· In exclusive mode, the interface can be used only by that vSystem. You can view the interface and execute supported commands for it after logging in to the vSystem.

· In shared mode, the interface can be used by multiple vSystems. A virtual interface with the same name as that interface is created and assigned unique MAC and IP addresses in each vSystem. You can view the shared interface and execute supported commands for it after logging in to the default vSystem. In the non-default vSystems sharing the interface, you can view the virtual interfaces and execute the shutdown, description, network, and security commands for them.

To allocate Layer 2 interfaces to a vSystem, execute the allocate vlan command to assign a VLAN to a vSystem and then the Layer 2 interfaces in the VLAN will be assigned to the vSystem automatically.

Do not assign the interfaces that are bound with VPN instances to vSystems. Do not bind the interfaces that are assigned to vSystems with VPN instances.

You can use this command multiple times to assign multiple interfaces to a vSystem.

Examples

# Assign GigabitEthernet 1/0/1 to vSystem vsys1.

<Sysname> system-view

[Sysname] vsys vsys1

[Sysname-vsys-2-vsys1] allocate interface gigabitethernet 1/0/1

Related commands

display vsys interface

allocate vlan

Use allocate vlan to assign a VLAN to a vSystem.

Use undo allocate vlan to reclaim a VLAN assigned to a vSystem.

Syntax

allocate vlan vlan-id

undo allocate vlan vlan-id

Default

All VLANs belong to the default vSystem.

Views

vSystem view

Predefined user roles

network-admin

context-admin

Parameters

vlan-id: Assigns a VLAN to the vSystem. Make sure the VLAN has been created.

Usage guidelines

A VLAN can be assigned to only one vSystem.

After a VLAN is assigned to a vSystem, the Layer 2 interfaces in the VLAN will be assigned to the vSystem automatically.

You can use this command multiple times to assign multiple VLANs to a vSystem.

Examples

# Assign VLAN 100 to vSystem vsys1.

<Sysname> system-view

[Sysname] vsys vsys1

[Sysname-vsys-2-vsys1] allocate vlan 100

Related commands

display vsys vlan

capability security-policy-rule maximum

Use capability security-policy-rule maximum to set the maximum number of security policy rules for a vSystem.

Use undo capability security-policy-rule maximum to restore the default.

Syntax

capability security-policy-rule maximum max-number

undo capability security-policy-rule maximum

Default

The number of security policy rules is not limited for a vSystem.

Views

vSystem view

Predefined user roles

network-admin

context-admin

Parameters

max-number: Specifies the maximum number of security policy rules for the vSystem, in the range of 1 to 4294967295.

Usage guidelines

A large number of security policy rules occupy too much memory, affecting other features on the vSystem. This command sets the maximum number of security policy rules for a vSystem. When the maximum number is reached, you cannot add new security policy rules.

If the setting of this command is greater than the number of existing rules, the device does not delete rules but you cannot add additional security policy rules.

Examples

# Set the maximum number of security policy rules to 1000 for vSystem vys1 with vSystem ID 1.

<Sysname> system-view

[Sysname] vsys vsys1 id 2

[Sysname-vsys-2-vsys1] capability security-policy-rule maximum 1000

Related commands

display security-policy ip (Security Command Reference)

capability session maximum

Use capability session maximum to set the maximum number of concurrent sessions for a vSystem.

Use undo capability session maximum to restore the default.

Syntax

capability session maximum max-number

undo capability session maximum

Default

The number of concurrent sessions is not limited for a vSystem.

Views

vSystem view

Predefined user roles

network-admin

context-admin

Parameters

max-number: Specifies the maximum number of concurrent sessions for the vSystem. The value range is 1 to 4294967295.

Usage guidelines

A large number of concurrent sessions occupy too much memory, affecting other features on the vSystem. This command sets the maximum number of concurrent sessions for a vSystem. When the maximum number is reached, you cannot establish additional sessions.

If the setting of this command is greater than the number of existing sessions, the device does not close existing sessions but you cannot establish additional sessions.

