03-Layer 2—LAN Switching Command Reference

HomeSupportReference GuidesCommand ReferencesH3C S12500-X & S12500X-AF Switch Series Command References-Release 113x-6W10103-Layer 2—LAN Switching Command Reference
01-Text
Title Size Download
01-Text 1.07 MB

Contents

Ethernet interface commands· 1

Common Ethernet interface commands· 1

bandwidth· 1

default 1

description· 2

display counters· 3

display counters rate· 4

display ethernet statistics· 5

display interface· 8

display packet-drop· 19

duplex· 19

eee enable· 20

flow-control 21

flow-control receive enable· 22

interface· 22

jumboframe enable· 23

link-delay· 24

port auto-power-down· 25

port link-mode· 26

priority-flow-control 27

priority-flow-control no-drop dot1p· 28

reset counters interface· 29

reset ethernet statistics· 30

reset packet-drop interface· 31

shutdown· 31

speed· 32

using fortygige· 33

using tengige· 34

virtual-cable-test 35

Layer 2 Ethernet interface commands· 36

broadcast-suppression· 36

display storm-constrain· 37

mdix-mode· 38

multicast-suppression· 39

port up-mode· 40

storm-constrain· 41

storm-constrain control 42

storm-constrain enable log· 43

storm-constrain enable trap· 44

storm-constrain interval 44

unicast-suppression· 45

Layer 3 Ethernet interface or subinterface commands· 46

mtu· 46

Loopback, null, and inloopback interface commands· 48

bandwidth· 48

default 48

description· 49

display interface inloopback· 50

display interface loopback· 52

display interface null 55

interface loopback· 57

interface null 57

reset counters interface loopback· 58

reset counters interface null 58

shutdown· 59

Bulk interface configuration commands· 60

display interface range· 60

interface range· 60

interface range name· 62

MAC address table commands· 64

display mac-address· 64

display mac-address aging-time· 65

display mac-address mac-learning· 66

display mac-address statistics· 67

mac-address (interface view) 68

mac-address (system view) 69

mac-address mac-learning enable· 71

mac-address mac-learning ingress· 72

mac-address mac-roaming enable· 73

mac-address timer 73

MAC Information commands· 75

mac-address information enable (interface view) 75

mac-address information enable (system view) 75

mac-address information interval 76

mac-address information mode· 77

mac-address information queue-length· 77

Ethernet link aggregation commands· 79

bandwidth· 79

default 79

description· 80

display interface· 80

display lacp system-id· 84

display link-aggregation capability· 85

display link-aggregation load-sharing mode· 86

display link-aggregation load-sharing path· 87

display link-aggregation member-port 89

display link-aggregation summary· 91

display link-aggregation verbose· 92

interface bridge-aggregation· 95

interface route-aggregation· 96

lacp edge-port 97

lacp period short 98

lacp system-priority· 98

link-aggregation bfd ipv4· 99

link-aggregation capability· 100

link-aggregation global load-sharing mode· 101

link-aggregation ignore vlan· 102

link-aggregation lacp traffic-redirect-notification enable· 102

link-aggregation load-sharing mode· 103

link-aggregation load-sharing mode local-first 104

link-aggregation mode· 105

link-aggregation port-priority· 105

link-aggregation selected-port maximum·· 106

link-aggregation selected-port minimum·· 107

mtu· 107

port link-aggregation group· 108

reset counters interface· 109

reset lacp statistics· 109

shutdown· 110

Port isolation commands· 111

display port-isolate group· 111

port-isolate enable· 112

port-isolate group· 112

Spanning tree commands· 114

active region-configuration· 114

check region-configuration· 114

display stp· 115

display stp abnormal-port 121

display stp bpdu-statistics· 121

display stp down-port 123

display stp history· 124

display stp region-configuration· 126

display stp root 127

display stp tc· 127

instance· 129

region-name· 130

reset stp· 131

revision-level 131

stp bpdu-protection· 132

stp bridge-diameter 132

stp compliance· 133

stp config-digest-snooping· 134

stp cost 135

stp edged-port 136

stp enable· 137

stp global config-digest-snooping· 138

stp global enable· 138

stp global mcheck· 139

stp loop-protection· 140

stp max-hops· 140

stp mcheck· 141

stp mode· 142

stp no-agreement-check· 143

stp pathcost-standard· 143

stp point-to-point 144

stp port priority· 145

stp port-log· 146

stp priority· 147

stp region-configuration· 147

stp role-restriction· 148

stp root primary· 148

stp root secondary· 149

stp root-protection· 150

stp tc-protection· 151

stp tc-protection threshold· 151

stp tc-restriction· 152

stp timer forward-delay· 153

stp timer hello· 153

stp timer max-age· 154

stp timer-factor 155

stp transmit-limit 156

vlan-mapping modulo· 157

Loop detection commands· 158

display loopback-detection· 158

loopback-detection action· 159

loopback-detection enable· 160

loopback-detection global action· 160

loopback-detection global enable· 161

loopback-detection interval-time· 162

VLAN commands· 164

Basic VLAN commands· 164

bandwidth· 164

default 164

description· 165

display interface vlan-interface· 166

display reserve-vlan-interface· 169

display vlan· 169

display vlan brief 171

interface vlan-interface· 172

mtu· 173

name· 174

reserve-vlan-interface· 174

service· 176

shutdown· 177

vlan· 177

Port-based VLAN commands· 178

display port 178

port 179

port access vlan· 180

port hybrid pvid· 181

port hybrid vlan· 182

port link-type· 183

port trunk permit vlan· 183

port trunk pvid· 184

VLAN mapping commands· 186

display vlan mapping· 186

vlan mapping· 187

vlan mapping double-tagged· 188

vlan mapping untagged· 189

LLDP commands· 191

dcbx version· 191

display lldp local-information· 191

display lldp neighbor-information· 196

display lldp statistics· 201

display lldp status· 203

display lldp tlv-config· 206

lldp admin-status· 209

lldp check-change-interval 210

lldp compliance admin-status cdp· 211

lldp compliance cdp· 212

lldp enable· 213

lldp encapsulation snap· 213

lldp fast-count 214

lldp global enable· 215

lldp hold-multiplier 215

lldp management-address-format string· 216

lldp max-credit 217

lldp mode· 217

lldp notification med-topology-change enable· 218

lldp notification remote-change enable· 219

lldp timer fast-interval 220

lldp timer notification-interval 220

lldp timer reinit-delay· 221

lldp timer tx-interval 221

lldp tlv-enable· 222

Index· 227

 


Ethernet interface commands

Common Ethernet interface commands

bandwidth

Use bandwidth to configure the expected bandwidth of an interface.

Use undo bandwidth to restore the default.

Syntax

bandwidth bandwidth-value

undo bandwidth

Default

The expected bandwidth (in kbps) is the interface baud rate divided by 1000.

Views

Ethernet interface view, Layer 3 Ethernet subinterface view

Predefined user roles

network-admin

mdc-admin

Parameters

bandwidth-value: Specifies the expected bandwidth in the range of 1 to 400000000 kbps.

Usage guidelines

The expected bandwidth of an interface affects the following items:

·     Bandwidth assignment with CBQ. For more information, see ACL and QoS Configuration Guide.

·     Link costs in OSPF and IS-IS. For more information, see Layer 3—IP Routing Configuration Guide.

Examples

# Set the expected bandwidth of interface FortyGigE 1/0/1 to 1000 kbps.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] bandwidth 1000

# Set the expected bandwidth of subinterface FortyGigE 1/0/1.1 to 1000 kbps.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1.1

[Sysname-FortyGigE1/0/1.1] bandwidth 1000

Related commands

speed

default

Use default to restore the default settings for an Ethernet interface.

Syntax

default

Views

Ethernet interface view, Layer 3 Ethernet subinterface view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

CAUTION

CAUTION:

The default command might interrupt ongoing network services. Make sure you are fully aware of the impacts of this command when you use it in a live network.

 

This command might fail to restore the default settings for some commands for reasons such as command dependencies or system restrictions. Use the display this command in interface view to identify these commands, and then use their undo forms or follow the command reference to individually restore their default settings. If your restoration attempt still fails, follow the error message instructions to resolve the problem.

Examples

# Restore the default settings for interface FortyGigE 1/0/1.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] default

# Restore the default settings for subinterface FortyGigE 1/0/1.1.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1.1

[Sysname-FortyGigE1/0/1.1] default

description

Use description to change the description of an interface.

Use undo description to restore the default.

Syntax

description text

undo description

Default

The description of an interface is the interface name plus Interface (for example, FortyGigE1/0/1 Interface).

Views

Ethernet interface view, Layer 3 Ethernet subinterface view

Predefined user roles

network-admin

mdc-admin

Parameters

text: Specifies the interface description, a case-sensitive string of 1 to 255 characters.

Examples

# Change the description of interface FortyGigE 1/0/1 to lanswitch-interface.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] description lanswitch-interface

# Change the description of subinterface FortyGigE 1/0/1.1 to l3-subinterface1/0/1.1.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1.1

[Sysname-FortyGigE1/0/1.1] description l3-subinterface1/0/1.1

display counters

Use display counters to display interface traffic statistics.

Syntax

display counters { inbound | outbound } interface [ interface-type [ interface-number ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

inbound: Displays inbound traffic statistics.

outbound: Displays outbound traffic statistics.

interface-type: Specifies an interface type.

interface-number: Specifies an interface number.

Usage guidelines

This command displays traffic statistics within a statistics polling interval specified by the flow-interval command.

To clear the Ethernet interface traffic statistics, use the reset counters interface command. For more information, see "reset counters interface."

If no interface type is specified, this command displays traffic statistics for all interfaces that have traffic counters.

If an interface type is specified but no interface number is specified, this command displays traffic statistics for all interfaces of the specified type.

If an interface type and an interface number are specified, this command displays traffic statistics of the specified interface.

Examples

# Display inbound traffic statistics for all FortyGigE interfaces.

<Sysname> display counters inbound interface fortygige

Interface            Total (pkts)    Broadcast (pkts)    Multicast (pkts)  Err (pkts)

FGE1/0/1                        100                100                  0              0

FGE1/0/2                          0                  0                  0              0

FGE1/0/3                   Overflow           Overflow           Overflow       Overflow

FGE1/0/4                          0                  0                  0              0

 

 Overflow: More than 14 digits (7 digits for column "Err").

       --: Not supported.

Table 1 Command output

Field

Description

Interface

Abbreviated interface name.

Total (pkts)

Total number of packets received or sent through the interface.

Broadcast (pkts)

Total number of broadcast packets received or sent through the interface.

Multicast (pkts)

Total number of multicast packets received or sent through the interface.

Err (pkts)

Total number of error packets received or sent through the interface.

Overflow: More than 14 digits (7 digits for column "Err")

The command displays Overflow if any of the following cases applies:

·     The data length of an Err field value is greater than 7 decimal digits.

·     The data length of a non-Err field value is greater than 14 decimal digits.

--: Not supported

The statistical item is not supported.

 

Related commands

·     flow-interval

·     reset counters interface

display counters rate

Use display counters rate to display traffic rate statistics of interfaces in up state over the last statistics polling interval.

Syntax

display counters rate { inbound | outbound } interface [ interface-type [ interface-number ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

inbound: Displays inbound traffic rate statistics.

outbound: Displays outbound traffic rate statistics.

interface-type: Specifies an interface type.

interface-number: Specifies an interface number.

Usage guidelines

The statistics cover only interfaces in up state.

If an interface type is specified, the command displays traffic rate statistics for all up interfaces of the specified type over the last statistics polling interval.

If no interface type is specified, the command displays traffic rate statistics for all up interfaces that have traffic counters over the last statistics polling interval.

If an interface which is always down over the last statistics polling interval is specified, the system prompts that the interface does not support the command.

You can use the flow-interval command to set the statistics polling interval.

Examples

# Display the inbound traffic rate statistics for all FortyGigE interfaces.

<Sysname> display counters rate inbound interface fortygige

Interface                    Total (pps)       Broadcast (pps)       Multicast (pps)

FGE1/0/1                             200                   --                   --

FGE1/0/2                             300                   --                   --

FGE1/0/3                             300                   --                   --

 

 Overflow: More than 14 digits.

       --: Not supported.

Table 2 Command output

Field

Description

Interface

Abbreviated interface name.

Total (pkts/sec)

Average rate (in pps) of receiving or sending packets during the statistics polling interval.

Broadcast (pkts/sec)

Average rate (in pps) of receiving or sending broadcast packets during the statistics polling interval.

Multicast (pkts/sec)

Average rate (in pps) of receiving or sending multicast packets during the statistics polling interval.

Overflow: more than 14 decimal digits

The command displays Overflow if the data length of a statistical item is greater than 14 decimal digits.

--: not supported

The statistical item is not supported.

 

Related commands

·     flow-interval

·     reset counters interface

display ethernet statistics

Use display ethernet statistics to display the Ethernet module statistics.

Syntax

In standalone mode:

display ethernet statistics slot slot-number

In IRF mode:

display ethernet statistics chassis chassis-number slot slot-number

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

slot slot-number: Displays the Ethernet module statistics on the specified card. The slot-number argument represents the number of the slot that houses the card. (In standalone mode.)

chassis chassis-number slot slot-number: Displays the Ethernet module statistics on the specified card of the specified IRF member device. The chassis-number argument represents the ID of the IRF member device. The slot-number argument represents the number of the slot that houses the card. (In IRF mode.)

Examples

# (In standalone mode.) Display the Ethernet module statistics on slot 2.

<Sysname> display ethernet statistics slot 2

ETH receive packet statistics:

    Totalnum        : 10447          ETHIINum     : 4459

    SNAPNum         : 0              RAWNum       : 0

    LLCNum          : 0              UnknownNum   : 0

    ForwardNum      : 4459           ARP          : 0

    MPLS            : 0              ISIS         : 0

    ISIS2           : 0              IP           : 0

    IPV6            : 0

ETH receive error statistics:

    NullPoint       : 0              ErrIfindex   : 0

    ErrIfcb         : 0              IfShut       : 0

    ErrAnalyse      : 5988           ErrSrcMAC    : 5988

    ErrHdrLen       : 0

 

ETH send packet statistics:

    L3OutNum        : 211            VLANOutNum   : 0

    FastOutNum      : 155            L2OutNum     : 0

ETH send error statistics:

    MbufRelayNum    : 0              NullMbuf     : 0

    ErrAdjFwd       : 0              ErrPrepend   : 0

    ErrHdrLen       : 0              ErrPad       : 0

    ErrQoSTrs       : 0              ErrVLANTrs   : 0

    ErrEncap        : 0              ErrTagVLAN   : 0

    IfShut          : 0              IfErr        : 0

# (In IRF mode.) Display the Ethernet module statistics on the card in slot 1 of IRF member device 1.

<Sysname> display ethernet statistics chassis 1 slot 1

ETH receive packet statistics:

    Totalnum        : 10447          ETHIINum     : 4459

    SNAPNum         : 0              RAWNum       : 0

    LLCNum          : 0              UnknownNum   : 0

    ForwardNum      : 4459           ARP          : 0

    MPLS            : 0              ISIS         : 0

    ISIS2           : 0              IP           : 0

    IPV6            : 0

ETH receive error statistics:

    NullPoint       : 0              ErrIfindex   : 0

    ErrIfcb         : 0              IfShut       : 0

    ErrAnalyse      : 5988           ErrSrcMAC    : 5988

    ErrHdrLen       : 0

 

ETH send packet statistics:

    L3OutNum        : 211            VLANOutNum   : 0

    FastOutNum      : 155            L2OutNum     : 0

ETH send error statistics:

    MbufRelayNum    : 0              NullMbuf     : 0

    ErrAdjFwd       : 0              ErrPrepend   : 0

    ErrHdrLen       : 0              ErrPad       : 0

    ErrQoSTrs       : 0              ErrVLANTrs   : 0

    ErrEncap        : 0              ErrTagVLAN   : 0

    IfShut          : 0              IfErr        : 0

Table 3 Output description

Field

Description

ETH receive packet statistics

Statistics about the Ethernet packets received on the Ethernet module.

Totalnum

Total number of received packets:

·     ETHIINum—Number of packets encapsulated by using Ethernet-II.

·     SNAPNum—Number of packets encapsulated by using SNAP.

·     RAWNum—Number of packets encapsulated by using RAW.

·     ISIS—Number of packets encapsulated by using IS-IS.

·     LLCNum—Number of packets encapsulated by using LLC.

·     UnknownNum—Number of packets encapsulated by using unknown methods.

·     ForwardNum—Number of packets forwarded at Layer 2 or sent to the CPU.

·     ARP—Number of ARP packets.

·     MPLS—Number of MPLS packets.

·     ISIS—Number of IS-IS packets.

·     ISIS2—Number of large 802.3/802.2 frames encapsulated by using IS-IS.

·     IP—Number of IP packets.

ETH receive error statistics

Statistics about the error Ethernet packets in the outbound direction on the Ethernet module. Errors might be included in packets or occur during the receiving process. The items include:

·     NullPoint—Number of packets that include null pointers.

·     ErrIfindex—Number of packets that include incorrect interface indexes.

·     ErrIfcb—Number of packets that include incorrect interface control blocks.

·     IfShut—Number of packets that are being received when the interface is shut down.

·     ErrAnalyse—Number of packets that include packet parsing errors.

·     ErrSrcMAC—Number of packets that include incorrect source MAC addresses.

·     ErrHdrLen—Number of packets that include header length errors.

ETH send packet statistics

Statistics about the Ethernet packets sent by the Ethernet module:

·     L3OutNum—Number of packets sent out of Layer 3 Ethernet interfaces.

·     VLANOutNum—Number of packets sent out of VLAN interfaces.

·     FastOutNum—Number of packets fast forwarded.

·     L2OutNum—Number of packets sent out of Layer 2 Ethernet interfaces.

·     MbufRelayNum—Number of packets transparently sent.

ETH send error statistics

Statistics about the error Ethernet packets in the outbound direction on the Ethernet module:

·     NullMbuf—Number of packets with null pointers.

·     ErrAdjFwd—Number of packets with adjacency table errors.

·     ErrPrepend—Number of packets with extension errors.

·     ErrHdrLen—Number of packets with header length errors.

·     ErrPad—Number of packets with padding errors.

·     ErrQoSTrs—Number of packets that failed to be sent by QoS.

·     ErrVLANTrs—Number of packets that failed to be sent in VLANs.

·     ErrEncap—Number of packets that failed to be sent due to link header encapsulation failures.

·     ErrTagVLAN—Number of packets that failed to be sent due to VLAN tag encapsulation failures.

·     IfShut—Number of packets that are being sent when the interface is shut down.

·     IfErr—Number of packets with incorrect outgoing interfaces.

 

display interface

Use display interface to display Ethernet interface information.

Syntax

display interface [ interface-type ] [ brief [ down ] ]

display interface [ interface-type [ interface-number | interface-number.subnumber ] ] [ brief [ description ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

interface-type: Specifies an interface type.

interface-number: Specifies an interface number.

interface-number.subnumber: Specifies a subinterface number. The interface-number argument represents the number of the interface. The subnumber argument represents the number of the subinterface, in the range of 1 to 4094.

brief: Displays brief interface information. If you do not specify this keyword, the command displays detailed interface information.

down: Displays information about interfaces in the down state and the causes. If you do not specify this keyword, this command displays information about interfaces in all states.

description: Displays complete interface descriptions. If you do not specify this keyword, the command displays only the first 27 characters of each interface description.

Usage guidelines

If no interface type is specified, this command displays information about all interfaces.

If an interface type is specified but no interface number is specified, this command displays information about all interfaces of that type.

If both the interface type and interface number are specified, this command displays information about the specified interface.

Examples

# Display information about Layer 3 interface FortyGigE 1/0/1.

<Sysname> display interface fortygige 1/0/1

FortyGigE1/0/1

Current state: DOWN

Line protocol state: DOWN

Description: FortyGigE1/0/1 Interface

Bandwidth: 40000000kbps

Maximum transmission unit: 1500

Internet protocol processing: Disabled

IP packet frame type: Ethernet II, hardware address: 000c-2963-b75d

IPv6 packet frame type: Ethernet II, hardware address: 000c-2963-b75d

Media type is not sure,Port hardware type is No connector

Port priority: 0

Unknown-speed mode, unknown-duplex mode

Link speed type is autonegotiation, link duplex type is autonegotiation

Flow-control is not enabled

Maximum frame length is 12288

Last link flapping: Never

Last clearing of counters: Never

Peak input rate: 0 bytes/sec, at 2015-01-05 13:51:00

Peak output rate: 0 bytes/sec, at 2015-01-05 13:51:00

Last 300 second input:  0 packets/sec 0 bytes/sec

Last 300 second output:  0 packets/sec 0 bytes/sec

Input (total):  0 packets, 0 bytes

          0 unicasts, 0 broadcasts,  0 multicasts, 0 pauses

Input (normal):  0 packets, - bytes

          0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses

Input:  0 input errors, 0 runts, 0 giants, 0 throttles

          0 CRC,  0 frame, - overruns, 0 aborts

          - ignored, - parity errors

Output (total):  0 packets, 0 bytes

          0 unicasts, 0 broadcasts,  0 multicasts, 0 pauses

Output (normal):  0 packets, - bytes

          0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses

Output:  0 output errors,  - underruns, - buffer failures

          0 aborts,  0 deferred, 0 collisions, 0 late collisions

         0 lost carrier, - no carrier

Table 4 Command output

Field

Description

Current state

State of the interface:

·     Administratively DOWN—The Ethernet interface was shut down with the shutdown command. The interface is administratively down.

·     DOWN—The Ethernet interface is administratively up but physically down (possibly because no physical link is present or the link has failed).

·     UP—The Ethernet interface is both administratively and physically up.

Line protocol state

Link layer state of the interface. The state is determined through parameter negotiation on the link layer.

·     UP—The interface is up at the data link layer.

·     UP (spoofing)—The link layer protocol of an interface is UP, but its link is an on-demand link or not present at all. This attribute is typical of Null interfaces and loopback interfaces.

·     DOWN—The interface is down at the data link layer.

·     DOWN (DLDP DOWN)—The link layer protocol of the interface is down because DLDP detected that the link was unidirectional.

·     DOWN (LAGG DOWN)—The link layer protocol of the interface is down because the aggregate interface does not have Selected ports.

·     DOWN (OAM DOWN)—The link layer of the interface is down because OAM detected remote link failures.

·     DOWN (DLDP and LAGG DOWN)—The link layer of the interface is shut down by DLDP and LAGG.

·     DOWN (DLDP and OAM DOWN)—The link layer of the interface is shut down by DLDP and OAM.

·     DOWN (OAM and LAGG DOWN)—The link layer of the interface is shut down by OAM and LAGG.

·     DOWN (DLDP, OAM and LAGG DOWN)—The link layer of the interface is shut down by DLDP, OAM, and LAGG.

Hold timer is

Link-up or link-down event suppression interval.

Bandwidth

Expected bandwidth of the interface.

Internet protocol processing: Disabled

Indicates that the interface cannot process IP packets.

Last link flapping

Duration since the most recent interface state change. Never indicates the interface state has never changed.

Last clearing of counters

Time when the reset counters interface command was last used to clear the interface statistics. Never indicates the reset counters interface command has never been used on the interface since the device's startup.

Peak input rate

Peak rate of inbound traffic in Bps, and the time when the peak inbound traffic rate occurred.

Peak output rate

Peak rate of outbound traffic in Bps, and the time when the peak outbound traffic rate occurred.

Last 300 second input

Average input rate over the last 300 seconds in Bps, bps, and pps.

Last 300 second output

Average output rate over the last 300 seconds in Bps, bps, and pps.

 

# Display detailed information about Layer 2 interface FortyGigE 1/0/1.

<Sysname> display interface fortygige 1/0/1

FortyGigE1/0/1

Current state: DOWN

Line protocol state: DOWN

IP packet frame type: Ethernet II, hardware address: 000c-2963-b767

Description: FortyGigE1/0/1 Interface

Bandwidth: 40000000kbps

Loopback is not set

Media type is not sure,port hardware type is No connector

Unknown-speed mode, unknown-duplex mode

Link speed type is autonegotiation, link duplex type is autonegotiation

Maximum frame length is 12288

Allow jumbo frame to pass

Broadcast max-ratio: 100%

Multicast max-ratio: 100%

Unicast max-ratio: 100%

PVID: 1

MDI type: automdix

Port link-type: access

 Tagged VLANs:   none

 UnTagged VLANs: 1

Port priority: 2

Last link flapping: Never

Last clearing of counters: Never

 Peak input rate: 0 bytes/sec, at 2015-01-05 13:51:00

 Peak output rate: 0 bytes/sec, at 2015-01-05 13:51:00

 Last 300 second input:  0 packets/sec 0 bytes/sec 0%

 Last 300 second output:  0 packets/sec 0 bytes/sec 0%

 Input (total):  0 packets, 0 bytes

          0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses

 Input (normal):  0 packets, - bytes

          0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses

 Input:  0 input errors, 0 runts, 0 giants, 0 throttles

          0 CRC, 0 frame, - overruns, 0 aborts

          - ignored, - parity errors

 Output (total): 0 packets, 0 bytes

          0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses

 Output (normal): 0 packets, - bytes

          0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses

 Output: 0 output errors, - underruns, - buffer failures

          0 aborts, 0 deferred, 0 collisions, 0 late collisions

          0 lost carrier, - no carrier

Table 5 Command output

Field

Description

Current state

State of the Ethernet interface:

·     Administratively DOWN—The Ethernet interface was shut down with the shutdown command. The interface is administratively down.

·     DOWN—The Ethernet interface is administratively up but physically down (possibly because no physical link is present or the link has failed).

·     UP—The Ethernet interface is both administratively and physically up.

Line protocol current state

Link layer state of the interface. The state is determined through parameter negotiation on the link layer.

·     UP—The interface is up at the data link layer.

·     UP (spoofing)The link layer protocol of an interface is UP, but its link is an on-demand link or not present at all. This attribute is typical of Null interfaces and loopback interfaces.

·     DOWN—The interface is down at the data link layer.

·     DOWN (DLDP DOWN)—The link layer protocol of the interface is down because DLDP detects that the link is unidirectional.

·     DOWN (LAGG DOWN)—The link layer protocol of the interface is down because the aggregate interface does not have Selected ports.

·     DOWN (OAM DOWN)—The link layer of the interface is down because OAM detects remote link failures.

·     DOWN (DLDP and LAGG DOWN)—The link layer of the interface is shut down by DLDP and LAGG.

·     DOWN (DLDP and OAM DOWN)—The link layer of the interface is shut down by DLDP and OAM.

·     DOWN (OAM and LAGG DOWN)—The link layer of the interface is shut down by OAM and LAGG.

·     DOWN (DLDP, OAM and LAGG DOWN)—The link layer of the interface is shut down by DLDP, OAM, and LAGG.

IP packet frame type

Ethernet framing format. PKTFMT_ETHNT_2 indicates that the frames are encapsulated in Ethernet II framing format.

hardware address

MAC address of the interface.

Bandwidth

Expected bandwidth of the interface.

Loopback is set internal

An internal loopback test is running on the Ethernet interface.

Loopback is set external

An external loopback test is running on the Ethernet interface. .

Loopback is not set

No loopback test is running on the Ethernet interface.

10Mbps-speed mode

The interface is operating at 10 Mbps.

100Mbps-speed mode

The interface is operating at 100 Mbps.

1000Mbps-speed mode

The interface is operating at 1000 Mbps.

10Gbps-speed mode

The interface is operating at 10 Gbps.

40Gbps-speed mode

The interface is operating at 40 Gbps.

Unknown-speed mode

The speed of the interface is unknown because the speed negotiation fails or the interface is physically disconnected.

full-duplex mode

The interface is operating in full duplex mode.

unknown-duplex mode

The duplex mode of the interface is unknown because the duplex mode negotiation fails or the interface is physically disconnected.

Link speed type is autonegotiation

The interface is configured with the speed auto command.

Link speed type is force link

The interface is configured with a specific speed, for example, 10 Mbps or 100 Mbps, by using the speed command.

link duplex type is autonegotiation

The interface is configured with the duplex auto command.

link duplex type is force link

The interface is configured with a specific duplex mode, for example, half or full, by using the duplex command.

Maximum frame length

Maximum Ethernet frame length allowed on the interface.

Allow jumbo frames to pass

The interface allows jumbo frames to pass through.

Broadcast max-

Broadcast storm suppression threshold in ratio, pps, or kbps. The unit of the threshold depends on your configuration.

Multicast max-

Multicast storm suppression threshold in ratio, pps, or kbps. The unit of the threshold depends on your configuration.

Unicast max-

Unicast storm suppression threshold in ratio, pps, or kbps. The unit of the threshold depends on your configuration.

PVID

PVID of the Ethernet interface.

MDI type

Cable type (depending on your configuration):

·     automdix.

·     mdi.

·     mdix.

Port link-type

Link type of the interface (depending on your configuration):

·     access.

·     trunk.

·     hybrid.

Tagged VLANs

VLANs for which the interface sends packets without removing VLAN tags.

Untagged VLANs

VLANs for which the interface sends packets after removing VLAN tags.

Port priority

Priority of the interface.

Last link flapping

Duration since the most recent interface state change. Never indicates the interface state has never changed.

Last clearing of counters:  Never

Time when the reset counters interface command was last used to clear statistics on the interface. Never indicates that the reset counters interface command was never used since the device was started.

Peak input rate

Peak rate of inbound traffic in Bps, and the time when the peak inbound traffic rate occurred.

Peak output rate

Peak rate of outbound traffic in Bps, and the time when the peak outbound traffic rate occurred.

Last 300 second input

Average rate of inbound traffic in the last 300 seconds, in pps and Bps, and the ratio of the actual rate to the maximum interface rate.

A hyphen (-) indicates that the statistical item is not supported.

Last 300 second output:

Average rate of outbound traffic in the last 300 seconds, in pps and Bps, and the ratio of the actual rate to the maximum interface rate.

A hyphen (-) indicates that the statistical item is not supported.

Input(total):  0 packets, 0 bytes

          0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses

Inbound traffic statistics (in packets and bytes) for the interface. All inbound normal and abnormal packets and normal pause frames were counted.

Number of inbound unicast packets, number of inbound broadcasts, number of inbound multicasts, and number of inbound pause frames.

A hyphen (-) indicates that the statistical item is not supported.

Input(normal):  0 packets, - bytes

          0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses

Inbound normal traffic and pause frame statistics (in packets and bytes) for the interface.

Number of inbound normal unicast packets, number of inbound normal broadcasts, number of inbound normal multicasts, and number of inbound normal pause frames.

A hyphen (-) indicates that the statistical item is not supported.

input errors

Statistics of incoming error packets.

runts

Number of inbound frames shorter than 64 bytes, in correct format, and containing valid CRCs.

giants

Number of inbound frames larger than the maximum frame length supported on the interface.

·     For an Ethernet interface that does not permit jumbo frames, giants refer to frames larger than 1518 bytes (without VLAN tags) or 1522 bytes (with VLAN tags).

·     For an Ethernet interface that permits jumbo frames, giants refer to frames larger than the maximum length of Ethernet frames that are allowed to pass through, which is configured when you configure jumbo frame support on the interface.

throttles

Number of times the port is shut down due to buffer or CPU overload.

CRC

Total number of inbound frames that had a normal length, but contained CRC errors.

frame

Total number of inbound frames that contained CRC errors and a non-integer number of bytes.

overruns

Number of packets dropped because the input rate of the port exceeded the queuing capability.

aborts

Total number of illegal inbound packets:

·     Fragment frames—CRC error frames shorter than 64 bytes. The length can be an integral or non-integral value.

·     Jabber frames—CRC error frames greater than the maximum frame length supported on the Ethernet interface (with an integral or non-integral length).

¡     For an Ethernet interface that does not permit jumbo frames, jabber frames refer to CRC error frames greater than 1518 bytes (without VLAN tags) or 1522 bytes (with VLAN tags).

¡     For an Ethernet interface that permits jumbo frames, jabber frames refer to CRC error frames greater than the maximum length of Ethernet frames that are allowed to pass through the interface. The maximum length is configured when you configure jumbo frame support on the interface.

·     Symbol error frames—Frames that contained at least one undefined symbol.

·     Unknown operation code frames—Non-pause MAC control frames.

·     Length error frames—Frames whose 802.3 length fields did not match the actual frame length (46 to 1500 bytes).

ignored

Number of inbound frames dropped because the receiving buffer of the port ran low.

parity errors

Total number of frames with parity errors.

Output(total): 0 packets, 0 bytes

          0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses

Outbound traffic statistics (in packets and bytes) for the interface. All outbound normal and abnormal packets and normal pause frames were counted.

Number of outbound unicast packets, number of outbound broadcasts, number of outbound multicasts, and number of outbound pause frames.

A hyphen (-) indicates that the statistical item is not supported.

Output(normal): 0 packets, - bytes

          0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses

Outbound normal traffic and pause frame statistics (in packets and bytes) for the interface.

Number of outbound normal unicast packets, number of outbound normal broadcasts, number of outbound normal multicasts, and number of outbound normal pause frames.

A hyphen (-) indicates that the statistical item is not supported.

output errors

Number of outbound packets with errors.

underruns

Number of packets dropped because the output rate of the interface exceeded the output queuing capability. This is a low-probability hardware anomaly.

buffer failures

Number of packets dropped because the transmit buffer of the interface ran low.

aborts

Number of packets that failed to be transmitted, for example, because of Ethernet collisions.

deferred

Number of frames that the interface deferred to transmit because of detected collisions.

collisions

Number of frames that the interface stopped transmitting because Ethernet collisions were detected during transmission.

late collisions

Number of frames that the interface deferred to transmit after transmitting their first 512 bits because of detected collisions.

lost carrier

Number of carrier losses during transmission. This counter increases by one when a carrier is lost, and applies to serial WAN interfaces.

no carrier

Number of times that the port failed to detect the carrier when attempting to send frames. This counter increases by one when a port failed to detect the carrier, and applies to serial WAN interfaces.

 

# Display brief information about all interfaces.

<Sysname> display interface brief

Brief information on interfaces in route mode:

Link: ADM - administratively down; Stby - standby

Protocol: (s) – spoofing

Interface            Link Protocol Primary IP         Description

FGE1/0/11            DOWN DOWN     --

InLoop0              UP   UP(s)    --

M-GE0/0/0            UP   UP       192.168.0.98

NULL0                UP   UP(s)    --

REG0                 DOWN --       --

 

Brief information on interfaces in bridge mode:

Link: ADM - administratively down; Stby - standby

Speed: (a) - auto 

Duplex: (a)/A - auto; H - half; F - full

Type: A - access; T - trunk; H - hybrid

Interface            Link Speed   Duplex Type PVID Description

FGE1/0/1             DOWN auto    A      A    1

FGE1/0/2             DOWN auto    A      A    10

FGE1/0/3             DOWN auto    A      A    1    aaaaaaaaaaaaaaaaaaaaaaaaaaa

FGE1/0/4             DOWN auto    A      A    1

FGE1/0/5             DOWN auto    A      A    1

FGE1/0/6             DOWN auto    A      A    1

FGE1/0/7             DOWN auto    A      A    1

FGE1/0/8             DOWN auto    A      A    1

FGE1/0/9             DOWN auto    A      A    1

# Display brief information about interface FortyGigE 1/0/3, including the complete description of the interface.

<Sysname> display interface fortygige 1/0/3 brief description

Brief information on interfaces in bridge mode:

Link: ADM - administratively down; Stby - standby

Speed: (a) - auto 

Duplex: (a)/A - auto; H - half; F - full

Type: A - access; T - trunk; H - hybrid

Interface            Link Speed   Duplex Type PVID Description

FGE1/0/3             DOWN auto    A      A    1    aaaaaaaaaaaaaaaaaaaaaaaaaaaaa

aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa

# Display information about interfaces in DOWN state and the causes.

<Sysname> display interface brief down

Brief information on interfaces in route mode:

Link: ADM - administratively down; Stby - standby

Interface              Link Cause

FGE1/0/11            DOWN Not connected

REG0                 DOWN Not connected

 

Brief information on interfaces in bridge mode:

Link: ADM - administratively down; Stby - standby

Interface              Link Cause

FGE1/0/1             DOWN Not connected

FGE1/0/2             DOWN Not connected

FGE1/0/3             DOWN Not connected

Table 6 Command output

Field

Description

Brief information on interfaces in route mode:

Brief information about Layer 3 interfaces.

Link: ADM - administratively down; Stby - standby

Link status:

·     ADM—The interface has been shut down by the network administrator. To recover its physical layer state, run the undo shutdown command.

·     Stby—The interface is a standby interface.

Protocol: (s) – spoofing

The data link layer protocol of the interface is up. However, the link is an on-demand link or not present. This value is typical of interface Null 0 and loopback interfaces.

Interface

Interface name.

Link

Physical link state of the interface:

·     UP—The link is up.

·     DOWN—The link is physically down.

·     ADM—The link has been administratively shut down. To recover its physical state, run the undo shutdown command.

·     Stby—The interface is a standby interface.

Protocol

Link layer protocol state of the interface:

·     UP.

·     DOWN.

·     UP(s)—The link of the interface is an on-demand link or not present at all.

Description

Partial or complete interface description configured by using the description command:

·     If the description keyword is not specified in the display interface brief command, the Description field displays only the first 27 characters.

·     If the description keyword is specified in the display interface brief command, the field displays the complete interface description.

Brief information on interfaces in bridge mode:

Brief information about Layer 2 interfaces.

Speed: (a) - auto

If the speed of an interface is automatically negotiated, its speed attribute includes the autonegotiation flag, indicated by the letter a in parentheses.

Duplex: (a)/A - auto; H - half; F – full

If the duplex mode of an interface is automatically negotiated, the duplex mode attribute of the interface includes the letter a in parentheses. H indicates the half duplex mode. F indicates the full duplex mode.

If an interface is configured to autonegotiate its duplex mode but the autonegotiation has not started, its duplex mode attribute is displayed as A.

Type: A - access; T - trunk; H – hybrid

Link type options for Ethernet interfaces.

Speed

Interface rate, in bps.

Duplex

Duplex mode of the interface:

·     AAutonegotiation.

·     FFull duplex.

·     F(a)Autonegotiated full duplex.

·     HHalf duplex.

·     H(a)Autonegotiated half duplex.

Type

Link type of the interface:

·     AAccess.

·     HHybrid.

·     TTrunk.

PVID

Port VLAN ID.

Cause

Cause for the physical link state of an interface to be DOWN:

·     Administratively—The port is manually shut down with the shutdown command. To restore the physical state of the interface, use the undo shutdown command.

·     DOWN ( Link-Aggregation interface down )—The interface is a member port of an aggregate interface, and the aggregate interface is shut down.

·     DOWN (Loopback detection down)The port is shut down because the loopback detection module has detected loops.

·     IRF-link-downWhen IRF detects that the IRF link is down on an MDC of a member device, the physical interfaces except the excluded ports on the MDC are physically down.

·     MAD ShutDownAfter an IRF split, all interfaces except the excluded ports in the IRF in recovery state are physically down.

·     Not connected—No physical connection exists (possibly because the network cable is disconnected or faulty).

·     Storm-ConstrainThe port is shut down because the unknown unicast traffic, multicast traffic, or broadcast traffic exceeds the upper limit.

·     STP DOWNThe port is shut down by the STP BPDU guard function.

·     Port Security Disabled—The port is shut down by the intrusion detection mechanism because the port receives illegal packets.

·     Standby—The interface is in the Standby state.

 

Related commands

reset counters interface

display packet-drop

Use display packet-drop to display information about packets dropped on an interface or multiple interfaces.

Syntax

display packet-drop { interface [ interface-type [ interface-number ] ] | summary }

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

interface-type: Specifies an interface type. If you do not specify an interface type, this command displays information about dropped packets on all the interfaces on the device.

interface-number: Specifies an interface number. If you specify an interface type only, this command displays information about dropped packets on the specified type of interfaces.

summary: Displays the summary of dropped packets on all interfaces.

Examples

# Display information about dropped packets on FortyGigE 1/0/1.

<Sysname> display packet-drop interface fortygige 1/0/1

FortyGigE1/0/1:

  Packets dropped due to STP non-forwarding state: 321

  Packets dropped due to TM: 0

  Packets dropped due to insufficient data buffer. Input dropped: 0 Output dropped:0

# Display the summary of dropped packets on all interfaces.

<Sysname> display packet-drop summary

All interfaces:

  Packets dropped due to STP non-forwarding state: 321

  Packets dropped due to TM: 0

Table 7 Command output

Field

Description

Packets dropped due to STP non-forwarding state

Packets that are dropped because STP is in the non-forwarding state.

Packets dropped due to TM

Packets that are dropped because of insufficient TM bandwidth.

 

duplex

Use duplex to set the duplex mode for an Ethernet interface.

Use undo duplex to restore the default duplex mode of the Ethernet interface.

Syntax

duplex { auto | full | half }

undo duplex

Default

100-GE CXP interfaces and 100-GE CFP2 interfaces operate in full duplex mode, and other Ethernet interfaces automatically negotiate a duplex mode with the peer end.

Views

Ethernet interface view

Predefined user roles

network-admin

mdc-admin

Parameters

auto: Configures the interface to autonegotiate the duplex mode with the peer.

full: Configures the interface to operate in full duplex mode. In this mode, the interface can receive and transmit packets at the same time.

half: Configures the interface to operate in half duplex mode. In this mode, the interface can only receive or transmit packets at a given time.

Usage guidelines

This command is not applicable to 100-GE CXP interfaces and 100-GE CFP2 interfaces.

Copper ports operating at 1000 Mbps and 10 Gbps and fiber ports do not support the half keyword.

Examples

# Configure interface FortyGigE 1/0/1 to operate in full duplex mode.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] duplex full

eee enable

IMPORTANT

IMPORTANT:

·     Fiber ports do not support this command.

·     Ports on an LSXM1GT48FX1 card do not support this command when they operate at 100 Mbps.

 

Use eee enable to enable Energy Efficient Ethernet (EEE) on an interface.

Use undo eee enable to restore the default.

Syntax

eee enable

undo eee enable

Default

EEE is disabled.

Views

Ethernet interface view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

With EEE enabled, a link-up interface enters low power state if it has not received any packets for a period of time. The time period depends on the chip specifications and is not configurable. When a packet arrives later, the interface restores to the normal state.

Examples

# Enable EEE on Ten-GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 1/0/1

[Sysname-Ten-GigabitEthernet1/0/1] eee enable

flow-control

Use flow-control to enable TxRx mode generic flow control on an Ethernet interface.

Use undo flow-control to disable generic flow control on the Ethernet interface.

Syntax

flow-control

undo flow-control

Default

Generic flow control is disabled on an Ethernet interface.

Views

Ethernet interface view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

To implement flow control on a link, enable the generic flow control function at both ends of the link.

TxRx mode generic flow control enables an Ethernet interface to receive common pause frames from its peer, and send common pause frames to notify its peer of congestions.

With the flow-control command configured, an interface can both send and receive flow control frames:

·     When congested, the interface sends a flow control frame to its peer.

·     Upon receiving a flow control frame from the peer, the interface suspends sending packets.

Examples

# Enable TxRx mode generic flow control on the interface FortyGigE 1/0/1.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] flow-control

flow-control receive enable

Use flow-control receive enable to enable Rx mode generic flow control on an Ethernet port.

Use undo flow-control to disable generic flow control on an Ethernet interface.

Syntax

flow-control receive enable

undo flow-control

Default

Rx flow control is disabled on Ethernet interfaces.

Views

Ethernet interface view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

With the flow-control receive enable command configured, an interface can receive, but not send, flow control frames. When the interface receives a flow control frame from its peer, it suspends sending packets to the peer. When traffic congestion occurs on the interface, it cannot send flow control frames to the peer.

To handle unidirectional traffic congestion on a link, configure the flow-control receive enable command at one end, and the flow-control command at the other. To enable both ends of the link to handle traffic congestion, configure the flow-control command at both ends.

Examples

# Enable Rx mode generic flow control on FortyGigE 1/0/1.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] flow-control receive enable

Related commands

flow-control

interface

Use interface to enter interface or subinterface view. If the specified subinterface does not exist, the command creates the subinterface and enters its view.

Syntax

interface interface-type { interface-number | interface-number.subnumber }

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

interface-type: Specifies an interface type.

interface-number: Specifies an interface number.

interface-number.subnumber: Specifies a subinterface number. The interface-number argument represents the number of the interface. The subnumber argument represents the number of the subinterface, in the range of 1 to 4094.

