packets, configure the same PVID for the local hybrid port and its peer port.
To enable a hybrid port to transmit packets from its PVID, you must assign the hybrid port to the PVID by using the port hybrid vlan command.
The configuration made in Layer 2 Ethernet interface view applies only to the port.
The configuration made in Layer 2 aggregate interface view applies to the aggregate interface and its aggregation member ports.
· If the system fails to apply the configuration to the aggregate interface, it stops applying the configuration to aggregation member ports.
· If the system fails to apply the configuration to an aggregation member port, it skips the port and moves to the next member port.
Examples
# Configure VLAN 100 as the PVID of the hybrid port FortyGigE 1/0/1, and assign FortyGigE 1/0/1 to VLAN 100 as an untagged VLAN member.
<Sysname> system-view
[Sysname] vlan 100
[Sysname-vlan100] quit
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] port link-type hybrid
[Sysname-FortyGigE1/0/1] port hybrid pvid vlan 100
[Sysname-FortyGigE1/0/1] port hybrid vlan 100 untagged
Related commands
· port hybrid vlan
· port link-type
port hybrid vlan
Use port hybrid vlan to assign a hybrid port to the specified VLANs.
Use undo port hybrid vlan to remove a hybrid port from the specified VLANs.
Syntax
port hybrid vlan vlan-id-list { tagged | untagged }
undo port hybrid vlan vlan-id-list
Default
A hybrid port is an untagged member of the VLAN to which the port was assigned as an access port.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
vlan-id-list: Specifies a space-separated list of up to 10 VLAN items. Each item specifies a VLAN ID or a range of VLAN IDs in the form of vlan-id1 to vlan-id2. The value range for VLAN IDs is 1 to 4094. The value for the vlan-id2 argument must be equal to or greater than the value for the vlan-id1 argument.
tagged: Configures the port as a tagged VLAN member of the specified VLANs. A tagged member of a VLAN sends packets from the VLAN without removing VLAN tags.
untagged: Configures the port as an untagged VLAN member of the specified VLANs. An untagged member of a VLAN sends packets from the VLAN after removing VLAN tags.
Usage guidelines
A hybrid port supports multiple VLANs. If you execute the command multiple times on a hybrid port, the hybrid port allows the VLANs specified by the vlan-id-list argument in each execution.
The configuration made in Layer 2 Ethernet interface view applies only to the port.
The configuration made in Layer 2 aggregate interface view applies to the aggregate interface and its aggregation member ports.
· If the system fails to apply the configuration to the aggregate interface, it stops applying the configuration to aggregation member ports.
· If the system fails to apply the configuration to an aggregation member port, it skips the port and moves to the next member port.
Examples
# Configure FortyGigE 1/0/1 as a hybrid port, and assign it to VLAN 2, VLAN 4, and VLAN 50 through VLAN 100 as a tagged member.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] port link-type hybrid
[Sysname-FortyGigE1/0/1] port hybrid vlan 2 4 50 to 100 tagged
Related commands
port link-type
port link-type
Use port link-type to configure the link type of a port.
Use undo port link-type to restore the default link type of a port.
Syntax
port link-type { access | hybrid | trunk }
undo port link-type
Default
Any port is an access port.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
access: Configures the link type of a port as access.
hybrid: Configures the link type of a port as hybrid.
trunk: Configures the link type of a port as trunk.
Usage guidelines
To change the link type of a port from trunk to hybrid or vice versa, first set the link type to access.
The configuration made in Layer 2 Ethernet interface view applies only to the port.
The configuration made in Layer 2 aggregate interface view applies to the aggregate interface and its aggregation member ports.
· If the system fails to apply the configuration to the aggregate interface, it stops applying the configuration to aggregation member ports.
· If the system fails to apply the configuration to an aggregation member port, it skips the port and moves to the next member port.
Examples
# Configure FortyGigE 1/0/1 as a trunk port.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] port link-type trunk
port trunk permit vlan
Use port trunk permit vlan to assign a trunk port to the specified VLANs.
Use undo port trunk permit vlan to remove a trunk port from the specified VLANs.
Syntax
port trunk permit vlan { vlan-id-list | all }
undo port trunk permit vlan { vlan-id-list | all }
Default
A trunk port allows only packets from VLAN 1 to pass through.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
vlan-id-list: Specifies a space-separated list of up to 10 VLAN items. Each item specifies a VLAN ID or a range of VLAN IDs in the form of vlan-id1 to vlan-id2. The value range for VLAN IDs is 1 to 4094. The value for the vlan-id2 argument must be equal to or greater than the value for the vlan-id1 argument.
all: Specifies all VLANs. To prevent unauthorized VLAN users from accessing restricted resources through a port, use the port trunk permit vlan all command with caution.
Usage guidelines
A trunk port supports multiple VLANs. If you execute the command multiple times on a trunk port, the trunk port allows the union of the VLANs specified by the vlan-id-list argument in each execution.
On a trunk port, only packets from the PVID can pass through untagged.
The configuration made in Layer 2 Ethernet interface view applies only to the port.
The configuration made in Layer 2 aggregate interface view applies to the aggregate interface and its aggregation member ports.
· If the system fails to apply the configuration to the aggregate interface, it stops applying the configuration to aggregation member ports.
· If the system fails to apply the configuration to an aggregation member port, it skips the port and moves to the next member port.
Examples
# Assign the trunk port FortyGigE 1/0/1 to VLAN 2, VLAN 4, and VLAN 50 through VLAN 100.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] port link-type trunk
[Sysname-FortyGigE1/0/1] port trunk permit vlan 2 4 50 to 100
Related commands
port link-type
port trunk pvid
Use port trunk pvid to configure the PVID for a trunk port.
Use undo port trunk pvid to restore the default.
Syntax
port trunk pvid vlan vlan-id
undo port trunk pvid
Default
The PVID of a trunk port is VLAN 1.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
vlan-id: Specifies a VLAN by its ID in the range of 1 to 4094.
Usage guidelines
You can configure a nonexistent VLAN as the PVID for a trunk port. When you delete the PVID of a trunk port by using the undo vlan command, the PVID setting of the port does not change.
To correctly transmit packets, configure the same PVID for the local trunk port and its peer port.
To enable a trunk port to transmit packets from its PVID, you must assign the trunk port to the PVID by using the port trunk permit vlan command.
The configuration made in Layer 2 Ethernet interface view applies only to the port.
The configuration made in Layer 2 aggregate interface view applies to the aggregate interface and its aggregation member ports.
· If the system fails to apply the configuration to the aggregate interface, it stops applying the configuration to aggregation member ports.
· If the system fails to apply the configuration to an aggregation member port, it skips the port and moves to the next member port.
Examples
# Configure VLAN 100 as the PVID of the trunk port FortyGigE 1/0/1, and assign FortyGigE 1/0/1 to VLAN 100.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] port link-type trunk
[Sysname-FortyGigE1/0/1] port trunk pvid vlan 100
[Sysname-FortyGigE1/0/1] port trunk permit vlan 100
Related commands
· port link-type
· port trunk permit vlan
VLAN mapping commands
display vlan mapping
Use display vlan mapping to display VLAN mapping information.
Syntax
display vlan mapping [ interface interface-type interface-number ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, the command displays VLAN mapping information on all interfaces.
Examples
# Display VLAN mapping information on all interfaces.
<Sysname> display vlan mapping
Interface Ten-GigabitEthernet1/0/1:
Outer VLAN Inner VLAN Translated Outer VLAN Translated Inner VLAN
N/A N/A 20 10
10 N/A 120 N/A
Outer VLAN Inner VLAN Nested VLAN
200 100 300
Interface Ten-GigabitEthernet1/0/3:
Outer VLAN Inner VLAN Translated Outer VLAN Translated Inner VLAN
12 N/A 110 12
Interface Ten-GigabitEthernet1/0/4:
Outer VLAN Inner VLAN Translated Outer VLAN Translated Inner VLAN
11 30 130 40
Table 44 Command output
Field |
Description |
Interface |
Interface information. |
Outer VLAN |
Original outer VLAN for two-to-two and two-to-three mappings. This field indicates the original VLAN for one-to-one and one-to-two VLAN mappings. This field displays N/A for zero-to-two VLAN mappings. |
Inner VLAN |
Original inner VLAN for two-to-two and two-to-three mappings. This field displays N/A for other types of VLAN mappings. |
Translated Outer VLAN |
Translated outer VLAN. This field indicates the translated VLAN for one-to-one VLAN mappings. |
Translated Inner VLAN |
Translated inner VLAN. This field displays N/A for one-to-one VLAN mappings. |
Nested VLAN |
Outermost VLAN for two-to-three VLAN mappings. |
Related commands
· vlan mapping
· vlan mapping double-tagged
· vlan mapping untagged
vlan mapping
Use vlan mapping to configure one-to-one, one-to-two, or two-to-two VLAN mapping on an interface.
Use undo vlan mapping to cancel the VLAN mapping configuration.
Syntax
vlan mapping { vlan-id translated-vlan vlan-id | nest { range vlan-range-list | single vlan-id-list } nested-vlan vlan-id | tunnel outer-vlan-id inner-vlan-id translated-vlan outer-vlan-id inner-vlan-id }
undo vlan mapping { vlan-id translated-vlan vlan-id | all | nest { range vlan-range-list | single vlan-id-list } nested-vlan vlan-id | tunnel outer-vlan-id inner-vlan-id translated-vlan outer-vlan-id inner-vlan-id }
Default
One-to-one, one-to-two, or two-to-two VLAN mapping is not configured on an interface.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
vlan-id translated-vlan vlan-id: Specifies the original VLAN and translated VLAN for a one-to-one VLAN mapping. The value range for the vlan-id argument is 1 to 4094. The original VLAN and the translated VLAN cannot be the same.
nest range vlan-range-list nested-vlan vlan-id: Specifies the CVLAN ranges and the SVLAN for a one-to-two VLAN mapping. The vlan-range-list argument specifies a space-separated list of up to 10 CVLAN items. Each item specifies a CVLAN ID or a range of VLAN IDs in the format of vlan-id1 to vlan-id2. The value range for CVLAN IDs is 1 to 4094. The value for the vlan-id2 argument must be equal to or greater than the value for the vlan-id1 argument. Different CVLAN ranges cannot overlap. The vlan-id argument specifies the SVLAN ID in the range of 1 to 4094.
nest single vlan-id-list nested-vlan vlan-id: Specifies the CVLANs and the SVLAN for a one-to-two VLAN mapping. The vlan-id-list argument specifies a space-separated list of up to 10 CVLAN IDs, each of which is in the range of 1 to 4094. The vlan-id argument specifies the SVLAN ID in the range of 1 to 4094.
tunnel outer-vlan-id inner-vlan-id translated-vlan outer-vlan-id inner-vlan-id: Specifies the original SVLAN ID and CVLAN ID and the translated SVLAN ID and CVLAN ID for a two-to-two VLAN mapping. The value ranges for the outer-vlan-id argument and the inner-vlan-id argument are both 1 to 4094.
all: Deletes all VLAN mapping configurations from the interface.
