Page 1 Series ENTERPRISE POE+ GIGABIT EDGE SWITCHES AT-x230-10GP AT-x230-18GP AT-x230-28GP Command Reference for AlliedWare Plus™ Version 5.4.6-1.x C613-50104-01 REV A...
Page 2 If you would like a copy of the GPL source code contained in Allied Telesis products, please send us a request by registered mail including a check for US$15 to cover production and shipping costs and a CD with the GPL code will be mailed to you.
Page 3: Table Of Contents
Contents PART 1: Setup and Troubleshooting ......64 Chapter 1: CLI Navigation Commands ......65 Introduction .
Page 4 erase startup-config ........101 ip tftp source-interface ....... . . 102 ipv6 tftp source-interface .
Page 5 Chapter 4: Feature Licensing Commands ......166 Introduction ........166 license .
Page 6 system territory (deprecated) ......233 terminal monitor ........234 undebug all .
Page 7 log permanent (filter) ........315 log permanent exclude ....... . . 318 log permanent size .
Page 8 clear loop-protection counters ......376 clear mac address-table dynamic ......377 clear mac address-table static .
Page 9 show vlan ......... . 445 show vlan private-vlan .
Page 10 spanning-tree guard root ....... . 517 spanning-tree hello-time ....... . 518 spanning-tree link-type .
Page 11 power-inline max ........577 power-inline priority .
Page 12 ipv6 enable ......... 652 ipv6 forwarding .
Page 13 key ..........715 key chain .
Page 14 ip igmp snooping tcn query solicit ......771 ip igmp source-address-check ......773 ip igmp static-group .
Page 15 multicast ......... . 832 show ip mroute .
Page 16 Introduction ........929 class .
Page 17 debug dot1x ........992 dot1x control-direction .
Page 18 auth-web enable ........1083 auth-web forward ........1085 auth-web max-auth-fail .
Page 19 aaa accounting dot1x ....... . . 1148 aaa accounting login ........1150 aaa accounting update .
Page 20 client trustpoint ........1219 clear radius local-server statistics .
Page 21 Chapter 36: TACACS+ Commands ......1284 Introduction ........1284 show tacacs+ .
Page 22 Chapter 41: Allied Telesis Management Framework™ (AMF) Commands ..1383 Introduction ........1383 atmf area .
Page 23 atmf backup redundancy enable ......1405 atmf backup server ........1406 atmf backup stop .
Page 24 show atmf group members ......1495 show atmf guest ........1497 show atmf links .
Page 25 ipv6 address dhcp ........1575 show counter ipv6 dhcp-client ......1576 show ipv6 dhcp .
Page 26 Chapter 47: LLDP Commands ....... . . 1644 Introduction ........1644 clear lldp statistics .
Page 27 rmon collection history ....... . 1715 rmon collection stats ........1716 rmon event .
Page 28 script ..........1781 show debugging trigger .
Page 29: C613-50104-01 Rev A Command Reference For X230 Series
show running-config sflow ......1848 show sflow ........1849 show sflow interface .
Page 30 List of Commands (access-list extended ICMP filter) .........891 (access-list extended IP filter).
Page 31 aaa local authentication attempts max-fail ......1169 aaa login fail-delay............1170 accept-lifetime .
Page 32 atmf backup guests now ..........1401 atmf backup guests synchronize .
Page 33 atmf select-area ............1450 atmf topology-gui enable .
Page 34 auth-mac username ........... .1080 auth-web accounting .
Page 35 banner login (SSH)............1727 banner login (system).
Page 36 clear line vty............. 129 clear lldp statistics .
Page 37 copy proxy-autoconfig-file ..........1116 copy running-config .
Page 38 debug crypto pki ............1231 debug dot1x .
Page 39 delete debug ............. 96 delete mail .
Page 40 egress-vlan-name............1235 enable (Privileged Exec mode) .
Page 41 hostname ............. . . 194 http-enable .
Page 42 ip igmp last-member-query-count ........750 ip igmp last-member-query-interval.
Page 43 ip rip receive version........... . . 708 ip rip receive-packet .
Page 44 ipv6 opportunistic-nd........... . 662 ipv6 route .
Page 45 location coord-location configuration ........1674 location coord-location identifier ........1676 location coord-location-id .
Page 46 loop-protection loop-detect ..........392 loop-protection timeout .
Page 47 mru ..............341 mstack command-node.
Page 48 platform load-balancing ..........555 platform mac-vlan-hashing-algorithm.
Page 49 remark-map ............. 962 remote-mirror interface.
Page 50 service power-inline ........... . . 582 service ssh.
Page 51 show atmf links guest...........1510 show atmf links statistics.
Page 52 show crypto key hostkey..........1742 show crypto key mypubkey rsa.
Page 53 show diagnostic channel-group......... . 557 show dos interface.
Page 54 show ip access-list ............919 show ip dhcp snooping acl.
Page 55 show ipv6 interface brief..........667 show ipv6 mif .
Page 56 show memory shared........... . 218 show memory .
Page 57 show privilege............155 show process .
Page 58 show spanning-tree mst config ......... . 488 show spanning-tree mst detail interface .
Page 59 show trigger............1785 show users .
Page 60 spanning-tree max-age ..........520 spanning-tree max-hops (MSTP) .
Page 61 storm-rate ............. . . 982 storm-window.
Page 62 terminal length ............162 terminal monitor .
Page 63 undebug mail ............1711 undebug mstp .
Page 64: Part 1: Setup And Troubleshooting
Part 1: Setup and Troubleshooting C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 65: Cli Navigation Commands
CLI Navigation Commands Introduction Overview This chapter provides an alphabetical reference for the commands used to navigate between different modes. This chapter also provides a reference for the help and show commands used to help navigate within the CLI. Command List •...
Page 66: Configure Terminal
CLI N AVIGATION OMMANDS CONFIGURE TERMINAL configure terminal Overview This command enters the Global Configuration command mode. configure terminal Syntax Mode Privileged Exec Example To enter the Global Configuration command mode (note the change in the command prompt), enter the command: awplus# configure terminal awplus(config)#...
Page 67: Disable (Privileged Exec Mode)
CLI N AVIGATION OMMANDS DISABLE RIVILEGED XEC MODE disable (Privileged Exec mode) Overview This command exits the Privileged Exec mode, returning the prompt to the User Exec mode. To end a session, use the exit command. disable Syntax Mode Privileged Exec Example To exit the Privileged Exec mode, enter the command: awplus#...
Page 68 CLI N AVIGATION OMMANDS Overview This command lets you to run User Exec and Privileged Exec mode commands when you are in any configuration mode. do <command> Syntax Parameter Description <command> Specify the command and its parameters. Mode Any configuration mode awplus# configure terminal Example...
Page 69: Enable (Privileged Exec Mode)
CLI N AVIGATION OMMANDS ENABLE RIVILEGED XEC MODE enable (Privileged Exec mode) Overview This command enters the Privileged Exec mode and optionally changes the privilege level for a session. If a privilege level is not specified then the maximum privilege level (15) is applied to the session. If the optional privilege level is omitted then only users with the maximum privilege level can access Privileged Exec mode without providing the password as specified by the enable password...
Page 70 CLI N AVIGATION OMMANDS ENABLE RIVILEGED XEC MODE Privilege Exec mode. Use the enable password command or the enable secret commands to set the password to enable access to Privileged Exec mode. awplus> enable 7 awplus# Related disable (Privileged Exec mode) Commands enable password enable secret...
Page 71: End
CLI N AVIGATION OMMANDS Overview This command returns the prompt to the Privileged Exec command mode from any other advanced command mode. Syntax Mode All advanced command modes, including Global Configuration and Interface Configuration modes. Example The following example shows the use of the end command to return to the Privileged Exec mode directly from Interface mode.
Page 72: Exit
CLI N AVIGATION OMMANDS EXIT exit Overview This command exits the current mode, and returns the prompt to the mode at the previous level. When used in User Exec mode, the exit command terminates the session. exit Syntax Mode All command modes, including Global Configuration and Interface Configuration modes.
Page 73: Help
CLI N AVIGATION OMMANDS HELP help Overview This command displays a description of the AlliedWare Plus™ OS help system. help Syntax Mode All command modes Example To display a description on how to use the system help, use the command: awplus# help Output...
Page 74: Logout
CLI N AVIGATION OMMANDS LOGOUT logout Overview This command exits the User Exec or Privileged Exec modes and ends the session. logout Syntax Mode User Exec and Privileged Exec Example To exit the User Exec mode, use the command: awplus# logout C613-50104-01 REV A Command Reference for x230 Series...
Page 75: Show History
CLI N AVIGATION OMMANDS SHOW HISTORY show history Overview This command lists the commands entered in the current session. The history buffer is cleared automatically upon reboot. The output lists all command line entries, including commands that returned an error. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 76: File And Configuration Management Commands
File and Configuration Management Commands Introduction This chapter provides an alphabetical reference of AlliedWare Plus™ OS file and configuration management commands. Filename Syntax Many of the commands in this chapter use the placeholder “filename” to represent and Keyword the name and location of the file that you want to act on. The following table Usage explains the syntax of the filename for each different type of file location.
Page 77 ILE AND ONFIGURATION ANAGEMENT OMMANDS Valid characters The filename and path can include characters from up to four categories. The categories are: uppercase letters: A to Z lowercase letters: a to z digits: 0 to 9 special symbols: all printable ASCII characters not included in the previous three categories.
Page 78 ILE AND ONFIGURATION ANAGEMENT OMMANDS • “boot system backup” on page 85 • “cd” on page 86 • “copy (filename)” on page 87 • “copy current-software” on page 89 • “copy debug” on page 90 • “copy running-config” on page 91 •...
Page 79: Autoboot Enable
ILE AND ONFIGURATION ANAGEMENT OMMANDS AUTOBOOT ENABLE autoboot enable Overview This command enables the device to restore a release file and/or a configuration file from external media, such as an SD card. When the Autoboot feature is enabled, the device looks for a special file called autoboot.txt on the external media.
Page 80: Boot Config-File
ILE AND ONFIGURATION ANAGEMENT OMMANDS BOOT CONFIG FILE boot config-file Overview Use this command to set the configuration file to use during the next boot cycle. Use the no variant of this command to remove the configuration file. Syntax boot config-file <filepath-filename> no boot config-file Parameter Description...
Page 81 ILE AND ONFIGURATION ANAGEMENT OMMANDS BOOT CONFIG FILE To stop running the configuration file “branch.cfg” stored on the device’s SD card filesystem when the device boots up, use the commands: awplus# configure terminal awplus(config)# no boot config-file card:/branch.cfg Related boot config-file backup Commands boot system boot system backup...
Page 82: Boot Config-File Backup
ILE AND ONFIGURATION ANAGEMENT OMMANDS BOOT CONFIG FILE BACKUP boot config-file backup Overview Use this command to set a backup configuration file to use if the main configuration file cannot be accessed. Use the no variant of this command to remove the backup configuration file. Syntax boot config-file backup <filepath-filename>...
Page 83: Boot System
ILE AND ONFIGURATION ANAGEMENT OMMANDS BOOT SYSTEM boot system Overview Use this command to set the release file to load during the next boot cycle. Use the no variant of this command to remove the release file as the boot file. Syntax boot system <filepath-filename>...
Page 84: Show Boot
ILE AND ONFIGURATION ANAGEMENT OMMANDS BOOT SYSTEM Related boot config-file Commands boot config-file backup boot system backup show boot C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 85: Boot System Backup
ILE AND ONFIGURATION ANAGEMENT OMMANDS BOOT SYSTEM BACKUP boot system backup Overview Use this command to set a backup release file to load if the main release file cannot be loaded. Use the no variant of this command to remove the backup release file as the backup boot file.
Page 86 ILE AND ONFIGURATION ANAGEMENT OMMANDS Overview This command changes the current working directory. cd <directory-name> Syntax Parameter Description <directory-name> Name and path of the directory. Mode Privileged Exec To change to the directory called images, use the command: Example awplus# cd images Related Commands...
Page 87: Copy (Filename)
ILE AND ONFIGURATION ANAGEMENT OMMANDS COPY FILENAME copy (filename) Overview This command copies a file. This allows you to: • copy files from your device to a remote device • copy files from a remote device to your device • copy files stored on Flash memory to or from a different memory type, such as an SD card •...
Page 88 ILE AND ONFIGURATION ANAGEMENT OMMANDS COPY FILENAME To copy the file config.cfg into the current directory from a remote file server, and rename it to configtest.cfg, use the command: awplus# copy fserver:/config.cfg configtest.cfg Related copy zmodem Commands edit (filename) show file systems C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™...
Page 89: Copy Current-Software
ILE AND ONFIGURATION ANAGEMENT OMMANDS COPY CURRENT SOFTWARE copy current-software Overview This command copies the AlliedWare Plus™ OS software that the device has booted from, to a destination file. Specify whether the destination is Flash or card when saving the software to the local filesystem. copy current-software <destination-name>...
Page 90: Copy Debug
ILE AND ONFIGURATION ANAGEMENT OMMANDS COPY DEBUG copy debug Overview This command copies a specified debug file to a destination file. Specify whether the destination is Flash or Card when saving the software to the local filesystem. copy debug {<destination-name>|card|debug|flash|nvs|scp|tftp} Syntax {<source-name>|card|debug|flash|nvs|scp|tftp} Parameter...
Page 91: Copy Running-Config
ILE AND ONFIGURATION ANAGEMENT OMMANDS COPY RUNNING CONFIG copy running-config Overview This command copies the running-config to a destination file, or copies a source file into the running-config. Commands entered in the running-config do not survive a device reboot unless they are saved in a configuration file. copy <source-name>...
Page 92: Copy Startup-Config
ILE AND ONFIGURATION ANAGEMENT OMMANDS COPY STARTUP CONFIG copy startup-config Overview This command copies the startup-config script into a destination file, or alternatively copies a configuration script from a source file into the startup-config file. Specify whether the destination is Flash or card when loading from the local filesystem.
Page 93: Copy Zmodem
ILE AND ONFIGURATION ANAGEMENT OMMANDS COPY ZMODEM copy zmodem Overview This command allows you to copy files using ZMODEM using Minicom. ZMODEM works over a serial connection and does not need any interfaces configured to do a file transfer. copy <source-name> zmodem Syntax copy zmodem Parameter...
Page 94: Create Autoboot
ILE AND ONFIGURATION ANAGEMENT OMMANDS CREATE AUTOBOOT create autoboot Use this command to create an autoboot.txt file on external media. This Overview command will automatically ensure that the keys and values that are expected in this file are correct. After the file is created the create autoboot command will copy the current release and configuration files across to the external media.
Page 95: Delete
ILE AND ONFIGURATION ANAGEMENT OMMANDS DELETE delete Overview This command deletes files or directories. delete [force] [recursive] <filename> Syntax Parameter Description force Ignore nonexistent filenames and never prompt before deletion. recursive Remove the contents of directories recursively. <filename> The filename and path of the file to delete. See Introduction on page 76 for valid syntax.
Page 96: Delete Debug
ILE AND ONFIGURATION ANAGEMENT OMMANDS DELETE DEBUG delete debug Overview Use this command to delete a specified debug output file. delete debug <source-name> Syntax Parameter Description <source-name> The filename and path where the debug output originates. Introduction on page 76 for valid URL syntax. Mode Privileged Exec Example...
Page 97: Dir
ILE AND ONFIGURATION ANAGEMENT OMMANDS Overview This command lists the files on a filesystem. If no directory or file is specified then this command lists the files in the current working directory. dir [all] [recursive] [sort [reverse] [name|size|time]] Syntax [<filename>|card|debug|flash|nvs] Parameter Description List all files.
Page 98 ILE AND ONFIGURATION ANAGEMENT OMMANDS To list the files by size, smallest to largest, use the command: awplus# dir sort reverse size To sort the files by modification time, oldest to newest, use the command: awplus# dir sort reverse time Output Figure 2-4: Example output from the dir command...
Page 99: Edit
ILE AND ONFIGURATION ANAGEMENT OMMANDS EDIT edit Overview This command opens a text file in the AlliedWare Plus™ text editor. Once opened you can use the editor to alter to the file. If a filename is specified and it already exists, then the editor opens it in the text editor.
Page 100: Edit (Filename)
ILE AND ONFIGURATION ANAGEMENT OMMANDS EDIT FILENAME edit (filename) Overview This command opens a remote text file as read-only in the AlliedWare Plus™ text editor. Before starting the editor make sure your terminal, terminal emulation program, or Telnet client is 100% compatible with a VT100 terminal. The editor uses VT100 control sequences to display text on the terminal.
Page 101: Erase Startup-Config
ILE AND ONFIGURATION ANAGEMENT OMMANDS ERASE STARTUP CONFIG erase startup-config Overview This command deletes the file that is set as the startup-config file, which is the configuration file that the system runs when it boots up. At the next restart, the device loads the default configuration file, default.cfg. If default.cfg no longer exists, then the device loads with the factory default configuration.
Page 102: Ip Tftp Source-Interface
ILE AND ONFIGURATION ANAGEMENT OMMANDS IP TFTP SOURCE INTERFACE ip tftp source-interface Overview Use this command to manually specify the IP address that all TFTP requests originate from. This is useful in network configurations where TFTP servers only accept requests from certain devices, or where the server cannot dynamically determine the source of the request.
Page 103: Ipv6 Tftp Source-Interface
ILE AND ONFIGURATION ANAGEMENT OMMANDS TFTP SOURCE INTERFACE ipv6 tftp source-interface Overview Use this command to manually specify the IPv6 address that all TFTP requests originate from. This is useful in network configurations where TFTP servers only accept requests from certain devices, or where the server cannot dynamically determine the source of the request.
Page 104: Mkdir
ILE AND ONFIGURATION ANAGEMENT OMMANDS MKDIR mkdir Overview This command makes a new directory. mkdir <name> Syntax Parameter Description <name> The name and path of the directory that you are creating. Mode Privileged Exec Usage You cannot name a directory or subdirectory flash, nvs, usb, card, tftp, scp, sftp or http.
Page 105: Move
ILE AND ONFIGURATION ANAGEMENT OMMANDS MOVE move Overview This command renames or moves a file. move <source-name> <destination-name> Syntax Parameter Description <source-name> The filename and path of the source file. See Introduction on page 76 for valid syntax. <destination-name> The filename and path of the destination file. See Introduction on page 76 for valid syntax.
Page 106: Move Debug
ILE AND ONFIGURATION ANAGEMENT OMMANDS MOVE DEBUG move debug Overview This command moves a specified debug file to a destination debug file. move debug {<destination-name>|card|debug|flash|nvs} Syntax Parameter Description <destination-name> The filename and path where you would like the debug output moved to. See Introduction on page 76 for valid syntax.
Page 107: Pwd
ILE AND ONFIGURATION ANAGEMENT OMMANDS Overview This command prints the current working directory. Syntax Mode Privileged Exec Example To print the current working directory, use the command: awplus# Related Commands C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 108: Rmdir
ILE AND ONFIGURATION ANAGEMENT OMMANDS RMDIR rmdir Overview This command removes a directory. This command only works on empty directories, unless you specify the optional force keyword. rmdir [force] <name> Syntax Parameter Description force Optional keyword that allows you to delete directories that are not empty and contain files or subdirectories.
Page 109: Show Autoboot
ILE AND ONFIGURATION ANAGEMENT OMMANDS SHOW AUTOBOOT show autoboot Overview This command displays the Autoboot configuration and status. show autoboot Syntax Mode Privileged Exec Example To show the Autoboot configuration and status, use the command: awplus# show autoboot Output Figure 2-6: Example output from the show autoboot command awplus#show autoboot...
Page 110: Show Boot
ILE AND ONFIGURATION ANAGEMENT OMMANDS SHOW BOOT show boot Overview This command displays the current boot configuration. We recommend that the currently running release is set as the current boot image. show boot Syntax Mode Privileged Exec Example To show the current boot configuration, use the command: awplus# show boot Output...
Page 111 ILE AND ONFIGURATION ANAGEMENT OMMANDS SHOW BOOT Table 1: Parameters in the output of the show boot command (cont.) Parameter Description Backup boot config The configuration file to use during the next boot cycle if the main configuration file cannot be loaded. Autoboot status The status of the Autoboot feature;...
Page 112: Show File
ILE AND ONFIGURATION ANAGEMENT OMMANDS SHOW FILE show file Overview This command displays the contents of a specified file. show file <filename> Syntax Parameter Description <filename> Name of a file on the local Flash filesystem, or name and directory path of a file. Mode Privileged Exec To display the contents of the file oldconfig.cfg, which is in the current...
Page 113: Show File Systems
ILE AND ONFIGURATION ANAGEMENT OMMANDS SHOW FILE SYSTEMS show file systems Overview This command lists the filesystems and their utilization information where appropriate. show file systems Syntax Mode Privileged Exec Examples To display the filesystems, use the command: awplus# show file systems Output Figure 2-9: Example output from the show file systems command...
Page 114 ILE AND ONFIGURATION ANAGEMENT OMMANDS SHOW FILE SYSTEMS Table 2: Parameters in the output of the show file systems command (cont.) Parameter Description Prefixes The prefixes used when entering commands to access the filesystems; one of: flash system card tftp sftp http.
Page 115: Show Running-Config
Antivirus configuration application Application configuration as-path Autonomous system path filter configuration as-path access-list Configuration of ACLs for AS path filtering atmf Allied Telesis Management Framework configuration Border Gateway Protocol (BGP) configuration community-list Community-list configuration crypto Security-specific configuration dhcp DHCP configuration...
Page 116 ILE AND ONFIGURATION ANAGEMENT OMMANDS SHOW RUNNING CONFIG Parameter Description entity Entity configuration firewall Firewall configuration interface Interface configuration. See show running-config interface for further options. Internet Protocol (IP) configuration ip pim dense-mode PIM-DM configuration ip pim sparse-mode PIM-SM configuration ip route IP static route configuration ip-reputation...