Usage guidelines

Each of the Layer 3 interfaces and subinterfaces use one VLAN interface resource. Use the reserve-vlan-interface command to reserve VLAN interface resources for Layer 3 interfaces and subinterfaces before you create them. Otherwise, the Layer 3 interfaces and subinterfaces might not be created. For example, before creating four Layer 3 subinterfaces on a Layer 3 interface, you must reserve five VLAN interface resources by using the reserve-vlan-interface command.

To reserve global VLAN interface resources, specify the global keyword in the reserve-vlan-interface command. To reserve local VLAN interface resources, do not specify the global keyword. Reserved VLAN interface resources are local in this chapter.

Before creating a Layer 3 Ethernet subinterface, do not reserve a resource for the VLAN interface whose interface number matches the subinterface number. After you reserve a VLAN interface resource, do not create a Layer 3 Ethernet subinterface whose subinterface number is the VLAN interface number. A Layer 3 Ethernet subinterface uses the VLAN interface resource in processing tagged packets whose VLAN ID matches the subinterface number.

For more information about reserving VLAN interface resources, see Layer 2—LAN Switching Configuration Guide.

Examples

# Enter FortyGigE 1/0/1 interface view.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1]

# Create Ethernet subinterface FortyGigE 1/0/1.1 and enter its view.

<Sysname> system-view

[Sysname] reserve-vlan-interface 3000

[Sysname] interface fortygige 1/0/1.1

[Sysname-FortyGigE1/0/1.1]

jumboframe enable

Use jumboframe enable to allow jumbo frames within the specified length to pass through.

Use undo jumboframe enable to prevent jumbo frames from passing through.

Syntax

jumboframe enable [ value ]

undo jumboframe enable

Default

The device allows jumbo frames within 12288 bytes to pass through.

Views

Ethernet interface view

Predefined user roles

network-admin

mdc-admin

Parameters

value: Sets the maximum length of Ethernet frames that are allowed to pass through. The value range is 1536 to 12288 bytes.

Usage guidelines

If you set the value argument multiple times, the most recent configuration takes effect.

Examples

# Enable jumbo frames to pass through FortyGigE 1/0/1.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] jumboframe enable

link-delay

Use link-delay to set the physical state change suppression interval on an Ethernet interface.

Use undo link-delay to restore the default.

Syntax

link-delay [ msec ] delay-time [ mode { up | updown } ]

undo link-delay [ [ msec ] delay-time [ mode { up | updown } ] ]

Default

Each time the physical link of a port goes up or comes down, the interface immediately reports the change to the CPU.

Views

Ethernet interface view

Predefined user roles

network-admin

mdc-admin

Parameters

msec: Enables the physical state change suppression interval to be accurate to milliseconds. If you do not specify this keyword, the suppression interval is accurate to seconds.

delay-time: Sets the physical state change suppression interval on the Ethernet interface. A value of 0 indicates that physical state changes are immediately reported to the CPU and are not suppressed.

·     If you do not specify the msec keyword, the value range for this argument is 0 to 30 seconds.

·     If you specify the msec keyword, the value range for this argument is 0 to 10000 milliseconds, and the value must be an integer multiple of 100.

mode up: Suppresses the link-up events.

mode updown: Suppresses both the link-up and link-down events.

Usage guidelines

You can configure this feature to suppress only link-down events, only link-up events, or both. If an event of the specified type still exists when the suppression interval expires, the system reports the event.

When you configure this feature, follow these guidelines:

·     To suppress only link-down events, configure the link-delay [ msec ] delay-time command.

·     To suppress only link-up events, configure the link-delay [ msec ] delay-time mode up command.

·     To suppress both link-down and link-up events, configure the link-delay [ msec ] delay-time mode updown command.

When you separately enable state change suppression for link-up and link-down events, both configurations take effect. For example, if you configure the link-delay [ msec ] delay-time mode up command and then the link-delay [ msec ] delay-time command, both commands take effect.

If you configure the link-delay command multiple times for link-up or link-down events, the most recent configuration takes effect.

You can disable suppression for only link-up events, only link-down events, or both. For example, when both link-up and link-down events are suppressed on an interface, you can use the undo link-delay delay-time mode up command to disable suppression only for link-up events.

Do not configure this command on a port with MSTP enabled.

Examples

# Set the link-down event suppression interval to 8 seconds on interface FortyGigE 1/0/1.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] link-delay 8

# Set the link-up event suppression interval to 8 milliseconds on interface FortyGigE 1/0/1.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] link-delay msec 8 mode up

port auto-power-down

IMPORTANT

IMPORTANT:

Fiber ports do not support this command.

 

Use port auto-power-down to enable auto power-down on an Ethernet interface.

Use undo port auto-power-down to restore the default.

Syntax

port auto-power-down

undo port auto-power-down

Default

Auto power-down is disabled on Ethernet interfaces.

Views

Ethernet interface view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

When an interface with auto power-down enabled has been down for a specific period of time, both of the following events occur:

·     The device automatically stops supplying power to the interface.

·     The interface enters the power save mode.

The time period depends on the chip specifications and is not configurable.

When the interface comes up, both of the following events occur:

·     The device automatically restores the power supply to the interface.

·     The interface restores to its normal state.

Examples

# Enable auto power-down on interface Ten-GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 1/0/1

[Sysname-Ten-GigabitEthernet1/0/1] port auto-power-down

port link-mode

Use port link-mode to change the link mode of an Ethernet interface.

Use undo port link-mode to restore the default.

Syntax

port link-mode { bridge | route }

undo port link-mode

Default

Ethernet interfaces operate in bridge mode.

Views

Ethernet interface view

Predefined user roles

network-admin

mdc-admin

Parameters

bridge: Specifies the Layer 2 mode.

route: Specifies the Layer 3 mode.

Usage guidelines

On the switch, Ethernet interfaces can operate either as Layer 2 or Layer 3 Ethernet interfaces (you can use commands to set the link mode to bridge or route).

Each of the Layer 3 interfaces and subinterfaces use one VLAN interface resource. Before configuring an Ethernet interface to operate in route mode, use the reserve-vlan-interface command to reserve a VLAN interface resource for the interface. Otherwise, the operation might fail. For example, before configuring four Layer 2 interfaces to operate in route mode, you must reserve four VLAN interface resources by using the reserve-vlan-interface command.

To reserve global VLAN interface resources, specify the global keyword in the reserve-vlan-interface command. To reserve local VLAN interface resources, do not specify the global keyword. Reserved VLAN interface resources are local in this chapter.

For more information about reserving VLAN interface resources, see Layer 2—LAN Switching Configuration Guide.

Changing the link mode of an Ethernet interface also restores all commands (except shutdown) on the Ethernet interface to their defaults in the new link mode.

Examples

# Configure FortyGigE 1/0/1 to operate in bridge mode.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] port link-mode bridge

# Configure FortyGigE 1/0/1 to operate in route mode.

<Sysname> system-view

[Sysname] reserve-vlan-interface 3000

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] port link-mode route

priority-flow-control

Use priority-flow-control to enable PFC on an Ethernet interface through automatic negotiation or forcibly.

Use undo priority-flow-control to disable PFC on the interface.

Syntax

priority-flow-control { auto | enable }

undo priority-flow-control

Default

PFC is disabled on Ethernet interfaces.

Views

Ethernet interface view

Predefined user roles

network-admin

mdc-admin

Parameters

auto: Specifies the Ethernet interface to automatically negotiate with its peer to enable PFC.

enable: Forcibly enables PFC.

Usage guidelines

This command is available only when the system operates in advanced mode. For more information about system operating modes, see Fundamentals Configuration Guide.

The state of the PFC function is co-determined by the PFC configurations on the local port and on the peer. In Table 8:

·     The first line lists the PFC configuration on the local port.

·     The first column lists the PFC configuration on the peer.

·     The fields enabled and disabled are the two possible negotiation results.

Table 8 PFC configurations and negotiation results

Local (right)

Peer (below)

enable

auto

Default

enable

Enabled

Enabled.

Disabled

auto

Enabled

·     Enabled if negotiation succeeds.

·     Disabled if negotiation fails.

Disabled

Default

Disabled

Disabled.

Disabled

 

Examples

# Configure FortyGigE 1/0/1 to automatically negotiate with its peer to enable PFC.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] priority-flow-control auto

Related commands

priority-flow-control no-drop dot1p

priority-flow-control no-drop dot1p

Use priority-flow-control no-drop dot1p to enable PFC for specific 802.1p priorities on an Ethernet interface.

Use undo priority-flow-control no-drop dot1p to restore the default.

Syntax

priority-flow-control no-drop dot1p dot1p-list

undo priority-flow-control no-drop dot1p

Default

PFC is disabled for all 802.1p priorities.

Views

Ethernet interface view

Predefined user roles

network-admin

mdc-admin

Parameters

dot1p-list: Specifies an 802.1p priority (or dot1p priority) list to identify flows that are subject to PFC(for example: 1,3-5). A hyphen (-) connects two numeric values, which together indicate a continuous value range. Different values or value ranges are separated with commas (,). You can configure up to 16 characters for this argument.

Usage guidelines

You can enable PFC for certain 802.1p priorities at the two ends of a link. When network congestion occurs, the local device checks the PFC status for the 802.1p priority carried in each arriving packet. The device processes the packet depending on the PFC status as follows:

·     If PFC is enabled for the 802.1p priority, the local device accepts the packet and sends a PFC pause frame to the peer. The peer stops sending packets carrying this 802.1p priority for an interval as specified in the PFC pause frame. This process is repeated until the congestion is removed.

·     If PFC is disabled for the 802.1p priority, the local interface drops the packet.

The relationship between the PFC function and the generic flow control function is shown in Table 9.

Table 9 The relationship between the PFC function and the generic flow control function

flow-control

priority-flow-control enable

priority-flow-control no-drop dot1p

Remarks

Unconfigurable

Configured

Configured

You cannot enable flow control by using the flow-control command on an interface where PFC is enabled and PFC is enabled for the specified 802.1p priority values.

Configured

Configurable

Unconfigurable

·     On an interface configured with the flow-control command, you can enable PFC, but you cannot enable PFC for specific 802.1p priorities.

·     Enabling both generic flow control and PFC on an interface disables the interface from sending common or PFC pause frames to inform the peer of congestion conditions. However, the interface can still handle common and PFC pause frames from the peer.

 

When you configure PFC, follow these guidelines:

·     As a best practice to ensure correct operations of IRF and other protocols, do not enable PFC for 802.1p priorities 0, 6, and 7.

·     Make the same PFC configuration on all interfaces that traffic travels through.

For more information about the 802.1p priority, priority trust mode, and port priority, see ACL and QoS Configuration Guide.

Examples

# Configure FortyGigE 1/0/1 to automatically negotiate with the peer interface to enable PFC, and enable PFC for 802.1p priority 5.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] priority-flow-control auto

[Sysname-FortyGigE1/0/1] priority-flow-control no-drop dot1p 5

Related commands

·     priority-flow-control

·     flow-control

·     flow-control receive enable

reset counters interface

Use reset counters interface to clear the Ethernet interface statistics.

Syntax

reset counters interface [ interface-type [ interface-number ] ]

Views

User view

Predefined user roles

network-admin

mdc-admin

Parameters

interface-type: Specifies an interface type.

interface-number: Specifies an interface number.

Usage guidelines

Before collecting traffic statistics for a specific period of time on an interface, clear the old statistics first.

If no interface type is specified, this command clears statistics for all interfaces.

If only the interface type is specified, this command clears statistics for all interfaces of that type.

If both the interface type and the interface number are specified, this command clears statistics for the specified interface.

Examples

# Clear the statistics of FortyGigE 1/0/1.

<Sysname> reset counters interface fortygige 1/0/1

Related commands

·     display interface

·     display counters interface

·     display counters rate interface

reset ethernet statistics

Use reset ethernet statistics to clear the Ethernet module statistics.

Syntax

In standalone mode:

reset ethernet statistics slot slot-number

In IRF mode:

reset ethernet statistics chassis chassis-number slot slot-number

Views

User view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

slot slot-number: Clears the Ethernet module statistics on the specified card. The slot-number argument represents the number of the slot that houses the card. (In standalone mode.)

chassis chassis-number slot slot-number: Clears the Ethernet module statistics on the specified card of the specified IRF member device. The chassis-number argument represents the ID of the IRF member device. The slot-number argument represents the number of the slot that houses the card. (In IRF mode.)

Examples

# (In standalone mode.) Clear the Ethernet module statistics on slot 6.

<Sysname> reset ethernet statistics slot 6

# (In IRF mode.) Clear the Ethernet module statistics on the card in slot 1 of IRF member device 1.

<Sysname> reset ethernet statistics chassis 1 slot 1

Related commands

display ethernet statistics

reset packet-drop interface

Use reset packet-drop interface to clear the dropped packet statistics on an interface or multiple interfaces.

Syntax

reset packet-drop interface [ interface-type [ interface-number ] ]

Views

User view

Predefined user roles

network-admin

mdc-admin

Parameters

interface-type: Specify an interface type. If you do not specify an interface type, this command clears dropped packet statistics on all the interfaces on the device.

interface-number: Specify an interface number. If you do not specify this argument, this command clears dropped packet statistics on all interfaces of the specified type.

Examples

# Clear dropped packet statistics on FortyGigE 1/0/1.

<Sysname> reset packet-drop interface fortygige1/0/1

# Clear dropped packet statistics on all interfaces.

<Sysname> reset packet-drop interface

Related commands

display packet-drop

shutdown

Use shutdown to shut down an Ethernet interface or subinterface.

Use undo shutdown to bring up an Ethernet interface or subinterface.

Syntax

shutdown

undo shutdown

Default

Ethernet interfaces are in up state.

Views

Ethernet interface view, Layer 3 Ethernet subinterface view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

You might need to shut down and then bring up an Ethernet interface to make some interface configurations take effect.

Examples

# Shut down and then bring up FortyGigE 1/0/1.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] shutdown

[Sysname-FortyGigE1/0/1] undo shutdown

# Shut down and then bring up FortyGigE 1/0/1.1.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1.1

[Sysname-FortyGigE1/0/1.1] shutdown

[Sysname-FortyGigE1/0/1.1] undo shutdown

speed

Use speed to set the speed of an Ethernet interface.

Use undo speed to restore the default.

Syntax

speed { 10 | 100 | 1000 | 10000 | 40000 | 100000 | auto }

undo speed

Default

100-GE CXP interfaces and 100-GE CFP2 interfaces operate at 100 Gbps, and other Ethernet interfaces automatically negotiate a speed with the peer.

Views

Ethernet interface view

Predefined user roles

network-admin

mdc-admin

Parameters

10: Sets the interface speed to 10 Mbps.

100: Sets the interface speed to 100 Mbps.

1000: Sets the interface speed to 1000 Mbps.

10000: Sets the interface speed to 10000 Mbps.

40000: Sets the interface speed to 40000 Mbps.

100000: Sets the interface speed to 100 Gbps.

auto: Enables the interface to negotiate a speed with its peer.

Usage guidelines

For a copper port, use the speed command to set its speed to match the rate of the remote end.

For a fiber port, use the speed command to set its speed to match the rate of a transceiver module.

Support for the keywords varies by interface type. For more information, execute the speed ? command in interface view.

Examples

# Configure FortyGigE 1/0/1 to autonegotiate the speed.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] speed auto

Related commands

speed auto

using fortygige

Use using fortygige to combine four 10-GE breakout interfaces that are split from a 40-GE QSFP+ interface into a 40-GE interface.

Use undo using fortygige to cancel the configuration.

Syntax

using fortygige

undo using fortygige

Default

A 40-GE interface is not split and operates as a single interface.

Views

10-GE breakout interface view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

If you need higher bandwidth, you can combine four 10-GE breakout interfaces that are split from a 40-GE interface into a 40-GE interface. To make this command take effect on the four 10-GE breakout interfaces, execute this command on only one of the 10-GE breakout interfaces.

After you configure this command on a 10-GE breakout interface, reboot the device. The system deletes the four 10-GE breakout interfaces and creates the 40-GE interface.

Before rebooting a switch configured with this command, save the combining configuration even if the switch is an IRF member switch.

Examples

# Combine 10-GE breakout interfaces Ten-GigabitEthernet 1/0/16:1 through Ten-GigabitEthernet 1/0/16:4 into a 40-GE interface.

<System> system-view

[System] interface ten-gigabitethernet1/0/16:1

[System-Ten-GigabitEthernet1/0/16:1] using fortygige

The interfaces Ten-GigabitEthernet1/0/16:1 through Ten-GigabitEthernet1/0/16:4 will be deleted. Continue? [Y/N]:y

Reboot line card to make the configuration take effect.

Related commands

using tengige

using tengige

Use using tengige to split a 40-GE interface into four 10-GE breakout interfaces.

Use undo using tengige to cancel the configuration.

Syntax

using tengige

undo using tengige

Default

A 40-GE interface is not split and operates as a single interface.

Views

40-GE interface view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

To improve port density, reduce costs, and improve network flexibility, you can split a 40-GE interface into four 10-GE breakout interfaces.

For example, you can split a 40-GE interface FortyGigE 1/0/1 into four 10-GE breakout interfaces Ten-GigabitEthernet 1/0/1:1 through Ten-GigabitEthernet 1/0/1:4.

The 10-GE breakout interfaces support the same configuration and attributes as common 10-GE interfaces, except that they are numbered differently.

After you configure this command on a 40-GE interface, reboot the device. The system deletes the 40-GE interface and creates the four 10-GE breakout interfaces.

Before rebooting a switch configured with this command, save the splitting configuration even if the switch is an IRF member switch.

Examples

# Split 40-GE interface FortyGigE 1/0/1 into four 10-GE breakout interfaces.

<System> system-view

[System] interface fortygige 1/0/1

[System-FortyGigE1/0/1] using tengige

The interface FortyGigE1/0/1 will be deleted. Continue? [Y/N]:y

Reboot line card to make the configuration take effect.

Related commands

using fortygige

virtual-cable-test

IMPORTANT

IMPORTANT:

Fiber ports do not support this command.

 

Use virtual-cable-test to test the cable connection of an Ethernet interface and display the test result.

Syntax

virtual-cable-test

Views

Layer 2 Ethernet interface view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

If the link of an Ethernet interface is up, testing its cable connection will cause the link to go down and then up.

The test result is for reference only. The cable length detection error is up to 5 meters (16 ft).

If a test item is not available, a hyphen (-) is displayed.

Examples

# Test the cable connection of Ten-GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 1/0/1

[Sysname-Ten-GigabitEthernet1/0/1] virtual-cable-test

Cable status: abnormal(open), 140 metre(s)

Pair Impedance mismatch: -

Pair skew: - ns

Pair swap: -

Pair polarity: -

Insertion loss: - db

Return loss: - db

Near-end crosstalk: - db

Table 10 Command output

Field

Description

Cable status

Cable status:

·     normal—The cable is in good condition.

·     abnormal—The cable is abnormal.

·     abnormal (open)—An open circuit is detected.

·     abnormal (short)—A short circuit is detected.

·     failure—The test failed.

n metres

If the cable connection is working correctly, this field displays the total length of the cable.

If the cable connection fails, this field displays the length from the local port to the faulty point.

 

Layer 2 Ethernet interface commands

broadcast-suppression

Use broadcast-suppression to enable broadcast suppression and set the broadcast suppression threshold.

Use undo broadcast-suppression to restore the default.

Syntax

broadcast-suppression { ratio | pps max-pps | kbps max-kbps }

undo broadcast-suppression

Default

Ethernet interfaces do not suppress broadcast traffic.

Views

Layer 2 Ethernet interface view

Predefined user roles

network-admin

mdc-admin

Parameters

ratio: Sets the broadcast suppression threshold as a percentage of the maximum interface rate. The value range for this argument is 0 to 100. The smaller the percentage, the less broadcast traffic is allowed to pass through.

pps max-pps: Specifies the maximum number of broadcast packets that the interface can forward per second. The value range for the max-pps argument (in pps) is 0 to 1.4881 × the maximum interface rate. For example, the value range for this argument is 0 to 59524000 on a 40-GE interface.

kbps max-kbps: Specifies the maximum number of kilobits of broadcast traffic that the Ethernet interface can forward per second. The value range for this argument (in kbps) is 0 to the maximum interface rate.

Usage guidelines

You can use the broadcast storm suppression function to limit the size of broadcast traffic on an interface. When the broadcast traffic on the interface exceeds this threshold, the system drops packets until the traffic drops below this threshold.

Both storm-constrain and broadcast-suppression can suppress broadcast storm on a port. The storm-constrain command uses software to suppress broadcast traffic, and it affects the device performance to a certain extent. The broadcast-suppression command uses the chip to physically suppress broadcast traffic, and it has less influence on the device performance than the storm-constrain command. Do not configure the storm constrain command and the broadcast-suppression command at the same time. Otherwise, the traffic suppression result is not determined.

When you configure the suppression threshold in kbps, the actual suppression threshold might be different from the configured one as follows:

·     If the configured value is smaller than 64, the value of 64 takes effect.

·     If the configured value is greater than 64 but not an integer multiple of 64, the integer multiple of 64 that is greater than and closest to the configured value takes effect.

To determine the suppression threshold that takes effect, see the prompts on the device.

Examples

# Set the broadcast suppression threshold to 10000 kbps on FortyGigE 1/0/1.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] broadcast-suppression kbps 10000

The actual value is 10048 on port FortyGigE1/0/1 currently.

The output shows the configured threshold is 10000 kbps, but the value that takes effect is 10048 kbps (157 times of 64), because the chip only supports step 64.

Related commands

·     multicast-suppression

·     unicast-suppression

display storm-constrain

Use display storm-constrain to display storm control settings and statistics.

Syntax

display storm-constrain [ broadcast | multicast | unicast ] [ interface interface-type interface-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

broadcast: Displays broadcast storm control settings and statistics.

multicast: Displays multicast storm control settings and statistics.

unicast: Displays unknown unicast storm control settings and statistics.

interface interface-type interface-number: Specifies an interface by its type and number.

Usage guidelines

If you specify no argument or keyword, this command displays all storm control settings on all storm control-enabled interfaces.

Examples

# Display the storm control settings on all storm control-enabled ports.

<Sysname> display storm-constrain

Abbreviation: BC - broadcast; MC - multicast; UC - unicast

               FW – forwarding

Flow Statistic Interval: 5 (in seconds)

Port    Type  Lower       Upper      Unit  CtrlMode   Status     Trap  Log  SwitchNum

---------------------------------------------------------------------------------------

FGE1/0/1   BC   12345      23456      pps    block     FW          on   off   0

FGE1/0/2   MC   43         100        ratio  block     block       on   off   1

FGE1/0/4   UC   200        300        kbps   shutdown  normal      off  on    33

FGE1/0/5   BC   500        1500       pps    N/A       normal      on   on    0

Table 11 Command output

Field

Description

Flow Statistic Interval

Traffic polling interval (in seconds) of the storm control module.

Port

Abbreviated port name.

Type

Type of traffic subjected to storm control:

·     BC—Broadcast packets.

·     MC—Multicast packets.

·     UC—Unknown unicast packets.

Lower

Lower storm control threshold, in pps, kbps, or percentage.

Upper

Upper storm control threshold, in pps, kbps, or percentage.

Unit

Storm control threshold unit:

·     pps.

·     kbps.

·     percentage.

CtrlMode

Protective action (block or shutdown) taken on the port when the upper threshold is reached. N/A indicates that no protective action is configured.

Status

Packet forwarding status:

·     FW—The port is forwarding traffic correctly.

·     shutdown—The port has been shut down.

·     block—The port drops the type of traffic.

Trap

Status of the storm control threshold event trap switch:

·     on—The port sends threshold event traps.

·     off—The port does not send threshold event traps.

Log

Status of the storm control threshold event log switch:

·     on—The port sends threshold event log messages.

·     off—The port does not send threshold event log messages.

SwitchNum

Number of forwarding state changes of the interface.

When the SwitchNum count reaches 65535, it resets automatically.

 

mdix-mode

IMPORTANT

IMPORTANT:

Fiber ports do not support this command.

 

Use mdix-mode to set the Medium Dependent Interface Cross-Over (MDIX) mode of an Ethernet interface.

Use undo mdix-mode to restore the default.

Syntax

mdix-mode { automdix | mdi | mdix }

undo mdix-mode

Default

Ethernet interfaces operate in automdix mode.

Views

Layer 2 Ethernet interface view

Predefined user roles

network-admin

mdc-admin

Parameters

automdix: Configures the interface to negotiate pin roles with its peer.

mdi: Specifies pins 1 and 2 as transmit pins and pins 3 and 6 as receive pins.

mdix: Specifies pins 1 and 2 as receive pins and pins 3 and 6 as transmit pins.

Examples

# Set the MDIX mode for Ten-GigabitEthernet 1/0/1 to mdi.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 1/0/1

[Sysname-Ten-GigabitEthernet1/0/1] mdix-mode mdi

multicast-suppression

Use multicast-suppression to enable multicast storm suppression and set the multicast storm suppression threshold.

Use undo multicast-suppression to restore the default.

Syntax

multicast-suppression { ratio | pps max-pps | kbps max-kbps }

undo multicast-suppression

Default

Ethernet interfaces do not suppress multicast traffic.

Views

Layer 2 Ethernet interface view

Predefined user roles

network-admin

mdc-admin

Parameters

ratio: Sets the multicast suppression threshold as a percentage of the maximum interface rate. The value range for this argument (in percentage) is 0 to 100. The smaller the percentage, the less multicast traffic is allowed to pass through.

pps max-pps: Specifies the maximum number of multicast packets that the interface can forward per second. The value range for the max-pps argument (in pps) is 0 to 1.4881 × the maximum interface rate. For example, the value range for this argument is 0 to 59524000 on a 40-GE interface.

kbps max-kbps: Specifies the maximum number of kilobits of multicast traffic that the Ethernet interface can forward per second. The value range for this argument (in kbps) is 0 to the maximum interface rate.

Usage guidelines

You can use the multicast storm suppression function to limit the size of multicast traffic on an interface. When the multicast traffic on the interface exceeds this threshold, the system drops packets until the traffic drops below this threshold.

Both the storm-constrain and multicast-suppression can suppress multicast storm on a port. The storm-constrain command uses software to suppress traffic, and it affects the device performance to a certain extent. The multicast-suppression command uses the chip to physically suppress multicast traffic, and it has less influence on the device performance than the storm-constrain command. Do not configure the storm constrain command and the multicast-suppression command at the same time. Otherwise, the traffic suppression result is not determined.

When you configure the suppression threshold in kbps, the actual suppression threshold might be different from the configured one as follows:

·     If the configured value is smaller than 64, the value of 64 takes effect.

·     If the configured value is greater than 64 but not an integer multiple of 64, the integer multiple of 64 that is greater than and closest to the configured value takes effect.

To determine the suppression threshold that takes effect, see the prompts on the device.

Examples

# Set the multicast storm suppression threshold to 10000 kbps on FortyGigE 1/0/1.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] multicast-suppression kbps 10000

The actual value is 10048 on port FortyGigE1/0/1 currently.

The output shows the configured threshold is 10000 kbps, but the value that takes effect is 10048 kbps (157 times of 64), because the chip only supports step 64.

Related commands

·     broadcast-suppression

·     unicast-suppression

port up-mode

CAUTION

CAUTION:

The following operations on a fiber port will cause link updown events before the port finally stays up:

·     Configure both the port up-mode command and the speed or duplex command.

·     Install or remove fiber links or transceiver modules after you forcibly bring up the fiber port.

 

IMPORTANT

IMPORTANT:

Copper ports do not support this command.

 

Use port up-mode to forcibly bring up a fiber port.

Use undo port up-mode to restore the default.

Syntax

port up-mode

undo port up-mode

Default

A fiber port is not forcibly brought up, and the physical state of a fiber port depends on the physical state of the fibers.

Views

Ethernet interface view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

This command forcibly brings up a fiber port and enables the port to forward packets unidirectionally over a single link. In this way, transmission links are well utilized.

This command is applicable only to fiber port that operates in bridge mode.

The port up-mode, shutdown, and loopback commands are exclusive with each other.

A GE fiber port forcibly brought up cannot correctly forward traffic if it is installed with a fiber-to-copper converter, 100/1000-Mbps transceiver module, or 100-Mbps transceiver module. To solve the problem, use the undo port up-mode command on the fiber port.

Examples

# Forcibly bring up the fiber port FortyGigE 1/0/1.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] port up-mode

storm-constrain

Use storm-constrain to enable broadcast, multicast, or unknown unicast storm control on an Ethernet port.

Use undo storm-constrain to disable storm control.

Syntax

storm-constrain { broadcast | multicast | unicast } { pps | kbps | ratio } upperlimit lowerlimit

undo storm-constrain { all | broadcast | multicast | unicast }

Default

Traffic storm control is disabled.

Views

Layer 2 Ethernet interface view

Predefined user roles

network-admin

mdc-admin

Parameters

all: Disables storm control for all types of packets: broadcast, multicast, and unknown unicast.

broadcast: Enables or disables broadcast storm control.

multicast: Enables or disables multicast storm control.

unicast: Enables or disables unknown unicast storm control.

pps: Sets storm control thresholds in pps.

kbps: Sets storm control thresholds in kbps.

ratio: Sets storm control thresholds as a percentage of the transmission capacity of the interface.

upperlimit: Sets the upper threshold, in pps, kbps, or percentage.

lowerlimit: Sets the lower threshold, in pps, kbps, or percentage.

Usage guidelines

After you configure this command, the device collects statistics for a particular type of traffic at the interval configured by using the storm-constrain interval command. When a particular type of traffic exceeds its upper threshold, the interface takes the action configured by using the storm-constrain control command.

Either of the storm-constrain, broadcast-suppression, multicast-suppression, and unicast-suppression commands can suppress storm on a port. The storm-constrain command uses software to suppress traffic, and affects the device performance to a certain extent. The broadcast-suppression, multicast-suppression, and unicast-suppression commands use the chip to physically suppress traffic, and have less influence on the device performance compared with the storm-constrain command. On the same type of traffic, do not configure the storm constrain command and either of the broadcast-suppression, multicast-suppression, and unicast-suppression commands at the same time. Otherwise, the traffic suppression result is not determined.

When configuring this command, make sure upperlimit is greater than lowerlimit.

Examples

# Enable unknown unicast storm control on FortyGigE 1/0/1, setting the upper and lower thresholds to 200 pps and 150 pps.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] storm-constrain unicast pps 200 150

# Enable broadcast storm control on FortyGigE 1/0/2, setting the upper and lower thresholds to 2000 kbps and 1500 kbps.

<Sysname> system-view

[Sysname] interface fortygige 1/0/2

[Sysname-FortyGigE1/0/2] storm-constrain broadcast kbps 2000 1500

# Enable multicast storm control on FortyGigE 1/0/3, setting the upper and lower thresholds to 80% and 15%.

<Sysname> system-view

[Sysname] interface fortygige 1/0/3

[Sysname-FortyGigE1/0/3] storm-constrain multicast ratio 80 15

Related commands

·     storm-constrain control

·     storm-constrain interval

storm-constrain control

Use storm-constrain control to set the protective action to take on an Ethernet interface when a type of traffic (unknown unicast, multicast, or broadcast) exceeds the upper storm control threshold.

Use undo storm-constrain control to restore the default.

Syntax

storm-constrain control { block | shutdown }

undo storm-constrain control

Default

No action is taken on an Ethernet interface when a type of traffic exceeds the upper storm control threshold.

Views

Layer 2 Ethernet interface view

Predefined user roles

network-admin

mdc-admin

Parameters

block: Blocks this type of traffic while forwarding other types of traffic. Even though the interface does not forward the blocked traffic, it still counts the traffic. When the blocked traffic is detected dropping below the lower threshold, the port begins to forward the traffic.

shutdown: Goes down automatically. The interface goes down automatically and stops forwarding traffic. When the blocked traffic is detected dropping below the lower threshold, the port does not forward the traffic. To bring up the interface, use the undo shutdown command or disable the storm control function.

Examples

# Configure FortyGigE 1/0/1 to block the traffic detected exceeding the upper storm control threshold.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] storm-constrain control block

Related commands

·     storm-constrain

·     storm-constrain control

storm-constrain enable log

Use storm-constrain enable log to enable an Ethernet interface to log storm control threshold events.

Use undo storm-constrain enable log to disable log sending.

Syntax

storm-constrain enable log

undo storm-constrain enable log

Default

An interface generates logs when monitored traffic exceeds the upper threshold or falls below the lower threshold.

Views

Layer 2 Ethernet interface view

Predefined user roles

network-admin

mdc-admin

Examples

# Enable FortyGigE 1/0/1 to generate logs when it detects storm control threshold events.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] storm-constrain enable log

storm-constrain enable trap

Use storm-constrain enable trap to enable an Ethernet interface to send storm control threshold event traps.

Use undo storm-constrain enable trap to disable trap sending.

Syntax

storm-constrain enable trap

undo storm-constrain enable trap

Default

An interface sends out traps when monitored traffic exceeds the upper threshold or falls below the lower threshold.

Views

Layer 2 Ethernet interface view

Predefined user roles

network-admin

mdc-admin

Examples

# Enable FortyGigE 1/0/1 to send traps when it detects storm control threshold events.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] storm-constrain enable trap

storm-constrain interval

Use storm-constrain interval to set the traffic polling interval of the storm control module.

Use undo storm-constrain interval to restore the default.

Syntax

storm-constrain interval seconds

undo storm-constrain interval

Default

The storm control module polls traffic statistics every 10 seconds.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

seconds: Sets the traffic polling interval of the storm control module. The value range is 1 to 300 seconds.

Usage guidelines

The interval set by the storm-constrain interval command is specific to storm control. To set the statistics polling interval of an interface, use the flow-interval command.

For network stability, use the default or a higher polling interval.

Examples

# Set the traffic statistics polling interval of the storm control module to 60 seconds.

<Sysname> system-view

[Sysname] storm-constrain interval 60

Related commands

·     storm-constrain

·     storm-constrain control

unicast-suppression

Use unicast-suppression to enable unicast storm suppression and set the unicast storm suppression threshold.

Use undo unicast-suppression to restore the default.

Syntax

unicast-suppression { ratio | pps max-pps | kbps max-kbps }

undo unicast-suppression

Default

Ethernet interfaces do not suppress unicast traffic.

Views

Layer 2 Ethernet interface view

Predefined user roles

network-admin

mdc-admin

Parameters

ratio: Sets the unicast suppression threshold as a percentage of the maximum interface rate. The value range for this argument (in percentage) is 0 to 100. The smaller the percentage, the less unicast traffic is allowed to pass through.

pps max-pps: Specifies the maximum number of unicast packets that the interface can forward per second. The value range for the max-pps argument (in pps) is 0 to 1.4881 × the maximum interface rate. For example, the value range for the argument is 0 to 59524000 on a 40-GE interface.

kbps max-kbps: Specifies the maximum number of kilobits of unicast traffic that the Ethernet interface can forward per second. The value range for this argument (in kbps) is 0 to the maximum interface rate.

Usage guidelines

You can use the unicast storm suppression function to limit the size of unicast traffic on an interface. When the unicast traffic on the interface exceeds this threshold, the system discards packets until the unicast traffic drops below this threshold.

Both the storm-constrain and unicast-suppression can suppress unicast storm on a port. The storm-constrain command uses software to suppress unicast traffic, and it affects the device performance to a certain extent. The unicast-suppression command use the chip to physically suppress unicast traffic, and it has less influence on the device performance than the storm-constrain command. Do not configure the storm constrain command and the unicast-suppression command at the same time. Otherwise, the unicast traffic suppression result is not determined.

When you configure the suppression threshold in kbps, the actual suppression threshold might be different from the configured one as follows:

·     If the configured value is smaller than 64, the value of 64 takes effect.

·     If the configured value is greater than 64 but not an integer multiple of 64, the integer multiple of 64 that is greater than and closest to the configured value takes effect.

To determine the suppression threshold that takes effect, see the prompts on the device.

Examples

# Set the unicast storm suppression threshold to 10000 kbps on FortyGigE 1/0/1.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] unicast-suppression kbps 10000

The actual value is 10048 on port FortyGigE1/0/1 currently.

The output shows the configured threshold is 10000 kbps, but the value that takes effect is 10048 kbps (157 times of 64), because the chip only supports step 64.

Related commands

·     broadcast-suppression

·     multicast-suppression

Layer 3 Ethernet interface or subinterface commands

mtu

Use mtu to set the MTU for an Ethernet interface or subinterface.

Use undo mtu to restore the default.

Syntax

mtu size

undo mtu

Default

The MTU for an Ethernet interface or subinterface is 1500 bytes.

Views

Layer 3 Ethernet interface view, Layer 3 Ethernet subinterface view

Predefined user roles

network-admin

mdc-admin

Parameters

size: Sets the MTU in bytes. For versions earlier than Release 1138P01, the value range for this argument is 46 to 1560 bytes. For Release 1138P01 and later versions, the value range for this argument is 46 to 9008 bytes.

Usage guidelines

The ip mtu or mtu command takes effect only on packets sent to the CPU for software forwarding, including packets destined to or sourced from the interface.

If both the mtu and ip mtu commands are configured on an interface, the MTU set by the ip mtu command is used for fragmentation. Configure an appropriate MTU to avoid packet fragmentation. For more information about the ip mtu command, see Layer 3—IP Services Command Reference.

Examples

# Set the MTU to 1492 bytes for the Layer 3 Ethernet interface FortyGigE 1/0/1.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] mtu 1492


Loopback, null, and inloopback interface commands

bandwidth

Use bandwidth to configure the expected bandwidth of an interface.

Use undo bandwidth to restore the default.

Syntax

bandwidth bandwidth-value

undo bandwidth

Default

The expected bandwidth of a loopback interface is 0 kbps.

Views

Loopback interface view

Predefined user roles

network-admin

mdc-admin

Parameters

bandwidth-value: Specifies the expected bandwidth in the range of 1 to 400000000 kbps.

Usage guidelines

The expected bandwidth of an interface affects the following items:

·     Bandwidth assignment with CBQ. For more information, see ACL and QoS Configuration Guide.

·     Link costs in OSPF and IS-IS. For more information, see Layer 3—IP Routing Configuration Guide.

Examples

# Set the expected bandwidth of Loopback 1 to 1000 kbps.

<Sysname> system-view

[Sysname] interface loopback 1

[Sysname-LoopBack1] bandwidth 1000

default

Use default to restore the default settings for a loopback or null interface.

Syntax

default

Views

Loopback interface view, null interface view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

CAUTION

CAUTION:

The default command might interrupt ongoing network services. Make sure you are fully aware of the impacts of this command before using it on a live network.

 

This command might fail to restore the default settings for some commands for reasons such as command dependencies and system restrictions. Use the display this command in interface view to identify these commands, and then use their undo forms or follow the command reference to individually restore their default settings. If your restoration attempt still fails, follow the error message instructions to resolve the problem.

Examples

# Restore the default settings for interface loopback 1.

<Sysname> system-view

[Sysname] interface loopback 1

[Sysname-LoopBack1] default

description

Use description to set a description for an interface.

Use undo description to restore the default.

Syntax

description text

undo description

Default

The description of a loopback or null interface is the interface name plus Interface (for example, LoopBack1 Interface).

Views

Loopback interface view, null interface view

Predefined user roles

network-admin

mdc-admin

Parameters

text: Specifies an interface description, a string of 1 to 255 characters.

Usage guidelines

Configure a description for an interface for easy identification and management purposes.

You can use the display interface command to view the configured description.

Examples

# Set the description to for RouterID for interface loopback 1.

<Sysname> system-view

[Sysname] interface loopback 1

[Sysname-LoopBack1] description for RouterID

display interface inloopback

Use display interface inloopback to display information about the inloopback interface.

Syntax

display interface [ inloopback [ 0 ] ] [ brief [ description ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

0: Specifies interface Inloopback 0.

brief: Displays brief interface information. If you do not specify this keyword, the command displays detailed interface information.

description: Displays complete interface descriptions. If you do not specify this keyword, the command displays only the first 27 characters of interface descriptions. The description of an inloopback interface is always InLoopBack0 Interface and cannot be configured.

Usage guidelines

If the inloopback keyword is not specified, the command displays information about all interfaces of the device.

If the inloopback keyword is specified but the 0 keyword is not specified, the command displays information about interface Inloopback 0. This is because the device has only one inloopback interface Inloopback 0.

Examples

# Display detailed information about interface Inloopback 0.

<Sysname> display interface inloopback 0

InLoopBack0

Current state: UP

Line protocol state: UP (spoofing)

Description: InLoopBack0 Interface

Bandwidth: 0kbps

Maximum transmission unit: 1536

Internet protocol processing: Disabled

Physical: InLoopBack

Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Input: 0 packets, 0 bytes, 0 drops

Output: 0 packets, 0 bytes, 0 drops

Table 12 Command output

Field

Description

Current state

Physical layer state of the interface, which is always UP, meaning that the inloopback interface can receive and transmit packets.

Line protocol state

Data link layer protocol state of the interface, which is always UP (spoofing). UP (spoofing) means that the data link layer protocol state of the interface is up, but the link is an on-demand link or is not present.

Description

Description string of the interface, which is always InLoopBack0 Interface and cannot be configured.

Bandwidth

Expected bandwidth of the interface.

Maximum transmission unit

MTU of the interface, which is always 1536 and cannot be configured

Internet protocol processing: Disabled

IP address configuration is disabled on the inloopback interface.

Physical: InLoopBack

The physical type of the interface is inloopback.

Last 300 seconds input rate:  0 bytes/sec, 0 bits/sec, 0 packets/sec

Average input rate during the last 300 seconds:

·     bytes/sec—Average number of bytes received per second.

·     bits/sec—Average number of bits received per second.

·     packets/sec—Average number of packets received per second.

Last 300 seconds output rate:  0 bytes/sec, 0 bits/sec, 0 packets/sec

Average output rate over the last 300 seconds:

·     bytes/sec—Average number of bytes sent per second.

·     bits/sec—Average number of bits sent per second.

·     packets/sec—Average number of packets sent per second.

Input: 0 packets, 0 bytes, 0 drops

Total number and size (in bytes) of incoming packets of the interface and the number of dropped packets.

Output: 0 packets, 0 bytes, 0 drops

Total number and size (in bytes) of outgoing packets of the interface and the number of dropped packets.

 

# Display brief information about interface Inloopback 0.

<Sysname> display interface inloopback 0 brief

Brief information on interfaces in route mode:

Link: ADM - administratively down; Stby - standby

Protocol: (s) - spoofing

Interface            Link Protocol Primary IP         Description

InLoop0              UP   UP(s)    --

# Display brief information about interface Inloopback 0, including the full description of the inloopback interface.

<Sysname> display interface inloopback 0 brief description

Brief information on interfaces in route mode:

Link: ADM - administratively down; Stby - standby

Protocol: (s) - spoofing

Interface            Link Protocol Primary IP         Description

InLoop0              UP   UP(s)    --

Table 13 Command output

Field

Description

Brief information on interfaces in route mode

Brief information about the inloopback interface.

Link: ADM - administratively down; Stby - standby

Explains the Link field values:

·     ADM—The interface has been shut down by the network administrator. To recover its physical layer state, run the undo shutdown command.

·     Stby—The interface is a standby interface.

Protocol: (s) - spoofing

Explains the Protocol field value.

(s) represents spoofing. If the data link layer protocol of an interface is up, but its link is an on-demand link or is not present, the Protocol field displays UP(s). This attribute is typical of interface Null 0, Inloopback 0, and loopback interfaces.

Interface

Interface name.

Link

Physical layer state of the interface, which is always UP.

Protocol

Data link layer protocol state of the interface, which is always UP(s).

Primary IP

IP address of the interface.

Because inloopback interfaces do not support CLI configuration, this field does not display a value.

Description

Interface description configured by using the description command.

Because inloopback interfaces do not support CLI configuration, this field does not display a value.

 

display interface loopback

Use display interface loopback to display information about the specified or all existing loopback interfaces.

Syntax

display interface [ loopback ] [ brief [ down ] ]

display interface [ loopback [ interface-number ] ] [ brief [ description ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

interface-number: Specifies a loopback interface by its number, which can be the number of any existing loopback interface. If you do not specify this argument, the command displays information about all existing loopback interfaces on the device.

brief: Displays brief interface information. If you do not specify this keyword, the command displays detailed interface information.

down: Displays information about interfaces in down state and the causes. Without this keyword, the command displays information about interfaces in all states.

description: Displays complete interface descriptions. If you do not specify this keyword, the command displays only the first 27 characters of interface descriptions.

