Page 1: Command Reference
ZXR10 2900E Series Easy-Maintenance Secure Switch Command Reference Version: 2.05.11 ZTE CORPORATION No. 55, Hi-tech Road South, ShenZhen, P.R.China Postcode: 518057 Tel: +86-755-26771900 Fax: +86-755-26770801 URL: http://ensupport.zte.com.cn E-mail: support@zte.com.cn...
Page 2 ZTE CORPORATION is prohibited. Additionally, the contents of this document are protected by contractual confidentiality obligations. All company, brand and product names are trade or service marks, or registered trade or service marks, of ZTE CORPORATION or of their respective owners.
Page 3: Table Of Contents
3.4 Displaying Sub Directories and Files..............3-4 3.5 Changing the Current Directory ................3-4 3.6 Uploading or Downloading a File Through TFTP ..........3-5 3.7 Uploading or Downloading a File Through the Cluster Commander ....... 3-7 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 4 4.1.19 set loginauth ..................4-10 4.1.20 set user local login-password ..............4-11 4.1.21 set adminauth ..................4-11 4.1.22 set user local admin-password .............. 4-12 4.1.23 set user radius purview ................. 4-13 4.1.24 set user radius admin-password ............4-13 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 5 4.1.55 show memory..................4-29 4.1.56 show fan ....................4-30 4.1.57 show power ..................4-30 4.1.58 show bootpassword................4-31 4.1.59 set bootpassword ................. 4-31 4.1.60 set bootpassword clear ................. 4-31 4.1.61 set fan mode auto................. 4-32 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 6 4.2.7 set port flowcontrol ................. 4-49 4.2.8 set port description ................. 4-50 4.2.9 set port accept-frame................4-51 4.2.10 set jumbo port ..................4-51 4.2.11 set port pvid ..................4-52 4.2.12 set port statistics mode ................. 4-52 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 7 4.4.3 set mirror session delete source-port ............4-73 4.4.4 set mirror session delete dest-port............4-74 4.4.5 set mirror rspan-tag vlan-id priority ............4-74 4.4.6 set mirror statistical sample-interval ............4-75 4.4.7 clear mirror session ................4-76 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 8 4.7.4 set mac add static port vlan..............4-93 4.7.5 set mac add static trunk vlan ..............4-94 4.7.6 set mac add permanent port vlan ............4-94 4.7.7 set mac add permanent trunk vlan............4-95 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 9 4.7.39 show mac learning except bind............. 4-115 4.7.40 set mac delete peak ................4-115 4.7.41 set mac peak time-interval ..............4-116 4.7.42 show mac peak ................... 4-116 4.7.43 show mac protect ................4-117 4.8 MAC Authentication Configuration ..............4-117 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 10 4.10.8 set igmp snooping vlan add/delete group ..........4-135 4.10.9 set igmp snooping vlan add/delete smr port/trunk ........4-135 4.10.10 set igmp snooping private-group............4-136 4.10.11 set igmp snooping timeout route/host ..........4-137 4.10.12 set igmp snooping query-interval ............4-138 VIII SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 11 4.11.9 iptv channel name/id-list cdr ..............4-158 4.11.10 iptv channel name/id-list viewfile-name/id ..........4-159 4.11.11 iptv sms-server ..................4-160 4.11.12 iptv sms-server-port ................4-160 4.11.13 iptv cdr enable/disable ...............4-161 4.11.14 iptv cdr report ..................4-161 4.11.15 iptv cdr create-period .................4-162 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 12 4.11.46 show iptv channel ................4-182 4.11.47 show iptv channel-group..............4-184 4.11.48 show iptv package ................4-186 4.11.49 show iptv prv ..................4-187 4.11.50 show iptv view-profile .................4-188 4.11.51 show iptv cdr ..................4-190 4.11.52 show iptv client ..................4-191 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 13 4.12.27 clear stp instance port/trunk cost ............4-209 4.12.28 clear stp name...................4-210 4.12.29 show stp ...................4-210 4.12.30 show stp instance ................4-211 4.12.31 show stp port..................4-212 4.12.32 show stp trunk ...................4-212 4.13 ACL Configuration ..................4-213 4.13.1 set port acl mode.................4-213 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 14 4.13.32 ingress-acl hybrid rule type-ipv6-ip-protocol.........4-242 4.13.33 ingress-acl hybrid rule type-ipv6-tcp............4-243 4.13.34 ingress-acl hybrid rule type-ipv6-udp...........4-244 4.13.35 ingress-acl hybrid rule type-ipv6-any ...........4-246 4.13.36 ingress-acl hybrid rule type-all ............4-247 4.13.37 clear ingress-acl hybrid ..............4-247 4.13.38 config ingress-acl global..............4-248 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 15 4.13.69 egress-acl hybrid rule type-ipv6-ip-protocol .........4-281 4.13.70 egress-acl hybrid rule type-ipv6-tcp.............4-282 4.13.71 egress-acl hybrid rule type-ipv6-udp ...........4-283 4.13.72 egress-acl hybrid rule type-tcp............4-285 4.13.73 egress-acl hybrid rule type-udp............4-286 4.13.74 clear egress-acl hybrid ...............4-288 4.13.75 move after/before ................4-289 XIII SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 16 4.14.17 set qos traffic-limit ge-port data-rate ............4-313 4.14.18 set qos traffic-limit ge-port packet-rate..........4-314 4.14.19 set qos traffic-limit xge-port data-rate ..........4-315 4.14.20 set qos traffic-limit xge-port packet-rate ..........4-316 4.14.21 set qos traffic-limit port percent ............4-316 4.14.22 set qos traffic-limit port protect............4-317 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 17 4.14.52 set policy statistics................4-340 4.14.53 set policy vlan-remark ................4-341 4.14.54 set policy harddrop ................4-342 4.14.55 clear policy remark ................4-342 4.14.56 clear policy policing................4-343 4.14.57 clear policy mirror ................4-343 4.14.58 clear policy statistics ................4-344 4.14.59 clear policy redirect................4-344 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 18 4.17.7 iproute ....................4-360 4.17.8 arp add ....................4-360 4.17.9 arp delete ...................4-361 4.17.10 arp ipport timeout ................4-361 4.17.11 arp gratuitous-send ................4-362 4.17.12 clear arp ...................4-363 4.17.13 clear iproute ..................4-363 4.17.14 clear ipport ..................4-364 4.17.15 clear arp gratuitous-send..............4-365 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 19 4.20.6 dot1x supplicant-timeout ..............4-381 4.20.7 dot1x server-timeout ................4-382 4.20.8 dot1x max-request................4-382 4.20.9 dot1x add vlan mac ................4-383 4.20.10 dot1x delete vlan ................4-384 4.20.11 clear client..................4-384 4.20.12 clear client index................4-384 4.20.13 clear client port/vlan................4-385 4.20.14 show dot1x..................4-385 XVII SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 20 4.20.44 radius retransmit................4-404 4.20.45 radius vendor-id.................4-405 4.20.46 clear accounting-stop.................4-405 4.20.47 show radius..................4-406 4.20.48 show radius accounting-stop ..............4-407 4.21 QinQ Configuration ..................4-407 4.21.1 set vlan qinq customer port ..............4-407 4.21.2 set vlan qinq uplink port ...............4-408 XVIII SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 21 4.24.2 set garp enable/disable................4-425 4.24.3 set garp timer ..................4-426 4.24.4 show garp ...................4-427 4.24.5 set gvrp enable/disable ................4-427 4.24.6 set gvrp port/trunk enable/disable ............4-428 4.24.7 set gvrp port/trunk registration ..............4-428 4.24.8 show gvrp ...................4-429 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 22 4.25.32 clear ipport dhcp client request ............4-449 4.25.33 set dhcp snooping bind-entry database read ........4-450 4.25.34 set dhcp snooping bind-entry database recovery .........4-450 4.25.35 set dhcp snooping bind-entry database time-write........4-451 4.25.36 set dhcp snooping bind-entry database write ........4-451 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 23 4.26.21 show dhcpv6 option82 ani ..............4-468 4.26.22 show dhcpv6 option18 ...............4-469 4.26.23 show dhcpv6 option37 ...............4-469 4.27 VBAS Configuration..................4-470 4.27.1 set vbas trust-port enable/disable ............4-470 4.27.2 set vbas cascade-port enable/disable ...........4-471 4.27.3 set vbas enable/disable ...............4-471 4.27.4 show vbas...................4-472 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 24 4.30.7 set ethernet-oam port link-monitor enable/disable........4-490 4.30.8 set ethernet-oam port link-monitor symbol-period ........4-491 4.30.9 set ethernet-oam port link-monitor frame..........4-492 4.30.10 set ethernet-oam port link-monitor frame-period........4-492 4.30.11 set ethernet-oam port link-monitor frame-seconds........4-493 4.30.12 show ethernet-oam ................4-494 XXII SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 25 4.33.10 clear protocol-protect mac-drop rule............4-510 4.33.11 show protocol-protect statistic.............4-510 4.33.12 show protocol-protect limit..............4-511 4.33.13 show protocol-protect priority.............. 4-511 4.33.14 show protocol-protect mac-drop port ...........4-512 4.33.15 show protocol-protect mac-drop rule ...........4-513 4.34 LLDP Configuration ..................4-513 XXIII SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 26 4.35.16 set mld filter add/delete query.............4-531 4.35.17 show mld snp ..................4-532 4.35.18 show mld snp vlan ................4-533 4.35.19 show mld snooping mr-port-info............4-535 4.35.20 show mld filter query ................4-535 4.35.21 show mld filter query vlan..............4-536 4.36 PoE Configuration ..................4-537 XXIV SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 27 4.39.3 tacacs-plus loginauthen default group ...........4-554 4.39.4 tacacs-plus loginauthor default group............4-555 4.39.5 tacacs-plus adminauthen default group..........4-555 4.39.6 tacacs-plus accounting commands default group........4-556 4.39.7 tacacs-plus accounting exec default group ..........4-556 4.39.8 tacacs-plus accounting update period ...........4-557 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 28 4.42.12 clear cfm lm/dm .................4-572 4.42.13 clear cfm relate-rmep .................4-573 4.43 802.1ag Configuration ...................4-573 4.43.1 cfm enable/disable ................4-573 4.43.2 create cfm md ..................4-574 4.43.3 create cfm ma ..................4-574 4.43.4 create cfm local-mep ................4-575 XXVI SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 29 4.44.8 set dhcp relay vclass-id server .............4-595 4.44.9 clear dhcp relay vclass-id ..............4-596 4.44.10 clear dhcp relay option82 sub-option device ani........4-596 4.44.11 show dhcp relay.................4-597 4.44.12 show dhcp vclass-id................4-597 4.44.13 show dhcp relay binding..............4-598 XXVII SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 30 4.47.1 debug protocol dhcpv6 enable/disable ..........4-612 4.47.2 debug protocol dhcp client enable/disable ..........4-613 4.47.3 debug protocol dhcp client state ipport ..........4-613 4.47.4 debug protocol dhcp relay enable/disable ..........4-614 4.47.5 debug protocol dhcp download .............4-614 XXVIII SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 31 5.4.3 set src-ipport ..................5-10 5.4.4 create community public/private ...............5-11 5.4.5 create view .................... 5-12 5.4.6 set community acl-rule-id ................ 5-12 5.4.7 clear community acl-rule-id ..............5-13 5.4.8 set community view ................5-13 XXIX SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 32 5.6.2 set zdp port/trunk enable/disable ............. 5-39 5.6.3 set zdp timer ..................5-39 5.6.4 set zdp holdtime ..................5-40 5.6.5 show zdp ....................5-41 5.6.6 show zdp neighbour ................5-41 5.6.7 show zdp neighbour detail ..............5-42 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 33 5.7.2 set sflow collector-address ..............5-61 5.7.3 set sflow version ..................5-61 5.7.4 set sflow ingress/egress enable/disable ........... 5-62 5.7.5 set sflow ingress sample-mode all/forward ..........5-63 5.7.6 set sflow ingress/egress packet-sample off ..........5-63 XXXI SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 34 5.7.9 clear sflow statistic ................. 5-65 5.7.10 show sFlow ..................5-66 5.8 Telnet ......................5-67 5.8.1 set telnet server enable/disable ............... 5-67 5.8.2 show telnet .................... 5-67 5.8.3 set telnet listen-port ................5-68 Glossary ......................I XXXII SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 35: About This Manual
1. Conventions on Safety Signs This manual uses the following safety signs. For the meanings of these signs, refer to the following table: Safety Sign Meaning Note: provides additional information about a certain topic. SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 36 *(x) Indicates that x can be repeated. {[ x] ,[ y] ,[ z]} Indicates that you can select one or more of x, y, and z as required. SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 37: Chapter 1 Safety Instructions
It is not recommended to run the debug commands when the network equipment operates properly. ZTE Corporation bears no responsibility for consequences resulting from violation of general specifications for safety operations or of safety rules for design, production, and use of the equipment.
Page 38 ZXR10 2900E Series Command Reference Note: Provides additional safety information. SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 39: Chapter 2 Overview
“>”, which is shown as follows: zte> The default host name is zte. You can modify the host name by running the hostname <name> command. The name length consists of at most 200 characters. SJ-20130731155059-003|2013-11-27 (R1.0)
Page 40: Global Configuration Mode
ZXR10 2900E Series Command Reference In user mode, you can run the exit command to exit the switch configuration or run the show command to view the information about system configuration and operation. Note: The show command can be run in any mode.
Page 41: File System Configuration Mode
In cluster management configuration mode, you can configure the cluster management service of the switch. To return to global configuration mode from cluster management configuration mode, run the exit command or press Ctrl-Z. SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 42: Basic Ingress Acl Configuration Mode
ZXR10 2900E Series Command Reference 2.1.8 Basic Ingress ACL Configuration Mode In global configuration mode, you can run the config ingress-acl basic number <1-99> command to enter basic ingress ACL configuration mode, which is shown as follows: zte(cfg)#config ingress-acl basic number 10...
Page 43: Global Ingress Acl Configuration Mode
In global configuration mode, you can run the config egress-acl basic number <400-499> command to enter basic egress ACL configuration mode, which is shown as follows: zte(cfg)#config egress-acl basic number 400 zte(egress-basic-acl)# In basic egress ACL configuration mode, you can add, delete and move rules for a basic egress ACL.
Page 44: Hybrid Egress Acl Configuration Mode
ZXR10 2900E Series Command Reference In layer-2 egress ACL configuration mode, you can add, delete and move rules for a specified layer-2 egress ACL. To return to global configuration mode from layer-2 egress ACL configuration mode, run the exit command or press Ctrl-Z.
Page 45 M is an integer ranging from 1 to 32. <string> A character string without space. <mib-oid> Variable number in dotted decimal notation, for example, 1.3.6.2.19.2. <name> A character string without space. <sessionlist> Session list. SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 46 ZXR10 2900E Series Command Reference This page intentionally left blank. SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 47: Chapter 3 File System Configuration
3.1 Creating a Directory Purpose This command creates a directory. Command Mode File system configuration mode Syntax md <directory name> Parameter Description Parameter Description <directory name> Directory name Example The following example creates the temp directory: zte(cfg-tffs)#ls SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 48: Deleting A File Or Directory
ZXR10 2900E Series Command Reference <DIR> <DIR> <DIR> <DIR> data <DIR> lost+found <DIR> 254,132,224 bytes free zte(cfg-tffs)#md temp Done ! zte(cfg-tffs)#ls <DIR> temp <DIR> <DIR> <DIR> data <DIR> lost+found <DIR> 254,132,224 bytes free 3.2 Deleting a File or Directory Purpose This command deletes a file or directory.
Page 49: Renaming A File Or Directory
This command changes the name of a file or directory. Command Mode File system configuration mode Syntax rename <file-name><file-name> Parameter Description Parameter Description <file-name>(First) Original file name or directory name <file-name>(Second) New file name or directory name SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 50: Displaying Sub Directories And Files
ZXR10 2900E Series Command Reference Example The following example changes to_permmac.dat to permanent_mac.dat: zte(cfg-tffs)#ls /cfg <DIR> <DIR> to_permmac.dat 98,304 bytes 254,132,224 bytes free zte(cfg-tffs)#rename to_permmac.dat permanent_mac.dat Done ! zte(cfg-tffs)#ls /cfg <DIR> <DIR> permanent_mac.dat 98,304 bytes 254,132,224 bytes free zte(cfg-tffs)# 3.4 Displaying Sub Directories and Files Purpose This command displays sub directories and files.
Page 51: Uploading Or Downloading A File Through Tftp
<DIR> <DIR> 254,132,224 bytes free 3.6 Uploading or Downloading a File Through TFTP Purpose This command uploads a file to or downloads a file from the TFTP server. Command Mode File system configuration mode SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 52 ZXR10 2900E Series Command Reference Syntax tftp <A.B.C.D> upload <local-file-name>[<remote-file-name>] tftp <A.B.C.D> download <remote-file-name>[<local-file-name>] Parameter Description Parameter Description <A.B.C.D> Server IP address. download Downloads a file from the server to the local Flash. Uploads a local file to the server.
Page 53: Uploading Or Downloading A File Through The Cluster Commander
Flash memory is "/"). 3. If the parameter does not include any path, such as startrun.dat, the full path name of the file is /cfg/startrun.dat (assuming the current path of the local Flash memory is /cfg/). SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 54: Uploading Or Downloading A File Through Ftp
ZXR10 2900E Series Command Reference Parameter Description Name of the file on the cluster commander. The parameter can be in any of the following formats: 1. If the parameter includes a path, such as \cfg\startru n.dat (windows format), the full path name of the file is D:\svn_2900e\prj\cfg\startrun.dat (assuming the...
Page 55: Copying A File
For layer-3 interface configuration, refer to 4.17 IPv4 Layer 3 Configuration 4.18 IPv6 Layer 3 Configuration. 3.9 Copying a File Purpose This command copies a file. Command Mode File system configuration mode SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 56: Formatting The Flash Memory
ZXR10 2900E Series Command Reference Syntax copy <source-pathname><dest-pathname> Parameter Description Parameter Description <source-pathname> Name of the source file with a path <dest-pathname> Name of the destination file with a path Example The following example copies the /cfg/permanent_mac.dat file to the /temp/ directory and changes it to the temp_file.dat file:...
Page 57: Updating Bootrom
Enables the automatic download function. enable Disables the automatic download function. disable Guidelines This command is recorded by NVRAM and will not be lost upon power interruption. Default The automatic download function is enabled. 3-11 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 58: Automatically Saving Configuration Files
ZXR10 2900E Series Command Reference 3.13 Automatically Saving Configuration Files 3.13.1 set auto-saveconfig enable/disable Purpose This command enables or disables the function that the switch automatically uploads configuration files to the TFTP server. Command Mode Global configuration mode Syntax set auto-saveconfig {enable | disable}...
Page 59: Set Auto-Saveconfig Period
Syntax set auto-saveconfig period <1-30> Parameter Description Parameter Description Period (natural days) that the switch automatically uploads <1-30> configuration files. Guidelines A day starts from 00:00:00. Default The default period is seven days. 3-13 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 60: Show Auto-Saveconfig
ZXR10 2900E Series Command Reference 3.13.4 show auto-saveconfig Purpose This command displays the state of the function of automatically uploading configuration files. Command Mode All configuration modes Syntax show auto-saveconfig Guidelines The contents to be displayed include whether the function of automatically uploading configuration files is enabled, the upload period, and the TFTP server’s IP address.
Page 61: Chapter 4 Service Configuration
VBAS Configuration ....................4-470 PPPoE-PLUS Configuration ...................4-472 ZESR Configuration ....................4-476 OAM Configuration....................4-486 SQinQ Configuration ....................4-499 VLAN Mapping Configuration .................4-501 PP Configuration ....................4-504 LLDP Configuration ....................4-513 MLD Configuration ....................4-522 PoE Configuration ....................4-537 Single-Port Loop Detection Configuration ...............4-538 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 62: Management Configuration
ZXR10 2900E Series Command Reference UDLD Configuration ....................4-547 TACACS+ Configuration..................4-553 Time Range Configuration..................4-560 MAC BASED VLAN Configuration ................4-563 Y.1731 Configuration ....................4-565 802.1ag Configuration ....................4-573 DHCP relay Configuration ..................4-591 MFF Configuration....................4-604 SLL Configuration ....................4-610 DEBUG配置 ....................4-612 4.1 Management Configuration 4.1.1 config group Purpose This command enters cluster management configuration mode.
Page 63: Config Tffs
4.1.5 config nas Purpose This command enters access service configuration mode. Command Mode Global configuration mode Syntax config nas 4.1.6 exit Purpose This command returns the user to the previous mode. SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 64: Enable
Command Mode All configuration modes Syntax exit Guidelines In user mode (zte>), you can run the exit command to return to the login interface. 4.1.7 enable Purpose This command enters global configuration mode from user mode. Command Mode User mode...
Page 65: Line-Vty Timeout
4.1.10 line-vty timeout Purpose This command sets timeout duration for Telnet user login. Command Mode Global configuration mode Syntax line-vty timeout <1-12> Parameter Description Parameter Description – <1 12> Timeout duration (minutes). Default 10 minutes SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 66: Set Date
ZXR10 2900E Series Command Reference 4.1.11 set date Purpose This command sets the date and time of the switch. Command Mode Global configuration mode Syntax set date <yyyy-mm-dd> time <hh:mm:ss> Parameter Description Parameter Description yyyy-mm-dd indicates year, month, and day. The year ranges <yyyy-mm-dd>...
Page 67: Promptlen
The following example sets the length of the host name to 3: hello(cfg)# hello(cfg)#promptlen 3 hel(cfg)# 4.1.14 sysLocation Purpose This command sets location information about the switch. Command Mode Global configuration mode Syntax sysLocation <string> SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 68: Reboot
ZXR10 2900E Series Command Reference Parameter Description Parameter Description <string> Location of the switch 4.1.15 reboot Purpose This command restarts the switch immediately. Command Mode Global configuration mode Syntax reboot 4.1.16 reboot-time Purpose This command sets the time when the switch is restarted automatically each day.
Page 69: Create User
User rights. By default, the rights of the admin user is level 15 <0-15> and the rights of a guest user is level 0. Guidelines Four accounts can be created in total, including the default administrator account (admin). SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 70: Set Loginauth
ZXR10 2900E Series Command Reference Example The following example creates a user with the name of userx and rights of guest: zte(cfg)#create user userx guest 4.1.19 set loginauth Purpose This command sets the login authentication mode. Command Mode Global configuration mode...
Page 71: Set User Local Login-Password
Example The following example sets the login password of a local user with the name of username to ok: zte(cfg)#set user local username admin login-password ok 4.1.21 set adminauth Purpose This command sets the management authentication mode.
Page 72: Set User Local Admin-Password
ZXR10 2900E Series Command Reference Parameter Description Parameter Description local Sets management authentication to local authentication. Sets management authentication to RADIUS authentication radius Local authentication is performed first. If local authentication fails, local+radius RADIUS authentication is performed. RADIUS authentication is performed first. If RADIUS radius+local authentication fails, local authentication is performed.
Page 73: Set User Radius Purview
Example The following example sets the management password of a local user with the name of username to ok: zte(cfg)#set user local username admin admin-password ok 4.1.23 set user radius purview Purpose This command sets RADIUS authentication users’ login rights.
Page 74: Set User Tacacs-Plus Purview
ZXR10 2900E Series Command Reference Command Mode Global configuration mode Syntax set user radius admin-password [<string>] Parameter Description Parameter Description [<string>] Management password Guidelines If admin-password is directly entered without any parameter, it indicates that the management password is set to null.
Page 75: Set User Tacacs-Plus Admin-Password
Chapter 4 Service Configuration Default admin Example The following example sets TACACS+ authentication users to have management rights: zte(cfg)#set user tacacs-plus purview admin 4.1.26 set user tacacs-plus admin-password Purpose This command sets TACACS+ authentication users’ management password. Command Mode Global configuration mode Syntax set user tacacs-plus admin-password [<string>]...
Page 76: Cpu-Threshold
ZXR10 2900E Series Command Reference Syntax set user multi-user {enable | disable} Parameter Description Parameter Description Enables multi-user login. enable Disables multi-user login. disable Default Multi-user login is disabled. Example The following example enables multi-user login: zte(cfg)#set user radius admin-password ok 4.1.28 cpu-threshold...
Page 77: Mem-Threshold
The following example sets the alarm threshold for memory usage to 70%: zte(cfg)#mem-threshold 70 4.1.30 write Purpose This command saves the current configuration information to the Flash memory. Command Mode Global configuration mode 4-17 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 78: Clear User
ZXR10 2900E Series Command Reference Syntax write 4.1.31 clear user Purpose This command deletes a user. Command Mode Global configuration mode Syntax clear user <name> Parameter Description Parameter Description <name> User name Guidelines The admin default user can be deleted.
Page 79: Terminal Monitor
Parameter Description Enables log writing. Disables log writing. Guidelines Record log information in the RAM. If it is required to save log information to the Flash memory, use the command such as toFile/timer. 4-19 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 80: Terminal Log Tofile
ZXR10 2900E Series Command Reference 4.1.35 terminal log toFile Purpose This command saves logs in the RAM to the Flash memory. Command Mode Global configuration mode Syntax terminal log toFile Guidelines The file saved to the Flash memory is terminal_log.dat. If the terminal_log.dat file is detected during device reboot, it will be backed up automatically as the terminal _log_backup.dat file.
Page 81: List Include
This command shows logs that contain the specified character string. Command Mode All configuration modes Syntax show terminal log include <string> Parameter Description Parameter Description Character string in the logs to be searched for. Spaces are not <string> supported. 4-21 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 82: Show Reset-Time
ZXR10 2900E Series Command Reference Example The following example searches for all port linkup logs: zte(cfg)#show terminal log include linkup 4.1.39 show reset-time Purpose This command shows the configuration for the automatic logout time of the switch console. Command Mode...
Page 83: Show Adminauth
Guidelines Mirroring and log configurations will be displayed. 4.1.44 show terminal log Purpose This command shows the terminal log information saved in the RAM. Command Mode All configuration modes Syntax show terminal log 4-23 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 84: Clear Terminal-Log
ZXR10 2900E Series Command Reference 4.1.45 clear terminal-log Purpose This command clears terminal log information and the terminal_log.dat file in the Flash memory. Command Mode Global configuration mode Syntax clear terminal-log Guidelines When clearing terminal log information, you are prompted whether to delete the termi nal_log.dat file.
Page 85: Terminal Log Module
By default, the function is enabled. Enables or disables the terminal log function for the AAA module. By default, the function is enabled. Disables the function of writing logs. Enables the function of writing logs. 4-25 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 86: Show User
MAC address, PCB version, and EPLD version. Example The following example shows system information: zte(cfg)#show version ZXR10 Router Operating System Software, ZTE Corporation: ZXR10 2928E Version Number : 2900E Series V2.05.11IT02 Copyright (c) 2001-2013 By ZTE Corporation Compiled: 17:29:26 Jul 26 2013...
Page 87: Show Running-Config
<string> parameter. <string> Defines a character string. Guidelines This command without any parameters can show all the non-default configurations. Example The following example shows configurations of the system: zte(cfg)#show running-config 4-27 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 88: Show Start-Config
ZXR10 2900E Series Command Reference 4.1.51 show start-config Purpose This command shows all the non-default configurations of the system when the write command is run the last time. Command Mode All configuration modes Syntax show start-config 4.1.52 show date-time Purpose This command shows the current date and time.
Page 89: Show Cpu
This command shows current RAM usage. Command Mode All configuration modes Syntax show memory Example The following example shows current RAM usage: zte(cfg)#show memory Current used 71.0% memory. Used memory 75815 KB, free memory 30856 KB. 4-29 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 90: Show Fan
ZXR10 2900E Series Command Reference 4.1.56 show fan Purpose This command shows the operational status of the fan. Command Mode All configuration modes Syntax show fan Guidelines This command is valid for the 2910E-PS and 2918E-PS switches only. Example The following example shows states of fans:...
Page 91: Show Bootpassword
<string> Guidelines The password must contain 8 characters. 4.1.60 set bootpassword clear Purpose This command clears the password for entering the boot mode. Command Mode Global configuration mode Syntax set bootpassword clear 4-31 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 92: Set Fan Mode Auto
ZXR10 2900E Series Command Reference 4.1.61 set fan mode auto Purpose This command sets automatic adjustment of the fan rotation speed. Command Mode Global configuration mode Syntax set fan mode auto Example The following example sets automatic adjustment of the fan rotation speed: zte(cfg)#set fan mode auto 4.1.62 set fan mode manual...
Page 93: Show Etag
9000 10500 11500 14000 E-PS Example The following example sets the fan rotation speed to 1: zte(cfg)#set fan speed 1 4.1.64 show Etag Purpose This command displays the electronic tag of a device. Command Mode All configuration modes Syntax show Etag 4.1.65 readconfig...
Page 94: Set Temperature-Alarm
ZXR10 2900E Series Command Reference Syntax readconfig <filename> 4.1.66 set temperature-alarm Purpose This command sets the alarm threshold for switch over-temperature. The unit is degrees Celsius, and the default value is 51. Command Mode Global configuration mode Syntax set temperature-alarm <0-100>...
Page 95: Show Summer-Time
2. The following example sets the DST to 00:00:00 on the first Monday in June 2012 to 00:00:00 on the last Sunday in October 2012: zte(cfg)#set date summer-time one-year week 1st monday 6 2012 00:00:00 last sunday 10 2012 00：00：00 4.1.68 show summer-time...
Page 96: Config Mac-Based-Vlan
ZXR10 2900E Series Command Reference Command Mode Global configuration mode Syntax clear summer-time 4.1.70 config mac-based-vlan Purpose This command enters MAC based VLAN configuration mode to configure a rule of a session. Command Mode Global configuration mode Syntax config mac-based-vlan session <1-64>...
Page 97: Clear Running-Config
This command clears all configuration except layer-3 interface configuration (for example, the device management IP address), log configuration, user account configuration and banner configuration, saves the modification, and restarts the system. Command Mode Global configuration mode 4-37 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 98: Set Banner Filename
ZXR10 2900E Series Command Reference Syntax clear running-config Example The following example clears configuration and restarts the system: zte(cfg)#clear running-config 4.1.74 set banner filename Purpose This command configures the banner displayed on the start screen, and saves the banner in a file. The banner can contain spaces.
Page 99: Clear Banner
<string> The maximum length is 4 characters. Default @#$% Example The following example sets the banner end identifier to 123: zte(cfg)#set banner endwith 123 zte(cfg)#write Saving file, please wait a minute... Done ! 4.1.76 clear banner Purpose This command clears the banner displayed on the start screen.
Page 100: Clear Login Session
ZXR10 2900E Series Command Reference 4.1.77 clear login session Purpose This command deletes a management user session. Command Mode Global configuration mode Syntax clear login session <sessionlist> 4.1.78 command log Purpose This command enables or disables the log function. Command Mode...