This command does not affect local traffic, such as FTP traffic, Telnet traffic, SSH traffic, HTTP traffic, and HTTP-based load balancing traffic.

Examples

# Set the maximum number of concurrent sessions to 1000000 for vSystem vys1 with vSystem ID 1.

<Sysname> system-view

[Sysname] vsys vsys1 id 2

[Sysname-vsys-2-vsys1] capability session maximum 1000000

Related commands

vsys

display session statistics (Security Command Reference)

capability session maximum threshold

Use capability session maximum threshold to set the alarm threshold for the ratio of the current concurrent unicast sessions to the maximum concurrent unicast sessions on a vSystem.

Use undo capability session maximum threshold to restore the default.

Syntax

capability session maximum threshold threshold-value

undo capability session maximum threshold

Default

The alarm threshold is 95% for the ratio of the current concurrent unicast sessions to the maximum concurrent unicast sessions on a vSystem.

Views

vSystem view

Predefined user roles

network-admin

Parameters

threshold-value: Sets the alarm threshold, in percentage. The value range for this argument is 1 to 99.

Usage guidelines

When the ratio of the current concurrent unicast sessions to the maximum concurrent unicast sessions on a vSystem exceeds the specified threshold, the system generates an alarm message to notify the threshold-crossing event. When the ratio of the current concurrent unicast sessions to the maximum concurrent unicast sessions drops to the specified threshold, the system generates an alarm message to notify that the threshold-crossing alarm is cleared.

Examples

# Set the alarm threshold to 50% for the ratio of the current concurrent unicast sessions to the maximum concurrent unicast sessions on vSystem vsys1.

<Sysname> system-view

[Sysname] vsys vsys1

[Sysname-vsys-2-vsys1] capability session maximum threshold 50

Related commands

vsys

capability session rate

Use capability session rate to set the upper limit of the session establishment rate for a vSystem.

Use undo capability session rate to restore the default.

Syntax

capability session rate max-value

undo capability session rate

Default

The session establishment rate is not limited for a vSystem.

Views

vSystem view

Predefined user roles

network-admin

context-admin

Parameters

max-value: Specifies the maximum number of sessions that can be established per second.

Usage guidelines

Establishing sessions too frequently consumes too much CPU resources. If a vSystem establishes sessions too frequently, other vSystems will not be able to establish sessions. This command sets the number of sessions that can be established per second for a vSystem. When the limit is reached, no additional sessions can be established.

This command does not affect local traffic, such as FTP traffic, Telnet traffic, SSH traffic, HTTP traffic, and HTTP-based load balancing traffic.

Examples

# Configure vSystem vys1 with vSystem ID 1 to establish a maximum of 20000 sessions per second.

<Sysname> system-view

[Sysname] vsys vsys1 id 2

[Sysname-vsys-2-vsys1] capability session rate 20000

Related commands

vsys

display session statistics (Security Command Reference)

capability session rate threshold

Use capability session rate threshold to set the alarm threshold for the ratio of the current session establishment rate to the maximum session establishment rate on a vSystem.

Use undo capability session rate threshold to restore the default.

Syntax

capability session rate threshold threshold-value

undo capability session rate threshold

Default

The alarm threshold is 95% for the ratio of the current session establishment rate to the maximum session establishment rate on a vSystem.

Views

vSystem view

Predefined user roles

network-admin

Parameters

threshold-value: Sets the alarm threshold, in percentage. The value range for this argument is 1 to 99.

Usage guidelines

When the ratio of the current session establishment rate to the maximum session establishment rate on a vSystem exceeds the specified threshold, the system generates an alarm message to notify the threshold-crossing event. When the ratio of the current session establishment rate to the maximum session establishment rate drops to the specified threshold, the system generates an alarm message to notify that the threshold-crossing alarm is cleared.

Examples

# Set the alarm threshold to 80% for the ratio of the current session establishment rate to the maximum session establishment rate on vSystem vsys1.