Usage guidelines

This command is supported only after a loopback interface is created.

If the loopback keyword is not specified, the command displays information about all interfaces of the device.

If the loopback keyword is specified but the interface-number argument is not specified, the command displays information about all existing loopback interfaces.

Examples

# Display detailed information about interface loopback 0.

<Sysname> display interface loopback 0

LoopBack0

Current state: UP

Line protocol state: UP (spoofing)

Description: LoopBack0 Interface

Bandwidth: 0kbps

Maximum transmission unit: 1536

Internet protocol processing: Disabled

Physical: Loopback

Last clearing of counters:  Never

Last 300 seconds input rate:  0 bytes/sec, 0 bits/sec, 0 packets/sec

Last 300 seconds output rate:  0 bytes/sec, 0 bits/sec, 0 packets/sec

Input: 0 packets, 0 bytes, 0 drops

Output: 0 packets, 0 bytes, 0 drops

Table 14 Command output

Field

Description

Current state

Physical layer state of the loopback interface:

·     UP—The loopback interface can receive and transmit packets.

·     Administratively DOWN—The interface was manually shut down by using the shutdown command.

Line protocol state

Data link layer protocol state of the interface. UP (spoofing) means that the data link layer protocol state of the interface is up, but the link is an on-demand link or is not present.

Description

Description string of the interface.

Bandwidth

Expected bandwidth of the interface.

Maximum transmission unit

MTU of the interface.

Internet protocol processing: Disabled

Indicates that the interface cannot process Layer 3 packets (displayed when the interface is not configured with an IP address).

Internet address

Primary IP address of the interface (displayed when the interface is configured with a primary IP address).

Physical: Loopback

The physical type of the interface is loopback.

Last clearing of counters

Time when statistics on the logical interface were last cleared by using the reset counters interface command.

If the statistics of the interface have never been cleared by using the reset counters interface command since the device started, this field displays Never.

Last 300 seconds input rate:  0 bytes/sec, 0 bits/sec, 0 packets/sec

Average input rate during the last 300 seconds:

·     bytes/sec—Average number of bytes received per second.

·     bits/sec—Average number of bits received per second.

·     packets/sec—Average number of packets received per second.

Last 300 seconds output rate:  0 bytes/sec, 0 bits/sec, 0 packets/sec

Average output rate over the last 300 seconds:

·     bytes/sec—Average number of bytes sent per second.

·     bits/sec—Average number of bits sent per second.

·     packets/sec—Average number of packets sent per second.

Input: 0 packets, 0 bytes, 0 drops

Total number and size (in bytes) of incoming packets of the interface and the number of dropped packets.

Output: 0 packets, 0 bytes, 0 drops

Total number and size (in bytes) of outgoing packets of the interface and the number of dropped packets.

 

# Display brief information about all loopback interfaces.

<Sysname> display interface loopback brief

Brief information on interfaces in route mode:

Link: ADM - administratively down; Stby - standby

Protocol: (s) - spoofing

Interface            Link Protocol Primary IP         Description

Loop1                UP   UP(s)    --              aaaaaaaaaaaaaaaaaaaaaaaaaaa

# Display brief information about all existing loopback interfaces, including the full description of each loopback interface.

<Sysname> display interface loopback brief description

Brief information on interfaces in route mode:

Link: ADM - administratively down; Stby - standby

Protocol: (s) - spoofing

Interface            Link Protocol Primary IP         Description

Loop1                UP   UP(s)    --              aaaaaaaaaaaaaaaaaaaaaaaaaaaaa

Aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa

# Display information about all loopback interfaces in down state and the causes.

<Sysname> display interface loopback brief down

Brief information on interfaces in route mode:

Link: ADM - administratively down; Stby - standby

Interface            Link Cause

Loop1                ADM  Administratively

Table 15 Command output

Field

Description

Brief information on interfaces in route mode:

Brief information about loopback interfaces.

Link: ADM - administratively down; Stby - standby

Explains the Link field values:

·     ADMRepresents administratively down. The interface has been shut down by the network administrator. To recover its physical layer state, run the undo shutdown command.

·     StbyRepresents standby. The interface is a standby interface. To view the primary interface information, use the display standby state command in High Availability Command Reference.

Protocol: (s) - spoofing

Explains the Protocol field value.

(s) represents spoofing. If the data link layer protocol of an interface is up, but its link is an on-demand link or is not present, the Protocol field displays UP(s). This attribute is typical of interface Null 0, Inloopback 0, and loopback interfaces.

Interface

Interface name.

Link

Physical layer state of the interface:

·     UP—The interface is up.

·     DOWN—The interface is physically down.

·     ADM—The interface has been administratively shut down. To recover its physical state, run the undo shutdown command.

·     Stby—The interface is a standby interface.

Protocol

Data link layer protocol state of the interface.

Description

Interface description configured by using the description command. If the description keyword is not specified in the display interface brief command, the Description field allows a maximum of 27 characters. If the description keyword is specified in the display interface brief command, the field displays the full interface description.

Cause

Cause of the interface down event. If the interface has been shut down by using the shutdown command, this field displays Administratively. To restore the physical state of the interface, execute the undo shutdown command.

 

Related commands

·     interface loopback

·     reset counters interface loopback

display interface null

Use display interface null to display information about the null interface.

Syntax

display interface [ null [ 0 ] ] [ brief [ description ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

0: Specifies interface Null 0.

brief: Displays brief interface information. If you do not specify this keyword, the command displays detailed interface information.

description: Displays complete interface descriptions. If you do not specify this keyword, the command displays only the first 27 characters of interface descriptions.

Usage guidelines

If the null keyword is not specified, the command displays information about all interfaces of the device.

If the null keyword is specified but the 0 keyword is not specified, the command displays information about interface Null 0. This is because the device has only one null interface Null 0.

Examples

# Display detailed information about interface Null 0.

<Sysname> display interface null 0

NULL0

Current state: UP

Line protocol state: UP (spoofing)

Description: NULL0 Interface

Bandwidth: 0kbps

Maximum transmission unit: 1500

Internet protocol processing: Disabled

Physical: NULL DEV

Last clearing of counters: Never

Last 300 seconds input rate:  0 bytes/sec, 0 bits/sec, 0 packets/sec

Last 300 seconds output rate:  0 bytes/sec, 0 bits/sec, 0 packets/sec

Input: 0 packets, 0 bytes, 0 drops

Output: 0 packets, 0 bytes, 0 drops

# Display brief information about interface Null 0.

<Sysname> display interface null 0 brief

Brief information on interfaces in route mode:

Link: ADM - administratively down; Stby - standby

Protocol: (s) - spoofing

Interface            Link Protocol Primary IP         Description

NULL0                UP   UP(s)    --              aaaaaaaaaaaaaaaaaaaaaaaaaaa

# Display brief information about interface Null 0, including the full description of the null interface.

<Sysname> display interface null 0 brief description

Brief information on interfaces in route mode:

Link: ADM - administratively down; Stby - standby

Protocol: (s) - spoofing

Interface            Link Protocol Primary IP         Description

NULL0                UP   UP(s)    --              aaaaaaaaaaaaaaaaaaaaaaaaaaaaa

aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa

For the command output, see Table 14 and Table 15.

Related commands

·     interface null

·     reset counters interface null

interface loopback

Use interface loopback to create a loopback interface and enter loopback interface view.

Use undo interface loopback to remove a loopback interface.

Syntax

interface loopback interface-number

undo interface loopback interface-number

Default

No loopback interface exists.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

interface-number: Specifies a loopback interface by its number in the range of 0 to 1023.

Usage guidelines

The physical layer state and link layer protocols of a loopback interface are always up unless the loopback interface is manually shut down. You can establish a connection to a loopback interface to do the following:

·     Prevent the connection from being affected by the physical state of the interface.

·     Improve the reliability of the connection.

For example, you can:

·     Configure a loopback interface as the source interface for establishing an FTP connection.

·     Use the loopback interface address as the Router ID in BGP.

Examples

# Create interface loopback 1.

<Sysname> system-view

[Sysname] interface loopback 1

[Sysname-LoopBack1]

interface null

Use interface null to enter null interface view.

Syntax

interface null 0

Default

A device has only one null interface (Null 0), which cannot be created or deleted.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

0: Specifies interface Null 0. The null interface number is always 0.

Examples

# Enter Null 0 interface view.

<Sysname> system-view

[Sysname] interface null 0

[Sysname-NULL0]

reset counters interface loopback

Use reset counters interface loopback to clear the statistics on the specified or all loopback interfaces.

Syntax

reset counters interface loopback [ interface-number ]

Views

User view

Predefined user roles

network-admin

mdc-admin

Parameters

interface-number: Specifies a loopback interface by its number, which can be the number of any existing loopback interface. If you do not specify the interface-number argument, the command clears the statistics on all loopback interfaces.

Usage guidelines

To determine whether a loopback interface works correctly within a period by collecting the traffic statistics within that period, first use the reset counters interface [ loopback [ interface-number ] ] command to clear the statistics. Then have the interface automatically collect the statistics.

This command is available only if at least one loopback interface has been created.

Examples

# Clear the statistics on loopback interface Loopback 1.

<Sysname> reset counters interface loopback 1

Related commands

display interface loopback

reset counters interface null

Use reset counters interface null to clear the statistics on the null interface.

Syntax

reset counters interface [ null [ 0 ] ]

Views

User view

Predefined user roles

network-admin

mdc-admin

Parameters

0: Specifies the number of the null interface, which is always 0.

Usage guidelines

To determine whether the null interface works correctly within a period by collecting the traffic statistics within that period, first use the reset counters interface [ null [ 0 ] ] command to clear the statistics. Then have the interface automatically collect the statistics.

Examples

# Clear the statistics on interface Null 0.

<Sysname> reset counters interface null 0

Related commands

display interface null

shutdown

Use shutdown to shut down a loopback interface.

Use undo shutdown to bring up a loopback interface.

Syntax

shutdown

undo shutdown

Default

A loopback interface is up.

Views

Loopback interface view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

Use the shutdown command with caution, because the command disconnects the connection of the interface and disables the interface from communicating.

Examples

# Shut down interface loopback 1.

<Sysname> system-view

[Sysname] interface loopback 1

[Sysname-LoopBack1] shutdown

 


Bulk interface configuration commands

display interface range

Use display interface range to display information about interface ranges configured through the interface range name command.

Syntax

display interface range [ name name ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

name name: Specifies an interface range by its name, a case-sensitive string of 1 to 32 characters. If you do not specify an interface range name, this command displays information about all existing interface ranges.

Examples

# Display information about all existing interface ranges configured through the interface range name command.

<Sysname> display interface range

Interface range name t2 FortyGigE1/0/1 FortyGigE1/0/2

Interface range name test FortyGigE1/0/11 FortyGigE1/0/12

The output shows that interfaces FortyGigE 1/0/1 and FortyGigE 1/0/2 are added to interface range named t2, and interfaces FortyGigE 1/0/11 and FortyGigE 1/0/12 are added to interface range named test.

Related commands

interface range name

interface range

Use interface range to create an interface range and enter the interface range view.

Syntax

interface range interface-list

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

interface-list: Specifies an interface list in the format of interface-list = { interface-type interface-number [ to interface-type interface-number ] }&<1-24>. The interface-type interface-number argument specifies an interface by its type and number. &<1-24> indicates that you can specify up to 24 interfaces or interface lists. When you specify the to keyword in interface-type interface-number1 to interface-type interface-number2, the interfaces before and after the to keyword must be on the same interface card. The last-tier value of the interface number before to must not be greater than the one after to, and the values of the other tiers of the interface number before to must be the same as the one after to.

Usage guidelines

Use this command to enter interface range view to bulk configure multiple interfaces with the same feature instead of configuring them one by one. For example, run the shutdown command in interface range view to shut down a range of interfaces.

In interface range view, only the commands supported by the first interface are available. The first interface is specified with the interface range command. To view these commands in the interface range, enter the interface range view, and then enter ? at the prompt.

After a command is executed in interface range view, one of the following situations might occur:

·     The system stays in interface range view and displays no error messages. It means that the execution succeeded on all member interfaces in the interface range.

·     The system displays an error message and stays in interface range view. It means that the execution failed on member interfaces in the interface range.

¡     If the execution failed on the first member interface in the interface range, the command is not executed on any member interfaces.

¡     If the execution failed on non-first member interfaces, the command takes effect on the other member interfaces.

·     The system returns to system view. It means that:

¡     The command is supported in both system view and interface view.

¡     The execution failed on a member interface in interface range view and succeeded in system view.

¡     The command is not executed on the subsequent member interfaces.

You can use the display this command to verify the configuration in interface view of each member interface. In addition, if the configuration in system view is not needed, use the undo form of the command to remove the configuration.

To verify the configuration of the first interface in the interface range, execute the display this command in interface range view.

When you bulk configure interfaces, follow these restrictions and guidelines:

·     If you cannot enter the view of an interface by using the interface interface-type interface-number command, do not configure the interface as the first interface in the interface range.

·     Do not assign an aggregate interface together with any of its member interfaces to an interface range at the same time. Some commands, after being executed on both an aggregate interface and its member interfaces, can break up the aggregation.

·     No limit is set on the maximum number of interfaces in an interface range. The more interfaces in an interface range, the longer the command execution time.

Examples

# Shut down interfaces FortyGigE 1/0/1 through FortyGigE 1/0/24, VLAN interface 2.

<Sysname> system-view

[Sysname] interface range fortygige 1/0/1 to fortygige 1/0/24 vlan-interface 2

[Sysname-if-range] shutdown

interface range name

Use interface range name name interface interface-list to create an interface range, configure a name for the interface range, and enter the interface range view.

Use interface range name name without the interface keyword to enter the view of an interface range with the specified name.

Use undo interface range name to delete the interface range with the specified name.

Syntax

interface range name name [ interface interface-list ]

undo interface range name name

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

name: Specifies an interface range name, a case-sensitive string of 1 to 32 characters.

interface-list: Specifies an interface list in the format of interface-list = { interface-type interface-number [ to interface-type interface-number ] }&<1-24>. The interface-type interface-number argument specifies an interface by its type and number. &<1-24> indicates that you can specify up to 24 interfaces or interface lists. When you specify the to keyword in interface-type interface-number1 to interface-type interface-number2, the interfaces before and after the to keyword must be on the same interface card. The last-tier value of the interface number before to must not be greater than the one after to, and the values of the other tiers of the interface number before to must be the same as the one after to.

Usage guidelines

You can use this command to assign a name to an interface range and can specify this name rather than the interface range to enter the interface range view.

In interface range view, only the commands supported by the first interface are available. The first interface is specified with the interface range command. To view the commands supported by the first interface in the interface range, enter the interface range view and enter a question mark (?) at the command line interface prompt.

After a command is executed in interface range view, one of the following situations might occur:

·     The system stays in interface range view and displays no error messages. It means that the execution succeeded on all member interfaces in the interface range.

·     The system displays an error message and stays in interface range view. It means that the execution failed on member interfaces in the interface range.

¡     If the execution failed on the first member interface in the interface range, the command is not executed on any member interfaces.

¡     If the execution failed on non-first member interfaces, the command takes effect on the other member interfaces.

·     The system returns to system view. It means that:

¡     The command is supported in both system view and interface view.

¡     The execution failed on a member interface in interface range view and succeeded in system view.

¡     The command is not executed on the subsequent member interfaces.

You can use the display this command to verify the configuration in interface view of each member interface. In addition, if the configuration in system view is not needed, use the undo form of the command to remove the configuration.

To verify the configuration of the first interface in the interface range, execute the display this command in interface range view.

To view the member interfaces of an interface range, use the display interface range command.

When you bulk configure interfaces, follow these restrictions and guidelines:

·     If you cannot enter the view of an interface by using the interface interface-type interface-number command, do not configure the interface as the first interface in the interface range.

·     Do not assign an aggregate interface and any of its member interfaces to an interface range at the same time. Some commands, after being executed on both an aggregate interface and its member interfaces, can break up the aggregation.

·     No limit is set on the maximum number of interfaces in an interface range. The more interfaces in an interface range, the longer the command execution time.

·     The maximum number of interface range names is only limited by the system resources. As a best practice to guarantee bulk interface configuration performance, configure fewer than 1000 interface range names.

Examples

# Add FortyGigE 1/0/1 through FortyGigE 1/0/12 to interface range named myEthPort, and enter the interface range view.

<Sysname> system-view

[Sysname] interface range name myEthPort interface fortygige 1/0/1 to fortygige 1/0/12

[Sysname-if-range-myEthPort]

# Enter the view of interface range named myEthPort.

<Sysname> system-view

[Sysname] interface range name myEthPort

[Sysname-if-range-myEthPort]

Related commands

display interface range


MAC address table commands

This document covers the configuration of unicast MAC address entries, including static, dynamic, blackhole, and multiport unicast MAC address entries. For more information about configuring static multicast MAC address entries, see IP Multicast Configuration Guide.

display mac-address

Use display mac-address to display MAC address entries.

Syntax

display mac-address [ mac-address [ vlan vlan-id ] | [ [ dynamic | static ] [ interface interface-type interface-number ] | blackhole | multiport ] [ vlan vlan-id ] [ count ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

mac-address: Specifies a MAC address in the format of H-H-H. When entering a MAC address, you can omit the leading zeros in each H section. For example, enter f-e2-1 for 000f-00e2-0001.

vlan vlan-id: Specifies a VLAN. The value range for the vlan-id argument is 1 to 4094.

dynamic: Displays dynamic MAC address entries.

static: Displays static MAC address entries.

interface interface-type interface-number: Specifies an interface by its type and number.

blackhole: Displays blackhole MAC address entries.

multiport: Displays multiport unicast MAC address entries.

count: Displays only the number of MAC address entries that match all entry attributes you specify in the command. Detailed information about MAC address entries is not displayed. For example, you can use the display mac-address vlan 20 dynamic count command to display the number of dynamic entries for VLAN 20. If no entry attribute is specified, the command displays the total number of entries in the MAC address table. If this keyword is not specified, the command displays detailed information about specified MAC address entries.

Usage guidelines

A MAC address entry includes a destination MAC address, an outgoing interface, and a VLAN ID.

If you execute this command without specifying any parameters, it displays all MAC address entries.

This command displays dynamic MAC address entries for an aggregate interface only when the aggregate interface has at least one Selected member port.

Examples

# Display MAC address entries for VLAN 100.

<Sysname> display mac-address vlan 100

MAC Address      VLAN ID    State            Port/NickName            Aging

0001-0101-0101   100        Multiport        FGE1/0/1                   N

                                             FGE1/0/2

0033-0033-0033   100        Blackhole        N/A                        N

0000-0000-0002   100        Static           FGE1/0/3                   N

00e0-fc00-5829   100        Learned          FGE1/0/4                   Y

# Display the total number of MAC address entries.

<Sysname> display mac-address count

1 mac address(es) found.

Table 16 Command output

Field

Description

VLAN ID

ID of the VLAN to which the outgoing interface of the MAC address entry belongs.

State

MAC address entry state:

·     StaticStatic MAC address entry.

·     LearnedDynamic MAC address entry. Dynamic entries can be manually configured, or learned.

·     BlackholeBlackhole MAC address entry.

·     MultiportMultiport unicast MAC address entry.

Port/NickName

When the field displays an interface name, the field indicates the outgoing interface for packets that are destined for the MAC address. This field displays N/A for a blackhole MAC address entry.

When the field displays a 16-bit number in hexadecimal format (for example, 0x12ab), the field indicates the RB through which the packets destined for the MAC address leaves the TRILL network.

Switches of this series do not support the TRILL function in the current software version.

Aging

Aging time:

·     Y—The entry is aging.

·     N—The entry does not age.

mac address(es) found

Number of matching MAC address entries.

 

Related commands

·     mac-address

·     mac-address timer

display mac-address aging-time

Use display mac-address aging-time to display the aging timer for dynamic MAC address entries.

Syntax

display mac-address aging-time

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Examples

# Display the aging timer for dynamic MAC address entries.

<Sysname> display mac-address aging-time

MAC address aging time: 300s.

Related commands

mac-address timer

display mac-address mac-learning

Use display mac-address mac-learning to display the global MAC address learning status and the MAC learning status of the specified interface or all interfaces.

Syntax

display mac-address mac-learning [ interface interface-type interface-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, the command displays the global MAC address learning status and the MAC address learning status of all interfaces.

Examples

# Display the global MAC address learning status and the MAC learning status of all interfaces.

<Sysname> display mac-address mac-learning

Global MAC address learning status: Enabled.

 

Port                          Learning Status

FGE1/0/1                      Enabled

FGE1/0/2                      Enabled

FGE1/0/3                      Enabled

FGE1/0/4                      Enabled

Table 17 Command output

Field

Description

Global MAC address learning status

Global MAC address learning status:

·     Enabled.

·     Disabled.

Learning Status

MAC address learning status of an interface:

·     Enabled.

·     Disabled.

 

Related commands

mac-address mac-learning enable

display mac-address statistics

Use display mac-address statistics to display MAC address table statistics.

Syntax

display mac-address statistics

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Usage guidelines

This command displays the number of MAC address entries per type and the maximum number of MAC address entries allowed for each type.

Examples

# Display the statistics of the MAC address table.

<Sysname> display mac-address statistics

MAC Address Count:

Dynamic Unicast Address (Learned) Count:                         0

Dynamic Unicast Address (Security-service-defined) Count:        0

Static Unicast Address (User-defined) Count:                     0

Static Unicast Address (System-defined) Count:                   0

Total Unicast MAC Addresses In Use:                              0

Total Unicast MAC Addresses Available:                           262143

Multicast and Multiport MAC Address Count:                       1

Static Multicast and Multiport MAC Address (User-defined) Count: 1

Total Multicast and Multiport MAC Addresses Available:           256

Table 18 Command output

Field

Description

Dynamic Unicast Address (Learned) Count

Number of dynamic unicast MAC address entries triggered by packets.

Dynamic Unicast Address (Security-service-defined) Count

Number of dynamic unicast MAC address entries triggered by the security service.

Static Unicast Address (User-defined) Count

Number of static unicast MAC address entries added by users.

Static Unicast Address (System-defined) Count

Number of static unicast MAC address entries added by the system.

Total Unicast MAC Addresses In Use

Total number of unicast MAC address entries.

Total Unicast MAC Addresses Available

Maximum number of unicast MAC address entries allowed.

Multicast and Multiport MAC Address Count

Number of multicast and multiport unicast MAC address entries.

Static Multicast and Multiport MAC Address (User-defined) Count

Number of static multicast and multiport unicast MAC address entries added by users.

Total Multicast and Multiport MAC Addresses Available

Maximum number of multicast and multiport unicast MAC address entries allowed.

 

mac-address (interface view)

Use mac-address to add or modify a MAC address entry on an interface.

Use undo mac-address to delete a MAC address entry on an interface.

Syntax

mac-address { dynamic | multiport | static } mac-address vlan vlan-id

undo mac-address { dynamic | multiport | static } mac-address vlan vlan-id

Default

An interface is not configured with any MAC address entry.

Views

Layer 2 Ethernet interface view, Layer 2 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Parameters

dynamic: Specifies dynamic MAC address entries.

static: Specifies static MAC address entries.

multiport: Specifies multiport unicast MAC address entries. A frame whose destination MAC address matches a multiport unicast MAC address entry is sent out of multiple ports.

mac-address: Specifies a MAC address in the format of H-H-H, excluding multicast and all-zero MAC addresses. When entering a MAC address, you can omit the leading zeros in each H section. For example, enter f-e2-1 for 000f-00e2-0001.

vlan vlan-id: Specifies an existing VLAN to which the specified interface belongs. The value range for the vlan-id argument is 1 to 4094.

Usage guidelines

Typically, the device automatically builds the MAC address table by learning the source MAC addresses of incoming frames on each interface. However, you can manually configure static MAC address entries. For a MAC address, a manually configured static entry takes precedence over a dynamically learned entry. To improve the security for the user device connected to an interface, manually configure a static entry to bind the user device to the interface. Then, the frames destined for the user device (for example, Host A) are always sent out of the interface. Other hosts using the forged MAC address of Host A cannot obtain the frames destined for Host A.

The MAC address entries configuration cannot survive a reboot unless you save it. The dynamic MAC address entries, however, are lost upon reboot regardless of whether you save the configuration.

This command displays manually configured dynamic MAC address entries for an aggregate interface only when the aggregate interface has at least one Selected member port.

Examples

# Add a static entry for MAC address 000f-e201-0101 on interface FortyGigE 1/0/1 that belongs to VLAN 2.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] mac-address static 000f-e201-0101 vlan 2

# Add a static entry for MAC address 000f-e201-0101 on Layer 2 aggregate interface Bridge-Aggregation 1 that belongs to VLAN 1.

<Sysname> system-view

[Sysname] interface bridge-aggregation 1

[Sysname-Bridge-Aggregation1] mac-address static 000f-e201-0102 vlan 1

# Add a multiport unicast MAC address entry for MAC address 0001-0001-0101 on FortyGigE 1/0/1 and FortyGigE 1/0/2 that belong to VLAN 2.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] mac-address multiport 0001-0001-0101 vlan 2

[Sysname-FortyGigE1/0/1] quit

[Sysname] interface fortygige 1/0/2

[Sysname-FortyGigE1/0/2] mac-address multiport 0001-0001-0101 vlan 2

Related commands

·     display mac-address

·     mac-address (system view)

mac-address (system view)

Use mac-address to add or modify a MAC address entry.

Use undo mac-address to delete one or all MAC address entries.

Syntax

mac-address { dynamic | static } mac-address interface interface-type interface-number vlan vlan-id

mac-address blackhole mac-address vlan vlan-id

mac-address multiport mac-address interface interface-list vlan vlan-id

undo mac-address [ [ dynamic | static ] mac-address interface interface-type interface-number vlan vlan-id ]

undo mac-address [ blackhole | dynamic | static ] [ mac-address ] vlan vlan-id

undo mac-address [ dynamic | static ] interface interface-type interface-number

undo mac-address multiport mac-address interface interface-list vlan vlan-id

undo mac-address [ multiport ] [ [ mac-address ] vlan vlan-id ]

Default

The system is not configured with any MAC address entry.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

dynamic: Specifies dynamic MAC address entries.

static: Specifies static MAC address entries.

blackhole: Specifies blackhole MAC address entries. The packets whose destination MAC addresses match blackhole MAC address entries are dropped.

multiport: Specifies multiport unicast MAC address entries. A frame whose destination MAC address matches a multiport unicast MAC address entry is sent out of multiple ports.

mac-address: Specifies a MAC address in the format of H-H-H, excluding multicast and all-zero MAC addresses. When entering a MAC address, you can omit the leading zeros in each H section. For example, enter f-e2-1 for 000f-00e2-0001.

vlan vlan-id: Specifies an existing VLAN to which the interface belongs. The value range for the vlan-id argument is 1 to 4094.

interface interface-type interface-number: Specifies an outgoing interface by its type and number.

interface interface-list: Specifies interfaces in the format of { interface-type interface-number [ to interface-type interface-number ] } &<1-4>. The interface type can be the Layer 2 Ethernet interface or Layer 2 aggregate interface. &<1-4> specifies that you can configure up to four interfaces or interface ranges.

Usage guidelines

Typically, the device automatically builds the MAC address table by learning the source MAC addresses of incoming frames on each interface. However, you can manually configure static MAC address entries. For a MAC address, a manually configured static entry takes precedence over a dynamically learned entry. To improve the security for the user device connected to an interface, manually configure a static entry to bind the user device to the interface. Then, the frames destined for the user device (for example, Host A) are always sent out of the interface. Other hosts using the forged MAC address of Host A cannot obtain the frames destined for Host A.

To drop the packets with the specified source MAC addresses or destination MAC addresses, you can configure blackhole MAC address entries.

A multiport unicast MAC address entry is used to send frames with a specific destination MAC address out of multiple ports. When you execute this command for the first time, the command adds a MAC address entry. When you execute the command again with the same MAC address and VLAN but with different interfaces, this command adds the specified interfaces for this entry.

A static or blackhole MAC address entry can overwrite a dynamic MAC address entry, but not vice versa.

If you execute the undo mac-address command without specifying any parameters, this command deletes all unicast MAC address entries and static multicast MAC address entries.

You can delete all the MAC address entries (including unicast MAC address entries and static multicast MAC address entries) of the specified VLAN. You can also delete only one type (dynamic, static, blackhole, or multiport unicast) of MAC address entries. You can single out an interface and delete the corresponding unicast MAC address entries, but not the corresponding static multicast MAC address entries.

The MAC address entries configuration cannot survive a reboot unless you save it. The dynamic MAC address entries, however, are lost upon reboot regardless of whether you save the configuration.

Examples

# Add a static entry for MAC address 000f-e201-0101. All frames that are destined for this MAC address are sent out of interface FortyGigE 1/0/1, which belongs to VLAN 2.

<Sysname> system-view

[Sysname] mac-address static 000f-e201-0101 interface fortygige 1/0/1 vlan 2

# Add a multiport unicast MAC address entry for MAC address 000f-e201-0101 to send all frames destined for this MAC address out of FortyGigE 1/0/1 through FortyGigE 1/0/3 that belong to VLAN 2.

<Sysname> system-view

[Sysname] mac-address multiport 000f-e201-0101 interface fortygige 1/0/1 to fortygige 1/0/3 vlan 2

Related commands

·     display mac-address

·     mac-address (interface view)

mac-address mac-learning enable

Use mac-address mac-learning enable to enable MAC address learning.

Use undo mac-address mac-learning enable to disable MAC address learning.

Syntax

mac-address mac-learning enable

undo mac-address mac-learning enable

Default

MAC address learning is enabled.

Views

System view, Layer 2 Ethernet interface, Layer 2 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

To prevent the MAC address table from becoming saturated, you can disable MAC address learning.

For example, a number of packets with different source MAC addresses reaching a device can affect the MAC address table update. You can disable MAC address learning to avoid such attacks, but the following guidelines apply:

·     You can disable MAC address learning on a per-interface basis. If you disable MAC address learning globally, MAC address learning is disabled for all interfaces, and the device stops learning MAC addresses and cannot dynamically update the MAC address table.

·     Because disabling MAC address learning can result in broadcast storms, enable broadcast storm suppression after you disable MAC address learning on an interface. For more information about broadcast storm suppression, see Layer 2—LAN Switching Configuration Guide.

·     With MAC address learning enabled globally, you can disable MAC address learning for the specific interface.

When MAC address learning is disabled, the learned dynamic MAC addresses remain valid until they age out.

Examples

# Disable MAC address learning globally.

<Sysname> system-view

[Sysname] undo mac-address mac-learning enable

# Disable MAC address learning on interface FortyGigE 1/0/1.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] undo mac-address mac-learning enable

# Disable MAC address learning on interface Bridge-Aggregation 1.

<Sysname> system-view

[Sysname] interface bridge-aggregation 1

[Sysname-Bridge-Aggregation1] undo mac-address mac-learning enable

Related commands

display mac-address mac-learning

mac-address mac-learning ingress

Use mac-address mac-learning ingress to configure the device to learn MAC addresses at ingress.

Use undo mac-address mac-learning ingress to restore the default.

Syntax

mac-address mac-learning ingress

undo mac-address mac-learning ingress

Default

The device learns MAC addresses at egress.

Views

System view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

This command is available in Release 11xx.

The device can learn the source MAC address of a packet when it receives the packet or when it sends out the packet.

For the device to correctly learn source MAC addresses of Layer 3 forwarded packets, you must enable MAC address learning at ingress.

At egress, the source MAC address of Layer 3 forwarded packets is replaced by the outgoing interface's MAC address. The device cannot learn the original source MAC address.

Examples

# Enable MAC address learning at ingress.

<Sysname> system-view

[Sysname] mac-address mac-learning ingress

mac-address mac-roaming enable

Use mac-address mac-roaming enable to enable MAC address synchronization.

Use undo mac-address mac-roaming enable to restore the default.

Syntax

mac-address mac-roaming enable

undo mac-address mac-roaming enable

Default

MAC address synchronization is disabled.

Views

System view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

If ports on different cards of the same device or of different IRF member devices are selected ports from the same aggregation group, MAC address entries are synchronized among these cards regardless of whether MAC address synchronization is enabled. For more information about aggregation groups, see Layer 2—LAN Switching Configuration Guide.

The MAC address table size might vary with different cards. With MAC address synchronization enabled, MAC address table entries exceeding the table size of a card cannot be synchronized to the MAC address table.

Examples

# Enable MAC address synchronization.

<Sysname> system-view

[Sysname] mac-address mac-roaming enable

mac-address timer

Use mac-address timer to configure the aging timer for dynamic MAC address entries.

Use undo mac-address timer to restore the default.

Syntax

mac-address timer { aging seconds | no-aging }

undo mac-address timer

Default

The aging timer for dynamic MAC address entries is 300 seconds.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

aging seconds: Sets an aging timer for dynamic MAC address entries, in the range of 10 to 2400 seconds.

no-aging: Sets dynamic MAC address entries not to age.

Usage guidelines

To set the aging timer appropriately, follow these guidelines:

·     A long aging interval causes the MAC address table to retain outdated entries and fail to accommodate the most recent network changes.

·     A short aging interval results in removal of valid entries and unnecessary broadcasts that affect device performance.

Examples

# Set the aging time to 500 seconds for dynamic MAC address entries.

<Sysname> system-view

[Sysname] mac-address timer aging 500

Related commands

display mac-address aging-time


MAC Information commands

mac-address information enable (interface view)

Use mac-address information enable to enable MAC Information on an interface.

Use undo mac-address information enable to disable MAC Information on an interface.

Syntax

mac-address information enable { added | deleted }

undo mac-address information enable { added | deleted }

Default

MAC Information is disabled on an interface.

Views

Layer 2 Ethernet interface view

Predefined user roles

network-admin

mdc-admin

Parameters

added: Enables the device to record MAC address change information when a new MAC address is learned on an interface.

deleted: Enables the device to record MAC address change information when an existing MAC address is deleted.

Usage guidelines

Before you enable MAC Information on an interface, enable MAC Information globally.

Examples

# Enable MAC Information on FortyGigE 1/0/1 to enable FortyGigE 1/0/1 to record MAC address change information when learning a new MAC address.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] mac-address information enable added

Related commands

mac-address information enable (system view)

mac-address information enable (system view)

Use mac-address information enable to enable MAC Information globally.

Use undo mac-address information enable to disable MAC Information globally.

Syntax

mac-address information enable

undo mac-address information enable

Default

MAC Information is disabled globally.

Views

System view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

Before you enable MAC Information on an interface, enable MAC Information globally.

Examples

# Enable MAC Information globally.

<Sysname> system-view

[Sysname] mac-address information enable

Related commands

mac-address information enable (interface view)

mac-address information interval

Use mac-address information interval to set the MAC change notification interval.

Use undo mac-address information interval to restore the default.

Syntax

mac-address information interval interval-time

undo mac-address information interval

Default

The MAC change notification interval is 1 second.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

interval-time: Specifies the MAC change notification interval in the range of 1 to 20000 seconds.

Usage guidelines

To prevent syslog messages or SNMP notifications from being sent too frequently, set the MAC change notification interval to a larger value.

Examples

# Set the MAC change notification interval to 200 seconds.

<Sysname> system-view

[Sysname] mac-address information interval 200

mac-address information mode

Use mac-address information mode to set the MAC Information mode. The MAC Information mode specifies the type of messages (syslog messages or SNMP notifications) used to notify MAC changes.

Use undo mac-address information mode to restore the default.

Syntax

mac-address information mode { syslog | trap }

undo mac-address information mode

Default

SNMP notifications are sent to notify MAC changes.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

syslog: Specifies that the device sends syslog messages to notify MAC address changes.

trap: Specifies that the device sends SNMP notifications to notify MAC address changes.

Examples

# Configure the MAC Information mode as trap.

<Sysname> system-view

[Sysname] mac-address information mode trap

mac-address information queue-length

Use mac-address information queue-length to set the MAC Information queue length.

Use undo mac-address information queue-length to restore the default.

Syntax

mac-address information queue-length value

undo mac-address information queue-length

Default

The MAC Information queue length is 50.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

value: Specifies the MAC Information queue length in the range of 0 to 1000. The MAC Information queue length indicates the number of MAC change messages,.

Usage guidelines

If the MAC Information queue length is 0, the device sends a syslog message or SNMP notification immediately after learning or deleting a MAC address.

If the MAC Information queue length is not 0, the device stores MAC address changes in the queue:

·     The device overwrites the oldest MAC change written into the queue with the most recent MAC change when the following conditions exist:

¡     The MAC change notification interval does not expire.

¡     The queue has been exhausted.

·     The device sends syslog messages or SNMP notifications only if the MAC change notification interval expires.

Examples

# Set the MAC Information queue length to 600.

<Sysname> system-view

[Sysname] mac-address information queue-length 600


Ethernet link aggregation commands

bandwidth

Use bandwidth to set the expected bandwidth for an interface.

Use undo bandwidth to restore the default.

Syntax

bandwidth bandwidth-value

undo bandwidth

Default

The expected bandwidth (in kbps) is the interface baud rate divided by 1000.

Views

Layer 2 aggregate interface view, Layer 3 aggregate interface view, Layer 3 aggregate subinterface view

Predefined user roles

network-admin

mdc-admin

Parameters

bandwidth-value: Specifies the expected bandwidth in the range of 1 to 400000000 kbps.

Usage guidelines

The expected bandwidth of an interface affects the following items:

·     Bandwidth assignment with CBQ. For more information, see ACL and QoS Configuration Guide.

·     Link costs in OSPF and IS-IS. For more information, see Layer 3—IP Routing Configuration Guide.

Examples

# Set the expected bandwidth to 10000 kbps for Layer 2 aggregate interface Bridge-Aggregation 1.

<Sysname> system-view

[Sysname] interface bridge-aggregation 1

[Sysname-Bridge-Aggregation1] bandwidth 10000

default

Use default to restore the default settings for an aggregate interface.

Syntax

default

Views

Layer 2 aggregate interface view, Layer 3 aggregate interface view, Layer 3 aggregate subinterface view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

CAUTION

CAUTION:

The default command might interrupt ongoing network services. Make sure you are fully aware of the impacts of this command when you execute it on a live network.

 

This command might fail to restore the default settings for some commands for reasons such as command dependencies and system restrictions. Use the display this command in interface view to identify these commands, and then use their undo forms or follow the command reference to restore their default settings. If your restoration attempt still fails, follow the error message instructions to resolve the problem.

Examples

# Restore the default settings for Layer 2 aggregate interface Bridge-Aggregation 1.

<Sysname> system-view

[Sysname] interface bridge-aggregation 1

[Sysname-Bridge-Aggregation1] default

description

Use description to set a description for an interface.

Use undo description to restore the default.

Syntax

description text

undo description

Default

The description of an interface is the interface-name plus Interface. For example, the default description of Bridge-Aggregation 1 is Bridge-Aggregation1 Interface.

Views

Layer 2 aggregate interface view, Layer 3 aggregate interface view, Layer 3 aggregate subinterface view

Predefined user roles

network-admin

mdc-admin

Parameters

text: Specifies the interface description, a string of 1 to 255 characters.

Examples

# Set the description to connect to the lab for Layer 2 aggregate interface Bridge-Aggregation 1.

<Sysname> system-view

[Sysname] interface bridge-aggregation 1

[Sysname-Bridge-Aggregation1] description connect to the lab

display interface

Use display interface to display aggregate interface information.

Syntax

display interface [ bridge-aggregation | route-aggregation ] [ brief [ down | description ] ]

display interface { bridge-aggregation | route-aggregation } interface-number [ brief [ description ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

bridge-aggregation: Specifies Layer 2 aggregate interfaces.

route-aggregation: Specifies Layer 3 aggregate interfaces.

interface-number: Specifies an existing aggregate interface number. The value range for the interface-number argument is the set of all existing aggregate interface numbers.

brief: Displays brief interface information. If you do not specify this keyword, the command displays detailed interface information.

down: Displays information about interfaces in the down state and the causes for the down state. If you do not specify this keyword, the command displays information about interfaces in all states.

description: Displays complete interface descriptions. If you do not specify this keyword, the command displays only the first 27 characters of interface descriptions.

Usage guidelines

If you do not specify the bridge-aggregation and route-aggregation keywords, the command displays information about all interfaces.

If you specify the bridge-aggregation or route-aggregation keyword and do not specify any interface number, the command displays information about all aggregate interfaces of that type.

If you specify the bridge-aggregation interface-number or route-aggregation interface-number option, the command displays information about the specified aggregate interface.

Examples

# Display detailed information about Layer 2 aggregate interface Bridge-Aggregation 1.

<Sysname> display interface bridge-aggregation 1

Bridge-Aggregation1

Current state: UP

IP packet frame type: Ethernet II, hardware Address: 000f-e207-f2e0

Description: Bridge-Aggregation1 Interface

Bandwidth: 0kbps

Unknown-speed mode, unknown-duplex mode

Link speed type is autonegotiation, link duplex type is autonegotiation

PVID: 1

Port link-type: Access

 Tagged VLANs:   None

 UnTagged VLANs: 1

Last clearing of counters:  Never

Last 300 seconds input:  6900 packets/sec 885160 bytes/sec    -%

Last 300 seconds output:  3150 packets/sec 404430 bytes/sec    -%

Input (total):  5364747 packets, 686688416 bytes

         2682273 unicasts, 1341137 broadcasts, 1341337 multicasts, 0 pauses

Input (normal):  5364747 packets, 686688416 bytes

         2682273 unicasts, 1341137 broadcasts, 1341337 multicasts, 0 pauses

Input:  0 input errors, 0 runts, 0 giants, 0 throttles

         0 CRC, 0 frame, 0 overruns, - aborts

         - ignored, - parity errors

Output (total): 1042508 packets, 133441832 bytes

         1042306 unicasts, 0 broadcasts, 202 multicasts, - pauses

Output (normal): 1042508 packets, 133441832 bytes

         1042306 unicasts, 0 broadcasts, 202 multicasts, 0 pauses

Output: 0 output errors, - underruns, - buffer failures

         0 aborts, 0 deferred, 0 collisions, 0 late collisions

         - lost carrier, - no carrier

# Display detailed information about Layer 3 aggregate interface Route-Aggregation 1.

<Sysname> display interface route-aggregation 1

Route-Aggregation1

Current state: UP

Line protocol state: UP

Description: Route-Aggregation1 Interface

Bandwidth: 0kbps

Maximum transmission unit: 1500

Internet protocol processing: Disabled

IP packet frame type: Ethernet II, hardware Address: 0000-fc00-2670

IPv6 packet frame type: Ethernet II, hardware Address: 0000-fc00-2670

Last clearing of counters: Never

    Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

    Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

    0 packets input, 0 bytes, 0 drops

    0 packets output, 0 bytes, 0 drops

# Display brief information about Layer 2 aggregate interface Bridge-Aggregation 1.

<Sysname> display interface bridge-aggregation 1 brief

Brief information on interfaces in bridge mode:

Link: ADM - administratively down; Stby - standby

Speed: (a) - auto

Duplex: (a)/A - auto; H - half; F - full

Type: A - access; T - trunk; H - hybrid

Interface            Link Speed   Duplex Type PVID Description

BAGG1                UP   auto    A      A    1

# Display brief information about Layer 3 aggregate interface Route-Aggregation 1.

<Sysname> display interface route-aggregation 1 brief

Brief information on interfaces in route mode:

Link: ADM - administratively down; Stby - standby

Protocol: (s) - spoofing

Interface            Link Protocol Primary IP         Description

RAGG1                UP   UP       --

Table 19 Command output

Field

Description

Bridge-Aggregation1

Layer 2 aggregate interface name.

Route-Aggregation1

Layer 3 aggregate interface name.

Current state

Aggregate interface status:

·     DOWN (Administratively down)—The interface is administratively shut down with the shutdown command.

·     DOWN—The interface is administratively up but physically down (possibly because no physical link is present or the link is faulty).

·     UP—The Ethernet interface is both administratively and physically up.

IP packet frame type

IPv4 packet frame format.

The value PKTFMT_ETHNT_2 indicates that packets are encapsulated in Ethernet II format.

Bandwidth

Expected bandwidth of the interface.

Unknown-speed mode, unknown-duplex mode

The interface speed and duplex mode are unknown.

PVID

Port VLAN ID (PVID).

Port link-type

Port link type: access, trunk, or hybrid.

Tagged VLANs

Packets from the specified VLANs are sent out of this interface with a VLAN tag:

·     Tagged Vlan:   none—All packets are sent out of this interface without a VLAN tag.

