10-Interface Configuration Guide

HomeSupportConfigure & DeployConfiguration GuidesH3C SecPath Firewall Series Configuration Guides(V7)-6W60110-Interface Configuration Guide
02-Ethernet interface configuration
Title Size Download
02-Ethernet interface configuration 171.87 KB

Configuring Ethernet interfaces

About Ethernet interface

IMPORTANT

IMPORTANT:

Physical interfaces on firewall modules can only be used as IRF physical interfaces.

This series devices support Ethernet interfaces, Console interfaces, and USB interfaces. For the interface types and the number of interfaces supported by a device model, see the installation guide.

 

Configuring a management Ethernet interface

 

Hardware and feature compatibility

F1000 series

Models

Feature compatibility

F1000-X-G5 series

F1000-A-G5, F1000-C-G5, F1000-C-G5-LI, F1000-E-G5, F1000-H-G5, F1000-S-G5

Yes

F1000-X-G3 series

F1000-A-G3, F1000-C-G3, F1000-E-G3, F1000-S-G3

Yes

F1000-X-G2 series

F1000-A-G2, F1000-C-G2, F1000-E-G2, F1000-S-G2

No

F1000-9X0-AI series

F1000-9390-AI, F1000-9385-AI, F1000-9380-AI, F1000-9370-AI, F1000-9360-AI, F1000-9350-AI, F1000-9330-AI, F1000-9320-AI

Yes

F1000-990-AI, F1000-980-AI, F1000-970-AI, F1000-960-AI, F1000-950-AI, F1000-930-AI, F1000-920-AI, F1000-910-AI, F1000-905-AI

No

F1000-C83X0 series

F1000-C8395, F1000-C8390, F1000-C8385, F1000-C8380, F1000-C8370, F1000-C8360, F1000-C8350, F1000-C8330

Yes

F1000-C81X0 series

F1000-C8180, F1000-C8170, F1000-C8160, F1000-C8150, F1000-C8130, F1000-C8120, F1000-C8110

No

F1000-7X0-HI series

F1000-770-HI, F1000-750-HI, F1000-740-HI, F1000-730-HI

Yes

F1000-720-HI, F1000-710-HI

No

F1000-C-X series

F1000-C-EI, F1000-C-HI

No

F1000-C-XI, F1000-E-XI

Yes

F1000-V series

F1000-E-VG, F1000-S-VG

No

SecBlade IV

LSPM6FWD8, LSQM2FWDSC8

No

 

F100 series

Models

Feature compatibility

F100-X-G5 series

F100-A-G5, F100-E-G5

Yes

F100-C-G5, F100-M-G5, F100-S-G5

No

F100-X-G3 series

F100-A-G3, F100-C-G3, F100-E-G3, F100-M-G3, F100-S-G3

No

F100-X-G2 series

F100-A-G2, F100-C-G2, F100-E-G2, F100-M-G2, F100-S-G2

No

F100-WiNet series

F100-A81-WiNet

Yes

F100-A80-WiNet, F100-C80-WiNet, F100-C60-WiNet, F100-C50-WiNet, F100-S80-WiNet, F100-A91-WiNet

No

F100-C-A series

F100-C-A6, F100-C-A5, F100-C-A3, F100-C-A2, F100-C-A1, F100-C-A6-WL, F100-C-A5-W, F100-C-A3-W

No

F100-X-XI series

F100-A-EI, F100-A-HI, F100-A-SI, F100-C-EI, F100-C-HI, F100-C-XI, F100-E-EI, F100-S-HI, F100-S-XI

No

 

About this task

A management interface uses an RJ-45/LC connector. You can connect the interface to a PC for software loading and system debugging, or connect it to a remote NMS for remote system management.

Each member device in an IRF system has a management Ethernet interface. For management link backup, perform the following tasks:

1.     Connect your PC to the management Ethernet interface on the master device.

2.     Connect the PC to a management Ethernet interface with the same interface number on a subordinate device.

The two management Ethernet interfaces operate as follows:

·     When the IRF system has multiple management Ethernet interfaces, only the management Ethernet interface on the master device processes management traffic.

·     When the management Ethernet interface on the master device fails, the management Ethernet interface on the subordinate device takes over to process management traffic.

·     When the management Ethernet interface on the master device recovers, it takes over to process management traffic again.

Procedure

1.     Enter system view.

system-view

2.     Enter management Ethernet interface view.

interface M-GigabitEthernet interface-number

3.     (Optional.) Set the interface description.

description text

The default setting is M-GigabitEthernet0/0/0 Interface.