<Sysname> system-view

[Sysname] vsys vsys1

[Sysname-vsys-2-vsys1] capability session rate threshold 80

Related commands

vsys

capability throughput

Use capability throughput to set the inbound throughput limit for a vSystem.

Use undo capability throughput to restore the default.

Syntax

capability throughput { kbps | pps } threshold

undo capability throughput

Default

The inbound throughput of a vSystem is not limited on a vSystem.

Views

vSystem view

Predefined user roles

network-admin

context-admin

Parameters

kbps: Specifies the inbound throughput limit in kilobits per second.

pps: Specifies the inbound throughput limit in packets per second.

threshold: Specifies the inbound throughput limit in the range of 1000 to 100000000.

Usage guidelines

You can execute this command to specify an inbound throughput limit for a vSystem. With the inbound throughput limit configured, the vSystem can only use a bandwidth lower than or equal to the specified inbound throughput limit to forward the packets.

Examples

# Set the inbound throughput limit to 100000 kbps for vSystem vys1 with vSystem ID 1.

<Sysname> system-view

[Sysname] vsys vsys1 id 2

[Sysname-vsys-2-vsys1] capability throughput kbps 10000

default

Use default to restore the default settings for an interface.

Syntax

default

Views

vSystem interface view

Predefined user roles

network-admin

context-admin

Usage guidelines

CAUTION:

The default command might interrupt ongoing network services. Make sure you are fully aware of the impacts of this command when you use it in a live network.

‌

This command might fail to restore the default settings for some commands because of command dependencies or system restrictions. You can use the display this command in interface view to identify these commands, and use their undo forms or follow the command reference to restore their default settings. If your restoration attempt still fails, follow the error message instructions to solve the problem.

Examples

# Restore the default settings for vSystem interface 2.

<Sysname> system-view

[Sysname] interface vsys-interface 2

[Sysname-vSys-interface2] default

description (vSystem view)

Use description to configure a description for a vSystem.

Use undo description to restore the default.

Syntax

description text

undo description

Default

The description of the default vSystem is Default. Non-default vSystems do not have a description.

Views

vSystem view

Predefined user roles

network-admin

context-admin

Parameters

text: Specifies a description, a case-sensitive string of 1 to 255 characters.

Usage guidelines

You can configure a description for each vSystem, which is useful to maintain vSystems.

Examples

# Configure a description for vSystem vsys1.

<Sysname> system-view

[Sysname] vsys vsys1

[Sysname-vsys-2-vsys1] description test

Related commands

display vsys

description (vSystem interface view)

Use description to configure the description of an interface.

Use undo description to restore the default.

Syntax

description text

undo description

Default

The description of a vSystem interface is interface name Interface, for example, vSys-interface2 Interface.

Views

vSystem interface view

Predefined user roles

network-admin

context-admin

Parameters

text: Specifies a description, a case-sensitive string of 1 to 255 characters.

Usage guidelines

For interface identification and easy maintenance, you can configure a description for an interface according to its connection and usage.

You can execute the display interface vsys-interface command view the configured description.

Examples

# Configure "for RouterID" as the description of vSystem interface 2.

<Sysname> system-view

[Sysname] interface vsys-interface 2

[Sysname-vSys-interface2] description for RouterID

Related commands

display interface vsys-interface

Use display interface vsys-interface to display vSystem interface information.

Syntax

display interface [ vsys-interface [ interface-number ] ] [ brief [ description ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

context-admin

context-operator

Parameters

vsys-interface [ interface-number ]: Specifies a vSystem interface by its number. Make sure the specified vSystem interface has been created. If you do not specify this option, the command displays information about all interfaces except VA interfaces. If you specify the vsys-interface keyword without specifying a vSystem interface number, this command displays information about all created vSystem interfaces. For more information about VA interfaces, see PPP in Layer 2—WAN Access Configuration Guide.

brief: Displays brief interface information. If you do not specify this keyword, the command displays detailed interface information.

description: Displays complete interface descriptions. If you do not specify this keyword, the command displays only the first 27 characters of each interface description.