Page 101: Command Log Timer
Interval of saving log information, unit: hours. Default 24 hours Example The following example sets the interval of saving log information automatically to 10 hours: zte(cfg)#command log timer interval 10 4.1.81 show command log user Purpose This command shows historical configuration commands based on users. 4-41 SJ-20130731155059-003|2013-11-27 (R1.0)
Page 102: Show Command Log Time-Range
Parameter Description <hh:mm> Hour: minute, in 24–hour format <yyyy-mm-dd> Year-month-date Example The following example shows the historical configuration commands within the specified time range: zte(cfg)#show command log time-range 05:50 2004-07-04 to 06:10 2004-07-04 4-42 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 103: Show Environment
75.0% 4.1.84 show power-module Purpose This command shows power supply module information, including AC, DC, output voltage, output current, output power, input power, electronic tag, temperature of power supply module, and manufacturer information. 4-43 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 104: Check-File
ZXR10 2900E Series Command Reference Command Mode Global configuration mode Syntax show power-module <number> Parameter Description Parameter Description <number> Slot of the power supply module Guidelines This command is supported on the ZXR10 2928E-PS. Example The following example shows information about the power supply module installed in slot...
Page 105: Port Configuration
Disables ports. disable Guidelines Ports are enabled by default, which is not related to the optoelectronic status of combo ports. Example The following example enables ports 1, 5, 6, 7 and 11: 4-45 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 106: Set Port Work-Mode
ZXR10 2900E Series Command Reference zte(cfg)#set port 1,5-7,11 enable 4.2.2 set port work-mode Purpose This command controls combo ports to switch between the optical mode and the electrical mode. Command Mode Global configuration mode Syntax set port <portlist> work-mode {fiber | copper | auto [ prefer { first-up | fiber | copper }]}...
Page 107: Set Port Duplex
This command sets the working mode of ports to full duplex or half duplex. Command Mode Global configuration mode Syntax set port <portlist> duplex {full | half | auto} Parameter Description Parameter Description <portlist> Port list. 4-47 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 108: Set Port Speed
ZXR10 2900E Series Command Reference Parameter Description Sets the working mode of ports to full duplex. full half Sets the working mode of ports to half duplex. The working mode of ports is decided by negotiation. auto Default By default, auto is selected.
Page 109: Set Port Mdix
4.2.7 set port flowcontrol Purpose This command enables or disables the flow control or back pressure function of the specified ports. Command Mode Global configuration mode Syntax set port <portlist> flowcontrol {enable | disable} 4-49 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 110: Set Port Description
ZXR10 2900E Series Command Reference Parameter Description Parameter Description <portlist> Port list. Enables the flow control or back pressure function. enable Disables the flow control or back pressure function. disable Guidelines If a port is in full duplex status, the flow control function can be enabled. If a port is in half duplex status, the back pressure function can be enabled.
Page 111: Set Port Accept-Frame
By default, all messages can be handled. 4.2.10 set jumbo port Purpose This command enables or disables the jumbo frame function. Command Mode Global configuration mode Syntax set jumbo port <portlist>{enable | disable } 4-51 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 112: Set Port Pvid
ZXR10 2900E Series Command Reference Parameter Description Parameter Description <portlist> Port list. enable Enables the jumbo frame function. disable Disables the jumbo frame function. Guidelines ZXR10 2900E devices can forward jumbo frames of 10K. Default The jumbo frame function is disabled.
Page 113: Set Sleep-Mode
Command Mode Global configuration mode Syntax set sleep-mode {enable | disable} Parameter Description Parameter Description enable Enables the port sleep mode. disable Disables the port sleep mode. Default The port sleep mode is disabled. 4-53 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 114: Create Port Name
ZXR10 2900E Series Command Reference 4.2.14 create port name Purpose This command names a port. Command Mode Global configuration mode Syntax create port <portid> name <string> Parameter Description Parameter Description <portid> Number of a port. <string> Port name, which contains a maximum of 200 characters. The numbers 1 to 255 cannot be used.
Page 115: Show Port
Clears the multicast filtering enable/disable flag and restores the default multicast-filter status. Example The following example clears names of ports 1, 5, 6, 7 and 11: zte(cfg)#clear port 1,5-7,11 name 4.2.16 show port Purpose This command shows configurations and operational status of ports. Command Mode...
Page 116: Show Port Statistics
ZXR10 2900E Series Command Reference PortEnable : enabled MediaType : 1000BaseT Duplex : auto Speed : auto DefaultVlanId : 100 FlowControl : disabled Multicastfilter: default Security : disabled SpeedAdvertise : maxSpeed Mdix : auto AcceptFrame : all Jumbo : disabled...
Page 117: Show Port Brief
Parameter Description Parameter Description <portlist> Port list Guidelines None Example The following example shows the traffic statistics of port 1: zte(cfg)#show port 1 utilization PortId: 1 PortName: Port rate : input 0Kbps,output: 0Kbps Port utilization : input 0%,output: 4.2.19 show port brief Purpose This command shows port brief information.
Page 118: Show Port Vlan
ZXR10 2900E Series Command Reference Forced-Speed Port 10M Full 10M Half 100M Full 100M Half 1000M Full The inter- connection Auto-Ne- 100M auto 10M Half 10M Half 100M Half 100M Half is not suc- gotiation cessful. Port 1000M auto 10M Half...
Page 119: Show Jumbo
This command shows the virtual line detection result of a port. Command Mode All configuration modes Syntax show vct port <portid> Parameter Description Parameter Description <portid> ID of a port. Guidelines Only copper-mode ports support VCT detection. 4-59 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 120: Show Cable-Diag
ZXR10 2900E Series Command Reference 4.2.23 show cable-diag Purpose This command shows the numbers, up/down status, and virtual line detection results of all ports. Command Mode All configuration modes Syntax show cable-diag Guidelines If a port does not support VCT, N/A is displayed. For an FE port, two pairs (MDI[0] and MDI[1]) of detection results are displayed.
Page 121: Set Port Protect Time
Port protection period, in minutes Default 10 minutes. Example The following example sets the port protection period for ports 1 and 5: zte(cfg)#set port 1,5 protect time 3 4.2.26 set cable-diag Purpose This command sets the function of virtual cables detecting logs. Command Mode...
Page 122: Poe Configuration
ZXR10 2900E Series Command Reference Syntax set cable-diag {enable | disable} Parameter Description Parameter Description Enables the function of virtual cables detecting logs. enable disable Disables the function of virtual cables detecting logs. Guidelines After the function of virtual cables detecting logs is enables, you can view the logs by using the show cable-diag command.
Page 123: Set Poe Port Pd-Max-Power
Default The POE function is disabled. Example The following example enables the POE function for ports 1, 3, and 5: zte(cfg)#set poe port 1/1,1/3,1/5 enable 4.3.2 set poe port pd-max-power Purpose This command sets the maximum power of ports. Command Mode...
Page 124: Set Poe Port Priority
ZXR10 2900E Series Command Reference Example The following example sets the maximum power of ports 1, 3 and 5 to 30 W. zte(cfg)#set poe port 1/1,1/3,1/5 pd-max-power ext.30 4.3.3 set poe port priority Purpose This command sets POE priorities for ports.
Page 125: Set Poe Port Extend-Detection
Default The forced power-on function is disabled. Example The following example enables the forced power-on function for port 1. zte(cfg)#set poe port 1/1 forcepower enable 4.3.5 set poe port extend-detection Purpose This command enables or disables the port extend-detection function.
Page 126: Set Poe Power Maxvalue
ZXR10 2900E Series Command Reference Parameter Description Parameter Description <portlist> Port list. Enables the extend-detection function. enable Disables the extend-detection function. disable Guidelines If the extend-detection function is enabled, power supply will be provided for ports when non-standard PD devices (such as Cisco high-capacity devices) are detected. If the extend-detection function is disabled, power supply will be provided for ports only when standard PD devices are detected.
Page 127: Set Poe Port Time-Range
Example The following example sets the maximum output power and protection threshold to 400W: zte(cfg)#set poe power maxvalue 400 4.3.7 set poe port time-range Purpose This command enables the PoE function for a port.
Page 128: Show Poe Status
ZXR10 2900E Series Command Reference Command Mode Global configuration mode Syntax show poe device Example The following example shows POE status of the switch: zte(cfg)#show poe device PSE firmware version : ZTE 3.3 PSE max power configed 250 watt PSE power threshold...
Page 129: Show Poe Config
| enable | max-power | priority | extend-detection | force-power enable 15.4w disable disable disable 15.4w disable disable disable 15.4w disable disable disable 15.4w disable disable disable 15.4w disable disable disable 15.4w disable disable ……………………………… 4-69 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 130: Set Poe Port Mode
ZXR10 2900E Series Command Reference 4.3.11 set poe port mode Purpose The command sets the PoE mode to static, class, or lldp. Command Mode Global configuration mode Syntax set poe port <portlist> mode {class | lldp | static} Parameter Description...
Page 131: Set Poe Port Protect-Time
Example The following example sets the recovery time when the power of PoE port 1/1 exceeds the limit to 5 minutes: zte(cfg)#set poe port 1/1 protect-time 5 4.3.14 set poe port recover Purpose This command sets the recovery function after the power of a PoE port exceeds the limit.
Page 132: Port Mirroring
ZXR10 2900E Series Command Reference zte(cfg)#set poe port 1/1 recover 4.4 Port Mirroring 4.4.1 set mirror session add source-port Purpose This command adds ingress/egress mirroring source ports in accordance with a session. Command Mode Global configuration mode Syntax set mirror session <1-3> add source-port <portlist>{ingress | egress}...
Page 133: Set Mirror Session Delete Source-Port
RSPAN function can be enabled separately. Example The following example sets the ingress mirroring port 1: zte(cfg)#set mirror session 1 add dest-port 1 ingress 4.4.3 set mirror session delete source-port Purpose This command deletes ingress/egress mirroring source ports in accordance with a session:...
Page 134: Set Mirror Session Delete Dest-Port
RSPAN function can be disabled separately. Example The following example deletes the ingress mirroring port 1: zte(cfg)#set mirror session 1 delete dest-port 1 ingress 4.4.5 set mirror rspan-tag vlan-id priority Purpose This command sets the RSPAN tag format, including VLAN-ID and priority.
Page 135: Set Mirror Statistical Sample-Interval
Sets the egress sampling rate. egress Sets the ingress sampling rate. ingress Guidelines All sessions’ ingress mirroring ports share the same sampling rate, and all sessions’ egress mirroring ports also share one sampling rate. 4-75 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 136: Clear Mirror Session
ZXR10 2900E Series Command Reference 4.4.7 clear mirror session Purpose This command clears mirror configurations in a session. Command Mode Global configuration mode Syntax clear mirror session <1-3> Parameter Description Parameter Description <1-3> Mirror function session number Guidelines The command will clear all mirror configurations in a session, including mirroring ports and monitoring ports.
Page 137: Show Mirror Rspan
Chapter 4 Service Configuration zte(cfg)#show mirror session 1 Session 1: Ingress mirror information: --------------------------- Source port : none Destination port: 2 Rspan tag vlan : 2, priority: 7 Egress mirror information: --------------------------- Source port : 1,5-13 Destination port: 4 Rspan tag vlan : 2, priority: 6 4.4.9 show mirror rspan...
Page 138: Vlan Configuration
ZXR10 2900E Series Command Reference Example The following example shows the ingress/egress sampling rates: zte(cfg)#show mirror statistical Ingress statistical mirror: sample-interval 1 Egress statistical mirror: sample-interval 1 4.5 VLAN Configuration 4.5.1 set vlan enable/disable Purpose This command enables or disables VLANs.
Page 139: Set Vlan Add Port
The attribute of the added ports is untag. Example The following example adds tag ports 2, 8, 9, 10 and 18 to VLANs 1, 5, 6, 7 and 12: zte(cfg)#set vlan 1,5-7,12 add port 2,8-10,18 tag 4.5.3 set vlan delete port Purpose This command deletes ports from VLANs.
Page 140: Set Vlan Add Trunk
A logic link is named as trunk after link aggregation. One trunk includes multiple physical ports. Default The default trunk attribute is untag. Example The following example adds trunk 1 with tag to VLANs 1, 5, 6,7 and 12: zte(cfg)#set vlan 1,5-7,12 add trunk 1 tag 4-80 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 141: Set Vlan Delete Trunk
Trunk list Example The following example deletes trunk 1 from VLANs 1, 5, 6, 7 and 12: zte(cfg)#set vlan 1,5-7,12 delete trunk 1 4.5.6 set port protocol-vlan enable/disable Purpose This command enables or disables the protocol VLAN function on ports.
Page 142: Set Vlan Protocol-Mapping Session-No
ZXR10 2900E Series Command Reference Default The protocol VLAN function is disabled. Example The following example enables the protocol VLAN function on port 10: zte(cfg)#set port 10 protocol-vlan enable 4.5.7 set vlan protocol-mapping session-no Purpose This command sets a protocol VLAN template.
Page 143: Clear Vlan Name
“-” character. Example The following example sets the name of VLAN 1 as group1: zte(cfg)#create vlan 1 name group1 4.5.9 clear vlan name Purpose This command clears a VLAN name.
Page 144: Show Vlan
ZXR10 2900E Series Command Reference Command Mode Global configuration mode Syntax clear vlan protocol-mapping session-no <1-8> Parameter Description Parameter Description <1-8> Template number 4.5.11 show vlan Purpose This command shows basic information about VLANs. Command Mode All configuration modes Syntax show vlan <vlanlist>...
Page 145: Show Vlan Protocol-Mapping
Parameter Description Parameter Description Port number. Different devices have different port number ranges. <1-18> In the syntax, the 2918E device is used as an example. <vlanlist> VLAN ID list. <1-4094> Voice VLAN ID. 4-85 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 146: Set Vlan Voice-Vlan Oui
ZXR10 2900E Series Command Reference Guidelines Port configurations cannot be modified or covered. If modifications are required, clear the original configurations first and then re-configure the ports. 4.6.2 set vlan voice-vlan oui Purpose This command adds one OUI to a port.
Page 147: Set Vlan Voice-Vlan Qos-Profile Disable
Parameter Description Parameter Description <1-4094> Voice VLAN ID 4.6.5 clear vlan voice-vlan Purpose This command clears all voice VLAN configurations of a port. Command Mode Global configuration mode Syntax clear vlan voice-vlan port <1-18> 4-87 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 148: Clear Vlan Voice-Vlan Port Oui
ZXR10 2900E Series Command Reference Parameter Description Parameter Description Port number. Different devices have different port number ranges. <1-18> In the syntax, the 2918E device is used as an example. Guidelines The configured OUI can be cleared. 4.6.6 clear vlan voice-vlan port oui Purpose This command clears all OUIs configured on a port.
Page 149: Show Vlan Voice-Vlan
Guidelines The default OUI is not displayed. 4.6.9 show vlan voice-vlan port Purpose This command shows voice VLAN configurations on a port. Command Mode Global configuration mode Syntax show vlan voice-vlan port <1-18> 4-89 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 150: Show Vlan Voice-Vlan Default-Oui
ZXR10 2900E Series Command Reference Parameter Description Parameter Description Port number. Different devices have different port number ranges. <1-18> In the syntax, the 2918E device is used as an example. Guidelines The default OUI is not displayed. 4.6.10 show vlan voice-vlan default-oui Purpose This command shows the default OUIs.
Page 151: Show Vlan Voice-Vlan Qos
Command Mode Global configuration mode Command Mode set port <portlist> security {enable | disable} Parameter Description Parameter Description <portlist> Port list. Enables the port security function. enable disable Disables the port security function. 4-91 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 152: Set Port Multicast-Filter
ZXR10 2900E Series Command Reference Guidelines If the port security function is enabled, the port MAC learning function is disabled and unknown-source MAC messages are not forwarded. The port security function can work with the authentication function to enable the access service.
Page 153: Set Mac Add Static Port Vlan
In the syntax, the 2928E device is used as an example. <1-4094> VLAN ID. Guidelines If a static MAC entry is added, the MAC address will not be aging or floating and will disappear after the device is restarted. 4-93 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 154: Set Mac Add Static Trunk Vlan
ZXR10 2900E Series Command Reference 4.7.5 set mac add static trunk vlan Purpose This command adds a MAC static entry based on trunk and VLAN. Command Mode Global configuration mode Syntax set mac add static <HH.HH.HH.HH.HH.HH> trunk <1-15> vlan <1-4094>...
Page 155: Set Mac Add Permanent Trunk Vlan
If a permanent MAC entry is added, the MAC address will not be aging or floating and will disappear after the device is restarted. 4.7.8 set mac delete Purpose This command deletes all MAC address entries. Command Mode Global configuration mode 4-95 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 156: Set Mac Delete Mac-Address Vlan
ZXR10 2900E Series Command Reference Syntax set mac delete Guidelines Some special MAC address entries, such as layer-3 interface addresses, cannot be deleted. These MAC addresses can be deleted by using special methods as deleting layer-3 interfaces. 4.7.9 set mac delete mac-address vlan Purpose This command deletes the specified MAC address entry.
Page 157: Set Mac Delete Dynamic
Syntax set mac delete dynamic Guidelines Some special MAC address entries, such as layer-3 interface addresses, cannot be deleted. These MAC addresses can be deleted by using special methods as deleting layer-3 interfaces. 4-97 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 158: Set Mac Delete Permanent
ZXR10 2900E Series Command Reference 4.7.12 set mac delete permanent Purpose This command deletes all permanent MAC address entries. Command Mode Global configuration mode Syntax set mac delete permanent Guidelines Some special MAC address entries, such as layer-3 interface addresses, cannot be deleted.
Page 159: Set Mac Filter
VLAN ID of the MAC address to be filtered Guidelines If a message matches the filtering configuration, it will be dropped. 4.7.16 set mac learning Purpose This command sets the MAC address learning mode based on global/port/trunk/VLAN. 4-99 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 160 If automatic learning conflicts with CPU-controlled learning, CPU-controlled learning is enabled. Default The automatic learning mode is enabled. Example The following example sets trunk 10 to CPU-controlled learning: zte(cfg)#set mac learning trunk 10 mode cpu-controlled 4-100 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 161: Set Mac Limit
MAC address learning is disabled but messages can be forwarded. Default The function of limiting the number of MAC addresses is disabled. 4.7.18 set mac unknown-filter Purpose This command sets the function of filtering messages of unknown sources based on global/port/trunk. 4-101 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 162: Set Mac To Permanent
ZXR10 2900E Series Command Reference Command Mode Global configuration mode Syntax set mac unknown-filter {global | port <1-28>| trunk <1-15>} limit-num <0-16384> Parameter Description Parameter Description Sets the number of global MAC addresses. global port Sets the number of port MAC addresses.
Page 163: Set Mac To Permanent Auto-Save-Time
4.7.20 set mac to permanent auto-save-time Purpose This command sets autosave time for MAC address transformation to permanent. Command Mode Global configuration mode Syntax set mac to permanent auto-save-time <300-7200> Parameter Description Parameter Description <300-7200> Autosave time (minutes). 4-103 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 164: Set Mac To Static
ZXR10 2900E Series Command Reference Guidelines The write command can manually trigger an autosave operation. Default The autosave time is 360 minutes. 4.7.21 set mac to static Purpose This command sets the function of transforming MAC addresses from dynamic to static in batches.
Page 165: Set Mac Logging-Alarm
The drift alarm switch is disabled. The threshold alarm switch is enabled. Example The following example enables the MAC event alarm function: zte(cfg)#set mac logging-alarm station-move enable 4.7.23 set mac logging-alarm interval Purpose This command sets the interval for MAC event alarm output.
Page 166: Set Mac Protect Port
ZXR10 2900E Series Command Reference Syntax set mac logging-alarm interval <1-900> Parameter Description Parameter Description <0-256> Alarm interval (seconds). Default The alarm interval is 10 seconds. 4.7.24 set mac protect port Purpose This command enables the MAC protection function. When the number of MAC entries on a port exceeds the limit, the protection action is triggered.
Page 167: Show Mac
MAC Address Peak time : Thu Jul 1 00:05:03 2004 Flags: Per - permanent, Stc - static, ToP - to_permanent, ToS - to_static, Sav - auto saved mac address, SrF - source filter, 4-107 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 168: Show Mac Running-Config
ZXR10 2900E Series Command Reference DsF - destination filter, Time - day:hour:min:sec, Frm - mac from where:0,LEARN; 1,CONFIG; 2,DUPLICATE; 3,VPN; 4,802.1X; 5,LAYER-3; 6,DHCP MAC-Address Vlan-Id Port Per Stc ToP ToS Sav SrF DsF Frm Time ------------------------------------------------------------------------------- 0050.433c.3be1 00:02:51:17 0023.cd90.1821 port-1/24 00:00:17:03 0050.463c.5055...
Page 169: Show Mac Mix
Shows dynamic MAC addresses only. Shows permanent MAC addresses only. permanent Shows static MAC addresses only. static Shows MAC learning mode configurations. learning Shows the configuration of MAC learning quantity limitation. limit 4-109 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 170: Show Mac Mac-Address
ZXR10 2900E Series Command Reference Parameter Description port Shows MAC addresses based on port. Port number. Different devices have different port number ranges. <1-28> In the syntax, the 2928E device is used as an example. trunk Shows MAC addresses based on trunk ID.
Page 171: Show Mac Aging-Time
Example zte(cfg)#show mac aging-time MAC global aging time : 360(s) 4.7.33 show mac filter Purpose This command shows the source/destination MAC address filtering configurations. Command Mode All configuration modes Syntax show mac filter 4-111 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 172: Show Mac Logging-Alarm
ZXR10 2900E Series Command Reference Example zte(cfg)#show mac filter MAC Filter Configuration : Flags: Per - permanent, Stc - static, ToP - to_permanent, ToS - to_static, Sav - auto saved mac address, SrF - source filter, DsF - destination filter, Time - day:hour:min:sec, Frm - mac from where:0,LEARN;...
Page 173: Set Mac Learning Except Session Unbind
This command removes the binding relationship between ports/trunks and all sessions. Command Mode Global configuration modes Syntax set mac learning except {port <portlist>| trunk <trunklist>}session unbind Parameter Description Parameter Description Ports bound with sessions. port 4-113 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 174: Set Mac Learning Except Bind
ZXR10 2900E Series Command Reference Parameter Description <portlist> Port list. trunk Trunks bound with sessions. <portlist> Trunk list. Sessions in the binding relationship. session Unbinds the ports/trunks from the sessions. unbind Guidelines This command removes the binding relationship between ports/trunks and all sessions.
Page 175: Show Mac Learning Except Session
This command shows sessions that do not learn specific source MAC addresses. Command Mode All configuration modes Syntax show mac learning except session [<1-100>] Example zte(cfg)#show mac learning except session 1 Mac Learning Exception Session Status Session-Id Mac-Address MAC-Mask Vlan-ID --------------------------------------------------------------- 00.11.22.33.44.55...
Page 176: Set Mac Peak Time-Interval
ZXR10 2900E Series Command Reference Command Mode All configuration modes Syntax set mac delete peak Guidelines None. 4.7.41 set mac peak time-interval Purpose This command sets the interval for MAC peak record. Command Mode Global configuration mode Syntax set mac peak time-interval <1-120>...
Page 177: Show Mac Protect
4.8 MAC Authentication Configuration 4.8.1 aaa-control mac-authentication Purpose This command enables or disables the MAC authentication function. Command Mode NAS configuration mode Syntax aaa-control mac-authentication {enable | disable } 4-117 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 178: Aaa-Control Mac-Authentication Session
ZXR10 2900E Series Command Reference Parameter Description Parameter Description enable Enables the MAC authentication function. Disables the MAC authentication function. disable Default The MAC authentication function is disabled. Example The following example enables the MAC authentication function: zte(cfg-nas)#aaa-control mac-authentication enable 4.8.2 aaa-control mac-authentication session...
Page 179: Clear Mac-Authentication Session
Parameter Description Parameter Description <1-3> Session number Example The following example clears MAC addresses of session 1: zte(cfg-nas)#clear mac-authentication session 1 4.8.4 clear mac-authentication client Purpose This command clears all clients authenticated by MAC addresses. Command Mode NAS configuration mode Syntax clear mac-authentication client 4.8.5 clear mac-authentication client mac...
Page 180: Clear Mac-Authentication Client Port/Vlan
ZXR10 2900E Series Command Reference Syntax clear mac-authentication client mac <HH.HH.HH.HH.HH.HH> Parameter Description Parameter Description <HH.HH.HH.HH.HH.HH> Unicast MAC address 4.8.6 clear mac-authentication client port/vlan Purpose This command clears the clients on the specified ports/VLANs. Command Mode NAS configuration mode Syntax clear mac-authentication client {port <portlist>| vlan <vlanlist>}...
Page 181: Show Aaa Mac-Authentication Client
All configuration modes Syntax show aaa mac-authentication client Example The following example shows the status of the clients that are authenticated by MAC addresses: zte(cfg-nas)#show aaa mac-authentication client MaxClients : 256 OnlineClients : 0 4.9 LACP Configuration 4.9.1 set trunk pvid Purpose This command sets the default PVID for trunks.
Page 182: Set Lacp Enable/Disable
ZXR10 2900E Series Command Reference Syntax set trunk <trunklist> pvid <1-4094> Parameter Description Parameter Description <trunklist> Trunk list <1-4094> Default VLAN ID, any number from 1 to 4094 Example The following example sets the PVID of trunks 1, 2, 3 to 1000: zte(cfg)#set trunk 1-3 pvid 1000 4.9.2 set lacp enable/disable...
Page 183: Set Lacp Aggregator Mode
Port list. A maximum of eight ports can be aggregated. Example The following example adds ports 1, 5, 6 and 7 to aggregator 1: zte(cfg)#set lacp aggregator 1 add port 1,5-7 4.9.4 set lacp aggregator mode Purpose This command sets an aggregation mode for aggregators.
Page 184: Set Lacp Port Mode
ZXR10 2900E Series Command Reference 4.9.5 set lacp port mode Purpose This command sets the mode of ports to be aggregated. Command Mode Global configuration mode Syntax set lacp port <portlist> mode {active | passive} Parameter Description Parameter Description <portlist>...
Page 185: Set Lacp Priority
To set timeout processing for a port, add the port to a LACP aggregation group first. Example The following example sets long timeout for ports 1, 5, 6 and 7: zte(cfg)#set lacp port 1,5-7 timeout long 4.9.7 set lacp priority Purpose This command sets the LACP priority.
Page 186: Show Trunk
ZXR10 2900E Series Command Reference Syntax set lacp load-balance {port | packet {L2 | L3 | L4}} Parameter Description Parameter Description The load balance is based on port. port The load balance is based on message field. packet The load balance is based on message L2 header data.
Page 187: Show Trunk Vlan
Parameter Description <trunklist> Trunk list Example The following example shows the VLAN to which trunk 1 belongs: zte(cfg)#show trunk 1 vlan TrunkId Tagged in vlan Untagged in vlan : 1 4.9.11 show lacp Purpose This command shows LACP global configurations.
Page 188: Show Lacp Aggregator
ZXR10 2900E Series Command Reference PortNum GroupNum GroupMode LacpTime LacpActive ----------- ----------- ----------- ----------- ----------- Dynamic Long False 4.9.12 show lacp aggregator Purpose This command shows brief information about all LACP aggregators. Command Mode All configuration modes Syntax show lacp aggregator...
Page 189: Show Lacp Port
<portlist > Parameter Description Parameter Description <portlist> Port list Example The following example shows the aggregation status of LACP member port 2: zte(cfg)#show lacp port 2 PortID: 2 Port status: Select : Unselected Loop : False Aggnum...
Page 190: Clear Trunk
ZXR10 2900E Series Command Reference Distributing: False Collecting : False Synchronize : False Aggregation : True LacpTimeout : False LacpActivity : False PartnerStatus: Expired : False Defaulted : True Distributing: False Collecting : True Synchronize : False Aggregation : True...
Page 191: Set Igmp Snooping Add/Delete Vlan
Deletes multicast snooping VLANs. delete <vlanlist> VLAN list. Guidelines ZXR10 2900E supports 1024 multicast snooping VLANs. Example The following example configures multicast snooping for VLANs 1 to 10: zte(cfg)#set igmp snooping add vlan 1-10 4-131 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 192: Set Igmp Snooping Add/Delete Maxnum Vlan/Port
The following example sets the maximum number of multicast groups for VLANs 1 to 10 and ports 1 to 10 to 100: zte(cfg)#set igmp snooping add maxnum 100 vlan 1-10 zte(cfg)#set igmp snooping add maxnum 100 port 1-10 4.10.4 set igmp snooping delete host Purpose This command clears dynamic users.
Page 193: Set Igmp Snooping Multicast -Ring Enable/Disable
Chapter 4 Service Configuration Example The following example clears dynamic users: zte(cfg)#set igmp snooping delete host 4.10.5 set igmp snooping multicast -ring enable/disable Purpose This command enables or disables the IGMP multicast ring network function. Command Mode Global configuration mode...
Page 194: Set Igmp Snooping Monitor-Ring Enable/Disable
The ports on the ring must be configured as cascade ports. Example The following example adds cascade ports 51 and 52 to the multicast ring network: zte(cfg)#set igmp snooping multicast-ring add cascade port 51,52 4.10.7 set igmp snooping monitor-ring enable/disable Purpose This command enables or disables the IGMP ring network monitoring function.
Page 195: Set Igmp Snooping Vlan Add/Delete Group
The following example adds the static multicast group 230.40.44.167 to VLAN 1 and adds ports 1 to 10 to the static group at the same time: zte(cfg)#set igmp snooping vlan 1 add group 230.40.44.167 port 1-10 4.10.9 set igmp snooping vlan add/delete smr port/trunk Purpose This command adds/deletes routing ports/trunks to/from the specified VLAN.
Page 196: Set Igmp Snooping Private-Group
Trunk list. Example The following example adds routing ports 9 and 10 to VLAN 1: zte(cfg)#set igmp snooping vlan 1 add smr port 9,10 4.10.10 set igmp snooping private-group Purpose This command adds a private group, and enables or disables the private group function.
Page 197: Set Igmp Snooping Timeout Route/Host
The private group function is disabled. Example The following example adds the private group 10.0.0.23 and enables the private group function: zte(cfg)#set igmp snooping private-group 10.0.0.23 zte(cfg)#set igmp snooping private-group enable 4.10.11 set igmp snooping timeout route/host Purpose This command sets the aging time of routers/hosts.
Page 198: Set Igmp Snooping Query-Interval
ZXR10 2900E Series Command Reference Example The following example sets the aging time of routers to 400 seconds and that of hosts to 300 seconds: zte(cfg)#set igmp snooping timeout router 4000 zte(cfg)#set igmp snooping timeout host 3000 4.10.12 set igmp snooping query-interval Purpose This command sets the interval for the switch to send query messages.