4.     (Optional.) Set the duplex mode for the management Ethernet interface.

duplex { auto | full | half }

By default, the duplex mode is auto for a management Ethernet interface.

5.     (Optional.)_Set the speed for the management Ethernet interface.

speed { 10 | 100 | 1000 | auto }

By default, the speed is auto for a management Ethernet interface.

6.      (Optional.) Shut down the interface.

shutdown

By default, the management Ethernet interface is up.

 

CAUTION

CAUTION:

Executing the shutdown command on an interface will disconnect the link of the interface and interrupt communication. Use this command with caution.

Ethernet interface naming conventions

The Ethernet interfaces are named in the format of interface type A/B/C. The letters that follow the interface type represent the following elements:

·     A—IRF member ID. If the device is not in an IRF fabric, A is 1 by default.

·     B—Card slot number. 0 indicates the interface is a fixed interface of the device. 1 indicates the interface is on expansion interface card 1. 2 indicates the interface is on expansion interface card 2.

·     C—Port index.

Configuring common Ethernet interface settings

This section describes the settings common to Layer 2 Ethernet interfaces, Layer 3 Ethernet interfaces, and Layer 3 Ethernet subinterfaces. For more information about the settings specific to Layer 2 Ethernet interfaces, see "Configuring a Layer 2 Ethernet interface." For more information about the settings specific to Layer 3 Ethernet interfaces or subinterfaces, see "Configuring a Layer 3 Ethernet interface or subinterface."

Configuring the physical type for a combo interface (single combo interface)

 

About this task

A combo interface is a logical interface that physically comprises one fiber combo port and one copper combo port. The two ports share one forwarding channel and one interface view. As a result, they cannot work simultaneously. When you activate one port, the other port is automatically disabled. In the interface view, you can activate the fiber or copper combo port, and configure other port attributes such as the interface rate and duplex mode.

Hardware and feature compatibility

CAUTION

CAUTION:

·     In the BootWare menu, fiber combo ports are not available.

·     When the fiber combo port is active, it supports only the speeds autonegotiation and 1000 Mbps, and supports only duplex modes full and autonegotiation. If the copper combo port is configured with any other speed or duplex settings, the settings do not take effect after it is switched to the fiber combo port.

F1000 series

Models

Feature compatibility

F1000-X-G5 series

F1000-A-G5, F1000-S-G5, F1000-C-G5, F1000-C-G5-LI

Yes

F1000-E-G5, F1000-H-G5

No

F1000-X-G3 series

F1000-A-G3, F1000-C-G3, F1000-E-G3, F1000-S-G3

No

F1000-X-G2 series

F1000-A-G2, F1000-C-G2, F1000-E-G2, F1000-S-G2

No

F1000-9X0-AI series

F1000-9390-AI, F1000-9385-AI, F1000-9380-AI, F1000-9370-AI, F1000-9360-AI, F1000-9350-AI, F1000-9330-AI, F1000-9320-AI, F1000-910-AI

Yes

F1000-990-AI, F1000-980-AI, F1000-970-AI, F1000-960-AI, F1000-950-AI, F1000-930-AI, F1000-920-AI, F1000-905-AI

No

F1000-C83X0 series

F1000-C8395

No

F1000-C8390, F1000-C8385, F1000-C8380, F1000-C8370, F1000-C8360, F1000-C8350, F1000-C8330

Yes

F1000-C81X0 series

F1000-C8180, F1000-C8170, F1000-C8160, F1000-C8110

No

F1000-C8150, F1000-C8130, F1000-C8120

Yes

F1000-7X0-HI series

F1000-770-HI, F1000-750-HI, F1000-740-HI, F1000-730-HI, F1000-720-HI, F1000-710-HI

Yes

F1000-C-X series

F1000-C-XI, F1000-E-XI

Yes

F1000-C-EI, F1000-C-HI

No

F1000-V series

F1000-E-VG

No

F1000-S-VG

Yes

SecBlade IV

LSPM6FWD8

No

LSQM2FWDSC8

Yes

 