·     Tagged Vlan: 1—Packets from VLAN 1 are sent out of this interface with a VLAN tag.

This field is displayed when the port link type is access or hybrid.

Untagged VLANs

Packets from the specified VLANs are sent out of this interface without a VLAN tag:

·     Untagged Vlan:   none—All packets are sent out of this interface with a VLAN tag.

·     Untagged Vlan: 1—Packets from VLAN 1 are sent out of this interface without a VLAN tag.

This field is displayed when the port link type is access or hybrid.

Last clearing of counters

Time when the reset counters interface command was last used to clear the interface statistics.

Never indicates the reset counters interface command has never been used on the interface since the device's startup.

Last 300 seconds input/output rate

Average input/output rate over the last 300 seconds.

Input/Output (total)

Statistics of all packets received/sent on the interface.

Input/Output (normal)

Statistics of all normal packets received/sent on the interface.

Line protocol state

Link layer state of the interface.

Internet protocol processing

IP packet processing.

Disabled indicates that IP packets cannot be processed.

For an interface configured with an IP address, this field changes to Internet Address is.

Brief information on interfaces in bridge mode

Brief information about Layer 2 interfaces.

Brief information on interfaces in route mode

Brief information about Layer 3 interfaces.

Link: ADM - administratively down; Stby - standby

Link status:

·     ADM—The interface has been administratively shut down. To recover its physical layer state, run the undo shutdown command.

·     Stby—The interface is operating as a backup interface.

Speed: (a) - auto

If the speed of an interface is automatically negotiated, the speed attribute of the interface includes the autonegotiation flag (the letter a in parentheses).

Duplex: (a)/A - auto; H - half; F - full

If the duplex mode of an interface is automatically negotiated, its duplex mode attribute includes the autonegotiation flag, indicated by the letter a in parentheses or a capital A. The letter H indicates the half duplex mode, and the letter F indicates the full duplex mode.

Type: A - access; T - trunk; H - hybrid

Link type options for Ethernet interfaces.

Protocol: (s) - spoofing

If the data link layer protocol state of an interface is shown as UP, but its link is an on-demand link or not present, its protocol attribute includes the spoofing flag (an s in parentheses).

Interface

Abbreviated interface name.

Link

Physical link state of the interface.

Speed

Interface speed, in bps.

Protocol

Data link layer protocol state of an interface.

Cause

Cause of a DOWN physical link.

 

display lacp system-id

Use display lacp system-id to display the system ID of the local system.

Syntax

display lacp system-id

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Usage guidelines

You can use the lacp system-priority command to change the LACP priority of the local system. You specify the LACP priority value in decimal format in the lacp system-priority command, but it is displayed as a hexadecimal value by the display lacp system-id command.

Examples

# Display the local system ID.

<Sysname> display lacp system-id

Actor System ID: 0x8000, 0000-fc00-6504

Table 20 Command output

Field

Description

Actor System ID: 0x8000, 0000-fc00-6504

Local system ID, which contains the system LACP priority (0x8000 in this sample output) and the system MAC address (0000-FC00-6504 in this sample output).

 

Related commands

lacp system-priority

display link-aggregation capability

Use display link-aggregation capability to display the link aggregation capability for the device.

Syntax

display link-aggregation capability

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Usage guidelines

This command is available in Release 1138P01 and later versions.

Examples

# Display the link aggregation capability for the device.

<Sysname> display link-aggregation capability

Default link aggregation capability:

  Maximum groups: 1024

  Maximum Selected ports per group: 16

Current link aggregation capability:

  Maximum groups: 1024

  Maximum Selected ports per group: 16

Link aggregation capability at the next reboot:

  Maximum groups: 1024

  Maximum Selected ports per group: 16

Supported link aggregation capability list:

  1024*16        512*32         256*64

Table 21 Command output

Field

Description

Supported link aggregation capability list

Link aggregation capabilities supported by the device. Each item in the list is in the format of maximum number of aggregation groups*maximum number of Selected ports per aggregation group.

 

display link-aggregation load-sharing mode

Use display link-aggregation load-sharing mode to display global or group-specific link-aggregation load sharing modes.

Syntax

display link-aggregation load-sharing mode [ interface [ { bridge-aggregation | route-aggregation } interface-number ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

bridge-aggregation: Specifies Layer 2 aggregation interfaces.

route-aggregation: Specifies Layer 3 aggregation interfaces.

interface-number: Specifies an existing aggregate interface number.

Usage guidelines

If you do not specify the interface keyword, the command displays the global link-aggregation load sharing modes.

If you specify the interface keyword, but do not specify any interface, the command displays all group-specific load sharing modes.

If you specify the bridge-aggregation interface-number or route-aggregation interface-number option, the command displays the load sharing mode of the specified aggregation group.

The bridge-aggregation or route-aggregation keyword is available only when Layer 2 or Layer 3 aggregate interfaces exist on the switch.

Examples

# Display the global link-aggregation load sharing modes.

<Sysname> display link-aggregation load-sharing mode

Link-Aggregation Load-Sharing Algorithm:

Default

Link-Aggregation Load-Sharing Mode:

Layer 2 traffic: destination-mac address  source-mac address

Layer 3 traffic: destination-ip address   source-ip address

# Display the link-aggregation load sharing modes of Layer 2 aggregation group 10.

<Sysname> display link-aggregation load-sharing mode interface bridge-aggregation 10

Bridge-Aggregation10 Load-Sharing Mode:

Layer 2 traffic: destination-mac address  source-mac address

Layer 3 traffic: destination-ip address   source-ip address

Table 22 Command output

Field

Description

Link-Aggregation Load-Sharing Algorithm

Per-flow load sharing algorithm for Ethernet link aggregation.

By default, this field displays Default. If you have configured the load sharing algorithm, this field displays the configured algorithm.

Link-Aggregation Load-Sharing Mode

Global link-aggregation load sharing mode.

·     By default, this field displays the packet type-based link-aggregation load sharing mode.

·     If you have configured the global link-aggregation load sharing mode, this field displays the configured mode.

Bridge-Aggregation10 Load-Sharing Mode

Link-aggregation load sharing mode of Layer 2 aggregation group 10.

Route-Aggregation10 Load-Sharing Mode

Link-aggregation load sharing mode of Layer 3 aggregation group 10.

Layer 2 traffic: destination-mac address, source-mac address

Default link-aggregation load sharing mode for Layer 2 traffic. In this sample output, Layer 2 traffic is load shared based on source and destination MAC addresses.

Layer 3 traffic: destination-ip address,  source-ip address

Default link-aggregation load sharing mode for Layer 3 traffic. In this sample output, Layer 3 traffic is load shared based on source and destination IP addresses.

 

display link-aggregation load-sharing path

Use display link-aggregation load-sharing path to display forwarding information for the specified traffic flow.

Syntax

display link-aggregation load-sharing path interface { bridge-aggregation | route-aggregation } interface-number ingress-port interface-type interface-number [ route ] { { destination-ip ip-address | destination-ipv6 ipv6-address } | { source-ip ip-address | source-ipv6 ipv6-address } | destination-mac mac-address | destination-port port-id | ethernet-type type-number | ip-protocol protocol-id | source-mac mac-address | source-port port-id | vlan vlan-id }*

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

bridge-aggregation: Specifies Layer 2 aggregate interfaces.

route-aggregation: Specifies Layer 3 aggregate interfaces.

interface-number: Specifies an existing aggregate interface by its number.

ingress-port interface-type interface-number: Specifies an ingress port by its type and number.

route: Displays forwarding information for Layer 3 traffic.

destination-ip ip-address: Specifies a destination IPv4 address.

destination-ipv6 ipv6-address: Specifies a destination IPv6 address.

source-ip ip-address: Specifies a source IPv4 address.

source-ipv6 ipv6-address: Specifies a source IPv6 address.

destination-mac mac-address: Specifies a destination MAC address in H-H-H format.

destination-port port-id: Specifies a destination port number in the range of 1 to 65535.

ethernet-type type-number: Specifies an Ethernet type code in the range of 1 to 65535.

ip-protocol protocol-id: Specifies an IP protocol by its ID in the range of 0 to 255.

source-mac mac-address: Specifies a source MAC address in H-H-H format.

source-port port-id: Specifies a source port number in the range of 1 to 65535.

vlan vlan-id: Specifies a VLAN by its ID in the range of 1 to 4094.

Usage guidelines

A parameter specified in the command might not be used for selecting the egress port. The Load sharing parameters field displays the parameters that are used in egress port selection.

If an unspecified parameter is required for selecting the egress port, the default value of the parameter is used. If the parameter does not have any default values, the parameter is set to 0.

Examples

# Display forwarding information for the specified traffic flow to be sent out of Layer 2 aggregate interface Bridge-Aggregation 1.

<Sysname> display link-aggregation load-sharing path interface bridge-aggregation 1 ingress-port fortygige 1/0/1 destination-mac 0000-fc00-0001 source-mac 0000-fc00-0002 source-ip 10.100.0.2 destination-ip 10.100.0.1

Load sharing mode: destination-mac, source-mac, source-ip, destination-ip

Unspecified parameters are set to 0.

Load sharing parameters:

Ingress port: FortyGigE1/0/1

Destination MAC: 0000-fc00-0001

Source MAC: 0000-fc00-0002

Destination IP: 10.100.0.1

Source IP: 10.100.0.2

Egress port: FortyGigE1/0/3

Table 23 Command output

Field

Description

Load sharing mode:

Load sharing mode set for the aggregation group:

·     destination-mac—Traffic is load shared based on destination MAC addresses.

·     source-mac—Traffic is load shared based on source MAC addresses.

·     destination-ip—Traffic is load shared based on destination IP addresses.

·     source-ip—Traffic is load shared based on source IP addresses.

·     ip-protocol—Traffic is load shared based on IP protocol types.

·     destination-port—Traffic is load shared based on destination ports.

·     source-port—Traffic is load shared based on source ports.

·     ingress-port—Traffic is load shared based on ingress ports.

Load sharing parameters

Parameters that are used in egress port selection.

Egress port

Egress port of the specified traffic flow. If no egress port is found, this field displays N/A.

 

display link-aggregation member-port

Use display link-aggregation member-port to display detailed link aggregation information for the specified member ports.

Syntax

display link-aggregation member-port [ interface-list ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

interface-list: Specifies a list of link aggregation member ports, in the format interface-type interface-number [ to interface-type interface-number ], where interface-type interface-number specifies an interface by its type and number.

Usage guidelines

A member port in a static aggregation group cannot obtain information about the peer group. For such member ports, the command displays the port number, port priority, and operational key of the local end only.

Examples

# Display detailed link aggregation information for FortyGigE 1/0/1, which is a member port of a static aggregation group.

<Sysname> display link-aggregation member-port fortygige 1/0/1

Flags: A -- LACP_Activity, B -- LACP_Timeout, C -- Aggregation,

       D -- Synchronization, E -- Collecting, F -- Distributing,

       G -- Defaulted, H -- Expired

 

FortyGigE1/0/1:

Aggregate Interface: Bridge-Aggregation1

Port Number: 1

Port Priority: 32768

Oper-Key: 1

# Display detailed link aggregation information for FortyGigE 1/0/2, which is a member port of a dynamic aggregation group.

<Sysname> display link-aggregation member-port fortygige 1/0/2

Flags: A -- LACP_Activity, B -- LACP_Timeout, C -- Aggregation,

       D -- Synchronization, E -- Collecting, F -- Distributing,

       G -- Defaulted, H -- Expired

 

FortyGigE1/0/2:

Aggregate Interface: Bridge-Aggregation10

Local:

    Port Number: 2

    Port Priority: 32768

    Oper-Key: 2

    Flag: {ACDEF}

Remote:

    System ID: 0x8000, 000f-e267-6c6a

    Port Number: 26

    Port Priority: 32768

    Oper-Key: 2

    Flag: {ACDEF}

Received LACP Packets: 5 packet(s)

Illegal: 0 packet(s)

Sent LACP Packets: 7 packet(s)

Table 24 Command output

Field

Description

Flags

LACP state flags. This field is one byte long, represented by ABCDEFGH from the least significant bit to the most significant bit. The letter is present when its bit is 1 and absent when its bit is 0.

·     AIndicates whether LACP is enabled. 1 indicates enabled, and 0 indicates disabled.

·     B—Indicates the LACP short or long timeout. 1 indicates short timeout, and 0 indicates long timeout.

·     C—Indicates whether the sending system considers that the link is aggregatable. 1 indicates yes, and 0 indicates no.

·     D—Indicates whether the sending system considers that the link is synchronized. 1 indicates yes, and 0 indicates no.

·     E—Indicates whether the sending system considers that the incoming frames are collected. 1 indicates yes, and 0 indicates no.

·     F—Indicates whether the sending system considers that the outgoing frames are distributed. 1 indicates yes, and 0 indicates no.

·     G—Indicates whether the sending system receives frames in the default state. 1 indicates yes, and 0 indicates no.

·     H—Indicates whether the sending system receives frames in the expired state. 1 indicates yes, and 0 indicates no.

Aggregate Interface

Aggregate interface to which the member port belongs.

Local

Information about the local end.

Oper-key

Operational key.

Flag

LACP protocol state flag.

Remote

Information about the remote end.

System ID

Remote end system ID, containing the system LACP priority and the system MAC address.

Received LACP Packets

Total number of LACP packets received.

Illegal

Total number of illegal packets.

Sent LACP Packets

Total number of LACP packets sent.

 

display link-aggregation summary

Use display link-aggregation summary to display the summary information for all aggregation groups.

Syntax

display link-aggregation summary

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Usage guidelines

Static link aggregation groups cannot obtain information about the peer groups. As a result, the Partner ID field displays none for a static link aggregation group.

Examples

# Display the summary information for all aggregation groups.

<Sysname> display link-aggregation summary

Aggregate Interface Type:

BAGG -- Bridge-Aggregation, RAGG -- Route-Aggregation

Aggregation Mode: S -- Static, D -- Dynamic

Loadsharing Type: Shar -- Loadsharing, NonS -- Non-Loadsharing

Actor System ID: 0x8000, 000f-e267-6c6a

 

AGG         AGG       Partner ID               Selected  Unselected  Individual  Share

Interface   Mode                               Ports     Ports       Ports       Type

-------------------------------------------------------------------------------

BAGG1       S         none                     1         0           0           Shar

BAGG10      D         0x8000, 000f-e267-57ad   2         0           0           Shar

Table 25 Command output

Field

Description

Aggregate Interface Type

BAGG indicates Layer 2 aggregate interface.

Aggregation Mode

Aggregation group type:

·     S—Static link aggregation.

·     D—Dynamic aggregation.

Loadsharing Type

Load-sharing type:

·     Shar—Load sharing.

·     NonS—Non-load sharing.

Actor System ID

Local system ID, which contains the system LACP priority and the system MAC address.

AGG Interface

Type and number of the aggregate interface.

AGG Mode

Aggregation group type.

Partner ID

System ID of the partner, which contains the system LACP priority and the system MAC address.

Selected Ports

Total number of Selected ports.

Unselected Ports

Total number of Unselected ports.

Individual Ports

Total number of Individual ports.

Share Type

Load-sharing type.

 

display link-aggregation verbose

Use display link-aggregation verbose to display detailed information about the aggregation groups that correspond to the aggregate interfaces.

Syntax

display link-aggregation verbose [ { bridge-aggregation | route-aggregation } [ interface-number ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

bridge-aggregation: Specifies Layer 2 aggregate interfaces.

route-aggregation: Specifies Layer 3 aggregate interfaces.

interface-number: Specifies an existing aggregate interface by its number.

Usage guidelines

If you specify only the bridge-aggregation or route-aggregation keyword, the command displays information about all Layer 2 or Layer 3 aggregation groups.

If you do not specify the bridge-aggregation and route-aggregation keywords, the command displays information about all aggregation groups.

The bridge-aggregation or route-aggregation keyword is available only when Layer 2 or Layer 3 aggregate interfaces exist on the switch.

Examples

# Display detailed information about Layer 2 aggregation group 10, which is a dynamic aggregation group.

<Sysname> display link-aggregation verbose bridge-aggregation 10

Loadsharing Type: Shar -- Loadsharing, NonS -- Non-Loadsharing

Port Status: S -- Selected, U -- Unselected, I -- Individual

Flags:  A -- LACP_Activity, B -- LACP_Timeout, C -- Aggregation,

        D -- Synchronization, E -- Collecting, F -- Distributing,

        G -- Defaulted, H -- Expired

 

Aggregate Interface: Bridge-Aggregation10

Aggregation Mode: Dynamic

Loadsharing Type: Shar

System ID: 0x8000, 000f-e267-6c6a

Local:

  Port               Status  Priority Oper-Key  Flag

--------------------------------------------------------------------------------

  FGE1/0/1           S       32768    2         {ACDEF}

  FGE1/0/2           S       32768    2         {ACDEF}

Remote:

  Actor            Partner Priority Oper-Key  SystemID               Flag

--------------------------------------------------------------------------------

  FGE1/0/1           1      32768    2         0x8000, 000f-e267-57ad {ACDEF}

  FGE1/0/2           2      32768    2         0x8000, 000f-e267-57ad {ACDEF}

# Display detailed information about Layer 2 aggregation group 20, which is a static aggregation group.

<Sysname> display link-aggregation verbose bridge-aggregation 20

Loadsharing Type: Shar -- Loadsharing, NonS -- Non-Loadsharing

Port Status: S -- Selected, U -- Unselected, I -- Individual

Flags:  A -- LACP_Activity, B -- LACP_Timeout, C -- Aggregation,

        D -- Synchronization, E -- Collecting, F -- Distributing,

        G -- Defaulted, H -- Expired

 

Aggregate Interface: Bridge-Aggregation20

Aggregation Mode: Static

Loadsharing Type: Shar

  Port             Status  Priority Oper-Key

--------------------------------------------------------------------------------

  FGE1/0/1           U       32768    1

  FGE1/0/2           U       32768    1

  FGE1/0/3           U       32768    1

Table 26 Command output

Field

Description

Loadsharing Type

Load-sharing type:

·     Shar—Load sharing.

·     NonS—Non-load sharing.

Port Status

Port state: Selected, Unselected, or Individual.

Flags

LACP state flags. This field is one byte long, represented by ABCDEFGH from the least significant bit to the most significant bit. The letter is present when its bit is 1 and absent when its bit is 0.

·     AIndicates whether LACP is enabled. 1 indicates enabled, and 0 indicates disabled.

·     B—Indicates the LACP short or long timeout. 1 indicates short timeout, and 0 indicates long timeout.

·     C—Indicates whether the sending system considers that the link is aggregatable. 1 indicates yes, and 0 indicates no.

·     D—Indicates whether the sending system considers that the link is synchronized. 1 indicates yes, and 0 indicates no.

·     E—Indicates whether the sending system considers that the incoming frames are collected. 1 indicates yes, and 0 indicates no.

·     F—Indicates whether the sending system considers that the outgoing frames are distributed. 1 indicates yes, and 0 indicates no.

·     G—Indicates whether the sending system receives frames in the default state. 1 indicates yes, and 0 indicates no.

·     H—Indicates whether the sending system receives frames in the expired state. 1 indicates yes, and 0 indicates no.

Aggregate Interface

Name of the aggregate interface.

Aggregation Mode

Mode of the aggregation group:

·     Static for static aggregation.

·     Dynamic for dynamic aggregation.

System ID

Local system ID, containing the system LACP priority and the system MAC address.

Local

Information about the local end:

·     Port—Port type and number.

·     Status—Selected or Unselected state of the port.

·     Priority—Port priority.

·     Oper-Key—Operational key.

·     Flag—LACP state flag.

NOTE:

For static aggregation groups, only local information (without the Flag field) is displayed.

Remote

Information about the remote end:

·     ActorPort type and number of the local end.

·     PartnerPort index of the remote end.

·     Priority—Port priority of the remote end.

·     Oper-Key—Operational key of the remote port.

·     System IDSystem ID of the remote end.

·     FlagLACP state flag of the remote end.

 

interface bridge-aggregation

Use interface bridge-aggregation to create a Layer 2 aggregate interface and enter the Layer 2 aggregate interface view.

Use undo interface bridge-aggregation to remove a Layer 2 aggregate interface.

Syntax

interface bridge-aggregation interface-number

undo interface bridge-aggregation interface-number

Default

No Layer 2 aggregate interface is created.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

interface-number: Specifies a Layer 2 aggregate interface number in the range of 1 to 1024.

Usage guidelines

When you create a Layer 2 aggregate interface, the system automatically creates a Layer 2 aggregation group with the same number. The aggregation group operates in static aggregation mode by default.

Deleting a Layer 2 aggregate interface also deletes the Layer 2 aggregation group. At the same time, the member ports of the aggregation group, if any, leave the aggregation group.

Examples

# Create Layer 2 aggregate interface Bridge-Aggregation 1, and enter its view.

<Sysname> system-view

[Sysname] interface bridge-aggregation 1

[Sysname-Bridge-Aggregation1]

interface route-aggregation

Use interface route-aggregation to create a Layer 3 aggregate interface or subinterface and enter the Layer 3 aggregate interface or subinterface view.

Use undo interface route-aggregation to delete a Layer 3 aggregate interface or subinterface.

Syntax

interface route-aggregation { interface-number | interface-number.subnumber }

undo interface route-aggregation { interface-number | interface-number.subnumber }

Default

No Layer 3 aggregate interface or subinterface is created.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

interface-number: Specifies a Layer 3 aggregate interface by its number in the range of 1 to 1024.

interface-number.subnumber: Specifies a subinterface of a Layer 3 aggregate interface. The interface-number argument specifies the main interface number. The subnumber argument specifies the subinterface number and is separated from the main interface number by a dot (.). The value range for the subnumber argument is 1 to 4094.

Usage guidelines

·     Before creating a Layer 3 aggregate interface or subinterface, use the reserve-vlan-interface command to reserve enough VLAN interface resources. If not enough VLAN interface resources are reserved, the system fails to create the Layer 3 aggregate interface or subinterface.

Before creating a Layer 3 aggregate interface, reserve a VLAN interface resource for each of the following interfaces:

¡     Layer 3 aggregate interface.

¡     Member ports in the corresponding Layer 3 aggregation group.

For example, before creating a Layer 3 aggregation group containing three member ports, reserve four VLAN interface resources. The Layer 3 aggregate interface uses one VLAN interface resource and each of the member ports uses one VLAN interface resource.

Before creating Layer 3 aggregate subinterfaces on a Layer 3 aggregate interface, reserve a VLAN interface resource for each of the following interface:

¡     Layer 3 aggregate interface.

¡     Member ports in the corresponding Layer 3 aggregation group.

¡     Layer 3 aggregate subinterfaces.

For example, before creating four Layer 3 aggregate subinterfaces on a Layer 3 aggregate interface whose corresponding aggregation group has two member ports, reserve seven VLAN interface resources. The aggregate interface uses one VLAN interface resource. Each of the member ports and aggregate subinterfaces uses one VLAN interface resource.

Before creating a Layer 3 aggregate subinterface, do not reserve a resource for the VLAN interface whose interface number matches the subinterface number. After you reserve a VLAN interface resource, do not create a Layer 3 aggregate subinterface whose subinterface number is the VLAN interface number. A Layer 3 aggregate subinterface uses the VLAN interface resource in processing tagged packets whose VLAN ID matches the subinterface number.

To reserve global-type VLAN interface resources, specify the global keyword in the reserve-vlan-interface command. To reserve local-type VLAN interface resources, do not specify the global keyword. Reserved VLAN interface resources are of the local type in this chapter.

For more information about reserving VLAN interface resources, see VLAN configuration in Layer 2LAN Switching Configuration Guide.

·     When you create a Layer 3 aggregate interface, the system automatically creates a Layer 3 static aggregation group numbered the same.

·     Deleting an aggregate interface also deletes its aggregation group. At the same time, the member ports of the aggregation group, if any, leave the aggregation group.

·     Deleting a Layer 3 aggregate subinterface does not affect its main interface and the corresponding Layer 3 aggregation group.

Examples

# Create Layer 3 aggregate interface Route-Aggregation 1 and enter its view.

<Sysname> system-view

[Sysname] reserve-vlan-interface 3000

[Sysname]interface route-aggregation 1

[Sysname-Route-Aggregation1]

# Create Layer 3 aggregate subinterface Route-Aggregation 1.1 and enter its view.

<Sysname> system-view

[Sysname] reserve-vlan-interface 3001

[Sysname] interface route-aggregation 1.1

[Sysname-Route-Aggregation1.1]

lacp edge-port

Use lacp edge-port to configure an aggregate interface as an edge aggregate interface.

Use undo lacp edge-port to restore the default.

Syntax

lacp edge-port

undo lacp edge-port

Default

An aggregate interface does not operate as an edge aggregate interface.

Views

Layer 2 aggregate interface view, Layer 3 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

Use this command on the aggregate interface that connects the device to a server if dynamic link aggregation is configured only on the device. This feature improves link reliability by enabling all member ports of the aggregation group to forward packets.

This command takes effect only on an aggregate interface corresponding to a dynamic aggregation group.

Examples

# Configure Layer 2 aggregate interface Bridge-aggregation 1 as an edge aggregate interface.

<Sysname> System-view

[Sysname] interface bridge-aggregation 1

[Sysname-Bridge-Aggregation1] lacp edge-port

lacp period short

Use lacp period short to set the short LACP timeout interval (3 seconds) on an interface.

Use undo lacp period to restore the default.

Syntax

lacp period short

undo lacp period

Default

The LACP timeout interval is the long timeout interval (90 seconds) on an interface.

Views

Layer 2 Ethernet interface view, Layer 3 Ethernet interface view

Predefined user roles

network-admin

mdc-admin

Examples

# Set the short LACP timeout interval (3 seconds) on FortyGigE 1/0/1.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] lacp period short

lacp system-priority

Use lacp system-priority to set the system LACP priority.

Use undo lacp system-priority to restore the default.

Syntax

lacp system-priority system-priority

undo lacp system-priority

Default

The system LACP priority is 32768.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

system-priority: Specifies the system LACP priority in the range of 0 to 65535. The smaller the value, the higher the system LACP priority.

Examples

# Set the system LACP priority to 64.

<Sysname> system-view

[Sysname] lacp system-priority 64

Related commands

link-aggregation port-priority

link-aggregation bfd ipv4

Use link-aggregation bfd ipv4 to enable BFD for an aggregation group.

Use undo link-aggregation bfd to restore the default.

Syntax

link-aggregation bfd ipv4 source ip-address destination ip-address

undo link-aggregation bfd

Default

BFD is disabled for an aggregation group.

Views

Layer 2 aggregate interface view, Layer 3 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Parameters

source ip-address: Specifies the source IP address of BFD sessions.

destination ip-address: Specifies the destination IP address of BFD sessions.

Usage guidelines

For BFD to take effect on an aggregation group, configure BFD on both ends of the aggregate link.

Make sure the source and destination IP addresses are consistent at the two ends of an aggregate link. For example, if you execute link-aggregation bfd ipv4 source 1.1.1.1 destination 2.2.2.2 on the local end, execute link-aggregation bfd ipv4 source 2.2.2.2 destination 1.1.1.1 on the peer end.

The BFD parameters configured on an aggregate interface take effect on all BFD sessions in the aggregation group. For more information about configuring BFD parameters, see High Availability Configuration Guide.

As a best practice, do not configure other protocols to collaborate with BFD on a BFD-enabled aggregate interface.

Examples

# Enable BFD for Layer 2 aggregation group 1, and specify the source and destination IP addresses as 1.1.1.1 and 2.2.2.2 for BFD sessions.

<Sysname> system-view

[Sysname] interface bridge-aggregation 1

[Sysname-Bridge-Aggregation1] link-aggregation bfd ipv4 source 1.1.1.1 destination 2.2.2.2

link-aggregation capability

Use link-aggregation capability to configure the link aggregation capability for the device.

Use undo link-aggregation capability to restore the default.

Syntax

link-aggregation capability max-group max-group-number max-selected-port max-selected-port-number

undo link-aggregation capability

Default

The device supports a maximum of 1024 aggregation groups, and an aggregation group can have a maximum of 16 Selected ports.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

max-group max-group-number: Specifies the maximum number of aggregation groups that the device supports. The value for the max-group-number argument must be 256, 512, or 1024.

max-selected-port max-selected-port-number: Specifies the maximum number of Selected ports per aggregation group. The value for the max-selected-port-number argument must be 16, 32, or 64.

Usage guidelines

This command is available in Release 1138P01 and later versions.

After you execute this command, save the configuration and reboot the device for the configuration to take effect. Before rebooting the device, make sure you know the possible impact on the network.

This command fails if the number of existing aggregation groups exceeds the configured maximum number.

If you create aggregation groups after executing the link-aggregation capability command and the number of aggregation groups exceeds the configured number, some aggregation groups are deleted at the next reboot.

The maximum number of Selected ports allowed in an aggregation group is limited by one of the following values, whichever value is smaller:

·     Maximum number set by using the link-aggregation selected-port maximum command.

·     Maximum number of Selected ports allowed by the link aggregation capability.

If you execute this command multiple times, the most recent configuration takes effect at the next reboot.

Examples

# Configure the device to support a maximum of 1024 aggregation groups and a maximum of 16 Selected ports per aggregation group.

<Sysname> system-view

[Sysname] link-aggregation capability max-group 1024 max-selected-port 16

The configuration will take effect at the next reboot. Continue? [Y/N]:y

Please save the configuration, and reboot the device.

link-aggregation global load-sharing mode

Use link-aggregation global load-sharing mode to set the global link-aggregation load sharing mode.

Use undo link-aggregation global load-sharing mode to restore the default.

Syntax

link-aggregation global load-sharing mode  { destination-ip | destination-mac | destination-port | ingress-port | ip-protocol | source-ip | source-mac | source-port } *

undo link-aggregation global load-sharing mode

Default

The system automatically chooses link-aggregation load sharing mode based on packet types.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

destination-ip: Load shares traffic based on destination IP addresses.

destination-mac: Load shares traffic based on destination MAC addresses.

destination-port: Load shares traffic based on destination ports.

ingress-port: Load shares traffic based on ingress ports.

ip-protocol: Load shares traffic based on IP protocol types.

source-ip: Load shares traffic based on source IP addresses.

source-mac: Load shares traffic based on source MAC addresses.

source-port: Load shares traffic based on source ports.

Usage guidelines

The load sharing mode that you configure overwrites the previous mode.

If you configure both link aggregation load sharing and per-flow load sharing over equal-cost routes, the latest configuration takes effect. Per-flow load sharing over equal-cost routes identifies a flow based on five tuples (source IP address, destination IP address, source port number, destination port number, and IP protocol number). For information about configuring per-flow load sharing over equal-cost routes, see Layer 3—IP Services Configuration Guide.

If an unsupported load sharing mode is configured, an error prompt appears.

 

 

NOTE:

If you set the global load-sharing mode to source MAC address, the setting takes effect only on Layer 2 aggregation groups. A Layer 3 aggregation group forwards traffic by using one of its Selected ports rather than load shares traffic. When the Selected port fails, traffic is switched to another Selected port in the aggregation group.

 

Examples

# Set the global load sharing mode to load share packets based on destination MAC addresses.

<Sysname> system-view

[Sysname] link-aggregation global load-sharing mode destination-mac

link-aggregation ignore vlan

Use link-aggregation ignore vlan to configure a Layer 2 aggregate interface to ignore the specified VLANs.

Use undo link-aggregation ignore vlan to restore the default.

Syntax

link-aggregation ignore vlan vlan-id-list

undo link-aggregation ignore vlan vlan-id-list

Default

A Layer 2 aggregate interface does not ignore any VLANs.

Views

Layer 2 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Parameters

vlan-id-list: Specifies a list of VLANs to be ignored in the format of vlan-id-list = { vlan-id1 [ to vlan-id2 ] }&<1-10>, where vlan-id1 and vlan-id2 are both in the range of 1 to 4094, vlan-id2 cannot be smaller than vlan-id1, and &<1-10> indicates that you can specify up to 10 vlan-id1 [ to vlan-id2 ] parameters.

Usage guidelines

With this command configured, a Layer 2 aggregate interface ignores the permitted VLAN and VLAN tagging mode configuration of the specified VLANs when determining Selected ports. Inconsistent configuration about these VLANs does not affect the member ports that will become Selected ports.

Examples

# Configure Layer 2 aggregate interface bridge-aggregation 1 to ignore VLAN 50.

<Sysname> system-view

[Sysname] interface bridge-aggregation 1

[Sysname-Bridge-Aggregation1] link-aggregation ignore vlan 50

link-aggregation lacp traffic-redirect-notification enable

Use link-aggregation lacp traffic-redirect-notification enable to enable link-aggregation traffic redirection.

Use undo link-aggregation lacp traffic-redirect-notification enable to disable link-aggregation traffic redirection.

Syntax

link-aggregation lacp traffic-redirect-notification enable

undo link-aggregation lacp traffic-redirect-notification enable

Default

Link-aggregation traffic redirection is disabled.

Views

System view, Layer 2 aggregate interface view, Layer 3 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

This command is available in Release 1138P01 and later versions.

When you restart a card that contains Selected ports, this feature redirects traffic of the card to other cards. Zero packet loss is guaranteed for known unicast traffic, but not for unknown unicast traffic. (In standalone mode.)

When you restart an IRF member device that contains Selected ports, this feature redirects traffic of the IRF member device to other IRF member devices. When you restart a card that contains Selected ports, this feature redirects traffic of the card to other cards. Zero packet loss is guaranteed for known unicast traffic, but not for unknown unicast traffic. (In IRF mode.)

Link-aggregation traffic redirection applies only to dynamic link aggregation groups.

To prevent traffic interruption, enable link-aggregation traffic redirection on devices at both ends of the aggregate link.

Do not enable both spanning tree and link-aggregation traffic redirection on a device. Otherwise, light packet loss might occur when a card or the device reboots.

Link-aggregation traffic redirection cannot operate correctly on an edge aggregate interface.

Global link-aggregation traffic redirection settings take effect on all aggregation groups. A link aggregation group preferentially uses the group-specific link-aggregation traffic redirection settings. If group-specific link-aggregation traffic redirection is not configured, the group uses the global link-aggregation traffic redirection settings.

As a best practice, enable link-aggregation traffic redirection on aggregate interfaces. If you enable this feature globally, communication with a third-party peer device might be affected if the peer is not compatible with this feature.

Examples

# Enable link-aggregation traffic redirection.

<Sysname> system-view

[Sysname] link-aggregation lacp traffic-redirect-notification enable

link-aggregation load-sharing mode

Use link-aggregation load-sharing mode to configure an aggregation group to load share traffic on a per-packet basis.

Use undo link-aggregation load-sharing mode to restore the default.

Syntax

link-aggregation load-sharing mode flexible

undo link-aggregation load-sharing mode

Default

The load sharing mode of a group is the same as the global load sharing mode.

Views

Layer 2 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Parameters

flexible: Load shares traffic on a per-packet basis.

Examples

# Configure Layer 2 aggregation group 1 to load share traffic on a per-packet basis.

<Sysname> system-view

[Sysname] interface bridge-aggregation 1

[Sysname-Bridge-Aggregation1] link-aggregation load-sharing mode flexible

Related commands

link-aggregation global load-sharing mode

link-aggregation load-sharing mode local-first

Use link-aggregation load-sharing mode local-first to enable local-first load sharing for link aggregation.

Use undo link-aggregation load-sharing mode local-first to disable local-first load sharing for link aggregation.

Syntax

link-aggregation load-sharing mode local-first

undo link-aggregation load-sharing mode local-first

Default

Local-first load sharing is enabled for link aggregation.

Views

System view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

You can configure this feature only when the system operates in the IRF mode.

When you disable local-first load sharing for link aggregation, the packets will be load-shared among all Selected ports of the aggregate interface on all IRF member devices.

Local-first load sharing for link aggregation takes effect on only known unicast packets.

Examples

# Disable local-first load sharing for link aggregation.

<Sysname> system-view

[Sysname] undo link-aggregation load-sharing mode local-first

link-aggregation mode

Use link-aggregation mode dynamic to configure an aggregation group to operate in dynamic aggregation mode and enable LACP.

Use undo link-aggregation mode to restore the default.

Syntax

link-aggregation mode dynamic

undo link-aggregation mode

Default

An aggregation group operates in static aggregation mode.

Views

Layer 2 aggregate interface view, Layer 3 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Examples

# Configure Layer 2 aggregation group 1 to operate in dynamic aggregation mode.

<Sysname> system-view

[Sysname] interface bridge-aggregation 1

[Sysname-Bridge-Aggregation1] link-aggregation mode dynamic

link-aggregation port-priority

Use link-aggregation port-priority to set the port priority of an interface.

Use undo link-aggregation port-priority to restore the default.

Syntax

link-aggregation port-priority port-priority

undo link-aggregation port-priority

Default

The port priority of an interface is 32768.

Views

Layer 2 Ethernet interface view, Layer 3 Ethernet interface view

Predefined user roles

network-admin

mdc-admin

Parameters

port-priority: Specifies the port priority in the range of 0 to 65535. The smaller the value, the higher the port priority.

Examples

# Set the port priority to 64 for Layer 2 Ethernet interface FortyGigE 1/0/1.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] link-aggregation port-priority 64

Related commands

lacp system-priority

link-aggregation selected-port maximum

Use link-aggregation selected-port maximum to set the maximum number of Selected ports allowed in an aggregation group.

Use undo link-aggregation selected-port maximum to restore the default.

Syntax

link-aggregation selected-port maximum number

undo link-aggregation selected-port maximum

Default

The maximum number of Selected ports allowed in an aggregation group is 16.

Views

Layer 2 aggregate interface view, Layer 3 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Parameters

number: Specifies the maximum number of Selected ports allowed in an aggregation group. The value range is 1 to 64.

Usage guidelines

Executing this command might cause some of the Selected ports in an aggregation group to become unselected.

The maximum numbers of Selected ports allowed in the aggregation groups of the local and peer ends must be consistent.

The maximum number of Selected ports allowed in an aggregation group is limited by either the configured maximum number or hardware capability, whichever value is smaller.

You can configure backup between two ports by assigning two ports to an aggregation group and configuring the maximum number of Selected ports allowed in the aggregation group as 1. In this way, only one Selected port is allowed in the aggregation group at any point in time, while the Unselected port serves as a backup port.

Examples

# Set the maximum number of Selected ports to 5 for Layer 2 aggregation group 1.

<Sysname> system-view

[Sysname] interface bridge-aggregation 1

[Sysname-Bridge-Aggregation1] link-aggregation selected-port maximum 5

Related commands

·     link-aggregation irf-enhanced

·     link-aggregation selected-port minimum

link-aggregation selected-port minimum

Use link-aggregation selected-port minimum to set the minimum number of Selected ports in the aggregation group.

Use undo link-aggregation selected-port minimum to restore the default.

Syntax

link-aggregation selected-port minimum number

undo link-aggregation selected-port minimum

Default

The minimum number of Selected ports in an aggregation group is not specified.

Views

Layer 2 aggregate interface view, Layer 3 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Parameters

number: Specifies the minimum number of Selected ports in an aggregation group required to bring up the aggregate interface. The value range is 1 to 64.

Usage guidelines

Executing this command might cause all member ports in the aggregation group to become unselected.

The minimum number of Selected ports allowed in the aggregation groups of the local and peer ends must be consistent.

Examples

# Set the minimum number of Selected ports to 3 for Layer 2 aggregation group 1.

<Sysname> system-view

[Sysname] interface bridge-aggregation 1

[Sysname-Bridge-Aggregation1] link-aggregation selected-port minimum 3

Related commands

link-aggregation selected-port maximum

mtu

Use mtu to set the MTU for a Layer 3 aggregate interface or subinterface.

Use undo mtu to restore the default.

Syntax

mtu size

undo mtu

Default

The MTU for Layer 3 aggregate interfaces and subinterfaces is 1500 bytes.

Views

Layer 3 aggregate interface view, Layer 3 aggregate subinterface view

Predefined user roles

network-admin

mdc-admin

Parameters

size: Specifies the MTU in bytes. In versions earlier than Release 1138P01, the value range for the size argument is 46 to 1560. In Release 1138P01 and later versions, the value range for the size argument is 46 to 9008.

Usage guidelines

The MTU configured for an interface takes effect only on packets that are sent to the CPU for software forwarding, including packets sent from or destined for this interface.

If an interface is configured with both the mtu and ip mtu commands, the device fragments a packet based on the MTU set by using the ip mtu command. To avoid fragmentation, set an appropriate MTU for an interface. For information about the ip mtu command, see Layer 3—IP Services Command Reference.

Examples

# Set the MTU to 1492 bytes for Layer 3 aggregate interface Route-Aggregation 1.

<Sysname> system-view

[Sysname] interface route-aggregation 1

[Sysname-Route-Aggregation1] mtu 1492

port link-aggregation group

Use port link-aggregation group to assign an Ethernet interface to an aggregation group.

Use undo port link-aggregation group to remove an Ethernet interface from the aggregation group to which it belongs.

Syntax

port link-aggregation group number

undo port link-aggregation group

Default

An Ethernet interface does not belong to any aggregation group.

Views

Layer 2 Ethernet interface view, Layer 3 Ethernet interface view

Predefined user roles

network-admin

mdc-admin

Parameters

number: Specifies an aggregation group by its aggregate interface number. The value range is 1 to 1024.

Usage guidelines

A Layer 2 Ethernet interface can be assigned to a Layer 2 aggregation group only. A Layer 3 Ethernet interface can be assigned to a Layer 3 aggregation group only.

An Ethernet interface can belong to only one aggregation group.

Examples

# Assign Layer 2 Ethernet interface FortyGigE 1/0/1 to Layer 2 aggregation group 1.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] port link-aggregation group 1

reset counters interface

Use reset counters interface to clear statistics for the specified aggregate interfaces.

Syntax

reset counters interface [ { bridge-aggregation | route-aggregation } [ interface-number ] ]

Views

User view

Predefined user roles

network-admin

mdc-admin

Parameters

bridge-aggregation: Specifies Layer 2 aggregate interfaces.

route-aggregation: Specifies Layer 3 aggregate interfaces.

interface-number: Specifies an existing aggregate interface number.

Usage guidelines

Use this command to clear history statistics before you collect traffic statistics for a time period.

If you do not specify any option, the command clears statistics for all interfaces in the system.

If you specify only the bridge-aggregation or route-aggregation keyword, the command clears statistics for all Layer 2 or Layer 3 aggregate interfaces.

If you specify the bridge-aggregation interface-number or route-aggregation interface-number option, the command clears statistics for the specified Layer 2 or Layer 3 aggregate interface.

The bridge-aggregation or route-aggregation keyword is available only when Layer 2 or Layer 3 aggregate interfaces exist on the switch.

Examples

# Clear the statistics for Layer 2 aggregate interface Bridge-Aggregation 1.

<Sysname> reset counters interface bridge-aggregation 1

reset lacp statistics

Use reset lacp statistics to clear LACP statistics for the specified link aggregation member ports.

Syntax

reset lacp statistics [ interface interface-list ]

Views

User view

Predefined user roles

network-admin

mdc-admin

Parameters

interface interface-list: Specifies a list of link aggregation member ports, in the format interface-type interface-number [ to interface-type interface-number ]. interface-type interface-number specifies an interface by its type and number. If you do not specify any member ports, the command clears LACP statistics for all member ports.

Examples

# Clear LACP statistics for all link aggregation member ports.

<Sysname> reset lacp statistics

Related commands

display link-aggregation member-port

shutdown

Use shutdown to shut down an aggregate interface.

Use undo shutdown to bring up an aggregate interface.

Syntax

shutdown

undo shutdown

Default

Aggregate interfaces are up.

Views

Layer 2 aggregate interface view, Layer 3 aggregate interface view, Layer 3 aggregate subinterface view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

Shutting down or bringing up a Layer 3 aggregate interface shuts down or brings up its subinterfaces. Shutting down or bringing up a Layer 3 aggregate subinterface does not affect its main interface.

Examples

# Bring up Layer 2 aggregate interface Bridge-Aggregation 1.

<Sysname> system-view

[Sysname] interface bridge-aggregation 1

[Sysname-Bridge-Aggregation1] undo shutdown


Port isolation commands

display port-isolate group

Use display port-isolate group to display port isolation group information.

Syntax

display port-isolate group [ group-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

group-number: Specifies an isolation group by its number in the range of 1 to 8.

Examples

# Display all isolation groups.

<Sysname> display port-isolate group

 Port isolation group information:

 Group ID: 1

 Group members:

    FortyGigE1/0/1

 

# Display information about isolation group 1.

<Sysname> display port-isolate group 1

 Port isolation group information:

 Group ID: 1

 Group members:

    FortyGigE1/0/1

Table 27 Command output

Field

Description

Group ID

Isolation group number.