Usage guidelines
For different types of VLAN mapping entries on an interface, both the original VLANs and the translated VLANs cannot overlap. For one-to-one VLAN mapping entries or two-to-two VLAN mapping entries, the translated VLANs cannot overlap. When the original VLANs of one-to-one or two-to-two VLAN mapping entries overlap, the most recent configuration takes effect.
A two-to-two VLAN mapping cannot have the same original SVLAN and CVLAN as those of an existing two-to-three VLAN mapping.
The MTU of an interface is 1500 bytes by default. After a VLAN tag is added to a packet through one-to-two VLAN mapping, the packet length is added by 4 bytes. As a best practice, set the MTU to a minimum of 1504 bytes for ports on the forwarding path of the packet in the service provider network.
One-to-one, one-to-two, and two-to-two VLAN mappings take effect only on VLAN-tagged packets.
Examples
# Configure a one-to-one VLAN mapping on Ten-GigabitEthernet 1/0/1 to map VLAN 1 to VLAN 101.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] vlan mapping 1 translated-vlan 101
# Configure one-to-two VLAN mappings on Ten-GigabitEthernet 1/0/4 to add outer VLAN tag 101 to packets carrying VLAN tags 1 through 10 and VLAN tag 80.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/4
[Sysname-Ten-GigabitEthernet1/0/4] vlan mapping nest range 1 to 10 nested-vlan 101
[Sysname-Ten-GigabitEthernet1/0/4] vlan mapping nest single 80 nested-vlan 101
# Configure a two-to-two VLAN mapping on Ten-GigabitEthernet 1/0/5 to map outer VLAN 101 and inner VLAN 1 to outer VLAN 201 and inner VLAN 10.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/5
[Sysname-Ten-GigabitEthernet1/0/5] vlan mapping tunnel 101 1 translated-vlan 201 10
Related commands
display vlan mapping
vlan mapping double-tagged
Use vlan mapping double-tagged to configure two-to-three VLAN mapping on an interface.
Use undo vlan mapping double-tagged to remove the two-to-three VLAN mapping configuration.
Syntax
vlan mapping double-tagged { outer-vlan outer-vlan-id inner-vlan inner-vlan-id | outer-vlan-range vlan-id-list inner-vlan inner-vlan-id | outer-vlan outer-vlan-id inner-vlan-range vlan-id-list } nested-vlan nested-vlan
undo vlan mapping double-tagged { outer-vlan outer-vlan-id inner-vlan inner-vlan-id | outer-vlan-range vlan-id-list inner-vlan inner-vlan-id | outer-vlan outer-vlan-id inner-vlan-range vlan-id-list } nested-vlan nested-vlan
Default
Two-to-three VLAN mapping is not configured on an interface.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
outer-vlan outer-vlan-id: Specifies the original SVLAN ID in the range of 1 to 4094.
outer-vlan-range vlan-id-list: Specifies a range of original SVLAN IDs in the format of vlan-id1 to vlan-id2. The value range for SVLAN IDs is 1 to 4094. The value for the vlan-id2 argument must be equal to or greater than the value for the vlan-id1 argument.
inner-vlan inner-vlan-id: Specifies the original CVLAN ID in the range of 1 to 4094.
inner-vlan-range vlan-id-list: Specifies a range of original CVLAN IDs in the format of vlan-id1 to vlan-id2. The value range for CVLAN IDs is 1 to 4094. The value for the vlan-id2 argument must be equal to or greater than the value for the vlan-id1 argument.
nested-vlan nested-vlan: Specifies the outermost VLAN ID in the range of 1 to 4094.
Usage guidelines
A two-to-three VLAN mapping cannot have the same original SVLAN and CVLAN as those of an existing two-to-two VLAN mapping.
Before you modify a two-to-three VLAN mapping, first execute the undo vlan mapping double-tagged command to remove the existing configuration.
As a best practice, set the MTU to a minimum of 1508 bytes for ports on the forwarding path of the triple-tagged packet in the service provider network.
Examples
# Configure a two-to-three VLAN mapping on Ten-GigabitEthernet 1/0/1 to add the outermost VLAN 300 to double-tagged packets with the SVLAN 200 and CVLAN 100.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] vlan mapping double-tagged outer-vlan 200 inner-vlan 100 nested-vlan 300
Related commands
display vlan mapping
vlan mapping untagged
Use vlan mapping untagged to configure zero-to-two VLAN mapping on an interface.
Use undo vlan mapping untagged to remove the zero-to-two VLAN mapping configuration.
Syntax
vlan mapping untagged nested-outer-vlan outer-vlan-id nested-inner-vlan inner-vlan-id
undo vlan mapping untagged
Default
Zero-to-two VLAN mapping is not configured on an interface.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
nested-outer-vlan outer-vlan-id: Specifies the SVLAN ID in the range of 1 to 4094.
nested-inner-vlan inner-vlan-id: Specifies the CVLAN ID in the range of 1 to 4094.
Usage guidelines
The command takes effect only when the PVID of the port is VLAN 1.
Before you modify a zero-to-two VLAN mapping, first execute the undo vlan mapping untagged command to remove the previous configuration.
As a best practice, set the MTU to a minimum of 1504 bytes for ports on the forwarding path of the double-tagged packet in the service provider network.
Examples
# Configure a zero-to-two VLAN mapping on Ten-GigabitEthernet 1/0/1 to add CVLAN 100 and SVLAN 200 to untagged packets.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] vlan mapping untagged nested-outer-vlan 200 nested-inner-vlan 100
Related commands
display vlan mapping
LLDP commands
You can set an Ethernet port as a Layer 3 interface by using the port link-mode route command (see Layer 2—LAN Switching Configuration Guide).
dcbx version
Use dcbx version to configure the DCBX version.
Use undo dcbx version to restore the default.
Syntax
dcbx version { rev100 | rev101 | standard }
undo dcbx version
Default
The DCBX version is autonegotiated by two interfaces, with the standard version as the initial version for negotiation at the local end.
Views
Layer 2 Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Parameters
rev100: Specifies DCBX Rev 1.00.
rev101: Specifies DCBX Rev 1.01.
standard: Specifies the IEEE Std 802.1Qaz-2011.
Usage guidelines
For DCBX to work correctly, configure the same DCBX version that is supported on both ends. As a best practice, configure the highest version supported on both ends. IEEE Std 802.1Qaz-2011, DCBX Rev 1.01, and DCBX Rev 1.00 are in descending order.
After this command is configured, an interface includes the configured DCBX version in its outgoing LLDP frames and does not negotiate the DCBX version with the peer interface.
Examples
# Configure the DCBX version as DCBX Rev 1.01 on interface Ten-GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] dcbx version rev101
Related commands
display lldp local-information
Use display lldp local-information to display local LLDP information, which will be contained in the advertisable LLDP TLVs and sent to neighboring devices.
Syntax
display lldp local-information [ global | interface interface-type interface-number ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
global: Displays the global local LLDP information.
interface interface-type interface-number: Specifies a port by its type and number.
Usage guidelines
If you do not specify any keywords or arguments, the command displays all local LLDP information, which includes the following:
· The global LLDP information.
· The LLDP information about the LLDP-enabled ports in the up state.
Examples
# Display all local LLDP information.
<Sysname> display lldp local-information
Global LLDP local-information:
Chassis ID : 0000-fc00-4331
System name : H3C
System description : H3C Comware Platform Software, Software Version 7.1.045,
Release 1133P03
H3C S12510-X
Copyright (c) 2004-2015 Hangzhou H3C Tech. Co., Ltd. All
rights reserved.