Page 199: Set Igmp Snooping Last-Member-Query
The waiting time is 100, that is, 10 seconds. Example The following example sets the waiting time to 15 seconds: zte(cfg)#set igmp snooping response-interval 150 4.10.14 set igmp snooping last-member-query Purpose This command sets the querying circle of the last member.
Page 200: Set Igmp Snooping Query Vlan Enable/Disable
Disables query function. Example The following example enables the query function for VLANs 1 to 10: zte(cfg)#set igmp snooping query vlan 1-10 enable 4.10.16 set igmp snooping query version Purpose This command sets the IGMP version of query messages sent by the switch.
Page 201: Set Igmp Snooping Fastleave Enable/Disable
Disables the fast leave function. Default The fast leave function is disabled. Example The following example enables the fast leave function: zte(cfg)#set igmp snooping fastleave enable 4.10.18 set igmp snooping v3 enable/disable Purpose This command enables or disables the IGMP V3 function. Command Mode...
Page 202: Set Igmp Snooping Proxy
ZXR10 2900E Series Command Reference Syntax set igmp snooping v3 {enable | disable} Parameters Parameter Description enable Enables the IGMP V3 function. disable Disables the IGMP V3 function. Default The IGMP V3 function is disabled. Example The following example enables the IGMP V3 function: zte(cfg)#set igmp snooping v3 enable 4.10.19 set igmp snooping proxy...
Page 203: Set Igmp Filter Enable/Disable
Disables the multicast filtering function. Default The multicast filtering function is disabled. 4.10.22 set igmp filter add/delete groupip vlan Purpose This command enables or disables the filtering of messages of the specified group in the specified VLANs. 4-143 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 204: Set Igmp Filter Add/Delete Grouplist Mask Vlan
VLAN list. Example The following example filters messages of the group 231.0.0.100 in VLANs 1-10: zte(cfg)#set igmp filter add groupip 231.0.0.100 vlan 1-10 4.10.23 set igmp filter add/delete grouplist mask vlan Purpose This command adds or deletes the filtering in one or multiple specified VLANs. A maximum of 32 entries can be specified.
Page 205: Set Igmp Filter Add/Delete Sourceip Vlan
255.255.255.0 for vlan 1-10, meaning that the multicast packets whose IP address is between 225.0.0.0 and 225.0.0.255 are filtered: zte(cfg)#set igmp filter add grouplist 225.0.0.10 mask 255.255.255.0 vlan 1-10 4.10.24 set igmp filter add/delete sourceip vlan Purpose This command enables or disables the filtering of the specified source in the specified VLANs.
Page 206: Show Igmp Snooping
VLAN list. Example The following example shows how to filter query packets for port 1 and VLAN 1: zte(cfg)#set igmp filter add query port 1 vlan 1 4.10.26 show igmp snooping Purpose This command shows the global configuration of IGMP snooping.
Page 207: Show Igmp Snooping Vlan
Maximal group number: 100 Current group number: 0 There's no active group 3. The following example shows the host information of VLAN 1: zte(cfg)#show igmp snooping vlan 1 host There's no active host in vlan 1 4-147 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 208: Show Igmp Snooping Port
ZXR10 2900E Series Command Reference 4. The following example shows the router information of VLAN 1: zte(cfg)#show igmp snooping vlan 1 router Last IGMP_QUERY_ROUTER's ip is 0.0.0.0 VlanId PortId Expiry ---- ------ ------- ---------- 4000 4000 4.10.28 show igmp snooping port...
Page 209: Show Igmp Snooping V3 Port/Trunk
Trunk ID. Example The following example shows multicast group information of v3 snooped on port 1: zte(cfg)#show igmp snooping v3 port 1 No source specific multicast address records! The max group records num : 0 Total source records count: 0 4.10.30 show igmp filterreport...
Page 210: Show Igmp Filterreport Vlan
ZXR10 2900E Series Command Reference Command Mode All configuration modes Syntax show igmp filter report Example The following example shows the configuration of multicast filtering. The index is 1 and the mask is 255.255.255.255, which means that only one group address can be filtered.
Page 211: Show Igmp Filter Query
<vlanlist> Parameters Parameter Description <vlanlist> VLAN list Example The following example displays the configuration of packet filtering query for VLAN 3: zte(cfg)#show igmp filter query vlan 1 Index Vlan Port Trunk 4-151 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 212: Iptv Configuration
ZXR10 2900E Series Command Reference ----- ---- ------- ------- 4.11 IPTV Configuration 4.11.1 iptv control enable/disable Purpose This command enables or disables the IPTV control function. Command Mode NAS configuration mode Syntax iptv control {enable | disable} Parameter Description Parameter...
Page 213 The following example creates a channel group in VALN1. The start IP address in the group is 225.0.1.1, and the end IP address is 225.0.1.10. The channel group name is lsj and the channel group ID is 100. zte(cfg-nas)#iptv channel-group mvlan 1 groupip-list 225.0.1.1 225.0.1.10 name lsj id 100 zte(cfg-nas)#show iptv channel-group MaxChannelGroupNum:256...
Page 214: Iptv Channel Mvlan Groupip Name
The following example creates the channel 224.0.1.1 in VLAN 1 and sets the channel name of 224.0.1.3 to cctv and channel number to 100: zte(cfg-nas)#iptv channel mvlan 1 groupip 224.0.1.1 zte(cfg-nas)#iptv channel mvlan 1 groupip 224.0.1.3 name cctv id 100 zte(cfg-nas)#show iptv channel MaxChannelNum:1032...
Page 215: Iptv Channel-Group Name Rename
<new-name> New channel group name Example The following example renames the channel group CCTV as CATV: zte(cfg-nas)#iptv channel-group name cctv rename catv 4.11.5 iptv channel-groupname/id-list cdr Purpose This command enables or disables the log function for a channel group. Command Mode...
Page 216: Iptv Channel-Groupname/Id-List Viewfile-Name/Id
ZXR10 2900E Series Command Reference Guidelines The log function can be enabled or disabled by channel name or channel group ID. Default The log function is disabled. Example The following example enables the log function for channel group 0: zte(cfg-nas)#iptv channel-group id-list 0 cdr enable 4.11.6 iptv channel-groupname/id-list viewfile-name/id...
Page 217: Iptv Channel Mvlan Groupip Count
The following example adds channels to VLAN 2 in batches. The start IP address is 230.0.0.1, the number of channels is 10, and the name prefix is NET-TV. zte(cfg-nas)#iptv channel mvlan 2 groupip 230.0.0.1 count 10 prename NET-TV zte(cfg-nas)#show iptv channel...
Page 218: Iptv Channel Name Rename
ZXR10 2900E Series Command Reference NET-TV5 230.0.0.5 NET-TV6 230.0.0.6 NET-TV7 230.0.0.7 NET-TV8 230.0.0.8 NET-TV9 230.0.0.9 NET-TV10 230.0.0.10 CCTV 224.0.1.3 4.11.8 iptv channel name rename Purpose This command renames a channel. Command Mode NAS configuration mode Syntax iptv channel name <channel-name> rename <new-name>...
Page 219: Iptv Channel Name/Id-List Viewfile-Name/Id
Default The log function is disabled. Example The following example enables the log function for channel 0: zte(cfg-nas)#iptv channel id-list 0 cdr enable 4.11.10 iptv channel name/id-list viewfile-name/id Purpose This command specifies a preview configuration file for a channel. Command Mode...
Page 220: Iptv Sms-Server
ZXR10 2900E Series Command Reference Guidelines The system has a default preview configuration file whose ID is 0 and name is DEFVAL.PRF. Example The following example specifies the ID of the preview configuration file for channel 0 to 0: zte(cfg-nas)#iptv channel id-list 0 viewfile-id 0 4.11.11 iptv sms-server...
Page 221: Iptv Cdr Enable/Disable
Enables the CDR function. disable Disables the CDR function. Default The CDR function is disabled. Example The following example enables the CDR function: zte(cfg-nas)#iptv cdr enable 4.11.14 iptv cdr report Purpose This command reports CDRs manually. 4-161 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 222: Iptv Cdr Create-Period
ZXR10 2900E Series Command Reference Command Mode NAS configuration mode Syntax iptv cdr report Guidelines Reports CDRs in the buffer to the server. 4.11.15 iptv cdr create-period Purpose This command sets the period for regular CDR generation when the order users watch the program for a long time.
Page 223: Iptv Cdr Prv-Right
The CDR function of the deny access right is disabled. Example The following example enables the CDR function of the deny access right: zte(cfg-nas)#iptv cdr deny-right enable 4.11.17 iptv cdr prv-right Purpose This command enables or disables the CDR function of the preview access right.
Page 224: Iptv Cdr Report-Threshold
ZXR10 2900E Series Command Reference 4.11.18 iptv cdr report-threshold Purpose This command sets the number of CDRs in the message reported every time. Command Mode NAS configuration mode Syntax iptv cdr report-threshold <1-32> Parameter Parameter Description <1-32> Number of CDRs Default The number of CDRs is 10.
Page 225: Iptv Cdr Max-Records
The report interval is 300 seconds. Example The following example sets the interval for CDR timing report to 600 seconds: zte(cfg-nas)#iptv cdr report-interval 600 4.11.20 iptv cdr max-records Purpose This command sets the maximum number of CDRs in the buffer.
Page 226: Iptv Package Name
ZXR10 2900E Series Command Reference Command Mode NAS configuration mode Syntax iptv cdr warning-threshold <1-100> Parameter Parameter Description <1-100> Warning threshold for the CDR buffer pool. The unit is percentage. Default The threshold is 50%. Example The following example sets the warning threshold for the CDR buffer pool to 80%: zte(cfg-nas)#iptv cdr warning-threshold 80 4.11.22 iptv package name...
Page 227: Iptv Package Name Channel Name/Id-List
Example The following example adds channels 100,103,104, and 107 to the package whose name is pkg1: zte(cfg-nas)#iptv package name pkg1 channel id-list 100,103,104,107 order 4.11.24 iptv prv enable/disable Purpose This command enables or disables the preview function. Command Mode...
Page 228: Iptv Prv Reset
ZXR10 2900E Series Command Reference Syntax iptv prv {enable | disable} Parameters Parameter Description enable Enables the preview function. disable Disables the preview function. Default The preview function is disabled. Example The following example enables the preview function: zte(cfg-nas)#iptv prv enable 4.11.25 iptv prv reset...
Page 229: Iptv Prv Recognition-Time
<HH:MM:SS> second) Example The following example sets the time for automatic reset to 00:01:01 everyday: zte(cfg-nas)#iptv prv autoreset-time 00:01:01 4.11.27 iptv prv recognition-time Purpose This command sets the preview recognition time. If the preview occurs in a very short time, the time is ignored.
Page 230: Iptv Prv Overcount-Cdr
ZXR10 2900E Series Command Reference 4.11.28 iptv prv overcount-cdr Purpose This command enables or disables the CDR function when the preview times is overcount. Command Mode NAS configuration mode Syntax iptv prv overcount-cdr {enable | disable} Parameters Parameter Description Enables the CDR function when the preview time is overcount.
Page 231: Iptv View-Profile Name Count/Duration/Blackout
60 seconds. Example The following example creates a preview configuration file named as vtcc: zte(cfg-nas)#iptv view-profile name vtcc 4.11.30 iptv view-profile name count/duration/blackout Purpose This command sets the maximum preview times/the maximum duration of a single preview/the minimum preview interval.
Page 232: Iptv Cac-Rule Enable/Disable
ZXR10 2900E Series Command Reference Example The following example sets the maximum preview times for the file named as vtcc to 10, the maximum duration of a single preview to 600 seconds, and the minimum preview interval to 300 seconds:...
Page 233: Iptv Port Control-Mode
If the VLAN ID is not set, the command sets the global service status. Default Services are cancelled. Example The following example starts services of port 1 in VLAN 1000: zte(cfg-nas)#iptv port 1 vlan 1000 service start 4.11.33 iptv port control-mode Purpose This command sets a multicast control mode. Command Mode...
Page 234: Iptv Port Package
ZXR10 2900E Series Command Reference Parameter Description Control by package. Channels in a package have the same rights. package channel Control by channel control. Guidelines If the VLAN ID is not set. the command sets the global multicast control mode.
Page 235: Iptv Port Channel-Group
The configuration of channel-group is supported only when the channel mode is selected in control-mode. Example The following example sets the channel group access rights to allow for port 2: zte(cfg-nas)#iptv port 2 vlan 2 channel-group name chname0 order 4-175 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 236: Iptv Port Channel
The configuration of channel is supported only when the channel mode is selected in control-mode. Example The following example sets the channel access rights to order for port 2: zte(cfg-nas)#iptv port 2 vlan 2 channel name chname0 order 4.11.37 iptv port cdr Purpose This command enables or disables the CDR function.
Page 237: Iptv Port Mac-Base
Syntax iptv port <portlist>[vlan <1-4094>] mac-base {enable | disable} Parameters Parameter Description <portlist> Port list. vlan <1-4094> VLAN ID. Enables MAC-based management. enable Disables MAC-based management. disable Default The MAC-based management is disabled. 4-177 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 238: Clear Iptv Channel-Group
ZXR10 2900E Series Command Reference 4.11.39 clear iptv channel-group Purpose This command clears a channel group. Command Mode NAS configuration mode Syntax clear iptv channel-group {name <channel-group-name>| id-list <channel-group-list>| all} Parameters Parameter Description name <channel-group-name> Channel group name. id-list <channel-group-list>...
Page 239: Clear Iptv Package
Channel name. id-list <channel-list> Channel list. Deletes all channels. Example The following example clears the channel named as catv: zte(cfg-nas)#clear iptv channel name catv 4.11.41 clear iptv package Purpose This command clears a channel package. Command Mode NAS configuration mode Syntax clear iptv package {name <package-name>| id-list <...
Page 240: Clear Iptv Port Package
<1-4094> VLAN ID name <package-name> Package name id-llist <package-idlist> Package ID list Example The following example clears the package named as pkg1 allocated to port 3: zte(cfg-nas)#clear iptv port 3 package name pkg1 4-180 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 241: Clear Iptv Client
This command deletes IPTV users in accordance with various rules. Without parameters, it deletes all users. Example The following example clears users on port 1: zte(cfg-nas)#clear iptv client port 1 4.11.45 show iptv control Purpose This command shows the IPTV global configuration.
Page 242: Show Iptv Channel
ZXR10 2900E Series Command Reference Example The following example shows the IPTV global configuration: zte(cfg-nas)#show iptv control IptvControlStatus :enabled CacEnableStatus :enabled ServerIp :10.40.89.78 ServerPort :6000 The fields are described in the following table: Field Description IptvControlStatus IPTV global control switch...
Page 243 Name Channel name GroupIp IP address of the multicast group MVlan VLAN to which the multicast group belongs 2. The following example shows the information about channel 0: zte(cfg-nas)#show iptv channel id 0 ChannelName :CHNAME0 GroupAddress :224.0.1.1 MvlanId CurOrdUserNum HisOrdUserNum...
Page 244: Show Iptv Channel-Group
ZXR10 2900E Series Command Reference Field Description CurOrdUserNum Number of current order users HisOrdUserNum Number of history order users CurPrvUserNum Number of current preview users HisPrvUserNum Number of history preview users CurUserNum Number of current users HisUserNum Number of history users...
Page 245 EndIp/Mask End multicast group IP address/mask MVlan VLAN to which the channel group belongs to 2. The following example shows the detailed information about the channel group named as lsj: zte(cfg-nas)#show iptv channel-group name lsj ChannelGroupId :100 GroupStartAddress :225.0.1.1 GroupEndAddress :225.0.1.10...
Page 246: Show Iptv Package
ZXR10 2900E Series Command Reference Parameter Description GroupEndAddress End multicast group IP address MvlanId VLAN to which the channel group belongs CurOrdUserNum Number of current VOD users HisOrdUserNum Number of history VOD users CurPrvUserNum Number of current preview users HisPrvUserNum...
Page 247: Show Iptv Prv
Number of packages that were configured before Package ID Package Name Package name 2. The following example shows the channel list in the package whose ID is 0: zte(cfg-nas)#show iptv package id 0 PackageName :TAOCAN OrderChannelNum PrvChannelNum TotalChannelNum The fields are described in the following table.
Page 248: Show Iptv View-Profile
ZXR10 2900E Series Command Reference Syntax show iptv prv Example The following example shows all preview configurations: zte(cfg-nas)#show iptv prv Prvenable :enabled PrvOverCount-Cdr :enabled PrvRecognitionTime :10 PrvAutoResetTime :00:01:01 The fields are described in the following table. Field Description Prvenable Preview function switch...
Page 249 Number of preview files that were configured before Preview file ID View Profie Name Preview file name 2. The following example shows the configuration information about the preview configuration file named as vtcc: zte(cfg-nas)#show iptv view-profile name vtcc ViewProfile Id MaxPrvCount MaxPrvDuration :600 BlackoutInterval :300 The fields are described in the following table.
Page 250: Show Iptv Cdr
ZXR10 2900E Series Command Reference 4.11.51 show iptv cdr Purpose This command shows the global CDR configuration. Command Mode All configuration modes Syntax show iptv cdr Example The following example shows the global CDR configuration: zte(cfg-nas)#show iptv cdr :disabled CDR State...
Page 251: Show Iptv Client
The fields are described in the following table. Field Description MaxClientNum The maximum number of users CurClientNum Number of current users HisClientNum Number of history users 4.11.53 show iptv rule Purpose This command shows IPTV rule information. 4-191 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 252 ZXR10 2900E Series Command Reference Command Mode All configuration modes Syntax show iptv rule [ port <portid>][vlan <1-4094>][channel|chanel-group | package] Parameters Parameter Description port <portid> Port ID. <1-4094> VLAN ID. Shows the channel rule. channel Channel-group Shows the channel group rule.
Page 253: Show Iptv Duplicate
Global configuration mode Command Mode set stp {enable | disable} Parameter Description Parameter Description Enables the STP. enable Disables the STP. disable Guidelines By default, the Multiple Spanning Tree Protocol (MSTP) is enabled. 4-193 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 254: Set Stp Forceversion
ZXR10 2900E Series Command Reference Default The STP is disabled. 4.12.2 set stp forceversion Purpose This command sets the STP force version to MSTP, Rapid Spanning Tree Protocol (RSTP), or STP. Command Mode Global configuration mode Syntax set stp forceversion {mstp | rstp | stp}...
Page 255: Set Stp Port Linktype
Default The port connection type is set to point-to-point. 4.12.5 set stp port packettype Purpose This command sets the format of the packets received or sent on ports. Command Mode Global configuration mode 4-195 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 256: Set Stp Port Pcheck
ZXR10 2900E Series Command Reference Syntax set stp port <portlist> packettype {IEEE | CISCO | HUAWEI | HAMMER | extend } Parameter Description Parameter Description <portlist> Port list. IEEE. IEEE Cisco. CISCO Huawei. HUAWEI Hammer. HAMMER Non-standard protocol. It extends the MSTP protocol packets.
Page 257: Set Stp Port Bpdu-Guard
Default The BPDU protection function is disabled. Example The following example enables the BPDU protection function for port 2: zte(cfg)#set stp port 2 bpdu-guard enable 4.12.8 set stp bpdu-interval Purpose This command sets the interval for BPDU protection recovery. Command Mode...
Page 258: Set Stp Trunk Enable/Disable
ZXR10 2900E Series Command Reference Parameter Description Parameter Description <10-65535> Interval. The units is seconds. Guidelines After port recovery, implement the BPDU protection function immediately. If a BPDU message is received, the ports are disconnected. Default The interval is 100 seconds.
Page 259: Set Stp Trunk Linktype
Command Mode Global configuration mode Syntax set stp trunk <trunklist> packettype {IEEE | CISCO | HUAWEI | HAMMER | extend } Parameter Description Parameter Description <trunklist> Trunk list. IEEE. IEEE Cisco. CISCO Huawei. HUAWEI 4-199 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 260: Set Stp Edge-Port
ZXR10 2900E Series Command Reference Parameter Description Hammer. HAMMER Non-standard protocol mode. It extends the MSTP protocol extend packets. Default The default format is IEEE. 4.12.12 set stp edge-port Purpose This command adds or deletes STP edge ports. Command Mode...
Page 261: Set Stp Hellotime
Description Interval (seconds) satisfying: 2* (forwarddelay–1) >= agemax and <1-10> agemax >= 2*(hellotime+1) Default The interval is 2 seconds. Example The following example sets the interval to 1 second: zte(cfg)#set stp hellotime 1 4-201 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 262: Set Stp Forwarddelay
ZXR10 2900E Series Command Reference 4.12.15 set stp forwarddelay Purpose This command sets the minimum switch time for STP protocol status. Command Mode Global configuration mode Syntax set stp forwarddelay <4-30> Parameter Description Parameter Description The minimum switch time (seconds) satisfying: 2 * (forwarddelay <4-30>...
Page 263: Set Stp Hopmax
The maximum hop count Default The maximum hop count is 20. 4.12.18 set stp name Purpose This command sets the MSTP domain name. Command Mode Global configuration mode Syntax set stp name <name> 4-203 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 264: Set Stp Revision
ZXR10 2900E Series Command Reference Parameter Description Parameter Description <name> Domain name Example The following example sets the MSTP domain name to zte-test: zte(cfg)#set stp name zte-test 4.12.19 set stp revision Purpose This command sets the MSTP revision level. Command Mode Global configuration mode Syntax set stp revision <0-65535>...
Page 265: Set Stp Instance Port/Trunk Priority
Devices in a domain have the same corresponding relationship. Example The following example adds VLANs 1, 5, 6, 7 and 12 to instance 1: zte(cfg)#set stp instance 1 add vlan 1,5-7,12 4.12.21 set stp instance port/trunk priority Purpose This command sets the priority of a port or trunks in an instance.
Page 266: Set Stp Instance Port/Trunk Cost
The default priority is 128. Example The following example sets the priority of trunk 1 in instance 1 to 240: zte(cfg)#set stp instance 1 trunk 1 priority 240 4.12.22 set stp instance port/trunk cost Purpose This command sets the path cost of a port or trunks in an instance.
Page 267: Set Stp Instance Port/Trunk Root-Guard
This command enables or disables the loop-guard function of a port or trunks in an instance. Command Mode Global configuration mode Syntax set stp instance <0-63>{port <1-52>| trunk <trunklist>} loop-guard {enable | disable} 4-207 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 268: Set Stp Instance Priority
The ports enabling the loop-guard function cannot forward data. Example The following example enables loop-guard of port 1 in instance 1: zte(cfg)#set stp instance 1 port 1 loop-guard enable 4.12.25 set stp instance priority Purpose This command sets the priority of bridge in instance.
Page 269: Clear Instance
Chapter 4 Service Configuration zte(cfg)#set stp instance 1 priority 4096 4.12.26 clear instance Purpose This command deletes an instance. Command Mode Global configuration mode Syntax clear stp instance <0-63> Parameter Description Parameter Description <0-63> Instance ID Guidelines Instance 0 can not be deleted.
Page 270: Clear Stp Name
ZXR10 2900E Series Command Reference Parameter Description Port number. Different devices have different port number ranges. port <1-52> In the syntax, the 2952E device is used as an example. trunk <1-15> Trunk ID. 4.12.28 clear stp name Purpose This command deletes the MSTP domain name.
Page 271: Show Stp Instance
Parameter Description Instance ID. The command without this parameter shows the <0-63> information about all instances. Example The following example shows the information of instance 0: zte(cfg)#show stp instance 0 RootID: Priority : 49152 Address : 00.d0.d0.07.40.13 HelloTime(s) : 10...
Page 272: Show Stp Port
ZXR10 2900E Series Command Reference 4.12.31 show stp port Purpose This command shows the STP configuration of an port or multiple ports. Command Mode All configuration modes Syntax show stp port [<portlist>] Parameter Description Parameter Description Port list. The command without this parameter shows the STP <portlist>...
Page 273: Acl Configuration
Chapter 4 Service Configuration Parameter Description Parameter Description <trunklist> Trunk list Example The following example shows the STP configuration of trunk 1: zte(cfg)#show stp trunk 1 The following trunk(s) are not active! PortId : T1 MSTI : 00 Priority : 128...
Page 274: Set Port Acl Enable/Disable
ZXR10 2900E Series Command Reference Example The following example sets the ACL binding mode of ports 1, 3, and 5 to VLAN: zte(cfg)#set port 1,3,5 acl mode vlan 4.13.2 set port acl enable/disable Purpose This command enables or disables the binding of an ACL instance to a port or ports.
Page 275: Set Acl Rule Time-Range Enable/Disable
VLANs at the same time. Only ingress ACL instances can be bound with VLANs. Example The following example binds ACL 1 with VLANs 1 to 10: zte(cfg)#set vlan 1-10 acl 1 enable 4.13.4 set acl rule time-range enable/disable Purpose This command enables or disables ACL operations in the specified period.
Page 276: Create Acl Name
ZXR10 2900E Series Command Reference 4.13.5 create acl name Purpose This command creates an ACL name. Command Mode Global configuration mode Syntax create acl <1-828> name <name> Parameter Description Parameter Description <1-828> ACL number <name> ACL name, which contains a maximum of 16 characters Guidelines After ACL names are created, ACL configurations can be displayed by ACL name.
Page 277: Show Port Acl-Mode
Global configuration mode Syntax config ingress-acl basic number <1-99> Parameter Description Parameter Description <1-99> Number of the basic ingress ACL instance 4.13.9 ingress-acl basic rule Purpose This command sets a basic ingress ACL rule. 4-217 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 278: Clear Ingress-Acl Basic
ZXR10 2900E Series Command Reference Command Mode Basic ingress ACL configuration mode Syntax rule <1-500>{permit | deny}{<source-ipaddr><sip-mask>| any}[fragment] Parameter Description Parameter Description <1-500> Rule number. If the condition matches, access is permitted. permit If the condition matches, access is denied.
Page 279: Config Ingress-Acl Extend
This rule is only valid for the messages that have the specified IP <ip-protocol> protocol field. Ignore this rule for other messages. The range of the IP protocol field value is 0 to 255. 4-219 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 280: Ingress-Acl Extend Rule Type-Icmp
ZXR10 2900E Series Command Reference Parameter Description IP address of the source network or host transmitting packets. It is <source-ipaddr> a 32-bit IP address expressed in dotted decimal notation. Source mask used for sources. It is a 32-bit IP address expressed <sip-mask>...
Page 281 The ICMP rule can match ICMP packets with specified source IP addresses, any source IP address, specified destination IP addresses, any destination IP address, ICMP-type fields, ICMP-code fields, DSCP fields, or IP fragment fields. 4-221 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 282: Ingress-Acl Extend Rule Type-Ip
ZXR10 2900E Series Command Reference 4.13.14 ingress-acl extend rule type-ip Purpose This command sets the rule that the extended ingress ACL is used to match IP messages. Command Mode Extended ingress ACL configuration mode Syntax rule <1-500>{permit | deny} ip {<source-ipaddr><sip-mask>| any}{<destination-ipaddr><dip-m ask>| any}[dscp <0-63>][fragment]...
Page 283: Ingress-Acl Extend Rule Type-Tcp
Also the port number and mask can be directly inputted. <sport-mask> Source port number mask. Destination network or host of the transmitted packet. It is a 32-bit <destination-ipaddr> IP address expressed in dotted decimal notation. 4-223 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 284: Ingress-Acl Extend Rule Type-Udp
ZXR10 2900E Series Command Reference Parameter Description Destination mask used for destination. It is a 32-bit IP address <dip-mask> expressed in dotted decimal notation. The any keyword is used as the abbreviation of the destination any (second) 0.0.0.0 and the destination mask 0.0.0.0.
Page 285 The UDP rule can match UDP packets with specified source IP addresses, any source IP address, specified destination IP addresses, any destination IP address, UDP source port numbers, UDP destination port numbers, DSCP fields, or IP fragment fields. 4-225 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 286: Ingress-Acl Extend Rule Type-Arp
ZXR10 2900E Series Command Reference 4.13.17 ingress-acl extend rule type-arp Purpose This command sets the rule that the extended ingress ACL is used to match ARP messages. Command Mode Extended ingress ACL configuration mode Syntax rule <1-500>{permit | deny} arp {<sender-ipaddr><sip-mask>| any}{<target-ipaddr><tip-mask >| any}...
Page 287: Clear Ingress-Acl Extend
<200-299> Parameter Description Parameter Description <200-299> Number of the layer–2 ingress ACL instance 4.13.20 ingress-acl link rule type-ip Purpose This command sets the rule that the layer–2 ingress ACL matches IP packets. 4-227 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 288: Ingress-Acl Link Rule Type-Arp
ZXR10 2900E Series Command Reference Command Mode Layer 2 ingress ACL configuration mode Syntax rule <1-500>{permit | deny} ip {[cos <0-7>][<vlan-id>[<vlan-mask>]][<source-mac><smac-ma sk>| any][<dest-mac><dmac-mask>| any]} Parameter Description Parameter Description <1-500> Rule number. If the condition matches, access is permitted. permit If the condition matches, access is denied.
Page 289: Ingress-Acl Link Rule Type-Other
The ARP rule can match ARP packets with cos fields, VLAN fields, specified source MAC, any source MAC, specified destination MAC, or any destination MAC. 4.13.22 ingress-acl link rule type-other Purpose This command sets the rule that the layer–2 ingress ACL matches the rule except IP/ARP. 4-229 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 290 ZXR10 2900E Series Command Reference Command Mode Layer 2 ingress ACL configuration mode Syntax rule <1-500>{permit | deny} other {[ether-type <1501-65535>| dsap-ssap <0-65535>][co s <0-7>][<vlan-id>[<vlan-mask>]][<source-mac><smac-mask>| any][<dest-mac><dmac-mask>| any]} Parameter Description Parameter Description <1-500> Rule number. If the condition matches, access is permitted.
Page 291: Ingress-Acl Link Rule Type-Any
4094. <vlan-mask> Optional VLAN mask. The default value is 0xfff. Guidelines Any rule can match VLAN field and cos field. 4.13.24 clear ingress-acl link Purpose This command clears a layer–2 ingress ACL instance. 4-231 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 292: Config Ingress-Acl Hybrid
ZXR10 2900E Series Command Reference Command Mode Global configuration mode Syntax clear ingress-acl link number <200-299> Parameter Description Parameter Description <200-299> Number of the layer–2 ingress ACL instance 4.13.25 config ingress-acl hybrid Purpose This command creates hybrid ingress ACL instance and configures it.