Usage guidelines

This command is supported only when a vSystem interface exists on the device.

On the default vSystem, you can view information about all vSystem interfaces. On a non-default vSystem, you can view information about the vSystem interface with same vSystem ID.

Examples

# Display information about vSystem interface 2.

<Sysname> display interface vsys-interface 2

vSys-interface2

Current state: UP

Line protocol state: UP(spoofing)

Description: vSys-interface2 Interface

Maximum transmission unit: 64000

Physical: vSystem

Last clearing of counters: Never

Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Input: 0 packets, 0 bytes, 0 drops

Output: 0 packets, 0 bytes, 0 drops

Table 1 Command output

Field	Description
Current state	Physical link state of the interface: · UP—The interface can transmit and receive the packets. · DOWN—The interface cannot transmit or receive the packets.
Line protocol state	Data link layer state of the interface. The field value is UP(spoofing), indicating that the data link layer protocol is up but the link is an on-demand link or does not exist.
Description	Description of the interface.
Maximum transmission unit	MTU of the interface.
Physical: vSystem	Physical type of the interface. The field value is vSystem.
baudrate	Baudrate in kbps.
Last clearing of counters	Time when the reset counters interface command was most recently used to clear the interface statistics. This field displays Never if the reset counters interface command has never been used on the interface since device startup.
Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec	Average input rate (in Bps, bps, and pps) in the most recent 300 seconds. This field is available only when the interface supports statistics collection.
Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec	Average output rate (in Bps, bps, and pps) in the most recent 300 seconds. This field is available only when the interface supports statistics collection.
Input: 0 packets, 0 bytes, 0 drops	Statistics about the input packets, including the number of input packets, number of input bytes, and number of dropped packets. This field is available only when the interface supports statistics collection.
Output: 0 packets, 0 bytes, 0 drops	Statistics about the output packets, including the number of output packets, number of output bytes, and number of dropped packets. This field is available only when the interface supports statistics collection.

# Display brief information about all vSystem interfaces.

<Sysname> display interface vsys-interface brief

Brief information on interfaces in route mode:

Protocol: (s) - spoofing

Interface Link Protocol Primary IP Description

vSys2 UP UP(s) -- forLAN1

Table 2 Command output

Field	Description
Brief information on interfaces in route mode:	Brief information about Layer 3 interfaces.
Protocol: (s) - spoofing	Data link layer state of the interface. The field value is (s) - spoofing, indicating that the data link layer protocol is up but the link is an on-demand link or does not exist. The (s) attribute represents the spoofing flag.
Interface	Abbreviated interface name.
Link	Physical link state of the interface: · UP—The interface is physically up. · DOWN—The interface is physically down.
Protocol	Data link layer state of the interface. The field value is UP(s).
Primary IP	Primary IP address of the interface.
Description	Description of the interface.

Related commands

reset counters interface vsys-interface

display vsys

Use display vsys to display vSystems.

Syntax

display vsys [ name vsys-name ]

Views

Any view

Predefined user roles

network-admin

network-operator

context-admin

context-operator

Parameters

name vsys-name: Specifies a vSystem by its name, a case-sensitive string of 1 to 15 characters. If you do not specify this option, this command displays all vSystems.

Examples

# Display all vSystems.

<Sysname> display vsys

ID Name Status Description

1 admin Active Default

2 aaa Active vsys2

3 bbb Restarting vsys3

Table 3 Command output

Field	Description
Status	Status of the vSystem: · Active—The vSystem is active. · Re starting—The vSystem is restarting.

Field

Description

Status

Status of the vSystem:

· Active—The vSystem is active.

· Re starting—The vSystem is restarting.

Related commands

description

vsys

display vsys interface

Use display vsys interface to display interfaces assigned to vSystems.

Syntax

display vsys [ name vsys-name ] interface

Views

Any view

Predefined user roles

network-admin

network-operator

context-admin

context-operator

Parameters

name vsys-name: Specifies a vSystem by its name, a case-sensitive string of 1 to 31 characters. If you do not specify this option, this command displays the interfaces for all vSystems.