System capabilities supported : Bridge, Router, Customer Bridge, Service Bridge
System capabilities enabled : Bridge, Router, Customer Bridge
MED information:
Device class : Connectivity device
MED inventory information of master board:
HardwareRev : VER.C
FirmwareRev : 136
SoftwareRev : 7.1.0451133P03
SerialNum : 210231S12500XLSXSUP10A
Manufacturer name : H3C
Model name : H3C S12510-X
Asset tracking identifier : Unknown
LLDP local-information of port 156[FortyGigE1/0/1]:
Port ID type : Interface name
Port ID : FortyGigE1/0/1
Port description : FortyGigE1/0/1 Interface
LLDP agent nearest-bridge management address:
Management address type : All802
Management address : 000f-e207-f2e0
Management address interface type : IfIndex
Management address interface ID : Unknown
Management address OID : 0
LLDP agent nearest-nontpmr management address:
Management address type : All802
Management address : 000f-e207-f2e0
Management address interface type : IfIndex
Management address interface ID : Unknown
Management address OID : 0
LLDP agent nearest-customer management address:
Management address type : All802
Management address : 000f-e207-f2e0
Management address interface type : IfIndex
Management address interface ID : Unknown
Management address OID : 0
DCBX Control info:
Oper version : Standard
DCBX PFC info:
P0-0 P1-0 P2-0 P3-0 P4-0 P5-0 P6-0 P7-0
Number of traffic classes supported: 8
Value of MBC: 0
Port VLAN ID(PVID) : 1
Port and protocol VLAN ID(PPVID) : 0
Port and protocol VLAN supported : Yes
Port and protocol VLAN enabled : No
VLAN name of VLAN 1 : VLAN 0001
Management VLAN ID : 0
Link aggregation supported : Yes
Link aggregation enabled : No
Aggregation port ID : 0
Auto-negotiation supported : Yes
Auto-negotiation enabled : Yes
OperMau : Speed(40000)/Duplex(Full)
Power port class : PD
PSE power supported : No
PSE power enabled : No
PSE pairs control ability : No
Power pairs : Signal
Port power classification : Class 0
Maximum frame size : 12288
Table 45 Command output
Field |
Description |
Chassis ID |
Bridge MAC address of the device. |
System capabilities supported |
Supported capabilities: · Bridge—Switching is supported. · Router—Routing is supported. · DocsisCableDevice—The local device can serve as a DOCSIS-compliant cable device. · StationOnly—The local device can serve as a station only. · Customer Bridge—The customer bridge function is supported. · Service Bridge—The service bridge function is supported. · TPMR—The TPMR function is supported. · Other—Functions other than those listed above are supported. |
System capabilities enabled |
Enabled capabilities: · Bridge—Switching is enabled. · Router—Routing is enabled. · DocsisCableDevice—The local device is serving as a DOCSIS-compliant cable device. · StationOnly—The local device is serving as a station only. · Customer Bridge—The customer bridge function is enabled. · Service Bridge—The service bridge function is enabled. · TPMR—The TPMR function is enabled. · Other—Functions other than those listed above are enabled. |
Device class |
MED device class: · Connectivity device—Network device. · Class I—Normal terminal device. It requires the basic LLDP discovery services. · Class II—Media terminal device. It supports media streams, and can also function as a normal terminal device. · Class III—Communication terminal device. It supports the IP communication systems of end users, and can also function as a normal terminal device or media terminal device. |
HardwareRev |
Hardware version. |
FirmwareRev |
Firmware version. |
SoftwareRev |
Software version. |
SerialNum |
Serial number. |
Manufacturer name |
Device manufacturer. |
Model name |
Device model. |
Port ID type |
Port ID type: · MAC address. · Interface name. |
Port ID |
Port ID, the value of which depends on the port ID type. |
Management address interface type |
Numbering type of the interface identified by the management address. |
Management address interface ID |
Index of the interface identified by the management address. |
Management address OID |
Management address object ID. |
DCBX control info |
Displayed as version information in IEEE Std 802.1Qaz-2011. |
Oper version |
DCBX version number. |
Sequence number |
Number of DCBX TLV content changes. |
Acknowledge number |
Times of synchronizing configurations by the peer device. |
DCBX ETS info |
CoS-to-local priority mapping and bandwidth allocation. |
Percentage |
Percentage of bandwidth allocated. |
P0- P1- P2- P3- P4- P5- P6- P7- |
Number of supported priorities configured by using the priority-flow-control no-drop dot1p dot1p-list command at the local end. |
Number of traffic classes supported |
Capability set supported by PFC (displayed only in Rev 1.01). |
Priority |
802.1p priority. |
Protocol ID |
Application protocol number. |
CoS map |
Application protocol-to-CoS mapping. |
CBS |
Indicates whether the token bucket mechanism is supported on the port: · False—The token bucket mechanism is not supported. · True—The token bucket mechanism is supported. |
Max TCs |
Maximum number of priorities supported. |
TSA |
Transmission selection algorithm. |
DCBX PFC info |
PFC TLV information. |
Value of MBC |
MBC indicates the ability of packets to bypass MACsec. It is 1-bit long. · 0—Packets can bypass MACsec when MACsec is disabled. · 1—Packets cannot bypass MACsec when MACsec is disabled. |
Auto-negotiation supported |
Indicates whether autonegotiation is supported on the port. |
Auto-negotiation enabled |
Indicates whether autonegotiation is enabled on the port. |
OperMau |
Speed and duplex state of the port. |
Power port class |
PoE port class: · PSE—Power sourcing equipment. · PD—Powered device. |
PSE power supported |
Indicates whether the device can operate as a PSE. |
PSE power enabled |
Indicates whether the device is operating as a PSE. |
PSE pairs control ability |
Indicates whether the pair selection ability is available. |
Power pairs |
Power supply mode: · Signal—Uses data pairs to supply power. · Spare—Uses spare pairs to supply power. |
Port power classification |
Power class of the PD: · Class 0. · Class 1. · Class 2. · Class 3. · Class 4. |
Link aggregation supported |
Indicates whether link aggregation is supported on the port. |
Link aggregation enabled |
Indicates whether link aggregation is enabled on the port. |
Aggregation port ID |
Member port ID, which is 0 when link aggregation is disabled. |
display lldp neighbor-information
Use display lldp neighbor-information to display the LLDP information carried in LLDP TLVs that the local device receives from the neighboring devices.
Syntax
display lldp neighbor-information [ [ [ interface interface-type interface-number ] [ agent { nearest-bridge | nearest-customer | nearest-nontpmr } ] [ verbose ] ] | list [ system-name system-name ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
interface interface-type interface-number: Specifies a port by its type and number. If you do not specify this option, the command displays the LLDP information that all ports receive from the neighboring devices.
agent: Specifies an agent type. If you do not specify an agent type, the command displays the LLDP information that all LLDP agents receive from the neighboring devices.
nearest-bridge: Specifies nearest bridge agents.
nearest-customer: Specifies nearest customer bridge agents.
nearest-nontpmr: Specifies nearest non-TPMR bridge agents.
verbose: Displays the detailed LLDP information that the local device receives from the neighboring devices. If you do not specify this keyword, the command displays the brief LLDP information that the local device receives from the neighboring devices.
list: Displays the LLDP information that the local device receives from the neighboring devices in the form of a list.
system-name system-name: Displays the LLDP information that the local device receives from a neighboring device specified by its system name. The system-name argument is a string of 1 to 255 characters. If you do not specify this option, the command displays the LLDP information that the local device receives from all neighboring devices in a list.
Examples
# Display the detailed LLDP information that the nearest bridge agents on all ports receive from the neighboring devices.
<Sysname> display lldp neighbor-information agent nearest-bridge verbose
LLDP neighbor-information of port 1[FortyGigE1/0/1]:
LLDP agent nearest-bridge:
LLDP Neighbor index : 1
Update time : 0 days, 0 hours, 1 minutes, 1 seconds
Chassis type : MAC address
Chassis ID : 000f-0055-0002
Port ID type : Interface name
Port ID : FortyGigE1/0/1
Time to live : 120
Port description : FortyGigE1/0/1 Interface
System name : Sysname
System description : H3C Comware Platform Software, Software Version 7.1.045,
Release 1109
H3C S12510-X
Copyright (c) 2004-2014 Hangzhou H3C Tech. Co., Ltd. All
rights reserved.
System capabilities supported : Bridge, Router, Customer Bridge, Service Bridge
System capabilities enabled : Bridge, Router, Customer Bridge
Management address type : IPv4
Management address : 192.168.1.55
Management address interface type : IfIndex
Management address interface ID : Unknown
Management address OID : 0
Port VLAN ID(PVID): 1
VLAN name of VLAN 12: VLAN 0012
Management VLAN ID : 5
Link aggregation supported : Yes
Link aggregation enabled : No
Aggregation port ID : 0
Auto-negotiation supported : Yes
Auto-negotiation enabled : Yes
OperMau : Speed(40000)/Duplex(Full)
Power port class : PSE
PSE power supported : No
PSE power enabled : No
PSE pairs control ability : No
Power pairs : Signal
Port power classification : Class 0
Maximum frame size : 12288
CDP neighbor-information of port 1[FortyGigE1/0/1]:
CDP neighbor index : 2
Chassis ID : Switch
Address : 2.0.0.2
Port ID : GigabitEthernet1/0/3
Software version : Cisco IOS Software, C3750 Software (C3750-ADVIPSERVICESK9
-M), Version 12.2(25)SED1, RELEASE SOFTWARE (fc1)
Copyright (c) 1986-2005 by Cisco Systems, Inc.
Compiled Tue 22-Nov-05 23:37 by yenanh
Platform : cisco WS-C3750G-48TS
Duplex : Full
# Display the brief LLDP information that all LLDP agents on all ports receive from the neighboring devices.
<Sysname> display lldp neighbor-information
LLDP neighbor-information of port 52[FortyGigE1/0/3]:
LLDP agent nearest-bridge:
LLDP neighbor index : 3
ChassisID/subtype : 0011-2233-4400/MAC address
PortID/subtype : 000c-29f5-c71f/MAC address
Capabilities : Bridge, Router, Customer Bridge
LLDP neighbor index : 6
ChassisID/subtype : 0011-2233-4400/MAC address
PortID/subtype : 000c-29f5-c715/MAC address
Capabilities : None
CDP neighbor-information of port 52[FortyGigE1/0/3]:
LLDP agent nearest-bridge:
CDP neighbor index : 4
Chassis ID : SEP00260B5C0548
Port ID : Port 1
CDP neighbor index : 5
Chassis ID : 0011-2233-4400
Port ID : FortyGigE1/0/4
LLDP neighbor-information of port 52[FortyGigE1/0/3]:
LLDP agent nearest-nontpmr:
LLDP neighbor index : 6
ChassisID/subtype : 0011-2233-4400/MAC address
PortID/subtype : 000c-29f5-c715/MAC address
Capabilities : None
# Display the brief LLDP information that all LLDP agents receive from all neighboring devices in a list.
<Sysname> display lldp neighbor-information list
Chassis ID : * -- --Nearest nontpmr bridge neighbor
# -- --Nearest customer bridge neighbor
Default -- -- Nearest bridge neighbor
System Name Local Interface Chassis ID Port ID
System1 FGE1/0/1 000f-e25d-ee91 FortyGigE1/0/5
System2 FGE1/0/2 000f-e25d-ee92* FortyGigE1/0/6
System3 FGE1/0/3 000f-e25d-ee93# FortyGigE1/0/7
Table 46 Command output
Field |
Description |
LLDP neighbor-information of port 1 |
LLDP information received through port 1. |
Update time |
Time when LLDP information about a neighboring device was last updated. |
Chassis type |
Chassis ID type: · Chassis component. · Interface alias. · Port component. · MAC address. · Network address (ipv4). · Interface name. · Locally assigned—Locally-defined chassis type other than those listed above. |
Chassis ID |
ID that identifies the LLDP sending device, which can be a MAC address, a network address, an interface or some other value, depending on the chassis type of the neighboring device. |
Port ID type |
Port ID type: · Interface alias. · Port component. · MAC address. · Network address (ipv4). · Interface name. · Agent circuit ID. · Locally assigned—Locally-defined port ID type other than those listed above. |
Port ID |
Value of the type of the port ID. |
System name |
System name of the neighboring device. |
System description |
System description of the neighboring device. |
System capabilities supported |
Capabilities supported on the neighboring device: · Repeater—Signal repeating is supported. · Bridge—Switching is supported. · WlanAccessPoint—The neighboring device can serve as a wireless AP. · Router—Routing is supported. · Telephone—The neighboring device can serve as a telephone. · DocsisCableDevice—The neighboring device can serve as a DOCSIS-compliant cable device. · StationOnly—The neighboring device can serve as a station only. · Customer Bridge—The customer bridge function is enabled. · Service Bridge—The service bridge function is enabled. · TPMR—The TPMR function is enabled. · Other—Functions other than those listed above are supported. |
System capabilities enabled |
Capabilities enabled on the neighboring device: · Repeater—Signal repeating is enabled. · Bridge—Switching is enabled. · WlanAccessPoint—The neighboring device is serving as a wireless AP. · Router—Routing is enabled. · Telephone—The neighboring device is serving as a telephone. · DocsisCableDevice—The neighboring device is serving as a DOCSIS-compliant cable device. · StationOnly—The neighboring device is serving as a station only. · Customer Bridge—The customer bridge function is enabled. · Service Bridge—The service bridge function is enabled. · TPMR—The TPMR function is enabled. · Other—Functions other than those listed above are supported. |
Management address OID |
Management address object ID. |
DCBX control info |
Displayed as version information in IEEE Std 802.1Qaz-2011. |
Oper version |
DCBX version number. |
Sequence number |
Number of DCBX TLV content changes. |
Acknowledge number |
Times of synchronizing configurations by the peer device. |
DCBX ETS info |
CoS-to-local priority mapping and bandwidth allocation. |
Percentage |
Percentage of bandwidth allocated. |
P0- P1- P2- P3- P4- P5- P6- P7- |
Number of supported priorities configured by using the priority-flow-control no-drop dot1p dot1p-list command on the neighbor. |
Number of traffic classes supported |
Capability set supported by PFC (displayed only in Rev 1.01 and IEEE Std 802.1Qaz-2011). |
CoS map |
Application protocol-to-CoS mapping. |
CBS |
Indicates whether the token bucket mechanism is supported on the port: · False—The token bucket mechanism is not supported. · True—The token bucket mechanism is supported. |
Max TCs |
Maximum number of priorities supported. |
TSA |
Transmission selection algorithm. |
Value of MBC |
MBC indicates the ability of packets to bypass MACsec. It is 1-bit long. · 0—Packets can bypass MACsec when MACsec is disabled. · 1—Packets cannot bypass MACsec when MACsec is disabled. |
VLAN name of VLAN 12 |
Name of VLAN 12. |
Auto-negotiation supported |
Indicates whether autonegotiation is supported on the port. |
Auto-negotiation enabled |
Indicates whether autonegotiation is enabled on the port. |
OperMau |
Speed and duplex state on the port. |
Power port class |
PoE device class: · PSE—Power sourcing equipment. · PD—Powered device. |
PSE power supported |
Indicates whether the device can operate as a PSE. |
PSE power enabled |
Indicates whether the device is operating as a PSE. |
PSE pairs control ability |
Indicates whether the pair selection ability is available. |
Power pairs |
Power supply mode: · Signal—Uses data pairs to supply power. · Spare—Uses spare pairs to supply power. |
Port power classification |
Power class of the PD: · Class 0. · Class 1. · Class 2. · Class 3. · Class 4. |
Link aggregation supported |
Indicates whether link aggregation is supported. |
Link aggregation enabled |
Indicates whether link aggregation is enabled. |
Local Interface |
Local port that receives the LLDP information. |
Chassis ID : * -- -- Nearest nontpmr bridge neighbor #-- -- Nearest customer bridge neighbor |
Chassis ID flag: · An asterisk (*) indicates the nearest non-TPMR bridge neighbor. · A pound sign (#) indicates the nearest customer bridge neighbor. |
display lldp statistics
Use display lldp statistics to display the global LLDP statistics or the LLDP statistics of a port.
Syntax
display lldp statistics [ global | [ interface interface-type interface-number ] [ agent { nearest-bridge | nearest-customer | nearest-nontpmr } ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
global: Displays the global LLDP statistics.
interface interface-type interface-number: Specifies a port by its type and number.
agent: Specifies an LLDP agent type. If you do not specify an agent type, the command displays the statistics for all LLDP agents.
nearest-bridge: Specifies nearest bridge agents.
nearest-customer: Specifies nearest customer bridge agents.
nearest-nontpmr: Specifies nearest non-TPMR bridge agents.
Usage guidelines
If you do not specify any keywords or arguments, the command displays the global LLDP statistics and the LLDP statistics of all ports.
Examples
# Display the global LLDP statistics and the LLDP statistics of all ports.
<Sysname> display lldp statistics
LLDP statistics global information:
LLDP neighbor information last change time:0 days, 0 hours, 4 minutes, 40 seconds
The number of LLDP neighbor information inserted : 1
The number of LLDP neighbor information deleted : 1
The number of LLDP neighbor information dropped : 0
The number of LLDP neighbor information aged out : 1
LLDP statistics information of port 1 [FortyGigE1/0/1]:
LLDP agent nearest-bridge:
The number of LLDP frames transmitted : 0
The number of LLDP frames received : 0
The number of LLDP frames discarded : 0
The number of LLDP error frames : 0
The number of LLDP TLVs discarded : 0
The number of LLDP TLVs unrecognized : 0
The number of LLDP neighbor information aged out : 0
The number of CDP frames transmitted : 0
The number of CDP frames received : 0
The number of CDP frames discarded : 0
The number of CDP error frames : 0
LLDP agent nearest-nontpmr:
The number of LLDP frames transmitted : 0
The number of LLDP frames received : 0
The number of LLDP frames discarded : 0
The number of LLDP error frames : 0
The number of LLDP TLVs discarded : 0
The number of LLDP TLVs unrecognized : 0
The number of LLDP neighbor information aged out : 0
The number of CDP frames transmitted : 0
The number of CDP frames received : 0
The number of CDP frames discarded : 0
The number of CDP error frames : 0
LLDP agent nearest-customer:
The number of LLDP frames transmitted : 0
The number of LLDP frames received : 0
The number of LLDP frames discarded : 0
The number of LLDP error frames : 0
The number of LLDP TLVs discarded : 0
The number of LLDP TLVs unrecognized : 0
The number of LLDP neighbor information aged out : 0
The number of CDP frames transmitted : 0
The number of CDP frames received : 0
The number of CDP frames discarded : 0
The number of CDP error frames : 0
# Display the LLDP statistics for the nearest customer bridge agents on FortyGigE 1/0/1.
<Sysname> display lldp statistics interface FortyGigE1/0/1 agent nearest-customer
LLDP statistics information of port 1 [FortyGigE1/0/1]:
LLDP agent nearest-customer:
The number of LLDP frames transmitted : 0
The number of LLDP frames received : 0
The number of LLDP frames discarded : 0
The number of LLDP error frames : 0
The number of LLDP TLVs discarded : 0
The number of LLDP TLVs unrecognized : 0
The number of LLDP neighbor information aged out : 0
The number of CDP frames transmitted : 0
The number of CDP frames received : 0
The number of CDP frames discarded : 0
The number of CDP error frames : 0
Table 47 Command output
Field |
Description |
LLDP statistics global information |
Global LLDP statistics. |
LLDP neighbor information last change time |
Time when the neighbor information was last updated. |
The number of LLDP neighbor information inserted |
Number of times neighbor information was added. |
The number of LLDP neighbor information deleted |
Number of times neighbor information was removed. |
The number of LLDP neighbor information dropped |
Number of times neighbor information was dropped due to lack of available memory space. |
display lldp status
Use display lldp status to display LLDP status.
Syntax
display lldp status [ interface interface-type interface-number ] [ agent { nearest-bridge | nearest-customer | nearest-nontpmr } ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
interface interface-type interface-number: Specifies a port by its type and number.
agent: Specifies an LLDP agent type. If you do not specify an agent type, the command displays the status information for all LLDP agents.
nearest-bridge: Specifies nearest bridge agents.
nearest-customer: Specifies nearest customer bridge agents.
nearest-nontpmr: Specifies nearest non-TPMR bridge agents.
Usage guidelines
If you do not specify a port, the command displays the global LLDP status and the LLDP status of each port.