Page 293 Ignore this rule for other messages. The rule of VLAN ID is 1 to 4094. <vlan-mask> Optional VLAN mask. The default value is 0xfff. <source-mac> Source MAC address of the transmitted packet. <smac-mask> Source MAC mask. 4-233 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 294: Ingress-Acl Hybrid Rule Type-Ip
ZXR10 2900E Series Command Reference Parameter Description The any keyword is used as the abbreviation of the source MAC any (third) address 00.00.00.00.00.00 and the mask 00.00.00.00.00.00. <dest-mac> Destination MAC address of the transmitted packet. <dmac-mask> Destination MAC mask. The any keyword is used as the abbreviation of the destination any (fourth) MAC address 00.00.00.00.00.00 and the mask 00.00.00.00.00.00.
Page 295: Ingress-Acl Hybrid Rule Type-Tcp
VLAN field, source-specified MAC, any source MAC, destination-specified MAC and any destination MAC. 4.13.28 ingress-acl hybrid rule type-tcp Purpose This command sets the rule that the hybrid ingress ACL matches the IPv4-TCP packet. 4-235 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 296 ZXR10 2900E Series Command Reference Command Mode Hybrid ingress ACL configuration mode Syntax rule <1-500>{permit | deny} tcp {<source-ipaddr><sip-mask>| any}[source-port <0-65535><s port-mask>]{<destination-ipaddr><dip-mask>| any}[dest-port <0-65535><dport-mask>][dscp <0-63>][fragment][cos <0-7>][<vlan-id>[<vlan-mask>]][<source-mac><smac-mask>| any][<de st-mac><dmac- mask>| any] Parameter Description Parameter Description <1-500> Rule number. If the condition matches, access is permitted.
Page 297: Ingress-Acl Hybrid Rule Type-Udp
This command sets the rule that the hybrid ingress ACL matches the IPv4-UDP packet. Command Mode Hybrid ingress ACL configuration mode Syntax rule <1-500>{permit | deny} udp {<source-ipaddr><sip-mask>| any}[source-port <0-65535><s port-mask>]{<destination-ipaddr><dip-mask>| any}[dest-port <0-65535><dport-mask>][dscp 4-237 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 298 ZXR10 2900E Series Command Reference <0-63>][fragment][cos <0-7>][<vlan-id>[<vlan-mask>]][<source-mac><smac-mask>| any][<de st-mac><dmac- mask>| any] Parameter Description Parameter Description <1-500> Rule number. If the condition matches, access is permitted. permit deny If the condition matches, access is denied. This rule is only valid for UDP packet. Other packets ignore this rule.
Page 299: Ingress-Acl Hybrid Rule Type-Arp
This command sets the rule that the hybrid ingress ACL matches the ARP packet. Command Mode Hybrid ingress ACL configuration mode Syntax rule <1-500>{permit | deny} arp {<sender-ipaddr><sip-mask>| any}{<target-ipaddr><tip-mask >| any}[cos <0-7>][<vlan-id>[<vlan-mask>]][<source-mac><smac-mask>| any][<dest-mac><dm ac-mask>| any] Parameter Description Parameter Description <1-500> Rule number. 4-239 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 300 ZXR10 2900E Series Command Reference Parameter Description If the condition matches, access is permitted. permit deny If the condition matches, access is denied. This rule only matches ARP message. Non-ARP message ignores this rule. Sender network or host of the ARP package. It is a 32-bit IP <sender-ipaddr>...
Page 301: Ingress-Acl Hybrid Rule Type-Any
00.00.00.00.00.00 and the mask 00.00.00.00.00.00. <dest-mac> Destination MAC address of the transmitted packet. <dmac-mask> Destination MAC mask. The any keyword is used as the abbreviation of the destination any (four) MAC address 00.00.00.00.00.00 and the mask 00.00.00.00.00.00. 4-241 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 302: Ingress-Acl Hybrid Rule Type-Ipv6-Ip-Protocol
ZXR10 2900E Series Command Reference Guidelines Any rule can match ether-type field, cos field, VLAN field, source-specified MAC, any source MAC, destination-specified MAC and any destination MAC. 4.13.32 ingress-acl hybrid rule type-ipv6-ip-protocol Purpose This command sets the rule that the hybrid ingress ACL matches the packet with IPv6-specified field.
Page 303: Ingress-Acl Hybrid Rule Type-Ipv6-Tcp
Also the port number and mask can be entered. <sport-mask> Source port mask. IPv6 Source network or host of the transmitted package. The <source-ipv6addr> standard IPv6 address format is used, such as abcd:EF12::123 4. 4-243 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 304: Ingress-Acl Hybrid Rule Type-Ipv6-Udp
ZXR10 2900E Series Command Reference Parameter Description Source mask and used for source. It is expressed by an integer. <sipv6-mask> The range is 1 to 128. Matches all source IPv6 addresses, source and source mask are any (first) all 0s.
Page 305 Ignore this rule for other messages. The rule of VLAN ID is 1 to 4094. Guidelines IPv6-UDP rule match source-specified IPv6, source IPv6, destination-specified IPv6, any destination IPv6, UDP source port numbers, UDP destination port numbers, and VLAN fields. 4-245 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 306: Ingress-Acl Hybrid Rule Type-Ipv6-Any
ZXR10 2900E Series Command Reference 4.13.35 ingress-acl hybrid rule type-ipv6-any Purpose This command sets the rule that the hybrid ingress ACL matches the IPv6 packet. Command Mode Hybrid ingress ACL configuration mode Syntax rule <1-500>{permit | deny} ipv6 any {<source-ipv6addr><sipv6-mask>| any}[<destination-ipv 6addr><dipv6-mask>| any][<vlan-id>]...
Page 307: Ingress-Acl Hybrid Rule Type-All
4.13.37 clear ingress-acl hybrid Purpose This command clears the hybrid ingress ACL instance. Command Mode Global configuration mode Syntax clear ingress-acl hybrid number <300-399> Parameter Description Parameter Description <300-399> Hybrid ingress ACL instance 4-247 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 308: Config Ingress-Acl Global
ZXR10 2900E Series Command Reference 4.13.38 config ingress-acl global Purpose This command enters the global ingress ACL instance and configures the instance. Command Mode Global configuration mode Syntax config ingress-acl global 4.13.39 ingress-acl global rule type-ip-protocol Purpose This command sets the rule that the global ingress ACL matches the packet with IPv4-specified field.
Page 309 IP, destination-specified IP, any destination IP, DSCP field, IP fragment field, cos field, VLAN field, source-specified MAC, any source MAC, destination-specified MAC and any destination MAC. The rule can be bound to one or all ports. 4-249 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 310: Ingress-Acl Global Rule Type-Ip
ZXR10 2900E Series Command Reference 4.13.40 ingress-acl global rule type-ip Purpose This command sets the rule that the global ingress ACL matches the IPv4 packet. Command Mode Global ingress ACL configuration mode Syntax rule <1-500>{permit | deny} port {<1-28>| any} ip {<source-ipaddr><sip-mask>| any}{<destinat ion-ipaddr><dip-mask>| any}[dscp <0-63>][fragment][cos <0-7>][<vlan-id>[<vlan-mask>]][<s...
Page 311: Ingress-Acl Global Rule Type-Tcp
This command sets the rule that the global ingress ACL matches the IPv4-TCP packet. Command Mode Global ingress ACL configuration mode Syntax rule <1-500>{permit | deny} port {<1-28>| any} tcp {<source-ipaddr><sip-mask>| any}[source- port <0-65535><sport-mask>]{<destination-ipaddr><dip-mask>| any}[dest-port <0-65535><d 4-251 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 312 ZXR10 2900E Series Command Reference port-mask>][dscp <0-63>][fragment][cos <0-7>][<vlan-id>[<vlan-mask>]][<source-mac><sma c-mask>| any][<dest-mac><dmac-mask>| any] Parameter Description Parameter Description <1-16> Global rule number. If the condition matches, access is permitted. permit deny If the condition matches, access is denied. Binds the global rule to a port. Different devices have different <1-28>...
Page 313: Ingress-Acl Global Rule Type-Udp
This command sets the rule that the global ingress ACL matches the IPv4-UDP packet. Command Mode Global ingress ACL configuration mode Syntax rule <1-500>{permit | deny} port {<1-28>| any} udp {<source-ipaddr><sip-mask>| any}[source-port <0-65535><sport-mask>]{<destination-ipaddr><dip-mask>| any}[dest-port <0-65535><dport-mask>][dscp <0-63>][fragment][cos <0-7>][<vlan-id>[<vlan-mask>]][<sour ce-mac><smac-mask>| any][<dest-mac><dmac-mask>| any] 4-253 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 314 ZXR10 2900E Series Command Reference Parameter Description Parameter Description <1-16> Global rule number. If the condition matches, access is permitted. permit If the condition matches, access is denied. deny Binds the global rule to a port. Different devices have different <1-28>...
Page 315: Ingress-Acl Global Rule Type-Arp
This command sets the rule that the global ingress ACL matches the ARP packet. Command Mode Global ingress ACL configuration mode Syntax rule <1-500>{permit | deny} port {<1-28>| any} arp {<sender-ipaddr><sip-mask>| any}{<target -ipaddr><tip-mask>| any}[cos <0-7>][<vlan-id>[<vlan-mask>]][<source-mac><smac-mask>| an y][<dest-mac><dmac-mask>| any] Parameter Description Parameter Description <1-16> Global rule number. 4-255 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 316 ZXR10 2900E Series Command Reference Parameter Description If the condition matches, access is permitted. permit deny If the condition matches, access is denied. Binds the global rule to a port. Different devices have different <1-28> port number ranges. In the syntax, the 2928E device is used as an example.
Page 317: Ingress-Acl Global Rule Type-Any
This rule is only valid for messages with the specified VLAN ID. <vlan-id> Ignore this rule for other messages. The rule of VLAN ID is 1 to 4094. <vlan-mask> Optional VLAN mask. The default value is 0xfff. 4-257 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 318: Config Egress-Acl Basic
ZXR10 2900E Series Command Reference Parameter Description <source-mac> Source MAC address of the transmitted packet. <smac-mask> Source MAC mask. The any keyword is used as the abbreviation of the destination any (third) 0.0.0.0 and the destination mask 0.0.0.0. <dest-mac> Destination MAC address of the transmitted packet.
Page 319: Clear Egress-Acl Basic
4.13.47 clear egress-acl basic Purpose This command clears a basic egress ACL instance. Command Mode Global configuration mode Syntax clear egress-acl basic number <400-499> Parameter Description Parameter Description <400-499> Number of the basic egress ACL instance 4-259 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 320: Config Egress-Acl Extend
ZXR10 2900E Series Command Reference 4.13.48 config egress-acl extend Purpose This command creates extended egress ACL instance and configures it. Command Mode Global configuration mode Syntax config egress-acl extend number <500-599> Parameter Description Parameter Description <500-599> Number of the extended egress ACL instance 4.13.49 egress-acl extend rule type-ip-protocol...
Page 321: Egress-Acl Extend Rule Type-Icmp
This command sets the rule that the extended ingress ACL is used to match ICMP message. Command Mode Extended egress ACL configuration mode Syntax rule <1-500>{permit | deny} icmp {<source-ipaddr><sip-mask>| any}{<destination-ipaddr><di p-mask>| any}[icmp-type <0-254><icmp-code>][dscp <0-63>][fragment] 4-261 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 322 ZXR10 2900E Series Command Reference Parameter Description Parameter Description <1-500> Rule number. If the condition matches, access is permitted. permit If the condition matches, access is denied. deny This rule only matches ICMP message. Non-ICMP message icmp ignores this rule.
Page 323: Egress-Acl Extend Rule Type-Ip
This rule is only valid for the message with the specified DSCP dscp <0-63> value. Ignore this rule for other messages. The range of DSCP is 0 to 63. This rule is only valid for the fragment message. Non–fragment fragment messages ignore this rule. 4-263 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 324: Egress-Acl Extend Rule Type-Tcp
ZXR10 2900E Series Command Reference Guidelines The IP rule can match IPv4 packets with specified source IP addresses, any source IP address, specified destination IP addresses, any destination IP address, DSCP fields, or IP fragment fields. 4.13.52 egress-acl extend rule type-tcp Purpose This command sets the rule that the extended egress ACL is used to match TCP message.
Page 325: Egress-Acl Extend Rule Type-Udp
This command sets the rule that the extended ingress ACL is used to match UDP message. Command Mode Extended egress ACL configuration mode Syntax rule <1-500>{permit | deny} udp {<source-ipaddr><sip-mask>| any}[source-port <0-65535><s port-mask>]{<destination-ipaddr><dip-mask>| any}[dest-port <0-65535><dport-mask>][dscp <0-63>][fragment] 4-265 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 326 ZXR10 2900E Series Command Reference Parameter Description Parameter Description <1-500> Rule number. If the condition matches, access is permitted. permit If the condition matches, access is denied. deny This rule only matches UDP message. Non-UDP message ignores this rule. IP address of the source network or host transmitting packets. It is <source-ipaddr>...
Page 327: Egress-Acl Extend Rule Type-Arp
(second) 0.0.0.0 and the destination mask 0.0.0.0 Guidelines The ARP rule can match ARP packets with sender-specified IP addresses, IP address of any sender, specified destination IP addresses, or any destination IP address. 4-267 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 328: Clear Egress-Acl Extend
ZXR10 2900E Series Command Reference 4.13.55 clear egress-acl extend Purpose This command clears extended egress ACL instance. Command Mode Global configuration mode Command Mode clear egress-acl extend number <500-599> Parameter Description Parameter Description <500-599> Number of the extended egress ACL instance 4.13.56 config egress-acl link...
Page 329: Egress-Acl Link Rule Type-Arp
The IP rule can match cos fields, VLAN fields, source-specified MACs, and any destination MACs. 4.13.58 egress-acl link rule type-arp Purpose This command sets the rule that the layer–2 egress ACL matches ARP packet. Command Mode Layer 2 egress ACL configuration mode 4-269 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 330: Egress-Acl Link Rule Type-Other
ZXR10 2900E Series Command Reference Syntax rule <1-500>{permit | deny} arp {[cos <0-7>][<vlan-id>[<vlan-mask>]][<dest-mac><dmac-mas k>| any]} Parameter Description Parameter Description <1-500> Rule number. If the condition matches, access is permitted. permit deny If the condition matches, access is denied. This rule is only valid for ARP packet. Non-ARP packet ignores this rule.
Page 331 00.00.00.00.00.00 and mask 00.00.00.00.00.00. Guidelines Other rules can match packets with ether-type fields, dsap-ssap fields, cos fields, VLAN fields, specified source MACs, any source MACs, specified destination MACs, or any destination MACs. 4-271 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 332: Egress-Acl Link Rule Type-Any
ZXR10 2900E Series Command Reference 4.13.60 egress-acl link rule type-any Purpose This command sets the rule that the layer–2 egress ACL matches specified cos and VLAN Command Mode Layer 2 egress ACL configuration mode Syntax rule <1-500>{permit | deny} any [cos <0-7>][<vlan-id>[<vlan-mask>]][<dest-mac><dmac-mas k>| any]...
Page 333: Clear Egress-Acl Link
<700-799> Parameter Description Parameter Description <700-799> Number of the hybrid egress ACL instance 4.13.63 egress-acl hybrid rule type-all Purpose This command sets the rule that the hybrid egress ACL matches all packets. 4-273 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 334: Egress-Acl Hybrid Rule Type-Any
ZXR10 2900E Series Command Reference Command Mode Hybrid egress ACL configuration mode Syntax rule <1-500>{permit | deny} all Parameter Description Parameter Description <1-500> Rule number. If the condition matches, access is permitted. permit If the condition matches, access is denied.
Page 335: Egress-Acl Hybrid Rule Type-Arp
<1-500>{permit | deny} arp {<sender-ipaddr><sip-mask>| any}{<target-ipaddr><tip-mask >| any}[cos <0-7>][<vlan-id>[<vlan-mask>]][<source-mac><smac-mask>| any][<dest-mac><dm ac-mask>| any] Parameter Description Parameter Description <1-500> Rule number. If the condition matches, access is permitted. permit If the condition matches, access is denied. deny 4-275 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 336 ZXR10 2900E Series Command Reference Parameter Description This rule only matches ARP message. Non-ARP message ignores this rule. Sender network or host of the ARP package. It is a 32-bit IP <sender-ipaddr> address expressed in dotted decimal notation. Source mask and used for source. It is a 32-bit IP address <sip-mask>...
Page 337: Egress-Acl Hybrid Rule Type-Ip-Protocol
<0-63> value. Ignore this rule for other messages. The range of DSCP value is 0 to 63. This rule is only valid for fragment messages. For non-fragment fragment messages, this rule is ignored. 4-277 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 338: Egress-Acl Hybrid Rule Type-Ip
ZXR10 2900E Series Command Reference Parameter Description This rule is only valid for the cos-specified messages. Ignore this cos <0-7> rule for other messages. The range of cos is 0 to 7. This rule is only valid for messages with the specified VLAN ID.
Page 339 Destination MAC address of the transmitted packet. <dmac-mask> Destination MAC address of the transmitted packet. The any keyword is used as the abbreviation of the destination any (fourth) MAC address 00.00.00.00.00.00 and mask 00.00.00.00.00.00. 4-279 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 340: Egress-Acl Hybrid Rule Type-Ipv6-Any
ZXR10 2900E Series Command Reference Guidelines IP rule can match IPv4–specified protocol field, source-specified IP, any source IP, destination-specified IP, any destination IP, DSCP field, IP fragment field, cos field, VLAN field, source-specified MAC, any source MAC, destination-specified MAC and any destination MAC.
Page 341: Egress-Acl Hybrid Rule Type-Ipv6-Ip-Protocol
IPv6 address format is used, such as abcd:EF12::1234 Source mask and used for source. It is expressed by an integer. <sipv6-mask> The range is 1 to 128. Matches all source IPv6 addresses, source and source mask are all 0s. 4-281 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 342: Egress-Acl Hybrid Rule Type-Ipv6-Tcp
ZXR10 2900E Series Command Reference Parameter Description The destination network or host address of the transmitted IPv6 <destination-ipv6addr> packet. The standard IPv6 address format is used, such as abcd:EF12::123 4 Destination mask. It is used for destination and represented by <dipv6-mask>...
Page 343: Egress-Acl Hybrid Rule Type-Ipv6-Udp
IPv6, any destination IPv6, TCP source port numbers, TCP destination port numbers, and VLAN fields. 4.13.71 egress-acl hybrid rule type-ipv6-udp Purpose This command sets the rule that the hybrid egress ACL matches IPv6-UDP packets. Command Mode Hybrid egress ACL configuration mode 4-283 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 344 ZXR10 2900E Series Command Reference Syntax rule <1-500>{permit | deny} ipv6 udp {<source-ipv6addr><sipv6-mask>| any}[[source-port <0 -65535><sport-mask>]{<destination-ipv6addr><dipv6-mask>| any}[dest-port <0-65535><dpor t-mask>][<vlan-id>]] Parameter Description Parameter Description <1-500> Rule number. If the condition matches, access is permitted. permit If the condition matches, access is denied.
Page 345: Egress-Acl Hybrid Rule Type-Tcp
The any keyword is used as the abbreviation of the source 0.0.0.0 any (first) and the source mask 0.0.0.0. Destination network or host of the transmitted packet. It is a 32-bit <destination-ipaddr> IP address expressed in dotted decimal notation. 4-285 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 346: Egress-Acl Hybrid Rule Type-Udp
ZXR10 2900E Series Command Reference Parameter Description Destination mask used for destination. It is a 32-bit IP address <dip-mask> expressed in dotted decimal notation. The any keyword is used as the abbreviation of the destination any (second) 0.0.0.0 and the destination mask 0.0.0.0 TCP destination port number of the transmitted packet dest-port <0-65535>...
Page 347 UDP destination port number of the transmitted packet. dest-port <0-65535> The parameters of dest-port can resolve the some known port numbers. Also the port number and mask can be directly inputted. <dport-mask> Destination port mask. 4-287 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 348: Clear Egress-Acl Hybrid
ZXR10 2900E Series Command Reference Parameter Description This rule is only valid for the message with the specified DSCP dscp <0-63> value. Ignore this rule for other messages. The range of DSCP value is 0 to 63. This rule is only valid for fragment messages. For non-fragment fragment messages, this rule is ignored.
Page 349: Move After/Before
16 rules. Guidelines All ACL configuration modes support the sorting command. 4.13.76 clear rule Purpose This command clears one rule of ACL instances. Command Mode All ACL configuration modes Syntax clear rule <1-500> 4-289 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 350: Show Vlan-Range
ZXR10 2900E Series Command Reference Syntax Syntax Description The rule number to be cleared. The global ACL instance only <1-500> supports 16 rules. Guidelines All ACL configuration modes support the command of clearing rules. 4.13.77 show vlan-range Purpose This command shows the best mask configuration when VLAN IDs is configured in batches.
Page 351: Show Acl Blinding
Port list. Shows the ACLs bound to the VLANs. vlan <vlanlist> VLAN list. Example The following example shows the ACL bound to ports 1 to 5: zte(cfg)#show acl binding port 1-5 PortType AclNo ---- ---------- ------- PhyPort 4.13.79 show acl config Purpose This command shows the ACL summary configuration.
Page 352: Show Acl Config Acl-Number/Acl-Name
ZXR10 2900E Series Command Reference Command Mode Global configuration mode Syntax show acl config Guidelines The detailed configuration requires the specified ACL number. Example The following example shows the ACL summary configuration: zte(cfg)#show acl config Total acl number : 800...
Page 353: Config Ingress-Acl User-Define Udb
Syntax config ingress-acl user-define udb <1-15> anchor <0-3>[offset <0-31>][data-length<1-6>] Parameter Description Parameter Description <1-15> User-defined byte. anchor Start location of the user-defined byte. <0-3> The value 0 means disabling the user-defined byte function. 4-293 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 354: Config Ingress-Acl User-Define Udb Description
(the anchor value 1 means that the start location is L2), sets the offset to 2 bytes, and sets the matching data length to 2 bytes: zte(cfg)#config ingress-acl user-define udb 1 anchor 1 offset 2 data-length 2 4.13.82 config ingress-acl user-define udb description Purpose This command sets the description of a user-defined byte.
Page 355: Ingress-Acl User-Define Rule
The mask that Udb1 must match. Udb2 Second user-defined byte. <udb-value> The value that Udb2 must match. <udb-mask> The mask that Udb2 must match. Udb3 Third user-defined byte. <udb-valu> The value that Udb3 must match. 4-295 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 356 ZXR10 2900E Series Command Reference Parameter Description <udb-mask> The mask that Udb3 must match. Udb4 Fourth user-defined byte. <udb-value> The value that Udb4 must match. <udb-mask> The mask that Udb4 must match. Udb5 Fifth user-defined byte. <udb-value> The value that Udb5 must match.
Page 357: Clear Ingress-Acl User-Define
Example The following example sets the action to deny udb1, the udb1 value to 0x01, and the mask to 0xff for rule 1: zte(ingress-user-define-acl)#rule 1 deny udb1 0x01 0xff 4.13.85 clear ingress-acl user-define Purpose This command deletes a user-defined ingress ACL instance.
Page 358: Show Acl Udb
ZXR10 2900E Series Command Reference Command Mode Global configuration mode Syntax clear acl udb <1-15> description Parameter Description Parameter Description <1-15> Serial number of a user defined byte. 4.13.87 show acl udb Purpose This command displays the configurations of user-defined bytes.
Page 359: Clear Acl Description
4.14 QoS Configuration 4.14.1 set qos priority-mapping port default-up Purpose This command sets the default UP priority for a port. Command Mode Global configuration mode Syntax set qos priority-mapping port <1-28> default-up <0-7> 4-299 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 360: Set Qos Priority-Mapping Port Trust-Mode
UNTAG messages use the ports’ default priorities to allocate UP priorities for the messages. Example The following example sets the default UP priority to 2 for port 2: zte(cfg)#set qos priority-mapping port 2 default-up 2 4.14.2 set qos priority-mapping port trust-mode Purpose This command sets a port trust mode.
Page 361: Set Qos Priority-Mapping Port Remark/Remapping
When the port receives a message, it selects a profile to implement the service in trust mode. Example The following example sets port 20 to trust port-profile: zte(cfg)#set qos priority-mapping port 20 trust-mode port-profile 4.14.3 set qos priority-mapping port remark/remapping Purpose This command sets message UP/DSCP remark/remapping based on port. Command Mode...
Page 362: Set Qos Priority-Mapping Qos-Profile Dscp-To-Dscp
0, ..., 63 to 63. Example The following example sets DSCP dscp remapping to map 2 to 20: zte(cfg)#set qos priority-mapping qos-profile dscp-to-dscp 2 to 20 4.14.5 set qos priority-mapping port port-to-profile Purpose This command sets the corresponding relation between a port and profile.
Page 363: Set Qos Priority-Mapping Qos-Profile Dscp/Up-To-Profile
Ports are bound to profile 0. Example The following example binds port 2 to qos-profile 20: zte(cfg)#set qos priority-mapping port 2 port-to-profile qos-profile 20 4.14.6 set qos priority-mapping qos-profile dscp/up-to-profile Purpose This command sets the corresponding relation between DSCP/UP and profile.
Page 364: Set Qos Priority-Mapping Qos-Profile
Profiles 72 to 127 have no binding relations. When the device starts, it initializes as TC 0, DSCP 0, UP 0. Example The following example binds users with priority 2 to qos profile12: zte(cfg)#set qos priority-mapping qos-profile up-to-profile 2 qos-profile 12 4.14.7 set qos priority-mapping qos-profile Purpose This command sets a QoS profile template.
Page 365: Set Qos Priority-Mapping Qos-Profile Default
The following example sets the QoS profile 100 drop priority to yellow, DSCP priority to 5, user priority to 2, and TC to 2: zte(cfg)#set qos priority-mapping qos 100 drop-priority yellow zte(cfg)#set qos priority-mapping qos 100 dscp-priority 5 zte(cfg)#set qos priority-mapping qos 100 user-priority 2...
Page 366: Set Qos Queue-Schedule Enhance
ZXR10 2900E Series Command Reference Command Mode Global configuration mode Syntax set qos priority-mapping qos-profile default Guidelines This command will clear all profile configurations. Use caution. The untag message allocates UP fields in accordance with the configuration of default-up. In general, select the corresponding profile to process the message in accordance with trust-mode.
Page 367: Set Qos Queue-Schedule Mode
{byte | packet} Parameter Description Parameter Description Configures the scheduling mode based on byte. byte Configures the scheduling mode based on packet. packet Default The scheduling is based on byte. 4-307 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 368: Set Qos Queue-Schedule Port
ZXR10 2900E Series Command Reference Example The following example sets packet-based scheduling mode for the device: zte(cfg)#set qos queue-schedule mode packet 4.14.11 set qos queue-schedule port Purpose This command sets the scheduling policy of each queue of a port. Command Mode...
Page 369 Their scheduling priorities are as follows: cos7 > cos4 > [cos1, cos2, cos3, cos5, and cos6 are mixed into group WRR0. The priority is 1, and they are scheduled in the 1:2:3:1:2 proportion.] > cos0 4-309 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 370: Set Qos Traffic-Limit Mode
1:2, queues 4 and 5 are scheduled in accordance with 2:4, and other queues are scheduled in accordance with SP: zte(cfg)#set qos queue-schedule session 1 0 10 20 0 20 40 0 0 zte(cfg)#show qos queue-schedule session 1...
Page 371: Set Qos Traffic-Limit Port Packet-Type
The rate limit function is enabled for the specified packet type. Example The following example enables rate limit for broadcast packet in the ingress direction for port 2: zte(cfg)#set qos traffic-limit port 2 packet-type broadcast enable 4-311 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 372: Set Qos Traffic-Limit Fe-Port Data-Rate
The following example sets the ingress rate limit to 100 kbps ( or 100 kpps) for port 2 (the unit is determined by ingress rate limit mode configured in global configuration mode): zte(cfg)#set qos traffic-limit fe-port 2 data-rate 100 4.14.16 set qos traffic-limit fe-port packet-rate Purpose This command sets the ingress rate limit for an FE port.
Page 373: Set Qos Traffic-Limit Ge-Port Data-Rate
Example The following example sets the ingress rate limit to 100 pps and packet length to 64 bytes for port 2: zte(cfg)#set qos traffic-limit fe-port 2 packet-rate 100 packet-length 64 4.14.17 set qos traffic-limit ge-port data-rate Purpose This command sets the ingress rate limit for a GE port.
Page 374: Set Qos Traffic-Limit Ge-Port Packet-Rate
The following example sets the ingress rate limit to 1000 kbps ( or 1000 kpps) for port 25 (the unit is determined by ingress rate limit mode configured in global configuration mode): zte(cfg)#set qos traffic-limit ge-port 25 data-rate 1000 4.14.18 set qos traffic-limit ge-port packet-rate Purpose This command sets the ingress rate limit for a GE port.
Page 375: Set Qos Traffic-Limit Xge-Port Data-Rate
Example The following example sets the ingress rate limit to 1000 pps and packet length to 64 bytes for port 25: zte(cfg)#set qos traffic-limit ge-port 25 packet-rate 1000 packet-lenth 64 4.14.19 set qos traffic-limit xge-port data-rate Purpose This command sets the ingress rate limit for a 10 GB port.
Page 376: Set Qos Traffic-Limit Xge-Port Packet-Rate
Example The following example sets the ingress rate limit to 10000 pps and packet length to 64 bytes for port 2/1: zte(cfg)#set qos traffic-limit xge-port 2/1 packet-rate 10000 packet-lenth 64 4.14.21 set qos traffic-limit port percent Purpose This command sets the percent of the ingress rate limit to the physical bandwidth for a port.
Page 377: Set Qos Traffic-Limit Port Protect
Example The following example sets the percent of the ingress rate limit to the physical bandwidth to 50 for port 2: zte(cfg)#set qos traffic-limit port 2 percent 50 4.14.22 set qos traffic-limit port protect Purpose This command sets port protection. When the traffic on the port exceeds the rate limit, the port is shut down and becomes unavailable for a specified period.
Page 378: Set Qos Traffic-Limit Port Trap
2 protect enable The following example enables rate limit protection for port 2 and sets the duration when the port is unavailable to 5 minutes: zte(cfg)#set qos traffic-limit port 2 protect time 5 4.14.23 set qos traffic-limit port trap Purpose This command enables the trap function for a port.
Page 379: Set Qos Traffic-Shaping Fe-Port Data-Rate
2 data-rate 1000 burst-size 8 4.14.25 set qos traffic-shaping fe-port queue data-rate Purpose This command sets the egress shaping rate for an FE port based on queue. Command Mode Global configuration mode 4-319 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 380: Set Qos Traffic-Shaping Ge-Port Data-Rate
The following example sets the egress shaping limit to 1000 kbps and burst size to 32 KBytes for queue 2 on port 2: zte(cfg)#set qos traffic-shaping fe-port 2 queue 2 data-rate 1000 burst-size 8 4.14.26 set qos traffic-shaping ge-port data-rate Purpose This command sets the egress shaping limit for a GE port.