Examples

# Display the interfaces for all vSystems.

<Sysname> display vsys interface

vSystem vsys1's interfaces:

gigabitethernet 1/0/2

vSystem vsys2's interfaces:

gigabitethernet 1/0/3

Related commands

allocate interface

display vsys vlan

Use display vsys vlan to display VLAN lists for vSystems.

Syntax

display vsys [ name vsys-name ] vlan

Views

Any view

Predefined user roles

network-admin

network-operator

context-admin

context-operator

Parameters

name vsys-name: Specifies a vSystem by its name, a case-sensitive string of 1 to 31 characters. If you do not specify tthis option, this command displays VLAN lists for all vSystems.

Examples

# Display VLAN lists for all vSystems.

<Sysname> display vsys vlan

vSystem vsys1's VLANs:

2,4094

vSystem vsys2's VLANs:

5,6,3400

Related commands

allocate vlan

display vsys-capability throughput

Use display vsys-capability throughput to display the inbound throughput usage for vSystems.

Syntax

display vsys-capability throughput [ name vsys-name ] [ slot slot-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

context-admin

context-operator

Parameters

vsys-name: Specifies a vSystem name, a case-sensitive string of 1 to 31 characters. If you do not specify a vSystem, this command displays the inbound throughput usage for all vSystems.

slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command displays the inbound throughput usage on the master device.

Examples

# Display the inbound throughput usage for all vSystems.

<Sysname> display vsys-capability throughput

Throughput usage:

Slot 1 CPU 0:

ID Name Maximum Used Free Usage(%) Unit

1 Admin NA 0 NA NA kbps

2 yao NA 0 NA NA kbps

Table 4 Command output

Field	Description
ID	vSystem ID.
Name	vSystem name.
Maximum	Inbound throughput limit. If the inbound throughput is not limited, this field displays NA.
Used	Current inbound throughput. If the inbound throughput is not limited, this field displays 0.
Free	Available inbound throughout, which is obtained by subtracting the current inbound throughput from the inbound throughput limit. If the inbound throughput is not limited, this field displays NA.
Usage	Ratio of the current inbound throughput to the inbound throughput limit, in percentage. If the inbound throughput is not limited, this field displays 0.
Unit	Unit of throughput. If the inbound throughput is not limited, this field displays NA.

Related commands

capability throughput

interface vsys-interface

Use interface vsys-interface to enter vSystem interface view.

Syntax

interface vsys-interface interface-number

undo interface vsys-interface interface-number

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

interface-number: Specifies a vSystem interface by its number. It must be the same as the interface number configured on the non-default system where the interface belongs.

Usage guidelines

The vSystem interfaces are used for the communication between two non-default vSystems.

A vSystem interface is automatically generated when a default vSystem user creates a non-default vSystem. Each non-default vSystem has only one vSystem interface that cannot be created manually. You can execute the display interface vsys-interface command to view the vSystem interface information.

Examples

# Enter the view of vSystem interface 2.

<Sysname> system-view

[Sysname] interface vsys-interface 2

[Sysname-vSys-interface2]

Related commands

display interface vsys-interface

vsys

reset counters interface vsys-interface

Use reset counters interface vsys-interface to clear vSystem interface statistics.

Syntax

reset counters interface [ vsys-interface [ interface-number ] ]

Views

User view

Predefined user roles

network-admin

context-admin

Parameters

vsys-interface [ interface-number ]: Specifies a vSystem interface by its number. If you do not specify this option, the command clears statistics about all interfaces except VA interfaces. If you specify the vsys-interface keyword without specifying a vSystem interface number, this command clears vSystem interface statistics as follows:

· On the default vSystem, the statistics about all vSystem interfaces will be cleared.

· On a non-default vSystem, the statistics about the non-default vSystem will be cleared.

Usage guidelines

To judge whether the specified interface and its link work normally, you can execute this command to clear the existing interface statistics and then the system will start the interface statistics automatically.

This command is supported only when a vSystem interface exists on the device.