F100 series

Models

Feature compatibility

F100-X-G5 series

F100-A-G5, F100-C-G5, F100-E-G5, F100-M-G5, F100-S-G5

Yes

F100-X-G3 series

F100-A-G3, F100-E-G3

Yes

F100-C-G3, F100-M-G3, F100-S-G3

No

F100-X-G2 series

F100-A-G2, F100-E-G2

Yes

F100-C-G2, F100-M-G2, F100-S-G2

No

F100-WiNet series

F100-A80-WiNet, F100-C80-WiNet, F100-C60-WiNet, F100-C50-WiNet

No

F100-S80-WiNet , F100-A81-WiNet, F100-A91-WiNet

Yes

F100-C-A series

F100-C-A6, F100-C-A5, F100-C-A3, F100-C-A2, F100-C-A1, F100-C-A6-WL, F100-C-A5-W, F100-C-A3-W

No

F100-X-XI series

F100-A-EI, F100-A-HI, F100-A-SI, F100-E-EI

No

F100-C-EI, F100-C-HI, F100-C-XI, F100-S-HI, F100-S-XI

Yes

Prerequisites

Before you configure combo interfaces, complete the following tasks:

·     Determine the combo interfaces on your device. Identify the two physical interfaces that belong to each combo interface according to the marks on the device panel.

·     Use the display interface command to determine which port (fiber or copper) of each combo interface is active:

¡     If the copper port is active, the output includes "Media type is twisted pair, Port hardware type is 1000_BASE_T."

¡     If the fiber port is active, the output does not include this information.

Also, you can use the display this command in the view of each combo interface to display the combo interface configuration:

¡     If the fiber port is active, the combo enable fiber command exists in the output.

¡     If the copper port is active, the combo enable fiber command does not exist in the output.

Procedure

1.     Enter system view.

system-view

2.     Enter Ethernet interface view.

interface interface-type interface-number

3.     Activate the copper combo port or fiber combo port.

combo enable { copper | fiber }

By default, the copper combo port is active.

Configuring basic settings of an Ethernet interface

About this task

You can configure an Ethernet interface to operate in one of the following duplex modes:

·     Full-duplex mode—The interface can send and receive packets simultaneously.

·     Half-duplex mode—The interface can only send or receive packets at a given time.

·     Autonegotiation mode—The interface negotiates a duplex mode with its peer.

You can set the speed of an Ethernet interface or enable it to automatically negotiate a speed with its peer.

Restrictions and guidelines

The shutdown and loopback commands are mutually exclusive.

Procedure

1.     Enter system view.

system-view

2.     Enter Ethernet interface view.

interface interface-type interface-number

3.     Set the description for the Ethernet interface.

description text

The default setting is interface-name Interface. For example, GigabitEthernet1/0/1 Interface.

4.     Set the duplex mode for the Ethernet interface.

duplex { auto | full | half }

By default, the duplex mode is auto for Ethernet interfaces.

Fiber ports do not support the half keyword.

5.     Set the speed for the Ethernet interface.

speed { 10 | 100 | 1000 | auto }

By default, an interface autonegotiates its speed.

6.     Set the expected bandwidth for the Ethernet interface.

bandwidth bandwidth-value

By default, the expected bandwidth (in kbps) is the interface baud rate divided by 1000.

7.     Bring up the Ethernet interface.

undo shutdown

By default, an Ethernet interface is up.

Configuring basic settings of an Ethernet subinterface

About this task

By default, a Layer 3 Ethernet subinterface processes packets for only the VLAN whose ID is the same as the subinterface number.

Restrictions and guidelines for Ethernet subinterface basic settings

·     To transmit and receive packets through an Ethernet subinterface, you must associate it with a VLAN. For more information, see VLAN termination configuration in Layer 2—LAN Switching Configuration Guide.

·     To transmit packets between a local Ethernet subinterface and a remote Ethernet subinterface, configure them with the same subinterface number and VLAN ID.

·     Before creating a Layer 3 Ethernet subinterface, do not reserve a resource for the VLAN interface whose interface number is the subinterface number. After you reserve a VLAN interface resource, do not create a Layer 3 Ethernet subinterface whose subinterface number is the VLAN interface number. A Layer 3 Ethernet subinterface uses the VLAN interface resource in processing tagged packets whose VLAN ID matches the subinterface number. For more information about reserving resources for VLAN interfaces, see Layer 2—LAN Switching Configuration Guide.

·     The shutdown command cannot be configured on an Ethernet interface in a loopback test.

Procedure

1.     Enter system view.

system-view

2.     Create an Ethernet subinterface.

interface interface-type interface-number.subnumber

3.     Set the description for the Ethernet subinterface.

description text

The default setting is interface-name Interface. For example, GigabitEthernet1/0/1.1 Interface.

4.     Set the expected bandwidth for the Ethernet subinterface.

bandwidth bandwidth-value

By default, the expected bandwidth (in kbps) is the interface baud rate divided by 1000.

5.     Bring up the Ethernet subinterface.

undo shutdown

By default, an Ethernet subinterface is up.