Page 381: Set Qos Traffic-Shaping Ge-Port Queue Data-Rate
Example The following example sets the egress shaping limit to 2 Mbps and burst size to 32 KBytes for port 25: zte(cfg)#set qos traffic-shaping ge-port 25 data-rate 2 burst-size 8 4.14.27 set qos traffic-shaping ge-port queue data-rate Purpose This command sets the egress shaping rate for a GE port based on queue.
Page 382: Set Qos Traffic-Shaping Xge-Port Data-Rate
The following example sets the egress shaping limit to 2 Mbps and burst size to 32 KBytes for queue 2 on port 25: zte(cfg)#set qos traffic-shaping ge-port 25 queue 2 data-rate 2 burst-size 8 4.14.28 set qos traffic-shaping xge-port data-rate Purpose This command sets the egress traffic-shaping rate for a 10 GB port.
Page 383: Set Qos Traffic-Shaping Xge-Port Queue Data-Rate
Example The following example sets the egress shaping limit to 2 Mbps and burst size to 32 KBytes for port 2/1: zte(cfg)#set qos traffic-shaping xge-port 2/1 data-rate 2 burst-size 8 4.14.29 set qos traffic-shaping xge-port queue data-rate Purpose This command sets the queue-based egress traffic-shaping rate for a 10 GB port.
Page 384: Set Anti-Dos
ZXR10 2900E Series Command Reference zte(cfg)#set qos traffic-shaping xge-port 2/1 queue 2 data-rate 2 burst-size 8 4.14.30 set anti-dos Purpose This command enables or disables the anti-DOS function. Command Mode Global configuration mode Syntax set anti-DoS {enable | disable} Parameter Description...
Page 385: Show Qos Priority-Mapping Qos-Profile
Example The following example shows the priority mapping configurations of all ports: zte(cfg)#show qos priority-mapping port Port Priority Mapping Table: Flags: DefaultUP - Port Default User Priority, PortProfile - Port Qos Profile RemarkUP - Enable/Disable Remark Packet UP in accordance with...
Page 386 ZXR10 2900E Series Command Reference Parameter Description Shows the DSCP remapping rule. dscp-to-dscp dscp-to-profile Shows the binding rule between DSCP and qos-profile. Shows the binding rule between t up and qos-profile. up-to-profile Guidelines The command without parameters shows the configurations of all the 128 profiles.
Page 387: Show Qos Queue-Schedule Mode
UP-0 /*omitted*/ 4. The following example shows the binding rule between up and qos-profile: zte(cfg)#show qos priority-mapping qos-profile up-to-profile UP To QoS Profile Mapping Table: Flags: UsrPri - Packets User Priority, QosIndex - Priority Mapping Profile TrafficClass - Local Traffic Class, DropPri - Local Drop Priority...
Page 388: Show Qos Queue-Schedule Port
ZXR10 2900E Series Command Reference 4.14.34 show qos queue-schedule port Purpose This command shows the scheduling policies of a port’s queues. Command Mode All configuration modes Syntax show qos queue-schedule port <1-28> Parameter Description Parameter Description Port number. Different devices have different port number ranges.
Page 389: Show Qos Traffic-Limit
Chapter 4 Service Configuration Example The following example shows all queues’ scheduling policy template configurations: zte(cfg)#show qos queue-schedule session Egress Queue Schedule Profile Table: Session ID : Profile-1 Schedule Mode : byte mode queue number queue weight Session ID : Profile-2...
Page 390: Show Qos Traffic-Limit Protect
ZXR10 2900E Series Command Reference Example The following example shows the ingress rate limit configuration: zte(cfg)#show qos traffic-limit Port Ingress Traffic Limit Table: Byte Mode Flags: DataRate - traffic limit rate, BcEn - Enable Broadcast Limit KucEn - Enable Known unicast Limit, McEn - Enable Multicast Limit...
Page 391: Show Qos Traffic-Limit Trap
Port number. The range varies with the device type. Use the <1-28> 2928E as an example. Example The following example shows port trap configuration of port 1: zte(cfg)#show qos traffic-limit port 1 trap PORT Trap Status port-1 Disable 4.14.39 show qos traffic-shaping Purpose This command shows the egress shaping configuration.
Page 392: Show Anti-Dos
ZXR10 2900E Series Command Reference Parameter Description Parameter Description Port number. Different devices have different port number ranges. <1-28> In the syntax, the 2928E device is used as an example. Example The following example shows the egress shaping configuration of port 1:...
Page 393: Set Qos Policer Mode
The following example sets a flow policer to color-sensitive mode, cir=64, cbs=20000, pir=128, and pbs=30000: zte(cfg)#set qos policer 0 mode aware cir 64 cbs 20000 pir 128 pbs 30000 policer 0:the real configured cir is 64Kbps,cbs is 20000Bytes,pir is 128Kbps, pbs is 30000Bytes 4.14.42 set qos policer exceed-action...
Page 394: Set Qos Policer Exceed-Action Remark Profile
ZXR10 2900E Series Command Reference Syntax set qos policer <0-383> exceed-action red {no-operation | drop | remark} yellow {no-operation | drop | remark} Parameter Description Parameter Description Flow policer ID. 0 to 255 are used for ingress ACLs. 256 to 383 <0-383>...
Page 395: Set Qos Policer Counter-Mode
The statistics includes preamble, IPG, L2, L3, Data, and Cyclic Redundancy Check (CRC). The statistics includes L2, L3, Data, and CRC. The statistics includes L3 and Data. Guidelines Take flow statistics by byte. 4-335 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 396: Set Qos Policer Counter
ZXR10 2900E Series Command Reference 4.14.45 set qos policer counter Purpose This command enables or disables the statistics function of a flow policer and binds the flow policer to a counter. Command Mode Global configuration mode Syntax set qos policer <0-383> counter <0-383>{enable | disable}...
Page 397: Set Policy Remark Ingress-Acl
10 user-priority 2 zte(cfg)#set qos priority-mapping qos-profile 10 drop-priority green zte(cfg)#set qos policer 10 mode aware cir 32 cbs 20000 ebs 40000 policer 10: the real configured cir is 32Kbps,cbs is 20000Bytes,ebs is 40000Bytes zte(cfg)#set qos policer 10 exceed-action red remark yellow remar...
Page 398: Set Policy Remark Egress-Acl
ZXR10 2900E Series Command Reference Parameter Description Parameter Description <1-399,800-828> Ingress ACL number. <1-500> Rule number of the ingress ACL. <0-127> qos-profile template number. qos-profile does not modify UP/DSCP fields, but egress ACLs can no-change modify UP/DSCP fields. qos-profile can modify UP/DSCP fields.
Page 399: Set Mirror Analyze-Port Session
This command mirrors the specified flow to the specified port. Command Mode Global configuration mode Syntax set policy mirror in acl <1-399,800-828> rule <1-500>{cpu | analyze-port} Parameters Parameter Description <1-399,800-828> Ingress ACL number. Only ingress ACLs support flow mirroring. 4-339 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 400: Set Policy Redirect
ZXR10 2900E Series Command Reference Parameter Description <1-500> Rule number of the ingress ACL. Mirrors the specified flow to CPU. Mirrors the specified flow to the flow mirroring monitoring port. analyze-port 4.14.51 set policy redirect Purpose This command redirects the specified flow to the specified port.
Page 401: Set Policy Vlan-Remark
Modifies the tag of tagged messages to the specified VLAN ID. tagged The untagged messages will not be processed. Both untagged messages and tagged messages can be processed. 4-341 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 402: Set Policy Harddrop
ZXR10 2900E Series Command Reference 4.14.54 set policy harddrop Purpose This command sets the specified flows to implement harddrop operations. Command Mode Global configuration mode Syntax set policy harddrop in acl <1-828> rule <1-500> Parameters Parameter Description <1-828> ACL number <1-500>...
Page 403: Clear Policy Policing
This command clears the configuration of the specified flows mirroring to the specified ports. Command Mode Global configuration mode Syntax clear policy mirror in acl <1-399,800-828> rule <1-500> Parameter Description Parameter Description <1-399,800-828> Ingress ACL number <1-500> Rule number of the ACL 4-343 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 404: Clear Policy Statistics
ZXR10 2900E Series Command Reference 4.14.58 clear policy statistics Purpose This command clears the configuration that the specified flows are counted in accordance with the number of packets. Command Mode Global configuration mode Syntax clear policy statistics in acl <1-828> rule <1-500>...
Page 405: Clear Policy Vlan-Remark
This command clears the configuration that the specified flows implement harddrop operations. Command Mode Global configuration mode Syntax clear policy harddrop in acl <1-828> rule <1-500> Parameter Description Parameter Description <1-828> ACL number <1-500> Rule number of the ACL 4-345 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 406: Clear Qos Policy-Counter
ZXR10 2900E Series Command Reference 4.14.62 clear qos policy-counter Purpose This command clears the counter of the specified flow. Command Mode Global configuration mode Syntax clear qos policy-counter <counterlist> Parameter Description Parameter Description <counterlist> Flow counter list, in the range of 0 to 1023 4.14.63 clear qos policer-counter...
Page 407: Show Qos Policer
If the desired flow policer is not configured, a prompt is given. Example The following example shows the configuration of flow policers 0 and 10: zte(cfg)#show qos policer 0 Policer Global Counter Mode : L2 The policer is not existed...
Page 408: Show Qos Policy-Counter
ZXR10 2900E Series Command Reference Committed Information Rate : 32 Committed Information Burstsize: 20000 Excess Information Burstsize: 40000 Exceeded Operation For Red Packets: remark Exceeded Operation For Yellow Packets: remark Profile : 10 enable-modify dscp enable-modify 4.14.66 show qos policy-counter Purpose This command shows the counter of the specified flows.
Page 409: Show Policy
The command without any parameters shows all the binding configurations. Example The following example shows all the binding configurations: zte(cfg)#show policy Total qos policy rule number: 1 --------------------------------------------------------------- set policy policing in acl 1 rule 1 policer 10 4-349 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 410: Set Icmp Protect
ZXR10 2900E Series Command Reference 4.14.69 set icmp protect Purpose This command sets the Internet Control Message Protocol (ICMP) packet protection function. Command Mode Global configuration mode Syntax set icmp protect {enable|disable} Parameters Parameter Description Enables the ICMP packet protection function.
Page 411: Set Qos Traffic-Limit Ge-Port|Fe-Port Protect Time
Port shutdown time. time <1-10> Range: 1 to 10 minutes. Default 10 minutes 4.14.72 show qos traffic-limit protect time Purpose This command shows the port shutdown time when the port rate limit function is enabled. 4-351 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 412: Pvlan Configuration
ZXR10 2900E Series Command Reference Command Mode All configuration modes Syntax show qos traffic-limit [port <1-28>] protect Parameters Parameter Description Number of a port. Different devices have different port number <1-28> ranges. In the syntax, the 2928E device is used as an example.
Page 413: Clear Vlan Pvlan Session
Command Mode Global configuration mode Syntax show vlan pvlan [session <1-4>] Parameter Description Parameter Description <1-4> PLVAN session number 4.15.4 set vlan pvlan session Purpose This command sets only one PVLAN port type. 4-353 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 414: L2Pt Configuration
ZXR10 2900E Series Command Reference Command Mode Global configuration mode Syntax set vlan pvlan session <1-4>{promise-port <portlist>| promise-trunk <trunklist>|isolate-p ort<portlist>|isolate-trunk<trunklist>|communi-port <portlist>| communi-trunk <trunklis t>} Parameter Description Parameter Description <1-4> PLVAN session number <trunklist> Trunk port list <portlist> Physical port list Guidelines This command sets only one port type.
Page 415: Show L2Pt
0x1c 0x1d, 0x1e, 0x1f, 0x20 0x21, 0x22, 0x23, 0x24 0x25, 0x26, 0x27, 0x28 0x29, 0x2a, 0x2b, 0x2c 0x2d, 0x2e, 0x2f 4.17 IPv4 Layer 3 Configuration 4.17.1 ping Purpose This command detects network connectivity. 4-355 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 416: Trace
ZXR10 2900E Series Command Reference Command Mode Global configuration mode Syntax ping <A.B.C.D>[<0-65535>[<28-65535>[<1-255>[<0-65535>[<A.B.C.D>]]]]] Parameter Description Parameter Description <A.B.C.D> Destination IP address <0-65535> (first) Number of times that echo request messages are sent <28-65535> Size of a sent echo request message <1-255>...
Page 417: Set Ipport Enable/Disable
This command enables or disables a layer-3 port. Command Mode Layer-3 configuration mode Syntax set ipport <0-63>{enable | disable} Parameters Parameter Description <0-63> Number of a layer-3 port. Enables the layer-3 port. enable Disables the layer-3 port. disable 4-357 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 418: Set Ipport Ipaddress
ZXR10 2900E Series Command Reference Guidelines The layer-3 ports of the ZXR10 2900E series are used for switch management. It supports application layer protocols such as WEB, SSH, and TELNET. Before enabling a layer-3 port, you must configure the IP address, VLAN, and MAC address. The MAC address is optional.
Page 419: Set Ipport Vlan
VLAN with a new one. To modify the VLAN, disable the layer-3 port first. Example The following example configures a layer-3 port: zte(cfg)#config router zte(cfg-router)#set ipport 0 ipaddress 10.40.88.200/24 zte(cfg-router)#set ipport 0 vlan 1 zte(cfg-router)#set ipport 0 mac 00.d0.d0.f1.11.11 zte(cfg-router)#set ipport 0 enable...
Page 420: Iproute
ZXR10 2900E Series Command Reference 4.17.7 iproute Purpose This command adds a static route. Command Mode Layer-3 configuration mode Syntax iproute {<A.B.C.D/M>|<A.B.C.D>< A.B.C.D>}< A.B.C.D>[<1-15>][description <string>] Parameters Parameter Description <A.B.C.D/M> IP address and mask <A.B.C.D>< A.B.C.D> (first and IP address and mask second) <A.B.C.D>...
Page 421: Arp Delete
Example The following example adds a static ARP entry with the IP address of 192.168.1.167, MAC address of 00.00.00.00.11.22, and corresponding port of layer-3 port 1: zte(cfg-router)#arp add 192.168.1.167 00.00.00.00.11.22 1 4.17.9 arp delete Purpose This command deletes an ARP entry.
Page 422: Arp Gratuitous-Send
ZXR10 2900E Series Command Reference Command Mode Layer-3 configuration mode Syntax arp ipport <0-63> timeout <1-1000> Parameters Parameter Parameter <0-63> Number of a layer-3 port. <1-1000> Aging time (minutes). Guidelines The ARP entry aging time of different layer-3 ports is different.
Page 423: Clear Arp
ARP entries, run the arp delete command. 4.17.13 clear iproute Purpose This command deletes static route entries. Command Mode Layer-3 configuration mode Syntax clear iproute [{<A.B.C.D/M>|<A.B.C.D><A.B.C.D>}<A.B.C.D>] Parameters Parameter Description <A.B.C.D/M> IP address and mask 4-363 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 424: Clear Ipport
ZXR10 2900E Series Command Reference Parameter Description <A.B.C.D><A.B.C.D> IP address and mask <A.B.C.D> Gateway Guidelines This command without parameters deletes all static route entries, but does not delete direct-connect routes. Example The following example deletes all static routes: zte(cfg-router)#clear iproute The following example deletes the static route to the network 192.168.1.0/24 with the...
Page 425: Clear Arp Gratuitous-Send
Default The hardware routing function is disabled. 4.17.17 show arp Purpose This command shows ARP entry information and the free ARP function’s status in accordance with various rules. Command Mode Layer-3 configuration mode 4-365 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 426: Show Ipport
ZXR10 2900E Series Command Reference Syntax show arp [static | dynamic | invalid | ipport <0-63>[static | dynamic | invalid]| ipaddress <A.B.C.D>] Parameters Parameter Description Shows static ARP entries. In general, static ARP entries are static manually added or automatically generated by layer–3 ports.
Page 427: Show Iproute
Class-id Client-id Hostname Lease Clear request: - Dhcp relay configuration as follows: Relay agent : disable Server IP 4.17.19 show iproute Purpose This command shows all routing information. Command Mode Layer-3 configuration mode 4-367 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 428: Show Hardware-Iproute
ZXR10 2900E Series Command Reference Syntax show iproute Example The following example shows all routing information: zte(cfg-router)#show iproute Type IpAddress Mask Gateway Metric IpPort Total: 2 ------ --------------- --------------- --------------- ------ ------ direct 10.40.89.0 255.255.255.0 10.40.89.100 direct 10.85.12.0 255.255.255.0 10.85.12.15 4.17.20 show hardware-iproute...
Page 429: Set Ipv6Port Ipv6Address
1 to 128. <ipv6Addr> IPv6 address, such as 12ab:8CD::12. Length of an IPv6 address prefix, in the range of 1 to 128, for <wildcard> example, 64. 4-369 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 430: Set Ipv6Port Enable/Disable
ZXR10 2900E Series Command Reference 4.18.3 set ipv6port enable/disable Purpose This command enables or disables an IPv6 layer-3 port. Command Mode Layer-3 configuration mode Syntax set ipv6port <0>{enable | disable} Parameter Description Parameter Description <0> Number of an IPv6 layer-3 port. The current value is 0.
Page 431: Clear Ipv6Port
This command clears an IPv6 default route. Command Mode Layer-3 configuration mode Syntax clear ipv6route default 4.18.7 show ipv6port Purpose This command shows the IPv6 layer-3 port configurations. Command Mode All configuration modes 4-371 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 432: Show Ipv6Route
ZXR10 2900E Series Command Reference Syntax show ipv6port Examples zte(cfg-router)#show ipv6port IpPort Status Ipv6AddrNum MacAddress VlanId IpMode ------ ------ --------------- ----------------- ------ ------ 00.d0.d0.00.29.18 static ipv6_addr[0] = 12ab:8cd::12/64 ipv6_addr[1] = 12ab:12cd::1/64 ipv6_addr[2] = 201a::12/48 ipv6_addr[3] = 2001::1/64 ipv6_addr[4] = 2000::1/64 4.18.8 show ipv6route...
Page 433: Ping6
Parameter Description Parameter Description <0> Number of an IPv6 layer-3 port. The current value is 0. Examples The following example shows neighbor information of an IPv6 device: zte(cfg-router)#show ipv6port 0 nd Ipv6Address MacAddress State -------------------------------- ----------------- ---------- fe80::223:cdff:fe9c:e656 00.23.cd.9c.e6.56 stale 2001::23 00.23.cd.9c.e6.56...
Page 434: Dai Configuration
ZXR10 2900E Series Command Reference Default The number of times that echo request messages are sent is 5. The length of IP layer of a sent echo request message is 48 bytes. The TTL value of a sent echo request message is 64.
Page 435: Set Arp-Inspection Vlan Enable/Disable
Disables the DAI function. Default The DAI function is disabled. Example The following example enables the DAI function on VLANs 1 to 4094: zte(cfg)#set arp-inspection vlan 1-4094 enable 4.19.3 set arp-inspection port trust/untrust Purpose This command sets the trusted/untrusted ports. Command Mode...
Page 436: Set Arp-Inspection Port Limit
ZXR10 2900E Series Command Reference Parameter Description Sets the specified ports as untrusted ports. untrust trust Sets the specified ports as trusted ports. Guidelines The trusted ports do not filter ARP messages, meaning that the DAI function is disabled. A port can support the DAI function only when VLAN and the port’s DAI function are both enabled.
Page 437: Show Arp-Inspection
The following example sets the maximum number of ARP messages that port 8 processes in each second to 20: zte(cfg)#set arp-inspection port 8 untrust zte(cfg)#set arp-inspection port 8 limit 20 4.19.5 show arp-inspection Purpose This command shows the configuration of the DAI function.
Page 438: Access Service Configuration
ZXR10 2900E Series Command Reference Trust Trust Trust Trust Trust Trust Trust Trust Trust Trust Trust Trust Trust 4.20 Access Service Configuration 4.20.1 set port vlanjump enable/disable Purpose This command enables or disables the vlanjump function after the 802.1x authentication is passed.
Page 439: Dot1X Re-Authenticate Enable/Disable
The following example sets that the users of ports 1, 3, 5 and 7 can access VLAN 1000 after authentication is passed: zte(cfg)#set vlan 1000 enable zte(cfg)#set port 1,3,5,6 vlanjump enable defaultauthvlan 1000 4.20.2 dot1x re-authenticate enable/disable Purpose This command enables or disables the re-authentication function.
Page 440: Dot1X Quiet-Period
ZXR10 2900E Series Command Reference Command Mode NAS configuration mode Syntax dot1x re-authenticate period <1-4294967295> Parameter Description Parameter Parameter <1-4294967295> Interval (seconds) for re-authentication. Default The interval for re-authentication is 3600 seconds. Example The following example sets the interval for re-authentication to 7200 seconds: zte(cfg-nas)#dot1x re-authenticate period 7200 4.20.4 dot1x quiet-period...
Page 441: Dot1X Tx-Period
120 4.20.6 dot1x supplicant-timeout Purpose This command sets the timeout duration when the authentication system receives a data packet from the authentication client system. Command Mode NAS configuration mode Syntax dot1x supplicant-timeout <1-65535> 4-381 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 442: Dot1X Server-Timeout
ZXR10 2900E Series Command Reference Parameter Description Parameter Description <1-65535> Timeout duration of the authentication client system Default 30 seconds. Example The following example sets the timeout time to 60 seconds: zte(cfg-nas)#dot1x supplicant-timeout 60 4.20.7 dot1x server-timeout Purpose This command sets the timeout duration when the authentication system receives a data packet from the authentication server.
Page 443: Dot1X Add Vlan Mac
<1-4094>[mac <HH.HH.HH.HH.HH.HH>] Parameter Description Parameter Description <1-4094> VLAN ID <HH.HH.HH.HH.HH.HH> MAC address Guidelines This function is used to be compatible with non-standard authentication client systems. Default The default MAC address is 01.d0.d0.ff.ff.ff. 4-383 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 444: Dot1X Delete Vlan
ZXR10 2900E Series Command Reference Example The following example enables users to use the special MAC address 01.d0.d0.00.00.01 when the users are authenticated in VLAN 100: zte(cfg-nas)#dot1x add vlan 100 mac 01.d0.d0.00.00.01 4.20.10 dot1x delete vlan Purpose This command deletes the special destination MAC address used for authentication in the specified VLAN.
Page 445: Clear Client Port/Vlan
{port <portlist>| vlan <vlanlist>} Parameter Description Parameter Description <portlist> Port list <vlanlist> VLAN list 4.20.14 show dot1x Purpose This command shows the dot1x configuration. Command Mode All configuration modes Syntax show dot1x 4-385 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 446: Show Client
ZXR10 2900E Series Command Reference Example The following example shows the dot1x configuration: zte(cfg-nas)#show dot1x TxPeriod : 60 QuietPeriod : 120 SuppTimeout : 60 ServerTimeout : 30 ReAuthPeriod: 7200 ReAuthenticate: enabled MaxRequest PrivateVlan : 100 PrivateMac : 01.d0.d0.00.00.01 4.20.15 show client Purpose This command shows the information about all access users.
Page 447: Show Client Mac
MAC address 4.20.18 show client port Purpose This command shows the user information of the specified ports. Command Mode All configuration modes Syntax show client port <portlist> Parameter Parameter Description <portlist> Port list 4-387 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 448: Aaa-Control Port Dot1X
ZXR10 2900E Series Command Reference 4.20.19 aaa-control port dot1x Purpose This command enables or disables the 802.1x access authentication of the specified ports. Command Mode NAS configuration mode Syntax aaa-control port <portlist> dot1x {enable | disable} Parameter Description Parameter Description <portlist>...
Page 449: Aaa-Control Port Protocol
Default eap is selected. Example The following example sets the authentication mode of ports 1, 3, and 5 to chap: zte(cfg-nas)#aaa-control port 1,3,5 protocol chap 4.20.22 aaa-control port accounting Purpose This command enables or disables the port accounting function. 4-389 SJ-20130731155059-003|2013-11-27 (R1.0)
Page 450: Aaa-Control Port Multiple-Hosts
ZXR10 2900E Series Command Reference Command Mode NAS configuration mode Syntax aaa-control port <portlist> accounting {enable | disable} Parameters Parameter Description <portlist> Port list. enable Enables the port accounting function. Disables the port accounting function. disable Default The port accounting function is disabled.
Page 451: Aaa-Control Port Max-Hosts
Chapter 4 Service Configuration Example The following example enables multiuser access for ports 1, 3, and 5: zte(cfg-nas)#aaa-control port 1,3,5 multiple-hosts enable 4.20.24 aaa-control port max-hosts Purpose This command sets the maximum number of access users to the specified ports.
Page 452: Aaa-Control Port Keepalive Period
ZXR10 2900E Series Command Reference Command Mode NAS configuration mode Syntax aaa-control port <portlist> keepalive {enable | disable} Parameter Description Parameter Description <portlist> Port list. Enables abnormal offline detection. enable Disables abnormal offline detection. disable Default Abnormal offline detection on ports is disabled.
Page 453: Aaa-Control Port Keepalive Antiproxy Add/Delete
Example The following example sets the period of abnormal offline detection on ports 1, 3, and 5 to 3600 seconds: zte(cfg-nas)#aaa-control port 1,3,5 keepalive period 3600 4.20.27 aaa-control port keepalive antiproxy add/delete Purpose This command enables or disables the port anti-deception rule.
Page 454: Aaa-Control Port Keepalive Antidhcp
The port anti-deception function is disabled. Example The following example limits ports 1, 3, and 5 to modify IP addresses: zte(cfg-nas)#aaa-control port 1,3,5 keepalive antiproxy add ip-modified 4.20.28 aaa-control port keepalive antidhcp Purpose This command enables or disables the port anti-DHCP deception function.
Page 455: Show Aaa-Control Port
The function of getting users’ IP addresses is disabled. Example The following example enables ports 1, 3, and 5 to get users’ IP addresses: zte(cfg-nas)#aaa-control port 1,3,5 keepalive client-ip enable 4.20.30 show aaa-control port Purpose This command shows the aaa configuration of the specified ports.
Page 456: Radius Isp
ZXR10 2900E Series Command Reference PortId PortControl : auto Dot1x : enabled AuthenticationProtocol: chap KeepAlive : enabled KeepAlivePeriod : 3600 AntiProxy : multi-card ipaddress-modified AntiDhcp : enabled GetClientIp : enabled Accounting : enabled MultipleHosts : enabled MaxHosts HistoryHostsTotal OnlineHosts: 0 4.20.31 radius isp...
Page 457: Radius Isp Add/Delete Authentication
Example The following example adds the accounting server with the IP address of 10.40.89.78 to the ISP domain named as test. The default port number is used. zte(cfg-nas)#radius isp test add accounting 10.40.89.78 4.20.33 radius isp add/delete authentication Purpose This command adds/deletes an authentication server to/from the specified ISP domain.
Page 458: Radius Isp Client
ZXR10 2900E Series Command Reference Default The default UDP port is 1812. Example The following example adds the authentication server with the IP address of 10.40.89.78 to the ISP domain named as test. The default port number is used. zte(cfg-nas)#radius isp test add authentication10.40.89.78 4.20.34 radius isp client...
Page 459: Radius Isp Sharedsecret-Encrypt
Example The following example sets the shared password of the ISP domain named as test to radius-interactive: zte(cfg-nas)#radius isp test sharedsecret radius-interactive 4.20.36 radius isp sharedsecret-encrypt Purpose This command configures the encrypted shared key in an ISP domain.
Page 460: Radius Isp Fullaccount
ZXR10 2900E Series Command Reference Guidelines The shared key, challenge, username, and password are encrypted through an algorithm to generate cryptograph used for communication between a RADIUS server and client. The encrypted shared key is displayed in ciphertext in the show radius command output.
Page 461: Radius Isp Defaultisp
Full account authentication is disabled. Example The following example enables full account authentication in the ISP domain named as test: zte(cfg-nas)#radius isp test fullaccount enable 4.20.38 radius isp defaultisp Purpose This command enables or disables the specified ISP domain as the default ISP.
Page 462: Radius Isp Description
ZXR10 2900E Series Command Reference 4.20.39 radius isp description Purpose This command sets description information of the specified ISP domain. Command Mode NAS configuration mode Syntax radius isp <ispname> description <string> Parameters Parameter Parameter <ispname> ISP name <string> Description information of the specified ISP domain 4.20.40 radius nasname...
Page 463: Radius Delimiter
<0-4294967295> Parameter Parameter Description Saving time of accounting packages that fail to be sent. The unit <0-4294967295> is seconds. Default The default setting is 0, which means the saving time is not limited. 4-403 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 464: Radius Timeout
ZXR10 2900E Series Command Reference 4.20.43 radius timeout Purpose This command sets the retransmission interval of remote authentication requests. Command Mode NAS configuration mode Syntax radius timeout <1-255> Parameter Parameter Description <1-255> Retransmission interval (seconds) Default The retransmission interval is 3 seconds.
Page 465: Radius Vendor-Id
This command deletes the RADIUS accounting packages that fail to be transmitted. Command Mode NAS configuration mode Syntax clear accounting-stop {session-id <session-id>| user-name <user-name>| isp-name <isp-n ame>| server-ip <A.B.C.D>} Parameters Parameter Description <session-id> Deletes by session ID. <user-name> Deletes by user name. 4-405 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 466: Show Radius
ZXR10 2900E Series Command Reference Parameter Description <isp-name> Deletes by ISP name. <A.B.C.D> Deletes by ISP server’s IP address. 4.20.47 show radius Purpose This command shows the RADIUS configuration. Command Mode All configuration modes Syntax show radius [ispname <ispname>] Parameter...
Page 467: Show Radius Accounting-Stop
This command adds/deletes the customer ports of QinQ. Command Mode Global configuration mode Syntax set vlan qinq customer port <portlist>{enable | disable} Parameter Description Parameter Description <portlist> Port list. Adds customer ports. enable 4-407 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 468: Set Vlan Qinq Uplink Port
Deletes customer ports. disable Example The following example configures ports 1, 2, 3, and 4 as customer ports: zte(cfg)#set vlan qinq customer port 1-4 enable 4.21.2 set vlan qinq uplink port Purpose This command adds/deletes the uplink ports of QinQ.
Page 469: Set Vlan Ingress-Tpid Session
<0xHHHH> egress-tpid value Example The following example sets the egress-tpid of template 7 to 0x8910: zte(cfg)#set vlan egress-tpid sesion 1 tpid-value 0x8910 4.21.4 set vlan ingress-tpid session Purpose This command sets an ingress-tpid template. Command Mode Global configuration mode Syntax set vlan ingress-tpid session <1-7>...
Page 470: Set Port Ingress-Tpid
ZXR10 2900E Series Command Reference Syntax set port <portlist> egress-tpid {default | session <1-7>} Parameter Description Parameter Description <portlist> Port list. The ports use the default egress-tpid value. default <1-7> Number of the template to be bound to the ports.