Page 117 ILE AND ONFIGURATION ANAGEMENT OMMANDS SHOW RUNNING CONFIG Parameter Description security-password Strong password security configuration snmp SNMP configuration Secure Shell configuration switch Switch configuration web-control Web Control configuration full Display the running-config for all features. This is the default setting, so is the same as entering show running-config.
Page 118: Show Running-Config Interface
ILE AND ONFIGURATION ANAGEMENT OMMANDS SHOW RUNNING CONFIG INTERFACE show running-config interface Overview This command displays the current configuration of one or more interfaces on the device. show running-config interface [<interface-list>] [dot1x|ip Syntax igmp|ip multicast|ip pim dense-mode|ip pim sparse-mode|ipv6 rip|lacp|mstp|ospf|rip|rstp|stp] Parameter Description <interface-list>...
Page 119 ILE AND ONFIGURATION ANAGEMENT OMMANDS SHOW RUNNING CONFIG INTERFACE To display the current running configuration of a device for VLAN 1, use the command: awplus# show running-config interface vlan1 To display the current running configuration of a device for VLANs 1 and 3-5, use the command: awplus# show running-config interface vlan1,vlan3-vlan5...
Page 120: Show Startup-Config
ILE AND ONFIGURATION ANAGEMENT OMMANDS SHOW STARTUP CONFIG show startup-config Overview This command displays the contents of the start-up configuration file, which is the file that the device runs on start-up. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 121: Show Version
ILE AND ONFIGURATION ANAGEMENT OMMANDS SHOW VERSION show version Overview This command displays the version number and copyright details of the current AlliedWare Plus™ OS your device is running. show version Syntax Mode User Exec and Privileged Exec Example To display the version details of your currently installed software, use the command: awplus# show version...
Page 122 ILE AND ONFIGURATION ANAGEMENT OMMANDS SHOW VERSION Corosync Cluster Engine  Copyright (c) 2002-2004 MontaVista Software, Inc. All rights reserved.  Copyright (c) 2005-2010 Red Hat, Inc. File Utility Library  Copyright (c) Ian F. Darwin 1986-1987, 1989-1992, 1994-1995.  Software written by Ian F.
Page 123: Write File
ILE AND ONFIGURATION ANAGEMENT OMMANDS WRITE FILE write file Overview This command copies the running-config into the file that is set as the current startup-config file. This command is a synonym of the write memory and copy running-config startup-config commands. write [file] Syntax Mode...
Page 124: Write Memory
ILE AND ONFIGURATION ANAGEMENT OMMANDS WRITE MEMORY write memory Overview This command copies the running-config into the file that is set as the current startup-config file. This command is a synonym of the write file and copy running-config startup-config commands. write [memory] Syntax Mode...
Page 125: Write Terminal
ILE AND ONFIGURATION ANAGEMENT OMMANDS WRITE TERMINAL write terminal Overview This command displays the current configuration of the device. This command is a synonym of the show running-config command. write terminal Syntax Mode Privileged Exec Example To display the current configuration of your device, use the command: awplus# write terminal Related...
Page 126: User Access Commands
User Access Commands Introduction Overview This chapter provides an alphabetical reference of commands used to configure user access. Command List • “clear line console” on page 128 • “clear line vty” on page 129 • “enable password” on page 130 •...
Page 127 CCESS OMMANDS • “show privilege” on page 155 • “show security-password configuration” on page 156 • “show security-password user” on page 157 • “show telnet” on page 158 • “show users” on page 159 • “telnet” on page 160 • “telnet server”...
Page 128: Clear Line Console
CCESS OMMANDS CLEAR LINE CONSOLE clear line console Overview This command resets a console line. If a terminal session exists on the line then the terminal session is terminated. If console line settings have changed then the new settings are applied. clear line console 0 Syntax Mode...
Page 129: Clear Line Vty
CCESS OMMANDS CLEAR LINE VTY clear line vty Overview This command resets a VTY line. If a session exists on the line then it is closed. clear line vty <0-32> Syntax Parameter Description <0-32> Line number Mode Privileged Exec Example To reset the first vty line, use the command: awplus# clear line vty 1...
Page 130: Enable Password
CCESS OMMANDS ENABLE PASSWORD enable password Overview To set a local password to control access to various privilege levels, use the enable password Global Configuration command. Use the enable password command to modify or create a password to be used, and use the no enable password command to remove the password.
Page 131 CCESS OMMANDS ENABLE PASSWORD Note that the enable password command is an alias for the enable secret command and one password per privilege level is allowed using these commands. Do not assign one password to a privilege level with enable password and another password to a privilege level with enable...
Page 132 CCESS OMMANDS ENABLE PASSWORD this method. The output in the configuration file will show only the encrypted string, and not the text string. awplus# configure terminal awplus(config)# enable password 8 fU7zHzuutY2SA awplus(config)# This results in the following show output: awplus#show run Current configuration:...
Page 133: Enable Secret
CCESS OMMANDS ENABLE SECRET enable secret Overview To set a local password to control access to various privilege levels, use the enable secret Global Configuration command. Use the enable secret command to modify or create a password to be used, and use the no enable secret command to remove the password.
Page 134 CCESS OMMANDS ENABLE SECRET Note that the enable secret command is an alias for the enable password command and one password per privilege level is allowed using these commands. Do not assign one password to a privilege level with enable password and another password to a privilege level with enable...
Page 135 CCESS OMMANDS ENABLE SECRET The output in the configuration file will show only the encrypted string, and not the text string: awplus# configure terminal awplus(config)# enable secret 8 fU7zHzuutY2SA awplus(config)# This results in the following show output: awplus#show run Current configuration: hostname awplus...
Page 136: Exec-Timeout
CCESS OMMANDS EXEC TIMEOUT exec-timeout Overview This command sets the interval your device waits for user input from either a console or VTY connection. Once the timeout interval is reached, the connection is dropped. This command sets the time limit when the console or VTY connection automatically logs off after no activity.
Page 137 CCESS OMMANDS EXEC TIMEOUT Related line Commands service telnet C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 138: Flowcontrol Hardware (Asyn/Console)
CCESS OMMANDS FLOWCONTROL HARDWARE ASYN CONSOLE flowcontrol hardware (asyn/console) Overview Use this command to enable RTS/CTS (Ready To Send/Clear To Send) hardware flow control on a terminal console line (asyn port) between the DTE (Data Terminal Equipment) and the DCE (Data Communications Equipment). flowcontrol hardware Syntax no flowcontrol hardware...
Page 139 CCESS OMMANDS FLOWCONTROL HARDWARE ASYN CONSOLE Examples To enable hardware flow control on terminal console line asyn0, use the commands: awplus# configure terminal awplus(config)# line console 0 awplus(config-line)# flowcontrol hardware To disable hardware flow control on terminal console line asyn0, use the commands: awplus# configure terminal...
Page 140: Length (Asyn)
CCESS OMMANDS LENGTH ASYN length (asyn) Overview Use this command to specify the number of rows of output that the device will display before pausing, for the console or VTY line that you are configuring. The no variant of this command restores the length of a line (terminal session) attached to a console port or to a VTY to its default length of 22 rows.
Page 141: Line
CCESS OMMANDS LINE line Overview Use this command to enter line configuration mode for the specified VTYs or the console. The command prompt changes to show that the device is in Line Configuration mode. line vty <first-line> [<last-line>] Syntax line console 0 Parameter Description <first-line>...
Page 142 CCESS OMMANDS LINE To enter Line Configuration mode to configure the console (asyn 0) port terminal line, use the commands: awplus# configure terminal awplus(config)# line console 0 awplus(config-line)# Related accounting login Commands clear line console clear line vty flowcontrol hardware (asyn/console) length (asyn) login authentication privilege level...
Page 143: Privilege Level
CCESS OMMANDS PRIVILEGE LEVEL privilege level Overview This command sets a privilege level for VTY or console connections. The configured privilege level from this command overrides a specific user’s initial privilege level at the console login. privilege level <1-15> Syntax Mode Line Configuration Usage...
Page 144: Security-Password History
CCESS OMMANDS SECURITY PASSWORD HISTORY security-password history Overview This command specifies the number of previous passwords that are unable to be reused. A new password is invalid if it matches a password retained in the password history. The no variant of the command disables this feature. Syntax security-password history <0-15>...
Page 145: Security-Password Forced-Change
CCESS OMMANDS SECURITY PASSWORD FORCED CHANGE security-password forced-change Overview This command specifies whether or not a user is forced to change an expired password at the next login. If this feature is enabled, users whose passwords have expired are forced to change to a password that must comply with the current password security rules at the next login.
Page 146: Security-Password Lifetime
CCESS OMMANDS SECURITY PASSWORD LIFETIME security-password lifetime Overview This command enables password expiry by specifying a password lifetime in days. Note that when the password lifetime feature is disabled, it also disables the security-password forced-change command and the security-password warning command.
Page 147: Security-Password Minimum-Categories
CCESS OMMANDS SECURITY PASSWORD MINIMUM CATEGORIES security-password minimum-categories Overview This command specifies the minimum number of categories that the password must contain in order to be considered valid. The password categories are: • uppercase letters: A to Z • lowercase letters: a to z •...
Page 148: Security-Password Minimum-Length
CCESS OMMANDS SECURITY PASSWORD MINIMUM LENGTH security-password minimum-length Overview This command specifies the minimum allowable password length. This value is checked against when there is a password change or a user account is created. security-password minimum-length <1-23> Syntax Parameter Description <1-23>...
Page 149: Security-Password Reject-Expired-Pwd
CCESS OMMANDS SECURITY PASSWORD REJECT EXPIRED security-password reject-expired-pwd Overview This command specifies whether or not a user is allowed to login with an expired password. Users with expired passwords are rejected at login if this functionality is enabled. Users then have to contact the Network Administrator to change their password.
Page 150: Security-Password Warning
CCESS OMMANDS SECURITY PASSWORD WARNING security-password warning Overview This command specifies the number of days before the password expires that the user will receive a warning message specifying the remaining lifetime of the password. Note that the warning period cannot be set unless the lifetime feature is enabled with the security-password lifetime command.
Page 151: Service Advanced-Vty
CCESS OMMANDS SERVICE ADVANCED service advanced-vty Overview This command enables the advanced-vty help feature. This allows you to use TAB completion for commands. Where multiple options are possible, the help feature displays the possible options. The no service advanced-vty command disables the advanced-vty help feature. Syntax service advanced-vty no service advanced-vty...
Page 152: Service Password-Encryption
CCESS OMMANDS SERVICE PASSWORD ENCRYPTION service password-encryption Overview Use this command to enable password encryption. This is enabled by default. When password encryption is enabled, the device displays passwords in the running config in encrypted form instead of in plain text. Use the no service password-encryption command to stop the device from displaying newly-entered passwords in encrypted form.
Page 153: Service Telnet
CCESS OMMANDS SERVICE TELNET service telnet Overview Use this command to enable the telnet server. The server is enabled by default. Enabling the telnet server starts the device listening for incoming telnet sessions on the configured port. The server listens on port 23, unless you have changed the port by using the privilege level command.
Page 154: Service Terminal-Length (Deleted)
CCESS OMMANDS SERVICE TERMINAL LENGTH DELETED service terminal-length (deleted) Overview This command has been deleted in Software Version 5.4.5-0.1 and later. C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 155: Show Privilege
CCESS OMMANDS SHOW PRIVILEGE show privilege Overview This command displays the current user privilege level, which can be any privilege level in the range <1-15>. Privilege levels <1-6> allow limited user access (all User Exec commands), privilege levels <7-14> allow restricted user access (all User Exec commands plus Privileged Exec show commands).
Page 156: Show Security-Password Configuration
CCESS OMMANDS SHOW SECURITY PASSWORD CONFIGURATION show security-password configuration Overview This command displays the configuration settings for the various security password rules. show security-password configuration Syntax Mode Privileged Exec Example To display the current security-password rule configuration settings, use the command: awplus# show security-password configuration...
Page 157: Show Security-Password User
CCESS OMMANDS SHOW SECURITY PASSWORD USER show security-password user Overview This command displays user account and password information for all users. show security-password user Syntax Mode Privileged Exec Example To display the system users’ remaining lifetime or last password change, use the command: awplus# show security-password user...
Page 158: Show Telnet
CCESS OMMANDS SHOW TELNET show telnet Overview This command shows the Telnet server settings. show telnet Syntax Mode User Exec and Privileged Exec Example To show the Telnet server settings, use the command: awplus# show telnet Output Figure 3-4: Example output from the show telnet command Telnet Server Configuration...
Page 159: Show Users
CCESS OMMANDS SHOW USERS show users Overview This command shows information about the users who are currently logged into the device. show users Syntax Mode User Exec and Privileged Exec Example To show the users currently connected to the device, use the command: awplus# show users Output...
Page 160: Telnet
CCESS OMMANDS TELNET telnet Overview Use this command to open a telnet session to a remote device. telnet {<hostname>|[ip] <ipv4-addr>|[ipv6] <ipv6-addr>} Syntax [<port>] Parameter Description <hostname> The host name of the remote system. Keyword used to specify the IPv4 address or host name of a remote system.
Page 161: Telnet Server
CCESS OMMANDS TELNET SERVER telnet server Overview This command enables the telnet server on the specified TCP port. If the server is already enabled then it will be restarted on the new port. Changing the port number does not affect the port used by existing sessions. telnet server {<1-65535>|default} Syntax Parameter...
Page 162: Terminal Length
CCESS OMMANDS TERMINAL LENGTH terminal length Overview Use the terminal length command to specify the number of rows of output that the device will display before pausing, for the currently-active terminal only. Use the terminal no length command to remove the length specified by this command.
Page 163: Terminal Resize
CCESS OMMANDS TERMINAL RESIZE terminal resize Overview Use this command to automatically adjust the number of rows of output on the console, which the device will display before pausing, to the number of rows configured on the user’s terminal. terminal resize Syntax Mode User Exec and Privileged Exec...
Page 164: Username
CCESS OMMANDS USERNAME username Overview This command creates or modifies a user to assign a privilege level and a password. : The default username privilege level of 1 is not shown in running-config output. NOTE Any username privilege level that has been modified from the default is shown. Syntax username <name>...
Page 165 CCESS OMMANDS USERNAME Usage An intermediate CLI security level (privilege level 7 to privilege level 14) allows a CLI user access to the majority of show commands, including the platform show commands that are available at privilege level 1 to privilege level 6. Note that some show commands, such as show running-configuration and show startup-configuration, are only available at privilege level 15.
Page 166: Feature Licensing Commands
Feature Licensing Commands Introduction Overview This chapter provides an alphabetical reference for each of the Feature Licensing commands. Feature Licensing enables you to use advanced features such as Layer 3 routing. To see which Feature Licenses are available for your device, see the AlliedWare Plus Datasheet.
Page 167: License
EATURE ICENSING OMMANDS LICENSE license Overview This command activates the licensed software feature set on a device. Use the no variant of this command to deactivate the licensed software feature set on a device. For feature licenses, contact your authorized distributor or reseller. If a license key expires or is incorrect so the license key is invalid, then some software features will be unavailable.
Page 168: Show License
EATURE ICENSING OMMANDS SHOW LICENSE show license Overview This command displays information about a specific software feature license, or all enabled software feature licenses on the device. show license [feature] [<label>|index <index-number>] Syntax Parameter Description feature Only display license information for any applied feature licenses. <label>...
Page 169: Show License Brief
EATURE ICENSING OMMANDS SHOW LICENSE Related license Commands show license brief C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 170: Show License Brief
EATURE ICENSING OMMANDS SHOW LICENSE BRIEF show license brief Overview This command displays information about a specific software feature license, or all enabled software feature licenses on the device. show license [feature] [<label>|index <index-number>] brief Syntax Parameter Description feature Only display license information for any applied feature licenses. <label>...
Page 171: Gui Commands
GUI Commands Introduction Overview This chapter provides an alphabetical reference of commands used to configure the GUI. For more information, see the Getting Started with Alliedware Plus Command List • “atmf topology-gui enable” on page 172 • “gui-timeout” on page 173 •...
Page 172: Atmf Topology-Gui Enable
GUI C OMMANDS ATMF TOPOLOGY GUI ENABLE atmf topology-gui enable Overview Use this command to enable the operation of AMF Vista Manager on the Master device. Use the no variant of this command to disable this feature. Syntax atmf topology-gui enable no atmf topology-gui enable Default By default the GUI support will not be enabled on AMF Master devices.
Page 173: Gui-Timeout
GUI C OMMANDS TIMEOUT gui-timeout Overview Use this command to configure an idle timeout period for a GUI session. The time can be set in minutes and/or seconds. Use the no variant of this command to disable the GUI session idle timeout. Syntax gui-timeout <minutes>...
Page 174: Log Event-Host
GUI C OMMANDS LOG EVENT HOST log event-host Overview Use this command to set up an external host to log AMF topology events through Vista Manager. This command is run on the Master device. Use the no variant of this command to disable log events through Vista Manager. Syntax log event-host [<ipv4-addr>|<ipv6-addr>] atmf-topology-event no log event-host [<ipv4-addr>|<ipv6-addr>] atmf-topology-event...
Page 175: Service Http
GUI C OMMANDS SERVICE HTTP service http Overview Use this command to enable the HTTP (Hypertext Transfer Protocol) service. This service, which is enabled by default, is required to support the AlliedWare Plus™ GUI Java applet on a Java enabled browser. Use the no variant of this command to disable the HTTP feature.
Page 176: Show Http
GUI C OMMANDS SHOW HTTP show http Overview This command shows the HTTP server settings. show http Syntax Mode User Exec and Privileged Exec Example To show the HTTP server settings, use the command: awplus# show http Output Figure 5-2: Example output from the show http command awplus#show http...
Page 177: System Configuration And Monitoring Commands
System Configuration and Monitoring Commands Introduction Overview This chapter provides an alphabetical reference of commands for configuring and monitoring the system. Command List • “banner exec” on page 179 • “banner login (system)” on page 181 • “banner motd” on page 183 •...
Page 178 YSTEM ONFIGURATION AND ONITORING OMMANDS • “show interface memory” on page 210 • “show memory” on page 212 • “show memory allocations” on page 214 • “show memory history” on page 216 • “show memory pools” on page 217 • “show memory shared”...
Page 179: Banner Exec
YSTEM ONFIGURATION AND ONITORING OMMANDS BANNER EXEC banner exec Overview This command configures the User Exec mode banner that is displayed on the console after you login. The banner exec default command restores the User Exec banner to the default banner. Use the no banner exec command to disable the User Exec banner and remove the default User Exec banner.
Page 180 YSTEM ONFIGURATION AND ONITORING OMMANDS BANNER EXEC awplus#configure terminal  awplus(config)#banner exec default  awplus(config)#exit  awplus#exit awplus login: manager  Password:  AlliedWare Plus (TM) 5.4.6-1 03/31/14 13:03:59 awplus> To remove the User Exec mode banner after login, enter the following commands: awplus#configure terminal...
Page 181: Banner Login (System)
YSTEM ONFIGURATION AND ONITORING OMMANDS BANNER LOGIN SYSTEM banner login (system) Overview This command configures the login banner that is displayed on the console when you login. The login banner is displayed on all connected terminals. The login banner is displayed after the MOTD (Message-of-the-Day) banner and before the login username and password prompts.
Page 182: Banner Motd
YSTEM ONFIGURATION AND ONITORING OMMANDS BANNER LOGIN SYSTEM awplus#configure terminal  awplus(config)#no banner login  awplus(config)#exit  awplus#exit  awplus login: manager  Password:  awplus> Related banner exec Commands banner motd C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™...
Page 183: Banner Motd
YSTEM ONFIGURATION AND ONITORING OMMANDS BANNER MOTD banner motd Overview Use this command to create or edit the text MotD (Message-of-the-Day) banner displayed before login. The MotD banner is displayed on all connected terminals. The MotD banner is useful for sending messages that affect all network users, for example, any imminent system shutdowns.
Page 184 YSTEM ONFIGURATION AND ONITORING OMMANDS BANNER MOTD awplus>enable  awplus#configure terminal  awplus(config)#no banner motd  awplus(config)#exit  awplus#exit  awplus login: manager  Password:  AlliedWare Plus (TM) 5.4.6-1 03/31/14 13:03:59 awplus> Related banner exec Commands banner login (system) C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™...
Page 185: Clock Set
YSTEM ONFIGURATION AND ONITORING OMMANDS CLOCK SET clock set Overview This command sets the time and date for the system clock. clock set <hh:mm:ss> <day> <month> <year> Syntax Parameter Description <hh:mm:ss> Local time in 24-hour format <day> Day of the current month <1-31> <month>...
Page 186: Clock Summer-Time Date
YSTEM ONFIGURATION AND ONITORING OMMANDS CLOCK SUMMER TIME DATE clock summer-time date Overview This command defines the start and end of summertime for a specific year only, and specifies summertime’s offset value to Standard Time for that year. The no variant of this command removes the device’s summertime setting. This clears both specific summertime dates and recurring dates (set with the clock summer-time recurring...
Page 187 YSTEM ONFIGURATION AND ONITORING OMMANDS CLOCK SUMMER TIME DATE Related clock summer-time recurring Commands clock timezone C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 188: Clock Summer-Time Recurring
YSTEM ONFIGURATION AND ONITORING OMMANDS CLOCK SUMMER TIME RECURRING clock summer-time recurring Overview This command defines the start and end of summertime for every year, and specifies summertime’s offset value to Standard Time. The no variant of this command removes the device’s summertime setting. This clears both specific summertime dates (set with the clock summer-time date command) and recurring dates.