Examples

# Clear statistics about vSystem interface 2.

<Sysname> reset counters interface vsys-interface 2

Related commands

display interface vsys-interface

save vsys

Use save vsys to save current configuration of a vSystem to a text file.

Syntax

save vsys vsys-name [ file-url ]

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

vsys-name: Specifies a vSystem name, a case-sensitive string of 1 to 31 characters.

file-url: Specifies a file path, a string of up to 255 characters. The file must be a .cfg file.

Usage guidelines

You can execute this command to save the configuration of a vSystem to the specified text file. If the file specified for this command does not exist, the system creates the file before saving the configuration. If the file already exists, the system overwrite the file with the same name.

If you do not specify a file path or use a file path same as the next-startup configuration file, the specified vSystem configuration will be saved in the next-startup configuration file. After the device reboot, the vSystem will be restored according to the saved configuration.

Examples

# Save current configuration of vSystem abc to abcvsys.cfg.

<Sysname> save vsys abc abcvsys.cfg

The configuration of vSystem abc will be saved to flash:/abcvsys.cfg. Continue? [Y/N]:y

Now saving the configuration of vSystem abc to the device.

Saving configuration flash:/abcvsys.cfg. Please wait...

Configuration is saved to device successfully.

Related commands

vsys configuration deploy

switchto vsys

Use switchto vsys to log in to a non-default vSystem from the system view of the default vSystem and enter the user view of the non-default vSystem.

Syntax

switchto vsys vsys-name

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

vsys-name: Specifies a non-default vSystem by its name, a case-sensitive string of 1 to 31 characters.

Usage guidelines

A default vSystem user can execute this command on the device to log in to any non-default vSystem for configuration and management.

Examples

# Log in to vSystem abc from the system view of the default vSystem.

<Sysname> system-view

[Sysname] switchto vsys abc

<Sysname-abc>

vsys

Use vsys to create a vSystem and enter its view, or enter the view of an existing vSystem.

Use undo vsys to delete a vSystem.

Syntax

vsys vsys-name [ id vsys-id ]

undo vsys vsys-name

Default

A default vSystem exists. The vSystem name is Admin and the vSystem ID is 1.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

vsys-name: Specifies a vSystem by its name, a case-sensitive string of 1 to 31 characters. Valid characters are letters, digits, underscores (_), and hyphens (-). A vSystem name cannot be any form of admin.

id vsys-id: Specifies a vSystem by its ID. If you do not specify this option, the system assigns the lowest ID among the available IDs to the vSystem.

The following compatibility matrix shows the value ranges for the vSystem ID:

‌

Series	Models	Value range
F5000 series	F5000-AI160	2 to 928
	F5000-CN160	2 to 2048
	F5000-CN-G85, F5000-CN-G65, F5000-CN-G55	2 to 512
	F5000-AI-40, F5000-AI-20	2 to 2016
	F5000-AI-15	2 to 512
F1000 series	F1000-AI-25	2 to 128

‌

Usage guidelines

The default vSystem is the root system. You cannot delete it.

When you execute this command to create a vSystem, a VPN instance with the same name will be created and the created vSystem will be bound to the VPN instance automatically. Make sure the vSystem name is not the same as the existing VPN instance name. You can execute the display ip vpn-instance command to view the existing VPN instances in the system.

Delete a vSystem with caution. Deleting a vSystem deletes all settings of the vSystem.

If you execute this command multiple times, you can create multiple non-default vSystems.

Examples

# Create a non-default vSystem named vsys1 with vSystem ID 2.

<Sysname> system-view

[Sysname] vsys vsys1 id 2

[Sysname-vsys-2-vsys1]

Related commands

display vsys

display ip vpn-instance(VPN Instance Command Reference)

vsys-capability throughput alarm enable

Use vsys-capability throughput alarm enable to enable the vSystem inbound throughput alarm and configure the alarm threshold.

Use undo vsys-capability throughput alarm enable to disable the vSystem inbound throughput alarm.