Page 471: Show Vlan Egress-Tpid
4.21.8 show vlan ingress-tpid Purpose This command shows ingress-tpid values of templates. Command Mode Global configuration mode Syntax show vlan ingress-tpid Example The following example shows ingress-tpid values of all templates: zte(cfg)#show vlan ingress-tpid 4-411 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 472: Show Vlan Qinq
ZXR10 2900E Series Command Reference INGRESS TPID PROFILE TABLE: SessionId TPID --------- -------- 0x8100 0xaaaa 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 4.21.9 show vlan qinq Purpose This command shows the customer/uplink ports of QinQ. Command Mode Global configuration mode Syntax...
Page 473: Set Syslog Level
Disables the syslog function. disable Example The following example enables the syslog function of all modules: zte(cfg)#set syslog module all enable 4.22.2 set syslog level Purpose This command sets the level of syslog information. Command Mode Global configuration mode...
Page 474: Set Syslog Add Server
ZXR10 2900E Series Command Reference Parameter Description alerts Level 2, error to be corrected immediately critical Level 3, critical error errors Level 4, errors to be noticed warnings Level 5, warnings probably with some mistakes notifications Level 6, notifications to be noticed...
Page 475: Set Syslog Delete Server
<1-5> ID of the syslog server to be deleted. Example The following example deletes the syslog server whose ID is 1: zte(cfg)#set syslog delete server 1 4.22.5 set syslog enable/disable Purpose This command enables or disables the syslog function. Command Mode...
Page 476: Show Syslog Status
ZXR10 2900E Series Command Reference Default The syslog function is disabled. Example The following example enables the syslog function: zte(cfg)#set syslog enable 4.22.6 show syslog status Purpose This command shows the syslog configuration. Command Mode Global configuration mode Command Mode...
Page 477: Ntp Configuration
Authentication ID, ranging from 1 to 255. <string> md5 authentication code, containing 1 to 16 characters. Example The following example sets the NTP authentication key to zte: zte(cfg)#set ntp add authentication-key 1 md5 zte 4-417 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 478: Set Ntp Delete Authentication-Key
ZXR10 2900E Series Command Reference 4.23.2 set ntp delete authentication-key Purpose This command deletes the NTP authentication key. Command Mode Global configuration mode Syntax set ntp delete authentication-key <1-255> Parameter Parameter Description <1-255> Authentication ID, ranging from 1 to 255.
Page 479: Set Ntp Authenticate
Disables the NTP authentication function. disable Default The NTP authentication function is disabled. Example The following example enables the NTP authentication function: zte(cfg)#set ntp authenticate en 4.23.5 set ntp server Purpose This command sets the NTP server. Command Mode Global configuration mode Syntax set ntp server <A.B.C.D>[version <1,2,3>| key <1-255>]...
Page 480: Set Ntp Second-Server
ZXR10 2900E Series Command Reference Parameter Description key <1-255> Authentication ID. Example The following example sets the IP address of the NTP server to 202.10.10.10 and the protocol version number to 2: zte(cfg)#set ntp server 202.10.10.10 version 2 4.23.6 set ntp second-server Purpose Configure the NTP second-server.
Page 481: Set Ntp Source
4.23.8 set ntp clock-period Purpose This command sets the NTP time synchronization period. Command Mode Global configuration mode Syntax set ntp clock-period <5-2147483647> Parameter Parameter Description <5-2147483647> Time synchronization period (seconds) Default 10 seconds. 4-421 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 482: Set Ntp Timezone
ZXR10 2900E Series Command Reference 4.23.9 set ntp timezone Purpose This command sets the timezone to which the NTP belongs. Command Mode Global configuration mode Command Mode Global configuration mode set ntp timezone <(-12)-(+13)> Parameter Parameter Description <(-12)-(+13)> Timezone Guidelines In general, the time synchronized by the NTP is the GMT standard time.
Page 483: Set Ntp Src-Udp-Port
The following example shows the NTP configuration: zte(cfg)#show ntp ntp protocol is enabled ntp server address : 10.40.89.78 ntp source address : None ntp second server protocol version ：2 ntp second server address :192.168.1.1 ntp second server key :100 4-423 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 484: Garp/Gvrp Configuration
ZXR10 2900E Series Command Reference ntp source udp port : 1000 ntp is_synchronized : No ntp rcv stratum : 16 no reference clock. ntp clock-period : 10 ntp time zone ntp authenticate : enabled keyid encryption trust key ----- ---------- ----- ----------- 4.24 GARP/GVRP Configuration...
Page 485: Set Garp Enable/Disable
The following example configures VLANs 2 and 4 to permit dynamically adding ports 2 and 4, and configures VLANs 3 and 5 to forbid dynamically adding ports 3 and 5: zte(cfg)#set vlan 2,4 permit port 2,4 zte(cfg)#set vlan 3,5 forbid port 3,5 zte(cfg)#show vlan VlanType: 802.1q vlan...
Page 486: Set Garp Timer
ZXR10 2900E Series Command Reference Parameter Description Parameter Description enable Enables the GARP function disable Disables the GARP function Default The GARP function is disabled. 4.24.3 set garp timer Purpose This command sets the GARP timer. Command Mode Global configuration mode Syntax set garp timer {hold | join | leave | leaveall}<timer_value>...
Page 487: Show Garp
4.24.5 set gvrp enable/disable Purpose This command enables or disables the GVRP function. Command Mode Global configuration mode Syntax set gvrp {enable | disable} Parameter Description Parameter Description enable Enables the GVRP function. 4-427 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 488: Set Gvrp Port/Trunk Enable/Disable
ZXR10 2900E Series Command Reference Parameter Description disable Disables the GVRP function. Default The GVRP function is disabled. 4.24.6 set gvrp port/trunk enable/disable Purpose This command enables or disables the GVRP on the specified ports/trunks. Command Mode Global configuration mode Syntax set gvrp {port <portlist>| trunk <trunklist>}{enable | disable}...
Page 489: Show Gvrp
All configuration modes Syntax show gvrp Example The following example shows the GVRP configuration: zte(cfg)#show gvrp GVRP is enabled! PortId Status Registration LastPduOrigin ------ -------- ------------ ----------------- Disabled Normal 00.00.00.00.00.00 Disabled Normal 00.00.00.00.00.00 4-429 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 490: Dhcp Configuration
ZXR10 2900E Series Command Reference 4.25 DHCP Configuration 4.25.1 set dhcp snooping-and-option82 enable/disable Purpose This command globally enables or disables the DHCP snooping and option82 functions. Command Mode Global configuration mode Syntax set dhcp snooping-and-option82 {enable | disable} Parameter Description...
Page 491: Set Dhcp Port Server/Cascade/Client
The DHCP snooping function is disabled on ports/trunks. Example The following example enables the DHCP snooping function on port 10: zte(cfg)#set dhcp snooping add port 10 DHCP snooping-and-option82 is disabled (0x40000cf0) zte(cfg)#set dhcp snooping-and-option82 enable zte(cfg)#set dhcp snooping add port 10 4.25.3 set dhcp port server/cascade/client...
Page 492: Set Dhcp Trunk Server/Default
ZXR10 2900E Series Command Reference Guidelines DHCP Request messages received by ports set to cascade and client are forwarded to ports set to server. DHCP Offer messages received by ports set to cascade and client are dropped. DHCP Offer messages received by ports set to server are forwarded to ports set to cascade and client.
Page 493: Set Dhcp Snooping Bind-Entry Mac Ip Vlan Port
Example The following example enables the ip-source-guard function for ports 9 and 10: zte(cfg)#set dhcp ip-source-guard add port 9-10 Fail to enable ip source guard on port 9. DHCP snooping is disabled on this port (0x40000cea) zte(cfg)#set dhcp snooping add port 9 zte(cfg)#set dhcp ip-source-guard add port 9-10 4.25.6 set dhcp snooping bind-entry mac ip vlan port...
Page 494: Set Dhcp Snooping Bind-Entry Mode
ZXR10 2900E Series Command Reference Syntax set dhcp snooping bind-entry mac <HH.HH.HH.HH.HH.HH> ip <A.B.C.D> vlan <1-4094> port <1-28> Parameter Description Parameter Description <HH.HH.HH.HH.HH.HH> MAC address of the DHCP client device. <A.B.C.D> IP address that the DHCP server allocates to the client.
Page 495: Set Dhcp Option82 Add/Delete
Disables the option82 function. delete port <portlist> Port list. trunk <trunklist> Trunk list. 4.25.9 set dhcp option82 sub-option device Purpose This command sets the device identification information of a node used for option82. 4-435 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 496: Set Dhcp Option82 Sub-Option
Guidelines The device identification information can be used to locate the specified switch in the user positioning procedure. Example The following example sets option82 ani to zte-test: zte(cfg)#set dhcp option82 sub-option device ani zte-test 4.25.10 set dhcp option82 sub-option Purpose This command sets the sub option of DHCP option82.
Page 497: Set Dhcp Option82 Mode Port
Value of the sub option. <string> Character string. Disables the sub option. 4.25.11 set dhcp option82 mode port Purpose This command sets the binding mode of entries for a port. Command Mode Global configuration mode 4-437 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 498: Clear Dhcp Snp-Bind-Entry Mac
ZXR10 2900E Series Command Reference Syntax set dhcp option82 mode port <portlist>{default | drop | modify | append} Parameter Description Parameter Description <portlist> Port list. Default mode. In this mode, option82 in a packet is not modified. default Drop mode. In this mode, a packet with option82 is discarded.
Page 499: Clear Dhcp Option82 Sub-Option Device Ani
DHCP snooping-and-option82 is enableDHCP snooping-and-option82 is enabled. PortId PortType Snooping Option82 ------ -------- -------- -------- Client Disabled Disabled Client Disabled Disabled Client Disabled Disabled Client Disabled Disabled Client Disabled Disabled Client Disabled Disabled 4-439 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 500: Show Dhcp Snooping
ZXR10 2900E Series Command Reference Client Disabled Disabled Client Disabled Disabled Client Enabled Disabled Cascade Enabled Enabled /*Omitted*/ Server Disabled Enabled DHCP client is disabled. 4.25.15 show dhcp snooping Purpose This command shows the global configuration of DHCP snooping. Command Mode...
Page 501: Show Dhcp Ip-Source-Guard
This command without a port number shows all DHCP snooping entries. Example The following example shows all DHCP snooping entries: zte(cfg)#show dhcp snooping binding DHCP snooping binding table: used = 1, capacity = 256 Hold mode is configured on the following port(s): 10...
Page 502: Show Dhcp Option82 Port
ZXR10 2900E Series Command Reference Command Mode All configuration modes Syntax show dhcp option82 Example The following example shows the configuration of DHCP option82: zte(cfg)#show dhcp option82 DHCP option82 is enabled on the following port(s): PortId PortType ------ -------- Cascade Server 4.25.19 show dhcp option82 port...
Page 503: Show Dhcp Option82 Device
Command Mode All configuration modes Syntax show dhcp option82 device Example The following example shows the current device information: zte(cfg)#show dhcp option82 device DHCP option82 sub-option information on device: Access-Node-Identifier: - Remote-ID: Cisco 4.25.21 set dhcp client enable/disable Purpose This command enables or disables the DHCP client function.
Page 504: Set Dhcp Client Broadcast-Flag Enable/Disable
ZXR10 2900E Series Command Reference Syntax set dhcp client {enable | disable} Parameter Description Parameter Description Enables the DHCP client function. Layer-3 ports can apply for IP enable addresses automatically. Disables the DHCP client function. disable Default The DHCP client function is disabled.
Page 505: Set Ipport Ipaddress Dhcp
DHCP clients can get IP addresses only. Other parameters such as MAC and VLAN require manual configuration. 4.25.25 set ipport ipaddress dhcp release/renew Purpose This command releases/renews the IP address of a layer-3 port. Command Mode Layer-3 configuration mode 4-445 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 506: Set Ipport Dhcp Client Class-Id/Client-Id/Hostname/Lease
ZXR10 2900E Series Command Reference Syntax set ipport <0-63> ipaddress dhcp {release | renew} Parameter Description Parameter Description <0-63> Number of the layer-3 port. release Releases the IP address of the layer-3 port. Renews the IP address of the layer-3 port.
Page 507: Set Ipport Dhcp Client Request
4.25.28 set ipport dhcp relay agent Purpose This command sets an IP port as a DHCP relay agent. Command Mode Layer 3 interface configuration mode Syntax set ipport <0-63> dhcp relay agent 4-447 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 508: Set Ipport Dhcp Relay Server
ZXR10 2900E Series Command Reference Parameter Description Parameter Description <0-63> Layer 3 interface port 4.25.29 set ipport dhcp relay server Purpose This command sets the address of a DHCP relay server located on an IP port. Command Mode Layer 3 interface configuration mode Syntax set ipport <0-63>...
Page 509: Clear Ipport Dhcp Client Class-Id/Client-Id/Hostname/Lease
This command clears the configuration of requesting the DHCP server to return various information. Command Mode Layer-3 configuration mode Syntax clear ipport <0-63> dhcp client request {dns-server | domain-name | route | static-route | tftp -server-name} 4-449 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 510: Set Dhcp Snooping Bind-Entry Database Read
ZXR10 2900E Series Command Reference Parameter Description Parameter Description <0-63> Number of a layer-3 port DNS server address dns-server Domain name server address domain-name Default route route Static route static-route tftp server address tftp-server-name 4.25.33 set dhcp snooping bind-entry database read Purpose This command reads the DHCP binding table from the Flash memory.
Page 511: Set Dhcp Snooping Bind-Entry Database Time-Write
Scheduled Time. 4.25.36 set dhcp snooping bind-entry database write Purpose This command writes the DHCP binding table into the Flash memory. Command Mode Global configuration mode Syntax set dhcp snooping bind-entry database write 4-451 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 512: Show Dhcp Snooping Database
ZXR10 2900E Series Command Reference 4.25.37 show dhcp snooping database Purpose This command shows the configuration related to the DHCP database. Command Mode Global configuration mode Syntax show dhcp snooping database Example zte(cfg)#show dhcp snooping database DHCP snooping database recovery:...
Page 513: Set Dhcp Snooping Vlan Enable/Disable
Command Mode Global configuration mode Syntax set dhcp snooping quota <0-8191> Parameter Description Parameter Description <0-8191> Quota of the binding table supported by DHCP snooping globally Default By default, the quota is not limited. 4-453 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 514: Set Dhcp Snooping Vlan Quota
By default, the quota is not limited. Example The following example sets the quota of the binding table supported by DHCP snooping to 100 in VLAN 1: zte(cfg)# set dhcp snooping vlan 1 quota 100 zte(cfg)#show dhcp snooping quota DHCP snooping global quota no limit...
Page 515: Set Dhcp Snooping Port Quota
Global configuration mode Syntax set dhcp snooping vlan <vlanlist> port <1-28> quota <0-8191> Parameter Description Parameter Description <vlanlist> VLAN list. <1-28> Port number. The range varies with device types. <0-8191> Quota of the binding table. 4-455 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 516: Show Dhcp Snooping Quota
ZXR10 2900E Series Command Reference Default By default, the quota is not limited. 4.25.44 show dhcp snooping quota Purpose This command displays the configurations related to a DHCP quota (the configurations related to a DHCP quota based on a port is displayed in the show dhcp snooping command).
Page 517: Set Dhcpv6 Snooping Add/Delete
Disables the DHCPv6 snooping function. delete port <portlist> Port list. Guidelines To make the snooping function effective on the specified ports, globally enable the snooping function and then enable the snooping function on the specified ports. 4-457 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 518: Set Dhcpv6 Port Server/Cascade/Client
ZXR10 2900E Series Command Reference Default The DHCPv6 snooping function is disabled. Examples The following example enables the DHCPv6 Snooping function on port 10: zte(cfg)#set dhcpv6 snooping add port 1 DHCP v6 snooping is disabled (0x40000927) zte(cfg)#set dhcpv6 sn zte(cfg)#set dhcpv6 snooping en zte(cfg)#set dhcpv6 snooping add port 1 4.26.3 set dhcpv6 port server/cascade/client...
Page 519: Set Dhcpv6 Ip-Source-Guard Add/Delete/Quota
Examples The following example enables the ip-source-guard function for ports 9 and 10: zte(cfg)#set dhcpv6 ip-source-guard add port 9-10 Fail to enable ip v6 source guard on port 9. DHCP v6 snooping is disabled on this port (0x4000092a) zte(cfg)#set dhcpv6 snooping add port 9-10 zte(cfg)#set dhcpv6 ip-source-guard add port 9-10 4.26.5 set dhcpv6 option18 enable/disable...
Page 520: Set Dhcpv6 Option18 Add/Delete
ZXR10 2900E Series Command Reference Command Mode Global configuration mode Syntax set dhcpv6 option18 {enable | disable} Parameter Description Parameter Description Enables the DHCPv6 option18 function. enable Disables the DHCPv6 option18 function. disable Guidelines Before enabling the DHCPv6 option18 function on a port, globally enable the DHCPv6 option18 function.
Page 521: Set Dhcpv6 Option37 Enable/Disable
This command enables or disables the DHCPv6 option37 function for the specified ports. Command Mode Global configuration mode Syntax set dhcpv6 option37{add | delete} port <portlist> Parameter Description Parameter Description Enables the DHCPv6 option37 function. Disables the DHCPv6 option37 function. delete 4-461 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 522: Set Dhcpv6 Option82 Enable/Disable
ZXR10 2900E Series Command Reference Parameter Description port <portlist> Port list. 4.26.9 set dhcpv6 option82 enable/disable Purpose This command globally enables or disables the DHCPv6 option82 function. Command Mode Global configuration mode Syntax set dhcpv6 option82 {enable | disable} Parameter Description...
Page 523: Set Dhcpv6 Option82 Ani
Guidelines The device identification information can be used to locate the specified switch in the user positioning procedure. Examples The following example configures the option82 ani to zte-lsj: zte(cfg)#set dhcpv6 option82 ani zte-lsj 4.26.12 set dhcpv6 option82 sub-option Purpose This command sets a sub-option of option82.
Page 524: Clear Dhcpv6 Snp-Bind-Entry Mac
ZXR10 2900E Series Command Reference Syntax set dhcpv6 option82 sub-option port < portlist>{circuit-ID {on {cisco | china-tel | dsl-forum| key <string>}| off}| subscriber-ID {on <string>| off}| reserve {on tag <1-255> value <string>| off}} Parameters Parameter Description <portlist> Port list. Adds a circuit-ID sub-option.
Page 525: Clear Dhcpv6 Option82 Ani
Disabled Disabled Disabled Client Disabled Disabled Disabled Disabled Disabled Client Disabled Disabled Disabled Disabled Disabled Client Disabled Disabled Disabled Disabled Disabled Client Enabled Enabled Disabled Disabled Disabled Client Enabled Enabled Disabled Disabled Disabled 4-465 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 526: Show Dhcpv6 Snooping
ZXR10 2900E Series Command Reference Client Disabled Disabled Disabled Disabled Disabled Client Disabled Disabled Disabled Disabled Disabled /*Omitted*/ 4.26.16 show dhcpv6 snooping Purpose This command shows the global configuration of DHCPv6 snooping. Command Mode All configuration modes Syntax show dhcpv6 snooping...
Page 527: Show Dhcpv6 Ip-Source-Guard
This command without a port number shows all DHCPv6 snooping entries. Example The following example shows all the DHCPv6 snooping entries: zte(cfg)#show dhcpv6 snooping binding DHCP v6 snooping binding table: used = 0, capacity = 2048 DHCP v6 snooping binding table is empty.
Page 528: Show Dhcpv6 Option82 Port
ZXR10 2900E Series Command Reference zte(cfg)#show dhcpv6 option82 DHCP v6 option82 is enabled on the following port(s): PortId PortType ------ -------- Client 4.26.20 show dhcpv6 option82 port Purpose This command shows the configuration of DHCPv6 option82 on the specified port.
Page 529: Show Dhcpv6 Option18
All configuration modes Syntax show dhcpv6 option82 ani Example The following example shows the identification information of the current device: zte(cfg)#show dhcpv6 option82 ani AccessNodeIdentifier: lsj 4.26.22 show dhcpv6 option18 Purpose This command shows the configuration of DHCPv6 option18. Command Mode...
Page 530: Vbas Configuration
ZXR10 2900E Series Command Reference Syntax show dhcpv6 option37 Example The following example shows the configuration of DHCPv6 option37: zte(cfg)#show dhcpv6 option37 DHCP v6 option37 is enabled on the following port(s): PortId PortType ------ -------- Client 4.27 VBAS Configuration 4.27.1 set vbas trust-port enable/disable...
Page 531: Set Vbas Cascade-Port Enable/Disable
Default Ports are disabled as VBAS cascade ports. Example The following example enables port 8 as a VBAS cascade port: zte(cfg)#set vbas cascade-port 8 enable 4.27.3 set vbas enable/disable Purpose This command enables or disables the VBAS function. Command Mode...
Page 532: Show Vbas
ZXR10 2900E Series Command Reference Parameters Parameter Description Enables the VBAS function. enable Disables the VBAS function. disable Default The VBAS function is disabled. 4.27.4 show vbas Purpose This command shows the VBAS configuration. Command Mode All configuration mode Syntax...
Page 533: Set Pppoe-Plus Tag-Format
< string > stands '\' , which contains a maximum of 128 characters. Example The following example sets the PPPoE+ tag format of port 1 to cisco: zte(cfg)#set pppoe-plus tag-format port 1 cisco 4-473 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 534: Set Pppoe-Plus Rid
ZXR10 2900E Series Command Reference 4.28.3 set pppoe-plus rid Purpose This command adds or deletes the rid information of a port. Command Mode Global configuration mode Syntax set pppoe-plus rid <portlist>[<string>] Parameters Parameter Description Port list. <portlist> Rid character string which contains a maximum of 63 characters.
Page 535: Show Pppoe-Plus
Syntax show pppoe-plus port<1-28> Parameter Description Parameter Description Port number. Different devices have different port number ranges. <1-28> Example The following example shows the remote ID of port 2: zte(cfg)#show pppoe-plus port 2 4-475 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 536: Set Pppoe-Plus Mode Port
ZXR10 2900E Series Command Reference PPPoE VST remote ID on port 2: port2 4.28.7 set pppoe-plus mode port Purpose This command sets the mode of handling dynamic user information on a port. Command Mode Global configuration mode Syntax set pppoe-plus mode port < portlist>{default | drop | modify }...
Page 537: Clear Zesr Ctrl-Vlan Protect-Instance
Protection instance ID in a ZESR domain, range: 1–16. Example The following example binds control VLAN1 to MSTP instance 1 in a ZESR domain: zte(cfg)#set zesr ctrl-vlan 1 protect-instance 1 4.29.2 clear zesr ctrl-vlan protect-instance Purpose This command release binding between a VLAN and an STP instance.
Page 538: Set Zesr Ctrl-Vlan Level Seg Role Master/Transit
The following example sets port 1/2 as the primary port and 1/4 as the secondary port on a master node in a ZESR control VLAN: zte(cfg)#set zesr ctrl-vlan 10 major-level role mas primary-port 1/2 secondary-port 1/4 4.29.4 set zesr ctrl-vlan level seg role master/transit Purpose This command sets a node in a segment.
Page 539: Set Zesr Ctrl-Vlan Level Seg Role Edge-Assistant/Edge-Control
The following example sets port 1/2 as a primary port and 1/4 as a secondary port on a node in a ZESR control VLAN: zte(cfg)#set zesr ctrl-vlan 10 level 1 seg 1 role mas primary-port 1/2 secondary-port 1/4 4.29.5 set zesr ctrl-vlan level seg role edge-assistant/edge-control Purpose This command sets a node in a segment.
Page 540: Set Zesr Ctrl-Vlan Major-Level Preforward
Edge trunk ID, range: 1–15. Example The following example sets port 1/2 as an dge-control node in a ZESR control VLAN: zte(cfg)#set zesr ctrl-vlan 10 level 1 seg 1 role edge-control edge-port 1/2 4.29.6 set zesr ctrl-vlan major-level preforward Purpose This command sets the preforward time and preup time of a major-level ring.
Page 541: Set Zesr Link-Hello
The following example sets the preforward time to 11 and preup time to 1 for a node in level 1 segment 1 VLAN 1 in a ZESR control VLAN: zte(cfg)#set zesr ctrl-vlan 1 level 1 seg 1 preforward 11 preup 1 4.29.8 set zesr link-hello...
Page 542: Set Zesr Link-Hello Hello-Interval
Time-out period of link-hello packets, default: 5. Example The following example sets the interval of sending link-hello packets on port 1/1: zte(cfg)#set zesr link-hello hello-interval 10 fail-times 5 4.29.10 set zesr protocol-mac Purpose This command sets the mode of destination MAC addresses in protocol packets.
Page 543: Set Zesr Restart-Time
Chapter 4 Service Configuration Example The following example sets the mode of destination MAC addresses in protocol packets to special: zte(cfg)#set zesr protocol-mac special 4.29.11 set zesr restart-time Purpose This command sets the restart time. Command Mode Global configuration mode Syntax set zesr restart-time <...
Page 544: Set Zesr Tcn-Sending
ZXR10 2900E Series Command Reference Parameter Description Parameter Description <1-4094> Control VLAN ID in a ZESR domain, range: 1–4094. Enables the TCN sending function. enable Disables the TCN sending function. disable Example The following example enables the TCN sending function in control VLAN 1 in a ZESR...
Page 545: Show Zesr Ctrl-Vlan
Control VLAN ID in a ZESR domain, range: 1–4094. The <1-4094> information about the ZESR domain where the control VLAN ID is located is displayed. Guidelines If no control VLAN is specified, information about all ZESR domains is displayed. 4-485 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 546: Oam Configuration
ZXR10 2900E Series Command Reference 4.30 OAM Configuration 4.30.1 set ethernet-oam enable/disable Purpose This command enables or disables the Operation, Administration and Maintenance (OAM) function globally. Command Mode Global configuration mode Syntax set ethernet-oam {enable | disable} Parameter Description Parameter...
Page 547: Set Ethernet-Oam Port Period Timeout Mode
The OAM function is disabled on ports. Example The following example enables the OAM function on port 1: zte(cfg)#set ethernet-oam port 1 enable 4.30.3 set ethernet-oam port period timeout mode Purpose This command sets the OAM discovery period, timeout duration, and mode on the specified ports.
Page 548: Set Ethernet-Oam Remote-Loopback Timeout
Example The following example sets the sending period of oampdu to 100 milliseconds, timeout duration to 5 seconds, and discovery mode to active: zte(cfg)#set ethernet-oam port 1 period 1 timeout 5 mode active 4.30.4 set ethernet-oam remote-loopback timeout Purpose This command sets the timeout duration of ports’ remote loopback function.
Page 549: Set Ethernet-Oam Remote-Loopback
Local and remote ports cannot forward data messages normally. Example The following example enables the remote loopback function on port 8: zte(cfg)#set ethernet-oam remote-loopback port 8 start zte(cfg)# Thu Jul 1 05:06:48 2004 ETH-OAM starts remote loopback successfully on port 8.
Page 550: Set Ethernet-Oam Org-Specific
Organization code. time-stamp <1-10> Time stamp. The unit is 100 milliseconds. Default The organization code is 00-15-EB, that is, zte. The time stamp is 10. 4.30.7 set ethernet-oam port link-monitor enable/disable Purpose This command enables or disables the link monitoring function.
Page 551: Set Ethernet-Oam Port Link-Monitor Symbol-Period
The link monitoring function is disabled. Example The following example enables the link monitoring function on port 1: zte(cfg)#set ethernet-oam port 1 link-monitor enable 4.30.8 set ethernet-oam port link-monitor symbol-period Purpose This command sets the symbol period event of link monitoring.
Page 552: Set Ethernet-Oam Port Link-Monitor Frame
Example The following example sets the number of incorrect frames to 2 and the time period to 20 seconds: zte(cfg)#set ethernet-oam port 1 link-monitor frame threshold 2 window 20 4.30.10 set ethernet-oam port link-monitor frame-period Purpose This command sets a period event for incorrect frames.
Page 553: Set Ethernet-Oam Port Link-Monitor Frame-Seconds
Example The following example sets the number of incorrect frames to 2 and the number of frames collected in a unit period to 100: zte(cfg)#set ethernet-oam port 1 link-monitor frame-period threshold 2 window 100 4.30.11 set ethernet-oam port link-monitor frame-seconds Purpose This command sets the incorrect frame cumulative event.
Page 554: Show Ethernet-Oam
Example The following example sets the cumulative time of incorrect frames to 10 seconds and the time period to 50 seconds: zte(cfg)#set ethernet-oam port 1 link-monitor frame-seconds threshold 10 window 50 4.30.12 show ethernet-oam Purpose This command shows the global OAM configuration.
Page 555: Show Ethernet-Oam Port
4.30.14 show ethernet-oam port discovery Purpose This command shows the ethernet oam discovery status of ports. Command Mode All configuration modes Syntax show ethernet-oam port <portlist> discovery Parameter Description Parameter Description Port list <portlist> 4-495 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 556: Show Ethernet-Oam Port Statistics
ZXR10 2900E Series Command Reference Example The following example shows the ethernet oam discovery status of port 8: zte(cfg)#show ethernet-oam port 8 discovery PortId 8: ethernet oam enabled Local DTE ----------- Config: Mode : active Period : 10*100(ms) Link TimeOut : 5(s)
Page 557: Show Ethernet-Oam Port Link-Monitor
Parameter Description Parameter Description Port list <portlist> Example The following example shows the ethernet-oam statistics of port 8: zte(cfg)#show ethernet-oam port 8 statistics OAMPDU Counters of Port: 8 TransmitInformation : 7971 ReceiveInformation : 7812 TransmitLoopbackControl : 2 ReceiveLoopbackControl TransmitVariableRequest : 0...
Page 558 ZXR10 2900E Series Command Reference Syntax show ethernet-oam port <portlist> link-monitor Parameter Description Parameter Description Port list <portlist> Example The following example shows the configuration and status of OAM link events on port 8: zte(cfg)#show ethernet-oam port 8 link-monitor Link Monitoring of Port: 8...
Page 559: Sqinq Configuration
When SQinQ is enabled, the uplink and downlink traffics are forwarded in SPVLAN normally. SPVLAN tags on user-side ports are removed. 4.31.2 clear vlan sqinq Purpose This command deletes all SQinQ sessions. Command Mode Global configuration mode Syntax clear vlan sqinq 4-499 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 560: Clear Vlan Sqinq Session
ZXR10 2900E Series Command Reference 4.31.3 clear vlan sqinq session Purpose This command deletes the specified SQinQ session. Command Mode Global configuration mode Syntax clear vlan sqinq session <1-400> Parameter Description Parameter Description <1-400> SQinQ session number 4.31.4 show vlan sqinq Purpose This command shows all SQinQ sessions.