Configuring the link mode of an Ethernet interface

 

About this task

Ethernet interfaces operate differently depending on the hardware structure of interface cards:

·     Some Ethernet interfaces can operate only as Layer 2 Ethernet interfaces (in bridge mode).

·     Some Ethernet interfaces can operate only as Layer 3 Ethernet interfaces (in route mode).

·     Some Ethernet interfaces can operate either as Layer 2 or Layer 3 Ethernet interfaces. You can set the link mode to bridge or route for these Ethernet interfaces.

Procedure

1.     Enter system view.

system-view

2.     Enter Ethernet interface view.

interface interface-type interface-number

3.     Configure the link mode of the Ethernet interface.

port link-mode { bridge | route }

By default, an Ethernet interface operates in Layer 3 mode.

 

CAUTION

CAUTION:

Changing the link mode of an Ethernet interface also restores all commands (except shutdown and combo enable) on the Ethernet interface to their defaults in the new link mode.

Configuring jumbo frame support

About this task

Jumbo frames are frames larger than a device-specific size and are typically received by an Ethernet interface during high-throughput data exchanges, such as file transfers. For more information, see Interface Command Reference.

The Ethernet interface processes jumbo frames in the following ways:

·     When the Ethernet interface is configured to deny jumbo frames (by using the undo jumboframe enable command), the Ethernet interface discards jumbo frames.

·     When the Ethernet interface is configured with jumbo frame support, the Ethernet interface performs the following operations:

¡     Processes jumbo frames within the specified length.

¡     Discards jumbo frames that exceed the specified length.

Procedure

1.     Enter system view.

system-view

2.     Enter Ethernet interface view.

interface interface-type interface-number

3.     Configure jumbo frame support.

jumboframe enable [ size ]

By default, the device allows jumbo frames within the specified length to pass through. For the maximum length of jumbo frames, see Interface Command Reference.

If you set the size argument multiple times, the most recent configuration takes effect.

Configuring dampening on an Ethernet interface

About this task

The interface dampening feature uses an exponential decay mechanism to prevent excessive interface flapping events from adversely affecting routing protocols and routing tables in the network. Suppressing interface state change events protects the system resources.

If an interface is not dampened, its state changes are reported. For each state change, the system also generates an SNMP trap and log message.

After a flapping interface is dampened, it does not report its state changes to the CPU. For state change events, the interface only generates SNMP trap and log messages.

Parameters

·     Penalty—The interface has an initial penalty of 0. When the interface flaps, the penalty increases by 1000 for each down event until the ceiling is reached. It does not increase for up events. When the interface stops flapping, the penalty decreases by half each time the half-life timer expires until the penalty drops to the reuse threshold.

·     Ceiling—The penalty stops increasing when it reaches the ceiling.

·     Suppress-limit—The accumulated penalty that triggers the device to dampen the interface. In dampened state, the interface does not report its state changes to the CPU. For state change events, the interface only generates SNMP traps and log messages.

·     Reuse-limit—When the accumulated penalty decreases to this reuse threshold, the interface is not dampened. Interface state changes are reported to the upper layers. For each state change, the system also generates an SNMP trap and log message.

·     Decay—The amount of time (in seconds) after which a penalty is decreased.

·     Max-suppress-time—The maximum amount of time the interface can be dampened. If the penalty is still higher than the reuse threshold when this timer expires, the penalty stops increasing for down events. The penalty starts to decrease until it drops below the reuse threshold.

When configuring the dampening command, follow these rules to set the values mentioned above:

·     The ceiling is equal to 2(Max-suppress-time/Decay)  × reuse-limit. It is not user configurable.

·     The configured suppress limit is lower than or equal to the ceiling.

·     The ceiling is lower than or equal to the maximum suppress limit supported.

Figure 1 shows the change rule of the penalty value. The lines t0 and t2 indicate the start time and end time of the suppression, respectively. The period from t0 to t2 indicates the suppression period, t0 to t1 indicates the max-suppress-time, and t1 to t2 indicates the complete decay period.

Figure 1 Change rule of the penalty value

Restrictions and guidelines

·     The dampening command does not take effect on the administratively down events. When you execute the shutdown command, the penalty restores to 0, and the interface reports the down event to the upper-layer protocols.

Do not enable this feature on an interface that has spanning tree protocols or Smart Link enabled.

Procedure

1.     Enter system view.

system-view

2.     Enter Ethernet interface view.

interface interface-type interface-number

3.     Enable dampening on the interface.

dampening [ half-life reuse suppress max-suppress-time ]

By default, interface dampening is disabled on Ethernet interfaces.