Page 189 YSTEM ONFIGURATION AND ONITORING OMMANDS CLOCK SUMMER TIME RECURRING Mode Global Configuration Examples To set a summertime definition for New Zealand using NZST (UTC+12:00) as the standard time, and NZDT (UTC+13:00) as summertime, with summertime set to start on the 1st Sunday in October, and end on the 3rd Sunday in March, use the command: awplus(config)# clock summer-time NZDT recurring 1 sun oct 2:00...
Page 190: Clock Timezone
YSTEM ONFIGURATION AND ONITORING OMMANDS CLOCK TIMEZONE clock timezone Overview This command defines the device’s clock timezone. The timezone is set as a offset to the UTC. The no variant of this command resets the system time to UTC. By default, the system time is set to UTC. clock timezone <timezone-name>...
Page 191: Ecofriendly Led
YSTEM ONFIGURATION AND ONITORING OMMANDS ECOFRIENDLY LED ecofriendly led Overview Use this command to enable the eco-friendly LED (Light Emitting Diode) feature, which turns off power to the port LEDs. Power to the system status LED is not disabled. Use the no variant of this command to disable the eco-friendly LED feature. Syntax ecofriendly led no ecofriendly led...
Page 192: Findme
YSTEM ONFIGURATION AND ONITORING OMMANDS FINDME findme Overview Use this command to physically locate a specific device from a group of similar devices. Activating the command causes a selected number of port LEDs to alternately flash green then amber (if that device has amber LEDs) at a rate of 1 Hz. Use the no variant of this command to deactivate the Find Me feature prior to the timeout expiring.
Page 193 YSTEM ONFIGURATION AND ONITORING OMMANDS FINDME To deactivate the Find Me feature, use the following command: awplus# no findme C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 194: Hostname
YSTEM ONFIGURATION AND ONITORING OMMANDS HOSTNAME hostname Overview This command sets the name applied to the device as shown at the prompt. The hostname is: • displayed in the output of the show system command • displayed in the CLI prompt so you know which device you are configuring •...
Page 195 YSTEM ONFIGURATION AND ONITORING OMMANDS HOSTNAME : When AMF is configured, running the no hostname command will apply a NOTE hostname that is based on the MAC address of the device node, for example, node_0000_5e00_5301. Related show system Commands C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™...
Page 196: Max-Fib-Routes
YSTEM ONFIGURATION AND ONITORING OMMANDS ROUTES max-fib-routes Overview This command enables you to control the maximum number of FIB routes configured. It operates by providing parameters that enable you to configure preset maximums and warning message thresholds. The operation of these parameters is explained in the Parameter / Description table shown below.
Page 197: Max-Static-Routes
YSTEM ONFIGURATION AND ONITORING OMMANDS STATIC ROUTES max-static-routes Overview Use this command to set the maximum number of static routes, excluding FIB (Forwarding Information Base) routes. : For FIB routes use the max-fib-routes command. NOTE Use the no variant of this command to set the maximum number of static routes to the default of 1000 static routes.
Page 198: No Debug All
YSTEM ONFIGURATION AND ONITORING OMMANDS NO DEBUG ALL no debug all Overview This command disables the debugging facility for all features on your device. This stops the device from generating any diagnostic debugging messages. The debugging facility is disabled by default. Syntax no debug all [ipv6|dot1x|nsm] Parameter...
Page 199: Reboot
YSTEM ONFIGURATION AND ONITORING OMMANDS REBOOT reboot Overview This command halts the device and performs a cold restart (also known as reload). It displays a confirmation request before restarting. reboot Syntax reload Mode Privileged Exec Usage The reboot and reload commands perform the same action. Examples To restart the device, use the command: awplus#...
Page 200: Reload
YSTEM ONFIGURATION AND ONITORING OMMANDS RELOAD reload Overview This command performs the same function as the reboot command. C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 201: Show Clock
YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW CLOCK show clock Overview This command displays the system’s current configured local time and date. It also displays other clock related information such as timezone and summertime configuration. show clock Syntax Mode User Exec and Privileged Exec Example To display the system’s current local time, use the command: awplus#...
Page 202 YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW CLOCK Related clock set Commands clock summer-time date clock summer-time recurring clock timezone C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 203: Show Cpu
YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW CPU show cpu Overview This command displays a list of running processes with their CPU utilization. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 204 YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW CPU Output Figure 6-2: Example output from show cpu CPU averages: 1 second: 12%, 20 seconds: 2%, 60 seconds: 2% System load averages: 1 minute: 0.03, 5 minutes: 0.02, 15 minutes: 0.00 Current CPU load: userspace: 6%, kernel: 4%, interrupts: 1% iowaits: 0%...
Page 205 YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW CPU Table 2: Parameters in the output of the show cpu command (cont.) Parameter Description sleep% Percentage of time that the process is in the sleep state. runtime The time that the process has been running for, measured in jiffies.
Page 206: Show Cpu History
YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW CPU HISTORY show cpu history Overview This command prints a graph showing the historical CPU utilization. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 207 YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW CPU HISTORY Per minute CPU load history  100 90 80 70 + 50 40 30 20 ++ +++++++++ +++++++ ++++ + ++++++ ++++ +++ +++++ +++++++++ 10 ************************************************************ |..|..|..|..|..|..|..|..|..|..|..|.. Oldest Newest CPU load% per minute (last 60 minutes) * = average CPU load%, + = maximum...
Page 208: Show Debugging
User Exec and Privileged Exec Usage This command displays all debugging information, similar to the way the show tech-support command displays all show output for use by Allied Telesis authorized service personnel only. Example To display all debugging information, use the command: awplus#...
Page 209: Show Ecofriendly
YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW ECOFRIENDLY show ecofriendly Overview This command displays the switch’s eco-friendly configuration status. The ecofriendly led configuration status are shown in the show ecofriendly output. show ecofriendly Syntax Mode Privileged Exec and Global Configuration Example To display the switch’s eco-friendly configuration status, use the following command: awplus#...
Page 210: Show Interface Memory
This command displays the shared memory used by either all interfaces, or the specified interface or interfaces. The output is useful for diagnostic purposes by Allied Telesis authorized service personnel. For information on filtering and saving command output, see the “Getting Started...
Page 211 YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW INTERFACE MEMORY Output Figure 6-6: Example output from the show interface memory command awplus#show interface memory Vlan blocking state shared memory usage --------------------------------------------- Interface shmid Bytes Used nattch Status port1.0.1 393228 1 port1.0.2 458766 1...
Page 212: Show Memory
YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW MEMORY show memory Overview This command displays the memory used by each process that is currently running For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 213 YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW MEMORY Table 4: Parameters in the output of the show memory command Parameter Description RAM total Total amount of RAM memory free. free Available memory size. buffers Memory allocated kernel buffers. Identifier number for the process. name Short name used to describe the process.
Page 214: Show Memory Allocations
YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW MEMORY ALLOCATIONS show memory allocations Overview This command displays the memory allocations used by processes. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 215: Show Memory History
YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW MEMORY ALLOCATIONS Related show memory Commands show memory history show memory pools show memory shared show tech-support C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 216: Show Memory History
YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW MEMORY HISTORY show memory history Overview This command prints a graph showing the historical memory usage. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 217: Show Memory Pools
YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW MEMORY POOLS show memory pools Overview This command shows the memory pools used by processes. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 218: Show Memory Shared
Overview This command displays shared memory allocation information. The output is useful for diagnostic purposes by Allied Telesis authorized service personnel. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 219: Show Process
YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW PROCESS show process Overview This command lists a summary of the current running processes. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide. Syntax show process [sort {cpu|mem}] Parameter...
Page 220 YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW PROCESS Output Figure 6-13: Example output from the show process command  CPU averages: 1 second: 8%, 20 seconds: 5%, 60 seconds: 5% System load averages: 1 minute: 0.04, 5 minutes: 0.08, 15 minutes: 0.12 Current CPU load:...
Page 221 YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW PROCESS Table 5: Parameters in the output from the show process command (cont.) Parameter Description Process priority. state Process state; one of “run”, “sleep”, “stop”, “zombie”, or “dead”. sleep% Percentage of time the process is in the sleep state. Related show cpu Commands...
Page 222: Show Reboot History
YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW REBOOT HISTORY show reboot history Overview Use this command to display the device’s reboot history. show reboot history Syntax Mode User Exec and Privileged Exec Example To show the reboot history, use the command: awplus# show reboot history Output...
Page 223: Show Router-Id
YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW ROUTER show router-id Overview Use this command to show the Router ID of the current system. show router-id Syntax Mode User Exec and Privileged Exec Example To display the Router ID of the current system, use the command: awplus# show router-id Output...
Page 224: Show System
YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW SYSTEM show system Overview This command displays general system information about the device, including the hardware, installed, memory, and software versions loaded. It also displays location and contact details when these have been set. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 225: Show System Environment
YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW SYSTEM ENVIRONMENT show system environment Overview This command displays the current environmental status of your device and any attached PSU, XEM, or other expansion option. The environmental status covers information about temperatures, fans, and voltage. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 226: Show System Interrupts
YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW SYSTEM INTERRUPTS show system interrupts Overview Use this command to display the number of interrupts for each IRQ (Interrupt Request) used to interrupt input lines on a PIC (Programmable Interrupt Controller) on your device. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 227: Show System Mac
YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW SYSTEM MAC show system mac Overview This command displays the physical MAC address of the device. show system mac Syntax Mode User Exec and Privileged Exec Example To display the physical MAC address enter the following command: awplus# show system mac Output...
Page 228: Show System Serialnumber
YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW SYSTEM SERIALNUMBER show system serialnumber Overview This command shows the serial number information for the device. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 229: Show Tech-Support
YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW TECH SUPPORT show tech-support Overview This command generates system and debugging information for the device and saves it to a file. You can optionally limit the command output to display only information for a given protocol or feature.
Page 230 YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW TECH SUPPORT Parameter Description ripng Display RIPNG specific information stack Display stacking device information Display STP specific information system Display general system information tacacs+ Display TACACS+ information update Display resource update specific information Output modifier >...
Page 231: Speed (Asyn)
YSTEM ONFIGURATION AND ONITORING OMMANDS SPEED ASYN speed (asyn) Overview This command changes the console speed from the device. Note that a change in console speed is applied for subsequent console sessions. Exit the current session to enable the console speed change using the clear line console command.
Page 232 YSTEM ONFIGURATION AND ONITORING OMMANDS SPEED ASYN Related clear line console Commands line show running-config show startup-config speed C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 233: System Territory (Deprecated)
YSTEM ONFIGURATION AND ONITORING OMMANDS SYSTEM TERRITORY DEPRECATED system territory (deprecated) Overview This command has been deprecated in Software Version 5.4.4-0.1 and later. It now has no effect. It is no longer useful to specify a system territory, so there is no alternative command.
Page 234: Terminal Monitor
YSTEM ONFIGURATION AND ONITORING OMMANDS TERMINAL MONITOR terminal monitor Overview Use this command to display debugging output on a terminal. To display the cursor after a line of debugging output, press the Enter key. Use the command terminal no monitor to stop displaying debugging output on the terminal, or use the timeout option to stop displaying debugging output on the terminal after a set time.
Page 235: Undebug All
YSTEM ONFIGURATION AND ONITORING OMMANDS UNDEBUG ALL undebug all Overview This command applies the functionality of the no debug all command. C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 236: Pluggables And Cabling Commands
Pluggables and Cabling Commands Introduction Overview This chapter provides an alphabetical reference of commands used to configure and monitor Pluggables and Cabling, including: • Cable Fault Locator for finding faults in copper cabling • Optical Digital Diagnostic Monitoring (DDM) to help find fiber issues when links go down •...
Page 237: Clear Test Cable-Diagnostics Tdr
LUGGABLES AND ABLING OMMANDS CLEAR TEST CABLE DIAGNOSTICS TDR clear test cable-diagnostics tdr Overview This command clears the results of the last cable test that was run. clear test cable-diagnostics tdr Syntax Mode Privileged Exec Examples To clear the results of a previous cable-diagnostics test use the following commands: awplus# clear test cable-diagnostics tdr...
Page 238: Debug Fiber-Monitoring
LUGGABLES AND ABLING OMMANDS DEBUG FIBER MONITORING debug fiber-monitoring Overview Use this command to enable debugging of active fiber monitoring on the specified ports. Use the no variant of this command to disable debugging on all ports or the specified ports. Syntax debug fiber-monitoring interface <port-list>...
Page 239 LUGGABLES AND ABLING OMMANDS DEBUG FIBER MONITORING Output Figure 7-1: Example output from debug fiber-monitoring awplus#debug fiber-monitoring interface port2.0.1 awplus#terminal monitor  % Warning: Console logging enabled awplus#01:42:50 awplus Pluggable[522]: Fiber-monitor port2.0.1: Channel:1 Reading:1748 Baseline:1708 Threshold:1356 01:42:52 awplus Pluggable[522]: Fiber-monitor port2.0.1: Channel:1 Reading:1717 Baseline:1709 Threshold:1357...
Page 240: Fiber-Monitoring Action
LUGGABLES AND ABLING OMMANDS FIBER MONITORING ACTION fiber-monitoring action Overview Use this command to specify an action to be taken if the optical power received on the port changes from the baseline by the amount specified in the fiber-monitoring sensitivity command. Use the no variant of this command to remove the specified action or all actions from the port.
Page 241: Fiber-Monitoring Baseline
LUGGABLES AND ABLING OMMANDS FIBER MONITORING BASELINE fiber-monitoring baseline Overview Use this command to configure how the baseline value for comparison is calculated for active fiber monitoring on the port. Note that alarm generation will not commence until the link has been up for a full averaging period.
Page 242 LUGGABLES AND ABLING OMMANDS FIBER MONITORING BASELINE Related fiber-monitoring interval Commands fiber-monitoring sensitivity C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 243: Fiber-Monitoring Enable
LUGGABLES AND ABLING OMMANDS FIBER MONITORING ENABLE fiber-monitoring enable Overview Use this command to enable active fiber monitoring on a fiber port. If the port can support fiber monitoring but does not have the correct SFP or fiber type installed, the configuration will be saved, and monitoring will commence when a supported SFP is inserted.
Page 244: Fiber-Monitoring Interval
LUGGABLES AND ABLING OMMANDS FIBER MONITORING INTERVAL fiber-monitoring interval Overview Use this command to configure the fiber monitoring polling interval in seconds for the port. The optical power will be read every <interval> seconds and compared against the calculated threshold values to see if a log message or other action is required.
Page 245: Fiber-Monitoring Sensitivity
LUGGABLES AND ABLING OMMANDS FIBER MONITORING SENSITIVITY fiber-monitoring sensitivity Overview Use this command to configure the sensitivity of the alarm thresholds on the port for active fiber monitoring. Use the no variant of this command to reset the sensitivity to the default. Syntax fiber-monitoring sensitivity (low|medium|high|highest|fixed <25-65535>)|relative <0.01-10.0>...
Page 246 LUGGABLES AND ABLING OMMANDS FIBER MONITORING SENSITIVITY Related fiber-monitoring action Commands fiber-monitoring baseline show system fiber-monitoring C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 247: Show System Fiber-Monitoring
LUGGABLES AND ABLING OMMANDS SHOW SYSTEM FIBER MONITORING show system fiber-monitoring Overview Use this command to display settings and current status for Active Fiber Monitoring. show system fiber-monitoring Syntax Mode User Exec/Privileged Exec Example To display configuration and status for active fiber monitoring on ports, use the command: awplus# show system fiber-monitoring...
Page 248 LUGGABLES AND ABLING OMMANDS SHOW SYSTEM FIBER MONITORING Table 7-1: Parameters in the output from show system fiber-monitoring Parameter Description Reading units The units for optical power readings in the rest of the display, e.g. 0.0001mW. Status Whether active fiber monitoring is enabled or disabled for this port.
Page 249 LUGGABLES AND ABLING OMMANDS SHOW SYSTEM FIBER MONITORING fiber-monitoring interval fiber-monitoring sensitivity C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 250: Show System Pluggable
Different types of pluggable transceivers are supported in different models of device. See your Allied Telesis dealer for more information about the models of pluggables that your device supports.
Page 251 LUGGABLES AND ABLING OMMANDS SHOW SYSTEM PLUGGABLE Table 8: Parameters in the output from the show system pluggables command Parameter Description Port Specifies the vendor’s name for the installed pluggable transceiver. Vendor Name Specifies the vendor’s name for the installed pluggable transceiver.
Page 252: Show System Pluggable Detail
Different types of pluggable transceivers are supported in different models of device. See your Allied Telesis dealer for more information about the models of pluggables that your device supports.
Page 253 LUGGABLES AND ABLING OMMANDS SHOW SYSTEM PLUGGABLE DETAIL • Power Monitoring: Displays the received power measurement type, which can be either OMA(Optical Module Amplitude) or Avg(Average Power) measured in μW. : For parameters that are not supported or not specified, a hyphen is displayed NOTE instead.
Page 254 LUGGABLES AND ABLING OMMANDS SHOW SYSTEM PLUGGABLE DETAIL Table 9: Parameters in the output from the show system pluggables detail command: (cont.) Parameter Description Device Revision Specifies the hardware revision code for the pluggable transceiver. This may be useful for troubleshooting because different devices may support different pluggable transceiver revisions.
Page 255: Show System Pluggable Diagnostics
LUGGABLES AND ABLING OMMANDS SHOW SYSTEM PLUGGABLE DIAGNOSTICS show system pluggable diagnostics Overview This command displays diagnostic information about SFP pluggable transceivers that support Digital Diagnostic Monitoring (DDM). Different types of pluggable transceivers are supported in different models of device. See your device’s Datasheet for more information about the models of pluggables that your device supports.
Page 256 LUGGABLES AND ABLING OMMANDS SHOW SYSTEM PLUGGABLE DIAGNOSTICS Output Figure 7-6: Example output from the show system pluggable diagnostics command on a device awplus#show system pluggable diagnostics  System Pluggable Information Diagnostics  Port1.0.9 Status Alarms Warnings Min  Reading Alarm Warning Temp: (Degrees C)
Page 257: Show Test Cable-Diagnostics Tdr
LUGGABLES AND ABLING OMMANDS SHOW TEST CABLE DIAGNOSTICS TDR show test cable-diagnostics tdr Overview This command displays the results of the last cable-diagnostics test that was run using the TDR (Time Domain Reflectometer) on a fixed copper cable port. The displayed status of the cable can be either: •...
Page 258: Test Cable-Diagnostics Tdr Interface
LUGGABLES AND ABLING OMMANDS TEST CABLE DIAGNOSTICS TDR INTERFACE test cable-diagnostics tdr interface Overview This command applies the Cable Fault Locator’s cable-diagnostics tests to twisted pair data cables for a selected port. The tests will detect either correct, short circuit, or open, circuit terminations.
Page 259: Logging Commands
Logging Commands Introduction Overview This chapter provides an alphabetical reference of commands used to configure logging. Command List • “clear exception log” on page 261 • “clear log” on page 262 • “clear log buffered” on page 263 • “clear log permanent”...
Page 260 OGGING OMMANDS • “log email time” on page 293 • “log facility” on page 295 • “log host” on page 297 • “log host (filter)” on page 299 • “log host exclude” on page 302 • “log host source” on page 305 •...
Page 261: Clear Exception Log
OGGING OMMANDS CLEAR EXCEPTION LOG clear exception log Overview This command resets the contents of the exception log, but does not remove the associated core files. clear exception log Syntax Mode Privileged Exec awplus# clear exception log Example C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™...
Page 262: Clear Log
OGGING OMMANDS CLEAR LOG clear log Overview This command removes the contents of the buffered and permanent logs. clear log Syntax Mode Privileged Exec Example To delete the contents of the buffered and permanent log use the command: awplus# clear log Related clear log buffered Commands...
Page 263: Clear Log Buffered
OGGING OMMANDS CLEAR LOG BUFFERED clear log buffered Overview This command removes the contents of the buffered log. clear log buffered Syntax Mode Privileged Exec Example To delete the contents of the buffered log use the following commands: awplus# clear log buffered Related default log buffered Commands...
Page 264: Clear Log Permanent
OGGING OMMANDS CLEAR LOG PERMANENT clear log permanent Overview This command removes the contents of the permanent log. clear log permanent Syntax Mode Privileged Exec Example To delete the contents of the permanent log use the following commands: awplus# clear log permanent Related default log permanent Commands...
Page 265: Default Log Buffered
OGGING OMMANDS DEFAULT LOG BUFFERED default log buffered Overview This command restores the default settings for the buffered log stored in RAM. By default the size of the buffered log is 50 kB and it accepts messages with the severity level of “warnings” and above. default log buffered Syntax Default...
Page 266: Default Log Console
OGGING OMMANDS DEFAULT LOG CONSOLE default log console Overview This command restores the default settings for log messages sent to the terminal when a log console command is issued. By default all messages are sent to the console when a log console command is issued. default log console Syntax Mode...
Page 267: Default Log Email
OGGING OMMANDS DEFAULT LOG EMAIL default log email Overview This command restores the default settings for log messages sent to an email address. By default no filters are defined for email addresses. Filters must be defined before messages will be sent. This command also restores the remote syslog server time offset value to local (no offset).
Page 268: Default Log Host
OGGING OMMANDS DEFAULT LOG HOST default log host Overview This command restores the default settings for log sent to a remote syslog server. By default no filters are defined for remote syslog servers. Filters must be defined before messages will be sent. This command also restores the remote syslog server time offset value to local (no offset).
Page 269: Default Log Monitor
OGGING OMMANDS DEFAULT LOG MONITOR default log monitor Overview This command restores the default settings for log messages sent to the terminal when a terminal monitor command is used. default log monitor Syntax Default All messages are sent to the terminal when a terminal monitor command is used.