Syntax

vsys-capability throughput alarm enable alarm-threshold alarm-threshold

undo vsys-capability throughput alarm enable

Default

The vSystem inbound throughput alarm is disabled.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

alarm-threshold alarm-threshold: Sets the alarm threshold in percentage, in the range of 1 to 99.

Usage guidelines

The vSystem inbound throughput alarm takes effect on all vSystems.

For the vSystem inbound throughput alarm to take effect, you must use the capability throughput command to set the vSystem inbound throughput limit.

The vSystem inbound throughput alarm allows the device to send a log message to the information center when the inbound throughput usage ratio of a vSystem exceeds or drops below the alarm threshold. With the information center, you can set log message filtering and output rules, including output destinations. For more information about configuring the information center, see Network Management and Monitoring Configuration Guide.

Examples

# Enable the vSystem inbound throughput alarm and set the alarm threshold to 80%.

<Sysname> system-view

[Sysname] vsys-capability throughput alarm enable alarm-threshold 80

Related commands

capability throughput

vsys-capability throughput drop-logging enable

Use vsys-capability throughput drop-logging enable to enable dropped packet logging for vSystem inbound throughput limiting.

Use undo vsys-capability throughput drop-logging enable to disable dropped packet logging for vSystem inbound throughput limiting.

Syntax

vsys-capability throughput drop-logging enable

undo vsys-capability throughput drop-logging enable

Default

Dropped packet logging is disabled for vSystem inbound throughput limiting.

Views

System view

Predefined user roles

network-admin

context-admin

Usage guidelines

Dropped packet logging takes effect on all vSystems.

For dropped packet logging to take effect, you must use the capability throughput command to set the vSystem inbound throughput limit.

Dropped packet logging enables the device to send log messages to the information center for the following events:

· A vSystem drops a packet because the vSystem inbound throughput limit is reached.

· The inbound throughput of a vSystem drops below the vSystem inbound throughput limit.

With the information center, you can set log message filtering and output rules, including output destinations. For more information about configuring the information center, see Network Management and Monitoring Configuration Guide.

Examples

# Enable dropped packet logging for vSystem inbound throughput limiting.

<Sysname> system-view

[Sysname] vsys-capability throughput drop-logging enable

Related commands

capability throughput

vSystem commands for non-default vSystems

description (vSystem interface view)

Use description to configure the description of an interface.

Use undo description to restore the default.

Syntax

description text

undo description

Default

The description of a vSystem interface is interface name Interface, for example, vSys-interface2 Interface.

Views

vSystem interface view

Predefined user roles

network-admin

context-admin

vsys-admin

Parameters

text: Specifies a description, a case-sensitive string of 1 to 255 characters.

Usage guidelines

For interface identification and easy maintenance, you can configure a description for an interface according to its connection and usage.

You can execute the display interface vsys-interface command view the configured description.

Examples

# Configure "for RouterID" as the description of vSystem interface 2.

<Sysname> system-view

[Sysname] interface vsys-interface 2

[Sysname-vSys-interface2] description for RouterID

Related commands

display interface vsys-interface

Use display interface vsys-interface to display vSystem interface information.

Syntax

display interface [ vsys-interface [ interface-number ] ] [ brief [ description ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

context-admin

context-operator

vsys-admin

vsys-operator

Parameters

brief: Displays brief interface information. If you do not specify this keyword, the command displays detailed interface information.

description: Displays complete interface descriptions. If you do not specify this keyword, the command displays only the first 27 characters of each interface description.

Usage guidelines

This command is supported only when a vSystem interface exists on the device.

On the default vSystem, you can view information about all vSystem interfaces. On a non-default vSystem, you can view information about the vSystem interface with same vSystem ID.