Examples
# Display the global LLDP status and the LLDP status of each port.
<Sysname> display lldp status
Global status of LLDP: Enable
Bridge mode of LLDP: customer-bridge
The current number of LLDP neighbors: 0
The current number of CDP neighbors: 0
LLDP neighbor information last changed time: 0 days, 0 hours, 4 minutes, 40 seconds
Transmit interval : 30s
Fast transmit interval : 1s
Transmit max credit : 5
Hold multiplier : 4
Reinit delay : 2s
Trap interval : 5s
Fast start times : 3
LLDP status information of port 1 [FortyGigE1/0/1]:
LLDP agent nearest-bridge:
Port status of LLDP : Enable
Admin status : Tx_Rx
Trap flag : No
MED trap flag : No
Polling interval : 0s
Number of LLDP neighbors : 5
Number of MED neighbors : 2
Number of CDP neighbors : 0
Number of sent optional TLV : 12
Number of received unknown TLV : 5
LLDP agent nearest-nontpmr:
Port status of LLDP : Enable
Admin status : Tx_Rx
Trap flag : No
Polling interval : 0s
Number of LLDP neighbors : 5
Number of MED neighbors : 2
Number of CDP neighbors : 0
Number of sent optional TLV : 12
Number of received unknown TLV : 5
LLDP agent nearest-customer:
Port status of LLDP : Enable
Admin status : Tx_Rx
Trap flag : No
Polling interval : 0s
Number of LLDP neighbors : 5
Number of MED neighbors : 2
Number of CDP neighbors : 0
Number of sent optional TLV : 12
Number of received unknown TLV : 5
Table 48 Command output
Field |
Description |
Bridge mode of LLDP |
LLDP bridge mode: service-bridge or customer-bridge. |
Global status of LLDP |
Indicates whether LLDP is globally enabled. |
LLDP neighbor information last changed time |
Time when the neighbor information was last updated. |
Transmit interval |
LLDP frame transmission interval. |
Hold multiplier |
TTL multiplier. |
Reinit delay |
LLDP reinitialization delay. |
Transmit max credit |
Token bucket size for sending LLDP frames. |
Trap interval |
Trap transmission interval. |
Fast start times |
Number of LLDP frames sent each time fast LLDP frame transmission is triggered. |
Port 1 |
LLDP status of port 1. |
Port status of LLDP |
Indicates whether LLDP is enabled on the port. |
Admin status |
LLDP operating mode of the port: · Tx_Rx—The port can send and receive LLDP frames. · Rx_Only—The port can only receive LLDP frames. · Tx_Only—The port can only send LLDP frames. · Disable—The port cannot send or receive LLDP frames. |
Trap Flag |
Indicates whether trapping is enabled. |
Polling interval |
LLDP polling interval, which is 0 when LLDP polling is disabled. |
Number of neighbors |
Number of LLDP neighbors connecting to the port. |
Number of MED neighbors |
Number of MED neighbors connecting to the port. |
Number of CDP neighbors |
Number of CDP neighbors connecting to the port. |
Number of sent optional TLV |
Number of optional TLVs contained in an LLDP frame sent through the port. |
Number of received unknown TLV |
Number of unknown TLVs contained in a received LLDP frame. |
display lldp tlv-config
Use display lldp tlv-config to display the types of advertisable optional LLDP TLVs of a port.
Syntax
display lldp tlv-config [ interface interface-type interface-number ] [ agent { nearest-bridge | nearest-customer | nearest-nontpmr } ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
interface interface-type interface-number: Specifies a port by its type and number.
agent: Specifies an LLDP agent type. If you do not specify an agent type, the command displays the types of advertisable optional LLDP TLVs for all LLDP agents.
nearest-bridge: Specifies nearest bridge agents.
nearest-customer: Specifies nearest customer bridge agents.
nearest-nontpmr: Specifies nearest non-TPMR bridge agents.
Usage guidelines
If you do not specify a port, the command displays the types of advertisable optional TLVs of all ports.
Examples
# Display the types of advertisable optional LLDP TLVs of interface FortyGigE 1/0/1.
<Sysname> display lldp tlv-config interface fortygige 1/0/1
LLDP tlv-config of port 1[FortyGigE1/0/1]:
LLDP agent nearest-bridge:
NAME STATUS DEFAULT
Basic optional TLV:
Port Description TLV YES YES
System Name TLV YES YES
System Description TLV YES YES
System Capabilities TLV YES YES
Management Address TLV YES YES
IEEE 802.1 extend TLV:
Port VLAN ID TLV YES YES
Port And Protocol VLAN ID TLV YES YES
VLAN Name TLV YES YES
DCBX TLV NO NO
EVB TLV NO NO
Link Aggregation TLV YES YES
Management VID TLV YES YES
IEEE 802.3 extend TLV:
MAC-Physic TLV YES YES
Power via MDI TLV YES YES
Maximum Frame Size TLV YES YES
LLDP-MED extend TLV:
Capabilities TLV YES YES
Network Policy TLV YES YES
Location Identification TLV NO NO
Extended Power via MDI TLV YES YES
Inventory TLV YES YES
LLDP agent nearest-nontpmr:
NAME STATUS DEFAULT
Basic optional TLV:
Port Description TLV YES NO
System Name TLV YES NO
System Description TLV YES NO
System Capabilities TLV YES NO
Management Address TLV YES NO
IEEE 802.1 extend TLV:
Port VLAN ID TLV YES NO
Port And Protocol VLAN ID TLV YES NO
VLAN Name TLV YES NO
DCBX TLV NO NO
EVB TLV YES YES
Link Aggregation TLV YES NO
Management VID TLV NO NO
IEEE 802.3 extend TLV:
MAC-Physic TLV YES NO
Power via MDI TLV YES NO
Maximum Frame Size TLV YES NO
LLDP-MED extend TLV:
Capabilities TLV YES NO
Network Policy TLV YES NO
Location Identification TLV NO NO
Extended Power via MDI TLV YES NO
Inventory TLV YES NO
LLDP agent nearest-customer:
NAME STATUS DEFAULT
Basic optional TLV:
Port Description TLV YES YES
System Name TLV YES YES
System Description TLV YES YES
System Capabilities TLV YES YES
Management Address TLV YES YES
IEEE 802.1 extend TLV:
Port VLAN ID TLV YES YES
Port And Protocol VLAN ID TLV YES YES
VLAN Name TLV YES YES
DCBX TLV NO NO
EVB TLV NO NO
Link Aggregation TLV YES NO
Management VID TLV YES YES
IEEE 802.3 extend TLV:
MAC-Physic TLV YES NO
Power via MDI TLV YES NO
Maximum Frame Size TLV YES NO
LLDP-MED extend TLV:
Capabilities TLV YES YES
Network Policy TLV YES YES
Location Identification TLV NO NO
Extended Power via MDI TLV YES NO
Inventory TLV YES YES
Table 49 Command output
Field |
Description |
LLDP tlv-config of port 1 |
Advertisable optional TLVs of port 1. |
NAME |
TLV type. |
STATUS |
Indicates whether the type of TLV is sent through a port. |
DEFAULT |
Indicates whether the type of TLV is sent through a port by default. |
Basic optional TLV |
Basic optional TLVs: · Port Description TLV. · System Name TLV. · System Description TLV. · System Capabilities TLV. · Management Address TLV. |
IEEE 802.1 extended TLV |
IEEE 802.1 organizationally specific TLVs: · Port VLAN ID TLV. · Port and protocol VLAN ID TLV. · VLAN name TLV. · DCBX TLV. · EVB TLV. · Management VID TLV. NOTE: The switch does not support EVB TLV in the current software version. |
IEEE 802.3 extended TLV |
IEEE 802.3 organizationally specific TLVs: · MAC-Physic TLV. · Power via MDI TLV. · Link aggregation TLV. · Maximum frame size TLV. |
LLDP-MED extend TLV |
LLDP-MED TLVs: · Capabilities TLV. · Network Policy TLV. · Extended Power-via-MDI TLV. · Location Identification TLV. · Inventory TLV. |
Inventory TLV |
Inventory TLVs: · Hardware Revision TLV. · Firmware Revision TLV. · Software Revision TLV. · Serial Number TLV. · Manufacturer Name TLV. · Model name TLV. · Asset ID TLV. |
lldp admin-status
Use lldp admin-status to specify the LLDP operating mode.
Use undo lldp admin-status to restore the default.
Syntax
In Layer 2/Layer 3 Ethernet interface view:
lldp [ agent { nearest-customer | nearest-nontpmr } ] admin-status { disable | rx | tx | txrx }
undo lldp [ agent { nearest-customer | nearest-nontpmr } ] admin-status
In Layer 2/Layer 3 aggregate interface view:
lldp agent { nearest-customer | nearest-nontpmr } admin-status { disable | rx | tx | txrx }
undo lldp agent { nearest-customer | nearest-nontpmr } admin-status
In IRF physical interface view:
lldp admin-status { disable | rx | tx | txrx }
undo lldp admin-status
Default
The nearest bridge agent operates in txrx mode, and the nearest customer bridge agent and nearest non-TPMR bridge agent operate in disable mode.
Views
IRF physical interface view
Layer 2/Layer 3 Ethernet interface view
Layer 2/Layer 3 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
agent: Specifies an LLDP agent type. If you do not specify an agent type in Ethernet interface view, the command configures the operating mode for nearest bridge agents.
nearest-customer: Specifies nearest customer bridge agents.
nearest-nontpmr: Specifies nearest non-TPMR bridge agents.
disable: Specifies the Disable mode. A port in this mode cannot send or receive LLDP frames.
rx: Specifies the Rx mode. A port in this mode can only receive LLDP frames.
tx: Specifies the Tx mode. A port in this mode can only send LLDP frames.
txrx: Specifies the TxRx mode. A port in this mode can send and receive LLDP frames.
Examples
# Configure the LLDP operating mode as Rx for the nearest customer bridge agents on FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] lldp agent nearest-customer admin-status rx
lldp check-change-interval
Use lldp check-change-interval to enable LLDP polling and set the polling interval.
Use undo lldp check-change-interval to restore the default.
Syntax
In Layer 2/Layer 3 Ethernet interface view:
lldp [ agent { nearest-customer | nearest-nontpmr } ] check-change-interval interval
undo lldp [ agent { nearest-customer | nearest-nontpmr } ] check-change-interval
In Layer 2/Layer 3 aggregate interface view:
lldp agent { nearest-customer | nearest-nontpmr } check-change-interval interval
undo lldp agent { nearest-customer | nearest-nontpmr } check-change-interval
In IRF physical interface view:
lldp check-change-interval interval
undo lldp check-change-interval
Default
LLDP polling is disabled.