Page 270: Default Log Permanent
OGGING OMMANDS DEFAULT LOG PERMANENT default log permanent Overview This command restores the default settings for the permanent log stored in NVS. By default, the size of the permanent log is 50 kB and it accepts messages with the severity level of warnings and above. default log permanent Syntax Default...
Page 271: Log Buffered
OGGING OMMANDS LOG BUFFERED log buffered Overview This command configures the device to store log messages in RAM. Messages stored in RAM are not retained on the device over a restart. Once the buffered log reaches its configured maximum allowable size old messages will be deleted to make way for new ones.
Page 272: Log Buffered (Filter)
OGGING OMMANDS LOG BUFFERED FILTER log buffered (filter) Overview Use this command to create a filter to select messages to be sent to the buffered log. Selection can be based on the priority/ severity of the message, the program that generated the message, the logging facility used, a sub-string within the message or a combination of some or all of these.
Page 273 OGGING OMMANDS LOG BUFFERED FILTER Parameter Description imish Integrated Management Interface Shell (IMISH) epsr Ethernet Protection Switched Rings (EPSR) rmon Remote Monitoring loopprot Loop Protection dhcpsn DHCP snooping (DHCPSN) facility Filter messages to the buffered log by syslog facility. <facility> Specify one of the following syslog facilities to include messages from in the buffered log: kern Kernel messages...
Page 274 OGGING OMMANDS LOG BUFFERED FILTER To remove a filter that sends all messages generated by EPSR that have a severity of notices or higher to the buffered log, use the following commands: awplus# configure terminal awplus(config)# no log buffered level notices program epsr To remove a filter that sends all messages containing the text “Bridging initialization”...
Page 275: Log Buffered Exclude
OGGING OMMANDS LOG BUFFERED EXCLUDE log buffered exclude Overview Use this command to exclude specified log messages from the buffered log. You can exclude messages on the basis of: • the priority/severity of the message • the program that generated the message •...
Page 276 OGGING OMMANDS LOG BUFFERED EXCLUDE Parameter Description Integrated Management Interface (IMI) imish Integrated Management Interface Shell (IMISH) epsr Ethernet Protection Switched Rings (EPSR) rmon Remote Monitoring loopprot Loop Protection dhcpsn DHCP snooping (DHCPSN) facility Exclude messages from a syslog facility. <facility>...
Page 277: Log Buffered Size
OGGING OMMANDS LOG BUFFERED EXCLUDE log buffered log buffered (filter) log buffered size show log show log config C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 278: Log Buffered Size
OGGING OMMANDS LOG BUFFERED SIZE log buffered size Overview This command configures the amount of memory that the buffered log is permitted to use. Once this memory allocation has been filled old messages will be deleted to make room for new messages. log buffered size <50-250>...
Page 279: Log Console
OGGING OMMANDS LOG CONSOLE log console Overview This command configures the device to send log messages to consoles. The console log is configured by default to send messages to the device’s main console port. Use the no variant of this command to configure the device not to send log messages to consoles.
Page 280: Log Console (Filter)
OGGING OMMANDS LOG CONSOLE FILTER log console (filter) Overview This command creates a filter to select messages to be sent to all consoles when the log console command is given. Selection can be based on the priority/severity of the message, the program that generated the message, the logging facility used, a sub-string within the message or a combination of some or all of these.
Page 281 OGGING OMMANDS LOG CONSOLE FILTER Parameter Description loopprot Loop Protection dhcpsn DHCP snooping (DHCPSN) facility Filter messages by syslog facility. <facility> Specify one of the following syslog facilities to include messages from: kern Kernel messages user Random user-level messages mail Mail system daemon System daemons...
Page 282 OGGING OMMANDS LOG CONSOLE FILTER To remove a default filter that includes sending critical, alert and emergency level messages to the console, use the following commands: awplus# configure terminal awplus(config)# no log console level critical Related default log console Commands log console log console exclude show log config...
Page 283: Log Console Exclude
OGGING OMMANDS LOG CONSOLE EXCLUDE log console exclude Overview Use this command to prevent specified log messages from being sent to the console, when console logging is turned on. You can exclude messages on the basis of: • the priority/severity of the message •...
Page 284 OGGING OMMANDS LOG CONSOLE EXCLUDE Parameter Description mstp Multiple Spanning Tree Protocol (MSTP) Integrated Management Interface (IMI) imish Integrated Management Interface Shell (IMISH) epsr Ethernet Protection Switched Rings (EPSR) rmon Remote Monitoring loopprot Loop Protection dhcpsn DHCP snooping (DHCPSN) facility Exclude messages from a syslog facility.
Page 285 OGGING OMMANDS LOG CONSOLE EXCLUDE log console (filter) show log config C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 286: Log Email
OGGING OMMANDS LOG EMAIL log email Overview This command configures the device to send log messages to an email address. The email address is specified in this command. log email <email-address> Syntax Parameter Description <email-address> The email address to send log messages to Default By default no filters are defined for email log targets.
Page 287: Log Email (Filter)
OGGING OMMANDS LOG EMAIL FILTER log email (filter) Overview This command creates a filter to select messages to be sent to an email address. Selection can be based on the priority/ severity of the message, the program that generated the message, the logging facility used, a sub-string within the message or a combination of some or all of these.
Page 288 OGGING OMMANDS LOG EMAIL FILTER Parameter Description Integrated Management Interface (IMI) imish Integrated Management Interface Shell (IMISH) epsr Ethernet Protection Switched Rings (EPSR) rmon Remote Monitoring loopprot Loop Protection dhcpsn DHCP snooping (DHCPSN) facility Filter messages by syslog facility. <facility> Specify one of the following syslog facilities to include messages from: kern Kernel messages...
Page 289 OGGING OMMANDS LOG EMAIL FILTER To create a filter to send messages with a severity level of informational and above to the email address admin@alliedtelesis.com, use the following commands: awplus# configure terminal awplus(config)# log email admin@alliedtelesis.com level informational To stop the device emailing log messages emailed to the email address admin@alliedtelesis.com, use the following commands: awplus# configure terminal...
Page 290: Log Email Exclude
OGGING OMMANDS LOG EMAIL EXCLUDE log email exclude Overview Use this command to prevent specified log messages from being emailed, when the device is configured to send log messages to an email address. You can exclude messages on the basis of: •...
Page 291 OGGING OMMANDS LOG EMAIL EXCLUDE Parameter Description mstp Multiple Spanning Tree Protocol (MSTP) Integrated Management Interface (IMI) imish Integrated Management Interface Shell (IMISH) epsr Ethernet Protection Switched Rings (EPSR) rmon Remote Monitoring loopprot Loop Protection dhcpsn DHCP snooping (DHCPSN) facility Exclude messages from a syslog facility.
Page 292: Log Email Time
OGGING OMMANDS LOG EMAIL EXCLUDE log email (filter) log email time show log config C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 293: Log Email Time
OGGING OMMANDS LOG EMAIL TIME log email time Overview This command configures the time used in messages sent to an email address. If the syslog server is in a different time zone to your device then the time offset can be configured using either the utc-offset parameter option keyword or the local-offset parameter option keyword, where utc-offset is the time difference from UTC (Universal Time, Coordinated) and local-offset is the difference from...
Page 294 OGGING OMMANDS LOG EMAIL TIME To send messages to the email address test@home.com in the same time zone Examples as the device’s local time zone, use the following commands: awplus# configure terminal awplus(config)# log email admin@base.com time local 0 To send messages to the email address admin@base.com with the time information converted to the time zone of the email recipient, which is 3 hours ahead of the device’s local time zone, use the following commands: awplus#...
Page 295: Log Facility
OGGING OMMANDS LOG FACILITY log facility Overview Use this command to specify an outgoing syslog facility. This determines where the syslog server will store the log messages. Use the no variant of this command to remove the facility. Syntax log facility {kern|user|mail|daemon|auth|syslog|lpr|news|uucp|cron|authpriv |ftp|local0|local1|local2|local3|local4|local5|local6|local7} no log facility...
Page 296 OGGING OMMANDS LOG FACILITY Example To specify a facility of local0, use the following commands: awplus# configure terminal awplus(config)# log facility local0 Related show log config Commands C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 297: Log Host
OGGING OMMANDS LOG HOST log host Overview This command configures the device to send log messages to a remote syslog server via UDP port 514. The IP address of the remote server must be specified. By default no filters are defined for remote syslog servers. Filters must be defined before messages will be sent.
Page 298 OGGING OMMANDS LOG HOST log host time log trustpoint show log config C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 299: Log Host (Filter)
OGGING OMMANDS LOG HOST FILTER log host (filter) Overview This command creates a filter to select messages to be sent to a remote syslog server. Selection can be based on the priority/severity of the message, the program that generated the message, the logging facility used, a substring within the message or a combination of some or all of these.
Page 300 OGGING OMMANDS LOG HOST FILTER Parameter Description imish Integrated Management Interface Shell (IMISH) epsr Ethernet Protection Switched Rings (EPSR) rmon Remote Monitoring loopprot Loop Protection dhcpsn DHCP snooping (DHCPSN) facility Filter messages by syslog facility. <facility> Specify one of the following syslog facilities to include messages from: kern Kernel messages user...
Page 301 OGGING OMMANDS LOG HOST FILTER To create a filter to send messages with a severity level of informational and above to the syslog server with IP address 10.32.16.21, use the following commands: awplus# configure terminal awplus(config)# log host 10.32.16.21 level informational To remove a filter that sends all messages generated by EPSR that have a severity of notices or higher to a remote syslog server with IP address 10.32.16.21, use the following commands:...
Page 302: Log Host Exclude
OGGING OMMANDS LOG HOST EXCLUDE log host exclude Overview Use this command to prevent specified log messages from being sent to the remote syslog server, when log host is enabled. You can exclude messages on the basis of: • the priority/severity of the message •...
Page 303 OGGING OMMANDS LOG HOST EXCLUDE Parameter Description mstp Multiple Spanning Tree Protocol (MSTP) Integrated Management Interface (IMI) imish Integrated Management Interface Shell (IMISH) epsr Ethernet Protection Switched Rings (EPSR) rmon Remote Monitoring loopprot Loop Protection dhcpsn DHCP snooping (DHCPSN) facility Exclude messages from a syslog facility.
Page 304 OGGING OMMANDS LOG HOST EXCLUDE log host (filter) log host source log host time show log config C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 305: Log Host Source
OGGING OMMANDS LOG HOST SOURCE log host source Overview Use this command to specify a source interface or IP address for the device to send syslog messages from. You can specify any one of an interface name, an IPv4 address or an IPv6 address. This is useful if the device can reach the syslog server via multiple interfaces or addresses and you want to control which interface/address the device uses.
Page 306: Log Host Time
OGGING OMMANDS LOG HOST TIME log host time Overview This command configures the time used in messages sent to a remote syslog server. If the syslog server is in a different time zone to your device then the time offset can be configured using either the utc-offset parameter option keyword or the local-offset parameter option keyword, where utc-offset is the time difference from UTC (Universal Time, Coordinated) and local-offset is the difference from local time.
Page 307 OGGING OMMANDS LOG HOST TIME To send messages to the remote syslog server with the IP address 10.32.16.12 with the time information converted to the time zone of the remote syslog server, which is 3 hours ahead of the device’s local time zone, use the following commands: awplus# configure terminal...
Page 308: Log Monitor (Filter)
OGGING OMMANDS LOG MONITOR FILTER log monitor (filter) Overview This command creates a filter to select messages to be sent to the terminal when terminal monitor command is given. Selection can be based on the priority/severity of the message, the program that generated the message, the logging facility used, a sub-string within the message or a combination of some or all of these.
Page 309 OGGING OMMANDS LOG MONITOR FILTER Parameter Description rmon Remote Monitoring loopprot Loop Protection dhcpsn DHCP snooping (DHCPSN) facility Filter messages by syslog facility. <facility> Specify one of the following syslog facilities to include messages from: kern Kernel messages user Random user-level messages mail Mail system daemon...
Page 310 OGGING OMMANDS LOG MONITOR FILTER To remove a default filter that includes sending everything to the terminal, use the following commands: awplus# configure terminal awplus(config)# no log monitor level debugging Related default log monitor Commands log monitor exclude show log config terminal monitor C613-50104-01 REV A Command Reference for x230 Series...
Page 311: Log Monitor Exclude
OGGING OMMANDS LOG MONITOR EXCLUDE log monitor exclude Overview Use this command to prevent specified log messages from being displayed on a terminal, when terminal monitor is enabled. You can exclude messages on the basis of: • the priority/severity of the message •...
Page 312 OGGING OMMANDS LOG MONITOR EXCLUDE Parameter Description mstp Multiple Spanning Tree Protocol (MSTP) Integrated Management Interface (IMI) imish Integrated Management Interface Shell (IMISH) epsr Ethernet Protection Switched Rings (EPSR) rmon Remote Monitoring loopprot Loop Protection dhcpsn DHCP snooping (DHCPSN) facility Exclude messages from a syslog facility.
Page 313 OGGING OMMANDS LOG MONITOR EXCLUDE show log config terminal monitor C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 314: Log Permanent
OGGING OMMANDS LOG PERMANENT log permanent Overview This command configures the device to send permanent log messages to non-volatile storage (NVS) on the device. The content of the permanent log is retained over a reboot. Once the permanent log reaches its configured maximum allowable size old messages will be deleted to make way for new messages.
Page 315: Log Permanent (Filter)
OGGING OMMANDS LOG PERMANENT FILTER log permanent (filter) Overview This command creates a filter to select messages to be sent to the permanent log. Selection can be based on the priority/ severity of the message, the program that generated the message, the logging facility used, a sub-string within the message or a combination of some or all of these.
Page 316 OGGING OMMANDS LOG PERMANENT FILTER Parameter Description epsr Ethernet Protection Switched Rings (EPSR) rmon Remote Monitoring loopprot Loop Protection dhcpsn DHCP snooping (DHCPSN) facility Filter messages by syslog facility. <facility> Specify one of the following syslog facilities to include messages from: kern Kernel messages user...
Page 317: C613-50104-01 Rev A Command Reference For X230 Series
OGGING OMMANDS LOG PERMANENT FILTER Related clear log permanent Commands default log permanent log permanent log permanent exclude log permanent size show log config show log permanent C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 318: Log Permanent Exclude
OGGING OMMANDS LOG PERMANENT EXCLUDE log permanent exclude Overview Use this command to prevent specified log messages from being sent to the permanent log. You can exclude messages on the basis of: • the priority/severity of the message • the program that generated the message •...
Page 319 OGGING OMMANDS LOG PERMANENT EXCLUDE Parameter Description Integrated Management Interface (IMI) imish Integrated Management Interface Shell (IMISH) epsr Ethernet Protection Switched Rings (EPSR) rmon Remote Monitoring loopprot Loop Protection dhcpsn DHCP snooping (DHCPSN) facility Exclude messages from a syslog facility. <facility>...
Page 320: Log Permanent Size
OGGING OMMANDS LOG PERMANENT EXCLUDE log permanent (filter) log permanent size show log config show log permanent C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 321: Log Permanent Size
OGGING OMMANDS LOG PERMANENT SIZE log permanent size Overview This command configures the amount of memory that the permanent log is permitted to use. Once this memory allocation has been filled old messages will be deleted to make room for new messages. log permanent size <50-250>...
Page 322: Log-Rate-Limit Nsm
OGGING OMMANDS RATE LIMIT NSM log-rate-limit nsm Overview This command limits the number of log messages generated by the device for a given interval. Use the no variant of this command to revert to the default number of log messages generated by the device of up to 200 log messages per second. Syntax log-rate-limit nsm messages <message-limit>...
Page 323 OGGING OMMANDS RATE LIMIT NSM To return the device the default setting, to generate up to 200 log messages per second, use the following commands: awplus# configure terminal awplus(config)# no log-rate-limit nsm C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™...
Page 324: Log Trustpoint
OGGING OMMANDS LOG TRUSTPOINT log trustpoint Overview This command adds one or more trustpoints to be used with the syslog application. Multiple trustpoints may be specified, or the command may be executed multiple times, to add multiple trustpoints to the application. The no version of this command removes one or more trustpoints from the list of trustpoints associated with the application.
Page 325: Show Counter Log
OGGING OMMANDS SHOW COUNTER LOG show counter log Overview This command displays log counter information. show counter log Syntax Mode User Exec and Privileged Exec Example To display the log counter information, use the command: awplus# show counter log Output Figure 8-1: Example output from the show counter log command Log counters...
Page 326: Show Exception Log
OGGING OMMANDS SHOW EXCEPTION LOG show exception log Overview This command displays the contents of the exception log. show exception log Syntax Mode User Exec and Privileged Exec Example To display the exception log, use the command: awplus# show exception log Output Figure 8-2: Example output from the show exception log command on a...
Page 327: Show Log
OGGING OMMANDS SHOW LOG show log Overview This command displays the contents of the buffered log. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide. Syntax show log [tail [<10-250>]] Parameter Description tail...
Page 328 OGGING OMMANDS SHOW LOG Output Figure 8-3: Example output from the show log command awplus#show log  <date> <time> <facility>.<severity> <program[<pid>]>: <message>  -------------------------------------------------------------------- 2011 Aug 29 07:55:22 kern.notice awplus kernel: Linux version 2.6.32.12-at1 (mak er@awpmaker03-dl) (gcc version 4.3.3 (Gentoo 4.3.3-r3 p1.2, pie-10.1.5) ) #1 Wed Dec 8 11:53:40 NZDT 2010...
Page 329: Show Log Config
OGGING OMMANDS SHOW LOG CONFIG show log config Overview This command displays information about the logging system. This includes the configuration of the various log destinations, buffered, permanent, syslog servers (hosts) and email addresses. This also displays the latest status information for each of these destinations.
Page 330 OGGING OMMANDS SHOW LOG CONFIG Host 10.32.16.21: Time offset ..+2:00 Offset type ..UTC Source ..- Secured ..enabled Filters: 1 Level ..critical Program ..any Facility ..any Message text . any Statistics ..1327 messages received, 1 accepted by filter (2015 Nov 11  10:36:16) Email admin@alliedtelesis.com:...
Page 331: Show Log Permanent
OGGING OMMANDS SHOW LOG PERMANENT show log permanent Overview This command displays the contents of the permanent log. show log permanent [tail [<10-250>]] Syntax Parameter Description tail Display only the latest log entries. <10-250> Specify the number of log entries to display. Default If the optional tail parameter is specified only the latest 10 messages in the permanent log are displayed.
Page 332: Show Running-Config Log
OGGING OMMANDS SHOW RUNNING CONFIG LOG show running-config log Overview This command displays the current running configuration of the Log utility. show running-config log Syntax Mode Privileged Exec and Global Configuration Example To display the current configuration of the log utility, use the command: awplus# show running-config log Related...
Page 333: Scripting Commands
Scripting Commands Introduction Overview This chapter provides commands used for command scripts. Command List • “activate” on page 334 • “echo” on page 335 • “wait” on page 336 C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 334: Activate
CRIPTING OMMANDS ACTIVATE activate Overview This command activates a script file. activate [background] <script> Syntax Parameter Description background Activate a script to run in the background. A process that is running in the background will operate as a separate task, and will not interrupt foreground processing.
Page 335: Echo
CRIPTING OMMANDS ECHO echo Overview This command echoes a string to the terminal, followed by a blank line. echo <line> Syntax Parameter Description <line> The string to echo Mode User Exec and Privileged Exec Usage This command may be useful in CLI scripts, to make the script print user-visible comments.
Page 336: Wait
CRIPTING OMMANDS WAIT wait Overview This command pauses execution of the active script for the specified period of time. wait <delay> Syntax Parameter Description <delay> <1-65335> Specify the time delay in seconds Default No wait delay is specified by default to pause script execution. Mode Privileged Exec (when executed from a script not directly from the command line) Usage...
Page 337: Interface Commands
Interface Commands Introduction Overview This chapter provides an alphabetical reference of commands used to configure and display interfaces. Command List • “description (interface)” on page 338 • “interface (to configure)” on page 339 • “mru” on page 341 • “mtu” on page 343 •...
Page 338: Description (Interface)
NTERFACE OMMANDS DESCRIPTION INTERFACE description (interface) Overview Use this command to add a description to a specific port or interface. description <description> Syntax Parameter Description <description> Text describing the specific interface. Mode Interface Configuration Example The following example uses this command to describe the device that a switch port is connected to.
Page 339: Interface (To Configure)
NTERFACE OMMANDS INTERFACE TO CONFIGURE interface (to configure) Overview Use this command to select one or more interfaces to configure. interface <interface-list> Syntax interface lo Parameter Description <interface-list> The interfaces or ports to configure. An interface-list can be: • an interface such as a VLAN (e.g. vlan2), a switch port (e.g. port1.0.6), a static channel group (e.g.
Page 340 NTERFACE OMMANDS INTERFACE TO CONFIGURE The following example shows how to enter Interface mode to configure the local loopback interface. awplus# configure terminal awplus(config)# interface lo awplus(config-if)# Related ip address (IP Addressing and Protocol) Commands show interface show interface brief C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™...
Page 341: Mru
NTERFACE OMMANDS Overview Use this command to set the Maximum Receive Unit (MRU) size for switch ports, where MRU is the maximum frame size (excluding headers) that switch ports can receive. For more information, see the Switching Feature Overview and Configuration Guide.
Page 342 NTERFACE OMMANDS To restore the MRU size of 1500 bytes on port1.0.2, use the commands: awplus# configure terminal awplus(config)# interface port1.0.2 awplus(config-if)# no mru Related show interface Commands C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 343: Mtu
NTERFACE OMMANDS Overview Use this command to set the Maximum Transmission Unit (MTU) size for VLANs, where MTU is the maximum packet size that VLANs can transmit. The MTU size setting is applied to both IPv4 and IPv6 packet transmission. Use the no variant of this command to remove a previously specified Maximum Transmission Unit (MTU) size for VLANs, and restore the default MTU size (1500 bytes) for VLANs.