Page 561: Vlan Mapping Configuration
SPVLAN. When reaching the user port, it will be changed to the corresponding CVLAN tag. 4.32.2 clear vlan mapping Purpose This command deletes all VLAN Mapping sessions. Command Mode Global configuration mode 4-501 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 562: Clear Vlan Mapping Session
ZXR10 2900E Series Command Reference Syntax clear vlan mapping 4.32.3 clear vlan mapping session Purpose This command deletes the specified VLAN Mapping session. Command Mode Global configuration mode Syntax clear vlan mapping session <1-400> Parameter Description Parameter Description <1-400> VLAN Mapping session number 4.32.4 clear vlan mapping user...
Page 563: Show Vlan Mapping
4.32.7 show vlan mapping session Purpose This command shows the specified VLAN Mapping session. Command Mode All configuration modes Syntax show vlan mapping session <1-400> Parameter Description Parameter Description <1-400> VLAN Mapping session number 4-503 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 564: Show Vlan Mapping User-Table
ZXR10 2900E Series Command Reference 4.32.8 show vlan mapping user-table Purpose This command shows the user information of all VLAN Mapping sessions. Command Mode All configuration modes Syntax show vlan mapping user-table 4.32.9 show vlan mapping user-table session Purpose This command shows the user information of the specified VLAN Mapping session.
Page 565: Set Protocol-Protect Alarm Enable/Disable
HH> mask <HH.HH.HH.HH.HH.HH> Mask. Example The following example creates a MAC drop rule: zte(cfg)# create protocol-protect mac-drop rule 1 src-mac 00.11.22.33.44.55 mask ff.ff.ff.ff.ff.ff 4.33.2 set protocol-protect alarm enable/disable Purpose This command enables or disables the port-based PP alarm function. Command Mode...
Page 566: Set Protocol-Protect Alarm Threshold
Example The following example sets the alarm threshold of the STP protocol protection on port 1 to 3000: zte(cfg)#set protocol-protect alarm port 1 stp 3000 4.33.4 set protocol-protect limit Purpose This command sets the rate limit value of the protocol packet sent to the CPU that PP allows per second.
Page 567: Set Protocol-Protect Priority
UDLD, IPv4,CFM, and route. <0-800> Protocol rate limit value. Example The following example sets the rate limit of the ZESR protocol per second to 100: zte(cfg)#set protocol-protect limit zesr 100 4.33.5 set protocol-protect priority Purpose This command sets the PP priority. Command Mode...
Page 568: Set Protocol-Protect Mac-Drop Enable/Disable
ZXR10 2900E Series Command Reference 4.33.6 set protocol-protect mac-drop enable/disable Purpose This command enables or disables the MAC drop function. Command Mode Global configuration mode Syntax set protocol-protect mac-drop {disable|enable} Parameter Description Parameter Description enable Enables the MAC drop function.
Page 569: Clear Protocol-Protect Mac-Drop Counter
Chapter 4 Service Configuration Example The following example binds rule 1 with port 2: zte(cfg)#set protocol-protect mac-drop rule 1 bind port 2 4.33.8 clear protocol-protect mac-drop counter Purpose This command clears the counter of packets dropped by the MAC drop function.
Page 570: Clear Protocol-Protect Mac-Drop Rule
ZXR10 2900E Series Command Reference Example The following example clears rule 2 on port 1: zte(cfg)#clear protocol-protect mac-drop port 1 rule 2 4.33.10 clear protocol-protect mac-drop rule Purpose This command clears a MAC drop rule. Command Mode Global configuration mode Syntax clear protocol-protect mac-drop rule [<1-128>]...
Page 571: Show Protocol-Protect Limit
Chapter 4 Service Configuration Example The following example shows the protocol protect statistics on port 1: zte(cfg)#show protocol-protect statistic port 1 Port 1 protocol protect alarm: Enable ProtocolName CurTotalRcvCnt Last30sRcvCnt 30s'Limit ------------------------------------------------------------- 10809 1200 lacp 1200 12332 1200 4.33.12 show protocol-protect limit Purpose This command shows information about the PP protocol rate limit value.
Page 572: Show Protocol-Protect Mac-Drop Port
ZXR10 2900E Series Command Reference Command Mode All configuration modes Syntax show protocol-protect priority Example The following example shows the configuration of packet priorities: zte(cfg)#show protocol-protect priority protocol-type priority protocol-type priority -------------------------------+------------------------------- default lacp default default arp-request default arp-reply default 802.1x...
Page 573: Show Protocol-Protect Mac-Drop Rule
Chapter 4 Service Configuration zte(cfg)#show protocol-protect mac-drop port 1 4.33.15 show protocol-protect mac-drop rule Purpose This command shows a MAC drop rule. Command Mode Global configuration mode Syntax show protocol-protect mac-drop rule [<1-128>] Parameter Description Parameter Description <1-128> Rule index...
Page 574: Lldp Holdtime
ZXR10 2900E Series Command Reference Parameter Description Parameter Description Interval that neighbor discovery packets are sent. The unit is <5-32768> seconds. Default The interval that neighbor discovery packets are sent is 30 seconds. Example The following example sets the interval that LLDP neighbor discovery packets are sent to...
Page 575: Lldp Max-Neighbor
This command enables or disables all LLDP functions on the specified ports. Command Mode Global configuration mode Syntax lldp port <portlist>{enable | disable} Parameter Description Parameter Description <portlist> Port list. Enables the LLDP function. enable 4-515 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 576: Lldp Port Txenable/Txdisable
ZXR10 2900E Series Command Reference Parameter Description Disable the LLDP function. disable Example The following example disables all LLDP functions on port 1: zte(cfg)#lldp port 1 disable 4.34.5 lldp port txenable/txdisable Purpose This command enables or disables the LLDP sending function on the specified ports.
Page 577: Lldp Port Med-Tlv-Select
LLDP-MED TLVs must be disabled before the capabilities TLV is disabled. Example The following example enables the notification function of the LLDP-MED network policy on port 1: zte(cfg)#lldp port 1 med-tlv-select network-policy-tlv enable 4-517 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 578: Lldp Port Max-Neighbor
ZXR10 2900E Series Command Reference 4.34.8 lldp port max-neighbor Purpose This command sets the maximum number of neighbors that the specified ports can discover. Command Mode Global configuration mode Syntax lldp port <portlist> max-neighbor <1-8> Parameter Description Parameter Description <1-8>...
Page 579: Clear Lldp Statistic
The following example clears LLDP global statistics information: zte(cfg)#clear lldp statistic 4.34.11 show lldp config Purpose This command shows LLDP configurations. Command Mode All configuration modes Syntax show lldp config port <portlist> Parameter Description Parameter Description <portlist> Port list 4-519 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 580: Show Lldp Neighbor
ZXR10 2900E Series Command Reference Example The following example shows LLDP global configurations and configurations on port 1: zte(cfg)#show lldp config Global: Lldp hellotime : 30s Lldp holdtime : 120s Lldp maxneighbor: 31 Lldp curneighbor: 0 zte(cfg)#show lldp config port 1...
Page 581: Show Lldp Entry
System Capability :Bridge Switch Management Address:IPv4 - 10.40.89.106, ifIndex - 0, OID – Null 4.34.14 show lldp statistic Purpose This command shows LLDP statistics information. Command Mode All configuration modes Syntax show lldp statistic port <portlist> 4-521 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 582: Mld Configuration
ZXR10 2900E Series Command Reference Parameter Description Parameter Description <portlist> Port list Example The following example shows LLDP statistics information: zte(cfg)#show lldp statistic Global counters: Packets input : 15 Neighbors add : 1 Packets output Neighbors del : 0 Packets error...
Page 583: Set Mld Snp Add/Delete Vlan
All valid VLANs can be snooped. Example The following example sets MLD snooping VLANs 1 to 10: zte(cfg)#set mld snooping add vlan 1-10 4.35.3 set mld snp add maxnum vlan Purpose This command sets the maximum number of multicast groups on the specified VLANs.
Page 584: Set Mld Snp Vlan Add Group
Example The following example adds the statistic multicast group ff1e::22 to VLAN 1 and adds ports 1 to 10 to the static group: zte(cfg)#set mld sn vlan 1 add group ff1e::11 port 1-10 4-524 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 585: Set Mld Snp Vlan Delete Group
The following example deletes the static multicast group ff1e::22 from VLAN 1, and deletes ports 1 to 10 from the static group: zte(cfg)#set mld sn vlan 1 delete group ff1e::11 port 1-10 4.35.6 set mld snp vlan add/delete mrouter port Purpose This command adds/deletes an mrouter port to/from the specified VLAN.
Page 586: Set Mld Snp Host-Time-Out/Mrouter-Time-Out
In the syntax, the 2928E device is used as an example. Example The following example adds port 9 to VLAN 1 as an mrouter port: zte(cfg)#set mld sn vlan 1 add mrouter port 9 4.35.7 set mld snp host-time-out/mrouter-time-out Purpose This command sets the timeout duration of the mrouter/host port.
Page 587: Set Mld Snp Query-Interval
Chapter 4 Service Configuration zte(cfg)#set mld snooping host-time-out 300 4.35.8 set mld snp query-interval Purpose This command sets the time interval that the switch sends query messages. Command Mode Global configuration mode Syntax set mld snooping query-interval <30-65535> Parameter Description...
Page 588: Set Mld Snp Last-Member-Query
ZXR10 2900E Series Command Reference Parameter Description Parameter Description <1000-25000> Waiting time, in the unit of milliseconds. Guidelines When the switch receives query messages, it waits for a period and then sends report messages, which avoids instant attacks to the router due to the centralized replies.
Page 589: Set Mld Snp Query Vlan Enable/Disable
The query function is disabled. Example The following example enables the query function on VLANs 1 to 10: zte(cfg)#set mld snooping query vlan 1-10 enable 4.35.12 set mld snp query version Purpose This command sets the MLD version of the query messages sent by the switch.
Page 590: Set Mld Snp Fastleave Enable/Disable
ZXR10 2900E Series Command Reference Parameter Description 1: sends version 1 query message. <1-2 > 2: sends version 2 query message. Defaults The query messages with version 2 are sent. 4.35.13 set mld snp fastleave enable/disable Purpose This command enables or disables the fastleave function.
Page 591: Set Mld Filter Enable/Disable
Defaults By default, the filter function is disabled. 4.35.16 set mld filter add/delete query Purpose This command adds or deletes the filtering in the specified port and VLAN. Command Mode Global configuration mode 4-531 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 592: Show Mld Snp
VLAN list. Example The following example shows how to add query packet filtering for port 1 and VLAN 1: zte(cfg)#set mld filter add query port 1 vlan 1 4.35.17 show mld snp Purpose This command shows the global configuration of MLD Snooping.
Page 593: Show Mld Snp Vlan
The show mld snooping vlan <1-4094>[ho st-source-filter] command is used to display host-based source filtering information. Example The following example shows the MLD snooping configurations and snooping results of VLAN 1: zte(cfg)#show mld sn vlan 1 MLD Snooping : enable Querier : disable...
Page 594 ----- ---- --------------------------------------- ------- ---------- -------- ff1e::22 0:00:14:05 S:1-10 ff1e::11 0:00:04:52 S:9 The following example shows information based on group ffe::22 in VLAN 1: zte(cfg)#show mld sn vlan 1 group ff1e::22 Vlan ID Group Address : ff1e::22 Host Number : 10...
Page 595: Show Mld Snooping Mr-Port-Info
Command Mode All configuration modes Syntax show mld snooping mr-port-info Example The following example shows multicast information of all ports: zte(cfg)#show mld snooping mr-port-info Index Vlan Port State Version RemainTime ----- ---- ---- ------- ------- ---------- Static 65535 4.35.20 show mld filter query Purpose This command displays the configuration of query packet filtering.
Page 596: Show Mld Filter Query Vlan
ZXR10 2900E Series Command Reference Command Mode All configuration modes Syntax show mld filter query Example The following example displays the configuration of query packet filtering: zte(cfg)#show mld filter query MLD Filter: enabled Index Interface VlanList ----- ----------- ---------------- port 1 4.35.21 show mld filter query vlan...
Page 597: Poe Configuration
4.36.2 show poe config Purpose This command shows PoE configurations. Command Mode All configuration modes Syntax show poe config [port <port list>] Parameter Description Parameter Description <port list> Port number 4-537 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 598: Single-Port Loop Detection Configuration
ZXR10 2900E Series Command Reference Example The following example shows summary configurations on all ports: zte(cfg)#show poe config port | enable | max-power | priority | extend-detection | force-power disable 15.4w disable disable disable 15.4w disable disable disable 15.4w disable...
Page 599: Set Loopdetect Blockdelay
4.37.3 set loopdetect port Purpose This command enables or disables loop detection on the specified ports. Command Mode Global configuration mode Syntax set loopdetect port <portlist>{enable|disable} Parameter Description Parameter Description <portlist> Port list. 4-539 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 600: Set Loopdetect Port Vlan
ZXR10 2900E Series Command Reference Parameter Description Enables PVID loop detection on the specified ports. enable disable Disables loop detection on all VLANs for the specified ports. Guidelines The set loopdetect port command with enable is used to enable loop detection on ports, that is, detect whether there is a loop on the PVID for the ports.
Page 601: Set Loopdetect Port Protect
This command enables or disables the cross-device loop detection on ports. Command Mode Global configuration mode Syntax set loopdetect extend port <portlist>{enable | disable} Parameter Description Parameter Description <portlist> Port list. Enables the cross-device loop detection on ports. enable 4-541 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 602: Set Loopdetect Trunk
ZXR10 2900E Series Command Reference Parameter Description Disables the cross-device loop detection on ports. disable Default The cross-device loop detection is disabled on ports. 4.37.7 set loopdetect trunk Purpose This command enables or disables loop detection on aggregation ports. Command Mode...
Page 603: Set Loopdetect Trunk Protect
Description <trunklist> Trunk port list. Blocks a trunk port when loopback is detected on the port. enable Activates an alarm when loopback is detected on a trunk port, disable without blocking the port. 4-543 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 604: Set Loopdetect Extend Trunk
ZXR10 2900E Series Command Reference Guidelines This command enables or disables trunk port protection when trunk port loopback occurs. If trunk port protection is enabled, a trunk port is blocked when loopback is detected on the port. If trunk port protection is disabled, an alarm is activated when loopback is detected on a trunk port, and the port is not blocked.
Page 605: Show Loopdetect Port
Global configuration mode Syntax show loopdetect port [<portlist>] Parameter Description Parameter Description <portlist> Port list Examples The following example shows the port detection status; zte(cfg)#show loopdetect port 23 PortId : 23 VlanId isLoop isBlock 4-545 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 606: Show Loopdetect Trunk
ZXR10 2900E Series Command Reference ------ ------ ------- For each port, three parameters are displayed: VlanId: VLAN ID. isLoop: indicates whether the port encounters loopback in the VLAN. isBlock: indicates whether the port is blocked in the VLAN. 4.37.13 show loopdetect trunk Purpose This command shows trunk information in loop detection.
Page 607: Udld Configuration
The UDLD protocol is disabled on ports. 4.38.2 udld port mode Purpose This command sets the mode of the specified ports in the UDLD protocol. Command Mode Global configuration mode Syntax udld port <portlist> mode {aggressive | normal} 4-547 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 608: Udld Port Message Timer
ZXR10 2900E Series Command Reference Parameter Description Parameter Description <portlist> Port list Aggressive mode aggressive Normal mode normal Default normal mode. Example The following example sets port 10 to aggressive mode: zte(cfg)#udld port 10 mode aggressive 4.38.3 udld port message timer...
Page 609: Udld Port Recovery Enable/Disable
The UDLD automatic recovery function is disabled. 4.38.5 udld port recovery timer Purpose This command sets the automatic recovery period. Command Mode Global configuration mode Syntax udld port <portlist> recovery timer <10-600> Parameter Description Parameter Description <portlist> Port list 4-549 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 610: Udld Port Reset
ZXR10 2900E Series Command Reference Parameter Description recovery timer <10-600> Link automatic recovery period (seconds) Guidelines When UDLD disables a port, the function that the port creates the link will be automatically recovered after the configured recovery period. Default The link automatic recovery period is 30 seconds.
Page 611: Show Udld Port
Disable Disable 4.38.8 show udld port Purpose This command shows port configurations and neighbor detailed information. Command Mode All configuration modes Syntax show udld port [<portlist>] Parameter Description Parameter Description <portlist> Port list 4-551 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 612: Udld Port Force-Check Enable/Disable
ZXR10 2900E Series Command Reference Guidelines This command is used to display information about all ports or the specified ports. 4.38.9 udld port force-check enable/disable Purpose This command enables or disables the forced UDLD monologue detection function. Command Mode Global configuration mode Syntax udld port <portlist>...
Page 613: Tacacs+ Configuration
The forced UDLD monologue detection period is 30 seconds. Example The following example sets the forced UDLD monologue detection period to 60 seconds for ports 9 and 10: zte(cfg)#udld port 9-10 force-check timer 60 4.39 TACACS+ Configuration 4.39.1 tacacs-plus group enable/disable Purpose This command enables or disables a sever group.
Page 614: Tacacs-Plus Group Add/Delete Host
ZXR10 2900E Series Command Reference Guidelines The system can enable up to five server groups. 4.39.2 tacacs-plus group add/delete host Purpose This command adds/deletes a server to/from a TACACS+ server group. Command Mode NAS configuration mode Syntax tacacs-plus group <group-name>{add|delete} host <A.B.C.D>[<49,1025-65535>|<4-180>|<str ing>]...
Page 615: Tacacs-Plus Loginauthor Default Group
The group must be enabled and has at least one member. 4.39.5 tacacs-plus adminauthen default group Purpose This command sets the default server group of TACACS+ management authentication. Command Mode NAS configuration mode 4-555 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 616: Tacacs-Plus Accounting Commands Default Group
ZXR10 2900E Series Command Reference Syntax tacacs-plus adminauthen default group <group-name> Parameter Description Parameter Description Name of the TACACS+ server group, containing 1 to 31 <group-name> characters. Guidelines The group must be enabled and has at least one member. 4.39.6 tacacs-plus accounting commands default group Purpose This command sets the default server group of TACACS+ command line accounting.
Page 617: Tacacs-Plus Accounting Update Period
Update period (minutes) of TACACS+ accounting users 4.39.9 clear tacacs-plus loginauthen default Purpose This command clears the default server group of TACACS+ login authentication. Command Mode NAS configuration mode Syntax clear tacacs-plus loginauthen default 4-557 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 618: Clear Tacacs-Plus Loginauthor Default
ZXR10 2900E Series Command Reference 4.39.10 clear tacacs-plus loginauthor default Purpose This command clears the default server group authorized by the TACACS+ login. Command Mode NAS configuration mode Syntax clear tacacs-plus loginauthor default 4.39.11 clear tacacs-plus adminauthen default Purpose This command clears the default server group authenticated by the TACACS+ administration.
Page 619: Clear Tacacs-Plus Accounting Update
All configuration modes Syntax show tacacs-plus Example The following example shows TACACS+ configurations: zte(cfg)#show tacacs-plus Loginauthen defaut group: zte Loginauthor defaut group: zte Adminauthen defaut group: zte Accounting commands defaut group: test Accounting exec defaut group: test Accounting update period:...
Page 620: Time Range Configuration
ZXR10 2900E Series Command Reference 10.20.1.23 10.20.1.20 zxr10 GroupName: test IpAddress Port Timeout --------------- ----- ------- -------------------- 10.40.89.78 4.40 Time Range Configuration 4.40.1 set time-range period Purpose This command sets the periodical time-range. Command Mode Global configuration mode Syntax set time-range <word> period <hh:mm> to <hh:mm>{daily | day-off | day-working | monday...
Page 621: Set Time-Range Absolute
4.40.3 clear time-range Purpose This command clears the time-range configurations. Command Mode Global configuration mode Syntax clear time-range <word> Parameter Description Parameter Description Name of the time-range, which contains a maximum of 16 <word> characters. 4-561 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 622: Show Time-Range
ZXR10 2900E Series Command Reference Guidelines The time-range bound to some functions cannot be deleted. To delete this kind of time-range, release the binding first. 4.40.4 show time-range Purpose This command shows the time-range configurations. Command Mode All configuration modes Syntax show time-range [<word>]...
Page 623: Mac Based Vlan Configuration
MAC address are assigned with the corresponding VLAN tags. 4.41.2 clear mac based vlan rule Purpose This command clears a MAC-based-VLAN rule. Command Mode MAC based VLAN configuration mode Syntax clear rule <1-1024> 4-563 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 624: Set Vlan Mac-Based Bind/Unbind
ZXR10 2900E Series Command Reference 4.41.3 set vlan mac-based bind/unbind Purpose This command binds or unbinds a MAC-based VLAN session with the specified ports or all ports. Command Mode Global configuration mode Syntax set vlan mac-based {global |port <portlist>} session <1-64>{bind|unbind}...
Page 625: Show Vlan Mac Based Session Bind
MEP ID, unique within an MA. disable Disables the one-LM function for the MEP. Enables the one-LM function for the MEP. enable Default The one-LM function is disabled. Example The following example enables the one-LM function: 4-565 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 626: Cfm Two-Lm Enable/Disable
ZXR10 2900E Series Command Reference zte(cfg)#cfm md-session 1 ma-session 1 mep-id 1 one-lm enable 4.42.2 cfm two-lm enable/disable Purpose This command enables or disables the two-LM function. Command Mode Global configuration mode Syntax cfm md-session <1-16> ma-session <1-32> mep-id <1-8191> two-lm {enable | disable}...
Page 627: Cfm Ais Enable/Disable
Default The bidirectional DM function is disabled. Example The following example enables the bidirectional DM function: zte(cfg)#cfm md-session 1 ma-session 1 mep-id 1 two-dm enable 4.42.4 cfm ais enable/disable Purpose This command enables or disables the AIS function. Command Mode...
Page 628: Cfm Lck Enable/Disable
ZXR10 2900E Series Command Reference Example The following example enables the AIS function for an MEP: zte(cfg)#cfm md-session 1 ma-session 1 mep-id 1 ais enable 4.42.5 cfm lck enable/disable Purpose This command enables or disables the LCK function. Command Mode...
Page 629: Cfm Relate-To Rmep
Local MEP ID, unique within an MA. relate-to rmep-id <1-8191> Remote MEP ID, unique within an MA. Example The following example associates local MEP 1 with remote MEP 2: zte(cfg)#cfm md-session 1 ma-session 1 mep-id 1 relate-to rmep-id 2 4-569 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 630: Cfm One-Lm Send-Packet
Packet sending interval of one-LM detection. The default value is <1-60> 1 second. Example The following example starts one-LM detection at the default detection intervals: zte(cfg)#cfm md-session 1 ma-session 1 mep-id 1 one-lm send-packet 4.42.9 cfm one-lm send-packet stop Purpose This command stops one-LM detection. Command Mode...
Page 631: Cfm Two-Dm Send-Packet
MA index. <1-8191> MEP ID, unique within an MA. Example The following example stops an ongoing one-LM detection: zte(cfg)#cfm md-session 1 ma-session 1 mep-id 1 one-lm send-packet stop 4.42.10 cfm two-dm send-packet Purpose This command starts bidirectional DM detection. Command Mode...
Page 632: Cfm Two-Dm Send-Packet Stop
MEP ID, unique within an MA. Example The following example stop an ongoing bidirectional DM detection: zte(cfg)#cfm md-session 1 ma-session 1 mep-id 1 two-dm send-packet stop 4.42.12 clear cfm lm/dm Purpose This command clears one-LM, two-LM, or bidirectional DM measurement results.
Page 633: Clear Cfm Relate-Rmep
Chapter 4 Service Configuration Example The following example clears one-LM measurement results: zte(cfg)#clear cfm md-session 1 ma-session 1 mep-id 1 one-lm 4.42.13 clear cfm relate-rmep Purpose This command clears an associated remote MEP. Command Mode Global configuration mode Syntax clear cfm md-session <1-16> ma-session <1-32> mep-id <1-8191> relate-rmep...
Page 634: Create Cfm Md
<0-7> MD level. Example The following example creates cfm md-session 1. The MD level is 1 and the name is zte_1. zte(cfg)#create cfm md-session 1 name zte_1 level 6 4.43.3 create cfm ma Purpose This command creates a CFM MA.
Page 635: Create Cfm Local-Mep
Example The following example creates cfm ma session 1. The name is zte_zte_1, and the MA belongs to md session 1. zte(cfg)#create cfm md-session 1 ma-session 1 name zte_zte_1 4.43.4 create cfm local-mep Purpose This command creates a CFM local MEP.
Page 636: Create Cfm Mip
The following example creates a CFM MEP. The session ID is 1, the MEP ID is 1000, the MEP belongs to MD 1 MA 1, and the direction of the MEP is down. zte(cfg)#create cfm md-session 1 ma-session 1 mep-session 1 mep-id 1000 direction down 4.43.5 create cfm mip Purpose This command creates a CFM Maintenance domain Intermediate Point (MIP).
Page 637: Cfm Primary-Vlan
The following example creates a remote CFM MEP. The session ID is 2, the RMEP ID is 2000, the MEP belongs to MD 1 MA 1. zte(cfg)#create cfm md-session 1 ma-session 1 rmep-session 2 rmep-id 2000 remote-mac 00.50.43.3c.3b.5d 4.43.7 cfm primary-vlan Purpose This command sets the primary VLAN in a CFM MA.
Page 638: Cfm Ccm-Interval
ZXR10 2900E Series Command Reference zte(cfg)#cfm md-session 1 ma-session 1 primary-vlan 100 4.43.8 cfm ccm-interval Purpose This command sets the CCM packet sending interval of a CFM MEP. Command Mode Global configuration mode Syntax cfm md-session <1-16> ma-session <1-32> ccm time-interval <4-7>...
Page 639: Cfm Mep State
Example The following example sets the MEG ID padding mode in md-session 1 ma-session 1 to absent: zte(cfg)#cfm md-session 1 ma-session 1 ccm md-name absent 4.43.10 cfm mep state Purpose This command enables or disables the CFM function for an MEP.
Page 640: Cfm Mep Ccm-Send State
Example The following example enables the CFM function for MEP 1000 in md-session 1 ma-session 1: zte(cfg)#cfm md-session 1 ma-session 1 mep-id 1000 state enable 4.43.11 cfm mep ccm-send state Purpose This command enables or disables the CCM packet sending function for a CFM MEP.
Page 641: Cfm Ccm-Receive State
Example The following example enables the CCM packet sending function for MEP 1000 in md-session 1 ma-session 1: zte(cfg)#cfm md-session 1 ma-session 1 mep-id 1000 ccm-send enable 4.43.12 cfm ccm-receive state Purpose This command sets the CCM packet receiving function for a CFM MEP.
Page 642: Cfm Mep Alarm-Lowest-Priority
Example The following example sets the packet sending priority of MEP 1000 in md-session 1 ma-session 1 to 5: zte(cfg)#cfm md-session 1 ma-session 1 mep-id 1000 priority 5 4.43.14 cfm mep alarm-lowest-priority Purpose This command sets the lowest alarm priority of a CFM MEP.
Page 643: Cfm Mep Assign Port/Trunk
ID of the trunk assigned to the MEP. Example The following example binds port 15 with MEP 1000 in md-session 1 ma-session 1: zte(cfg)#cfm md-session 1 ma-session 1 mep-id 1000 assign port 15 4-583 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 644: Cfm Mip Assign Port/Trunk
The tag of the port or trunk belongs to primary-vlan. Example The following example binds port 1 with MIP session 2 in md-session 1 ma-session 1: zte(cfg)#cfm md-session 1 ma-session 1 mip-session 2 assign port 1 4.43.17 clear cfm md Purpose This command clears all configurations of a CFM MD.
Page 645: Clear Cfm Ma
MD index <1-32> MA index Example The following example clears the configurations of all MAs in md-session 1: zte(cfg)#clear cfm md-session 1 ma-session 4.43.19 clear cfm mep Purpose This command clears all configuration of a CFM MEP. Command Mode Global configuration mode Syntax clear cfm md-session <1-16>...
Page 646: Clear Cfm Mip
MEP ID, unique within an MA. Example The following example clear all configurations of MEP 1000 in md-session 1 ma-session zte(cfg)#clear cfm md-session 1 ma-session 1 mep-id 1000 4.43.20 clear cfm mip Purpose This command clears all configurations of a CFM MIP.
Page 647: Show Cfm Md
<1-16> ma-session [<1-32>] Parameter Description Parameter Description <1-16> MD index <1-32> MA index 4.43.23 show cfm mp Purpose This command shows all configurations of a CFM MP, including MEP and MIP configurations. 4-587 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 648: Show Cfm
ZXR10 2900E Series Command Reference Command Mode Global configuration mode Syntax show cfm md-session <1-16> ma-session <1-32> mp-session [<1-64>] Parameter Description Parameter Description <1-16> MD index. <1-32> MA index. <1-64> MP session ID, including MEP and MIP, unique within a switch.
Page 649: Send Cfm Ltm
The following example initiates an LBM detection in md session 1 ma session 1. The source MEP ID is 1000, and the destination MEP ID is 2000. zte(cfg)#cfm lbm md-session 1 ma-session 1 smep-id 1000 dmep-id 2000 4.43.26 send cfm ltm Purpose This command initiates a linktrace detection.
Page 650: Read Ltm Trans-Id
The following example initiates an LTM detection in md session 1 ma session 1. The source MEP ID is 1000, and the destination MEP ID is 2000. zte(cfg)#cfm ltm md-session 1 ma-session 1 smep-id 1000 dmep-id 2000 4.43.27 read ltm trans-id Purpose This command shows the path tree of an LTM response.
Page 651: Dhcp Relay Configuration
This command globally enables or disables the DHCP relay option82 function. Command Mode Global configuration mode Syntax set dhcp relay option82{enable | disable} Parameter Description Parameter Description Enables the DHCP relay option82 function. enable Disables the DHCP relay option82 function. disable 4-591 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 652: Set Dhcp Relay Option82 Sub-Option Device
The device ID information can be used to locate a specific switch during user positioning process. Example The following example sets relay option82 ani to zte-test: zte(cfg)#set dhcp relay option82 sub-option device ani zte-test 4.44.4 set dhcp relay option82 sub-option Purpose This command sets the Relay option82 sub option.
Page 653: Set Dhcp Relay Option82 Mode Port
This command sets the mode of binding dynamic user information on a port. Command Mode Global configuration mode Syntax set dhcp relay option82 mode port <portlist>{default | drop | modify | append} Parameter Description Parameter Description <portlist> Port list. 4-593 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 654: Set Dhcp Relay Server Mode
ZXR10 2900E Series Command Reference Parameter Description Default mode, in which the option82 attribute in a packet is kept default unchanged. Drop mode, in which the packet carrying the option82 attribute is drop discarded. modify Modify mode, in which the option82 attribute in the packet is replaced by the local option82 attribute.