Examples

# Display information about vSystem interface 2.

<Sysname> display interface vsys-interface 2

vSys-interface2

Current state: UP

Line protocol state: UP(spoofing)

Description: vSys-interface2 Interface

Maximum transmission unit: 64000

Physical: vSystem

Last clearing of counters: Never

Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec

Input: 0 packets, 0 bytes, 0 drops

Output: 0 packets, 0 bytes, 0 drops

Table 5 Command output

Field	Description
Current state	Physical link state of the interface: · UP—The interface can transmit and receive the packets. · DOWN—The interface cannot transmit or receive the packets.
Line protocol state	Data link layer state of the interface. The field value is UP(spoofing), indicating that the data link layer protocol is up but the link is an on-demand link or does not exist.
Description	Description of the interface.
Maximum transmission unit	MTU of the interface.
Physical: vSystem	Physical type of the interface. The field value is vSystem.
baudrate	Baudrate in kbps.
Last clearing of counters	Time when the reset counters interface command was most recently used to clear the interface statistics. This field displays Never if the reset counters interface command has never been used on the interface since device startup.
Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec	Average input rate (in Bps, bps, and pps) in the most recent 300 seconds. This field is available only when the interface supports statistics collection.
Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec	Average output rate (in Bps, bps, and pps) in the most recent 300 seconds. This field is available only when the interface supports statistics collection.
Input: 0 packets, 0 bytes, 0 drops	Statistics about the input packets, including the number of input packets, number of input bytes, and number of dropped packets. This field is available only when the interface supports statistics collection.
Output: 0 packets, 0 bytes, 0 drops	Statistics about the output packets, including the number of output packets, number of output bytes, and number of dropped packets. This field is available only when the interface supports statistics collection.

# Display brief information about all vSystem interfaces.

<Sysname> display interface vsys-interface brief

Brief information on interfaces in route mode:

Protocol: (s) - spoofing

Interface Link Protocol Primary IP Description

vSys2 UP UP(s) -- forLAN1

Table 6 Command output

Field	Description
Brief information on interfaces in route mode:	Brief information about Layer 3 interfaces.
Protocol: (s) - spoofing	Data link layer state of the interface. The field value is (s) - spoofing, indicating that the data link layer protocol is up but the link is an on-demand link or does not exist. The (s) attribute represents the spoofing flag.
Interface	Abbreviated interface name.
Link	Physical link state of the interface: · UP—The interface is physically up. · DOWN—The interface is physically down.
Protocol	Data link layer state of the interface. The field value is UP(s).
Primary IP	Primary IP address of the interface.
Description	Description of the interface.

Related commands

reset counters interface vsys-interface

interface vsys-interface

Use interface vsys-interface to enter vSystem interface view.

Syntax

interface vsys-interface interface-number

undo interface vsys-interface interface-number

Views

System view

Predefined user roles

network-admin

context-admin

vsys-admin

Parameters

interface-number: Specifies a vSystem interface by its number. It must be the same as the interface number configured on the non-default system where the interface belongs.

Usage guidelines

The vSystem interfaces are used for the communication between two non-default vSystems.

Examples

# Enter the view of vSystem interface 2.

<Sysname> system-view

[Sysname] interface vsys-interface 2

[Sysname-vSys-interface2]

Related commands

display interface vsys-interface

reset counters interface vsys-interface

Use reset counters interface vsys-interface to clear vSystem interface statistics.

Syntax

reset counters interface [ vsys-interface [ interface-number ] ]

Views

User view

Predefined user roles

network-admin

context-admin

vsys-admin

Parameters

· On the default vSystem, the statistics about all vSystem interfaces will be cleared.

· On a non-default vSystem, the statistics about the non-default vSystem will be cleared.

Usage guidelines

This command is supported only when a vSystem interface exists on the device.

Examples

# Clear statistics about vSystem interface 2.

<Sysname> reset counters interface vsys-interface 2

Related commands

display interface vsys-interface

02-Virtual Technologies Command Reference

vSystem commands for the default vSystem

description (vSystem view)

display vsys

display vsys-capability throughput

interface vsys-interface

save vsys

Intelligent Terminal Products

Product Support Services

Technical Service Solutions

Resource Center

Policy

Online Help

Become a Partner

Partner Policy & Program

Global Learning

Partner Sales Resources

Service Business

Company Information

News & Events

Contact Us