Page 344 NTERFACE OMMANDS Related show interface Commands C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 345: Show Interface
NTERFACE OMMANDS SHOW INTERFACE show interface Overview Use this command to display interface configuration and status. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide. Syntax show interface [<interface-list>] show interface lo Parameter Description...
Page 346 NTERFACE OMMANDS SHOW INTERFACE Figure 10-1: Example output from the show interface command awplus#show interface Interface port1.0.1 Scope: both Link is DOWN, administrative state is UP Thrash-limiting Status Not Detected, Action learn-disable, Timeout 1(s) Hardware is Ethernet, address is 001a.eb54.f3ae index 5001 metric 1 mru 1500...
Page 347 NTERFACE OMMANDS SHOW INTERFACE Figure 10-3: Example output from the show interface vlan1,vlan2 command  awplus#show interface vlan1,vlan2 Interface vlan1 Scope: both Link is UP, administrative state is UP Hardware is VLAN, address is 0015.77e9.5c50 IPv4 address 192.168.1.1/24 broadcast 192.168.1.255 index 201 metric 1 mtu 1500...
Page 348: Show Interface Brief
NTERFACE OMMANDS SHOW INTERFACE BRIEF show interface brief Overview Use this command to display brief interface, configuration, and status information, including provisioning information. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 349: Show Interface Memory
This command displays the shared memory used by either all interfaces, or the specified interface or interfaces. The output is useful for diagnostic purposes by Allied Telesis authorized service personnel. For information on filtering and saving command output, see the “Getting Started...
Page 350 NTERFACE OMMANDS SHOW INTERFACE MEMORY Output Figure 10-5: Example output from the show interface memory command awplus#show interface memory Vlan blocking state shared memory usage --------------------------------------------- Interface shmid Bytes Used nattch Status port1.0.1 393228 1 port1.0.2 458766 1 port1.0.3 360459 1...
Page 351: Show Interface Status
NTERFACE OMMANDS SHOW INTERFACE STATUS show interface status Overview Use this command to display the status of the specified interface or interfaces. Note that when no interface or interfaces are specified then the status of all interfaces on the device are shown. show interface [<port-list>] status Syntax Parameter...
Page 352 NTERFACE OMMANDS SHOW INTERFACE STATUS Table 4: Parameters in the output from the show interface status command Parameter Description Port Name/Type of the interface. Name Description of the interface. Status The administrative and operational status of the interface; one of: •...
Page 353: Shutdown
NTERFACE OMMANDS SHUTDOWN shutdown Overview This command shuts down the selected interface. This administratively disables the link and takes the link down at the physical (electrical) layer. Use the no variant of this command to disable this function and therefore to bring the link back up again.
Page 354: Port Mirroring And Remote Mirroring Commands
Port Mirroring and Remote Mirroring Commands Introduction Overview This chapter provides an alphabetical reference of commands used to configure Port Mirroring and Remote Mirroring (also known as RSPAN). For more information, see the Mirroring Feature Overview and Configuration Guide. Command List •...
Page 355: Mirror Interface
IRRORING AND EMOTE IRRORING OMMANDS MIRROR INTERFACE mirror interface Overview Use this command to define a mirror port and mirrored (monitored) ports and direction of traffic to be mirrored. The port for which you enter interface mode will be the mirror port. The destination port is removed from all VLANs, and no longer participates in other switching.
Page 356 IRRORING AND EMOTE IRRORING OMMANDS MIRROR INTERFACE Usage Use this command to send traffic to another device connected to the mirror port for monitoring. For more information, see the Mirroring Feature Overview and Configuration Guide. A mirror port cannot be associated with a VLAN. If a switch port is configured to be a mirror port, it is automatically removed from any VLAN it was associated with.
Page 357: Remote-Mirror Interface
IRRORING AND EMOTE IRRORING OMMANDS REMOTE MIRROR INTERFACE remote-mirror interface Overview Use this command on the source device to specify the source port whose traffic is to be remote-mirrored (monitored), and the remote mirroring VLAN ID these mirrored frames will be tagged with when they egress from the source device. The port for which Interface Configuration mode is entered is the port via which the mirrored traffic egresses the source device towards the remote destination device.
Page 358 IRRORING AND EMOTE IRRORING OMMANDS REMOTE MIRROR INTERFACE This command can only be used to configure a single egress port on the source device, not a range of egress ports. Do not use the interface command with multiple interfaces before using this remote-mirror interface command. One egress (destination) port on the source device can transmit mirrored frames from up to four remote mirrored (source) ports.
Page 359: Show Mirror
IRRORING AND EMOTE IRRORING OMMANDS SHOW MIRROR show mirror Overview Use this command to display the status of all mirrored ports. show mirror Syntax Mode User Exec and Privileged Exec Example To display the status of all mirrored ports, use the following command: awplus# show mirror Output...
Page 360: Show Mirror Interface
IRRORING AND EMOTE IRRORING OMMANDS SHOW MIRROR INTERFACE show mirror interface Overview Use this command to display port mirroring configuration for a mirrored (monitored) switch port. show mirror interface <port> Syntax Parameter Description <port> The monitored switch port to display information about. Mode User Exec, Privileged Exec and Interface Configuration To display port mirroring configuration for the port1.0.4, use the following...
Page 361: Show Remote-Mirror
IRRORING AND EMOTE IRRORING OMMANDS SHOW REMOTE MIRROR show remote-mirror Overview Use this command to display information for remote-mirroring. show remote-mirror Syntax Mode User Exec Example To display information about remote mirroring, use the command: awplus# show remote-mirror Output Figure 11-3: Example output from show remote-mirror awplus#show remote-mirror...
Page 362 IRRORING AND EMOTE IRRORING OMMANDS SHOW REMOTE MIRROR Table 11-1: Parameters in the output from show remote-mirror (cont.) Parameter Description Remote mirror On the destination device, this displays : egress ports • the remote mirror egress ports • the remote mirror VLANs they are associated with Remote mirror On source, destination and intermediate devices, this VLANs...
Page 363: Switchport Remote-Mirror-Egress
IRRORING AND EMOTE IRRORING OMMANDS SWITCHPORT REMOTE MIRROR EGRESS switchport remote-mirror-egress Overview Use this command on the device receiving remote mirrored traffic to set the remote mirroring egress port for the specified remote mirroring VLAN. This port removes the remote mirror VLAN tagging before transmitting the mirrored traffic. Ingress traffic on this port is disabled.
Page 364: Vlan Mode Remote-Mirror-Vlan
IRRORING AND EMOTE IRRORING OMMANDS VLAN MODE REMOTE MIRROR VLAN vlan mode remote-mirror-vlan Overview Use this command to create a single VLAN or a range of VLANs in remote mirror mode to be used for remote mirroring. Use the no variant of this command to remove the remote mirror VLAN from the VLAN database and its configurations.
Page 365 IRRORING AND EMOTE IRRORING OMMANDS VLAN MODE REMOTE MIRROR VLAN switchport remote-mirror-egress C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 366: Interface Testing Commands
Interface Testing Commands Introduction Overview This chapter provides an alphabetical reference of commands used for testing interfaces. Command List • “clear test interface” on page 367 • “service test” on page 368 • “test interface” on page 369 C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™...
Page 367: Clear Test Interface
NTERFACE ESTING OMMANDS CLEAR TEST INTERFACE clear test interface Overview This command clears test results and counters after issuing a test interface command. Test results and counters must be cleared to issue subsequent test interface commands later on. clear test interface {<port-list>|all} Syntax Parameter Description...
Page 368: Service Test
NTERFACE ESTING OMMANDS SERVICE TEST service test Overview This command puts the device into the interface testing state, ready to begin testing. After entering this command, enter Interface Configuration mode for the desired interfaces and enter the command test interface. Do not test interfaces on a device that is part of a live network—disconnect the device first.
Page 369: Test Interface
NTERFACE ESTING OMMANDS TEST INTERFACE test interface Overview This command starts a test on a port or all ports or a selected range or list of ports. Use the no variant of this command to disable this function. The test duration can be configured by specifying the time in minutes after specifying a port or ports to test.
Page 370 NTERFACE ESTING OMMANDS TEST INTERFACE Example To test the switch ports in VLAN 1, install loopbacks in the ports, and enter the following commands: awplus(config)# service test awplus(config)# no spanning-tree rstp enable bridge-forward awplus(config)# interface vlan1 awplus(config-if)# shutdown awplus(config-if)# awplus# test interface all To see the output, use the commands: awplus#...
Page 371: Part 2: Layer Two Switching
Part 2: Layer Two Switching C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 372: Switching Commands
Switching Commands Introduction Overview This chapter provides an alphabetical reference of commands used to configure switching. For more information, see the Switching Feature Overview and Configuration Guide. Command List • “backpressure” on page 374 • “clear loop-protection counters” on page 376 •...
Page 373 WITCHING OMMANDS • “mac address-table static” on page 399 • “mac address-table thrash-limit” on page 400 • “platform load-balancing” on page 401 • “platform stop-unreg-mc-flooding” on page 402 • “platform vlan-stacking-tpid” on page 404 • “polarity” on page 405 • “show debugging loopprot”...
Page 374: Backpressure
WITCHING OMMANDS BACKPRESSURE backpressure Overview This command provides a method of applying flow control to ports running in half duplex mode. The setting will only apply when the link is in the half-duplex state. You can disable backpressure on an interface using the off parameter or the no variant of this command.
Page 375 WITCHING OMMANDS BACKPRESSURE To disable back pressure flow control on interface port1.0.2 enter the following commands: awplus# configure terminal awplus(config)# interface port1.0.2 awplus(config-if)# backpressure off Validation show running-config Commands show interface Related duplex Commands C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™...
Page 376: Clear Loop-Protection Counters
WITCHING OMMANDS CLEAR LOOP PROTECTION COUNTERS clear loop-protection counters Overview Use this command to clear the counters for the Loop Protection counters. clear loop-protection [interface <port-list>] counters Syntax Parameters Description interface The interface whose counters are to be cleared. <port-list> A port, a port range, or an aggregated link.
Page 377: Clear Mac Address-Table Dynamic
WITCHING OMMANDS CLEAR MAC ADDRESS TABLE DYNAMIC clear mac address-table dynamic Overview Use this command to clear the filtering database of all entries learned for a selected MAC address, an MSTP instance, a switch port interface or a VLAN interface. clear mac address-table dynamic [address Syntax <mac-address>|interface <port>...
Page 378 WITCHING OMMANDS CLEAR MAC ADDRESS TABLE DYNAMIC This example shows how to clear all dynamically learned filtering database entries when learned through device operation for a given MSTP instance 1 on switch port interface port1.0.2. awplus# clear mac address-table dynamic interface port1.0.2 instance 1 Related clear mac address-table static...
Page 379: Clear Mac Address-Table Static
WITCHING OMMANDS CLEAR MAC ADDRESS TABLE STATIC clear mac address-table static Overview Use this command to clear the filtering database of all statically configured entries for a selected MAC address, interface, or VLAN. clear mac address-table static [address <mac-address>|interface Syntax <port>|vlan <vid>] Parameter Description...
Page 380: Clear Port Counter
WITCHING OMMANDS CLEAR PORT COUNTER clear port counter Overview Use this command to clear the packet counters of the port. clear port counter [<port>] Syntax Parameter Description <port> The port number or range Mode Privileged Exec To clear the packet counter for port1.0.1, use the command: Example awplus# clear port counter port1.0.1...
Page 381: Clear Port-Security Intrusion
WITCHING OMMANDS CLEAR PORT SECURITY INTRUSION clear port-security intrusion Overview Use this command to clear the history of the port-security intrusion list on all ports, or an individual port. If a port is not specified, the intrusion lists of all ports are cleared.
Page 382 WITCHING OMMANDS CLEAR PORT SECURITY INTRUSION Table 2: Example output from the show port-security intrusion command  awplus#show port-security intrusion interface port1.0.1 Port Security Intrusion List ------------------------------------------------------------ Interface: port1.0.1 - 1 intrusion(s) detected 801f.0200.19da To clear the history of port-security intrusion list on port1.0.1, use the following command: awplus# clear port-security intrusion interface port1.0.1...
Page 383 WITCHING OMMANDS CLEAR PORT SECURITY INTRUSION Related show port-security interface Commands show port-security intrusion switchport port-security switchport port-security aging switchport port-security maximum switchport port-security violation C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 384: Debug Loopprot
WITCHING OMMANDS DEBUG LOOPPROT debug loopprot Overview This command enables Loop Protection debugging. The no variant of this command disables Loop Protection debugging. Syntax debug loopprot {info|msg|pkt|state|nsm|all} no debug loopprot {info|msg|pkt|state|nsm|all} Parameter Description info General Loop Protection information. Received and transmitted Loop Detection Frames (LDFs). Echo raw ASCII display of received and transmitted LDF packets to the console.
Page 385: Debug Platform Packet
WITCHING OMMANDS DEBUG PLATFORM PACKET debug platform packet Overview This command enables platform to CPU level packet debug functionality on the device. Use the no variant of this command to disable platform to CPU level packet debug. If the result means both send and receive packet debug are disabled, then any active timeout will be canceled.
Page 386 WITCHING OMMANDS DEBUG PLATFORM PACKET To enable packet debug for sFlow packets only for the default timeout of 5 minutes, enter: awplus# debug platform packet sflow To enable send packet debug with no timeout, enter: awplus# debug platform packet send timeout 0 To enable VLAN packet debug for VLAN 2 with a timeout duration of 3 minutes, enter: awplus#...
Page 387: Duplex
WITCHING OMMANDS DUPLEX duplex Overview This command changes the duplex mode for the specified port. To see the currently-negotiated duplex mode for ports whose links are up, use the command show interface. To see the configured duplex mode (when different from the default), use the command show running-config.
Page 388 WITCHING OMMANDS DUPLEX Related backpressure Commands polarity speed show interface C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 389: Flowcontrol (Switch Port)
WITCHING OMMANDS FLOWCONTROL SWITCH PORT flowcontrol (switch port) Overview Use this command to enable flow control, and configure the flow control mode for the switch port. Use the no variant of this command to disable flow control for the specified switch port.
Page 390 WITCHING OMMANDS FLOWCONTROL SWITCH PORT awplus# configure terminal Examples awplus(config)# interface port1.0.2 awplus(config-if)# flowcontrol receive on awplus# configure terminal awplus(config)# interface port1.0.2 awplus(config-if)# flowcontrol send on awplus# configure terminal awplus(config)# interface port1.0.2 awplus(config-if)# flowcontrol receive off awplus# configure terminal awplus(config)# interface port1.0.2 awplus(config-if)# flowcontrol send off...
Page 391: Linkflap Action
WITCHING OMMANDS LINKFLAP ACTION linkflap action Overview Use this command to detect flapping on all ports. If more than 15 flaps occur in less than 15 seconds the flapping port will shut down. Use the no variant of this command to disable flapping detection at this rate. Syntax linkflap action [shutdown] no linkflap action...
Page 392: Loop-Protection Loop-Detect
WITCHING OMMANDS LOOP PROTECTION LOOP DETECT loop-protection loop-detect Overview Use this command to enable the loop-protection loop-detect feature and configure its parameters. Use the no variant of this command to disable the loop-protection loop-detect feature. Syntax loop-protection loop-detect [ldf-interval <period>] [ldf-rx-window <frames>] [fast-block] no loop-protection loop-detect Parameter...
Page 393: Loop-Protection Action
WITCHING OMMANDS LOOP PROTECTION ACTION loop-protection action Overview Use this command to specify the protective action to apply when a network loop is detected on an interface. Use the no variant of this command to reset the loop protection actions to the default action, vlan-disable, on an interface.
Page 394: Loop-Protection Action-Delay-Time
WITCHING OMMANDS LOOP PROTECTION ACTION DELAY TIME loop-protection action-delay-time Overview Use this command to sets the loop protection action delay time for an interface to specified values in seconds. The action delay time specifies the waiting period for the action. Use the no variant of this command to reset the loop protection action delay time for an interface to default.
Page 395: Loop-Protection Timeout
WITCHING OMMANDS LOOP PROTECTION TIMEOUT loop-protection timeout Overview Use this command to specify the Loop Protection recovery action duration on an interface. Use the no variant of this command to set the loop protection timeout to the default. Syntax loop-protection timeout <duration> no loop-protection timeout Parameter Description...
Page 396: Mac Address-Table Acquire
WITCHING OMMANDS MAC ADDRESS TABLE ACQUIRE mac address-table acquire Overview Use this command to enable MAC address learning on the device. Use the no variant of this command to disable learning. Syntax mac address-table acquire no mac address-table acquire Default Learning is enabled by default for all instances.
Page 397: Mac Address-Table Ageing-Time
WITCHING OMMANDS MAC ADDRESS TABLE AGEING TIME mac address-table ageing-time Overview Use this command to specify an ageing-out time for a learned MAC address. The learned MAC address will persist for at least the specified time. The no variant of this command will reset the ageing-out time back to the default of 300 seconds (5 minutes).
Page 398: Mac Address-Table Logging
WITCHING OMMANDS MAC ADDRESS TABLE LOGGING mac address-table logging Overview Use this command to create log entries when the content of the FDB (forwarding database) changes. Log messages are produced when a MAC address is added to or removed from the FDB. : MAC address table logging may impact the performance of the switch.
Page 399: Mac Address-Table Static
WITCHING OMMANDS MAC ADDRESS TABLE STATIC mac address-table static Overview Use this command to statically configure the MAC address-table to forward or discard frames with a matching destination MAC address. mac address-table static <mac-addr> {forward|discard} interface Syntax <port> [vlan <vid>] no mac address-table static <mac-addr>...
Page 400: Mac Address-Table Thrash-Limit
WITCHING OMMANDS MAC ADDRESS TABLE THRASH LIMIT mac address-table thrash-limit Overview Use this command to set the thrash limit on the device. Thrashing occurs when a MAC address table rapidly “flips” its mapping of a single MAC address between two subnets, usually as a result of a network loop. Use the no variant of this command to disable thrash limiting.
Page 401: Platform Load-Balancing
WITCHING OMMANDS PLATFORM LOAD BALANCING platform load-balancing Overview This command selects which address fields are used as inputs into the load balancing algorithm for aggregated links. The output from this algorithm is used to select which individual path a given packet will traverse within an aggregated link.
Page 402: Platform Stop-Unreg-Mc-Flooding
WITCHING OMMANDS PLATFORM STOP UNREG FLOODING platform stop-unreg-mc-flooding Overview If a multicast stream is arriving at a network device, and that network device has received no IGMP reports that request the receipt of the stream, then that stream is referred to as "unregistered". IGMP snooping actively prevents the flooding of unregistered streams to all ports in the VLAN on which the stream is received.
Page 403 WITCHING OMMANDS PLATFORM STOP UNREG FLOODING Examples To enable this feature and stop multicast packet flooding, use the following commands: awplus# configure terminal awplus(config)# platform stop-unreg-mc-flooding To disable this feature and allow multicast packet flooding, use the following commands: awplus# configure terminal awplus(config)# no platform stop-unreg-mc-flooding...
Page 404: Platform Vlan-Stacking-Tpid
WITCHING OMMANDS PLATFORM VLAN STACKING TPID platform vlan-stacking-tpid Overview This command specifies the Tag Protocol Identifier (TPID) value that applies to all frames that are carrying double tagged VLANs. All nested VLANs must use the same TPID value. (This feature is sometimes referred to as VLAN stacking or VLAN double-tagging.) Use the no variant of this command to revert to the default TPID value (0x8100).
Page 405: Polarity
WITCHING OMMANDS POLARITY polarity Overview This command sets the MDI/MDIX polarity on a copper-based switch port. polarity {auto|mdi|mdix} Syntax Parameter Description Sets the polarity to MDI (medium dependent interface). mdix Sets the polarity to MDI-X (medium dependent interface crossover). auto The switch port sets the polarity automatically.
Page 406: Show Debugging Loopprot
WITCHING OMMANDS SHOW DEBUGGING LOOPPROT show debugging loopprot Overview This command shows Loop Protection debugging information. show debugging loopprot Syntax Mode User Exec and Privileged Exec Example To display the enabled Loop Protection debugging modes, use the command: awplus# show debugging loopprot Related debug loopprot Commands...
Page 407: Show Debugging Platform Packet
WITCHING OMMANDS SHOW DEBUGGING PLATFORM PACKET show debugging platform packet Overview This command shows platform to CPU level packet debugging information. show debugging platform packet Syntax Mode User Exec and Privileged Exec Example To display the platform packet debugging information, use the command: awplus# show debugging platform packet Related...
Page 408: Show Flowcontrol Interface
WITCHING OMMANDS SHOW FLOWCONTROL INTERFACE show flowcontrol interface Overview Use this command to display flow control information. show flowcontrol interface <port> Syntax Parameter Description <port> Specifies the name of the port to be displayed. Mode User Exec and Privileged Exec To display the flow control for the port1.0.5, use the command: Example awplus#...
Page 409: Show Interface Err-Disabled
WITCHING OMMANDS SHOW INTERFACE ERR DISABLED show interface err-disabled Overview Use this command to show the ports which have been dynamically shut down by protocols running on the device and the protocols responsible for the shutdown. show interface [<interface-range> err-disabled] Syntax Parameter Description...
Page 410: Show Interface Switchport
WITCHING OMMANDS SHOW INTERFACE SWITCHPORT show interface switchport Overview Use this command to show VLAN information about each switch port. show interface switchport Syntax Mode User Exec and Privileged Exec Example To display VLAN information about each switch port, enter the command: awplus# show interface switchport Output...