Group members

Isolated ports in the isolation group.

 

Related commands

port-isolate enable

port-isolate enable

Use port-isolate enable to assign a port to an isolation group.

Use undo port-isolate enable to remove a port from an isolation group.

Syntax

port-isolate enable group group-number

undo port-isolate enable

Default

No ports are assigned to an isolation group.

Views

Layer 2 Ethernet interface view, Layer 2 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Parameters

group group-number: Specifies an isolation group by its number in the range of 1 to 8. For this switch series, you can assign ports to only isolation group 1.

Usage guidelines

The configuration in Layer 2 Ethernet interface view applies only to the interface.

The configuration in Layer 2 aggregate interface view applies to the Layer 2 aggregate interface and its aggregation member ports. If the device fails to apply the configuration to the aggregate interface, it does not assign any aggregation member port to the isolation group. If the failure occurs on an aggregation member port, the device skips the port and continues to assign other aggregation member ports to the isolation group.

To assign ports to the specified isolation group, make sure the isolation group already exists.

Examples

# Assign ports FortyGigE 1/0/1 and FortyGigE 1/0/2 to isolation group 1.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] port-isolate enable group 1

[Sysname-FortyGigE1/0/1] quit

[Sysname] interface fortygige 1/0/2

[Sysname-FortyGigE1/0/2] port-isolate enable group 1

Related commands

display port-isolate group

port-isolate group

Use port-isolate group to create an isolation group.

Use undo port-isolate group to delete isolation groups.

Syntax

port-isolate group group-number

undo port-isolate group { group-number | all }

Default

No isolation group exists.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

group-number: Specifies an isolation group by its number in the range of 1 to 8. For this switch series, only the isolation group numbered 1 is valid.

all: Deletes all isolation groups.

Usage guidelines

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Create isolation group 1.

<Sysname> system-view

[Sysname] port-isolate group 1

 


Spanning tree commands

active region-configuration

Use active region-configuration to activate your MST region configuration.

Syntax

active region-configuration

Views

MST region view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

When you configure MST region parameters, MSTP launches a new spanning tree calculation process that might cause network topology instability. This is most likely to occur when you configure the VLAN-to-instance mapping table. The launch occurs after the MST region parameters are activated with the active region-configuration command or you enable the spanning tree feature with the stp global enable command.

As a best practice, use the check region-configuration command to determine whether the MST region configurations to be activated are correct. Run this command only when they are correct.

Examples

# Map VLAN 2 to MSTI 1 and manually activate the MST region configuration.

<Sysname> system-view

[Sysname] stp region-configuration

[Sysname-mst-region] instance 1 vlan 2

[Sysname-mst-region] active region-configuration

Related commands

·     check region-configuration

·     instance

·     region-name

·     revision-level

·     stp global enable

·     vlan-mapping modulo

check region-configuration

Use check region-configuration to display MST region pre-configuration information, including the region name, revision level, and VLAN-to-instance mapping settings.

Syntax

check region-configuration

Views

MST region view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

Two or more spanning tree devices belong to the same MST region only if they are configured with the same format selector (0 by default and not configurable), MST region name, and MST region revision level, have the same VLAN-to-instance mapping entries in the MST region, and are connected through a physical link.

As a best practice, use this command to determine whether the MST region configurations to be activated are correct. Activate them only when they are correct.

Examples

# Display MST region pre-configurations.

<Sysname> system-view

[Sysname] stp region-configuration

[Sysname-mst-region] check region-configuration

 Admin Configuration

   Format selector      : 0

   Region name          : 001122334400

   Revision level       : 0

   Configuration digest : 0x3ab68794d602fdf43b21c0b37ac3bca8

 

   Instance  VLANs Mapped

   0         1, 3 to 4094

   15        2

Table 28 Command output

Field

Description

Format selector

Format selector of the MST region, which is 0 (not configurable).

Region name

MST region name.

Revision level

Revision level of the MST region.

Instance   VLANs Mapped

VLAN-to-instance mappings in the MST region.

 

Related commands

·     active region-configuration

·     instance

·     region-name

·     revision-level

·     vlan-mapping modulo

display stp

Use display stp to display the spanning tree status and statistics information. Based on the information, you can analyze and maintain the network topology or determine whether the spanning tree is working correctly.

Syntax

In standalone mode:

display stp [ instance instance-list ] [ interface interface-list | slot slot-number ] [ brief ]

In IRF mode:

display stp [ instance instance-list ] [ interface interface-list | chassis chassis-number slot slot-number ] [ brief ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

instance instance-list: Displays the status and statistics information of the MSTIs that are specified by an instance list, in the format of instance-list = { instance-id [ to instance-id ] }&<1-10>, where &<1-10> indicates that you can specify up to 10 instances or instance ranges. The value range for the instance-id argument is 0 to 4094, and the value 0 represents the CIST.

interface interface-list: Displays the spanning tree status and statistics on the ports that are specified by a port list, in the format of interface-list = { interface-type interface-number [ to interface-type interface-number ] }&<1-10>, where &<1-10> indicates that you can specify up to 10 ports or port ranges.

brief: Displays brief spanning tree status and statistics. If this keyword is not specified, the command displays the detailed spanning tree status and statistics.

slot slot-number: Displays the spanning tree status and statistics on the specified card. slot-number represents the number of the slot that houses the card. If this option is not specified, this command displays the spanning tree status and statistics on all cards. (In standalone mode.)

chassis chassis-number slot slot-number: Displays the spanning tree status and statistics on the specified card of the specified IRF member device. The chassis-number argument represents the ID of the IRF member device. The slot-number argument represents the number of the slot that houses the card. If this option is not specified, this command displays the spanning tree status and statistics on all cards of all member devices in the IRF fabric. (In IRF mode.)

Usage guidelines

In STP or RSTP mode:

·     If you do not specify any port, this command displays the spanning tree information for all ports. The displayed information is sorted by port name.

·     If you specify a port list, this command displays the spanning tree information for the specified ports. The displayed information is sorted by port name.

In MSTP mode:

·     If you do not specify any MSTI or port, this command displays the spanning tree information of all MSTIs on all ports. The displayed information is sorted by MSTI ID and by port name in each MSTI.

·     If you specify an MSTI but not a port, this command displays the spanning tree information on all ports in that MSTI. The displayed information is sorted by port name.

·     If you specify some ports but not an MSTI, this command displays the spanning tree information of all MSTIs on the specified ports. The displayed information is sorted by MSTI ID and by port name in each MSTI.

·     If you specify both an MSTI ID and a port list, this command displays the spanning tree information on the specified ports in the specified MSTI. The displayed information is sorted by port name.

Examples

# In MSTP mode, display the brief spanning tree status and statistics of MSTI 0 on ports FortyGigE 1/0/1 through FortyGigE 1/0/4.

<Sysname> display stp instance 0 interface fortygige 1/0/1 to fortygige 1/0/4 brief

 MSTID      Port                            Role  STP State     Protection

 0          FortyGigE1/0/1                  ALTE  DISCARDING    LOOP

 0          FortyGigE1/0/2                  DESI  FORWARDING    NONE

 0          FortyGigE1/0/3                  DESI  FORWARDING    NONE

 0          FortyGigE1/0/4                  DESI  FORWARDING    NONE

Table 29 Command output

Field

Description

MSTID

MSTI ID in the MST region.

Port

Port name, corresponding to each MSTI.

Role

Port role:

·     ALTE—The port is an alternate port.

·     BACK—The port is a backup port.

·     ROOT—The port is a root port.

·     DESI—The port is a designated port.

·     MAST—The port is a master port.

·     DISA—The port is disabled.

STP State

Spanning tree status on the port:

·     FORWARDING—The port can receive and send BPDUs and also forward user traffic.

·     DISCARDING—The port can receive and send BPDUs but cannot forward user traffic.

·     LEARNING—The port is in a transitional state. It can receive and send BPDUs but cannot forward user traffic.

Protection

Protection type on the port:

·     ROOT—Root guard.

·     LOOP—Loop guard.

·     BPDU—BPDU guard.

·     NONE—No protection.

 

# In MSTP mode, display the detailed spanning tree status and statistics of all MSTIs on all ports.

<Sysname> display stp

-------[CIST Global Info][Mode MSTP]-------

 Bridge ID           : 32768.000f-e200-2200

 Bridge times        : Hello 2s MaxAge 20s FwdDelay 15s MaxHops 20

 Root ID/ERPC        : 0.00e0-fc0e-6554, 200200

 RegRoot ID/IRPC     : 32768.000f-e200-2200, 0

 RootPort ID         : 128.48

 BPDU-Protection     : Disabled

 Bridge Config-

 Digest-Snooping     : Disabled

 TC or TCN received  : 2

 Time since last TC  : 0 days 0h:5m:42s

 

----[Port153(FortyGigE1/0/1)][FORWARDING]----

 Port protocol       : Enabled

 Port role           : Designated Port (Boundary)

 Port ID             : 128.153

 Port cost(Legacy)   : Config=auto, Active=200

 Desg.bridge/port   : 32768.000f-e200-2200, 128.2

 Port edged          : Config=disabled, Active=disabled

 Point-to-Point      : Config=auto, Active=true

 Transmit limit      : 10 packets/hello-time

 TC-Restriction      : Disabled

 Role-Restriction    : Disabled

 Protection type     : None

 MST BPDU format     : Config=auto, Active=legacy

 Port Config-

 Digest-Snooping     : Disabled

 Rapid transition    : False

 Num of VLANs mapped : 1

 Port times          : Hello 2s MaxAge 20s FwdDelay 15s MsgAge 2s RemHops 20

 BPDU sent           : 186

          TCN: 0, Config: 0, RST: 0, MST: 186

 BPDU received       : 0

          TCN: 0, Config: 0, RST: 0, MST: 0

 

-------[MSTI 1 Global Info]-------

 Bridge ID         : 0.000f-e23e-9ca4

 RegRoot ID/IRPC   : 0.000f-e23e-9ca4, 0

 RootPort ID       : 0.0

 Root type         : Primary root

 Master bridge     : 32768.000f-e23e-9ca4

 Cost to master    : 0

 TC received       : 0

# Display the spanning tree status and statistics when the spanning tree feature is disabled.

<Sysname> display stp

 Protocol status    : Disabled

 Protocol Std.      : IEEE 802.1s

 Version            : 3

 CIST Bridge-Prio.  : 32768

 MAC address        : 000f-e200-8048

 Max age(s)         : 20

 Forward delay(s)   : 15

 Hello time(s)      : 2

 Max hops           : 20

Table 30 Command output

Field

Description

Bridge ID

Bridge ID, which comprises the device's priority in the MSTI and its MAC address. For example, in output "32768.000f-e200-2200," the value preceding the dot is the device's priority in the MSTI, and the value following the dot is the device's MAC address.

Bridge times

Major parameters for the bridge:

·     Hello—Hello timer.

·     MaxAgeMaximum age timer.

·     FwdDelay—Forward delay timer.

·     MaxHopsMaximum hops within the MST region.

Root ID/ERPC

CIST root ID and external path cost (the path cost from the device to the CIST root).

RegRoot ID/IRPC

CIST regional root ID and internal path cost (the path cost from the device to the CIST regional root).

RootPort ID

Root port ID. "0.0" indicates that the device is the root and there is no root port.

BPDU-Protection

Global status of the BPDU guard feature.

Bridge Config-

Digest-Snooping

Global status of Digest Snooping.

TC or TCN received

Number of TC/TCN BPDUs received in the MSTI.

Time since last TC

Time since the latest topology change in the MSTI.

[FORWARDING]

The port is in forwarding state.

[DISCARDING]

The port is in discarding state.

[LEARNING]

The port is in learning state.

Port protocol

Status of the spanning tree feature on the port.

Port role

Port role:

·     Alternate.

·     Backup.

·     Root.

·     Designated.

·     Master.

·     Disabled.

(Boundary)

The port is a regional boundary port.

Port cost(Legacy)

Path cost of the port. The field in parentheses indicates the standard (legacy, dot1d-1998, or dot1t) used for port path cost calculation.

·     Config—Configured value.

·     Active—Actual value.

Desg.bridge/port

Designated bridge ID and port ID of the port.

The port ID displayed is insignificant for a port which does not support port priority.

Port edged

The port is an edge port or non-edge port.

·     Config—Configured value.

·     Active—Actual value.

Point-to-Point

The port is connected to a point-to-point link or not.

·     Config—Configured value.

·     Active—Actual value.

Transmit limit

Number of BPDUs sent within each hello time.

Protection type

Protection type on the port:

·     Root—Root guard.

·     Loop—Loop guard.

·     BPDU—BPDU guard.

·     None—No protection.

TC-Restriction

Status of TC transmission restriction on the port.

Role-Restriction

Status of port role restriction on the port.

MST BPDU format

Format of the MST BPDUs that the port can send:

·     Config—Configured value (legacy or 802.1s).

·     Active—Actual value (legacy or 802.1s).

Port Config-

Digest-Snooping

Status of Digest Snooping on the port.

Rapid transition

Indicates whether the port rapidly transits to the forwarding state in the MSTI.

Num of VLANs mapped

Number of VLANs that are mapped to the MSTI.

Port times

Major parameters for the port:

·     Hello—Hello timer.

·     MaxAgeMaximum age timer.

·     FwdDelay—Forward delay timer.

·     MsgAge—Message age timer.

·     RemHops—Remaining hops.

BPDU sent

Statistics on sent BPDUs.

BPDU received

Statistics on received BPDUs.

RegRoot ID/IRPC

MSTI regional root/internal path cost.

Root Type

MSTI root type:

·     Primary root.

·     Secondary root.

Master bridge

MSTI root bridge ID.

Cost to master

Path cost from the MSTI to the master bridge.

TC received

Number of received TC BPDUs.

Protocol status

Spanning tree protocol status.

Protocol Std.

Spanning tree protocol standard.

Version

Spanning tree protocol version.

CIST Bridge-Prio.

Device's priority in the CIST.

Max age(s)

Aging timer (in seconds) for BPDUs.

Forward delay(s)

Port state transition delay (in seconds).

Hello time(s)

Interval (in seconds) for the root bridge to send BPDUs.

Max hops

Maximum hops in the MSTI.

 

Related commands

reset stp

display stp abnormal-port

Use display stp abnormal-port to display information about ports that are blocked by spanning tree protection features.

Syntax

display stp abnormal-port

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Examples

# In MSTP mode, display information about ports that are blocked by spanning tree protection features.

<Sysname> display stp abnormal-port

 MSTID      Blocked Port                    Reason

 1          FortyGigE1/0/1                  Root-Protected

 2          FortyGigE1/0/2                  Loop-Protected

 12         FortyGigE1/0/3                  Loopback-Protected

Table 31 Command output

Field

Description

MSTID

MSTI of the blocked port.

Blocked Port

Name of a blocked port.

Reason

Reason that the port was blocked:

·     Root-Protected—Root guard feature.

·     Loop-Protected—Loop guard feature.

·     Loopback-Protected—Self-loop protection. A port in the MSTI receives a BPDU that it sends.

·     Disputed—Dispute protection. A port receives a low-priority BPDU from a non-blocked designated port.

 

display stp bpdu-statistics

Use display stp bpdu-statistics to display the BPDU statistics on ports.

Syntax

display stp bpdu-statistics [ interface interface-type interface-number [ instance instance-list ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

interface interface-type interface-number: Displays the BPDU statistics on a specified port, where interface-type interface-number indicates the port type and number.

instance instance-list: Displays the BPDU statistics of the MSTIs that are specified by an instance list, in the format of instance-list = { instance-id [ to instance-id ] }&<1-10>, where &<1-10> indicates that you can specify up to 10 instances or instance ranges. The value range for the instance-id argument is 0 to 4094, and the value 0 represents the CIST.

Usage guidelines

In MSTP mode:

·     If you do not specify any MSTI or port, this command displays the BPDU statistics of all MSTIs on all ports. The displayed information is sorted by port name and by MSTI ID on each port.

·     If you specify a port but not an MSTI, this command displays the BPDU statistics of all MSTIs on the port. The displayed information is sorted by MSTI ID.

·     If you specify both an MSTI ID and a port, this command displays the BPDU statistics of the specified MSTI on the port.

In STP or RSTP mode:

·     If you do not specify any port, this command displays the BPDU statistics of on all ports. The displayed information is sorted by port name.

·     If you specify a port, this command displays the BPDU statistics on the port.

Examples

# In MSTP mode, display the BPDU statistics of all MSTIs on FortyGigE 1/0/1.

<Sysname> display stp bpdu-statistics interface fortygige 1/0/1

 Port: FortyGigE1/0/1

 

 Instance-Independent:

 

 Type                        Count      Last Updated

 --------------------------- ---------- -----------------

 Invalid BPDUs               0

 Looped-back BPDUs           0

 MAX-aged BPDUs              0

 TCN sent                    0

 TCN received                0

 TCA sent                    0

 TCA received                2          10:33:12 01/13/2011

 Config sent                 0

 Config received             0

 RST sent                    0

 RST received                0

 MST sent                    4          10:33:11 01/13/2011

 MST received                151        10:37:43 01/13/2011

 

 Instance 0:

 Type                        Count      Last Updated

 --------------------------- ---------- -----------------

 Timeout BPDUs               0

 MAX-hoped BPDUs             0

 TC detected                 1          10:32:40 01/13/2011

 TC sent                     3          10:33:11 01/13/2011

 TC received                 0

Table 32 Command output

Field

Description

Port

Port name.

Instance-Independent

Statistics not related to any particular MSTI.

Type

Statistical item.

Looped-back BPDUs

BPDUs sent and then received by the same port.

MAX-aged BPDUs

BPDUs whose max age was exceeded.

TCN sent

TCN BPDUs sent.

TCN received

TCN BPDUs received.

TCA sent

TCA BPDUs sent.

TCA received

TCA BPDUs received.

Config sent

Configuration BPDUs sent.

Config received

Configuration BPDUs sent.

RST sent

Configuration BPDUs received.

RST received

RSTP BPDUs sent.

MST sent

RSTP BPDUs received.

MST received

MSTP BPDUs sent.

Instance

Statistical information for a particular MSTI.

Timeout BPDUs

Expired BPDUs.

MAX-hoped BPDUs

BPDUs whose maximum hops were exceeded.

TC detected

TC BPDUs detected.

TC sent

TC BPDUs sent.

TC received

TC BPDUs received.

 

display stp down-port

Use display stp down-port to display information about ports that were shut down by spanning tree protection features.

Syntax

display stp down-port

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Examples

# Display information about ports that were shut down by spanning tree protection features.

<Sysname> display stp down-port

 Down Port                        Reason

 FortyGigE1/0/1                   BPDU-Protected

Table 33 Command output

Field

Description

Down Port

Name of a port that was shut down by the spanning tree protection features.

Reason

Reason that the port was shut down. BPDU-Protected indicates the BPDU guard feature.

 

display stp history

Use display stp history to display historical port role calculation information.

Syntax

In standalone mode:

display stp [ instance instance-list ] history [ slot slot-number ]

In IRF mode:

display stp [ instance instance-list ] history [ chassis chassis-number slot slot-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

instance instance-list: Displays the historical port role calculation information for the MSTIs that are specified by an instance list, in the format of instance-list = { instance-id [ to instance-id ] }&<1-10>, where &<1-10> indicates that you can specify up to 10 instances or instance ranges. The value range for the instance-id argument is 0 to 4094, and the value 0 represents the CIST.

slot slot-number: Displays the historical port role calculation information on the specified card. slot-number represents the number of the slot that houses the card. If this option is not specified, this command displays the historical port role calculation information on all cards. (In standalone mode.)

chassis chassis-number slot slot-number: Displays the historical port role calculation information on the specified card of the specified IRF member device. The chassis-number argument represents the ID of the IRF member device. The slot-number argument represents the number of the slot that houses the card. If this option is not specified, this command displays the historical port role calculation information on all cards of all member devices in the IRF fabric. (In IRF mode.)

Usage guidelines

In STP or RSTP mode, the displayed information is sorted by port role calculation time.

In MSTP mode:

·     If you do not specify any MSTI, this command displays the historical port role calculation information for all MSTIs. The displayed information is sorted by MSTI ID and by port role calculation time in each MSTI.

·     If you specify an MSTI, this command displays the historical port role calculation information for the specified MSTI by the sequence of port role calculation time.

Examples

In standalone mode:

# In MSTP mode, display the historical port role calculation information for the card on slot 1 in MSTI 2.

<Sysname> display stp instance 2 history slot 1

 --------------- STP slot 1 history trace ---------------

 -------------------  Instance 2   ---------------------

 Port FortyGigE1/0/1

   Role change         : ROOT->DESI (Aged)

   Time                : 2009/02/08 00:22:56

   Port priority       : 0.00e0-fc01-6510 0 0.00e0-fc01-6510 128.1

   Designated priority : 0.00e0-fc01-6510 0 0.00e0-fc01-6510 128.1

 Port FortyGigE1/0/2

   Role change         : ALTER->ROOT

   Time                : 2009/02/08 00:22:56

   Port priority       : 0.00e0-fc01-6510 0 0.00e0-fc01-6510 128.2

                         128.153

   Designated priority : 0.00e0-fc01-6510 0 0.00e0-fc01-6510 128.2

                         128.153

In IRF mode:

# In MSTP mode, display the historical port role calculation information for the card on slot 1 of IRF member device 1 in MSTI 2.

<Sysname> display stp instance 2 history chassis 1 slot 1

 ---------- STP chassis 1 slot 1 history trace --------

 -------------------  Instance 2   ---------------------

 Port FortyGigE1/1/0/1

   Role change         : ROOT->DESI (Aged)

   Time                : 2009/02/08 00:22:56

   Port priority       : 0.00e0-fc01-6510 0 0.00e0-fc01-6510 128.1

   Designated priority : 0.00e0-fc01-6510 0 0.00e0-fc01-6510 128.1

 Port FortyGigE1/1/0/2

   Role change         : ALTER->ROOT

   Time                : 2009/02/08 00:22:56

   Port priority       : 0.00e0-fc01-6510 0 0.00e0-fc01-6510 128.2

                         128.153

   Designated priority : 0.00e0-fc01-6510 0 0.00e0-fc01-6510 128.2

                         128.153

Table 34 Command output

Field

Description

Port

Port name.

Role change

Role change of the port ("Aged" means that the change was caused by expiration of the received configuration BPDU).

Time

Time of port role calculation.

Port priority

Port priority.

 

display stp region-configuration

Use display stp region-configuration to display effective MST region configuration information, including the region name, revision level, and user-configured VLAN-to-instance mappings.

Syntax

display stp region-configuration

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Examples

# In MSTP mode, display effective MST region configuration information.

<Sysname> display stp region-configuration

 Oper Configuration

   Format selector      : 0

   Region name          : hello

   Revision level       : 0

   Configuration digest : 0x5f762d9a46311effb7a488a3267fca9f

 

   Instance   VLANs Mapped

   0          21 to 4094

   1          1 to 10

   2          11 to 20

Table 35 Command output

Field

Description

Format selector

Format selector that is defined by the spanning tree protocol. The default value is 0, and the selector cannot be configured.

Region name

MST region name.

Revision level

Revision level of the MST region. The default value is 0, and the level can be configured by using the revision-level command.

VLANs Mapped

VLANs mapped to the MSTI.

 

Related commands

·     instance

·     region-name

·     revision-level

·     vlan-mapping modulo

display stp root

Use display stp root to display the root bridge information of spanning trees.

Syntax

display stp root

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Examples

# In MSTP mode, display the root bridge information of all spanning trees.

<Sysname> display stp root

 MSTID  Root Bridge ID        ExtPathCost IntPathCost Root Port

 0      0.00e0-fc0e-6554      200200      0           FortyGigE1/0/1

Table 36 Command output

Field

Description

ExtPathCost

External path cost. The device automatically calculates the default path cost of a port. Or, you can use the stp cost command to configure the path cost of a port.

IntPathCost

Internal path cost. The device automatically calculates the default path cost of a port. Or, you can use the stp cost command to configure the path cost of a port.

Root Port

Root port name (displayed only if a port of the device is the root port of MSTIs).

 

display stp tc

Use display stp tc to display the statistics of TC/TCN BPDUs received and sent by ports.

Syntax

In standalone mode:

display stp [ instance instance-list ] tc [ slot slot-number ]

In IRF mode:

display stp [ instance instance-list ] tc [ chassis chassis-number slot slot-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

instance instance-list: Displays the statistics of TC/TCN BPDUs received and sent by all ports in the MSTIs that are specified by an instance list, in the format of instance-list = { instance-id [ to instance-id ] }&<1-10>, where &<1-10> indicates that you can specify up to 10 instances or instance ranges. The value range for the instance-id argument is 0 to 4094, and the value 0 represents the CIST.

slot slot-number: Displays the statistics of TC/TCN BPDUs received and sent by all ports in the specified MSTI on the specified card. slot-number represents the number of the slot that houses the card. If this option is not specified, this command displays the statistics of TC/TCN BPDUs received and sent by all ports in the specified MSTI on all cards. (In standalone mode.)

chassis chassis-number slot slot-number: Displays the statistics of TC/TCN BPDUs received and sent by all ports in the specified MSTI on the specified card of the specified IRF member device. The chassis-number argument represents the ID of the IRF member device. The slot-number argument represents the number of the slot that houses the card. If this option is not specified, this command displays the statistics of TC/TCN BPDUs received and sent by all ports in the specified MSTI on all cards of all member devices in the IRF fabric. (In IRF mode.)

Usage guidelines

In STP or RSTP mode, the displayed information is sorted by port name.

In MSTP mode:

·     If you do not specify any MSTI, this command displays the statistics of TC/TCN BPDUs that are received and sent by all ports in all MSTIs. The displayed information is sorted by instance ID and by port name in each MSTI.

·     If you specify an MSTI, this command displays the statistics of TC/TCN BPDUs that are received and sent by all ports in the specified MSTI, in port name order.

Examples

In standalone mode:

# In MSTP mode, display the statistics of TC/TCN BPDUs received and sent by all ports on the card on slot 1 in MSTI 0.

<Sysname> display stp instance 0 tc slot 1

 -------------- STP slot 1 TC or TCN count -------------

 MSTID      Port                          Receive      Send

 0          FortyGigE1/0/1                6            4

 0          FortyGigE1/0/2                0            2

In IRF mode:

# In MSTP mode, display the statistics of TC/TCN BPDUs received and sent by all ports on slot 1 of IRF member device 1 in MSTI 0.

<Sysname> display stp instance 0 tc chassis 1 slot 1

 --------- STP chassis 1 slot 1 TC or TCN count --------

 MSTID      Port                           Receive      Send

 0          FortyGigE1/1/0/1                6            4

 0          FortyGigE1/1/0/2                0            2

Table 37 Command output

Field

Description

Port

Port name.

Receive

Number of TC/TCN BPDUs received on each port.

Send

Number of TC/TCN BPDUs sent by each port.

 

instance

Use instance to map a list of VLANs to an MSTI.

Use undo instance to remap the specified VLAN or all VLANs to the CIST (MSTI 0).

Syntax

instance instance-id vlan vlan-id-list

undo instance instance-id [ vlan vlan-id-list ]

Default

All VLANs are mapped to the CIST.

Views

MST region view

Predefined user roles

network-admin

mdc-admin

Parameters

instance-id: Specifies an MSTI ID. The minimum value is 0, representing the CIST, and the maximum value is 4094. The value range for the instance-id argument is 1 to 4094 for the undo instance command.

vlan vlan-id-list: Specifies a VLAN list in the format of vlan-id-list = { vlan-id [ to vlan-id ] }&<1-10>, where the vlan-id argument represents the VLAN ID in the range of 1 to 4094, and &<1-10> indicates that you can specify up to 10 VLAN IDs or VLAN ID ranges.

Usage guidelines

If you specify no VLAN in the undo instance command, all VLANs mapped to the specified MSTI are remapped to the CIST.

You cannot map the same VLAN to different MSTIs. If you map a VLAN that has been mapped to an MSTI to a new MSTI, the old mapping is automatically removed.

You can configure VLAN-to-instance mapping for up to 63 MSTIs.

After configuring this command, run the active region-configuration command to activate the VLAN-to-instance mapping.

With Digest Snooping enabled globally, modify the VLAN-to-instance mappings or execute the undo stp region-configuration command to restore the default MST region configuration with caution. Such operations might cause loops or traffic disruption because the VLAN-to-instance mappings are inconsistent with those on the neighboring devices.

Examples

# Map VLAN 2 to MSTI 1.

<Sysname> system-view

[Sysname] stp region-configuration

[Sysname-mst-region] instance 1 vlan 2

Related commands

·     active region-configuration

·     check region-configuration

·     display stp region-configuration

region-name

Use region-name to configure the MST region name.

Use undo region-name to restore the default MST region name.

Syntax

region-name name

undo region-name

Default

The MST region name of a device is its MAC address.

Views

MST region view

Predefined user roles

network-admin

mdc-admin

Parameters

name: Specifies the MST region name, a string of 1 to 32 characters.

Usage guidelines

The MST region name, the VLAN-to-instance mapping table, and the MSTP revision level of a device determine the device's MST region.

After configuring this command, run the active region-configuration command to activate the configured MST region name.

Examples

# Set the MST region name of the device to hello.

<Sysname> system-view

[Sysname] stp region-configuration

[Sysname-mst-region] region-name hello

Related commands

·     active region-configuration

·     check region-configuration

·     display stp region-configuration

·     instance

·     revision-level

·     vlan-mapping modulo

reset stp

Use reset stp to clear spanning tree statistics. The spanning tree statistics include the numbers of TCN BPDUs, configuration BPDUs, RST BPDUs, and MST BPDUs that are sent and received through the specified ports.

Syntax

reset stp [ interface interface-list ]

Views

User view

Predefined user roles

network-admin

mdc-admin

Parameters

interface interface-list: Clears the spanning tree statistics of the ports that are specified in the format of interface-list = { interface-type interface-number [ to interface-type interface-number ] }&<1-10>, where &<1-10> indicates that you can specify up to 10 ports or port ranges. If you don't specify this option, this command clears the spanning tree-related statistics information on all ports.

Examples

# Clear the spanning tree-related statistics on ports FortyGigE 1/0/1 through FortyGigE 1/0/3.

<Sysname> reset stp interface fortygige 1/0/1 to fortygige 1/0/3

Related commands

display stp

revision-level

Use revision-level to configure the MSTP revision level.

Use undo revision-level to restore the default MSTP revision level.

Syntax

revision-level level

undo revision-level

Default

The MSTP revision level is 0.

Views

MST region view

Predefined user roles

network-admin

mdc-admin

Parameters

level: Specifies an MSTP revision level in the range of 0 to 65535.

Usage guidelines

The MSTP revision level, the MST region name, and the VLAN-to-instance mapping table of a device determine the device's MST region. When the MST region name and VLAN-to-instance mapping table are both the same for two MST regions, they can still be differentiated by their MSTP revision levels.

After configuring this command, run the active region-configuration command to activate the configured MST region level.

Examples

# Set the MSTP revision level of the MST region to 5.

<Sysname> system-view

[Sysname] stp region-configuration

[Sysname-mst-region] revision-level 5

Related commands

·     active region-configuration

·     check region-configuration

·     display stp region-configuration

·     instance

·     region-name

·     vlan-mapping modulo

stp bpdu-protection

Use stp bpdu-protection to enable the BPDU guard feature.

Use undo stp bpdu-protection to disable the BPDU guard feature.

Syntax

stp bpdu-protection

undo stp bpdu-protection

Default

The BPDU guard feature is disabled.

Views

System view

Predefined user roles

network-admin

mdc-admin

Examples

# Enable the BPDU guard feature.

<Sysname> system-view

[Sysname] stp bpdu-protection

stp bridge-diameter

Use stp bridge-diameter to set the network diameter, which is the maximum possible number of stations between any two terminal devices on the switched network.

Use undo stp bridge-diameter to restore the default.

Syntax

stp bridge-diameter diameter

undo stp bridge-diameter

Default

The network diameter of the switched network is 7.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

diameter: Specifies the switched network diameter in the range of 2 to 7.

Usage guidelines

An appropriate setting of hello time, forward delay, and max age can speed up network convergence. The values of these timers are related to the network size, and you can set the timers by setting the network diameter. With the network diameter set to 7 (the default), the three timers are also set to their defaults.

Each MST region is considered a device, and the configured network diameter of the switched network is effective only on MSTI 0 (or the common root bridge).

Examples

# In MSTP mode, set the network diameter of the switched network to 5.

<Sysname> system-view

[Sysname] stp bridge-diameter 5

Related commands

·     stp timer forward-delay

·     stp timer hello

·     stp timer max-age

stp compliance

Use stp compliance to configure the mode that a port uses to recognize and send MSTP BPDUs.

Use undo stp compliance to restore the default.

Syntax

stp compliance { auto | dot1s | legacy }

undo stp compliance

Default

A port automatically recognizes the formats of received MSTP packets and determines the formats of MSTP packets to be sent based on the recognized formats.

Views

Layer 2 Ethernet interface view, Layer 2 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Parameters

auto: Configures the port to recognize the MSTP BPDU format automatically and determine the format of MSTP BPDUs to send.

dot1s: Configures the port to receive and send only standard-format (802.1s-compliant) MSTP BPDUs.

legacy: Configures the port to receive and send only compatible-format MSTP BPDUs.

Usage guidelines

When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only the interface.

When the setting is configured in Layer 2 aggregate interface view, it takes effect on only the aggregate interface.

When the setting is configured on a member port in an aggregation group, it takes effect only after the port leaves the aggregation group.

Examples

# Configure FortyGigE 1/0/1 to send only standard-format (802.1s) MSTP packets.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] stp compliance dot1s

stp config-digest-snooping

Use stp config-digest-snooping to enable Digest Snooping.

Use undo stp config-digest-snooping to disable Digest Snooping.

Syntax

stp config-digest-snooping

undo stp config-digest-snooping

Default

Digest Snooping is disabled.

Views

Layer 2 Ethernet interface view, Layer 2 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

Enable this feature both globally and on ports connected to other vendors' devices. To minimize impact, enable the feature on all associated ports before you enable it globally.

When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only the interface.

When the setting is configured in Layer 2 aggregate interface view, it takes effect on only the aggregate interface.

When the setting is configured on a member port in an aggregation group, it takes effect only after the port leaves the aggregation group.

Examples

# Enable Digest Snooping on FortyGigE 1/0/1 and then globally.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] stp config-digest-snooping

[Sysname-FortyGigE1/0/1] quit

[Sysname] stp global config-digest-snooping

Related commands

·     display stp

·     stp global config-digest-snooping

stp cost

Use stp cost to set the path cost of a port.

Use undo stp cost to restore the default.

Syntax

stp [ instance instance-list ] cost cost

undo stp [ instance instance-list ] cost

Default

The device automatically calculates the path costs of ports in each spanning tree based on the corresponding standard.

Views

Layer 2 Ethernet interface view, Layer 2 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Parameters

instance instance-list: Sets the path cost of the port in the MSTIs that are specified by an instance list, in the format of instance-list = { instance-id [ to instance-id ] }&<1-10>, where &<1-10> indicates that you can specify up to 10 instances or instance ranges. The value range for the instance-id argument is 0 to 4094, and the value 0 represents the CIST.

cost: Specifies the path cost of the port, with an effective range that depends on the path cost calculation standard that is adopted.

·     When the IEEE 802.1d-1998 standard is selected for path cost calculation, the value range for the cost argument is 1 to 65535.

·     When the IEEE 802.1t standard is selected for path cost calculation, the value range for the cost argument is 1 to 200000000.

·     When the private standard is selected for path cost calculation, the value range for the cost argument is 1 to 200000.

Usage guidelines

Path cost is an important factor in spanning tree calculation. Setting different path costs for a port in MSTIs allows VLAN traffic flows to be forwarded along different physical links, which results in VLAN-based load balancing.

The path cost setting of a port can affect the role selection of the port. When the path cost of a port is changed, the system calculates the role of the port and initiates a state transition.

When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only the interface.

When the setting is configured in Layer 2 aggregate interface view, it takes effect on only the aggregate interface.

When the setting is configured on a member port in an aggregation group, is takes effect only after the port leaves the aggregation group.

Examples

# In MSTP mode, set the path cost of port FortyGigE 1/0/3 in MSTI 2 to 200.

<Sysname> system-view

[Sysname] interface fortygige 1/0/3

[Sysname-FortyGigE1/0/3] stp instance 2 cost 200

Related commands

·     display stp

·     stp pathcost-standard

stp edged-port

Use stp edged-port to configure a port as an edge port.

Use undo stp edged-port to configure a port as a non-edge port.

Syntax

stp edged-port

undo stp edged-port

Default

All ports are non-edge ports.

Views

Layer 2 Ethernet interface view, Layer 2 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

If a port directly connects to a user terminal rather than to another device or a shared LAN segment, this port is regarded as an edge port. In case the network topology changes, an edge port does not cause a temporary loop. You can enable the port to transit to the forwarding state rapidly by configuring it as an edge port. As a best practice, configure ports that directly connect to user terminals as edge ports.

Typically, configuration BPDUs from other devices cannot reach an edge port, because the edge port does not connect to any other device. If a port receives a configuration BPDU when the BPDU guard feature is disabled, the port functions as a non-edge port, even if you configure it as an edge port.

On a port, the loop guard feature and the edge port setting are mutually exclusive.

When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only the interface.

When the setting is configured in Layer 2 aggregate interface view, it takes effect on only the aggregate interface.

When the setting is configured on a member port in an aggregation group, it takes effect only after the port leaves the aggregation group.

Examples

# Configure FortyGigE 1/0/1 as an edge port.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] stp edged-port

Related commands

·     stp bpdu-protection

·     stp loop-protection

·     stp root-protection

stp enable

Use stp enable to enable the spanning tree feature.

Use undo stp enable to disable the spanning tree feature.

Syntax

stp enable

undo stp enable

Default

The spanning tree feature is enabled on all ports.

Views

Layer 2 Ethernet interface view, Layer 2 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

When you enable the spanning tree feature, the device operates in STP, RSTP, or MSTP mode, depending on the spanning tree mode setting.

When you enable the spanning tree feature, the device dynamically maintains the spanning tree status of VLANs, based on received configuration BPDUs.

When you disable the spanning tree feature, the device stops maintaining the spanning tree status.

When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only the interface.

When the setting is configured in Layer 2 aggregate interface view, it takes effect on only the aggregate interface.

When the setting is configured on a member port in an aggregation group, it takes effect only after the port leaves the aggregation group.

Examples

# In MSTP mode, disable the spanning tree feature on port FortyGigE 1/0/1.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] undo stp enable

Related commands

·     stp global enable

·     stp mode

stp global config-digest-snooping

Use stp global config-digest-snooping to enable Digest Snooping globally.

Use undo stp global config-digest-snooping to disable Digest Snooping globally.

Syntax

stp global config-digest-snooping

undo stp global config-digest-snooping

Default

Digest Snooping is disabled globally.

Views

System view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

Enable this feature both globally and on ports connected to other vendors' devices. To minimize impact, enable the feature on all associated ports before you enable it globally.

Examples

# Enable Digest Snooping on FortyGigE 1/0/1 and then globally.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] stp config-digest-snooping

[Sysname-FortyGigE1/0/1] quit

[Sysname] stp global config-digest-snooping

Related commands

·     display stp

·     stp config-digest-snooping

stp global enable

Use stp global enable to enable the spanning tree feature globally.

Use undo stp global enable to disable the spanning tree feature globally.

Syntax

stp global enable

undo stp global enable

Default

The spanning tree feature is globally disabled.

Views

System view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

When you enable the spanning tree feature, the device operates in STP, RSTP, or MSTP mode, depending on the spanning tree mode setting.

When the spanning tree feature is enabled, the device dynamically maintains the spanning tree status of VLANs based on received configuration BPDUs. When the spanning tree feature is disabled, the device stops maintaining the spanning tree status.

Examples

# Enable the spanning tree feature globally.

<Sysname> system-view

[Sysname] stp global enable

Related commands

·     stp enable

·     stp mode

stp global mcheck

Use stp global mcheck to perform the mCheck operation globally.

Syntax

stp global mcheck

Views

System view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

If a port on a device running MSTP or RSTP connects to an STP device, this port automatically transits to the STP mode when the port receives STP BPDUs. However, if the peer STP device is shut down or removed and the local device cannot detect the change, the local device cannot automatically transit back to the original mode. In this case, you can perform an mCheck operation to forcibly transit the port to operate in the original mode.

The device operates in STP, RSTP, or MSTP mode, depending on the spanning tree mode setting.

The stp global mcheck command is effective only when the device operates in MSTP or RSTP mode.

Examples

# Perform mCheck globally.

<Sysname> system-view

[Sysname] stp global mcheck

Related commands

·     stp mcheck

·     stp mode

stp loop-protection

Use stp loop-protection to enable the loop guard feature on a port.

Use undo stp loop-protection to disable the loop guard feature on a port.

Syntax

stp loop-protection

undo stp loop-protection

Default

The loop guard feature is disabled.

Views

Layer 2 Ethernet interface view, Layer 2 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

On a port, the loop guard feature is mutually exclusive with the root guard feature or the edge port setting.

When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only the interface.

When the setting is configured in Layer 2 aggregate interface view, it takes effect on only the aggregate interface.

When the setting is configured on a member port in an aggregation group, it takes effect only after the port leaves the aggregation group.

Examples

# Enable the loop guard feature on FortyGigE 1/0/1.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] stp loop-protection

Related commands

·     stp edged-port

·     stp root-protection

stp max-hops

Use stp max-hops to set the maximum number of hops for an MST region.

Use undo stp max-hops to restore the default.

Syntax

stp max-hops hops

undo stp max-hops

Default

The maximum number of hops for an MST region is 20.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

hops: Specifies the maximum hops in the range of 1 to 40.

Examples

# Set the maximum hops to 35 for an MST region.

<Sysname> system-view

[Sysname] stp max-hops 35

Related commands

display stp

stp mcheck

Use stp mcheck to perform the mCheck operation on a port.

Syntax

stp mcheck

Views

Layer 2 Ethernet interface view, Layer 2 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

If a port on a device that is running MSTP or RSTP connects to an STP device, the port automatically transits to the STP mode when the port receives STP BPDUs. If the peer STP device is shut down or removed and the local device cannot detect the change, the local device cannot automatically transit back to the original mode. In this case, you can perform an mCheck operation to forcibly transit the port to operation in the original mode.

Suppose a scenario where Device A, Device B, and Device C are connected in sequence. Device A runs STP, Device B does not run any spanning tree protocol, and Device C runs RSTP or MSTP. In this case, when Device C receives an STP BPDU transparently transmitted by Device B, the receiving port transits to the STP mode. If you configure Device B to run RSTP or MSTP with Device C, perform mCheck operations on the ports that connect Device B and Device C.

The device operates in STP, RSTP, or MSTP mode, depending on the spanning tree mode setting.

The stp mcheck command is effective only when the device operates in MSTP or RSTP mode.

When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only the interface.

When the setting is configured in Layer 2 aggregate interface view, it takes effect on only the aggregate interface.

When the setting is configured on a member port in an aggregation group, it takes effect only after the port leaves the aggregation group.

Examples

# Perform mCheck on FortyGigE 1/0/1.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] stp mcheck

Related commands

·     stp global mcheck

·     stp mode

stp mode

Use stp mode to configure the spanning tree operating mode.

Use undo stp mode to restore the default.

Syntax

stp mode { mstp | rstp | stp }

undo stp mode

Default

A spanning tree device operates in MSTP mode.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

mstp: Configures the spanning tree device to operate in MSTP mode.

rstp: Configures the spanning tree device to operate in RSTP mode.

stp: Configures the spanning tree device to operate in STP mode.

Usage guidelines

MSTP mode is compatible with RSTP mode, and RSTP mode is compatible with STP mode.

Examples

# Configure the spanning tree device to operate in STP mode.

<Sysname> system-view

[Sysname] stp mode stp

Related commands

·     stp enable

·     stp global enable

·     stp global mcheck

·     stp mcheck

stp no-agreement-check

Use stp no-agreement-check to enable No Agreement Check on a port.

Use undo stp no-agreement-check to disable No Agreement Check on a port.

Syntax

stp no-agreement-check

undo stp no-agreement-check

Default

No Agreement Check is disabled.

Views

Layer 2 Ethernet interface view, Layer 2 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

This command takes effect only after you enable it on the root port.

When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only the interface.