Views
IRF physical interface view
Layer 2/Layer 3 Ethernet interface view
Layer 2/Layer 3 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
agent: Specifies an LLDP agent type. If you do not specify an agent type in Ethernet interface view, the command enables LLDP polling and sets the polling interval for nearest bridge agents.
nearest-customer: Specifies nearest customer bridge agents.
nearest-nontpmr: Specifies nearest non-TPMR bridge agents.
interval: Sets the LLDP polling interval in the range of 1 to 30 seconds.
Examples
# Enable LLDP polling and set the polling interval to 30 seconds for the nearest customer bridge agents on FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] lldp agent nearest-customer check-change-interval 30
lldp compliance admin-status cdp
Use lldp compliance admin-status cdp to configure the operating mode of CDP-compatible LLDP.
Use undo lldp compliance admin-status cdp to restore the default.
Syntax
lldp compliance admin-status cdp { disable | txrx }
undo lldp compliance admin-status cdp
Default
CDP-compatible LLDP operates in disable mode.
Views
Layer 2 Ethernet interface view, Layer 3 Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Parameters
disable: Specifies the disable mode. CDP-compatible LLDP in this mode cannot receive or transmit CDP packets.
txrx: Specifies the TxRx mode. CDP-compatible LLDP in this mode can send and receive CDP packets.
Usage guidelines
For your device to work with Cisco IP phones, you must perform the following tasks:
· Enable CDP-compatible LLDP globally.
· Configure CDP-compatible LLDP to operate in TxRx mode on the specified ports.
Examples
# Enable CDP-compatible LLDP globally and configure CDP-compatible LLDP to operate in TxRx mode on FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] lldp compliance cdp
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] lldp compliance admin-status cdp txrx
Related commands
lldp compliance cdp
lldp compliance cdp
Use lldp compliance cdp to enable CDP compatibility globally.
Use undo lldp compliance cdp to restore the default.
Syntax
lldp compliance cdp
undo lldp compliance cdp
Default
CDP compatibility is globally disabled.
Views
System view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
The maximum TTL that CDP allows is 255 seconds. To make CDP-compatible LLDP work correctly with Cisco IP phones, configure the LLDP frame transmission interval to be no more than 1/3 of the TTL value.
Examples
# Enable CDP compatibility globally.
<Sysname> system-view
[Sysname] lldp compliance cdp
Related commands
· lldp hold-multiplier
· lldp timer tx-interval
lldp enable
Use lldp enable to enable LLDP on a port.
Use undo lldp enable to disable LLDP on a port.
Syntax
lldp enable
undo lldp enable
Default
LLDP is enabled on a port.
Views
IRF physical interface view
Layer 2/Layer 3 Ethernet interface view
Layer 2/Layer 3 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
LLDP takes effect on a port only when LLDP is enabled both globally and on the port.
Examples
# Disable LLDP on FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] undo lldp enable
Related commands
lldp global enable
lldp encapsulation snap
Use lldp encapsulation snap to configure the encapsulation format for LLDP frames as SNAP.
Use undo lldp encapsulation to restore the default.
Syntax
In Layer 2/Layer 3 Ethernet interface view:
lldp [ agent { nearest-customer | nearest-nontpmr } ] encapsulation snap
undo lldp [ agent { nearest-customer | nearest-nontpmr } ] encapsulation
In Layer 2/Layer 3 aggregate interface view:
lldp agent { nearest-customer | nearest-nontpmr } encapsulation snap
undo lldp agent { nearest-customer | nearest-nontpmr } encapsulation
In IRF physical interface view:
lldp encapsulation snap
undo lldp encapsulation
Default
The encapsulation format for LLDP frames is Ethernet II.
Views
IRF physical interface view
Layer 2/Layer 3 Ethernet interface view,
Layer 2/Layer 3 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
agent: Specifies an LLDP agent type. If you do not specify an agent type in Ethernet interface view, the command configures the LLDP frame encapsulation format for nearest bridge agents.
nearest-customer: Specifies nearest customer bridge agents.
nearest-nontpmr: Specifies nearest non-TPMR bridge agents.
Usage guidelines
LLDP-CDP packets use only SNAP encapsulation.
Examples
# Configure the encapsulation format for LLDP frames as SNAP on FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] lldp encapsulation snap
lldp fast-count
Use lldp fast-count to set the number of LLDP frames sent each time fast LLDP frame transmission is triggered.
Use undo lldp fast-count to restore the default.
Syntax
lldp fast-count count
undo lldp fast-count
Default
The number is 4.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
count: Sets the number of LLDP frames sent each time fast LLDP frame transmission is triggered. The value range is 1 to 8.
Examples
# Configure the device to send five LLDP frames each time fast LLDP frame transmission is triggered.
<Sysname> system-view
[Sysname] lldp fast-count 5
lldp global enable
Use lldp global enable to enable LLDP globally.
Use undo lldp global enable to disable LLDP globally.
Syntax
lldp global enable
undo lldp global enable
Default
LLDP is disabled globally.
Views
System view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
LLDP takes effect only when LLDP is enabled both globally and on the port.
Examples
# Disable LLDP globally.
<Sysname> system-view
[Sysname] undo lldp global enable
Related commands
lldp enable
lldp hold-multiplier
Use lldp hold-multiplier to set the TTL multiplier.
Use undo lldp hold-multiplier to restore the default.
Syntax
lldp hold-multiplier value
undo lldp hold-multiplier
Default
The TTL multiplier is 4.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
value: Sets the TTL multiplier in the range of 2 to 10.
Usage guidelines
The TTL TLV carried in an LLDPDU determines how long the device information carried in the LLDPDU can be saved on a recipient device.
By setting the TTL multiplier, you can configure the TTL of locally sent LLDP frames, which determines how long information about the local device can be saved on a neighboring device. The TTL is expressed by using the following formula:
TTL = Min (65535, (TTL multiplier × LLDP frame transmission interval))
As the expression shows, the TTL can be up to 65535 seconds.
Examples
# Set the TTL multiplier to 6.
<Sysname> system-view
[Sysname] lldp hold-multiplier 6
Related commands
lldp timer tx-interval
lldp management-address-format string
Use lldp management-address-format string to configure the encoding format of the management address as string.
Use undo lldp management-address-format to restore the default.
Syntax
In Layer 2/Layer 3 Ethernet interface view:
lldp [ agent { nearest-customer | nearest-nontpmr } ] management-address-format string
undo lldp [ agent { nearest-customer | nearest-nontpmr } ] management-address-format
In Layer 2/Layer 3 aggregate interface view:
lldp agent { nearest-customer | nearest-nontpmr } management-address-format string
undo lldp agent { nearest-customer | nearest-nontpmr } management-address-format
Default
The encoding format of the management address is numeric.
Views
Layer 2/Layer 3 Ethernet interface view
Layer 2/Layer 3 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
agent: Specifies an LLDP agent type. If you do not specify an agent type in Ethernet interface view, the command configures the encoding format of the management address for nearest bridge agents.
nearest-bridge: Specifies nearest bridge agents.
nearest-customer: Specifies nearest customer bridge agents.
nearest-nontpmr: Specifies nearest non-TPMR bridge agents.
Usage guidelines
LLDP neighbors must use the same encoding format for the management address.
Examples
# Configure the encoding format of the management address as string for the nearest customer bridge agents on FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] lldp agent nearest-customer management-address-format string
lldp max-credit
Use lldp max-credit to set the token bucket size for sending LLDP frames.
Use undo lldp max-credit to restore the default.
Syntax
lldp max-credit credit-value
undo lldp max-credit
Default
The token bucket size for sending LLDP frames is 5.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
credit-value: Specifies the token bucket size for sending LLDP frames, in the range of 1 to 100.
Examples
# Set the token bucket size for sending LLDP frames to 10.
<Sysname> system-view
[Sysname] lldp max-credit 10
lldp mode
Use lldp mode to configure LLDP to operate in service bridge mode.
Use undo lldp mode to restore the default.
Syntax
lldp mode service-bridge
undo lldp mode
Default
LLDP operates in customer bridge mode.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
service-bridge: Specifies the service bridge mode.
Usage guidelines
The LLDP agent types supported by LLDP depend on the LLDP bridge mode:
· Service bridge mode—LLDP supports nearest bridge agents and nearest non-TPMR bridge agents. LLDP processes the LLDP frames with destination MAC addresses for these agents and transparently transmits the LLDP frames with other destination MAC addresses in the VLAN.
· Customer bridge mode—LLDP supports nearest bridge agents, nearest non-TPMR bridge agents, and nearest customer bridge agents. LLDP processes the LLDP frames with destination MAC addresses for these agents and transparently transmits the LLDP frames with other destination MAC addresses in the VLAN.
The bridge mode configuration takes effect only when LLDP is enabled globally. If LLDP is disabled globally, LLDP can only operate in customer bridge mode.
Examples
# Configure LLDP to operate in service bridge mode.
<Sysname> system-view
[Sysname] lldp mode service-bridge
Related commands
lldp global enable
lldp notification med-topology-change enable
Use lldp notification med-topology-change enable to enable LLDP-MED trapping.
Use undo lldp notification med-topology-change enable to disable LLDP-MED trapping.
Syntax
lldp notification med-topology-change enable
undo lldp notification med-topology-change enable
Default
LLDP-MED trapping is disabled on ports.
Views
Layer 2 Ethernet interface view, Layer 3 Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Examples
# Enable LLDP-MED trapping for FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] lldp notification med-topology-change enable
lldp notification remote-change enable
Use lldp notification remote-change enable to enable LLDP trapping.
Use undo lldp notification remote-change enable to disable LLDP trapping.
Syntax
In Layer 2/Layer 3 Ethernet interface view:
lldp [ agent { nearest-customer | nearest-nontpmr } ] notification remote-change enable
undo lldp [ agent { nearest-customer | nearest-nontpmr } ] notification remote-change enable
In Layer 2/Layer 3 aggregate interface view:
lldp agent { nearest-customer | nearest-nontpmr } notification remote-change enable
undo lldp agent { nearest-customer | nearest-nontpmr } notification remote-change enable
In IRF physical interface view:
lldp notification remote-change enable
undo lldp notification remote-change enable
Default
LLDP trapping is disabled on ports.