Page 411: Show Loop-Protection
WITCHING OMMANDS SHOW LOOP PROTECTION show loop-protection Overview Use this command to display the current loop protection setup for the device. show loop-protection [interface <port-list>] [counters] Syntax Parameter Description interface The interface selected for display. <port-list> A port, a port range, or an aggregated link. counters Displays counter information for loop protection.
Page 412 WITCHING OMMANDS SHOW LOOP PROTECTION awplus#show loop-protection counters  Switch Loop Detection Counter  Interface Rx Invalid Last LDF Rx ------------------------------------------------------------------------- port1.0.1 vlan1 - port1.0.2 vlan1 - port1.0.3 vlan1 - C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 413: Show Mac Address-Table
WITCHING OMMANDS SHOW MAC ADDRESS TABLE show mac address-table Overview Use this command to display the mac address-table for all configured VLANs. show mac address-table Syntax Mode User Exec and Privileged Exec Usage The show mac address-table command is only applicable to view a mac address-table for Layer 2 switched traffic within VLANs.
Page 414 WITCHING OMMANDS SHOW MAC ADDRESS TABLE awplus(config)#mac address-table static 0000.1111.2222 for int  port1.0.3 vlan 2 awplus(config)#end awplus# awplus#show mac address-table  VLAN Port State unknown 0000.cd28.0752 static port1.0.2 0030.846e.bac7 dynamic port1.0.3 0000.1111.2222 static unknown 0000.cd28.0752 static port1.0.5 0030.846e.9bf4 dynamic 0000.cd00.0000 static Related...
Page 415: Show Mac Address-Table Thrash-Limit
WITCHING OMMANDS SHOW MAC ADDRESS TABLE THRASH LIMIT show mac address-table thrash-limit Overview Use this command to display the current thrash limit set for all interfaces on the device. show mac address-table thrash-limit Syntax Mode User Exec and Privileged Exec Example To display the current, use the following command: awplus#...
Page 416: Show Platform
WITCHING OMMANDS SHOW PLATFORM show platform Overview This command displays the settings configured by using the platform commands. show platform Syntax Mode Privileged Exec Usage This command displays the settings in the running config. For changes in some of these settings to take effect, the device must be rebooted with the new settings in the startup config.
Page 417 WITCHING OMMANDS SHOW PLATFORM Table 5: Parameters in the output of the show platform command (cont.) Parameter Description Vlan-stacking TPID The value of the TPID set in the Ethernet type field when a frame has a double VLAN tag (set with the platform vlan-stacking-tpid command).
Page 418: Show Platform Classifier Statistics Utilization Brief
WITCHING OMMANDS SHOW PLATFORM CLASSIFIER STATISTICS UTILIZATION BRIEF show platform classifier statistics utilization brief Overview This command displays the number of used entries available for various platform functions, and the percentage that number of entries represents of the total available. Syntax show platform classifier statistics utilization brief Mode...
Page 419: Show Platform Port
WITCHING OMMANDS SHOW PLATFORM PORT show platform port Overview This command displays the various port registers or platform counters for specified switchports. show platform port [<port-list>|counters] Syntax Parameter Description <port-list> The ports to display information about. A port-list can be: •...
Page 420 WITCHING OMMANDS SHOW PLATFORM PORT Output Figure 13-9: Example output from the show platform port command awplus#show platform port port1.0.1 Phy register value for port1.0.1 (ifindex: 5001)   00:1140 01:79ed 02:600d 03:85b0 04:01e1 05:c1e1 06:006d 07:2001  08:4d44 09:0600 0a:3800 0b:0000 0c:0000...
Page 421 WITCHING OMMANDS SHOW PLATFORM PORT Table 6: Parameters in the output from the show platform port command Parameter Description 256 - 511 Number of 256 - 511 octet packets received and transmitted. 512 - 1023 Number of 512 - 1023 octet packets received and transmitted.
Page 422 WITCHING OMMANDS SHOW PLATFORM PORT Table 6: Parameters in the output from the show platform port command Parameter Description CarrierSenseErr Receive False Carrier Counter. UndersizePkts Number of undersized packets received. Transmit Counters for traffic transmitted. Octets Number of octets transmitted. Pkts Number of packets transmitted.
Page 423: Show Port-Security Interface
WITCHING OMMANDS SHOW PORT SECURITY INTERFACE show port-security interface Overview Use this command to show the current port-security configuration and the switch port status. show port-security interface <port> Syntax Parameter Description <port> The port to display information about. The port may be a switch port (e.g.
Page 424: Show Port-Security Intrusion
WITCHING OMMANDS SHOW PORT SECURITY INTRUSION show port-security intrusion Overview Use this command to show the intrusion list. If the port is not specified, the entire intrusion table is shown. show port-security intrusion [interface <port>] Syntax Parameter Description interface Specify a port <port>...
Page 425: Show Storm-Control
WITCHING OMMANDS SHOW STORM CONTROL show storm-control Overview Use this command to display storm-control information for all interfaces or a particular interface. show storm-control [<port>] Syntax Parameter Description <port> The port to display information about. The port may be a switch port (e.g.
Page 426: Speed
WITCHING OMMANDS SPEED speed Overview This command changes the speed of the specified port. You can optionally specify the speed or speeds that get autonegotiated, so autonegotiation is only attempted at the specified speeds. To see the currently-negotiated speed for ports whose links are up, use the show interface command.
Page 427 WITCHING OMMANDS SPEED To set the port to auto-negotiate its speed at 100Mbps and 1000Mbps, enter the following commands: awplus# configure terminal awplus(config)# interface port1.0.2 awplus(config-if)# speed auto 100 1000 To set the port to auto-negotiate its speed at 1000Mbps only, enter the following commands: awplus# configure terminal...
Page 428: Storm-Control Level
WITCHING OMMANDS STORM CONTROL LEVEL storm-control level Overview Use this command to specify the speed limiting level for broadcasting, multicast, or destination lookup failure (DLF) traffic for the port. Storm-control limits the selected traffic type to the specified percentage of the maximum port speed. Use the no variant of this command to disable storm-control for broadcast, multicast or DLF traffic.
Page 429: Switchport Port-Security
WITCHING OMMANDS SWITCHPORT PORT SECURITY switchport port-security Overview Use this command to enable the port-security feature. This feature is also known as the port-based learn limit. It allows the user to set the maximum number of MAC addresses that each port can learn. Use the no variant of this command to disable the port-security feature.
Page 430: Switchport Port-Security Aging
WITCHING OMMANDS SWITCHPORT PORT SECURITY AGING switchport port-security aging Overview Use this command to set MAC addresses that have been learned by port security to age out. Use the no variant of this command to set the MAC addresses to not age out. Syntax switchport port-security aging no switchport port-security aging...
Page 431: Switchport Port-Security Maximum
WITCHING OMMANDS SWITCHPORT PORT SECURITY MAXIMUM switchport port-security maximum Overview Use this command to set the maximum number of MAC addresses that each port can learn. Use the no variant of this command to unset the maximum number of MAC addresses that each port can learn.
Page 432: Switchport Port-Security Violation
WITCHING OMMANDS SWITCHPORT PORT SECURITY VIOLATION switchport port-security violation Overview Use this command to set the action taken on a switch port when the port exceeds the learning limits. The port action can be either shutdown, restrict or protect. If shutdown is set, the physical link will be disabled and “shutdown”...
Page 433: Thrash-Limiting
WITCHING OMMANDS THRASH LIMITING thrash-limiting Overview Sets and configures the thrash limit action that will be applied to any port on the device when a thrashing condition is detected. The thrash-limiting timeout specifies the time, in seconds, for which the thrash action is employed. thrash-limiting {[action Syntax {learn-disable|link-down|port-disable|vlan-disable|none}]...
Page 434 WITCHING OMMANDS THRASH LIMITING To set the thrash limiting action to its default, use the following command: awplus(config-if)# no thrash-limiting action To set the thrash limiting timeout to its default, use the following command: awplus(config-if)# no thrash-limiting timeout Related loop-protection loop-detect Commands loop-protection action loop-protection timeout...
Page 435: Undebug Loopprot
WITCHING OMMANDS UNDEBUG LOOPPROT undebug loopprot Overview This command applies the functionality of the no debug loopprot command. C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 436: Undebug Platform Packet
WITCHING OMMANDS UNDEBUG PLATFORM PACKET undebug platform packet Overview This command applies the functionality of the no debug platform packet command. C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 437: Vlan Commands
VLAN Commands Introduction Overview This chapter provides an alphabetical reference of commands used to configure VLANs. For more information see the VLAN Feature Overview and Configuration Guide. Command List • “port-vlan-forwarding-priority” on page 439 • “private-vlan” on page 442 • “private-vlan association”...
Page 438 VLAN C OMMANDS • “switchport voice vlan priority” on page 465 • “vlan” on page 466 • “vlan database” on page 467 C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 439: Port-Vlan-Forwarding-Priority
VLAN C OMMANDS PORT VLAN FORWARDING PRIORITY port-vlan-forwarding-priority Overview Use this command to specify which protocol has the highest priority for controling transitions from blocking to forwarding traffic. This command prioritizes switch port forwarding mode control, when more than one of EPSR, Loop Protection, and MAC thrashing protection protocols are used on the switch.
Page 440 VLAN C OMMANDS PORT VLAN FORWARDING PRIORITY This command means that, when a protocol is set to have the highest priority over a data VLAN on a port, it will not allow other protocols to put that port-vlan into a forwarding state if the highest priority protocol blocked it.
Page 441 VLAN C OMMANDS PORT VLAN FORWARDING PRIORITY override each other to set a port to the forwarding or blocking states, use the commands: awplus# configure terminal awplus(config)# port-vlan-forwarding-priority none To restore the default highest priority protocol back to the default of EPSR, use the commands: awplus# configure terminal...
Page 442: Private-Vlan
VLAN C OMMANDS PRIVATE VLAN private-vlan Overview Use this command to a create a private VLAN. Private VLANs can be either primary or secondary. Secondary VLANs can be ether community or isolated. Use the no variant of this command to remove the specified private VLAN. For more information, see the VLAN Feature Overview and Configuration Guide.
Page 443: Private-Vlan Association
VLAN C OMMANDS PRIVATE VLAN ASSOCIATION private-vlan association Overview Use this command to associate a secondary VLAN to a primary VLAN. Only one isolated VLAN can be associated to a primary VLAN. Multiple community VLANs can be associated to a primary VLAN. Use the no variant of this command to remove association of all the secondary VLANs to a primary VLAN.
Page 444: Show Port-Vlan-Forwarding-Priority
VLAN C OMMANDS SHOW PORT VLAN FORWARDING PRIORITY show port-vlan-forwarding-priority Overview Use this command to display the highest priority protocol that controls port-vlan forwarding or blocking traffic. This command displays whether EPSR or Loop Protection is set as the highest priority for determining whether a port forwards a VLAN, as set by the port-vlan-forwarding-priority command.
Page 445: Show Vlan
VLAN C OMMANDS SHOW VLAN show vlan Overview Use this command to display information about a particular VLAN by specifying its VLAN ID. Selecting all will display information for all the VLANs configured. show vlan Syntax {all|brief|dynamic|static|auto|static-ports|<1-4094>} Parameter Description <1-4094> Display information about the VLAN specified by the VLAN ID.
Page 446: Show Vlan Private-Vlan
VLAN C OMMANDS SHOW VLAN PRIVATE VLAN show vlan private-vlan Overview Use this command to display the private VLAN configuration and associations. show vlan private-vlan Syntax Mode User Exec and Privileged Exec Example To display the private VLAN configuration and associations, enter the command: awplus# show vlan private-vlan Output...
Page 447: Switchport Access Vlan
VLAN C OMMANDS SWITCHPORT ACCESS VLAN switchport access vlan Overview Use this command to change the port-based VLAN of the current port. Use the no variant of this command to change the port-based VLAN of this port to the default VLAN, vlan1. Syntax switchport access vlan <vlan-id>...
Page 448: Switchport Mode Access
VLAN C OMMANDS SWITCHPORT MODE ACCESS switchport mode access Overview Use this command to set the switching characteristics of the port to access mode. Received frames are classified based on the VLAN characteristics, then accepted or discarded based on the specified filtering criteria. switchport mode access [ingress-filter {enable|disable}] Syntax Parameter...
Page 449: Switchport Mode Private-Vlan
VLAN C OMMANDS SWITCHPORT MODE PRIVATE VLAN switchport mode private-vlan Overview Use this command to make a Layer 2 port a private VLAN host port or a promiscuous port. Use the no variant of this command to remove the configuration. Syntax switchport mode private-vlan {host|promiscuous} no switchport mode private-vlan {host|promiscuous}...
Page 450: Switchport Mode Private-Vlan Trunk Promiscuous
VLAN C OMMANDS SWITCHPORT MODE PRIVATE VLAN TRUNK PROMISCUOUS switchport mode private-vlan trunk promiscuous Overview Use this command to enable a port in trunk mode to be promiscuous port for isolated VLANs. Use the no variant of this command to remove a port in trunk mode as a promiscuous port for isolated VLANs.
Page 451 VLAN C OMMANDS SWITCHPORT MODE PRIVATE VLAN TRUNK PROMISCUOUS To create the isolated VLANs 2, 3 and 4 and then enable port1.0.2 in trunk Examples mode as a promiscuous port for these VLANs with the group ID of 3, use the following commands: awplus# configure terminal...
Page 452: Switchport Mode Private-Vlan Trunk Secondary
VLAN C OMMANDS SWITCHPORT MODE PRIVATE VLAN TRUNK SECONDARY switchport mode private-vlan trunk secondary Overview Use this command to enable a port in trunk mode to be a secondary port for isolated VLANs. Use the no variant of this command to remove a port in trunk mode as a secondary port for isolated VLANs.
Page 453 VLAN C OMMANDS SWITCHPORT MODE PRIVATE VLAN TRUNK SECONDARY To create isolated private VLAN 2 and then enable port1.0.3 in trunk mode as Examples a secondary port for the this VLAN with the group ID of 3, use the following commands: awplus# configure terminal...
Page 454: Switchport Mode Trunk
VLAN C OMMANDS SWITCHPORT MODE TRUNK switchport mode trunk Overview Use this command to set the switching characteristics of the port to trunk. Received frames are classified based on the VLAN characteristics, then accepted or discarded based on the specified filtering criteria. switchport mode trunk [ingress-filter {enable|disable}] Syntax Parameter...
Page 455: Switchport Private-Vlan Host-Association
VLAN C OMMANDS SWITCHPORT PRIVATE VLAN HOST ASSOCIATION switchport private-vlan host-association Overview Use this command to associate a primary VLAN and a secondary VLAN to a host port. Only one primary and secondary VLAN can be associated to a host port. Use the no variant of this command to remove the association.
Page 456: Switchport Private-Vlan Mapping
VLAN C OMMANDS SWITCHPORT PRIVATE VLAN MAPPING switchport private-vlan mapping Overview Use this command to associate a primary VLAN and a set of secondary VLANs to a promiscuous port. Use the no variant of this to remove all the association of secondary VLANs to primary VLANs for a promiscuous port.
Page 457: Switchport Trunk Allowed Vlan
VLAN C OMMANDS SWITCHPORT TRUNK ALLOWED VLAN switchport trunk allowed vlan Overview Use this command to add VLANs to be trunked over this switch port. Traffic for these VLANs can be sent and received on the port. Use the no variant of this command to reset switching characteristics of a specified interface to negate a trunked configuration specified with switchport trunk allowed vlan command.
Page 458 VLAN C OMMANDS SWITCHPORT TRUNK ALLOWED VLAN : Only use the add or the remove parameters with this command if a list of NOTE VLANs are configured on a port. Only use the except parameter to remove VLANs after either the except or the all parameters have first been used to add a list of VLANs to a port.
Page 459 VLAN C OMMANDS SWITCHPORT TRUNK ALLOWED VLAN awplus#show running-config  !  interface port1.0.5 switchport switchport mode trunk switchport trunk allowed vlan except 3,5 Examples The following shows adding a single VLAN to the port’s member set. awplus# configure terminal awplus(config)# interface port1.0.2 awplus(config-if)#...
Page 460: Switchport Trunk Native Vlan
VLAN C OMMANDS SWITCHPORT TRUNK NATIVE VLAN switchport trunk native vlan Overview Use this command to configure the native VLAN for this port. The native VLAN is used for classifying the incoming untagged packets. Use the none parameter with this command to remove the native VLAN from the port and set the acceptable frame types to vlan-tagged only.
Page 461: Switchport Vlan-Stacking (Double Tagging)
VLAN C OMMANDS SWITCHPORT VLAN STACKING DOUBLE TAGGING switchport vlan-stacking (double tagging) Overview Use this command to enable VLAN stacking on a port and set it to be a customer-edge-port or provider-port. This is sometimes referred to as VLAN double-tagging, nested VLANs, or Q in Q. Use no parameter with this command to disable VLAN stacking on an interface.
Page 462: Switchport Voice Dscp
VLAN C OMMANDS SWITCHPORT VOICE DSCP switchport voice dscp Overview Use this command for a specific port to configure the Layer 3 DSCP value advertised when the transmission of LLDP-MED Network Policy TLVs for voice devices is enabled. When LLDP-MED capable IP phones receive this network policy information, they transmit voice data with the specified DSCP value.
Page 463: Switchport Voice Vlan
VLAN C OMMANDS SWITCHPORT VOICE VLAN switchport voice vlan Overview Use this command to configure the Voice VLAN tagging advertised when the transmission of LLDP-MED Network Policy TLVs for voice endpoint devices is enabled. When LLDP-MED capable IP phones receive this network policy information, they transmit voice data with the specified tagging.
Page 464 VLAN C OMMANDS SWITCHPORT VOICE VLAN “Egress-VLAN-Name (58)” in the RADIUS Accept message when authenticating a phone attached to this port. To set these attributes on the local RADIUS server, use the egress-vlan-id command or the egress-vlan-name command. C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™...
Page 465: Switchport Voice Vlan Priority
VLAN C OMMANDS SWITCHPORT VOICE VLAN PRIORITY switchport voice vlan priority Overview Use this command to configure the Layer 2 user priority advertised when the transmission of LLDP-MED Network Policy TLVs for voice devices is enabled. This is the priority in the User Priority field of the IEEE 802.1Q VLAN tag, also known as the Class of Service (CoS), or 802.1p priority.
Page 466: Vlan
VLAN C OMMANDS VLAN vlan Overview This command creates VLANs, assigns names to them, and enables or disables them. Disabling the VLAN causes all forwarding over the specified VLAN ID to cease. Enabling the VLAN allows forwarding of frames on the specified VLAN. The no variant of this command destroys the specified VLANs or returns their MTU to the default.
Page 467: Vlan Database
VLAN C OMMANDS VLAN DATABASE vlan database Overview Use this command to enter the VLAN Configuration mode. vlan database Syntax Mode Global Configuration Usage Use this command to enter the VLAN configuration mode. You can then add or delete a VLAN, or modify its values. Example In the following example, note the change to VLAN configuration mode from Configure mode:...
Page 468: Spanning Tree Commands
Spanning Tree Commands Introduction Overview This chapter provides an alphabetical reference for commands used to configure RSTP, STP or MSTP. For information about spanning trees, including configuration procedures, see the STP Feature Overview and Configuration Guide. Command List • “clear spanning-tree statistics”...
Page 469 PANNING OMMANDS • “show spanning-tree statistics instance” on page 500 • “show spanning-tree statistics instance interface” on page 501 • “show spanning-tree statistics interface” on page 503 • “show spanning-tree vlan range-index” on page 505 • “spanning-tree autoedge (RSTP and MSTP)”...
Page 470: Clear Spanning-Tree Statistics
PANNING OMMANDS CLEAR SPANNING TREE STATISTICS clear spanning-tree statistics Overview Use this command to clear all the STP BPDU (Bridge Protocol Data Unit) statistics. clear spanning-tree statistics Syntax clear spanning-tree statistics [instance <mstp-instance>] clear spanning-tree statistics [interface <port> [instance <mstp-instance>]] Parameter Description <port>...
Page 471: Clear Spanning-Tree Detected Protocols (Rstp And Mstp)
PANNING OMMANDS (RSTP MSTP) CLEAR SPANNING TREE DETECTED PROTOCOLS clear spanning-tree detected protocols (RSTP and MSTP) Overview Use this command to clear the detected protocols for a specific port, or all ports. Use this command in RSTP or MSTP mode only. clear spanning-tree detected protocols [interface <port>] Syntax Parameter...
Page 472: Debug Mstp (Rstp And Stp)
PANNING OMMANDS (RSTP STP) DEBUG MSTP debug mstp (RSTP and STP) Overview Use this command to enable debugging for the configured spanning tree mode, and echo data to the console, at various levels. Note that although this command uses the keyword mstp it displays debugging output for RSTP and STP protocols as well the MSTP protocol.
Page 473 PANNING OMMANDS (RSTP STP) DEBUG MSTP command. The default terminal monitor filter will select and display these messages. Alternatively, the messages can be directed to any of the other log outputs by adding a filter for the MSTP application using log buffered (filter) command: awplus#...
Page 474 PANNING OMMANDS (RSTP STP) DEBUG MSTP awplus#terminal monitor awplus#debug mstp packet rx decode interface port1.0.4 17:23:42 awplus MSTP[1417]: port1.0.4 xSTP BPDU rx - start 17:23:42 awplus MSTP[1417]: Protocol version: MSTP, BPDU type: RST 17:23:42 awplus MSTP[1417]: CIST Flags: Agree Forward Learn role=Desig 17:23:42 awplus MSTP[1417]: CIST root id : 0000:0000cd1000fe...
Page 475 PANNING OMMANDS (RSTP STP) DEBUG MSTP awplus#terminal monitor awplus#debug mstp packet rx decode interface port1.0.4 awplus#17:30:17 awplus MSTP[1417]: port1.0.4 xSTP BPDU rx - start 17:30:17 awplus MSTP[1417]: Protocol version: RSTP, BPDU type: RST 17:30:17 awplus MSTP[1417]: CIST Flags: Forward Learn role=Desig 17:30:17 awplus MSTP[1417]: CIST root id : 8000:0000cd1000fe...