Configuring storm suppression

 

About this task

The storm suppression feature ensures that the size of a particular type of traffic (broadcast, multicast, or unknown unicast traffic) does not exceed the threshold on an interface. When the broadcast, multicast, or unknown unicast traffic on the interface exceeds this threshold, the system discards packets until the traffic drops below this threshold.

Both storm suppression and storm control can suppress storms on an interface. Storm suppression uses the chip to suppress traffic. Storm suppression has less impact on the device performance than storm control, which uses software to suppress traffic.

Restrictions and guidelines

·     For the traffic suppression result to be determined, do not configure storm control together with storm suppression for the same type of traffic. For more information about storm control, see "Configuring storm control on an Ethernet interface."

·     The configured suppression threshold value in pps or kbps might be converted into a multiple of the step value supported by the chip. As a result, the effective suppression threshold might be different from the configured one. For information about the suppression threshold that takes effect, see the prompt on the device.

Procedure

1.     Enter system view.

system-view

2.     Enter Ethernet interface view.

interface interface-type interface-number

3.     Enable broadcast suppression and set the broadcast suppression threshold.

broadcast-suppression { ratio | pps max-pps | kbps max-kbps }

By default, broadcast suppression is disabled.

4.     Enable multicast suppression and set the multicast suppression threshold.

multicast-suppression { ratio | pps max-pps | kbps max-kbps }

By default, multicast suppression is disabled.

5.     Enable unknown unicast suppression and set the unknown unicast suppression threshold.

unicast-suppression { ratio | pps max-pps | kbps max-kbps }

By default, unknown unicast suppression is disabled.

Configuring generic flow control on an Ethernet interface

About this task

To avoid dropping packets on a link, you can enable generic flow control at both ends of the link. When traffic congestion occurs at the receiving end, the receiving end sends a flow control (Pause) frame to ask the sending end to suspend sending packets. Generic flow control includes the following types:

·     TxRx-mode generic flow control—Enabled by using the flow-control command. With TxRx-mode generic flow control enabled, an interface can both send and receive flow control frames:

¡     When congestion occurs, the interface sends a flow control frame to its peer.

¡     When the interface receives a flow control frame from its peer, it suspends sending packets to its peer.

Procedure

1.     Enter system view.

system-view

2.     Enter Ethernet interface view.

interface interface-type interface-number

3.     Enable generic flow control.

flow-control

By default, generic flow control is disabled on an Ethernet interface.

By default, generic flow control is disabled on an Ethernet interface.

Setting the statistics polling interval

About this task

By setting the statistics polling interval, you can collect statistics of packets and analyze packets at the specified interval. Based on the interface traffic statistics, you can take traffic control measures promptly to avoid network congestion and service interruption.

·     When network congestion is detected, you can set the statistics polling interval to be smaller than 300 seconds (30 seconds when congestion deteriorates). Then, check traffic distribution on interfaces within a short period of time. For data packets that cause congestion, take traffic control measures.

·     When the network bandwidth is sufficient and services are operating normally, you can set the statistics polling interval to be greater than 300 seconds. Once traffic parameter anomalies occur, modify the statistics polling interval promptly so that you can observe the traffic parameter trend in real time.

To display the interface statistics collected in the last statistics polling interval, use the display interface command. To clear the interface statistics, use the reset counters interface command.

A device supports either the system view settings or the Ethernet interface view settings.

·     The statistics polling interval configured in system view takes effect on all Ethernet interface.

·     The statistics polling interval configured in Ethernet interface view takes effect only on the current interface.

·     For an interface, the configuration in its Ethernet interface view takes priority. The configuration in system view is used when the configuration in Ethernet interface view is the default.

Restrictions and guidelines for setting the statistics polling interval

·     This feature is not applicable to interfaces assigned to contexts in shared mode.

·     As a best practice, use the default setting when you set the statistics polling interval in system view. A short statistics polling interval might decrease the system performance and result in inaccurate statistics.

Setting the statistics polling interval in system view

1.     Enter system view.

system-view

2.     Set the statistics polling interval.

flow-interval interval

By default, the statistics polling interval is 300 seconds.

Setting the statistics polling interval in Ethernet interface view

1.     Enter system view.

system-view

2.     Enter Ethernet interface view.

interface interface-type interface-number

3.     Set the statistics polling interval for the Ethernet interface.

flow-interval interval

By default, the statistics polling interval is 300 seconds.