When the setting is configured in Layer 2 aggregate interface view, it takes effect on only the aggregate interface.

When the setting is configured on a member port in an aggregation group, it takes effect only after the port leaves the aggregation group.

Examples

# Enable No Agreement Check on FortyGigE 1/0/1.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] stp no-agreement-check

stp pathcost-standard

Use stp pathcost-standard to specify a standard for the device to use when calculating the default path costs for ports.

Use undo stp pathcost-standard to restore the default.

Syntax

stp pathcost-standard { dot1d-1998 | dot1t | legacy }

undo stp pathcost-standard

Default

The devices uses the legacy standard to calculate the default path costs for ports.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

dot1d-1998: Configures the device to calculate the default path cost for ports based on IEEE 802.1d-1998.

dot1t: Configures the device to calculate the default path cost for ports based on IEEE 802.1t.

legacy: Configures the device to calculate the default path cost for ports based on a private standard.

Usage guidelines

If you change the standard that the device uses in calculating the default path costs, you restore the path costs to the default.

Examples

# Configure the device to calculate the default path cost for ports based on IEEE 802.1d-1998.

<Sysname> system-view

[Sysname] stp pathcost-standard dot1d-1998

Related commands

·     display stp

·     stp cost

stp point-to-point

Use stp point-to-point to configure the link type of a port.

Use undo stp point-to-point to restore the default.

Syntax

stp point-to-point { auto | force-false | force-true }

undo stp point-to-point

Default

The default setting is auto, and the spanning tree device automatically detects whether a port connects to a point-to-point link.

Views

Layer 2 Ethernet interface view, Layer 2 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Parameters

auto: Specifies automatic detection of the link type.

force-false: Specifies the non-point-to-point link type.

force-true: Specifies the point-to-point link type.

Usage guidelines

When connecting to a non-point-to-point link, a port is incapable of rapid state transition.

You can configure the link type as point-to-point for a Layer 2 aggregate interface or a port that operates in full duplex mode. As a best practice, use the default setting for the device to automatically detect the port link type.

The stp point-to-point force-false or stp point-to-point force-true command configured on a port in MSTP mode is effective on all MSTIs or VLANs.

If the physical link to which the port connects is not a point-to-point link but you set it to be one, the configuration might cause a temporary loop.

When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only the interface.

When the setting is configured in Layer 2 aggregate interface view, it takes effect on only the aggregate interface.

When the setting is configured on a member port in an aggregation group, it takes effect only after the port leaves the aggregation group.

Examples

# Configure the link that connects FortyGigE 1/0/3 as a point-to-point link.

<Sysname> system-view

[Sysname] interface fortygige 1/0/3

[Sysname-FortyGigE1/0/3] stp point-to-point force-true

Related commands

display stp

stp port priority

Use stp port priority to set the priority of a port. The port priority affects the role of a port in a spanning tree.

Use undo stp port priority to restore the default.

Syntax

stp [ instance instance-list ] port priority priority

undo stp [ instance instance-list ] port priority

Default

The port priority is 128.

Views

Layer 2 Ethernet interface view, Layer 2 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Parameters

instance instance-list: Sets the priority of the port in the MSTIs that are specified by an instance list, in the format of instance-list = { instance-id [ to instance-id ] }&<1-10>, where &<1-10> indicates that you can specify up to 10 instances or instance ranges. The value range for the instance-id argument is 0 to 4094, and the value 0 represents the CIST.

priority: Specifies the port priority in the range of 0 to 240 in increments of 16 (as in 0, 16, 32).

Usage guidelines

The smaller the value, the higher the port priority. If all ports on your device use the same priority value, the port priority depends on the port index. The smaller the index, the higher the priority.

When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only the interface.

When the setting is configured in Layer 2 aggregate interface view, it takes effect on only the aggregate interface.

When the setting is configured on a member port in an aggregation group, it takes effect only after the port leaves the aggregation group.

Examples

# In MSTP mode, set the priority of port FortyGigE 1/0/3 to 16 in MSTI 2.

<Sysname> system-view

[Sysname] interface fortygige 1/0/3

[Sysname-FortyGigE1/0/3] stp instance 2 port priority 16

Related commands

display stp

stp port-log

Use stp port-log to enable outputting port state transition information.

Use undo stp port-log to disable outputting port state transition information.

Syntax

stp port-log { all | instance instance-list }

undo stp port-log { all | instance instance-list }

Default

This feature is disabled.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

all: Specifies all MSTIs.

instance instance-list: Specifies the MSTIs by an instance list, in the format of instance-list = { instance-id [ to instance-id ] }&<1-10>, where &<1-10> indicates that you can specify up to 10 instances or instance ranges. The value range for the instance-id argument is 0 to 4094, and the value 0 represents the CIST.

Examples

# In MSTP mode, enable outputting port state transition information for MSTI 2.

<Sysname> system-view

[Sysname] stp port-log instance 2

%Aug 16 00:49:41:856 2011 Sysname MSTP/3/MSTP_DISCARDING: Instance 2's port FortyGigE1/0/1 has been set to discarding state.

%Aug 16 00:49:41:856 2011 Sysname MSTP/3/MSTP_FORWARDING: Instance 2's port FortyGigE1/0/2 has been set to forwarding state.

The output shows that FortyGigE 1/0/1 in MSTI 2 transited to the discarding state and FortyGigE 1/0/2 in MSTI 2 transited to the forwarding state.

stp priority

Use stp priority to set the priority of the device.

Use undo stp priority to restore the default priority.

Syntax

stp [ instance instance-list ] priority priority

undo stp [ instance instance-list ] priority

Default

The device priority is 32768.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

instance instance-list: Sets the priority of the device in the MSTIs that are specified by an instance list, in the format of instance-list = { instance-id [ to instance-id ] }&<1-10>, where &<1-10> indicates that you can specify up to 10 instances or instance ranges. The value range for the instance-id argument is 0 to 4094, and the value 0 represents the CIST.

priority: Specifies the device priority in the range of 0 to 61440 in increments of 4096 (as in 0, 4096, 8192). You can set up to 16 priority values on the device. The smaller the value, the higher the device priority.

Examples

# In MSTP mode, set the device priority to 4096 in MSTI 1.

<Sysname> system-view

[Sysname] stp instance 1 priority 4096

stp region-configuration

Use stp region-configuration to enter MST region view.

Use undo stp region-configuration to restore the default MST region configurations.

Syntax

stp region-configuration

undo stp region-configuration

Default

The default settings for the MST region are as follows:

·     The MST region name of the device is the MAC address of the device.

·     All VLANs are mapped to the CIST.

·     The MSTP revision level is 0.

Views

System view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

After you enter MST region view, you can configure the MST region parameters, including the region name, VLAN-to-instance mappings, and revision level.

Examples

# Enter MST region view.

<Sysname> system-view

[Sysname] stp region-configuration

[Sysname-mst-region]

stp role-restriction

Use stp role-restriction to enable port role restriction.

Use undo stp role-restriction to disable port role restriction.

Syntax

stp role-restriction

undo stp role-restriction

Default

Port role restriction is disabled.

Views

Layer 2 Ethernet interface view, Layer 2 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

When port role restriction is enabled on a port, the port cannot become a root port.

When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only the interface.

When the setting is configured in Layer 2 aggregate interface view, it takes effect on only the aggregate interface.

When the setting is configured on a member port in an aggregation group, it takes effect only after the port leaves the aggregation group.

Examples

# Enable port role restriction on interface FortyGigE 1/0/1.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] stp role-restriction

stp root primary

Use stp root primary to configure the device as the root bridge.

Use undo stp root to restore the default.

Syntax

stp [ instance instance-list ] root primary

undo stp [ instance instance-list ] root

Default

A device is not a root bridge.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

instance instance-list: Configures the device as the root bridge in the MSTIs that are specified by an instance list, in the format of instance-list = { instance-id [ to instance-id ] }&<1-10>, where &<1-10> indicates that you can specify up to 10 instances or instance ranges. The value range for the instance-id argument is 0 to 4094, and the value 0 represents the CIST. If you do not specify this option, the command configures the device as the primary root bridge in the MSTP CIST or as the primary root bridge of STP or RSTP.

Usage guidelines

Once you specify the device as the root bridge, you cannot change the priority of the device.

Examples

# In MSTP mode, specify the device as the root bridge of MSTI 1.

<Sysname> system-view

[Sysname] stp instance 1 root primary

Related commands

·     stp priority

·     stp root secondary

stp root secondary

Use stp root secondary to configure the device as a secondary root bridge.

Use undo stp root to restore the default.

Syntax

stp [ instance instance-list ] root secondary

undo stp [ instance instance-list ] root

Default

A device is not a secondary root bridge.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

instance instance-list: Configures the device as a secondary root bridge in the MSTIs that are specified by an instance list, in the format of instance-list = { instance-id [ to instance-id ] }&<1-10>, where &<1-10> indicates that you can specify up to 10 instances or instance ranges. The value range for the instance-id argument is 0 to 4094, and the value 0 represents the CIST. If you do not specify this option, the command configures the device as the secondary root bridge in the MSTP CIST or as the primary root bridge of STP or RSTP.

Usage guidelines

Once you specify the device as a secondary root bridge, you cannot change the priority of the device.

Examples

# In MSTP mode, specify the device as a secondary root bridge in MSTI 1.

<Sysname> system-view

[Sysname] stp instance 1 root secondary

Related commands

·     stp priority

·     stp root primary

stp root-protection

Use stp root-protection to enable the root guard feature on a port.

Use undo stp root-protection to disable the root guard feature on a port.

Syntax

stp root-protection

undo stp root-protection

Default

The root guard feature is disabled.

Views

Layer 2 Ethernet interface view, Layer 2 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

On a port, the loop guard feature and the root guard feature are mutually exclusive.

When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only the interface.

When the setting is configured in Layer 2 aggregate interface view, it takes effect on only the aggregate interface.

When the setting is configured on a member port in an aggregation group, it takes effect only after the port leaves the aggregation group.

Examples

# Enable the root guard feature for FortyGigE 1/0/1.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] stp root-protection

Related commands

·     stp edged-port

·     stp loop-protection

stp tc-protection

Use stp tc-protection to enable the TC-BPDU attack guard feature for the device.

Use undo stp tc-protection to disable the TC-BPDU attack guard feature for the device.

Syntax

stp tc-protection

undo stp tc-protection

Default

The TC-BPDU attack guard feature is enabled.

Views

System view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

With the TC-BPDU guard feature, you can set the maximum number of immediate forwarding address entry flushes that the device can perform within a certain interval (every 10 seconds). For TC-BPDUs received that exceed the limit, the device performs a forwarding address entry flush when the interval elapses. This prevents frequent flushing of forwarding address entries.

Examples

# Disable the TC-BPDU attack guard feature for the device.

<Sysname> system-view

[Sysname] undo stp tc-protection

Related commands

stp tc-protection threshold

stp tc-protection threshold

Use stp tc-protection threshold to set the maximum number of forwarding address entry flushes that the device can perform within a certain interval (every 10 seconds).

Use undo stp tc-protection threshold to restore the default.

Syntax

stp tc-protection threshold number

undo stp tc-protection threshold

Default

By default, the device can perform a maximum of 6 forwarding address entry flushes every 10 seconds.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

number: Specifies the maximum number of immediate forwarding address entry flushes that the device can perform within a certain interval (10 seconds). The value is in the range of 1 to 255.

Examples

# Configure the device to perform up to 10 forwarding address entry flushes every 10 seconds.

<Sysname> system-view

[Sysname] stp tc-protection threshold 10

Related commands

stp tc-protection

stp tc-restriction

Use stp tc-restriction to enable TC-BPDU transmission restriction.

Use undo stp tc-restriction to disable TC-BPDU transmission restriction.

Syntax

stp tc-restriction

undo stp tc-restriction

Default

TC-BPDU transmission restriction is disabled.

Views

Layer 2 Ethernet interface view, Layer 2 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

When TC-BPDU transmission restriction is enabled on a port, the port does not send TC-BPDUs to the other ports, and it does not delete the MAC address entries.

When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only the interface.

When the setting is configured in Layer 2 aggregate interface view, it takes effect on only the aggregate interface.

When the setting is configured on a member port in an aggregation group, it takes effect only after the port leaves the aggregation group.

Examples

# Enable TC-BPDU transmission restriction on FortyGigE 1/0/1.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] stp tc-restriction

stp timer forward-delay

Use stp timer forward-delay to set the forward delay timer of the device.

Use undo stp timer forward-delay to restore the default.

Syntax

stp timer forward-delay time

undo stp timer forward-delay

Default

The forward delay timer is 1500 centiseconds.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

time: Specifies the forward delay in centiseconds in the range of 400 to 3000 in increments of 100 (as in 400, 500, 600).

Usage guidelines

The forward delay timer determines the time interval of state transition. To prevent temporary loops, a spanning tree port goes through the learning (intermediate) state before it transits from the discarding state to the forwarding state. To stay synchronized with the remote device, the port has a wait period between transition states that is determined by the forward delay timer.

As a best practice, specify the network diameter of the switched network by using the stp bridge-diameter command instead of setting the forward delay with this command. The spanning tree protocols will automatically calculate the optimal settings for the forward delay timer. If the network diameter uses the default value, the forward delay timer also uses the default value.

Examples

# In MSTP mode, set the forward delay timer to 2000 centiseconds.

<Sysname> system-view

[Sysname] stp timer forward-delay 2000

Related commands

·     stp bridge-diameter

·     stp timer hello

·     stp timer max-age

stp timer hello

Use stp timer hello to set the hello time of the device.

Use undo stp timer hello to restore the default.

Syntax

stp timer hello time

undo stp timer hello

Default

The hello time is 200 centiseconds.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

time: Specifies the hello time in centiseconds in the range of 100 to 1000 in increments of 100 (as in 100, 200, 300).

Usage guidelines

Hello time is the time interval at which spanning tree devices send configuration BPDUs to maintain the spanning tree. If a device fails to receive configuration BPDUs within the set period of time, a new spanning tree calculation process is triggered due to timeout.

As a best practice, specify the network diameter of the switched network by using the stp bridge-diameter command instead of setting the hello time with this command. The spanning tree protocols will automatically calculate the optimal settings for the hello timer. If the network diameter uses the default value, the hello timer also uses the default value.

Examples

# In MSTP mode, set the hello time to 400 centiseconds.

<Sysname> system-view

[Sysname] stp timer hello 400

Related commands

·     stp bridge-diameter

·     stp timer forward-delay

·     stp timer max-age

stp timer max-age

Use stp timer max-age to set the max age timer of the device.

Use undo stp timer max-age to restore the default.

Syntax

stp timer max-age time

undo stp timer max-age

Default

The max age is 2000 centiseconds.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

time: Specifies the max age in centiseconds in the range of 600 to 4000 in increments of 100 (as in 600, 700, 800).

Usage guidelines

In the CIST of an MSTP network, the device determines whether a configuration BPDU received on a port has expired based on the max age timer. If the configuration BPDU has expired, a new spanning tree calculation process starts. The max age timer takes effect only on the CIST (or MSTI 0).

As a best practice, specify the network diameter of the switched network by using the stp bridge-diameter command instead of setting the max age timer with this command. The spanning tree protocols will automatically calculate the optimal settings for the max age timer. If the network diameter uses the default value, the max age timer also uses the default value.

Examples

# In MSTP mode, set the max age timer to 1000 centiseconds.

<Sysname> system-view

[Sysname] stp timer max-age 1000

Related commands

·     stp bridge-diameter

·     stp timer forward-delay

·     stp timer hello

stp timer-factor

Use stp timer-factor to configure the timeout interval by setting the timeout factor.

Timeout interval = timeout factor × 3 × hello time.

Use undo stp timer-factor to restore the default.

Syntax

stp timer-factor factor

undo stp timer-factor

Default

The timeout factor of a device is set to 3.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

factor: Specifies the timeout factor in the range of 1 to 20.

Usage guidelines

After the network topology is stabilized, each non-root-bridge device forwards configuration BPDUs to the surrounding devices at the interval of hello time to determine whether any link is faulty. If a device does not receive a BPDU from the upstream device within nine times of the hello time, it assumes that the upstream device has failed and starts a new spanning tree calculation process.

An upstream device might be too busy to forward configuration BPDUs in time, for example, many Layer 2 interfaces are configured on the upstream device. As a result, the downstream device fails to receive a BPDU within the timeout period and then starts an undesired spanning tree calculation. The calculation might fail, and it also wastes network resources. To prevent undesired spanning tree calculation and save network resources on a stable network, you can set the timeout factor to 5, 6, or 7.

Examples

# Set the timeout factor of the device to 7.

<Sysname> system-view

[Sysname] stp timer-factor 7

Related commands

stp timer hello

stp transmit-limit

Use stp transmit-limit to set the BPDU transmission rate of a port.

Use undo stp transmit-limit to restore the default.

Syntax

stp transmit-limit limit

undo stp transmit-limit

Default

The BPDU transmission rate of all ports is 10. Each port can send 10 BPDUs within each hello time.

Views

Layer 2 Ethernet interface view, Layer 2 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Parameters

limit: Specifies the BPDU transmission rate in the range of 1 to 255.

Usage guidelines

The maximum number of BPDUs a port can send within each hello time equals the BPDU transmission rate plus the hello timer value.

A larger BPDU transmission rate value requires more system resources. An appropriate BPDU transmission rate setting can prevent spanning tree protocols from using excessive bandwidth resources during network topology changes. As a best practice, use the default value.

When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only the interface.

When the setting is configured in Layer 2 aggregate interface view, it takes effect on only the aggregate interface.

When the setting is configured on a member port in an aggregation group, it takes effect only after the port leaves the aggregation group.

Examples

# Set the BPDU transmission rate of port FortyGigE 1/0/1 to 5.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] stp transmit-limit 5

vlan-mapping modulo

Use vlan-mapping modulo to map VLANs in the MST region to MSTIs according to the specified modulo value and quickly create a VLAN-to-instance mapping table.

Syntax

vlan-mapping modulo modulo

Default

All VLANs are mapped to the CIST (MSTI 0).

Views

MST region view

Predefined user roles

network-admin

mdc-admin

Parameters

modulo: Specifies the modulo value in the range of 1 to 62.

Usage guidelines

You cannot map a VLAN to different MSTIs. If you map a VLAN that has been mapped to an MSTI to a new MSTI, the old mapping is automatically removed.

This command maps each VLAN to the MSTI whose ID is (VLAN ID – 1) % modulo + 1, where (VLAN ID – 1) % modulo is the modulo operation for (VLAN ID – 1). If the modulo value is 15, then VLAN 1 is mapped to MSTI 1, VLAN 2 to MSTI 2, …, VLAN 15 to MSTI 15, VLAN 16 to MSTI 1, and so on.

Examples

# Map VLANs to MSTIs as per modulo 8.

<Sysname> system-view

[Sysname] stp region-configuration

[Sysname-mst-region] vlan-mapping modulo 8

Related commands

·     active region-configuration

·     check region-configuration

·     display stp region-configuration

·     region-name

·     revision-level


Loop detection commands

display loopback-detection

Use display loopback-detection to display the loop detection configuration and status.

Syntax

display loopback-detection

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Example

# Display the loop detection configuration and status.

<Sysname> display loopback-detection

Loopback detection is enabled.

Loopback detection interval is 30 second(s).

Loopback is detected on following interfaces:

 Interface                           Action mode

 FortyGigE1/0/1              Block

 FortyGigE1/0/2              Shutdown

 FortyGigE1/0/3              None

 FortyGigE1/0/4              No-learning

Table 38 Command output

Field

Description

Action mode

Loop protection action:

·     BlockWhen a loop is detected on a port, the device generates a log, disables the port from learning MAC addresses, and blocks inbound traffic on the port.

·     NoneWhen a loop is detected on a port, the device generates a log but performs no action on the port.

·     No-learningWhen a loop is detected on a port, the device generates a log and disables the port from learning MAC addresses.

·     ShutdownWhen a loop is detected on a port, the device performs the following tasks:

¡     Generates a log.

¡     Shuts down the port to disable the port from receiving or sending frames. The device automatically sets the port to the forwarding state after a time interval configured by using the shutdown-interval command (see Fundamentals Command Reference).

 

loopback-detection action

Use loopback-detection action to configure the loop protection action on a port.

Use undo loopback-detection action to restore the default.

Syntax

In Layer 2 Ethernet interface view:

loopback-detection action { block | no-learning | shutdown }

undo loopback-detection action

In Layer 2 aggregate interface view:

loopback-detection action shutdown

undo loopback-detection action

Default

When the device detects a loop on a port, it generates a log but performs no action on the port.

Views

Layer 2 Ethernet interface view, Layer 2 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Parameters

block: Enables the block mode. If a loop is detected, the device disables MAC address learning and blocks inbound traffic on the port, in addition to generating a log. Layer 2 aggregate interfaces do not support this keyword.

no-learning: Enables the no-learning mode. If a loop is detected, the device generates a log and disables MAC address learning on the port. Layer 2 aggregate interfaces do not support this keyword.

shutdown: Enables the shutdown mode. If a loop is detected, the device generates a log and shuts down the port. The device automatically sets the port to the forwarding state after the time interval configured by using the shutdown-interval command (see Fundamentals Command Reference).

Usage guidelines

Use this command to configure the loop protection action on a per-port basis.

To configure the loop protection action globally, use the loopback-detection global action command.

The global configuration applies to all ports. The per-port configuration applies to the individual ports. The per-port configuration takes precedence over the global configuration.

Example

# Set the loop protection action to shutdown on port FortyGigE 1/0/1.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[System-FortyGigE1/0/1] loopback-detection action shutdown

Related commands

·     display loopback-detection

·     loopback-detection global action

loopback-detection enable

Use loopback-detection enable to enable loop detection on a port.

Use undo loopback-detection enable to disable loop detection on a port.

Syntax

loopback-detection enable vlan { vlan-list | all }

undo loopback-detection enable vlan { vlan-list | all }

Default

The loop detection feature is disabled on ports.

Views

Layer 2 Ethernet interface view, Layer 2 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Parameters

vlan-list: Specifies a VLAN list, in the format of { vlan-id [ to vlan-id ] }&<1-10>, where vlan-id represents the VLAN ID in the range of 1 to 4094, and &<1-10> indicates that you can specify up to 10 vlan-id [ to vlan-id ] parameters.

all: Specifies all existing VLANs.

Usage guidelines

Use this command to enable loop detection on specific ports. The port-specific loop detection configuration takes effect only after you enable loop detection globally. To enable loop detection globally, use the loopback-detection global enable command.

The global configuration applies to all ports in the specified VLAN. The per-port configuration applies to the individual port only when the port belongs to the specified VLAN. The per-port configuration takes precedence over the global configuration.

Example

# Enable loop detection on port FortyGigE 1/0/1 for VLAN 10 through VLAN 20.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[System-FortyGigE1/0/1] loopback-detection enable vlan 10 to 20

Related commands

·     display loopback-detection

·     loopback-detection global enable

loopback-detection global action

Use loopback-detection global action to configure the global loop protection action.

Use undo loopback-detection global action to restore the default.

Syntax

loopback-detection global action shutdown

undo loopback-detection global action

Default

When the device detects a loop on a port, it generates a log but performs no action on the port.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

shutdown: Enables the shutdown mode. If a loop is detected, the device generates a log and shuts down the port. The device automatically sets the port to the forwarding state after you set the time interval by using the shutdown-interval command (see Fundamentals Command Reference).

Usage guidelines

Use this command to configure the loop protection action globally.

To configure the loop protection action on specific ports, use the loopback-detection action command in interface view.

The global configuration applies to all ports. The per-port configuration applies to the individual ports. The per-port configuration takes precedence over the global configuration.

Example

# Set the global loop protection action to shutdown.

<Sysname> system-view

[System] loopback-detection global action shutdown

Related commands

·     display loopback-detection

·     loopback-detection action

loopback-detection global enable

Use loopback-detection global enable to enable loop detection globally.

Use undo loopback-detection global enable to disable loop detection globally.

Syntax

loopback-detection global enable vlan { vlan-list | all }

undo loopback-detection global enable vlan { vlan-list | all }

Default

The loop detection feature is globally disabled.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

vlan-list: Specifies a VLAN list, in the format of { vlan-id [ to vlan-id ] }&<1-10>, where vlan-id represents the VLAN ID in the range of 1 to 4094, and &<1-10> indicates that you can specify up to 10 vlan-id [ to vlan-id ] parameters.

all: Specifies all existing VLANs.

Usage guidelines

Use this command to enable loop detection globally.

To enable loop detection on specific ports, use the loopback-detection enable command in interface view.

The global configuration applies to all ports in the specified VLAN. The per-port configuration applies to the individual port only when the port belongs to the specified VLAN. The per-port configuration takes precedence over the global configuration.

Example

# Globally enable loop detection for VLAN 10 through VLAN 20.

<Sysname> system-view

[System] loopback-detection global enable vlan 10 to 20

Related commands

·     display loopback-detection

·     loopback-detection enable

loopback-detection interval-time

Use loopback-detection interval-time to set the loop detection interval.

Use undo loopback-detection interval-time to restore the default.

Syntax

loopback-detection interval-time interval

undo loopback-detection interval-time

Default

The loop detection interval is 30 seconds.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

interval: Sets the loop detection interval in the range of 1 to 300 seconds.

Usage guidelines

With loop detection enabled, the device sends loop detection frames at the specified interval. A shorter interval offers more sensitive detection but consumes more resources. Consider the system performance and loop detection speed when you set the loop detection interval.

Example

# Set the loop detection interval to 10 seconds.

<Sysname> system-view

[Sysname] loopback-detection interval-time 10

Related commands

display loopback-detection


VLAN commands

Basic VLAN commands

bandwidth

Use bandwidth to configure the expected bandwidth of an interface.

Use undo bandwidth to restore the default.

Syntax

bandwidth bandwidth-value

undo bandwidth

Default

The expected bandwidth (in kbps) is the interface baud rate divided by 1000.

Views

VLAN interface view

Predefined user roles

network-admin

mdc-admin

Parameters

bandwidth-value: Specifies the expected bandwidth in the range of 1 to 400000000 kbps.

Usage guidelines

The expected bandwidth of an interface affects link costs in OSPF and IS-IS. For more information, see Layer 3—IP Routing Configuration Guide.

Examples

# Set the expected bandwidth of VLAN-interface 1 to 10000 kbps.

<Sysname> system-view

[Sysname] interface vlan-interface 1

[Sysname-Vlan-interface1] bandwidth 10000

default

Use default to restore the default settings for a VLAN interface.

Syntax

default

Views

VLAN interface view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

CAUTION

CAUTION:

The default command might interrupt ongoing network services. Make sure you are fully aware of the impacts of this command when you use it on a live network.

 

This command might fail to restore the default settings for some commands for reasons such as command dependencies or system restrictions. Use the display this command in interface view to identify these commands, and then use their undo forms or follow the command reference to restore their default settings. If your restoration attempt still fails, follow the error message instructions to resolve the problem.

Examples

# Restore the default settings for VLAN-interface 1.

<Sysname> system-view

[Sysname] interface vlan-interface 1

[Sysname-Vlan-interface1] default

description

Use description to configure the description for a VLAN or VLAN interface.

Use undo description to restore the default.

Syntax

description text

undo description

Default

For a VLAN, the description is VLAN vlan-id. The vlan-id argument specifies the VLAN ID in the four-digit form. If the VLAN ID has less than four digits, leading zeros are added. For example, the default description of VLAN 100 is VLAN 0100.

For a VLAN interface, the description is the name of the interface. For example, Vlan-interface1 Interface.

Views

VLAN view, VLAN interface view

Predefined user roles

network-admin

mdc-admin

Parameters

text: Specifies a description for a VLAN or VLAN interface, a string of 1 to 255 characters. The string can include case-sensitive letters, digits, special symbols (see Table 39), spaces, and other Unicode characters and symbols.

Table 39 Special symbols

Name

Symbol

Name

Symbol

Tilde

~

Left angle bracket

Exclamation point

!

Right angle bracket

At sign

@

Hyphen

-

Pound sign

#

Underscore

_

Dollar sign

$

Plus sign

+

Percent sign

%

Equal sign

=

Caret

^

Vertical bar

|

Ampersand sign

&

Back slash

\

Asterisk

*

Colon

:

Left brace

{

Semi-colon

;

Right brace

}

Quotation marks

"

Left parenthesis

(

Apostrophe

'

Right parenthesis

)

Comma

,

Left bracket

[

Dot

.

Right bracket

]

Slash

/

 

Usage guidelines

You can configure a description to describe the function or connection of a VLAN or VLAN interface. The descriptions are helpful when a large number of VLANs and VLAN interfaces are created on the device.

Examples

# Configure the description of VLAN 2 as sales-private.

<Sysname> system-view

[Sysname] vlan 2

[Sysname-vlan2] description sales-private

# Configure the description of VLAN-interface 2 as linktoPC56.

<Sysname> system-view

[Sysname] vlan 2

[Sysname-vlan2] quit

[Sysname] interface vlan-interface 2

[Sysname-Vlan-interface2] description linktoPC56

Related commands

·     display interface vlan-interface

·     display vlan

display interface vlan-interface

Use display interface vlan-interface to display VLAN interface information.

Syntax

display interface vlan-interface [ vlan-interface-id ] [ brief [ description ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

vlan-interface-id: Specifies a VLAN interface number. If you do not specify this argument, the command displays information about all VLAN interfaces.

brief: Displays brief interface information. If you do not specify this keyword, the command displays detailed interface information.

description: Displays complete interface descriptions. If you do not specify this keyword, the command displays only the first 27 characters of each interface description.

Examples

# Display information for VLAN-interface 10.

<Sysname> display interface vlan-interface 10

Vlan-interface10

Current state: UP

Line protocol state: UP

Description: Vlan-interface10 Interface

Bandwidth: 100000 kbps

Maximum transmission unit: 1500

Internet address: 192.168.1.54/24 (primary)

IP packet frame type: Ethernet II, hardware address: 1231-2312-3134

IPv6 packet frame type: Ethernet II, hardware address: 1231-2312-3134

Last clearing of counters: Never

# Display brief information for VLAN-interface 2.

<Sysname> display interface vlan-interface 2 brief

Brief information on interfaces in route mode:

Link: ADM - administratively down; Stby - standby

Protocol: (s) - spoofing

Interface            Link Protocol Primary IP         Description

Vlan2                DOWN DOWN     --

Table 40 Command output

Field

Description

Vlan-interface2

VLAN interface name.

Current state

Physical state of a VLAN interface:

·     DOWN ( Administratively )—The administrative state of the VLAN interface is down, because it has been shut down with the shutdown command.

·     DOWN—The administrative state of the VLAN interface is up, but its physical state is down. The VLAN of this interface does not contain any physical port in up state. The ports might not be connected correctly or the lines might have failed.

·     UPBoth the administrative state and the physical state of the VLAN interface are up.

Line protocol state

Link layer protocol state of a VLAN interface:

·     DOWN—The link layer protocol state of the VLAN interface is down.

·     UP—The link layer protocol state of the VLAN interface is up.

Description

Description string of a VLAN interface.

Bandwidth

Expected bandwidth of a VLAN interface.

Maximum transmission unit

MTU of a VLAN interface.

Internet protocol processing : Disabled

The interface cannot process IP packets. This information is displayed when the interface is not configured with an IP address.

Internet address: 192.168.1.54/24 (primary)

The primary IP address of the interface is 192.168.1.54/24. This information is displayed only when the primary IP address is configured for the interface.

IP packet frame type

Framing format of sent IPv4 packets.

hardware address

MAC address of the VLAN interface.

IPv6 packet frame type

Framing format of sent IPv6 packets.

Brief information on interfaces in route mode

Brief information about Layer 3 interfaces.

Link: ADM - administratively down; Stby – standby

Link layer state of the interface:

·     ADM—The interface has been administratively shut down. To bring up the interface, use the undo shutdown command.

·     Stby—The interface is operating as a backup interface.

Protocol: (s) - spoofing

The protocol attribute of an interface includes the spoofing flag (the letter s in parentheses) when the following conditions exist:

·     The data link layer protocol state of an interface is shown as UP.

·     Its link is an on-demand link or is not present.

Interface

Abbreviated interface name.

Link

Physical link state of the interface:

·     UP—The link is up.

·     ADM—The link has been administratively shut down. To bring up the interface, use the undo shutdown command.

Protocol

Data link protocol connection state of the interface:

·     UP—The data link layer protocol state of the interface is up.

·     DOWN—The data link layer protocol state of the interface is down.

·     UP(s)—The data link layer protocol state of an interface is shown as UP, but its link is an on-demand link or not present at all.

Primary IP

Primary IP address of the interface.

Description

Partial or complete interface description configured by using the description command:

·     If you do not specify the description keyword in the display interface brief command, this field displays only the first 27 characters of the interface description.

·     If you specify the description keyword in the display interface brief command, this field displays the complete interface description.

 

display reserve-vlan-interface

Use display reserve-vlan-interface to display VLANs whose VLAN interface resources have been reserved.

Syntax

display reserve-vlan-interface [ global ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

global: Specifies VLANs whose reserved VLAN interface resources are of the global type. If you do not specify this keyword, the command displays VLANs whose reserved VLAN interface resources are of the local type.

Examples

# Display VLANs whose reserved VLAN interface resources are of the local type.

<Sysname> display reserve-vlan-interface

3000-3400

# Display VLANs whose reserved VLAN interface resources are of the global type.

<Sysname> display reserve-vlan-interface global

3401

Related commands

reserve-vlan-interface

display vlan

Use display vlan to display VLAN information.

Syntax

display vlan [ vlan-id1 [ to vlan-id2 ] | all | dynamic | reserved | static ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

vlan-id1: Specifies a VLAN by its ID in the range of 1 to 4094.

vlan-id1 to vlan-id2: Specifies a VLAN ID range. Both the vlan-id1 and the vlan-id2 arguments are in the range of 1 to 4094. The ID for vlan-id2 must be equal to or greater than the ID for vlan-id1.

all: Specifies all VLANs except the reserved VLANs.

dynamic: Specifies dynamic VLANs. If you specify this keyword, the command displays the number of dynamic VLANs and the ID for each dynamic VLAN.

reserved: Specifies reserved VLANs. Protocol modules determine which VLANs are reserved according to function implementation. The reserved VLANs provide services for protocol modules. You cannot configure reserved VLANs.

static: Specifies static VLANs. If you specify this keyword, the command displays the number of static VLANs and the ID for each static VLAN. The static VLANs are manually created.

Examples

# Display VLAN 2 information.

<Sysname> display vlan 2

 VLAN ID: 2

 VLAN type: Static

 Route interface: Not configured

 Description: VLAN 0002

 Name: VLAN 0002

 Tagged ports:   None

 Untagged ports:

    FortyGigE1/0/1  FortyGigE1/0/2  FortyGigE1/0/3

# Display VLAN 3 information.

<Sysname> display vlan 3

 VLAN ID: 3

 VLAN type: static

 Route interface: Configured

 IPv4 address: 1.1.1.1

 IPv4 subnet mask: 255.255.255.0

 Description: VLAN 0003

 Name: VLAN 0003

 Tagged ports:   None

 Untagged ports: None

Table 41 Command output

Field

Description

VLAN type

VLAN type, static or dynamic.

Route interface

Whether a VLAN interface is configured for the VLAN.

·     Not configured.

·     Configured.

Description

Description of the VLAN.

Name

Name configured for the VLAN.

IP address

Primary IP address of the VLAN interface. This field is displayed only when an IPv4 address is configured for the VLAN interface.

When the VLAN interface is also configured with secondary IPv4 addresses, you can view them by using one of the following commands:

·     display interface vlan-interface.

·     display this (VLAN interface view).

Subnet mask

Subnet mask of the primary IP address. This field is available only when an IP address is configured for the VLAN interface.

Tagged ports

Tagged members of the VLAN.

Untagged ports

Untagged members of the VLAN.

 

Related commands

vlan

display vlan brief

Use display vlan brief to display brief VLAN information.

Syntax

display vlan brief

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Examples

# Display brief VLAN information.

<Sysname> display vlan brief

Brief information about all VLANs:

Supported Minimum VLAN ID: 1

Supported Maximum VLAN ID: 4094

Default VLAN ID: 1

VLAN ID   Name                             Port

1         VLAN 0001                        XGE1/0/1  XGE1/0/2  XGE1/0/3  XGE1/0/4

                                           XGE1/0/5  XGE1/0/6  XGE1/0/7  XGE1/0/8

                                           XGE1/0/9  XGE1/0/10  XGE1/0/11

                                           XGE1/0/12  XGE1/0/13  XGE1/0/14

                                           XGE1/0/15  XGE1/0/16  XGE1/0/17

                                           XGE1/0/18  XGE1/0/19  XGE1/0/20

                                           XGE1/0/21  XGE1/0/22  XGE1/0/23

                                           XGE1/0/24  XGE1/0/25  XGE1/0/26

                                           XGE1/0/27  XGE1/0/28  XGE1/0/29

                                           XGE1/0/30  XGE1/0/31  XGE1/0/32

                                           XGE1/0/33  XGE1/0/34  XGE1/0/35

                                           XGE1/0/36  XGE1/0/37  XGE1/0/38

                                           XGE1/0/39  XGE1/0/40  XGE1/0/41

                                           XGE1/0/42  XGE1/0/43  XGE1/0/44

                                           XGE1/0/45  XGE1/0/46  XGE1/0/47

                                           XGE1/0/48

2         VLAN 0002

Table 42 Command output

Field

Description

Default VLAN ID

System default VLAN ID.

Name

VLAN name.

Port

Ports that are assigned to the VLAN.

 

interface vlan-interface

Use interface vlan-interface to create a VLAN interface and enter its view or to enter the view of an existing VLAN interface.

Use undo interface vlan-interface to delete a VLAN interface.

Syntax

interface vlan-interface vlan-interface-id

undo interface vlan-interface vlan-interface-id

Default

No VLAN interface is created.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

vlan-interface-id: Specifies a VLAN interface number in the range of 1 to 4094.

Usage guidelines

Create the VLAN before you create the VLAN interface for the VLAN.

Examples

# Create VLAN-interface 2, and enter its view.

<Sysname> system-view

[Sysname] vlan 2

[Sysname-vlan2] quit

[Sysname] interface vlan-interface 2

[Sysname-Vlan-interface2]

Related commands

display interface vlan-interface

mtu

Use mtu to set the MTU for a VLAN interface.

Use undo mtu to restore the default.

Syntax

mtu size

undo mtu

Default

The MTU of a VLAN interface is 1500 bytes.

Views

VLAN interface view

Predefined user roles

network-admin

mdc-admin

Parameters

size: Sets the MTU in bytes. In versions earlier than Release 1138P01, the value range for this argument is 46 to 1500. In Release 1138P01 and later versions, the value range for this argument is 46 to 9008.

Usage guidelines

The mtu or ip mtu command configured on a VLAN interface takes effect only on packets that the interface delivers to the CPU for software forwarding. For example, packets originated from or destined for the VLAN interface.

If both the mtu and ip mtu commands are configured on a VLAN interface, the MTU set by the ip mtu command is used for fragmentation. Set an appropriate MTU to avoid packet fragmentation.

For more information about the ip mtu command, see Layer 3—IP Services Command Reference.

Examples

# Set the MTU to 1492 bytes for VLAN-interface 1.

<Sysname> system-view

[Sysname] interface vlan-interface 1

[Sysname-Vlan-interface1] mtu 1492

Related commands

display interface vlan-interface

name

Use name to configure a name for a VLAN.

Use undo name to restore the default name of a VLAN.

Syntax

name text

undo name

Default

The name of a VLAN is VLAN vlan-id. The vlan-id argument specifies the VLAN ID in the four-digit form. If the VLAN ID has less than four digits, leading zeros are added. For example, the name of VLAN 100 is VLAN 0100.

Views

VLAN view

Predefined user roles

network-admin

mdc-admin

Parameters

text: Specifies a VLAN name, a string of 1 to 32 characters. The string can include case-sensitive letters, digits, special symbols (see Table 39), spaces, and other Unicode characters and symbols.

Usage guidelines

You can use VLAN names to distinguish a large number of VLANs.

Examples

# Configure the name of VLAN 2 as test vlan.

<Sysname> system-view

[Sysname] vlan 2

[Sysname-vlan2] name test vlan

Related commands

display vlan

reserve-vlan-interface

Use reserve-vlan-interface to reserve the specified VLAN interface resources.

Use undo reserve-vlan-interface to remove the reservation of the specified VLAN interface resources.

Syntax

reserve-vlan-interface { vlan-interface-id1 [ to vlan-interface-id2 ] [ global ] }

undo reserve-vlan-interface { vlan-interface-id1 [ to vlan-interface-id2 ] [ global ] }

Default

No VLAN interface resources are reserved.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

vlan-interface-id1: Specifies a VLAN by its ID in the range of 1 to 4094.

vlan-interface-id1 to vlan-interface-id2: Specifies a range of VLAN IDs. The value ranges for the vlan-interface-id1 and vlan-interface-id2 arguments are both 1 to 4094. The value for the vlan-interface-id2 argument must be greater or equal to the value for the vlan-interface-id1 argument.

global: Specifies global-type VLAN interface resources. If you do not specify this keyword, the command reserves local-type VLAN interface resources.

Usage guidelines

As a best practice to simplify management and configuration, reserve VLAN interface resources as follows:

·     Bulk reserve resources of VLAN interfaces that are numbered in consecutive order.

·     Preferentially reserve resources of VLAN interfaces whose VLAN IDs are in the range of 3000 to 3500.

Select the VLAN interfaces of unused VLANs rather than used VLANs for resource reservation. As a best practice, do not create or use a VLAN if the VLAN interface resource of this VLAN is reserved.

The VLAN interface resource reservation of a VLAN conflicts with the VLAN interface creation of this VLAN.

Before creating a Layer 3 Ethernet subinterface or aggregate subinterface, do not reserve a resource for the VLAN interface whose interface number matches the subinterface number. After you reserve a VLAN interface resource, do not create a Layer 3 Ethernet subinterface or aggregate subinterface whose subinterface number is the VLAN interface number. A Layer 3 Ethernet subinterface or aggregate subinterface uses the VLAN interface resource in processing tagged packets whose VLAN ID matches the subinterface number.

A reserved VLAN interface resource can be of the local or global type. To change the type of a reserved VLAN interface resource, first remove the reservation.

You cannot remove the reservation of a VLAN interface resource if this resource has been used.

This command is available in Feature 1108 and later versions. After the software upgrades to support this feature, first reserve VLAN interface resources for existing configurations that require the reservation.

Examples

# Reserve the local-type resource of VLAN-interface 3000.

<Sysname> system-view

[Sysname] reserve-vlan-interface 3000

# Reserve local-type resources of VLAN-interfaces 3000 through 3400.

<Sysname> system-view

[Sysname] reserve-vlan-interface 3000 to 3400

# Reserve global-type resources of VLAN-interfaces 3400 through 3500.

<Sysname> system-view

[Sysname] reserve-vlan-interface 3400 to 3500 global

Related commands

display reserve-vlan-interface

service

Use service to specify an LPU for forwarding the traffic on a VLAN interface.

Use undo service to restore the default.

Syntax

In standalone mode:

service slot slot-number

undo service slot

In IRF mode:

service chassis chassis-number slot slot-number

undo service chassis

Default

No LPU is specified for forwarding the traffic on the VLAN interface.

Views

VLAN interface view

Predefined user roles

network-admin

mdc-admin

Parameters

slot slot-number: Specifies an LPU. The slot-number argument represents the number of the slot that holds the LPU. (In standalone mode.)

chassis chassis-number slot slot-number: Specifies an LPU of an IRF member device. The chassis-number argument represents the ID of the IRF member device. The slot-number argument represents the number of the slot that holds the LPU. (In IRF mode.)

Usage guidelines

If no LPU is specified for forwarding the traffic on the current VLAN interface, the traffic is processed on the card or member device that receives the traffic.

Some functions, such as IPsec anti-replay, require that traffic for the same VLAN interface be processed on the same card or member device. If such a function is configured, you must use this command to specify an LPU for forwarding the traffic on a VLAN interface.

If the specified LPU is removed, traffic on the VLAN interface cannot be forwarded even if the VLAN interface is up. After the specified slot is installed with an LPU, traffic forwarding recovers.

Examples

# (In standalone mode.) Specify the LPU in slot 2 for forwarding traffic on VLAN-interface 200.

<Sysname> system-view

[Sysname] interface vlan-interface200

[Sysname-Vlan-interface200] service slot 2

# (In IRF mode.) Specify the LPU in slot 2 of IRF member device 2 for forwarding traffic on VLAN-interface 200.

<Sysname> system-view

[Sysname] interface vlan-interface200

[Sysname-Vlan-interface200] service chassis 2 slot 2

shutdown

Use shutdown to shut down a VLAN interface.