Page 476: Instance Priority (Mstp)
PANNING OMMANDS (MSTP) INSTANCE PRIORITY instance priority (MSTP) Overview Use this command to set the priority for this device to become the root bridge for the specified MSTI (Multiple Spanning Tree Instance). Use this command for MSTP only. Use the no variant of this command to restore the root bridge priority of the device for the instance to the default.
Page 477 PANNING OMMANDS (MSTP) INSTANCE PRIORITY Related region (MSTP) Commands revision (MSTP) show spanning-tree mst config spanning-tree mst instance spanning-tree mst instance priority C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 478: Instance Vlan (Mstp)
PANNING OMMANDS (MSTP) INSTANCE VLAN instance vlan (MSTP) Overview Use this command to create an MST Instance (MSTI), and associate the specified VLANs with it. An MSTI is a spanning tree instance that exists within an MST region (MSTR). When a VLAN is associated with an MSTI the member ports of the VLAN are automatically configured to send and receive spanning-tree information for the associated MSTI.
Page 479 PANNING OMMANDS (MSTP) INSTANCE VLAN Related region (MSTP) Commands revision (MSTP) show spanning-tree mst config spanning-tree mst instance vlan C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 480: Region (Mstp)
PANNING OMMANDS (MSTP) REGION region (MSTP) Overview Use this command to assign a name to the device’s MST Region. MST Instances (MSTI) of a region form different spanning trees for different VLANs. Use this command for MSTP only. Use the no variant of this command to remove this region name and reset it to the default.
Page 481: Revision (Mstp)
PANNING OMMANDS (MSTP) REVISION revision (MSTP) Overview Use this command to specify the MST revision number to be used in the configuration identifier. Use this command for MSTP only. Syntax revision <revision-number> Parameter Description <revision-number> <0-65535> Revision number. Default The default of revision number is 0. Mode MST Configuration Usage...
Page 482: Show Debugging Mstp
PANNING OMMANDS SHOW DEBUGGING MSTP show debugging mstp Overview Use this command to show the MSTP debugging options set. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide. Syntax show debugging mstp Mode User Exec and Privileged Exec mode...
Page 483: Show Spanning-Tree
PANNING OMMANDS SHOW SPANNING TREE show spanning-tree Overview Use this command to display detailed spanning tree information on the specified port or on all ports. Use this command for RSTP, MSTP or STP. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 484 PANNING OMMANDS SHOW SPANNING TREE Output Figure 15-2: Example output from show spanning-tree in RSTP mode awplus#show spanning-tree % 1: Bridge up - Spanning Tree Enabled % 1: Root Path Cost 0 - Root Port 0 - Bridge Priority 32768 % 1: Forward Delay 15 - Hello Time 2 - Max Age 20...
Page 485 PANNING OMMANDS SHOW SPANNING TREE % 1: Bridge up - Spanning Tree Enabled % 1: Root Path Cost 0 - Root Port 0 - Bridge Priority 32768 % 1: Forward Delay 15 - Hello Time 2 - Max Age 20 % 1: Root Id 80000000cd20f093...
Page 486: Show Spanning-Tree Brief
PANNING OMMANDS SHOW SPANNING TREE BRIEF show spanning-tree brief Overview Use this command to display a summary of spanning tree status information on all ports. Use this command for RSTP, MSTP or STP. show spanning-tree brief Syntax Parameter Description brief A brief summary of spanning tree information.
Page 487: Show Spanning-Tree Mst
PANNING OMMANDS SHOW SPANNING TREE MST show spanning-tree mst Overview This command displays bridge-level information about the CIST and VLAN to MSTI mappings. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 488: Show Spanning-Tree Mst Config
PANNING OMMANDS SHOW SPANNING TREE MST CONFIG show spanning-tree mst config Overview Use this command to display MSTP configuration identifier for the device. show spanning-tree mst config Syntax Mode User Exec, Privileged Exec and Interface Configuration Usage The region name, the revision number, and the digest of the VLAN to MSTI configuration table must be the same on all devices that are intended to be in the same MST region.
Page 489: Show Spanning-Tree Mst Detail
PANNING OMMANDS SHOW SPANNING TREE MST DETAIL show spanning-tree mst detail Overview This command displays detailed information about each instance, and all interfaces associated with that particular instance. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 490 PANNING OMMANDS SHOW SPANNING TREE MST DETAIL port1.0.3: Port 5003 - Id 838b - Role Disabled - State Discarding port1.0.3: Designated External Path Cost 0 -Internal Path Cost 0 port1.0.3: Configured Path Cost 20000000 - Add type Explicit ref count 1 port1.0.3: Designated Port Id 838b - CIST Priority 128 -...
Page 491: Show Spanning-Tree Mst Detail Interface
PANNING OMMANDS SHOW SPANNING TREE MST DETAIL INTERFACE show spanning-tree mst detail interface Overview This command displays detailed information about the specified switch port, and the MST instances associated with it. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 492 PANNING OMMANDS SHOW SPANNING TREE MST DETAIL INTERFACE port1.0.2: No portfast configured - Current portfast off port1.0.2: portfast bpdu-guard default - Current portfast bpdu-guard off port1.0.2: portfast bpdu-filter default - Current portfast bpdu-filter off port1.0.2: no root guard configured - Current root guard off port1.0.2: Configured Link Type point-to-point - Current shared...
Page 493: Show Spanning-Tree Mst Instance
PANNING OMMANDS SHOW SPANNING TREE MST INSTANCE show spanning-tree mst instance Overview This command displays detailed information for the specified instance, and all switch ports associated with that instance. A topology change counter has been included for RSTP and MSTP. You can see the topology change counter for RSTP by using the show spanning-tree command.
Page 494: Show Spanning-Tree Mst Instance Interface
PANNING OMMANDS SHOW SPANNING TREE MST INSTANCE INTERFACE show spanning-tree mst instance interface Overview This command displays detailed information for the specified MST (Multiple Spanning Tree) instance, and the specified switch port associated with that MST instance. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 495: Show Spanning-Tree Mst Interface
PANNING OMMANDS SHOW SPANNING TREE MST INTERFACE show spanning-tree mst interface Overview This command displays the number of instances created, and VLANs associated with it for the specified switch port. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 496: Show Spanning-Tree Mst Detail Interface
PANNING OMMANDS SHOW SPANNING TREE MST DETAIL INTERFACE show spanning-tree mst detail interface Overview This command displays detailed information about the specified switch port, and the MST instances associated with it. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 497 PANNING OMMANDS SHOW SPANNING TREE MST DETAIL INTERFACE port1.0.2: No portfast configured - Current portfast off port1.0.2: portfast bpdu-guard default - Current portfast bpdu-guard off port1.0.2: portfast bpdu-filter default - Current portfast bpdu-filter off port1.0.2: no root guard configured - Current root guard off port1.0.2: Configured Link Type point-to-point - Current shared...
Page 498: Show Spanning-Tree Statistics
PANNING OMMANDS SHOW SPANNING TREE STATISTICS show spanning-tree statistics Overview This command displays BPDU (Bridge Protocol Data Unit) statistics for all spanning-tree instances, and all switch ports associated with all spanning-tree instances. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 499 PANNING OMMANDS SHOW SPANNING TREE STATISTICS % STATUS of Port Timers % --------------------- % Hello Time Configured : 2 % Hello timer : INACTIVE % Hello Time Value : 0 % Forward Delay Timer : INACTIVE % Forward Delay Timer Value : 0...
Page 500: Show Spanning-Tree Statistics Instance
PANNING OMMANDS SHOW SPANNING TREE STATISTICS INSTANCE show spanning-tree statistics instance Overview This command displays BPDU (Bridge Protocol Data Unit) statistics for the specified MST (Multiple Spanning Tree) instance, and all switch ports associated with that MST instance. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 501: Show Spanning-Tree Statistics Instance Interface
PANNING OMMANDS SHOW SPANNING TREE STATISTICS INSTANCE INTERFACE show spanning-tree statistics instance interface Overview This command displays BPDU (Bridge Protocol Data Unit) statistics for the specified MST (Multiple Spanning Tree) instance and the specified switch port associated with that MST instance. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 502 PANNING OMMANDS SHOW SPANNING TREE STATISTICS INSTANCE INTERFACE Output Figure 15-15: Example output from show spanning-tree statistics instance interface awplus#sh spanning-tree statistics interface port1.0.2 instance 1 Spanning Tree Enabled for Instance : 1 ================================== % INST_PORT port1.0.2 Information & Statistics % ----------------------------------------...
Page 503: Show Spanning-Tree Statistics Interface
PANNING OMMANDS SHOW SPANNING TREE STATISTICS INTERFACE show spanning-tree statistics interface Overview This command displays BPDU (Bridge Protocol Data Unit) statistics for the specified switch port, and all MST instances associated with that switch port. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 504 PANNING OMMANDS SHOW SPANNING TREE STATISTICS INTERFACE % PORT Based Information & Statistics % ----------------------------------- % Config Bpdu's xmitted : 0 % Config Bpdu's received : 0 % TCN Bpdu's xmitted : 0 % TCN Bpdu's received : 0 % Forward Trans Count : 0...
Page 505: Show Spanning-Tree Vlan Range-Index
PANNING OMMANDS SHOW SPANNING TREE VLAN RANGE INDEX show spanning-tree vlan range-index Overview Use this command to display information about MST (Multiple Spanning Tree) instances and the VLANs associated with them including the VLAN range-index value for the device. show spanning-tree vlan range-index Syntax Mode Privileged Exec...
Page 506: Spanning-Tree Autoedge (Rstp And Mstp)
PANNING OMMANDS (RSTP MSTP) SPANNING TREE AUTOEDGE spanning-tree autoedge (RSTP and MSTP) Overview Use this command to enable the autoedge feature on the port. The autoedge feature allows the port to automatically detect that it is an edge port. If it does not receive any BPDUs in the first three seconds after linkup, enabling, or entering RSTP or MSTP mode, it sets itself to be an edgeport and enters the forwarding state.
Page 507: Spanning-Tree Bpdu
PANNING OMMANDS SPANNING TREE BPDU spanning-tree bpdu Overview Use this command in Global Configuration mode to configure BPDU (Bridge Protocol Data Unit) discarding or forwarding, with STP (Spanning Tree Protocol) disabled on the switch. See the Usage note about disabling Spanning Tree before using this command, and using this command to forward unsupported BPDUs unchanged for unsupported STP Protocols.
Page 508 PANNING OMMANDS SPANNING TREE BPDU Examples To enable STP BPDU discard in Global Configuration mode with STP disabled, which discards all ingress STP BPDU frames, enter the commands: awplus# configure terminal awplus(config)# no spanning-tree stp enable awplus(config)# spanning-tree bpdu discard To enable STP BPDU forward in Global Configuration mode with STP disabled, which forwards any ingress STP BPDU frames to all ports regardless of any VLAN membership, enter the commands:...
Page 509: Spanning-Tree Cisco-Interoperability (Mstp)
PANNING OMMANDS (MSTP) SPANNING TREE CISCO INTEROPERABILITY spanning-tree cisco-interoperability (MSTP) Overview Use this command to enable/disable Cisco-interoperability for MSTP. Use this command for MSTP only. Syntax spanning-tree cisco-interoperability {enable|disable} Parameter Description enable Enable Cisco interoperability for MSTP. disable Disable Cisco interoperability for MSTP. Default If this command is not used, Cisco interoperability is disabled.
Page 510: Spanning-Tree Edgeport (Rstp And Mstp)
PANNING OMMANDS (RSTP MSTP) SPANNING TREE EDGEPORT spanning-tree edgeport (RSTP and MSTP) Overview Use this command to set a port as an edge-port. Use this command for RSTP or MSTP. This command has the same effect as the spanning-tree portfast (STP) command, but the configuration displays differently in the output of some show commands.
Page 511: Spanning-Tree Enable
PANNING OMMANDS SPANNING TREE ENABLE spanning-tree enable Overview Use this command in Global Configuration mode to enable the specified spanning tree protocol for all switch ports. Note that this must be the spanning tree protocol that is configured on the device by the spanning-tree mode command.
Page 512 PANNING OMMANDS SPANNING TREE ENABLE To disable RSTP in Global Configuration mode, enter the below commands: awplus# configure terminal awplus(config)# no spanning-tree rstp enable Related spanning-tree bpdu Commands spanning-tree mode C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 513: Spanning-Tree Errdisable-Timeout Enable
PANNING OMMANDS SPANNING TREE ERRDISABLE TIMEOUT ENABLE spanning-tree errdisable-timeout enable Overview Use this command to enable the errdisable-timeout facility, which sets a timeout for ports that are disabled due to the BPDU guard feature. Use this command for RSTP or MSTP. Use the no variant of this command to disable the errdisable-timeout facility.
Page 514: Spanning-Tree Errdisable-Timeout Interval
PANNING OMMANDS SPANNING TREE ERRDISABLE TIMEOUT INTERVAL spanning-tree errdisable-timeout interval Overview Use this command to specify the time interval after which a port is brought back up when it has been disabled by the BPDU guard feature. Use this command for RSTP or MSTP. Syntax spanning-tree errdisable-timeout interval <10-1000000>...
Page 515: Spanning-Tree Force-Version
PANNING OMMANDS SPANNING TREE FORCE VERSION spanning-tree force-version Overview Use this command in Interface Configuration mode for a switch port interface only to force the protocol version for the switch port. Use this command for RSTP or MSTP only. spanning-tree force-version <version> Syntax no spanning-tree force-version Parameter...
Page 516: Spanning-Tree Forward-Time
PANNING OMMANDS SPANNING TREE FORWARD TIME spanning-tree forward-time Overview Use this command to set the forward delay value. Use the no variant of this command to reset the forward delay value to the default setting of 15 seconds. The forward delay sets the time (in seconds) to control how fast a port changes its spanning tree state when moving towards the forwarding state.
Page 517: Spanning-Tree Guard Root
PANNING OMMANDS SPANNING TREE GUARD ROOT spanning-tree guard root Overview Use this command in Interface Configuration mode for a switch port only to enable the Root Guard feature for the switch port. The root guard feature disables reception of superior BPDUs. You can use this command for RSTP, STP or MSTP. Use the no variant of this command to disable the root guard feature for the port.
Page 518: Spanning-Tree Hello-Time
PANNING OMMANDS SPANNING TREE HELLO TIME spanning-tree hello-time Overview Use this command to set the hello-time. This sets the time in seconds between the transmission of device spanning tree configuration information when the device is the Root Bridge of the spanning tree or is trying to become the Root Bridge. Use this command for RSTP, STP or MSTP.
Page 519: Spanning-Tree Link-Type
PANNING OMMANDS SPANNING TREE LINK TYPE spanning-tree link-type Overview Use this command in Interface Configuration mode for a switch port interface only to enable or disable point-to-point or shared link types on the switch port. Use this command for RSTP or MSTP only. Use the no variant of this command to return the port to the default link type.
Page 520: Spanning-Tree Max-Age
PANNING OMMANDS SPANNING TREE MAX spanning-tree max-age Overview Use this command to set the max-age. This sets the maximum age, in seconds, that dynamic spanning tree configuration information is stored in the device before it is discarded. Use this command for RSTP, STP or MSTP. Use the no variant of this command to restore the default of max-age.
Page 521: Spanning-Tree Max-Hops (Mstp)
PANNING OMMANDS (MSTP) SPANNING TREE MAX HOPS spanning-tree max-hops (MSTP) Overview Use this command to specify the maximum allowed hops for a BPDU in an MST region. This parameter is used by all the instances of the MST region. Use the no variant of this command to restore the default. Use this command for MSTP only.
Page 522: Spanning-Tree Mode
PANNING OMMANDS SPANNING TREE MODE spanning-tree mode Overview Use this command to change the spanning tree protocol mode on the device. The spanning tree protocol mode on the device can be configured to either STP, RSTP or MSTP. spanning-tree mode {stp|rstp|mstp} Syntax Default The default spanning tree protocol mode on the device is RSTP.
Page 523: Spanning-Tree Mst Configuration
PANNING OMMANDS SPANNING TREE MST CONFIGURATION spanning-tree mst configuration Overview Use this command to enter the MST Configuration mode to configure the Multiple Spanning-Tree Protocol. spanning-tree mst configuration Syntax Mode Global Configuration Examples The following example uses this command to enter MST Configuration mode. Note the change in the command prompt.
Page 524: Spanning-Tree Mst Instance
PANNING OMMANDS SPANNING TREE MST INSTANCE spanning-tree mst instance Overview Use this command to assign a Multiple Spanning Tree instance (MSTI) to a switch port or channel group. Note that ports are automatically configured to send and receive spanning-tree information for the associated MSTI when VLANs are assigned to MSTIs using the instance vlan (MSTP) command.
Page 525: Spanning-Tree Mst Instance Path-Cost
PANNING OMMANDS SPANNING TREE MST INSTANCE PATH COST spanning-tree mst instance path-cost Overview Use this command to set the cost of a path associated with a switch port, for the specified MSTI. This specifies the switch port’s contribution to the cost of a path to the MSTI regional root via that port.
Page 526 PANNING OMMANDS SPANNING TREE MST INSTANCE PATH COST To return the path cost to its default value on instance 3, use the commands: awplus# configure terminal awplus(config)# interface port1.0.2 awplus(config-if)# no spanning-tree mst instance 3 path-cost Related instance vlan (MSTP) Commands spanning-tree mst instance spanning-tree mst instance priority...
Page 527: Spanning-Tree Mst Instance Priority
PANNING OMMANDS SPANNING TREE MST INSTANCE PRIORITY spanning-tree mst instance priority Overview Use this command in Interface Configuration mode for a switch port interface only to set the port priority for an MST instance (MSTI). Use the no variant of this command to restore the default priority value (128). Syntax spanning-tree mst instance <instance-id>...
Page 528: Spanning-Tree Mst Instance Restricted-Role
PANNING OMMANDS SPANNING TREE MST INSTANCE RESTRICTED ROLE spanning-tree mst instance restricted-role Overview Use this command in Interface Configuration mode for a switch port interface only to enable the restricted role for an MSTI (Multiple Spanning Tree Instance) on a switch port.
Page 529 PANNING OMMANDS SPANNING TREE MST INSTANCE RESTRICTED ROLE Related instance vlan (MSTP) Commands spanning-tree priority (port priority) spanning-tree mst instance spanning-tree mst instance path-cost spanning-tree mst instance restricted-tcn C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 530: Spanning-Tree Mst Instance Restricted-Tcn
PANNING OMMANDS SPANNING TREE MST INSTANCE RESTRICTED spanning-tree mst instance restricted-tcn Overview Use this command to prevent a switch port from propagating received topology change notifications and topology changes to other switch ports. This is named restricted TCN (Topology Change Notification). A TCN is a simple Bridge Protocol Data Unit (BPDU) that a bridge sends out to its root port to signal a topology change.
Page 531: Spanning-Tree Path-Cost
PANNING OMMANDS SPANNING TREE PATH COST spanning-tree path-cost Overview Use this command in Interface Configuration mode for a switch port interface only to set the cost of a path for the specified port. This value then combines with others along the path to the root bridge in order to determine the total cost path value from the particular port, to the root bridge.
Page 532: Spanning-Tree Portfast (Stp)
PANNING OMMANDS (STP) SPANNING TREE PORTFAST spanning-tree portfast (STP) Overview Use this command in Interface Configuration mode for a switch port interface only to set a port as an edge-port. The portfast feature enables a port to rapidly move to the forwarding state, without having first to pass through the intermediate spanning tree states.
Page 533 PANNING OMMANDS (STP) SPANNING TREE PORTFAST awplus# configure terminal Example awplus(config)# interface port1.0.2 awplus(config-if)# spanning-tree portfast Related spanning-tree edgeport (RSTP and MSTP) Commands show spanning-tree spanning-tree portfast bpdu-filter spanning-tree portfast bpdu-guard C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 534: Spanning-Tree Portfast Bpdu-Filter
PANNING OMMANDS SPANNING TREE PORTFAST BPDU FILTER spanning-tree portfast bpdu-filter Overview This command sets the bpdu-filter feature and applies a filter to any BPDUs (Bridge Protocol Data Units) received. Enabling this feature ensures that configured ports will not transmit any BPDUs and will ignore (filter out) any BPDUs received. BPDU Filter is not enabled on a port by default.
Page 535 PANNING OMMANDS SPANNING TREE PORTFAST BPDU FILTER To enable STP BPDU filtering in Interface Configuration mode, enter the commands: awplus# configure terminal awplus(config)# interface port1.0.2 awplus(config-if)# spanning-tree portfast bpdu-filter enable Related spanning-tree edgeport (RSTP and MSTP) Commands show spanning-tree spanning-tree portfast (STP) spanning-tree portfast bpdu-guard C613-50104-01 REV A Command Reference for x230 Series...
Page 536: Spanning-Tree Portfast Bpdu-Guard
PANNING OMMANDS SPANNING TREE PORTFAST BPDU GUARD spanning-tree portfast bpdu-guard Overview This command applies a BPDU (Bridge Protocol Data Unit) guard to the port. A port with the bpdu-guard feature enabled will block all traffic (BPDUs and user data), if it starts receiving BPDUs.
Page 537 PANNING OMMANDS SPANNING TREE PORTFAST BPDU GUARD Use the show spanning-tree command to display the device and port configurations for the BPDU Guard feature. It shows both the administratively configured and currently running values of bpdu-guard. Example To enable STP BPDU guard in Global Configuration mode, enter the below commands: awplus# configure terminal...