Page 655: Set Dhcp Relay Server Retry
Specifies that the domain name is in hexadecimal number format. < hex-string> Domain name in hexadecimal number format. <A.B.C.D> IP address bound with the domain. One domain can be configured with up to five server addresses. 4-595 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 656: Clear Dhcp Relay Vclass-Id
ZXR10 2900E Series Command Reference 4.44.9 clear dhcp relay vclass-id Purpose This command clears a configured DHCP relay vclass-id. Command Mode Global configuration mode Syntax clear dhcp relay vclass-id {characters <string>{ server A.B.C.D}| hex-numbers <hex-string >{ server A.B.C.D}} Parameter Description...
Page 657: Show Dhcp Relay
This command shows DHCP relay option60 configurations. Command Mode All configuration modes Syntax show dhcp vclass-id Example The following example shows DHCP relay vclass-id configurations: zte(cfg)#show dhcp relay vclass-id Index Vclass_ID IpAddress ----- -------------------------------------------------- --------------- ztelsj 1.1.1.1 4-597 SJ-20130731155059-003|2013-11-27 (R1.0)
Page 658: Show Dhcp Relay Binding
ZXR10 2900E Series Command Reference 4.44.13 show dhcp relay binding Purpose This command shows DHCP relay binding table information. Command Mode All configuration modes Syntax show dhcp relay binding [port <1-28>| trunk <1-15>] Parameter Description Parameter Description port <1-28> Port number corresponding to a relay table entry.
Page 659: Show Dhcp Relay Option82 Device
Command Mode All configuration modes Syntax show dhcp relay option82 device Example The following example shows device information: zte(cfg)#show dhcp relay option82 device DHCP relay option82 sub-option information on device: Access-Node-Identifier: - Remote-ID: Cisco 4.44.16 set pport dhcp relay Purpose This command sets DHCP relay information on an IP port.
Page 660: Set Dhcp Relay Server Ip
Example The following example sets DHCP relay information on port 3: zte(cfg-router)#set ipport 3 dhcp relay agent zte(cfg-router)#set ipport 3 dhcp relay server 168.1.23.18 4.44.17 set dhcp relay server ip Purpose This command sets a global DHCP Relay server IP address.
Page 661: Set Dhcp Relay Vlan Enable/Disable
4.44.19 clear dhcp relay server Purpose This command deletes a DHCP server IP address. Command Mode Global configuration mode Syntax clear dhcp relay server <A.B.C.D> Parameter Description Parameter Description <A.B.C.D> IP address of the DHCP server 4-601 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 662: Show Dhcp Vlan
ZXR10 2900E Series Command Reference 4.44.20 show dhcp vlan Purpose This command displays the VLANs for which the DHCP relay function is enabled. Command Mode All modes Syntax show dhcp relay vlan Example The following example displays the VLANs for which the DHCP relay function is enabled:...
Page 663: Set Dhcp Hop
Hop limit of a DHCP relay. Example The following example sets the hop limit of a DHCP relay to 10: zte(cfg)#set dhcp hop 10 4.44.23 clear ipport dhcp relay Purpose This command clears the DHCP relay configuration on a port.
Page 664: Mff Configuration
ZXR10 2900E Series Command Reference 4.45 MFF Configuration 4.45.1 set mff vlan add port Purpose This command sets the MFF attribute for ports and VLANs. Command Mode Global configuration mode Syntax set mff vlan <vlanlist> add port <portlist>{userport|network} Parameter Description...
Page 665: Set Mff Vlan Gateway
<ip-addr> mac <mac-addr> vlan <vlan-id> gateway {ip|mac}<address> Parameter Description Parameter Description Sets the address type to IP address. Sets the address type to MAC address. <address> IP address or MAC address. 4-605 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 666: Set Mff Gateway
ZXR10 2900E Series Command Reference 4.45.5 set mff gateway Purpose This command sets an MFF global gateway. Command Mode Global configuration mode Syntax set mff gateway {ip|mac}<address> Parameter Description Parameter Description Sets the address type to IP address. Sets the address type to MAC address.
Page 667: Set Mff Gateway-User-Keepalive
4.45.8 clear mff gateway Purpose This command deletes an MFF global gateway. Command Mode Global configuration mode Syntax clear mff gateway 4.45.9 clear mff vlan gateway Purpose This command deletes an MFF VLAN gateway. 4-607 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 668: Clear Mff Gateway Arp-Keepalive-Port
ZXR10 2900E Series Command Reference Command Mode Global configuration mode Syntax clear mff vlan <vlanlist> gateway 4.45.10 clear mff gateway arp-keepalive-port Purpose This command deletes ports sending MFF gateway ARP keep-alive packets. Command Mode Global configuration mode Syntax clear mff gateway arp-keepalive-port 4.45.11 clear mff gateway user-keepalive-port...
Page 669: Show Mff User-Table
This command shows MFF port configuration. Command Mode Global configuration mode Syntax show mff interface 4.45.15 show mff gateway Purpose This command shows MFF gateway configuration. Command Mode Global configuration mode Syntax show mff gateway 4-609 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 670: Show Mff Gateway-Keepalive-Info
ZXR10 2900E Series Command Reference 4.45.16 show mff gateway-keepalive-info Purpose This command shows MFF gateway-keep-alive information. Command Mode Global configuration mode Syntax show mff gateway-keepalive-info {port} Parameter Description Parameter Description Shows information about the ports sending MFF port gateway-keep-alive packets.
Page 671: Create Ca
(/flash/data/root.cer). The root certificate must be imported and added to the browser operating as the client. Example The following example creates a CA certificate: zte(cfg)#config router zte(cfg-router)#set ipp 1 ip 192.168.100.140/24 zte(cfg-router)#set ipp 1 en zte(cfg-router)#ex zte(cfg)#create ca 192.168.100.140/24 CA FILE for IP "192.168.100.110 "has exsit.
Page 672: Show Ssl
ZXR10 2900E Series Command Reference Serverkeyfile /flash/data/server.key, has created! FS is releasing ,please wait..Done! 4.46.3 show ssl Purpose This command shows SSL server configuration and state. Command Mode Global configuration mode Syntax show ssl Example The following example shows SSL server configuration and state: zte(cfg)#show ssl SSL is enabled.
Page 673: Debug Protocol Dhcp Client Enable/Disable
By default, the debug function of the DHCP client is disabled. 4.47.3 debug protocol dhcp client state ipport Function This command shows the status of an ip port of the DHCP client. Mode Global configuration Syntax debug protocol dhcp client state ipport <0-63> 4-613 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 674: Debug Protocol Dhcp Relay Enable/Disable
ZXR10 2900E Series Command Reference Parameters Parameter Description <0-63> ID of the ip port of the DHCP module. 4.47.4 debug protocol dhcp relay enable/disable Function This command enables or disables the debug function of the DHCP Relay module. Mode Global configuration...
Page 675: Debug Protocol Dhcp Snooping-And-Option82 Enable/Disable
{port <portid>| trunk<trunkid>} Parameters Parameter Description <portid> ID of the physical port whose statistical data needs to be displayed. <trunkid> ID of the trunk port whose statistical data needs to be displayed. 4-615 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 676: Debug Protocol Dhcp Statistics Clear
ZXR10 2900E Series Command Reference 4.47.8 debug protocol dhcp statistics clear Function This command deletes statistical data of all ports on the DHCP. Mode Global configuration Syntax debug protocol dhcp statistics clear 4.47.9 debug protocol dhcp statistics clear Function This command deletes statistical data of a port on the DHCP client.
Page 677: Debug Protocol Layer3 Ip Enable/Disable
The message information to be observed includes the link-mtu parameter of the IP port, MAC address for receiving messages, and size of the messages. 4.47.12 debug protocol layer3 ip port Function This command shows statistical data of all ip ports. Mode Global configuration 4-617 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 678: Debug Protocol Layer3 Arp Enable/Disable
ZXR10 2900E Series Command Reference Syntax debug protocol layer3 ip port 4.47.13 debug protocol layer3 ip port Function This command shows statistical data of an ip port. Mode Global configuration Syntax debug protocol layer3 ip port <portid> Parameters Parameter Description <portid>...
Page 679: Debug Protocol Snmp Enable/Disable
Parameters Parameter Description Enables the debug function for the SNMP protocol. enable Disables the debug function for the SNMP protocol. disable Defaults By default, the debug function for the SNMP protocol is disabled. 4-619 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 680 ZXR10 2900E Series Command Reference This page intentionally left blank. 4-620 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 681: Remote-Access
Only specific IP addresses can manage the switch. The filtering specific function is enabled. Guidelines any/specific is a global switch. When any is selected, the deny configuration based on protocols is not effective. SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 682: Set Remote-Access Ipaddress Permit/Deny
ZXR10 2900E Series Command Reference Default Any IP address can log in to the switch. Example The following example enables all IP addresses to manage the switch: zte(cfg)#set remote-access any 5.1.2 set remote-access ipaddress permit/deny Purpose This command sets whether the specified IP address or network segment can access the switch through SSH/SNMP/Telnet/Web.
Page 683: Clear Remote-Access All
The following example allows the IP address 192.168.0.1 to access the switch through SSH and denies the access through Telnet: zte(cfg)#set remote-access specific zte(cfg)#set remote-access ipaddress 192.168.0.1 255.255.255.0 zte(cfg)#set remote-access ipaddress 192.168.0.1 255.255.255.0 ssh permit zte(cfg)#set remote-access ipaddress 192.168.0.1 255.255.255.0 telnet deny 5.1.3 clear remote-access all Purpose This command deletes the configuration of all IP addresses.
Page 684: Show Remote-Access
ZXR10 2900E Series Command Reference Parameters Parameter Description <A.B.C.D> (first) IP address <A.B.C.D> (second) Mask 5.1.5 show remote-access Purpose This command shows the configuration of remote access. Command Mode All configuration modes Syntax show remote-access Example The following example shows the configuration of remote access:...
Page 685: Privilege Session
<mode> ingress-global-acl, egress-basic-acl, egress-extend-acl, egress-link-acl, egress-hybrid-acl, mac-based-vlan, and ingress-user-define-acl. Rule keyword. At least 1 keyword and up to 10 keywords can <key1-string>[...<key10-string> be configured. SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 686: Clear Privilege
Other commands are grade-10 commands. Example The following example creates a rule of privilege grade 12: zte(cfg)# privilege 12 session 1 part cfg set 5.2.3 clear privilege Purpose This command clears a command privilege rule.
Page 687: Ssh
Parameter Description <0-15> Command grade <1-1024> Rule index Example The following example shows the configuration of rule 1: zte(cfg)#show privilege session 1 Session: 1 Level: 12 Type : part Mode: cfg Rule : set 5.3 SSH 5.3.1 set ssh enable/disable Purpose This command enables or disables the SSH function.
Page 688: Show Ssh
ZXR10 2900E Series Command Reference Command Mode Global configuration mode Syntax set ssh regenerate 5.3.3 show ssh Purpose This command shows the configuration and status of SSH. Command Mode All configuration modes Syntax show ssh Example The following example shows the configuration and status of SSH: zte(cfg)#show ssh SSH is enabled.
Page 689: Set Ssh Sftp Enable/Disable
The SFTP function is disabled. 5.4 SNMP 5.4.1 set engineID Purpose This command sets the device SNMP engine ID. Command Mode SNMP configuration mode Syntax set engineID <string> Parameter Description Parameter Description Engine ID (octet string) <string> SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 690: Set Recvpacket
ZXR10 2900E Series Command Reference 5.4.2 set recvpacket Purpose This command sets the number of SNMP messages that the SNMP protocol stack can process in a second. Command Mode SNMP configuration mode Syntax set recvpacket <0-100> Parameter Description Parameter Description Number of SNMP messages that the SNMP protocol stack can <0-100>...
Page 691: Create Community Public/Private
<1-99> ID of the ingress ACL basic group bound with the community. Example The following example creates a community named as Beijing and sets the attribute to read/write: zte(cfg-snmp)#create community beijing private 5-11 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 692: Create View
ZXR10 2900E Series Command Reference 5.4.5 create view Purpose This command creates a view and specifies whether the view contains a Management Information Base (MIB) subtree. Command Mode SNMP configuration mode Syntax create view < string >[{include | exclude}<mib-oid>] Parameter Description...
Page 693: Clear Community Acl-Rule-Id
Chapter 5 Management Configuration Example The following example sets the ACL rule ID bound with the community named as beijing to 12: zte(cfg-snmp)#set community beijing ingress-acl-basic-number 12 5.4.7 clear community acl-rule-id Purpose This command deletes the ACL rule ID of the specified community.
Page 694: Set Mib1493Compatible Enable/Disable
ZXR10 2900E Series Command Reference Parameter Description View name view<string> Example The following example configures that the view named as bjView contains the community named as beijing: zte(cfg-snmp)#set community beijing view bjView 5.4.9 set mib1493compatible enable/disable Purpose This command enables or disables the 1493 compatible mode.
Page 695: Set Host Inform
Example The following example sets the IP address, version, and community name of a trap host to 10.40.44.167, V2c, and beijing: zte(cfg-snmp)#set host 10.40.44.167 trap v2c beijing 5.4.11 set host inform Purpose This command sets the IP address, community name/user name, version, and security level for the inform host.
Page 696: Set Trap Enable/Disable
ZXR10 2900E Series Command Reference zte(cfg-snmp)#set host 10.40.44.167 inform v3 uname auth 5.4.12 set trap enable/disable Purpose This command enables or disables the trap functions such as link up/down, authentication failure, coldstart/warmstart, cluster topology changing, cluster member up/down, and loopdetect.
Page 697 STP bridge role change. stpBridgeRoleChange STP port state change. stpPortStateChange Temperature alarm. temperature Topology change found by the ZTE Topology Protocol (ZTP). topologychange trunkloopdetect Trunk loopback detection. UDLD event, such as monologue, incorrect connection, and udldunidirectional neighbor aging. Warm start (restarting with the reboot command).
Page 698: Set Group V3
The following example set a group named as BN, and set the group’s security level to priv and the read, write and notify views to bjView: zte(cfg-snmp)#set group BN v3 priv read bjView write bjView notify bjView 5.4.14 set user v3 Purpose This command sets a user name, authentication mode, and password for SNMP V3.
Page 699: Set Trap Macnotification Enable/Disable
<string> des56 encryption password Example The following example sets the user name to zte, group name to BN , authentication mode to md5–auth, and password to abc for SNMP V3: zte(cfg-snmp)#set user zte BN v3 md5-auth abc 5.4.15 set trap macnotification enable/disable...
Page 700: Set Trap Macnotification History-Size/Interval
Example The following example enables the function of sending a trap notification if the MAC address is changed on ports 3, 5, and 8: zte (cfg-snmp)#set trap macnotification port 3,5,8 enable 5.4.16 set trap macnotification history-size/interval Purpose This command sets the maximum number of entries in the MAC notification history table and the threshold of the interval that MAC change notification traps are sent.
Page 701: Set Trap Macstationmove Enable/Disable
Example The following example shows enable the MAC move trap function for ports 1 and 5: zte (cfg-snmp)#set trap macStationmove port 1,5 enable 5.4.18 set trap macStationmove history-sizeinterval Purpose This command sets the threshold and interval of sending MAC move traps.
Page 702: Clear Host Trap/Inform
ZXR10 2900E Series Command Reference Syntax set trap macStationmove {history-size<1-256>| interval<1-3600>} Parameter Description Parameter Description Threshold of sending MAC move traps, range: 1–256. On a port or trunk for which the MAC move trap function is enabled, when history-size<1-256> the number of changed MAC addresses reaches the threshold, a trap is sent.
Page 703: Clear View
Syntax clear community <string> Parameter Description Parameter Description Community name <string> Example The following example deletes a community named as zte: zte(cfg-snmp)#clear community zte 5.4.21 clear view Purpose This command deletes a view. Command Mode SNMP configuration mode 5-23 SJ-20130731155059-003|2013-11-27 (R1.0)
Page 704: Clear Group V3
ZXR10 2900E Series Command Reference Syntax clear view <string> Parameter Description Parameter Description <string> View name Guidelines zteView is the default view, which cannot be deleted. Example The following example deletes a view named as bjView: zte(cfg-snmp)#clear view bjView 5.4.22 clear group v3 Purpose This command deletes a group.
Page 705: Clear User V3
Parameter Description <string> User name Example The following example deletes a user named as text: zte(cfg-snmp)#clear user text v3 5.4.24 clear engineID Purpose This command clears the SNMP engine ID and restores the default value. Command Mode SNMP configuration mode...
Page 706 ZXR10 2900E Series Command Reference Syntax show snmp Example The following example shows all the SNMP configurations: zte(cfg)#show snmp mib1493compatible is enabled. receive packet per second : 80 Snmp standard trap information: coldStartTrap : disabled warmStartTrap : disabled linkDownTrap : disabled...
Page 707: Show Snmp Community/Engineid/Group/Host/Trap/User/View
Parameter Description Parameter Description Shows community configurations. community Shows the engine ID. engineID group Shows group configurations. Shows host configurations. host Shows trap configurations. trap Shows V3 user configurations. user Shows view configurations. view 5-27 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 708 ZXR10 2900E Series Command Reference Examples The following example shows the configuration of SNMP communities: zte(cfg)#show snmp community CommunityName Level ViewName ----------------- ------- ------------- --- beijing private The following example shows the configuration of the SNMP engine ID: zte(cfg)#show snmp engineid...
Page 709 AuthType : None StorageType: NonVolatile EncryptType: None RowStatus : Active The following example shows the configuration of view: zte(cfg-snmp)#show snmp view ViewName Exc/Inc MibFamily ------------ -------- --------- test Include 1.3.6.1 zteView Include 1.3.6.1 5-29 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 710: Rmon
ZXR10 2900E Series Command Reference 5.5 RMON 5.5.1 set rmon enable/disable Purpose This command enables or disables the Remote Monitoring (RMON) function. Command Mode SNMP configuration mode Syntax set rmon {enable | disable} Parameter Description Parameter Description enable Enables the RMON function.
Page 711: Set Alarm
The following example sets the data source of the statistics group whose index is 10 to port 1: zte(cfg-snmp)#set statistics 10 datasource 1 The following example sets the data source of the statistics group whose index is 10 to tom:...
Page 712 The following example sets that the alarm group whose index is 10 triggers the alarm whose index is 100 when the amount of data increases to 30000: zte(cfg-snmp)#set alarm 10 threshold 30000 eventindex 100 rising The following example sets the owner of the alarm group whose index is 10 to user1: 5-32 SJ-20130731155059-003|2013-11-27 (R1.0)
Page 713: Set Event
Chapter 5 Management Configuration zte(cfg-snmp)#set alarm 10 owner user1 The following example sets the status of the alarm group whose index is 10 to invalid: zte(cfg-snmp)#set alarm 10 status invalid 5.5.4 set event Purpose This command sets an event group.
Page 714: Set History
ZXR10 2900E Series Command Reference The following example sets the community name of the event group whose index is 10 to seu: zte(cfg-snmp)# set event 10 community seu The following example sets the owner name of the event group whose index is 10 to tom:...
Page 715: Show Rmon
Chapter 5 Management Configuration The following example sets the data source of the history group whose index is 10 to userx: zte(cfg-snmp)#set history 10 datasource userx The following example sets the buckerRequest of the history group whose index is 10 to...
Page 716: Show Alarm
ZXR10 2900E Series Command Reference Parameter Description Parameter Description Index of a statistics group <1-65535> Example The following example shows the RMON information of all statistics groups: zte(cfg-snmp)#show statistics StatsIndex: 1 DropEvents BroadcastPkts Octets MulticastPkts Pkts Pkts64Octets Fragments Pkts65to127Octets Jabbers...
Page 717: Show Event
EventIndex Type : log-and-trap Status : valid Community : zte Owner : admin Description : eveng-index-1 5.5.10 show history Purpose This command shows the configuration of a history group or all history groups. 5-37 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 718: Zgmp
ControlStatus: valid ControlOwner : admin DataSource : 1.3.6.1.2.1.2.2.1.1.28 5.6 ZGMP 5.6.1 set zdp enable/disable Purpose This command enables or disables the ZTE Discovery Protocol (ZDP). Command Mode Cluster management configuration mode Syntax set zdp {enable | disable} Parameter Description Parameter Description Enables the ZDP.
Page 719: Set Zdp Port/Trunk Enable/Disable
Disables the ZDP. Default The ZDP is enabled. Example The following example disables the ZDP on port 2: zte(cfg-group)#set zdp port 2 disable 5.6.3 set zdp timer Purpose This command sets the time interval for sending ZDP packets. Command Mode...
Page 720: Set Zdp Holdtime
ZXR10 2900E Series Command Reference Parameter Description Parameter Description <5-255> Time interval for sending ZDP packets. The unit is seconds. Guidelines The time interval for sending ZDP packets must match ZDP holdtime. If not, discovery failure occurs. In general, the holdtime should be six times of the time interval for sending ZDP packets.
Page 721: Show Zdp
All configuration modes Syntax show zdp neighbour Example The following example shows ZDP neighbor information: zte(cfg-group)#show zdp neighbour Peer-Device Local-Port Hdtm Platform Peer-Port ------------------ ----------- ----- --------------- --------- 00.11.22.33.44.55 Port18 ZXR10 2826S/2826S-LEZXR10 2952E Port7 5-41 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 722: Show Zdp Neighbour Detail
Version make date: Aug 13 2010 May 23 2012 Version make time: 21:05:42 11:25:34 5.6.8 set ztp enable/disable Purpose This command enables or disables the ZTE Topology Protocol (ZTP). Command Mode Cluster management configuration mode Syntax set ztp {enable | disable}...
Page 723: Set Ztp Port/Trunk Enable/Disable
Default The ZTP is enabled. Example The following example disables the ZTP on port 2: zte(cfg-group)#set ztp port 2 disable 5.6.10 set ztp vlan Purpose This command specifies a VLAN to perform topology collection. Command Mode Cluster management configuration mode 5-43 SJ-20130731155059-003|2013-11-27 (R1.0)
Page 724: Set Ztp Hop
ZXR10 2900E Series Command Reference Syntax set ztp vlan <1-4094> Parameter Description Parameter Description VLAN ID or VLAN name <1-4094> Default Topology collection is performed in VLAN 1. Example The following example specifies VLAN 100 to perform topology collection: zte(cfg-group)#set ztp vlan 100 5.6.11 set ztp hop...
Page 725: Set Ztp Timer
The default interval is 0, meaning that automatic collection is disabled. Example The following example sets the interval of automatic topology collection to 2 minutes: zte(cfg-group)#set ztp timer 2 5.6.13 set ztp portdelay Purpose This command sets the delay time before ports forward ZTP packets.
Page 726: Set Ztp Hopdelay
ZXR10 2900E Series Command Reference Parameter Description Parameter Description <1-100> Delay time. The unit is milliseconds. Guidelines The coordination between portdelay and hopdelay can avoid the generation of a large amount of ZTP topology collection messages on the network. Default The default setting is 20 milliseconds.
Page 727: Ztp Start
ZTP port delay : 40 ms Enabled ZTP ports : 1-28 Enabled ZTP trunks : 1-15 5.6.17 show ztp device Purpose This command shows the devices collected by topology collection and the devices’ status. 5-47 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 728 ZXR10 2900E Series Command Reference Command Mode All configuration modes Syntax show ztp device [<idlist>] Parameter Description Parameter Description List of device IDs <idlist> Guidelines If the idlist parameter is not set, this command shows summary information of the collected devices, including device IDs.
Page 729: Show Ztp Topology
This command shows the detailed device information by using the index of an MAC address collected by topology collection. Command Mode All configuration modes Syntax show ztp mac <HH.HH.HH.HH.HH.HH> Parameter Description Parameter Description MAC address collected by topology collection <HH.HH.HH.HH.HH.HH> 5-49 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 730: Set Group Commander Ipport
ZXR10 2900E Series Command Reference Guidelines The content displayed and command is same to show ztp device idlist. Example The following example shows the detailed information of the device whose MAC address is 00.19.c6.32.f1.9c: zte(cfg-group)#show ztp mac 00.19.c6.32.f1.9c Device-Mac : 00.19.c6.32.f1.9c...
Page 731: Set Group Candidate
Example The following example sets a commander switch, specifies the layer-3 port to ipport 63, and sets the IP address pool to 10.40.89.100/24: zte(cfg-group)#set group commander ipport 63 ip-pool 10.40.89.100/24 5.6.21 set group candidate Purpose This command sets the role of a switch as candidate.
Page 732: Set Group Add
ZXR10 2900E Series Command Reference Guidelines An independent switch is not controlled by cluster and cannot be added as a member machine. 5.6.23 set group add Purpose This command adds a member machine. Command Mode Cluster management configuration mode Syntax set group add {mac <HH.HH.HH.HH.HH.HH>[<1-253>]| device <idlist>}...
Page 733: Set Group Delete Member
Time interval (seconds) for member switches to perform <1-300> handshakes with the commander switch. Default The default setting is eight seconds. Example The following example sets the time interval to one second: Cmdr.zte(cfg-group)#set group handtime 1 5-53 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 734: Set Group Holdtime
ZXR10 2900E Series Command Reference 5.6.26 set group holdtime Purpose This command sets the holding time of cluster information on member switches. Command Mode Cluster management configuration mode Syntax set group holdtime <1-300> Parameter Description Parameter Description Holding time (seconds) of cluster information on member switches.
Page 735: Set Group Mac-Mode
The default address is 01.80.c2.00.00.09. Example The following example sets the protocol multicast address for cluster management to 01.80.c2.00.00.13: Cmdr.zte(cfg-group)#set group mac-mode extend mac 01.80.c2.00.00.13 5.6.29 set group syslogsvr Purpose This command sets the IP address of the cluster SYSLOG server.
Page 736: Set Group Tftpsvr
ZXR10 2900E Series Command Reference Parameter Description Parameter Description IP address <A.B.C.D> Example The following example sets the IP address of the cluster SYSLOG server to 192.168.200.1: Cmdr.zte(cfg-group)#set group syslogsvr 192.168.200.1 5.6.30 set group tftpsvr Purpose This command sets the IP address of the cluster tftp server.
Page 737: Show Group Candidate
If not all candidate switches are displayed, run the ztp start command to manually trigger the topology discovery process. 5.6.33 show group member Purpose This command shows the information of all/specified member switches. Command Mode All configuration modes Syntax show group member [<1-253>] 5-57 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 738: Save Member
ZXR10 2900E Series Command Reference Parameter Description Parameter Description ID of the specified member switch <1-253> Example The following example shows the information of all member switches: Cmdr.zte(cfg-group)#show group member MacAddress IpAddress HostName State --- ----------------- ------------------ ---------------- 00.11.22.33.44.55 192.168.1.2/24 Mem1.zte...
Page 739: Reboot Member
This command remotely logs in to a cluster device. Command Mode Global configuration mode Syntax rlogin {commander | member <1-253>} Parameter Description Parameter Description A member switch logs in to the commander. commander 5-59 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 740: Sflow
ZXR10 2900E Series Command Reference Parameter Description The commander logs in to a member. <1-253> is the ID of the member <1-253> member. Example The following example makes a member switch log in to the commander: Mem1.zte(cfg)#rlogin commander Trying ...Open Connecting ...
Page 741: Set Sflow Collector-Address
The number of the UDP port used to send SFLOW sampling messages is 6343. Example The following example sets the IP address of the SFLOW agent to 10.40.89.50: zte(cfg)#set sflow agent-address 10.40.89.50 5.7.2 set sflow collector-address Purpose This command sets the SFLOW collector.
Page 742: Set Sflow Ingress/Egress Enable/Disable
ZXR10 2900E Series Command Reference Syntax set sflow version <number> Parameter Description Parameter Description Format version of the SFLOW sampling message, including V4 <number> and V5. Guidelines Most network management software supports SFLOW V5 only. Use caution when configuring V4.
Page 743: Set Sflow Ingress Sample-Mode All/Forward
Guidelines Samples all messages. Example The following example configures to sample the forwarded messages only: zte(cfg)#set sflow ingress sample-mode forward 5.7.6 set sflow ingress/egress packet-sample off Purpose This command disables the SFLOW sampling function on ports. Command Mode Global configuration mode Syntax set sflow {ingress | egress} port <portlist>...
Page 744: Set Sflow Ingress/Egress Port Packet-Sample On Time-Range
The SFLOW sampling function is disabled on ports. Example The following example disables ingress sampling on ports 2 and 3: zte(cfg)#set sflow ingress port 2,3 packet-sample off 5.7.7 set sflow ingress/egress port packet-sample on time-range Purpose This command enables or disables SFLOW sampling on ports. If SFLOW sampling is enabled, configure the sampling period.
Page 745: Clear Sflow Config
3 to 3000, and binds the sampling to the time-range named as abc: zte(cfg)#set sflow ingress port 2 packet-sample on frequency 2000 zte(cfg)#set sflow egress port 3 packet-sample on frequency 3000 time-range abc 5.7.8 clear sflow config Purpose This command clears SFLOW configurations of ports.
Page 746: Show Sflow
ZXR10 2900E Series Command Reference Command Mode Global configuration mode Syntax clear sflow statistic 5.7.10 show sFlow Purpose This command shows SFLOW configurations. Command Mode All configuration modes Syntax show sflow Example The following example shows SFLOW configurations: zte(cfg)#show sflow Agent address :10.40.89.100...
Page 747: Telnet
This command shows Telnet configurations and status. Command Mode All configuration modes Syntax show telnet Example The following example shows Telnet configurations and status: zte(cfg)#show telnet Telnet server is enable Telnet server is listening on port 23 5-67 SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 748: Set Telnet Listen-Port
ZXR10 2900E Series Command Reference 5.8.3 set telnet listen-port Purpose This command sets a listening port for a telnet server. Command Mode Global configuration mode Syntax set telnet listen-port <port> Parameter Description Parameter Description <port> Listening port for a telnet server.
Page 749: Glossary
- Internet Control Message Protocol - Internet Protocol IPv6 - Internet Protocol Version 6 - Locked LLDP - Link Layer Discovery Protocol - Media Access Control - Maintenance End Point - Maintenance domain Intermediate Point SJ-20130731155059-003|2013-11-27 (R1.0) ZTE Proprietary and Confidential...
Page 750 ZXR10 2900E Series Command Reference MSTP - Multiple Spanning Tree Protocol - Network Access Server - Network Time Protocol - power over Ethernet - Quality of Service RADIUS - Remote Authentication Dial In User Service RMON - Remote Monitoring RSTP...

Zte ZXR10 2900E Series Command Reference Manual

Chapter 1 Safety Instructions

Chapter 2 Overview

Chapter 3 File System Configuration

Chapter 4 Service Configuration

Quick Links

Command Reference

Related Manuals for Zte ZXR10 2900E Series

Summary of Contents for Zte ZXR10 2900E Series