Enabling subinterface rate statistics collection on an Ethernet interface

Restrictions and guidelines

This feature is resource intensive. When you use this feature, make sure you fully understand its impact on system performance.

After you enable subinterface rate statistics collection on an Ethernet interface, the device periodically refreshes the rate statistics on the subinterfaces of this Ethernet interface.

Procedure

1.     Enter system view.

system-view

2.     Enter Ethernet interface view.

interface interface-type interface-number

3.     Enable subinterface rate statistics collection on the Ethernet interface.

sub-interface rate-statistic

By default, subinterface rate statistics collection is disabled on an Ethernet interface.

4.     (Optional.) View the subinterface rate statistics.

display interface

Enabling loopback testing on an Ethernet interface

About this task

Perform this task to determine whether an Ethernet link works correctly.

Loopback testing includes the following types:

·     Internal loopback testing—Tests the device where the Ethernet interface resides. The Ethernet interface sends outgoing packets back to the local device. If the device fails to receive the packets, the device fails.

·     External loopback testing—Tests the inter-device link. The Ethernet interface sends incoming packets back to the remote device. If the remote device fails to receive the packets, the inter-device link fails.

Restrictions and guidelines

·     After you enable this feature on an Ethernet interface, the interface does not forward data traffic.

·     The shutdown and loopback commands are mutually exclusive.

·     After you enable this feature on an Ethernet interface, the Ethernet interface switches to full duplex mode. After you disable this feature, the Ethernet interface restores to its duplex setting.

Procedure

1.     Enter system view.

system-view

2.     Enter Ethernet interface view.

interface interface-type interface-number

3.     Enable loopback testing.

loopback{ external | internal }

Restoring the default settings for an interface

Restrictions and guidelines

CAUTION

CAUTION:

This feature might interrupt ongoing network services. Make sure you are fully aware of the impacts of this feature when you use it in a live network.

This feature might fail to restore the default settings for some commands because of command dependencies or system restrictions. You can use the display this command in interface view to check for these commands and perform their undo forms or follow the command reference to restore their default settings. If your restoration attempt still fails, follow the error message to resolve the problem.

Procedure

1.     Enter system view.

system-view

2.     Enter Ethernet interface view or Ethernet subinterface view.

interface interface-type { interface-number | interface-number.subnumber }

3.     Restore the default settings for the interface.

default

Configuring a Layer 2 Ethernet interface

Setting the MDIX mode of an Ethernet interface

IMPORTANT

IMPORTANT:

Fiber ports do not support the MDIX mode setting.

About this task

A physical Ethernet interface has eight pins, each of which plays a dedicated role. For example, pins 1 and 2 transmit signals, and pins 3 and 6 receive signals. You can use both crossover and straight-through Ethernet cables to connect copper Ethernet interfaces. To accommodate these types of cables, a copper Ethernet interface can operate in one of the following Medium Dependent Interface-Crossover (MDIX) modes:

·     MDIX mode—Pins 1 and 2 are receive pins and pins 3 and 6 are transmit pins.

·     MDI mode—Pins 1 and 2 are transmit pins and pins 3 and 6 are receive pins.

·     AutoMDIX mode—The interface negotiates pin roles with its peer.

 

 

NOTE:

This feature does not take effect on pins 4, 5, 7, and 8 of physical Ethernet interfaces.

·     Pins 4, 5, 7, and 8 of interfaces operating at 10 Mbps or 100 Mbps do not receive or transmit signals.

·     Pins 4, 5, 7, and 8 of interfaces operating at 1000 Mbps or higher rates receive and transmit signals.

Restrictions and guidelines

To enable a copper Ethernet interface to communicate with its peer, set the MDIX mode of the interface by following these guidelines:

·     Typically, set the MDIX mode of the interface to AutoMDIX. Set the MDIX mode of the interface to MDI or MDIX only when the device cannot determine the cable type.

·     When a straight-through cable is used, configure the interface to operate in an MDIX mode different than its peer.

·     When a crossover cable is used, perform one of the following tasks:

¡     Configure the interface to operate in the same MDIX mode as its peer.

¡     Configure either end to operate in AutoMDIX mode.

Procedure

1.     Enter system view.

system-view

2.     Enter Ethernet interface view.

interface interface-type interface-number

3.     Set the MDIX mode of the Ethernet interface.

mdix-mode { automdix | mdi | mdix }

By default, a copper Ethernet interface operates in auto mode to negotiate pin roles with its peer.

Configuring storm control on an Ethernet interface

About this task

Storm control compares multicast and broadcast traffic regularly with their respective traffic thresholds on an Ethernet interface. For each type of traffic, storm control provides a lower threshold and an upper threshold.