Use undo shutdown to bring up a VLAN interface.

Syntax

shutdown

undo shutdown

Default

A VLAN interface is not manually shut down. The VLAN interface is up if one or more ports in the VLAN is up, and it goes down if all ports in the VLAN go down.

Views

VLAN interface view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

When you use this command to shut down a VLAN interface, the VLAN interface remains in DOWN (Administratively) state. In this case, the VLAN interface state is not affected by the state of the ports in the VLAN.

Before you configure parameters for a VLAN interface, use this command to shut it down to prevent the configurations from affecting the network. After you complete the VLAN interface configuration, use the undo shutdown command to make the settings take effect.

To troubleshoot a failed interface, you can use the shutdown command and then the undo shutdown command on the interface to see whether it recovers.

In a VLAN, the state of any Ethernet port is independent of the state of the VLAN interface.

Examples

# Shut down VLAN-interface 2, and then bring it up.

<Sysname> system-view

[Sysname] interface vlan-interface 2

[Sysname-Vlan-interface2] shutdown

[Sysname-Vlan-interface2] undo shutdown

vlan

Use vlan vlan-id to create a VLAN and enter its view or to enter the view of an existing VLAN.

Use vlan vlan-id1 to vlan-id2 to create VLANs from vlan-id1 through vlan-id2, except reserved VLANs.

Use vlan all to create VLANs 1 through 4094.

Use undo vlan to delete the specified VLANs.

Syntax

vlan { vlan-id1 [ to vlan-id2 ] | all }

undo vlan { vlan-id1 [ to vlan-id2 ] | all }

Default

VLAN 1 (system default VLAN) exists.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

vlan-id1, vlan-id2: Specifies a VLAN ID. The value range is 1 to 4094.

vlan-id1 to vlan-id2: Specifies a VLAN ID range. The vlan-id1 and vlan-id2 arguments specify VLAN IDs. The value ranges for the two arguments are both 1 to 4094. The value for the vlan-id2 argument must be equal to or greater than the value for the vlan-id1 argument.

all: Creates or removes all VLANs except reserved VLANs.

Usage guidelines

You cannot create or delete the system default VLAN (VLAN 1) or reserved VLANs.

Before you delete a dynamic VLAN, a VLAN configured with a QoS policy, or a VLAN locked by an application, you must first remove the configuration from the VLAN.

Examples

# Create VLAN 2 and enter its view.

<Sysname> system-view

[Sysname] vlan 2

[Sysname-vlan2]

# Create VLAN 4 through VLAN 100.

<Sysname> system-view

[Sysname] vlan 4 to 100

Related commands

display vlan

Port-based VLAN commands

display port

Use display port to display information about hybrid or trunk ports.

Syntax

display port { hybrid | trunk }

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

hybrid: Specifies hybrid ports.

trunk: Specifies trunk ports.

Examples

# Display information about hybrid ports.

<Sysname> display port hybrid

Interface            PVID  VLAN Passing

FGE1/0/4             100   Tagged:  1000, 1002, 1500, 1600-1611, 2000,

                                    2555-2558, 3000, 4000

                           Untagged:1, 10, 15, 18, 20-30, 44, 55, 67, 100,

                                    150-160, 200, 255, 286, 300-302

# Display information about trunk ports.

<Sysname> display port trunk

Interface            PVID  VLAN Passing

FGE1/0/8             2     1-4, 6-100, 145, 177, 189-200, 244, 289, 400,

                           555, 600-611, 1000, 2006-2008

Table 43 Command output

Field

Description

Interface

Interface name.

PVID

Port VLAN ID.

VLAN Passing

Existing VLANs allowed on the port.

Tagged

VLANs for which the port sends packets without removing VLAN tags.

Untagged

VLANs for which the port sends packets after removing VLAN tags.

 

port

Use port to assign the specified access ports to a VLAN.

Use undo port to remove the specified access ports from a VLAN.

Syntax

port interface-list

undo port interface-list

Default

All ports are in VLAN 1.

Views

VLAN view

Predefined user roles

network-admin

mdc-admin

Parameters

interface-list: Specifies a space-separated list of up to 10 Ethernet interface items. Each item specifies an Ethernet interface or a range of Ethernet interfaces in the form of interface-type interface-number1 to interface-type interface-number2. The value for the interface-number2 argument must be equal to or greater than the value for the interface-number1 argument.

Usage guidelines

This command is applicable only to access ports.

By default, all ports are access ports. You can manually configure the port type. For more information, see "port link-type."

Examples

# Assign FortyGigE 1/0/1 through FortyGigE 1/0/3 to VLAN 2.

<Sysname> system-view

[Sysname] vlan 2

[Sysname-vlan2] port fortygige 1/0/1 to fortygige 1/0/3

Related commands

display vlan

port access vlan

Use port access vlan to assign an access port to the specified VLAN.

Use undo port access vlan to restore the default.

Syntax

port access vlan vlan-id

undo port access vlan

Default

All access ports belong to VLAN 1.

Views

Layer 2 Ethernet interface view, Layer 2 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Parameters

vlan-id: Specifies a VLAN by its ID in the range of 1 to 4094.

Usage guidelines

Before assigning an access port to a VLAN, make sure the VLAN has been created.

The configuration made in Layer 2 Ethernet interface view applies only to the port.

The configuration made in Layer 2 aggregate interface view applies to the aggregate interface and its aggregation member ports.

·     If the system fails to apply the configuration to the aggregate interface, it stops applying the configuration to aggregation member ports.

·     If the system fails to apply the configuration to an aggregation member port, it skips the port and moves to the next member port.

Examples

# Assign FortyGigE 1/0/1 to VLAN 3.

<Sysname> system-view

[Sysname] vlan 3

[Sysname-vlan3] quit

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] port access vlan 3

port hybrid pvid

Use port hybrid pvid to configure the PVID of a hybrid port.

Use undo port hybrid pvid to configure the PVID of a hybrid port as 1.

Syntax

port hybrid pvid vlan vlan-id

undo port hybrid pvid

Default

The PVID of a hybrid port is the ID of the VLAN to which the port belongs when its link type is access.

Views

Layer 2 Ethernet interface view, Layer 2 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Parameters

vlan-id: Specifies a VLAN by its ID in the range of 1 to 4094.

Usage guidelines

You can configure a nonexistent VLAN as the PVID of a hybrid port. When you delete the PVID of a hybrid port by using the undo vlan command, the PVID setting of the port does not change.

To correctly transmit packets, configure the same PVID for the local hybrid port and its peer port.

To enable a hybrid port to transmit packets from its PVID, you must assign the hybrid port to the PVID by using the port hybrid vlan command.

The configuration made in Layer 2 Ethernet interface view applies only to the port.

The configuration made in Layer 2 aggregate interface view applies to the aggregate interface and its aggregation member ports.

·     If the system fails to apply the configuration to the aggregate interface, it stops applying the configuration to aggregation member ports.

·     If the system fails to apply the configuration to an aggregation member port, it skips the port and moves to the next member port.

Examples

# Configure VLAN 100 as the PVID of the hybrid port FortyGigE 1/0/1, and assign FortyGigE 1/0/1 to VLAN 100 as an untagged VLAN member.

<Sysname> system-view

[Sysname] vlan 100

[Sysname-vlan100] quit

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] port link-type hybrid

[Sysname-FortyGigE1/0/1] port hybrid pvid vlan 100

[Sysname-FortyGigE1/0/1] port hybrid vlan 100 untagged

Related commands

·     port hybrid vlan

·     port link-type

port hybrid vlan

Use port hybrid vlan to assign a hybrid port to the specified VLANs.

Use undo port hybrid vlan to remove a hybrid port from the specified VLANs.

Syntax

port hybrid vlan vlan-id-list { tagged | untagged }

undo port hybrid vlan vlan-id-list

Default

A hybrid port is an untagged member of the VLAN to which the port was assigned as an access port.

Views

Layer 2 Ethernet interface view, Layer 2 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Parameters

vlan-id-list: Specifies a space-separated list of up to 10 VLAN items. Each item specifies a VLAN ID or a range of VLAN IDs in the form of vlan-id1 to vlan-id2. The value range for VLAN IDs is 1 to 4094. The value for the vlan-id2 argument must be equal to or greater than the value for the vlan-id1 argument.

tagged: Configures the port as a tagged VLAN member of the specified VLANs. A tagged member of a VLAN sends packets from the VLAN without removing VLAN tags.

untagged: Configures the port as an untagged VLAN member of the specified VLANs. An untagged member of a VLAN sends packets from the VLAN after removing VLAN tags.

Usage guidelines

A hybrid port supports multiple VLANs. If you execute the command multiple times on a hybrid port, the hybrid port allows the VLANs specified by the vlan-id-list argument in each execution.

The configuration made in Layer 2 Ethernet interface view applies only to the port.

The configuration made in Layer 2 aggregate interface view applies to the aggregate interface and its aggregation member ports.

·     If the system fails to apply the configuration to the aggregate interface, it stops applying the configuration to aggregation member ports.

·     If the system fails to apply the configuration to an aggregation member port, it skips the port and moves to the next member port.

Examples

# Configure FortyGigE 1/0/1 as a hybrid port, and assign it to VLAN 2, VLAN 4, and VLAN 50 through VLAN 100 as a tagged member.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] port link-type hybrid

[Sysname-FortyGigE1/0/1] port hybrid vlan 2 4 50 to 100 tagged

Related commands

port link-type

port link-type

Use port link-type to configure the link type of a port.

Use undo port link-type to restore the default link type of a port.

Syntax

port link-type { access | hybrid | trunk }

undo port link-type

Default

Any port is an access port.

Views

Layer 2 Ethernet interface view, Layer 2 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Parameters

access: Configures the link type of a port as access.

hybrid: Configures the link type of a port as hybrid.

trunk: Configures the link type of a port as trunk.

Usage guidelines

To change the link type of a port from trunk to hybrid or vice versa, first set the link type to access.

The configuration made in Layer 2 Ethernet interface view applies only to the port.

The configuration made in Layer 2 aggregate interface view applies to the aggregate interface and its aggregation member ports.

·     If the system fails to apply the configuration to the aggregate interface, it stops applying the configuration to aggregation member ports.

·     If the system fails to apply the configuration to an aggregation member port, it skips the port and moves to the next member port.

Examples

# Configure FortyGigE 1/0/1 as a trunk port.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] port link-type trunk

port trunk permit vlan

Use port trunk permit vlan to assign a trunk port to the specified VLANs.

Use undo port trunk permit vlan to remove a trunk port from the specified VLANs.

Syntax

port trunk permit vlan { vlan-id-list | all }

undo port trunk permit vlan { vlan-id-list | all }

Default

A trunk port allows only packets from VLAN 1 to pass through.

Views

Layer 2 Ethernet interface view, Layer 2 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Parameters

vlan-id-list: Specifies a space-separated list of up to 10 VLAN items. Each item specifies a VLAN ID or a range of VLAN IDs in the form of vlan-id1 to vlan-id2. The value range for VLAN IDs is 1 to 4094. The value for the vlan-id2 argument must be equal to or greater than the value for the vlan-id1 argument.

all: Specifies all VLANs. To prevent unauthorized VLAN users from accessing restricted resources through a port, use the port trunk permit vlan all command with caution.

Usage guidelines

A trunk port supports multiple VLANs. If you execute the command multiple times on a trunk port, the trunk port allows the union of the VLANs specified by the vlan-id-list argument in each execution.

On a trunk port, only packets from the PVID can pass through untagged.

The configuration made in Layer 2 Ethernet interface view applies only to the port.

The configuration made in Layer 2 aggregate interface view applies to the aggregate interface and its aggregation member ports.

·     If the system fails to apply the configuration to the aggregate interface, it stops applying the configuration to aggregation member ports.

·     If the system fails to apply the configuration to an aggregation member port, it skips the port and moves to the next member port.

Examples

# Assign the trunk port FortyGigE 1/0/1 to VLAN 2, VLAN 4, and VLAN 50 through VLAN 100.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] port link-type trunk

[Sysname-FortyGigE1/0/1] port trunk permit vlan 2 4 50 to 100

Related commands

port link-type

port trunk pvid

Use port trunk pvid to configure the PVID for a trunk port.

Use undo port trunk pvid to restore the default.

Syntax

port trunk pvid vlan vlan-id

undo port trunk pvid

Default

The PVID of a trunk port is VLAN 1.

Views

Layer 2 Ethernet interface view, Layer 2 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Parameters

vlan-id: Specifies a VLAN by its ID in the range of 1 to 4094.

Usage guidelines

You can configure a nonexistent VLAN as the PVID for a trunk port. When you delete the PVID of a trunk port by using the undo vlan command, the PVID setting of the port does not change.

To correctly transmit packets, configure the same PVID for the local trunk port and its peer port.

To enable a trunk port to transmit packets from its PVID, you must assign the trunk port to the PVID by using the port trunk permit vlan command.

The configuration made in Layer 2 Ethernet interface view applies only to the port.

The configuration made in Layer 2 aggregate interface view applies to the aggregate interface and its aggregation member ports.

·     If the system fails to apply the configuration to the aggregate interface, it stops applying the configuration to aggregation member ports.

·     If the system fails to apply the configuration to an aggregation member port, it skips the port and moves to the next member port.

Examples

# Configure VLAN 100 as the PVID of the trunk port FortyGigE 1/0/1, and assign FortyGigE 1/0/1 to VLAN 100.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] port link-type trunk

[Sysname-FortyGigE1/0/1] port trunk pvid vlan 100

[Sysname-FortyGigE1/0/1] port trunk permit vlan 100

Related commands

·     port link-type

·     port trunk permit vlan


VLAN mapping commands

display vlan mapping

Use display vlan mapping to display VLAN mapping information.

Syntax

display vlan mapping [ interface interface-type interface-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, the command displays VLAN mapping information on all interfaces.

Examples

# Display VLAN mapping information on all interfaces.

<Sysname> display vlan mapping

Interface Ten-GigabitEthernet1/0/1:

  Outer VLAN    Inner VLAN    Translated Outer VLAN    Translated Inner VLAN

  N/A           N/A           20                       10

  10            N/A           120                      N/A

  Outer VLAN    Inner VLAN    Nested VLAN

  200           100           300

 

Interface Ten-GigabitEthernet1/0/3:

  Outer VLAN    Inner VLAN    Translated Outer VLAN    Translated Inner VLAN

  12            N/A           110                      12

 

Interface Ten-GigabitEthernet1/0/4:

  Outer VLAN    Inner VLAN    Translated Outer VLAN    Translated Inner VLAN

  11            30            130                      40

Table 44 Command output

Field

Description

Interface

Interface information.

Outer VLAN

Original outer VLAN for two-to-two and two-to-three mappings.

This field indicates the original VLAN for one-to-one and one-to-two VLAN mappings.

This field displays N/A for zero-to-two VLAN mappings.

Inner VLAN

Original inner VLAN for two-to-two and two-to-three mappings.

This field displays N/A for other types of VLAN mappings.

Translated Outer VLAN

Translated outer VLAN.

This field indicates the translated VLAN for one-to-one VLAN mappings.

Translated Inner VLAN

Translated inner VLAN.

This field displays N/A for one-to-one VLAN mappings.

Nested VLAN

Outermost VLAN for two-to-three VLAN mappings.

 

Related commands

·     vlan mapping

·     vlan mapping double-tagged

·     vlan mapping untagged

vlan mapping

Use vlan mapping to configure one-to-one, one-to-two, or two-to-two VLAN mapping on an interface.

Use undo vlan mapping to cancel the VLAN mapping configuration.

Syntax

vlan mapping { vlan-id translated-vlan vlan-id | nest { range vlan-range-list | single vlan-id-list } nested-vlan vlan-id | tunnel outer-vlan-id inner-vlan-id translated-vlan outer-vlan-id inner-vlan-id }

undo vlan mapping { vlan-id translated-vlan vlan-id | all | nest { range vlan-range-list | single vlan-id-list } nested-vlan vlan-id | tunnel outer-vlan-id inner-vlan-id translated-vlan outer-vlan-id inner-vlan-id }

Default

One-to-one, one-to-two, or two-to-two VLAN mapping is not configured on an interface.

Views

Layer 2 Ethernet interface view, Layer 2 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Parameters

vlan-id translated-vlan vlan-id: Specifies the original VLAN and translated VLAN for a one-to-one VLAN mapping. The value range for the vlan-id argument is 1 to 4094. The original VLAN and the translated VLAN cannot be the same.

nest range vlan-range-list nested-vlan vlan-id: Specifies the CVLAN ranges and the SVLAN for a one-to-two VLAN mapping. The vlan-range-list argument specifies a space-separated list of up to 10 CVLAN items. Each item specifies a CVLAN ID or a range of VLAN IDs in the format of vlan-id1 to vlan-id2. The value range for CVLAN IDs is 1 to 4094. The value for the vlan-id2 argument must be equal to or greater than the value for the vlan-id1 argument. Different CVLAN ranges cannot overlap. The vlan-id argument specifies the SVLAN ID in the range of 1 to 4094.

nest single vlan-id-list nested-vlan vlan-id: Specifies the CVLANs and the SVLAN for a one-to-two VLAN mapping. The vlan-id-list argument specifies a space-separated list of up to 10 CVLAN IDs, each of which is in the range of 1 to 4094. The vlan-id argument specifies the SVLAN ID in the range of 1 to 4094.

tunnel outer-vlan-id inner-vlan-id translated-vlan outer-vlan-id inner-vlan-id: Specifies the original SVLAN ID and CVLAN ID and the translated SVLAN ID and CVLAN ID for a two-to-two VLAN mapping. The value ranges for the outer-vlan-id argument and the inner-vlan-id argument are both 1 to 4094.

all: Deletes all VLAN mapping configurations from the interface.

Usage guidelines

For different types of VLAN mapping entries on an interface, both the original VLANs and the translated VLANs cannot overlap. For one-to-one VLAN mapping entries or two-to-two VLAN mapping entries, the translated VLANs cannot overlap. When the original VLANs of one-to-one or two-to-two VLAN mapping entries overlap, the most recent configuration takes effect.

A two-to-two VLAN mapping cannot have the same original SVLAN and CVLAN as those of an existing two-to-three VLAN mapping.

The MTU of an interface is 1500 bytes by default. After a VLAN tag is added to a packet through one-to-two VLAN mapping, the packet length is added by 4 bytes. As a best practice, set the MTU to a minimum of 1504 bytes for ports on the forwarding path of the packet in the service provider network.

One-to-one, one-to-two, and two-to-two VLAN mappings take effect only on VLAN-tagged packets.

Examples

# Configure a one-to-one VLAN mapping on Ten-GigabitEthernet 1/0/1 to map VLAN 1 to VLAN 101.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 1/0/1

[Sysname-Ten-GigabitEthernet1/0/1] vlan mapping 1 translated-vlan 101

# Configure one-to-two VLAN mappings on Ten-GigabitEthernet 1/0/4 to add outer VLAN tag 101 to packets carrying VLAN tags 1 through 10 and VLAN tag 80.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 1/0/4

[Sysname-Ten-GigabitEthernet1/0/4] vlan mapping nest range 1 to 10 nested-vlan 101

[Sysname-Ten-GigabitEthernet1/0/4] vlan mapping nest single 80 nested-vlan 101

# Configure a two-to-two VLAN mapping on Ten-GigabitEthernet 1/0/5 to map outer VLAN 101 and inner VLAN 1 to outer VLAN 201 and inner VLAN 10.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 1/0/5

[Sysname-Ten-GigabitEthernet1/0/5] vlan mapping tunnel 101 1 translated-vlan 201 10

Related commands

display vlan mapping

vlan mapping double-tagged

Use vlan mapping double-tagged to configure two-to-three VLAN mapping on an interface.

Use undo vlan mapping double-tagged to remove the two-to-three VLAN mapping configuration.

Syntax

vlan mapping double-tagged { outer-vlan outer-vlan-id inner-vlan inner-vlan-id | outer-vlan-range vlan-id-list inner-vlan inner-vlan-id | outer-vlan outer-vlan-id inner-vlan-range vlan-id-list } nested-vlan nested-vlan

undo vlan mapping double-tagged { outer-vlan outer-vlan-id inner-vlan inner-vlan-id | outer-vlan-range vlan-id-list inner-vlan inner-vlan-id | outer-vlan outer-vlan-id inner-vlan-range vlan-id-list } nested-vlan nested-vlan

Default

Two-to-three VLAN mapping is not configured on an interface.

Views

Layer 2 Ethernet interface view, Layer 2 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Parameters

outer-vlan outer-vlan-id: Specifies the original SVLAN ID in the range of 1 to 4094.

outer-vlan-range vlan-id-list: Specifies a range of original SVLAN IDs in the format of vlan-id1 to vlan-id2. The value range for SVLAN IDs is 1 to 4094. The value for the vlan-id2 argument must be equal to or greater than the value for the vlan-id1 argument.

inner-vlan inner-vlan-id: Specifies the original CVLAN ID in the range of 1 to 4094.

inner-vlan-range vlan-id-list: Specifies a range of original CVLAN IDs in the format of vlan-id1 to vlan-id2. The value range for CVLAN IDs is 1 to 4094. The value for the vlan-id2 argument must be equal to or greater than the value for the vlan-id1 argument.

nested-vlan nested-vlan: Specifies the outermost VLAN ID in the range of 1 to 4094.

Usage guidelines

A two-to-three VLAN mapping cannot have the same original SVLAN and CVLAN as those of an existing two-to-two VLAN mapping.

Before you modify a two-to-three VLAN mapping, first execute the undo vlan mapping double-tagged command to remove the existing configuration.

As a best practice, set the MTU to a minimum of 1508 bytes for ports on the forwarding path of the triple-tagged packet in the service provider network.

Examples

# Configure a two-to-three VLAN mapping on Ten-GigabitEthernet 1/0/1 to add the outermost VLAN 300 to double-tagged packets with the SVLAN 200 and CVLAN 100.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 1/0/1

[Sysname-Ten-GigabitEthernet1/0/1] vlan mapping double-tagged outer-vlan 200 inner-vlan 100 nested-vlan 300

Related commands

display vlan mapping

vlan mapping untagged

Use vlan mapping untagged to configure zero-to-two VLAN mapping on an interface.

Use undo vlan mapping untagged to remove the zero-to-two VLAN mapping configuration.

Syntax

vlan mapping untagged nested-outer-vlan outer-vlan-id nested-inner-vlan inner-vlan-id

undo vlan mapping untagged

Default

Zero-to-two VLAN mapping is not configured on an interface.

Views

Layer 2 Ethernet interface view, Layer 2 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Parameters

nested-outer-vlan outer-vlan-id: Specifies the SVLAN ID in the range of 1 to 4094.

nested-inner-vlan inner-vlan-id: Specifies the CVLAN ID in the range of 1 to 4094.

Usage guidelines

The command takes effect only when the PVID of the port is VLAN 1.

Before you modify a zero-to-two VLAN mapping, first execute the undo vlan mapping untagged command to remove the previous configuration.

As a best practice, set the MTU to a minimum of 1504 bytes for ports on the forwarding path of the double-tagged packet in the service provider network.

Examples

# Configure a zero-to-two VLAN mapping on Ten-GigabitEthernet 1/0/1 to add CVLAN 100 and SVLAN 200 to untagged packets.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 1/0/1

[Sysname-Ten-GigabitEthernet1/0/1] vlan mapping untagged nested-outer-vlan 200 nested-inner-vlan 100

Related commands

display vlan mapping


LLDP commands

You can set an Ethernet port as a Layer 3 interface by using the port link-mode route command (see Layer 2—LAN Switching Configuration Guide).

dcbx version

Use dcbx version to configure the DCBX version.

Use undo dcbx version to restore the default.

Syntax

dcbx version { rev100 | rev101 | standard }

undo dcbx version

Default

The DCBX version is autonegotiated by two interfaces, with the standard version as the initial version for negotiation at the local end.

Views

Layer 2 Ethernet interface view

Predefined user roles

network-admin

mdc-admin

Parameters

rev100: Specifies DCBX Rev 1.00.

rev101: Specifies DCBX Rev 1.01.

standard: Specifies the IEEE Std 802.1Qaz-2011.

Usage guidelines

For DCBX to work correctly, configure the same DCBX version that is supported on both ends. As a best practice, configure the highest version supported on both ends. IEEE Std 802.1Qaz-2011, DCBX Rev 1.01, and DCBX Rev 1.00 are in descending order.

After this command is configured, an interface includes the configured DCBX version in its outgoing LLDP frames and does not negotiate the DCBX version with the peer interface.

Examples

# Configure the DCBX version as DCBX Rev 1.01 on interface Ten-GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet1/0/1

[Sysname-Ten-GigabitEthernet1/0/1] dcbx version rev101

Related commands

lldp tlv-enable

display lldp local-information

Use display lldp local-information to display local LLDP information, which will be contained in the advertisable LLDP TLVs and sent to neighboring devices.

Syntax

display lldp local-information [ global | interface interface-type interface-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

global: Displays the global local LLDP information.

interface interface-type interface-number: Specifies a port by its type and number.

Usage guidelines

If you do not specify any keywords or arguments, the command displays all local LLDP information, which includes the following:

·     The global LLDP information.

·     The LLDP information about the LLDP-enabled ports in the up state.

Examples

# Display all local LLDP information.

<Sysname> display lldp local-information

Global LLDP local-information:

 Chassis ID          : 0000-fc00-4331

 System name         : H3C

 System description  : H3C Comware Platform Software, Software Version 7.1.045,

                       Release 1133P03

                       H3C S12510-X

                       Copyright (c) 2004-2015 Hangzhou H3C Tech. Co., Ltd. All

                       rights reserved.

 System capabilities supported : Bridge, Router, Customer Bridge, Service Bridge

 System capabilities enabled   : Bridge, Router, Customer Bridge

 

 MED information:

 Device class               : Connectivity device

 MED inventory information of master board:

 HardwareRev                : VER.C

 FirmwareRev                : 136

 SoftwareRev                : 7.1.0451133P03

 SerialNum                  : 210231S12500XLSXSUP10A

 Manufacturer name          : H3C

 Model name                 : H3C S12510-X

 Asset tracking identifier  : Unknown

 

LLDP local-information of port 156[FortyGigE1/0/1]:

 Port ID type        : Interface name

 Port ID             : FortyGigE1/0/1

 Port description    : FortyGigE1/0/1 Interface

 LLDP agent nearest-bridge management address:

 Management address type           : All802

 Management address                : 000f-e207-f2e0

 Management address interface type : IfIndex

 Management address interface ID   : Unknown

 Management address OID            : 0

 LLDP agent nearest-nontpmr management address:

 Management address type           : All802

 Management address                : 000f-e207-f2e0

 Management address interface type : IfIndex

 Management address interface ID   : Unknown

 Management address OID            : 0

 LLDP agent nearest-customer management address:

 Management address type           : All802

 Management address                : 000f-e207-f2e0

 Management address interface type : IfIndex

 Management address interface ID   : Unknown

 Management address OID            : 0

 DCBX Control info:

  Oper version       : Standard

 DCBX PFC info:

  P0-0     P1-0     P2-0     P3-0     P4-0     P5-0     P6-0     P7-0

  Number of traffic classes supported: 8

  Value of MBC: 0

 Port VLAN ID(PVID)  : 1

 Port and protocol VLAN ID(PPVID)  : 0

 Port and protocol VLAN supported  : Yes

 Port and protocol VLAN enabled    : No

 VLAN name of VLAN 1        : VLAN 0001

 Management VLAN ID  : 0

 Link aggregation supported : Yes

 Link aggregation enabled   : No

 Aggregation port ID        : 0

 Auto-negotiation supported : Yes

 Auto-negotiation enabled   : Yes

 OperMau                    : Speed(40000)/Duplex(Full)

 Power port class           : PD

 PSE power supported        : No

 PSE power enabled          : No

 PSE pairs control ability  : No

 Power pairs                : Signal

 Port power classification  : Class 0

 Maximum frame size         : 12288

Table 45 Command output

Field

Description

Chassis ID

Bridge MAC address of the device.

System capabilities supported

Supported capabilities:

·     Bridge—Switching is supported.

·     Router—Routing is supported.

·     DocsisCableDeviceThe local device can serve as a DOCSIS-compliant cable device.

·     StationOnlyThe local device can serve as a station only.

·     Customer BridgeThe customer bridge function is supported.

·     Service BridgeThe service bridge function is supported.

·     TPMRThe TPMR function is supported.

·     OtherFunctions other than those listed above are supported.

System capabilities enabled

Enabled capabilities:

·     Bridge—Switching is enabled.

·     Router—Routing is enabled.

·     DocsisCableDeviceThe local device is serving as a DOCSIS-compliant cable device.

·     StationOnlyThe local device is serving as a station only.

·     Customer BridgeThe customer bridge function is enabled.

·     Service BridgeThe service bridge function is enabled.

·     TPMRThe TPMR function is enabled.

·     OtherFunctions other than those listed above are enabled.

Device class

MED device class:

·     Connectivity device—Network device.

·     Class I—Normal terminal device. It requires the basic LLDP discovery services.

·     Class II—Media terminal device. It supports media streams, and can also function as a normal terminal device.

·     Class III—Communication terminal device. It supports the IP communication systems of end users, and can also function as a normal terminal device or media terminal device.

HardwareRev

Hardware version.

FirmwareRev

Firmware version.

SoftwareRev

Software version.

SerialNum

Serial number.

Manufacturer name

Device manufacturer.

Model name

Device model.

Port ID type

Port ID type:

·     MAC address.

·     Interface name.

Port ID

Port ID, the value of which depends on the port ID type.

Management address interface type

Numbering type of the interface identified by the management address.

Management address interface ID

Index of the interface identified by the management address.

Management address OID

Management address object ID.

DCBX control info

Displayed as version information in IEEE Std 802.1Qaz-2011.

Oper version

DCBX version number.

Sequence number

Number of DCBX TLV content changes.

Acknowledge number

Times of synchronizing configurations by the peer device.

DCBX ETS info

CoS-to-local priority mapping and bandwidth allocation.

Percentage

Percentage of bandwidth allocated.

P0-   P1-   P2-   P3-   P4-   P5-   P6-   P7-

Number of supported priorities configured by using the priority-flow-control no-drop dot1p dot1p-list command at the local end.

Number of traffic classes supported

Capability set supported by PFC (displayed only in Rev 1.01).

Priority

802.1p priority.

Protocol ID

Application protocol number.

CoS map

Application protocol-to-CoS mapping.

CBS

Indicates whether the token bucket mechanism is supported on the port:

·     False—The token bucket mechanism is not supported.

·     True—The token bucket mechanism is supported.

Max TCs

Maximum number of priorities supported.

TSA

Transmission selection algorithm.

DCBX PFC info

PFC TLV information.

Value of MBC

MBC indicates the ability of packets to bypass MACsec. It is 1-bit long.

·     0—Packets can bypass MACsec when MACsec is disabled.

·     1—Packets cannot bypass MACsec when MACsec is disabled.

Auto-negotiation supported

Indicates whether autonegotiation is supported on the port.

Auto-negotiation enabled

Indicates whether autonegotiation is enabled on the port.

OperMau

Speed and duplex state of the port.

Power port class

PoE port class:

·     PSE—Power sourcing equipment.

·     PD—Powered device.

PSE power supported

Indicates whether the device can operate as a PSE.

PSE power enabled

Indicates whether the device is operating as a PSE.

PSE pairs control ability

Indicates whether the pair selection ability is available.

Power pairs

Power supply mode:

·     SignalUses data pairs to supply power.

·     SpareUses spare pairs to supply power.

Port power classification

Power class of the PD:

·     Class 0.

·     Class 1.

·     Class 2.

·     Class 3.

·     Class 4.

Link aggregation supported

Indicates whether link aggregation is supported on the port.

Link aggregation enabled

Indicates whether link aggregation is enabled on the port.

Aggregation port ID

Member port ID, which is 0 when link aggregation is disabled.

 

display lldp neighbor-information

Use display lldp neighbor-information to display the LLDP information carried in LLDP TLVs that the local device receives from the neighboring devices.

Syntax

display lldp neighbor-information [ [ [ interface interface-type interface-number ] [ agent { nearest-bridge | nearest-customer | nearest-nontpmr } ] [ verbose ] ] | list [ system-name system-name ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

interface interface-type interface-number: Specifies a port by its type and number. If you do not specify this option, the command displays the LLDP information that all ports receive from the neighboring devices.

agent: Specifies an agent type. If you do not specify an agent type, the command displays the LLDP information that all LLDP agents receive from the neighboring devices.

nearest-bridge: Specifies nearest bridge agents.

nearest-customer: Specifies nearest customer bridge agents.

nearest-nontpmr: Specifies nearest non-TPMR bridge agents.

verbose: Displays the detailed LLDP information that the local device receives from the neighboring devices. If you do not specify this keyword, the command displays the brief LLDP information that the local device receives from the neighboring devices.

list: Displays the LLDP information that the local device receives from the neighboring devices in the form of a list.

system-name system-name: Displays the LLDP information that the local device receives from a neighboring device specified by its system name. The system-name argument is a string of 1 to 255 characters. If you do not specify this option, the command displays the LLDP information that the local device receives from all neighboring devices in a list.

Examples

# Display the detailed LLDP information that the nearest bridge agents on all ports receive from the neighboring devices.

<Sysname> display lldp neighbor-information agent nearest-bridge verbose

LLDP neighbor-information of port 1[FortyGigE1/0/1]:

LLDP agent nearest-bridge:

 LLDP Neighbor index : 1

 Update time         : 0 days, 0 hours, 1 minutes, 1 seconds

 Chassis type        : MAC address

 Chassis ID          : 000f-0055-0002

 Port ID type        : Interface name

 Port ID             : FortyGigE1/0/1

 Time to live        : 120

 Port description    : FortyGigE1/0/1 Interface

 System name         : Sysname

 System description  : H3C Comware Platform Software, Software Version 7.1.045,

                       Release 1109

                       H3C S12510-X

                       Copyright (c) 2004-2014 Hangzhou H3C Tech. Co., Ltd. All

                       rights reserved.

 System capabilities supported : Bridge, Router, Customer Bridge, Service Bridge

 System capabilities enabled   : Bridge, Router, Customer Bridge

 Management address type           : IPv4

 Management address                : 192.168.1.55

 Management address interface type : IfIndex

 Management address interface ID   : Unknown

 Management address OID            : 0

 Port VLAN ID(PVID): 1

 VLAN name of VLAN 12: VLAN 0012

 Management VLAN ID  : 5

 Link aggregation supported : Yes

 Link aggregation enabled   : No

 Aggregation port ID        : 0

 Auto-negotiation supported : Yes

 Auto-negotiation enabled   : Yes

 OperMau                    : Speed(40000)/Duplex(Full)

 Power port class           : PSE

 PSE power supported        : No

 PSE power enabled          : No

 PSE pairs control ability  : No

 Power pairs                : Signal

 Port power classification  : Class 0

 Maximum frame size         : 12288

 

CDP neighbor-information of port 1[FortyGigE1/0/1]:

  CDP neighbor index : 2

  Chassis ID         : Switch

  Address            : 2.0.0.2

  Port ID            : GigabitEthernet1/0/3

  Software version   : Cisco IOS Software, C3750 Software (C3750-ADVIPSERVICESK9

-M), Version 12.2(25)SED1, RELEASE SOFTWARE (fc1)

Copyright (c) 1986-2005 by Cisco Systems, Inc.

Compiled Tue 22-Nov-05 23:37 by yenanh

  Platform           : cisco WS-C3750G-48TS

  Duplex             : Full

# Display the brief LLDP information that all LLDP agents on all ports receive from the neighboring devices.

<Sysname> display lldp neighbor-information

LLDP neighbor-information of port 52[FortyGigE1/0/3]:

LLDP agent nearest-bridge:

 LLDP neighbor index : 3

 ChassisID/subtype   : 0011-2233-4400/MAC address

 PortID/subtype      : 000c-29f5-c71f/MAC address

 Capabilities        : Bridge, Router, Customer Bridge

 

 LLDP neighbor index : 6

 ChassisID/subtype   : 0011-2233-4400/MAC address

 PortID/subtype      : 000c-29f5-c715/MAC address

 Capabilities        : None

 

CDP neighbor-information of port 52[FortyGigE1/0/3]:

LLDP agent nearest-bridge:

 CDP neighbor index  : 4

 Chassis ID          : SEP00260B5C0548

 Port ID             : Port 1

 

 CDP neighbor index  : 5

 Chassis ID          : 0011-2233-4400

 Port ID             : FortyGigE1/0/4

 

LLDP neighbor-information of port 52[FortyGigE1/0/3]:

LLDP agent nearest-nontpmr:

 LLDP neighbor index : 6

 ChassisID/subtype   : 0011-2233-4400/MAC address

 PortID/subtype      : 000c-29f5-c715/MAC address

 Capabilities        : None

# Display the brief LLDP information that all LLDP agents receive from all neighboring devices in a list.

<Sysname> display lldp neighbor-information list

Chassis ID : * -- --Nearest nontpmr bridge neighbor

             # -- --Nearest customer bridge neighbor

             Default -- -- Nearest bridge neighbor

System Name          Local Interface   Chassis ID       Port ID

System1              FGE1/0/1          000f-e25d-ee91   FortyGigE1/0/5

System2              FGE1/0/2          000f-e25d-ee92*  FortyGigE1/0/6

System3              FGE1/0/3          000f-e25d-ee93#  FortyGigE1/0/7

Table 46 Command output

Field

Description

LLDP neighbor-information of port 1

LLDP information received through port 1.

Update time

Time when LLDP information about a neighboring device was last updated.

Chassis type

Chassis ID type:

·     Chassis component.

·     Interface alias.

·     Port component.

·     MAC address.

·     Network address (ipv4).

·     Interface name.

·     Locally assignedLocally-defined chassis type other than those listed above.

Chassis ID

ID that identifies the LLDP sending device, which can be a MAC address, a network address, an interface or some other value, depending on the chassis type of the neighboring device.

Port ID type

Port ID type:

·     Interface alias.

·     Port component.

·     MAC address.

·     Network address (ipv4).

·     Interface name.

·     Agent circuit ID.

·     Locally assignedLocally-defined port ID type other than those listed above.

Port ID

Value of the type of the port ID.

System name

System name of the neighboring device.

System description

System description of the neighboring device.

System capabilities supported

Capabilities supported on the neighboring device:

·     Repeater—Signal repeating is supported.

·     Bridge—Switching is supported.

·     WlanAccessPointThe neighboring device can serve as a wireless AP.

·     Router—Routing is supported.

·     TelephoneThe neighboring device can serve as a telephone.

·     DocsisCableDeviceThe neighboring device can serve as a DOCSIS-compliant cable device.

·     StationOnlyThe neighboring device can serve as a station only.

·     Customer BridgeThe customer bridge function is enabled.

·     Service BridgeThe service bridge function is enabled.

·     TPMRThe TPMR function is enabled.

·     OtherFunctions other than those listed above are supported.

System capabilities enabled

Capabilities enabled on the neighboring device:

·     Repeater—Signal repeating is enabled.

·     Bridge—Switching is enabled.

·     WlanAccessPointThe neighboring device is serving as a wireless AP.

·     Router—Routing is enabled.

·     TelephoneThe neighboring device is serving as a telephone.

·     DocsisCableDeviceThe neighboring device is serving as a DOCSIS-compliant cable device.

·     StationOnlyThe neighboring device is serving as a station only.

·     Customer BridgeThe customer bridge function is enabled.

·     Service BridgeThe service bridge function is enabled.

·     TPMRThe TPMR function is enabled.

·     OtherFunctions other than those listed above are supported.

Management address OID

Management address object ID.

DCBX control info

Displayed as version information in IEEE Std 802.1Qaz-2011.

Oper version

DCBX version number.

Sequence number

Number of DCBX TLV content changes.

Acknowledge number

Times of synchronizing configurations by the peer device.

DCBX ETS info

CoS-to-local priority mapping and bandwidth allocation.

Percentage

Percentage of bandwidth allocated.

P0-   P1-   P2-   P3-   P4-   P5-   P6-   P7-

Number of supported priorities configured by using the priority-flow-control no-drop dot1p dot1p-list command on the neighbor.

Number of traffic classes supported

Capability set supported by PFC (displayed only in Rev 1.01 and IEEE Std 802.1Qaz-2011).

CoS map

Application protocol-to-CoS mapping.

CBS

Indicates whether the token bucket mechanism is supported on the port:

·     False—The token bucket mechanism is not supported.

·     True—The token bucket mechanism is supported.

Max TCs

Maximum number of priorities supported.

TSA

Transmission selection algorithm.

Value of MBC

MBC indicates the ability of packets to bypass MACsec. It is 1-bit long.

·     0—Packets can bypass MACsec when MACsec is disabled.

·     1—Packets cannot bypass MACsec when MACsec is disabled.

VLAN name of VLAN 12

Name of VLAN 12.

Auto-negotiation supported

Indicates whether autonegotiation is supported on the port.

Auto-negotiation enabled

Indicates whether autonegotiation is enabled on the port.

OperMau

Speed and duplex state on the port.

Power port class

PoE device class:

·     PSE—Power sourcing equipment.

·     PD—Powered device.

PSE power supported

Indicates whether the device can operate as a PSE.

PSE power enabled

Indicates whether the device is operating as a PSE.

PSE pairs control ability

Indicates whether the pair selection ability is available.

Power pairs

Power supply mode:

·     SignalUses data pairs to supply power.

·     SpareUses spare pairs to supply power.

Port power classification

Power class of the PD:

·     Class 0.

·     Class 1.

·     Class 2.

·     Class 3.

·     Class 4.

Link aggregation supported

Indicates whether link aggregation is supported.

Link aggregation enabled

Indicates whether link aggregation is enabled.

Local Interface

Local port that receives the LLDP information.

Chassis ID : * -- -- Nearest nontpmr bridge neighbor                              

                    #-- -- Nearest customer bridge neighbor

Chassis ID flag:

·     An asterisk (*) indicates the nearest non-TPMR bridge neighbor.

·     A pound sign (#) indicates the nearest customer bridge neighbor.

 

display lldp statistics

Use display lldp statistics to display the global LLDP statistics or the LLDP statistics of a port.

Syntax

display lldp statistics [ global | [ interface interface-type interface-number ] [ agent { nearest-bridge | nearest-customer | nearest-nontpmr } ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

global: Displays the global LLDP statistics.

interface interface-type interface-number: Specifies a port by its type and number.

agent: Specifies an LLDP agent type. If you do not specify an agent type, the command displays the statistics for all LLDP agents.

nearest-bridge: Specifies nearest bridge agents.

nearest-customer: Specifies nearest customer bridge agents.

nearest-nontpmr: Specifies nearest non-TPMR bridge agents.

Usage guidelines

If you do not specify any keywords or arguments, the command displays the global LLDP statistics and the LLDP statistics of all ports.

Examples

# Display the global LLDP statistics and the LLDP statistics of all ports.

<Sysname> display lldp statistics

LLDP statistics global information:

LLDP neighbor information last change time:0 days, 0 hours, 4 minutes, 40 seconds

The number of LLDP neighbor information inserted : 1

The number of LLDP neighbor information deleted  : 1

The number of LLDP neighbor information dropped  : 0

The number of LLDP neighbor information aged out : 1

 

LLDP statistics information of port 1 [FortyGigE1/0/1]:

LLDP agent nearest-bridge:

The number of LLDP frames transmitted            : 0

The number of LLDP frames received               : 0

The number of LLDP frames discarded              : 0

The number of LLDP error frames                  : 0

The number of LLDP TLVs discarded                : 0

The number of LLDP TLVs unrecognized             : 0

The number of LLDP neighbor information aged out : 0

The number of CDP frames transmitted             : 0

The number of CDP frames received                : 0

The number of CDP frames discarded               : 0

The number of CDP error frames                   : 0

 

LLDP agent nearest-nontpmr:

The number of LLDP frames transmitted            : 0

The number of LLDP frames received               : 0

The number of LLDP frames discarded              : 0

The number of LLDP error frames                  : 0

The number of LLDP TLVs discarded                : 0

The number of LLDP TLVs unrecognized             : 0

The number of LLDP neighbor information aged out : 0

The number of CDP frames transmitted             : 0

The number of CDP frames received                : 0

The number of CDP frames discarded               : 0

The number of CDP error frames                   : 0

 

LLDP agent nearest-customer:

The number of LLDP frames transmitted            : 0

The number of LLDP frames received               : 0

The number of LLDP frames discarded              : 0

The number of LLDP error frames                  : 0

The number of LLDP TLVs discarded                : 0

The number of LLDP TLVs unrecognized             : 0

The number of LLDP neighbor information aged out : 0

The number of CDP frames transmitted             : 0

The number of CDP frames received                : 0

The number of CDP frames discarded               : 0

The number of CDP error frames                   : 0

 

# Display the LLDP statistics for the nearest customer bridge agents on FortyGigE 1/0/1.

<Sysname> display lldp statistics interface FortyGigE1/0/1 agent nearest-customer

LLDP statistics information of port 1 [FortyGigE1/0/1]:

LLDP agent nearest-customer:

The number of LLDP frames transmitted            : 0

The number of LLDP frames received               : 0

The number of LLDP frames discarded              : 0

The number of LLDP error frames                  : 0

The number of LLDP TLVs discarded                : 0

The number of LLDP TLVs unrecognized             : 0

The number of LLDP neighbor information aged out : 0

The number of CDP frames transmitted             : 0

The number of CDP frames received                : 0

The number of CDP frames discarded               : 0

The number of CDP error frames                   : 0

Table 47 Command output

Field

Description

LLDP statistics global information

Global LLDP statistics.