Views
IRF physical interface view
Layer 2/Layer 3 Ethernet interface view
Layer 2/Layer 3 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
agent: Specifies an LLDP agent type. If you do not specify an agent type in Ethernet interface view, the command enables LLDP trapping for nearest bridge agents.
nearest-customer: Specifies nearest customer bridge agents.
nearest-nontpmr: Specifies nearest non-TPMR bridge agents.
Examples
# Enable LLDP trapping for the nearest customer bridge agents on FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] lldp agent nearest-customer notification remote-change enable
lldp timer fast-interval
Use lldp timer fast-interval to set an interval for fast LLDP frame transmission.
Use undo lldp timer fast-interval to restore the default.
Syntax
lldp timer fast-interval interval
undo lldp timer fast-interval
Default
The interval for fast LLDP frame transmission is 1 second.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
interval: Sets an interval for fast LLDP frame transmission, in the range of 1 to 3600 seconds.
Examples
# Set the interval for fast LLDP frame transmission to 2 seconds.
<Sysname> system-view
[Sysname] lldp timer fast-interval 2
lldp timer notification-interval
Use lldp timer notification-interval to set the LLDP trap and LLDP-MED trap transmission interval.
Use undo lldp timer notification-interval to restore the default.
Syntax
lldp timer notification-interval interval
undo lldp timer notification-interval
Default
The LLDP trap and LLDP-MED trap transmission interval is 30 seconds.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
interval: Sets the LLDP trap and LLDP-MED trap transmission interval in the range of 5 to 3600 seconds.
Examples
# Set the LLDP trap and LLDP-MED trap transmission interval to 8 seconds.
<Sysname> system-view
[Sysname] lldp timer notification-interval 8
lldp timer reinit-delay
Use lldp timer reinit-delay to set the LLDP reinitialization delay.
Use undo lldp timer reinit-delay to restore the default.
Syntax
lldp timer reinit-delay delay
undo lldp timer reinit-delay
Default
The LLDP reinitialization delay is 2 seconds.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
delay: Sets the LLDP reinitialization delay in the range of 1 to 10 seconds.
Examples
# Set the LLDP reinitialization delay to 4 seconds.
<Sysname> system-view
[Sysname] lldp timer reinit-delay 4
lldp timer tx-interval
Use lldp timer tx-interval to set the LLDP frame transmission interval.
Use undo lldp timer tx-interval to restore the default.
Syntax
lldp timer tx-interval interval
undo lldp timer tx-interval
Default
The LLDP frame transmission interval is 30 seconds.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
interval: Sets the LLDP frame transmission interval in the range of 5 to 32768 seconds.
Examples
# Set the LLDP frame transmission interval to 20 seconds.
<Sysname> system-view
[Sysname] lldp timer tx-interval 20
lldp tlv-enable
Use lldp tlv-enable to configure the types of advertisable TLVs.
Use undo lldp tlv-enable to disable the advertising of specific types of TLVs.
Syntax
In Layer 2 Ethernet interface view:
· For nearest bridge agents:
lldp tlv-enable { basic-tlv { all | port-description | system-capability | system-description | system-name | management-address-tlv [ ip-address ] } | dot1-tlv { all | port-vlan-id | link-aggregation | dcbx | protocol-vlan-id [ vlan-id ] | vlan-name [ vlan-id ] | management-vid [ mvlan-id ] } | dot3-tlv { all | mac-physic | max-frame-size | power } | med-tlv { all | capability | inventory | network-policy | power-over-ethernet | location-id { civic-address device-type country-code { ca-type ca-value }&<1-10> | elin-address tel-number } } }
undo lldp tlv-enable { basic-tlv { all | port-description | system-capability | system-description | system-name | management-address-tlv [ ip-address ] } | dot1-tlv { all | port-vlan-id | link-aggregation | dcbx | protocol-vlan-id | vlan-name | management-vid } | dot3-tlv { all | mac-physic | max-frame-size | power } | med-tlv { all | capability | inventory | network-policy | power-over-ethernet | location-id } }
· For nearest non-TPMR bridge agents:
lldp agent nearest-nontpmr tlv-enable { basic-tlv { all | port-description | system-capability | system-description | system-name | management-address-tlv [ ip-address ] } | dot1-tlv { all | port-vlan-id | link-aggregation } }
undo lldp agent nearest-nontpmr tlv-enable { basic-tlv { all | port-description | system-capability | system-description | system-name | management-address-tlv [ ip-address ] } | dot1-tlv { all | port-vlan-id | link-aggregation } }
· For nearest customer bridge agents:
lldp agent nearest-customer tlv-enable { basic-tlv { all | port-description | system-capability | system-description | system-name | management-address-tlv [ ip-address ] } | dot1-tlv { all | port-vlan-id | link-aggregation } }
undo lldp agent nearest-customer tlv-enable { basic-tlv { all | port-description | system-capability | system-description | system-name | management-address-tlv [ ip-address ] } | dot1-tlv { all | port-vlan-id | link-aggregation } }
In Layer 3 Ethernet interface view:
· lldp tlv-enable { basic-tlv { all | port-description | system-capability | system-description | system-name | management-address-tlv [ ip-address ] } | dot1-tlv { all | link-aggregation } | dot3-tlv { all | mac-physic | max-frame-size | power } | med-tlv { all | capability | inventory | power-over-ethernet | location-id { civic-address device-type country-code { ca-type ca-value }&<1-10> | elin-address tel-number } } }
· lldp agent { nearest-nontpmr | nearest-customer } tlv-enable { basic-tlv { all | port-description | system-capability | system-description | system-name | management-address-tlv [ ip-address ] } | dot1-tlv { all | link-aggregation } }
· undo lldp tlv-enable { basic-tlv { all | port-description | system-capability | system-description | system-name | management-address-tlv [ ip-address ] } | dot1-tlv { all | link-aggregation } | dot3-tlv { all | mac-physic | max-frame-size | power } | med-tlv { all | capability | inventory | power-over-ethernet | location-id } }
· undo lldp agent { nearest-nontpmr | nearest-customer } tlv-enable { basic-tlv { all | port-description | system-capability | system-description | system-name | management-address-tlv [ ip-address ] } | dot1-tlv { all | link-aggregation } }
In Layer 2 aggregate interface view:
· lldp agent nearest-nontpmr tlv-enable { basic-tlv { all | management-address-tlv [ ip-address ] | port-description | system-capability | system-description | system-name } | dot1-tlv { all | port-vlan-id } }
· lldp agent nearest-customer tlv-enable { basic-tlv { all | management-address-tlv [ ip-address ] | port-description | system-capability | system-description | system-name } | dot1-tlv { all | port-vlan-id } }
· lldp tlv-enable dot1-tlv { protocol-vlan-id [ vlan-id ] | vlan-name [ vlan-id ] | management-vid [ mvlan-id ] }
· undo lldp agent nearest-nontpmr tlv-enable { basic-tlv { all | management-address-tlv [ ip-address ] | port-description | system-capability | system-description | system-name } | dot1-tlv { all | port-vlan-id } }
· undo lldp agent nearest-customer tlv-enable { basic-tlv { all | management-address-tlv [ ip-address ] | port-description | system-capability | system-description | system-name } | dot1-tlv { all | port-vlan-id } }
· undo lldp tlv-enable dot1-tlv { protocol-vlan-id | vlan-name | management-vid }
In Layer 3 aggregate interface view:
· lldp agent { nearest-customer | nearest-nontpmr } tlv-enable basic-tlv { all | management-address-tlv [ ip-address ] | port-description | system-capability | system-description | system-name }
· undo lldp agent { nearest-customer | nearest-nontpmr } tlv-enable basic-tlv { all | management-address-tlv [ ip-address ] | port-description | system-capability | system-description | system-name }
In IRF physical interface view:
lldp tlv-enable basic-tlv { port-description | system-capability | system-description | system-name }
undo lldp tlv-enable basic-tlv { port-description | system-capability | system-description | system-name }
Default
On Layer 2 Ethernet interfaces:
· Nearest bridge agents can advertise all types of LLDP TLVs except the following types:
¡ DCBX TLVs.
¡ Location identification TLVs.
¡ Port and protocol VLAN ID TLVs.
¡ VLAN name TLVs.
¡ Management VLAN ID TLVs.
· Nearest non-TPMR bridge agents advertise no TLVs.
· Nearest customer bridge agents can advertise basic TLVs and IEEE 802.1 organizationally specific TLVs.
On Layer 3 Ethernet interfaces:
· Nearest bridge agents can advertise all types of LLDP TLVs (only link aggregation TLV in 802.1 organizationally specific TLVs) except network policy TLVs.
· Nearest non-TPMR bridge agents advertise no TLVs.
· Nearest customer bridge agents can advertise basic TLVs and IEEE 802.1 organizationally specific TLVs (only link aggregation TLV).
On Layer 2 aggregate interfaces:
· Nearest bridge agents are not supported on Layer 2 aggregate interfaces.
· Nearest non-TPMR bridge agents advertise no TLVs.
· Nearest customer bridge agents can advertise basic TLVs and IEEE 802.1 organizationally specific TLVs (only port and protocol VLAN ID TLV, VLAN name TLV, and management VLAN ID TLV).
On Layer 3 aggregate interfaces:
· Nearest bridge agents are not supported on Layer 3 aggregate interfaces.
· Nearest non-TPMR bridge agents advertise no TLVs.
· Nearest customer bridge agents can advertise basic TLVs.
On IRF physical interfaces, an agent can advertise all supported TLVs.
Views
IRF physical interface view
Layer 2/Layer 3 Ethernet interface view
Layer 2/Layer 3 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
agent: Specifies an LLDP agent type. If you do not specify an agent type in Ethernet interface view, the command configures the types of advertisable TLVs for nearest bridge agents.
nearest-customer: Specifies nearest customer bridge agents.
nearest-nontpmr: Specifies nearest non-TPMR bridge agents.
all: Advertises all TLVs of a specific type.
· Enables the interface to advertise the following TLVs:
¡ All basic LLDP TLVs if the all keyword is specified for basic-tlv.