Depending on your configuration, when a particular type of traffic exceeds its upper threshold, the interface performs either of the following operations:

·     Blocks this type of traffic and forwards other types of traffic—Even though the interface does not forward the blocked type of traffic, it still counts the type of traffic. When the blocked type of traffic drops below the lower threshold, the interface begins to forward the traffic.

·     Goes down automatically—The interface goes down automatically and stops forwarding any traffic. When the type of traffic exceeding the upper threshold drops below the lower threshold, the interface does not automatically come up. To bring up the interface, use the undo shutdown command or disable the storm control feature.

You can configure an Ethernet interface to output threshold event traps and log messages when monitored traffic meets one of the following conditions:

·     Exceeds the upper threshold.

·     Drops below the lower threshold.

Both storm suppression and storm control can suppress storms on an interface. Storm suppression uses the chip to suppress traffic. Storm suppression has less impact on the device performance than storm control, which uses software to suppress traffic. For more information about storm suppression, see "Configuring storm suppression."

Storm control uses a complete polling cycle to collect traffic data, and analyzes the data in the next cycle. An interface takes one to two polling intervals to take a storm control action.

Restrictions and guidelines

For the traffic suppression result to be determined, do not configure storm control together with storm suppression for the same type of traffic.

Procedure

1.     Enter system view.

system-view

2.     (Optional.) Set the statistics polling interval of the storm control module.

storm-constrain interval interval

The default setting is 10 seconds.

For network stability, use the default or set a longer statistics polling interval.

3.     Enter Ethernet interface view.

interface interface-type interface-number

4.     Enable storm control, and set the lower and upper thresholds for broadcast, multicast, or unknown unicast traffic.

storm-constrain { broadcast | multicast } pps upperlimit lowerlimit

By default, storm control is disabled.

5.     Set the control action to take when monitored traffic exceeds the upper threshold.

storm-constrain control { block | shutdown }

By default, storm control is disabled.

6.     Enable the Ethernet interface to output log messages when it detects storm control threshold events.

storm-constrain enable log

By default, the Ethernet interface outputs log messages when monitored traffic exceeds the upper threshold or drops below the lower threshold from a value above the upper threshold.

7.     Enable the Ethernet interface to send storm control threshold event traps.

storm-constrain enable trap

By default, the Ethernet interface sends traps when monitored traffic exceeds the upper threshold or drops below the lower threshold from the upper threshold from a value above the upper threshold.

Configuring an interface to operate in promiscuous mode

About this task

By default, a Layer 3 Ethernet interface does not operate in promiscuous mode. In this case, the interface accepts and processes only packets destined to the MAC address of the interface, and drops packets destined to any other MAC address.

For an interface to snoop all packets received, use this command to configure the interface to operate in promiscuous mode. In this mode, a Layer 3 Ethernet interface does not perform MAC address filtering, and accepts and processes all packets regardless whether they are destined to the MAC address of the interface.

Procedure

1.     Enter system view.

system-view

2.     Enter Layer 3 Ethernet interface view.

interface interface-type interface-number

3.     Configure the interface to operate in promiscuous mode.

port promiscuous-mode

By default, an interface does not operate in promiscuous mode.

Configuring a Layer 3 Ethernet interface or subinterface

Setting the MTU for an Ethernet interface or subinterface

About this task

The maximum transmission unit (MTU) determines the maximum number of bytes in a single IP packet that can be sent. The length of an IP packet refers to the number of bytes starting from the IP header to the payload. 

When the IP layer receives an IP data packet to be sent, the IP layer determines the local destination interface of the packet and obtains the MTU of the interface. The IP layer compares the MTU with the length of the data packet to be sent. If the length is greater than the MTU, the IP layer fragments the packet. The length of a fragment can be smaller than or equal to the MTU to ensure that big packets are not lost on the network. 

As a best practice, use the default MTU. When the packet length or the packet receiver changes, you can adjust the MTU as needed. When configuring the MTU, follow these restrictions and guidelines:

·     If the configured MTU is small but the packet length is large, the following events might occur:

¡     Packets will be dropped when they are forwarded by hardware.

¡     Packets will be fragmented into too many fragments when packets are forwarded through the CPUs, which affects normal data transmission.

·     If the configured MTU is too large, the MTU will exceed the receiving capabilities of the receiver or a device along the transmission path. As a result, packets will be fragmented or even dropped, which increases the network transmission load and affects data transmission.