LLDP neighbor information last change time

Time when the neighbor information was last updated.

The number of LLDP neighbor information inserted

Number of times neighbor information was added.

The number of LLDP neighbor information deleted

Number of times neighbor information was removed.

The number of LLDP neighbor information dropped

Number of times neighbor information was dropped due to lack of available memory space.

 

display lldp status

Use display lldp status to display LLDP status.

Syntax

display lldp status [ interface interface-type interface-number ] [ agent { nearest-bridge | nearest-customer | nearest-nontpmr } ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

interface interface-type interface-number: Specifies a port by its type and number.

agent: Specifies an LLDP agent type. If you do not specify an agent type, the command displays the status information for all LLDP agents.

nearest-bridge: Specifies nearest bridge agents.

nearest-customer: Specifies nearest customer bridge agents.

nearest-nontpmr: Specifies nearest non-TPMR bridge agents.

Usage guidelines

If you do not specify a port, the command displays the global LLDP status and the LLDP status of each port.

Examples

# Display the global LLDP status and the LLDP status of each port.

<Sysname> display lldp status

Global status of LLDP: Enable

Bridge mode of LLDP: customer-bridge

The current number of LLDP neighbors: 0

The current number of CDP neighbors: 0

LLDP neighbor information last changed time: 0 days, 0 hours, 4 minutes, 40 seconds

Transmit interval              : 30s

Fast transmit interval         : 1s

Transmit max credit            : 5

Hold multiplier                : 4

Reinit delay                   : 2s

Trap interval                  : 5s

Fast start times               : 3

 

LLDP status information of port 1 [FortyGigE1/0/1]:

LLDP agent  nearest-bridge:

Port status of LLDP            : Enable

Admin status                   : Tx_Rx

Trap flag                      : No

MED trap flag                  : No

Polling interval               : 0s

Number of LLDP neighbors       : 5

Number of MED neighbors        : 2

Number of CDP neighbors        : 0

Number of sent optional TLV    : 12

Number of received unknown TLV : 5

LLDP agent nearest-nontpmr:

Port status of LLDP            : Enable

Admin status                   : Tx_Rx

Trap flag                      : No

Polling interval               : 0s

Number of LLDP neighbors       : 5

Number of MED neighbors        : 2

Number of CDP neighbors        : 0

Number of sent optional TLV    : 12

Number of received unknown TLV : 5

 

LLDP agent nearest-customer:

Port status of LLDP            : Enable

Admin status                   : Tx_Rx

Trap flag                      : No

Polling interval               : 0s

Number of LLDP neighbors       : 5

Number of MED neighbors        : 2

Number of CDP neighbors        : 0

Number of sent optional TLV    : 12

Number of received unknown TLV : 5

Table 48 Command output

Field

Description

Bridge mode of LLDP

LLDP bridge mode: service-bridge or customer-bridge.

Global status of LLDP

Indicates whether LLDP is globally enabled.

LLDP neighbor information last changed time

Time when the neighbor information was last updated.

Transmit interval

LLDP frame transmission interval.

Hold multiplier

TTL multiplier.

Reinit delay

LLDP reinitialization delay.

Transmit max credit

Token bucket size for sending LLDP frames.

Trap interval

Trap transmission interval.

Fast start times

Number of LLDP frames sent each time fast LLDP frame transmission is triggered.

Port 1

LLDP status of port 1.

Port status of LLDP

Indicates whether LLDP is enabled on the port.

Admin status

LLDP operating mode of the port:

·     Tx_Rx—The port can send and receive LLDP frames.

·     Rx_Only—The port can only receive LLDP frames.

·     Tx_Only—The port can only send LLDP frames.

·     Disable—The port cannot send or receive LLDP frames.

Trap Flag

Indicates whether trapping is enabled.

Polling interval

LLDP polling interval, which is 0 when LLDP polling is disabled.

Number of neighbors

Number of LLDP neighbors connecting to the port.

Number of MED neighbors

Number of MED neighbors connecting to the port.

Number of CDP neighbors

Number of CDP neighbors connecting to the port.

Number of sent optional TLV

Number of optional TLVs contained in an LLDP frame sent through the port.

Number of received unknown TLV

Number of unknown TLVs contained in a received LLDP frame.

 

display lldp tlv-config

Use display lldp tlv-config to display the types of advertisable optional LLDP TLVs of a port.

Syntax

display lldp tlv-config [ interface interface-type interface-number ] [ agent { nearest-bridge | nearest-customer | nearest-nontpmr } ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

mdc-admin

mdc-operator

Parameters

interface interface-type interface-number: Specifies a port by its type and number.

agent: Specifies an LLDP agent type. If you do not specify an agent type, the command displays the types of advertisable optional LLDP TLVs for all LLDP agents.

nearest-bridge: Specifies nearest bridge agents.

nearest-customer: Specifies nearest customer bridge agents.

nearest-nontpmr: Specifies nearest non-TPMR bridge agents.

Usage guidelines

If you do not specify a port, the command displays the types of advertisable optional TLVs of all ports.

Examples

# Display the types of advertisable optional LLDP TLVs of interface FortyGigE 1/0/1.

<Sysname> display lldp tlv-config interface fortygige 1/0/1

LLDP tlv-config of port 1[FortyGigE1/0/1]:

LLDP agent nearest-bridge:

NAME                              STATUS    DEFAULT

Basic optional TLV:

 Port Description TLV             YES       YES

 System Name TLV                  YES       YES

 System Description TLV           YES       YES

 System Capabilities TLV          YES       YES

 Management Address TLV           YES       YES

IEEE 802.1 extend TLV:

 Port VLAN ID TLV                 YES       YES

 Port And Protocol VLAN ID TLV    YES       YES

 VLAN Name TLV                    YES       YES

 DCBX TLV                         NO        NO

 EVB TLV                          NO        NO

 Link Aggregation TLV             YES       YES

 Management VID TLV               YES       YES

 IEEE 802.3 extend TLV:

 MAC-Physic TLV                   YES       YES

 Power via MDI TLV                YES       YES

 Maximum Frame Size TLV           YES       YES

LLDP-MED extend TLV:

 Capabilities TLV                 YES        YES

 Network Policy TLV               YES        YES

 Location Identification TLV      NO         NO

 Extended Power via MDI TLV       YES        YES

 Inventory TLV                    YES        YES

LLDP agent nearest-nontpmr:

NAME                              STATUS    DEFAULT

Basic optional TLV:

 Port Description TLV             YES       NO

 System Name TLV                  YES       NO

 System Description TLV           YES       NO

 System Capabilities TLV          YES       NO

 Management Address TLV           YES       NO

IEEE 802.1 extend TLV:

 Port VLAN ID TLV                 YES       NO

 Port And Protocol VLAN ID TLV    YES       NO

 VLAN Name TLV                    YES       NO

 DCBX TLV                         NO        NO

 EVB TLV                          YES       YES

 Link Aggregation TLV             YES       NO

 Management VID TLV               NO        NO

IEEE 802.3 extend TLV:

 MAC-Physic TLV                   YES       NO

 Power via MDI TLV                YES       NO

 Maximum Frame Size TLV           YES       NO

LLDP-MED extend TLV:

 Capabilities TLV                 YES        NO

 Network Policy TLV               YES        NO

 Location Identification TLV      NO         NO

 Extended Power via MDI TLV       YES        NO

 Inventory TLV                    YES        NO

 

LLDP agent nearest-customer:

NAME                              STATUS    DEFAULT

Basic optional TLV:

 Port Description TLV             YES       YES

 System Name TLV                  YES       YES

 System Description TLV           YES       YES

 System Capabilities TLV          YES       YES

 Management Address TLV           YES       YES

IEEE 802.1 extend TLV:

 Port VLAN ID TLV                 YES       YES

 Port And Protocol VLAN ID TLV    YES       YES

 VLAN Name TLV                    YES       YES

 DCBX TLV                         NO        NO

 EVB TLV                          NO        NO

 Link Aggregation TLV             YES       NO

 Management VID TLV               YES       YES

IEEE 802.3 extend TLV:

 MAC-Physic TLV                   YES       NO

 Power via MDI TLV                YES       NO

 Maximum Frame Size TLV           YES       NO

LLDP-MED extend TLV:

 Capabilities TLV                 YES        YES

 Network Policy TLV               YES        YES

 Location Identification TLV      NO         NO

 Extended Power via MDI TLV       YES        NO

 Inventory TLV                    YES        YES

Table 49 Command output

Field

Description

LLDP tlv-config of port 1

Advertisable optional TLVs of port 1.

NAME

TLV type.

STATUS

Indicates whether the type of TLV is sent through a port.

DEFAULT

Indicates whether the type of TLV is sent through a port by default.

Basic optional TLV

Basic optional TLVs:

·     Port Description TLV.

·     System Name TLV.

·     System Description TLV.

·     System Capabilities TLV.

·     Management Address TLV.

IEEE 802.1 extended TLV

IEEE 802.1 organizationally specific TLVs:

·     Port VLAN ID TLV.

·     Port and protocol VLAN ID TLV.

·     VLAN name TLV.

·     DCBX TLV.

·     EVB TLV.

·     Management VID TLV.

NOTE:

The switch does not support EVB TLV in the current software version.

IEEE 802.3 extended TLV

IEEE 802.3 organizationally specific TLVs:

·     MAC-Physic TLV.

·     Power via MDI TLV.

·     Link aggregation TLV.

·     Maximum frame size TLV.

LLDP-MED extend TLV

LLDP-MED TLVs:

·     Capabilities TLV.

·     Network Policy TLV.

·     Extended Power-via-MDI TLV.

·     Location Identification TLV.

·     Inventory TLV.

Inventory TLV

Inventory TLVs:

·     Hardware Revision TLV.

·     Firmware Revision TLV.

·     Software Revision TLV.

·     Serial Number TLV.

·     Manufacturer Name TLV.

·     Model name TLV.

·     Asset ID TLV.

 

lldp admin-status

Use lldp admin-status to specify the LLDP operating mode.

Use undo lldp admin-status to restore the default.

Syntax

In Layer 2/Layer 3 Ethernet interface view:

lldp [ agent { nearest-customer | nearest-nontpmr } ] admin-status { disable | rx | tx | txrx }

undo lldp [ agent { nearest-customer | nearest-nontpmr } ] admin-status

In Layer 2/Layer 3 aggregate interface view:

lldp agent { nearest-customer | nearest-nontpmr } admin-status { disable | rx | tx | txrx }

undo lldp agent { nearest-customer | nearest-nontpmr } admin-status

In IRF physical interface view:

lldp admin-status { disable | rx | tx | txrx }

undo lldp admin-status

Default

The nearest bridge agent operates in txrx mode, and the nearest customer bridge agent and nearest non-TPMR bridge agent operate in disable mode.

Views

IRF physical interface view

Layer 2/Layer 3 Ethernet interface view

Layer 2/Layer 3 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Parameters

agent: Specifies an LLDP agent type. If you do not specify an agent type in Ethernet interface view, the command configures the operating mode for nearest bridge agents.

nearest-customer: Specifies nearest customer bridge agents.

nearest-nontpmr: Specifies nearest non-TPMR bridge agents.

disable: Specifies the Disable mode. A port in this mode cannot send or receive LLDP frames.

rx: Specifies the Rx mode. A port in this mode can only receive LLDP frames.

tx: Specifies the Tx mode. A port in this mode can only send LLDP frames.

txrx: Specifies the TxRx mode. A port in this mode can send and receive LLDP frames.

Examples

# Configure the LLDP operating mode as Rx for the nearest customer bridge agents on FortyGigE 1/0/1.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] lldp agent nearest-customer admin-status rx

lldp check-change-interval

Use lldp check-change-interval to enable LLDP polling and set the polling interval.

Use undo lldp check-change-interval to restore the default.

Syntax

In Layer 2/Layer 3 Ethernet interface view:

lldp [ agent { nearest-customer | nearest-nontpmr } ] check-change-interval interval

undo lldp [ agent { nearest-customer | nearest-nontpmr } ] check-change-interval

In Layer 2/Layer 3 aggregate interface view:

lldp agent { nearest-customer | nearest-nontpmr } check-change-interval interval

undo lldp agent { nearest-customer | nearest-nontpmr } check-change-interval

In IRF physical interface view:

lldp check-change-interval interval

undo lldp check-change-interval

Default

LLDP polling is disabled.

Views

IRF physical interface view

Layer 2/Layer 3 Ethernet interface view

Layer 2/Layer 3 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Parameters

agent: Specifies an LLDP agent type. If you do not specify an agent type in Ethernet interface view, the command enables LLDP polling and sets the polling interval for nearest bridge agents.

nearest-customer: Specifies nearest customer bridge agents.

nearest-nontpmr: Specifies nearest non-TPMR bridge agents.

interval: Sets the LLDP polling interval in the range of 1 to 30 seconds.

Examples

# Enable LLDP polling and set the polling interval to 30 seconds for the nearest customer bridge agents on FortyGigE 1/0/1.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] lldp agent nearest-customer check-change-interval 30

lldp compliance admin-status cdp

Use lldp compliance admin-status cdp to configure the operating mode of CDP-compatible LLDP.

Use undo lldp compliance admin-status cdp to restore the default.

Syntax

lldp compliance admin-status cdp { disable | txrx }

undo lldp compliance admin-status cdp

Default

CDP-compatible LLDP operates in disable mode.

Views

Layer 2 Ethernet interface view, Layer 3 Ethernet interface view

Predefined user roles

network-admin

mdc-admin

Parameters

disable: Specifies the disable mode. CDP-compatible LLDP in this mode cannot receive or transmit CDP packets.

txrx: Specifies the TxRx mode. CDP-compatible LLDP in this mode can send and receive CDP packets.

Usage guidelines

For your device to work with Cisco IP phones, you must perform the following tasks:

·     Enable CDP-compatible LLDP globally.

·     Configure CDP-compatible LLDP to operate in TxRx mode on the specified ports.

Examples

# Enable CDP-compatible LLDP globally and configure CDP-compatible LLDP to operate in TxRx mode on FortyGigE 1/0/1.

<Sysname> system-view

[Sysname] lldp compliance cdp

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] lldp compliance admin-status cdp txrx

Related commands

lldp compliance cdp

lldp compliance cdp

Use lldp compliance cdp to enable CDP compatibility globally.

Use undo lldp compliance cdp to restore the default.

Syntax

lldp compliance cdp

undo lldp compliance cdp

Default

CDP compatibility is globally disabled.

Views

System view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

The maximum TTL that CDP allows is 255 seconds. To make CDP-compatible LLDP work correctly with Cisco IP phones, configure the LLDP frame transmission interval to be no more than 1/3 of the TTL value.

Examples

# Enable CDP compatibility globally.

<Sysname> system-view

[Sysname] lldp compliance cdp

Related commands

·     lldp hold-multiplier

·     lldp timer tx-interval

lldp enable

Use lldp enable to enable LLDP on a port.

Use undo lldp enable to disable LLDP on a port.

Syntax

lldp enable

undo lldp enable

Default

LLDP is enabled on a port.

Views

IRF physical interface view

Layer 2/Layer 3 Ethernet interface view

Layer 2/Layer 3 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

LLDP takes effect on a port only when LLDP is enabled both globally and on the port.

Examples

# Disable LLDP on FortyGigE 1/0/1.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] undo lldp enable

Related commands

lldp global enable

lldp encapsulation snap

Use lldp encapsulation snap to configure the encapsulation format for LLDP frames as SNAP.

Use undo lldp encapsulation to restore the default.

Syntax

In Layer 2/Layer 3 Ethernet interface view:

lldp [ agent { nearest-customer | nearest-nontpmr } ] encapsulation snap

undo lldp [ agent { nearest-customer | nearest-nontpmr } ] encapsulation

In Layer 2/Layer 3 aggregate interface view:

lldp agent { nearest-customer | nearest-nontpmr } encapsulation snap

undo lldp agent { nearest-customer | nearest-nontpmr } encapsulation

In IRF physical interface view:

lldp encapsulation snap

undo lldp encapsulation

Default

The encapsulation format for LLDP frames is Ethernet II.

Views

IRF physical interface view

Layer 2/Layer 3 Ethernet interface view,

Layer 2/Layer 3 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Parameters

agent: Specifies an LLDP agent type. If you do not specify an agent type in Ethernet interface view, the command configures the LLDP frame encapsulation format for nearest bridge agents.

nearest-customer: Specifies nearest customer bridge agents.

nearest-nontpmr: Specifies nearest non-TPMR bridge agents.

Usage guidelines

LLDP-CDP packets use only SNAP encapsulation.

Examples

# Configure the encapsulation format for LLDP frames as SNAP on FortyGigE 1/0/1.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] lldp encapsulation snap

lldp fast-count

Use lldp fast-count to set the number of LLDP frames sent each time fast LLDP frame transmission is triggered.

Use undo lldp fast-count to restore the default.

Syntax

lldp fast-count count

undo lldp fast-count

Default

The number is 4.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

count: Sets the number of LLDP frames sent each time fast LLDP frame transmission is triggered. The value range is 1 to 8.

Examples

# Configure the device to send five LLDP frames each time fast LLDP frame transmission is triggered.

<Sysname> system-view

[Sysname] lldp fast-count 5

lldp global enable

Use lldp global enable to enable LLDP globally.

Use undo lldp global enable to disable LLDP globally.

Syntax

lldp global enable

undo lldp global enable

Default

LLDP is disabled globally.

Views

System view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

LLDP takes effect only when LLDP is enabled both globally and on the port.

Examples

# Disable LLDP globally.

<Sysname> system-view

[Sysname] undo lldp global enable

Related commands

lldp enable

lldp hold-multiplier

Use lldp hold-multiplier to set the TTL multiplier.

Use undo lldp hold-multiplier to restore the default.

Syntax

lldp hold-multiplier value

undo lldp hold-multiplier

Default

The TTL multiplier is 4.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

value: Sets the TTL multiplier in the range of 2 to 10.

Usage guidelines

The TTL TLV carried in an LLDPDU determines how long the device information carried in the LLDPDU can be saved on a recipient device.

By setting the TTL multiplier, you can configure the TTL of locally sent LLDP frames, which determines how long information about the local device can be saved on a neighboring device. The TTL is expressed by using the following formula:

TTL = Min (65535, (TTL multiplier × LLDP frame transmission interval))

As the expression shows, the TTL can be up to 65535 seconds.

Examples

# Set the TTL multiplier to 6.

<Sysname> system-view

[Sysname] lldp hold-multiplier 6

Related commands

lldp timer tx-interval

lldp management-address-format string

Use lldp management-address-format string to configure the encoding format of the management address as string.

Use undo lldp management-address-format to restore the default.

Syntax

In Layer 2/Layer 3 Ethernet interface view:

lldp [ agent { nearest-customer | nearest-nontpmr } ] management-address-format string

undo lldp [ agent { nearest-customer | nearest-nontpmr } ] management-address-format

In Layer 2/Layer 3 aggregate interface view:

lldp agent { nearest-customer | nearest-nontpmr } management-address-format string

undo lldp agent { nearest-customer | nearest-nontpmr } management-address-format

Default

The encoding format of the management address is numeric.

Views

Layer 2/Layer 3 Ethernet interface view

Layer 2/Layer 3 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Parameters

agent: Specifies an LLDP agent type. If you do not specify an agent type in Ethernet interface view, the command configures the encoding format of the management address for nearest bridge agents.

nearest-bridge: Specifies nearest bridge agents.

nearest-customer: Specifies nearest customer bridge agents.

nearest-nontpmr: Specifies nearest non-TPMR bridge agents.

Usage guidelines

LLDP neighbors must use the same encoding format for the management address.

Examples

# Configure the encoding format of the management address as string for the nearest customer bridge agents on FortyGigE 1/0/1.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] lldp agent nearest-customer management-address-format string

lldp max-credit

Use lldp max-credit to set the token bucket size for sending LLDP frames.

Use undo lldp max-credit to restore the default.

Syntax

lldp max-credit credit-value

undo lldp max-credit

Default

The token bucket size for sending LLDP frames is 5.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

credit-value: Specifies the token bucket size for sending LLDP frames, in the range of 1 to 100.

Examples

# Set the token bucket size for sending LLDP frames to 10.

<Sysname> system-view

[Sysname] lldp max-credit 10

lldp mode

Use lldp mode to configure LLDP to operate in service bridge mode.

Use undo lldp mode to restore the default.

Syntax

lldp mode service-bridge

undo lldp mode

Default

LLDP operates in customer bridge mode.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

service-bridge: Specifies the service bridge mode.

Usage guidelines

The LLDP agent types supported by LLDP depend on the LLDP bridge mode:

·     Service bridge mode—LLDP supports nearest bridge agents and nearest non-TPMR bridge agents. LLDP processes the LLDP frames with destination MAC addresses for these agents and transparently transmits the LLDP frames with other destination MAC addresses in the VLAN.

·     Customer bridge mode—LLDP supports nearest bridge agents, nearest non-TPMR bridge agents, and nearest customer bridge agents. LLDP processes the LLDP frames with destination MAC addresses for these agents and transparently transmits the LLDP frames with other destination MAC addresses in the VLAN.

The bridge mode configuration takes effect only when LLDP is enabled globally. If LLDP is disabled globally, LLDP can only operate in customer bridge mode.

Examples

# Configure LLDP to operate in service bridge mode.

<Sysname> system-view

[Sysname] lldp mode service-bridge

Related commands

lldp global enable

lldp notification med-topology-change enable

Use lldp notification med-topology-change enable to enable LLDP-MED trapping.

Use undo lldp notification med-topology-change enable to disable LLDP-MED trapping.

Syntax

lldp notification med-topology-change enable

undo lldp notification med-topology-change enable

Default

LLDP-MED trapping is disabled on ports.

Views

Layer 2 Ethernet interface view, Layer 3 Ethernet interface view

Predefined user roles

network-admin

mdc-admin

Examples

# Enable LLDP-MED trapping for FortyGigE 1/0/1.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] lldp notification med-topology-change enable

lldp notification remote-change enable

Use lldp notification remote-change enable to enable LLDP trapping.

Use undo lldp notification remote-change enable to disable LLDP trapping.

Syntax

In Layer 2/Layer 3 Ethernet interface view:

lldp [ agent { nearest-customer | nearest-nontpmr } ] notification remote-change enable

undo lldp [ agent { nearest-customer | nearest-nontpmr } ] notification remote-change enable

In Layer 2/Layer 3 aggregate interface view:

lldp agent { nearest-customer | nearest-nontpmr } notification remote-change enable

undo lldp agent { nearest-customer | nearest-nontpmr } notification remote-change enable

In IRF physical interface view:

lldp notification remote-change enable

undo lldp notification remote-change enable

Default

LLDP trapping is disabled on ports.

Views

IRF physical interface view

Layer 2/Layer 3 Ethernet interface view

Layer 2/Layer 3 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Parameters

agent: Specifies an LLDP agent type. If you do not specify an agent type in Ethernet interface view, the command enables LLDP trapping for nearest bridge agents.

nearest-customer: Specifies nearest customer bridge agents.

nearest-nontpmr: Specifies nearest non-TPMR bridge agents.

Examples

# Enable LLDP trapping for the nearest customer bridge agents on FortyGigE 1/0/1.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] lldp agent nearest-customer notification remote-change enable

lldp timer fast-interval

Use lldp timer fast-interval to set an interval for fast LLDP frame transmission.

Use undo lldp timer fast-interval to restore the default.

Syntax

lldp timer fast-interval interval

undo lldp timer fast-interval

Default

The interval for fast LLDP frame transmission is 1 second.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

interval: Sets an interval for fast LLDP frame transmission, in the range of 1 to 3600 seconds.

Examples

# Set the interval for fast LLDP frame transmission to 2 seconds.

<Sysname> system-view

[Sysname] lldp timer fast-interval 2

lldp timer notification-interval

Use lldp timer notification-interval to set the LLDP trap and LLDP-MED trap transmission interval.

Use undo lldp timer notification-interval to restore the default.

Syntax

lldp timer notification-interval interval

undo lldp timer notification-interval

Default

The LLDP trap and LLDP-MED trap transmission interval is 30 seconds.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

interval: Sets the LLDP trap and LLDP-MED trap transmission interval in the range of 5 to 3600 seconds.

Examples

# Set the LLDP trap and LLDP-MED trap transmission interval to 8 seconds.

<Sysname> system-view

[Sysname] lldp timer notification-interval 8

lldp timer reinit-delay

Use lldp timer reinit-delay to set the LLDP reinitialization delay.

Use undo lldp timer reinit-delay to restore the default.

Syntax

lldp timer reinit-delay delay

undo lldp timer reinit-delay

Default

The LLDP reinitialization delay is 2 seconds.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

delay: Sets the LLDP reinitialization delay in the range of 1 to 10 seconds.

Examples

# Set the LLDP reinitialization delay to 4 seconds.

<Sysname> system-view

[Sysname] lldp timer reinit-delay 4

lldp timer tx-interval

Use lldp timer tx-interval to set the LLDP frame transmission interval.

Use undo lldp timer tx-interval to restore the default.

Syntax

lldp timer tx-interval interval

undo lldp timer tx-interval

Default

The LLDP frame transmission interval is 30 seconds.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

interval: Sets the LLDP frame transmission interval in the range of 5 to 32768 seconds.

Examples

# Set the LLDP frame transmission interval to 20 seconds.

<Sysname> system-view

[Sysname] lldp timer tx-interval 20

lldp tlv-enable

Use lldp tlv-enable to configure the types of advertisable TLVs.

Use undo lldp tlv-enable to disable the advertising of specific types of TLVs.

Syntax

In Layer 2 Ethernet interface view:

·     For nearest bridge agents:

lldp tlv-enable { basic-tlv { all | port-description | system-capability | system-description | system-name | management-address-tlv [ ip-address ] } | dot1-tlv { all | port-vlan-id | link-aggregation | dcbx | protocol-vlan-id [ vlan-id ] | vlan-name [ vlan-id ] | management-vid [ mvlan-id ] } | dot3-tlv { all | mac-physic | max-frame-size | power } | med-tlv { all | capability | inventory | network-policy | power-over-ethernet | location-id { civic-address device-type country-code { ca-type ca-value }&<1-10> | elin-address tel-number } } }

undo lldp tlv-enable { basic-tlv { all | port-description | system-capability | system-description | system-name | management-address-tlv [ ip-address ] } | dot1-tlv { all | port-vlan-id | link-aggregation | dcbx | protocol-vlan-id | vlan-name | management-vid } | dot3-tlv { all | mac-physic | max-frame-size | power } | med-tlv { all | capability | inventory | network-policy | power-over-ethernet | location-id } }

·     For nearest non-TPMR bridge agents:

lldp agent nearest-nontpmr tlv-enable { basic-tlv { all | port-description | system-capability | system-description | system-name | management-address-tlv [ ip-address ] } | dot1-tlv { all | port-vlan-id | link-aggregation } }

undo lldp agent nearest-nontpmr tlv-enable { basic-tlv { all | port-description | system-capability | system-description | system-name | management-address-tlv [ ip-address ] } | dot1-tlv { all | port-vlan-id | link-aggregation } }

·     For nearest customer bridge agents:

lldp agent nearest-customer tlv-enable { basic-tlv { all | port-description | system-capability | system-description | system-name | management-address-tlv [ ip-address ] } | dot1-tlv { all | port-vlan-id | link-aggregation } }

undo lldp agent nearest-customer tlv-enable { basic-tlv { all | port-description | system-capability | system-description | system-name | management-address-tlv [ ip-address ] } | dot1-tlv { all | port-vlan-id | link-aggregation } }

In Layer 3 Ethernet interface view:

·     lldp tlv-enable { basic-tlv { all | port-description | system-capability | system-description | system-name | management-address-tlv [ ip-address ] } | dot1-tlv { all | link-aggregation } | dot3-tlv { all | mac-physic | max-frame-size | power } | med-tlv { all | capability | inventory | power-over-ethernet | location-id { civic-address device-type country-code { ca-type ca-value }&<1-10> | elin-address tel-number } } }

·     lldp agent { nearest-nontpmr | nearest-customer } tlv-enable { basic-tlv { all | port-description | system-capability | system-description | system-name | management-address-tlv [ ip-address ] } | dot1-tlv { all | link-aggregation } }

·     undo lldp tlv-enable { basic-tlv { all | port-description | system-capability | system-description | system-name | management-address-tlv [ ip-address ] } | dot1-tlv { all | link-aggregation } | dot3-tlv { all | mac-physic | max-frame-size | power } | med-tlv { all | capability | inventory | power-over-ethernet | location-id } }

·     undo lldp agent { nearest-nontpmr | nearest-customer } tlv-enable { basic-tlv { all | port-description | system-capability | system-description | system-name | management-address-tlv [ ip-address ] } | dot1-tlv { all | link-aggregation } }

In Layer 2 aggregate interface view:

·     lldp agent nearest-nontpmr tlv-enable { basic-tlv { all | management-address-tlv [ ip-address ] | port-description | system-capability | system-description | system-name } | dot1-tlv { all | port-vlan-id } }

·     lldp agent nearest-customer tlv-enable { basic-tlv { all | management-address-tlv [ ip-address ] | port-description | system-capability | system-description | system-name } | dot1-tlv { all | port-vlan-id } }

·     lldp tlv-enable dot1-tlv { protocol-vlan-id [ vlan-id ] | vlan-name [ vlan-id ] | management-vid [ mvlan-id ] }

·     undo lldp agent nearest-nontpmr tlv-enable { basic-tlv { all | management-address-tlv [ ip-address ] | port-description | system-capability | system-description | system-name } | dot1-tlv { all | port-vlan-id } }

·     undo lldp agent nearest-customer tlv-enable { basic-tlv { all | management-address-tlv [ ip-address ] | port-description | system-capability | system-description | system-name } | dot1-tlv { all | port-vlan-id } }

·     undo lldp tlv-enable dot1-tlv { protocol-vlan-id | vlan-name | management-vid }

In Layer 3 aggregate interface view:

·     lldp agent { nearest-customer | nearest-nontpmr } tlv-enable basic-tlv { all | management-address-tlv [ ip-address ] | port-description | system-capability | system-description | system-name }

·     undo lldp agent { nearest-customer | nearest-nontpmr } tlv-enable basic-tlv { all | management-address-tlv [ ip-address ] | port-description | system-capability | system-description | system-name }

In IRF physical interface view:

lldp tlv-enable basic-tlv { port-description | system-capability | system-description | system-name }

undo lldp tlv-enable basic-tlv { port-description | system-capability | system-description | system-name }

Default

On Layer 2 Ethernet interfaces:

·     Nearest bridge agents can advertise all types of LLDP TLVs except the following types:

¡     DCBX TLVs.

¡     Location identification TLVs.

¡     Port and protocol VLAN ID TLVs.

¡     VLAN name TLVs.

¡     Management VLAN ID TLVs.

·     Nearest non-TPMR bridge agents advertise no TLVs.

·     Nearest customer bridge agents can advertise basic TLVs and IEEE 802.1 organizationally specific TLVs.

On Layer 3 Ethernet interfaces:

·     Nearest bridge agents can advertise all types of LLDP TLVs (only link aggregation TLV in 802.1 organizationally specific TLVs) except network policy TLVs.

·     Nearest non-TPMR bridge agents advertise no TLVs.

·     Nearest customer bridge agents can advertise basic TLVs and IEEE 802.1 organizationally specific TLVs (only link aggregation TLV).

On Layer 2 aggregate interfaces:

·     Nearest bridge agents are not supported on Layer 2 aggregate interfaces.

·     Nearest non-TPMR bridge agents advertise no TLVs.

·     Nearest customer bridge agents can advertise basic TLVs and IEEE 802.1 organizationally specific TLVs (only port and protocol VLAN ID TLV, VLAN name TLV, and management VLAN ID TLV).

On Layer 3 aggregate interfaces:

·     Nearest bridge agents are not supported on Layer 3 aggregate interfaces.

·     Nearest non-TPMR bridge agents advertise no TLVs.

·     Nearest customer bridge agents can advertise basic TLVs.

On IRF physical interfaces, an agent can advertise all supported TLVs.

Views

IRF physical interface view

Layer 2/Layer 3 Ethernet interface view

Layer 2/Layer 3 aggregate interface view

Predefined user roles

network-admin

mdc-admin

Parameters

agent: Specifies an LLDP agent type. If you do not specify an agent type in Ethernet interface view, the command configures the types of advertisable TLVs for nearest bridge agents.

nearest-customer: Specifies nearest customer bridge agents.

nearest-nontpmr: Specifies nearest non-TPMR bridge agents.

all: Advertises all TLVs of a specific type.

·     Enables the interface to advertise the following TLVs:

¡     All basic LLDP TLVs if the all keyword is specified for basic-tlv.

¡     All IEEE 802.1 organizationally specific LLDP TLVs if the all keyword is specified for dot1-tlv.

¡     All IEEE 802.3 organizationally specific LLDP TLVs if the all keyword is specified for dot3-tlv.

·     Enables the interface to advertise all LLDP-MED TLVs except location identification TLVs if the all keyword is specified for med-tlv.

basic-tlv: Advertises basic LLDP TLVs.

management-address-tlv [ ip-address ]: Advertises management address TLVs. ip-address specifies the management address to be advertised. By default, the following rules apply:

·     When you execute the lldp tlv-enable command:

¡     For a Layer 2 Ethernet or aggregate interface, the management address is the primary IP address of the VLAN interface meeting the following requirements:

-     In up state.

-     The corresponding VLAN ID is the lowest among the VLANs permitted on the port.

If none of the VLAN interfaces of the permitted VLANs is assigned an IP address or all VLAN interfaces are down, the MAC address of the port will be advertised.

¡     For a Layer 3 Ethernet or aggregate interface, the management address is its own IP address. If no IP address is configured for the Layer 3 Ethernet interface, the MAC address of the port will be advertised.

·     When you execute the undo lldp tlv-enable command:

¡     If you do not specify ip-address, the port does not advertise any management address TLV.

¡     If you specify ip-address, the port advertise the default management address TLVs.

port-description: Advertises port description TLVs.

system-capability: Advertises system capabilities TLVs.

system-description: Advertises system description TLVs.

system-name: Advertises system name TLVs.

dot1-tlv: Advertises IEEE 802.1 organizationally specific LLDP TLVs.

dcbx: Advertises Data Center Bridging Exchange Protocol TLVs.

port-vlan-id: Advertises port VLAN ID TLVs.

protocol-vlan-id [ vlan-id ]: Advertises port and protocol VLAN ID TLVs. The vlan-id argument specifies a VLAN ID in the TLVs to be advertised. The VLAN ID is in the range of 1 to 4094, and the default is the lowest VLAN ID on the port.

vlan-name [ vlan-id ]: Advertises VLAN name TLVs. The vlan-id argument specifies a VLAN ID in the TLVs to be advertised. The VLAN ID is in the range of 1 to 4094, and the default is the lowest VLAN ID on the port.

management-vid [ mvlan-id ]: Advertises the management VLAN ID TLV. The mvlan-id argument specifies a management VLAN ID in the TLVs to be advertised. The management VLAN ID is in the range of 1 to 4094. If you do not specify a management VLAN ID, the value 0 is advertised, which means that the LLDP agent is not configured with a management VLAN ID.

dot3-tlv: Advertises IEEE 802.3 organizationally specific LLDP TLVs.

link-aggregation: Advertises link aggregation TLVs.

mac-physic: Advertises MAC/PHY configuration/status TLVs.

max-frame-size: Advertises maximum frame size TLVs.

power: Advertises power in MDI TLVs and power stateful control TLVs.

med-tlv: Advertises LLDP-MED TLVs.

capability: Advertises LLDP-MED capabilities TLVs.

inventory: Advertises the following TLVs: hardware revision, firmware revision, software revision, serial number, manufacturer name, model name, and asset ID.

location-id: Advertises location identification TLVs.

civic-address: Inserts the normal address information about the network device in location identification TLVs .

device-type: Sets a device type value in the range of 0 to 2:

·     Value 0 specifies a DHCP server.

·     Value 1 specifies a switch.

·     Value 2 specifies an LLDP-MED endpoint.

country-code: Sets a country code, corresponding to ISO 3166.

{ ca-type ca-value }&<1-10>: Configures address information. ca-type represents the address information type in the range of 0 to 255, ca-value represents address information, a string of 1 to 250 characters, and &<1-10> indicates that you can specify up to 10 ca-type ca-value pairs.

elin-address: Inserts telephone numbers for emergencies in location identification TLVs.

tel-number: Sets the telephone number for emergencies, a string of 10 to 25 characters.

network-policy: Advertises network policy TLVs.

power-over-ethernet: Advertises extended power-via-MDI TLVs.

Usage guidelines

Nearest bridge agents are not supported on Layer 2 aggregate interfaces.

You can enable the device to advertise multiple types of TLVs by using this command without the all keyword specified.

If the MAC/PHY configuration/status TLV is not advertisable, none of the LLDP-MED TLVs will be advertised whether or not they are advertisable. If the LLDP-MED capabilities TLV is not advertisable, the other LLDP-MED TLVs will not be advertised whether or not they are advertisable.

The port and protocol VLAN ID TLV, VLAN name TLV, and management VLAN ID TLV in IEEE 802.1 organizationally specific LLDP TLVs can be configured only for nearest bridge agents. The configuration can be inherited by nearest customer bridge agents and nearest non-TPMR bridge agents.

Examples

# Enable the device to advertise link aggregation TLVs of the IEEE 802.1 organizationally specific TLVs for the nearest customer bridge agents on FortyGigE 1/0/1.

<Sysname> system-view

[Sysname] interface fortygige 1/0/1

[Sysname-FortyGigE1/0/1] lldp agent nearest-customer tlv-enable dot1-tlv link-aggregation

 


Index

A B C D E F I J L M N P R S U V


A

active region-configuration,114

B

bandwidth,164

bandwidth,79

bandwidth,1

bandwidth,48

broadcast-suppression,36

C

check region-configuration,114

D

dcbx version,191

default,48

default,1

default,79

default,164

description,165

description,80

description,2

description,49

display counters,3

display counters rate,4

display ethernet statistics,5

display interface,80

display interface,8

display interface inloopback,50

display interface loopback,52

display interface null,55

display interface range,60

display interface vlan-interface,166

display lacp system-id,84

display link-aggregation capability,85

display link-aggregation load-sharing mode,86

display link-aggregation load-sharing path,87

display link-aggregation member-port,89

display link-aggregation summary,91

display link-aggregation verbose,92

display lldp local-information,191

display lldp neighbor-information,196

display lldp statistics,201

display lldp status,203

display lldp tlv-config,206

display loopback-detection,158

display mac-address,64

display mac-address aging-time,65

display mac-address mac-learning,66

display mac-address statistics,67

display packet-drop,19

display port,178

display port-isolate group,111

display reserve-vlan-interface,169

display storm-constrain,37

display stp,115

display stp abnormal-port,121

display stp bpdu-statistics,121

display stp down-port,123

display stp history,124

display stp region-configuration,126

display stp root,127

display stp tc,127

display vlan,169

display vlan brief,171

display vlan mapping,186

duplex,19

E

eee enable,20

F

flow-control,21

flow-control receive enable,22

I

instance,129

interface,22

interface bridge-aggregation,95

interface loopback,57

interface null,57

interface range,60

interface range name,62

interface route-aggregation,96

interface vlan-interface,172

J

jumboframe enable,23

L

lacp edge-port,97

lacp period short,98

lacp system-priority,98

link-aggregation bfd ipv4,99

link-aggregation capability,100

link-aggregation global load-sharing mode,101

link-aggregation ignore vlan,102

link-aggregation lacp traffic-redirect-notification enable,102

link-aggregation load-sharing mode,103

link-aggregation load-sharing mode local-first,104

link-aggregation mode,105

link-aggregation port-priority,105

link-aggregation selected-port maximum,106

link-aggregation selected-port minimum,107

link-delay,24

lldp admin-status,209

lldp check-change-interval,210

lldp compliance admin-status cdp,211

lldp compliance cdp,212

lldp enable,213

lldp encapsulation snap,213

lldp fast-count,214

lldp global enable,215

lldp hold-multiplier,215

lldp management-address-format string,216

lldp max-credit,217

lldp mode,217

lldp notification med-topology-change enable,218

lldp notification remote-change enable,219

lldp timer fast-interval,220

lldp timer notification-interval,220

lldp timer reinit-delay,221

lldp timer tx-interval,221

lldp tlv-enable,222

loopback-detection action,159

loopback-detection enable,160

loopback-detection global action,160

loopback-detection global enable,161

loopback-detection interval-time,162

M

mac-address (interface view),68

mac-address (system view),69

mac-address information enable (interface view),75

mac-address information enable (system view),75

mac-address information interval,76

mac-address information mode,77

mac-address information queue-length,77

mac-address mac-learning enable,71

mac-address mac-learning ingress,72

mac-address mac-roaming enable,73

mac-address timer,73

mdix-mode,38

mtu,107

mtu,46

mtu,173

multicast-suppression,39

N

name,174

P

port,179

port access vlan,180

port auto-power-down,25

port hybrid pvid,181

port hybrid vlan,182

port link-aggregation group,108

port link-mode,26

port link-type,183

port trunk permit vlan,183

port trunk pvid,184

port up-mode,40

port-isolate enable,112

port-isolate group,112

priority-flow-control,27

priority-flow-control no-drop dot1p,28

R

region-name,130

reserve-vlan-interface,174

reset counters interface,109

reset counters interface,29

reset counters interface loopback,58

reset counters interface null,58

reset ethernet statistics,30

reset lacp statistics,109

reset packet-drop interface,31

reset stp,131

revision-level,131

S

service,176

shutdown,110

shutdown,177

shutdown,31

shutdown,59

speed,32

storm-constrain,41

storm-constrain control,42

storm-constrain enable log,43

storm-constrain enable trap,44

storm-constrain interval,44

stp bpdu-protection,132

stp bridge-diameter,132

stp compliance,133

stp config-digest-snooping,134

stp cost,135

stp edged-port,136

stp enable,137

stp global config-digest-snooping,138

stp global enable,138

stp global mcheck,139

stp loop-protection,140

stp max-hops,140

stp mcheck,141

stp mode,142

stp no-agreement-check,143

stp pathcost-standard,143

stp point-to-point,144

stp port priority,145

stp port-log,146

stp priority,147

stp region-configuration,147

stp role-restriction,148

stp root primary,148

stp root secondary,149

stp root-protection,150

stp tc-protection,151

stp tc-protection threshold,151

stp tc-restriction,152

stp timer forward-delay,153

stp timer hello,153

stp timer max-age,154

stp timer-factor,155

stp transmit-limit,156

U

unicast-suppression,45

using fortygige,33

using tengige,34

V

virtual-cable-test,35

vlan,177

vlan mapping,187

vlan mapping double-tagged,188

vlan mapping untagged,189

vlan-mapping modulo,157


 

  • Cloud & AI
  • InterConnect
  • Intelligent Computing
  • Security
  • SMB Products
  • Intelligent Terminal Products
  • Product Support Services
  • Technical Service Solutions
All Services
  • Resource Center
  • Policy
  • Online Help
All Support
  • Become a Partner
  • Partner Resources
  • Partner Business Management
All Partners
  • Profile
  • News & Events
  • Online Exhibition Center
  • Contact Us
All About Us
新华三官网