¡ All IEEE 802.1 organizationally specific LLDP TLVs if the all keyword is specified for dot1-tlv.
¡ All IEEE 802.3 organizationally specific LLDP TLVs if the all keyword is specified for dot3-tlv.
· Enables the interface to advertise all LLDP-MED TLVs except location identification TLVs if the all keyword is specified for med-tlv.
basic-tlv: Advertises basic LLDP TLVs.
management-address-tlv [ ip-address ]: Advertises management address TLVs. ip-address specifies the management address to be advertised. By default, the following rules apply:
· When you execute the lldp tlv-enable command:
¡ For a Layer 2 Ethernet or aggregate interface, the management address is the primary IP address of the VLAN interface meeting the following requirements:
- In up state.
- The corresponding VLAN ID is the lowest among the VLANs permitted on the port.
If none of the VLAN interfaces of the permitted VLANs is assigned an IP address or all VLAN interfaces are down, the MAC address of the port will be advertised.
¡ For a Layer 3 Ethernet or aggregate interface, the management address is its own IP address. If no IP address is configured for the Layer 3 Ethernet interface, the MAC address of the port will be advertised.
· When you execute the undo lldp tlv-enable command:
¡ If you do not specify ip-address, the port does not advertise any management address TLV.
¡ If you specify ip-address, the port advertise the default management address TLVs.
port-description: Advertises port description TLVs.
system-capability: Advertises system capabilities TLVs.
system-description: Advertises system description TLVs.
system-name: Advertises system name TLVs.
dot1-tlv: Advertises IEEE 802.1 organizationally specific LLDP TLVs.
dcbx: Advertises Data Center Bridging Exchange Protocol TLVs.
port-vlan-id: Advertises port VLAN ID TLVs.
protocol-vlan-id [ vlan-id ]: Advertises port and protocol VLAN ID TLVs. The vlan-id argument specifies a VLAN ID in the TLVs to be advertised. The VLAN ID is in the range of 1 to 4094, and the default is the lowest VLAN ID on the port.
vlan-name [ vlan-id ]: Advertises VLAN name TLVs. The vlan-id argument specifies a VLAN ID in the TLVs to be advertised. The VLAN ID is in the range of 1 to 4094, and the default is the lowest VLAN ID on the port.
management-vid [ mvlan-id ]: Advertises the management VLAN ID TLV. The mvlan-id argument specifies a management VLAN ID in the TLVs to be advertised. The management VLAN ID is in the range of 1 to 4094. If you do not specify a management VLAN ID, the value 0 is advertised, which means that the LLDP agent is not configured with a management VLAN ID.
dot3-tlv: Advertises IEEE 802.3 organizationally specific LLDP TLVs.
link-aggregation: Advertises link aggregation TLVs.
mac-physic: Advertises MAC/PHY configuration/status TLVs.
max-frame-size: Advertises maximum frame size TLVs.
power: Advertises power in MDI TLVs and power stateful control TLVs.
med-tlv: Advertises LLDP-MED TLVs.
capability: Advertises LLDP-MED capabilities TLVs.
inventory: Advertises the following TLVs: hardware revision, firmware revision, software revision, serial number, manufacturer name, model name, and asset ID.
location-id: Advertises location identification TLVs.
civic-address: Inserts the normal address information about the network device in location identification TLVs .
device-type: Sets a device type value in the range of 0 to 2:
· Value 0 specifies a DHCP server.
· Value 1 specifies a switch.
· Value 2 specifies an LLDP-MED endpoint.
country-code: Sets a country code, corresponding to ISO 3166.
{ ca-type ca-value }&<1-10>: Configures address information. ca-type represents the address information type in the range of 0 to 255, ca-value represents address information, a string of 1 to 250 characters, and &<1-10> indicates that you can specify up to 10 ca-type ca-value pairs.
elin-address: Inserts telephone numbers for emergencies in location identification TLVs.
tel-number: Sets the telephone number for emergencies, a string of 10 to 25 characters.
network-policy: Advertises network policy TLVs.
power-over-ethernet: Advertises extended power-via-MDI TLVs.
Usage guidelines
Nearest bridge agents are not supported on Layer 2 aggregate interfaces.
You can enable the device to advertise multiple types of TLVs by using this command without the all keyword specified.
If the MAC/PHY configuration/status TLV is not advertisable, none of the LLDP-MED TLVs will be advertised whether or not they are advertisable. If the LLDP-MED capabilities TLV is not advertisable, the other LLDP-MED TLVs will not be advertised whether or not they are advertisable.
The port and protocol VLAN ID TLV, VLAN name TLV, and management VLAN ID TLV in IEEE 802.1 organizationally specific LLDP TLVs can be configured only for nearest bridge agents. The configuration can be inherited by nearest customer bridge agents and nearest non-TPMR bridge agents.
Examples
# Enable the device to advertise link aggregation TLVs of the IEEE 802.1 organizationally specific TLVs for the nearest customer bridge agents on FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] lldp agent nearest-customer tlv-enable dot1-tlv link-aggregation
active region-configuration,114
bandwidth,164
bandwidth,79
bandwidth,1
bandwidth,48
broadcast-suppression,36
check region-configuration,114
dcbx version,191
default,48
default,1
default,79
default,164
description,165
description,80
description,2
description,49
display counters,3
display counters rate,4
display ethernet statistics,5
display interface,80
display interface,8
display interface inloopback,50
display interface loopback,52
display interface null,55
display interface range,60
display interface vlan-interface,166
display lacp system-id,84
display link-aggregation capability,85
display link-aggregation load-sharing mode,86
display link-aggregation load-sharing path,87
display link-aggregation member-port,89
display link-aggregation summary,91
display link-aggregation verbose,92
display lldp local-information,191
display lldp neighbor-information,196
display lldp statistics,201
display lldp status,203
display lldp tlv-config,206
display loopback-detection,158
display mac-address,64
display mac-address aging-time,65
display mac-address mac-learning,66
display mac-address statistics,67
display packet-drop,19
display port,178
display port-isolate group,111
display reserve-vlan-interface,169
display storm-constrain,37
display stp,115
display stp abnormal-port,121
display stp bpdu-statistics,121
display stp down-port,123
display stp history,124
display stp region-configuration,126
display stp root,127
display stp tc,127
display vlan,169
display vlan brief,171
display vlan mapping,186
duplex,19
eee enable,20
flow-control,21
flow-control receive enable,22
instance,129
interface,22
interface bridge-aggregation,95
interface loopback,57
interface null,57
interface range,60
interface range name,62
interface route-aggregation,96
interface vlan-interface,172
jumboframe enable,23
lacp edge-port,97
lacp period short,98
lacp system-priority,98
link-aggregation bfd ipv4,99
link-aggregation capability,100
link-aggregation global load-sharing mode,101
link-aggregation ignore vlan,102
link-aggregation lacp traffic-redirect-notification enable,102
link-aggregation load-sharing mode,103
link-aggregation load-sharing mode local-first,104
link-aggregation mode,105
link-aggregation port-priority,105
link-aggregation selected-port maximum,106
link-aggregation selected-port minimum,107
link-delay,24
lldp admin-status,209
lldp check-change-interval,210
lldp compliance admin-status cdp,211
lldp compliance cdp,212
lldp enable,213
lldp encapsulation snap,213
lldp fast-count,214
lldp global enable,215
lldp hold-multiplier,215
lldp management-address-format string,216
lldp max-credit,217
lldp mode,217
lldp notification med-topology-change enable,218
lldp notification remote-change enable,219
lldp timer fast-interval,220
lldp timer notification-interval,220
lldp timer reinit-delay,221
lldp timer tx-interval,221
lldp tlv-enable,222
loopback-detection action,159
loopback-detection enable,160
loopback-detection global action,160
loopback-detection global enable,161
loopback-detection interval-time,162
mac-address (interface view),68
mac-address (system view),69
mac-address information enable (interface view),75
mac-address information enable (system view),75
mac-address information interval,76
mac-address information mode,77
mac-address information queue-length,77
mac-address mac-learning enable,71
mac-address mac-learning ingress,72
mac-address mac-roaming enable,73
mac-address timer,73
mdix-mode,38
mtu,107
mtu,46
mtu,173
multicast-suppression,39
name,174
port,179
port access vlan,180
port auto-power-down,25
port hybrid pvid,181
port hybrid vlan,182
port link-aggregation group,108
port link-mode,26
port link-type,183
port trunk permit vlan,183
port trunk pvid,184
port up-mode,40
port-isolate enable,112
port-isolate group,112
priority-flow-control,27
priority-flow-control no-drop dot1p,28
region-name,130
reserve-vlan-interface,174
reset counters interface,109
reset counters interface,29
reset counters interface loopback,58
reset counters interface null,58
reset ethernet statistics,30
reset lacp statistics,109
reset packet-drop interface,31
reset stp,131
revision-level,131
service,176
shutdown,110
shutdown,177
shutdown,31
shutdown,59
speed,32
storm-constrain,41
storm-constrain control,42
storm-constrain enable log,43
storm-constrain enable trap,44
storm-constrain interval,44
stp bpdu-protection,132
stp bridge-diameter,132
stp compliance,133
stp config-digest-snooping,134
stp cost,135
stp edged-port,136
stp enable,137
stp global config-digest-snooping,138
stp global enable,138
stp global mcheck,139
stp loop-protection,140
stp max-hops,140
stp mcheck,141
stp mode,142
stp no-agreement-check,143
stp pathcost-standard,143
stp point-to-point,144
stp port priority,145
stp port-log,146
stp priority,147
stp region-configuration,147
stp role-restriction,148
stp root primary,148
stp root secondary,149
stp root-protection,150
stp tc-protection,151
stp tc-protection threshold,151
stp tc-restriction,152
stp timer forward-delay,153
stp timer hello,153
stp timer max-age,154
stp timer-factor,155
stp transmit-limit,156
unicast-suppression,45
using fortygige,33
using tengige,34
virtual-cable-test,35
vlan,177
vlan mapping,187
vlan mapping double-tagged,188
vlan mapping untagged,189
vlan-mapping modulo,157