Restrictions and guidelines

The MTU of an Ethernet interface affects the fragmentation and reassembly of IP packets on the interface. Typically, you do not need to modify the MTU of an interface.

Procedure

1.     Enter system view.

system-view

2.     Enter interface view.

interface interface-type { interface-number | interface-number.subnumber }

3.     Set the interface MTU.

mtu size

The default setting is 1500 bytes.

Setting the MAC address of an Ethernet interface

About this task

In a network, when the Layer 3 Ethernet interfaces of different devices have the same MAC address, the devices might fail to communicate correctly. To eliminate the MAC address conflicts, use the mac-address command to modify the MAC addresses of Layer 3 Ethernet interfaces.

Additionally, a Layer 3 Ethernet subinterface uses the MAC address of its main interface by default. The MAC address of a Layer 3 Ethernet subinterface must be the same as that of its main interface. To modify the MAC address of a Layer 3 Ethernet subinterface, first use the mac-address command to modify the MAC address of the main interface, and then modify the MAC address of the Layer 3 Ethernet subinterface.

Procedure

1.     Enter system view.

system-view

2.     Enter interface view.

interface interface-type interface-number

3.     Set the interface MAC address.

mac-address mac-address

By default, no MAC address is set for a Layer 3 Ethernet interface.

Enabling destination MAC filtering

About this task

Typically, use the default settings.

With this feature enabled, when an interface receives a packet, the interface operates as follows:

·     If the destination MAC address of the packet is the MAC address of the interface, the interface accepts and processes the packet.

·     If the destination MAC address of the packet is not the MAC address of the interface, the interface drops the packet.

With this feature disabled, an interface accepts and processes a packet, without checking the destination MAC address of the packet.

Restrictions and guidelines

This feature takes effect only on Layer 3 Ethernet interfaces/subinterfaces, Layer 3 aggregate interfaces, and Layer 3 Reth interfaces. These interfaces are referred to as interfaces in this feature.

Procedure

1.     Enter system view.

system-view

2.     Enable destination MAC filtering.

mac-address-filter enable

By default, destination MAC filtering is enabled.

Enabling statistics collection on a Layer 3 Ethernet subinterface

About this task

This feature is resource intensive. When you use this feature, make sure you fully understand its impact on system performance.

Procedure

1.     Enter system view.

system-view

2.     Enter Layer 3 Ethernet subinterface view.

interface interface-type interface-number.subnumber

3.     Enable statistics collection on the Layer 3 Ethernet subinterface.

traffic-statistic enable

By default, statistics collection is disabled on a Layer 3 Ethernet subinterface.

4.     (Optional.) Display the subinterface traffic statistics.

display interface

display counters

The Input and Output fields in the display interface command output display the subinterface traffic statistics.

Display and maintenance commands

Execute display commands in any view and reset commands in user view.

 

Task

Command

Display interface traffic statistics.

display counters { inbound | outbound } interface [ interface-type [ interface-number | interface-number.subnumber ] ]

Display traffic rate statistics of interfaces in up state over the last statistics polling interval.

display counters rate { inbound | outbound } interface [ interface-type [ interface-number | interface-number.subnumber ] ]

Display the Ethernet module statistics.

display ethernet statistics slot slot-number

Display the operational and status information of the specified interfaces.

display interface [ interface-type [ interface-number | interface-number.subnumber ] ] [ brief [ description | down ] ]

Display the status and packet statistics of interfaces.

display interface link-info [ main ]

Display operating status and information of all interfaces except subinterfaces.

display interface [ interface-type ] [ brief [ description | down ] ] main

Display information about dropped packets on the specified interfaces.

display packet-drop { interface [ interface-type [ interface-number ] ] | summary }

Display information about storm control on the specified interfaces.

display storm-constrain [ broadcast | multicast ] [ interface interface-type interface-number ]

Clear interface statistics.

reset counters interface [ interface-type [ interface-number | interface-number.subnumber ] ]

Clear the Ethernet module statistics.

reset ethernet statistics [ slot slot-number ]

Clear the statistics of dropped packets on the specified interfaces.

reset packet-drop interface [ interface-type [ interface-number ] ]

 

  • Cloud & AI
  • InterConnect
  • Intelligent Computing
  • Security
  • SMB Products
  • Intelligent Terminal Products
  • Product Support Services
  • Technical Service Solutions
All Services
  • Resource Center
  • Policy
  • Online Help
All Support
  • Become a Partner
  • Partner Resources
  • Partner Business Management
All Partners
  • Profile
  • News & Events
  • Online Exhibition Center
  • Contact Us
All About Us
新华三官网