Page 538: Spanning-Tree Priority (Bridge Priority)
PANNING OMMANDS SPANNING TREE PRIORITY BRIDGE PRIORITY spanning-tree priority (bridge priority) Overview Use this command to set the bridge priority for the device. A lower priority value indicates a greater likelihood of the device becoming the root bridge. Use this command for RSTP, STP or MSTP. When MSTP mode is configured, this will apply to the CIST.
Page 539: Spanning-Tree Priority (Port Priority)
PANNING OMMANDS SPANNING TREE PRIORITY PORT PRIORITY spanning-tree priority (port priority) Overview Use this command in Interface Configuration mode for a switch port interface only to set the port priority for port. A lower priority value indicates a greater likelihood of the port becoming part of the active topology.
Page 540: Spanning-Tree Restricted-Role
PANNING OMMANDS SPANNING TREE RESTRICTED ROLE spanning-tree restricted-role Overview Use this command in Interface Configuration mode for a switch port interface only to restrict the port from becoming a root port. Use the no variant of this command to disable the restricted role functionality. Syntax spanning-tree restricted-role no spanning-tree restricted-role...
Page 541: Spanning-Tree Restricted-Tcn
PANNING OMMANDS SPANNING TREE RESTRICTED spanning-tree restricted-tcn Overview Use this command in Interface Configuration mode for a switch port interface only to prevent TCN (Topology Change Notification) BPDUs (Bridge Protocol Data Units) from being sent on a port. If this command is enabled, after a topology change a bridge is prevented from sending a TCN to its designated bridge.
Page 542: Spanning-Tree Transmit-Holdcount
PANNING OMMANDS SPANNING TREE TRANSMIT HOLDCOUNT spanning-tree transmit-holdcount Overview Use this command to set the maximum number of BPDU transmissions that are held back. Use the no variant of this command to restore the default transmit hold-count value. Syntax spanning-tree transmit-holdcount no spanning-tree transmit-holdcount Default Transmit hold-count default is 3.
Page 543: Undebug Mstp
PANNING OMMANDS UNDEBUG MSTP undebug mstp Overview This command applies the functionality of the no debug mstp (RSTP and STP) command. C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 544: Link Aggregation Commands
Link Aggregation Commands Introduction Overview This chapter provides an alphabetical reference of commands used to configure a static channel group (static aggregator) and dynamic channel group (LACP channel group, etherchannel or LACP aggregator). Link aggregation is also sometimes referred to as channeling. : AlliedWare Plus™...
Page 545 GGREGATION OMMANDS • “lacp system-priority” on page 552 • “lacp timeout” on page 553 • “platform load-balancing” on page 555 • “show debugging lacp” on page 556 • “show diagnostic channel-group” on page 557 • “show etherchannel” on page 559 •...
Page 546: Channel-Group
GGREGATION OMMANDS CHANNEL GROUP channel-group Overview Use this command to either create a new dynamic channel group while at the same time adding a port to it, or to add a port to an existing dynamic channel group. Note that you must also set the LACP mode to be either active or passive. You can create up to 32 dynamic (LACP) channel groups (and up to 96 static channel groups).
Page 547 GGREGATION OMMANDS CHANNEL GROUP Examples To add device port1.0.6 to a newly created LACP channel group 2 use the commands below: awplus# configure terminal awplus(config)# interface port1.0.6 awplus(config-if)# channel-group 2 mode active To remove device port1.0.6 from any created LACP channel groups use the command below: awplus# configure terminal...
Page 548: Clear Lacp Counters
GGREGATION OMMANDS CLEAR LACP COUNTERS clear lacp counters Overview Use this command to clear all counters of all present LACP aggregators (channel groups) or a given LACP aggregator. clear lacp [<1-32>] counters Syntax Parameter Description <1-32> Channel-group number. Mode Privileged Exec awplus# clear lacp 2 counters Example...
Page 549: Debug Lacp
GGREGATION OMMANDS DEBUG LACP debug lacp Overview Use this command to enable all LACP troubleshooting functions. Use the no variant of this command to disable this function. Syntax debug lacp {all|cli|event|ha|packet|sync|timer[detail]} no debug lacp {all|cli|event|ha|packet|sync|timer[detail]} Parameter Description Turn on all debugging for LACP. Specifies debugging for CLI messages.
Page 550: Lacp Global-Passive-Mode Enable
GGREGATION OMMANDS LACP GLOBAL PASSIVE MODE ENABLE lacp global-passive-mode enable Overview Use this command to enable LACP channel-groups to dynamically self-configure when they are connected to another device that has LACP channel-groups configured with Active Mode. lacp global-passive-mode enable Syntax no lacp global-passive-mode enable Default Enabled...
Page 551: Lacp Port-Priority
GGREGATION OMMANDS LACP PORT PRIORITY lacp port-priority Overview Use this command to set the priority of a device port. Ports are selected for aggregation based on their priority, with the higher priority (numerically lower) ports selected first. Use the no variant of this command to reset the priority of port to the default. Syntax lacp port-priority <1-65535>...
Page 552: Lacp System-Priority
GGREGATION OMMANDS LACP SYSTEM PRIORITY lacp system-priority Overview Use this command to set the system priority of a local system. This is used in determining the system responsible for resolving conflicts in the choice of aggregation groups. Use the no variant of this command to reset the system priority of the local system to the default.
Page 553: Lacp Timeout
GGREGATION OMMANDS LACP TIMEOUT lacp timeout Overview Use this command to set the short or long timeout on a port. Ports will time out of the aggregation if three consecutive updates are lost. lacp timeout {short|long} Syntax Parameter Description timeout Number of seconds before invalidating a received LACP data unit (DU).
Page 554 GGREGATION OMMANDS LACP TIMEOUT The following commands set the LACP short timeout for 1 second on port1.0.2. awplus# configure terminal awplus(config)# interface port1.0.2 awplus(config-if)# lacp timeout short C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 555: Platform Load-Balancing
GGREGATION OMMANDS PLATFORM LOAD BALANCING platform load-balancing Overview This command selects which address fields are used as inputs into the load balancing algorithm for aggregated links. The output from this algorithm is used to select which individual path a given packet will traverse within an aggregated link.
Page 556: Show Debugging Lacp
GGREGATION OMMANDS SHOW DEBUGGING LACP show debugging lacp Overview Use this command to display the LACP debugging option set. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide. Syntax show debugging lacp Mode User Exec and Privileged Exec...
Page 557: Show Diagnostic Channel-Group
Overview This command displays dynamic and static channel group interface status information. The output of this command is useful for Allied Telesis authorized service personnel for diagnostic purposes. For information on filtering and saving command output, see the “Getting Started...
Page 558 GGREGATION OMMANDS SHOW DIAGNOSTIC CHANNEL GROUP  Channel Group Info based on HW: Note: Pos - position in hardware table Only entries from first device are displayed. ------------------------------------------------------------- Interface IfIndex Member port IfIndex Active Pos ------------------------------------------------------------- 4503 N/a 4601 N/a ...
Page 559: Show Etherchannel
GGREGATION OMMANDS SHOW ETHERCHANNEL show etherchannel Overview Use this command to display information about a LACP channel specified by the channel group number. The command output also shows the thrash limiting status. If thrash limiting is detected and the action parameter of the thrash-limiting command is set to vlan-disable, the output will also show the VLANs on which thrashing is detected.
Page 560: Show Etherchannel Detail
GGREGATION OMMANDS SHOW ETHERCHANNEL DETAIL show etherchannel detail Overview Use this command to display detailed information about all LACP channels. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide, which is available on our website at alliedtelesis.com.
Page 561: Show Etherchannel Summary
GGREGATION OMMANDS SHOW ETHERCHANNEL SUMMARY show etherchannel summary Overview Use this command to display a summary of all LACP channels. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide, which is available on our website at alliedtelesis.com.
Page 562: Show Lacp Sys-Id
GGREGATION OMMANDS SHOW LACP SYS show lacp sys-id Overview Use this command to display the LACP system ID and priority. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide, which is available on our website at alliedtelesis.com.
Page 563: Show Lacp-Counter
GGREGATION OMMANDS SHOW LACP COUNTER show lacp-counter Overview Use this command to display the packet traffic on all ports of all present LACP aggregators, or a given LACP aggregator. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 564: Show Port Etherchannel
GGREGATION OMMANDS SHOW PORT ETHERCHANNEL show port etherchannel Overview Use this command to show LACP details of the device port specified. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide, which is available on our website at alliedtelesis.com.
Page 565: Show Static-Channel-Group
GGREGATION OMMANDS SHOW STATIC CHANNEL GROUP show static-channel-group Overview Use this command to display all configured static channel groups and their corresponding member ports. Note that a static channel group is the same as a static aggregator. The command output also shows the thrash limiting status. If thrash limiting is detected and the action parameter of the thrash-limiting command is set to...
Page 566: Static-Channel-Group
GGREGATION OMMANDS STATIC CHANNEL GROUP static-channel-group Overview Use this command to create a static channel group, or add a member port to an existing static channel group. Static channel groups are also known as static aggregators. You can create up to 96 static channel groups (and up to 32 dynamic channel groups).
Page 567 GGREGATION OMMANDS STATIC CHANNEL GROUP To reference static channel group 2 as an interface, use the commands: awplus# configure terminal awplus(config)# interface sa2 awplus(config-if)# To make it possible to use QoS Storm Protection on static channel group 2 on port1.0.6, with an ACL named “test-acl”, use the commands: awplus# configure terminal awplus(config)#...
Page 568: Undebug Lacp
GGREGATION OMMANDS UNDEBUG LACP undebug lacp Overview This command applies the functionality of the no debug lacp command. C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 569: Power Over Ethernet Commands
The following documents offer further information for configuring PoE on AlliedWare Plus switches. • PoE Feature Overview and Configuration_Guide. • Support for Allied Telesis Enterprise_MIBs_in AlliedWare Plus, for information about which PoE MIB objects are supported. • SNMP Feature Overview and Configuration_Guide, for information about SNMP traps.
Page 570 OWER OVER THERNET OMMANDS • “show debugging power-inline” on page 583 • “show power-inline” on page 584 • “show power-inline counters” on page 587 • “show power-inline interface” on page 589 • “show power-inline interface detail” on page 591 C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™...
Page 571: Clear Power-Inline Counters Interface
OWER OVER THERNET OMMANDS CLEAR POWER INLINE COUNTERS INTERFACE clear power-inline counters interface Overview This command will clear the counters from a specified port, a range of ports, or all ports on the switch. If no ports are entered then PoE counters for all ports are cleared.
Page 572: Debug Power-Inline
OWER OVER THERNET OMMANDS DEBUG POWER INLINE debug power-inline Overview This command enables debugging display for messages that are specific to Power over Ethernet (PoE). Use the no variant of this command to disable the specified PoE debugging messages. Syntax debug power-inline [all|event|info|power] no debug power-inline [all|event|info|power] Parameter...
Page 573 OWER OVER THERNET OMMANDS DEBUG POWER INLINE Related show debugging power-inline Commands terminal monitor C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 574: Power-Inline Allow-Legacy
OWER OVER THERNET OMMANDS POWER INLINE ALLOW LEGACY power-inline allow-legacy Overview This command enables detection of pre-IEEE 802.3af Power Ethernet standard legacy Powered Devices (PDs). The no variant of this command disables detection of pre-IEEE 802.3af Power Ethernet standard legacy Powered Devices (PDs). Syntax power-inline allow-legacy no power-inline allow-legacy...
Page 575: Power-Inline Description
OWER OVER THERNET OMMANDS POWER INLINE DESCRIPTION power-inline description Overview This command adds a description for a Powered Device (PD) connected to a PoE port. The no variant of this command clears a previously entered description for a connected PD, resetting the PD description to the default (null). Syntax power-inline description <pd-description>...
Page 576: Power-Inline Enable
OWER OVER THERNET OMMANDS POWER INLINE ENABLE power-inline enable Overview This command enables Power over Ethernet (PoE) to detect a connected Powered Device (PD) and supply power. The no variant of this command disables PoE functionality on the selected PoE port(s).
Page 577: Power-Inline Max
OWER OVER THERNET OMMANDS POWER INLINE MAX power-inline max Overview Note that the value set by this command will be the figure the switch will use when apportioning the power budget for its ports. For example, if 15.4 W is assigned to a port whose PD only consumes 5 W, the switch will reserve the full 15.4 W for this port when determining its total power PoE power requirement.
Page 578 OWER OVER THERNET OMMANDS POWER INLINE MAX Note the difference in power supplied from the PSE to the power available at the PD due to line loss. See the PoE Feature Overview and Configuration Guide for further information about the difference between the power supplied from the PSE and the power available at the PD.
Page 579: Power-Inline Priority
OWER OVER THERNET OMMANDS POWER INLINE PRIORITY power-inline priority Overview This command sets the Power over Ethernet (PoE) priority level of a PoE port to one of three available priority levels: • • high • critical The no variant of this command restores the PoE port priority to the default (low). power-inline priority {low|high|critical} Syntax no power-inline priority...
Page 580 OWER OVER THERNET OMMANDS POWER INLINE PRIORITY To reset the priority level to the default of low on port1.0.1 to port1.0.4, use the following commands: awplus# configure terminal awplus(config)# interface port1.0.1-port1.0.4 awplus(config-if)# no power-inline priority Related power-inline usage-threshold Commands show power-inline show power-inline interface show running-config power-inline...
Page 581: Power-Inline Usage-Threshold
OWER OVER THERNET OMMANDS POWER INLINE USAGE THRESHOLD power-inline usage-threshold Overview This command sets the level at which the switch will issue a message that the power supplied to all Powered Devices (PDs) has reached a critical level of the nominal power rating for the switch.
Page 582: Service Power-Inline
OWER OVER THERNET OMMANDS SERVICE POWER INLINE service power-inline Overview This command enables Power over Ethernet (PoE) globally on the switch, for all PoE ports. service power-inline Syntax no service power-inline Default PoE functionality is enabled by default Mode Global Configuration Examples To disable PoE, use the following commands: awplus#...
Page 583: Show Debugging Power-Inline
OWER OVER THERNET OMMANDS SHOW DEBUGGING POWER INLINE show debugging power-inline Overview This command displays Power over Ethernet (PoE) debug settings. show debugging power-inline Syntax Mode User Exec and Privileged Exec Example To display PoE debug settings, use the following command: awplus# show debugging power-inline Output...
Page 584: Show Power-Inline
OWER OVER THERNET OMMANDS SHOW POWER INLINE show power-inline Overview This command displays the Power over Ethernet (PoE) status for all ports. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 585 OWER OVER THERNET OMMANDS SHOW POWER INLINE Table 1: Parameters in the show power-inline command output (cont.) Parameter Description Operational The operational status of the PSU hardware when this Status command was issued: • On if the PSU is installed and switched on. •...
Page 586 OWER OVER THERNET OMMANDS SHOW POWER INLINE Table 1: Parameters in the show power-inline command output (cont.) Parameter Description Class The class of the connected PD, if power is being supplied to the PD. Max (mW) The power in milliwatts (mW) allocated for the PoE port. Additionally, note the following as displayed per PoE port: •...
Page 587: Show Power-Inline Counters
OWER OVER THERNET OMMANDS SHOW POWER INLINE COUNTERS show power-inline counters Overview This command displays Power over Ethernet (PoE) event counters for ports on the Power Sourcing Equipment (PSE). The PoE event counters displayed can also be accessed by objects in the PoE MIB (RFC 3621). See the MIB Objects Feature Overview and Configuration Guide for information about which PoE MIB objects...
Page 588 OWER OVER THERNET OMMANDS SHOW POWER INLINE COUNTERS Table 2: Parameters in the show power-inline counters command output Parameter Description Interface The PoE port(s) in the format portx.y.z, where x is the device number, y is the module number within the device, and z is the PoE port number within the module.
Page 589: Show Power-Inline Interface
OWER OVER THERNET OMMANDS SHOW POWER INLINE INTERFACE show power-inline interface Overview This command displays a summary of Power over Ethernet (PoE) information for specified ports. If no ports are specified then PoE information is displayed for all ports. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 590 OWER OVER THERNET OMMANDS SHOW POWER INLINE INTERFACE Table 3: Parameters in the show power-inline interface command output Parameter Description The current PoE priorities for PoE ports on the PSE, as configured from a power-inline priority command: • Low displays when the low parameter is issued. The lowest priority for a PoE enabled port (default).
Page 591: Show Power-Inline Interface Detail
OWER OVER THERNET OMMANDS SHOW POWER INLINE INTERFACE DETAIL show power-inline interface detail Overview This command displays detailed information for one or more Power over Ethernet (PoE) ports. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 592 OWER OVER THERNET OMMANDS SHOW POWER INLINE INTERFACE DETAIL Table 4: Parameters in show power-inline interface detail command output Parameter Description Interface The PoE port(s) in the format portx.y.z, where x is the device number, y is the module number within the device, and z is the PoE port number within the module.
Page 593 OWER OVER THERNET OMMANDS SHOW POWER INLINE INTERFACE DETAIL Table 4: Parameters in show power-inline interface detail command output Parameter Description Detection of [Enabled|Disabled] legacy The status of legacy PoE detection on the PoE port, as configured devices is for the PoE port with the power-inline allow-legacy command.
Page 594: Part 3: Layer Three, Switching And Routing
Part 3: Layer Three, Switching and Routing C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 595: Ip Addressing And Protocol Commands
IP Addressing and Protocol Commands Introduction Overview This chapter provides an alphabetical reference of commands used to configure various IP features, including the following protocols: • Address Resolution Protocol (ARP) For more information, see the IP Feature Overview and Configuration Guide.
Page 596 IP A DDRESSING AND ROTOCOL OMMANDS • “tcpdump” on page 632 • “traceroute” on page 633 • “undebug ip packet interface” on page 634 C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 597: Arp-Aging-Timeout
IP A DDRESSING AND ROTOCOL OMMANDS AGING TIMEOUT arp-aging-timeout Overview This command sets a timeout period on dynamic ARP entries associated with a specific interface. If your device stops receiving traffic for the host specified in a dynamic ARP entry, it deletes the ARP entry from the ARP cache after this timeout is reached.
Page 598: Arp-Mac-Disparity
IP A DDRESSING AND ROTOCOL OMMANDS DISPARITY arp-mac-disparity Overview Use this command to enable the switch to support services like Microsoft Network Load Balancing (MS-NLB). Such services use ARP with disparate MAC addresses to ensure that packets destined for a server cluster virtual address are sent to all servers in the cluster. Disparate MAC addresses mean that the MAC address in the “sender hardware address”...
Page 599 IP A DDRESSING AND ROTOCOL OMMANDS DISPARITY For example, to flood only port1.0.1 to port1.0.3, use the commands: awplus# configure terminal awplus(config)# interface vlan2 awplus(config-if)# arp 10.10.1.100 010e.11ff.2222 port1.0.1-port1.0.3 Usage, multicast Multicast-IGMP mode is enabled by using the command arp-mac-disparity igmp mode multicast-igmp.
Page 600 IP A DDRESSING AND ROTOCOL OMMANDS DISPARITY To disable support for MS-NLB in unicast mode on interface vlan2, use the following commands: awplus# configure terminal awplus(config)# interface vlan2 awplus(config-if)# no arp-mac-disparity unicast Related arp (IP address MAC) Commands clear arp-cache show arp C613-50104-01 REV A Command Reference for x230 Series...
Page 601: Arp (Ip Address Mac)
IP A DDRESSING AND ROTOCOL OMMANDS MAC) ADDRESS arp (IP address MAC) Overview This command adds a static ARP entry to the ARP cache. This is typically used to add entries for hosts that do not support ARP or to speed up the address resolution function for a host.
Page 602: Arp Log
IP A DDRESSING AND ROTOCOL OMMANDS ARP LOG arp log Overview This command enables the logging of dynamic and static ARP entries in the ARP cache. The ARP cache contains mappings of device ports, VLAN IDs, and IP addresses to physical MAC addresses for hosts. This command can display the MAC addresses in the ARP log either using the default hexadecimal notation (HHHH.HHHH.HHHH), or using the IEEE standard hexadecimal notation (HH-HH-HH-HH-HH-HH).
Page 603 IP A DDRESSING AND ROTOCOL OMMANDS ARP LOG Examples To enable ARP logging and use the default hexadecimal notation (HHHH.HHHH.HHHH), use the following commands: awplus# configure terminal awplus(config)# arp log To disable ARP logging on the device of MAC addresses displayed using the default hexadecimal notation (HHHH.HHHH.HHHH), use the following commands: awplus# configure terminal...
Page 604 IP A DDRESSING AND ROTOCOL OMMANDS ARP LOG Table 1: Example output from the show log | include ARP_LOG command awplus#configure terminal awplus(config)#arp log mac-address-format ieee awplus(config)#exit awplus#show log | include ARP_LOG 2010 Apr 6 06:25:28 user.notice awplus HSL[1007]: ARP_LOG port1.0.6 vlan1 add 00- 17-9a-b6-03-69 (192.168.2.12)...
Page 605: Arp Opportunistic-Nd
IP A DDRESSING AND ROTOCOL OMMANDS ARP OPPORTUNISTIC arp opportunistic-nd Overview This command changes the behavior for unsolicited ARP packet forwarding on the device. Use this command to enable opportunistic neighbor discovery for the global ARP cache. Use the no variant of this command to disable opportunistic neighbor discovery for the global ARP cache.
Page 606: Arp-Reply-Bc-Dmac
IP A DDRESSING AND ROTOCOL OMMANDS REPLY DMAC arp-reply-bc-dmac Overview Use this command to allow processing of ARP replies that arrive with a broadcast destination MAC (ffff.ffff.ffff). This makes neighbors reachable if they send ARP responses that contain a broadcast destination MAC. Use the no variant of this command to turn off processing of ARP replies that arrive with a broadcast destination MAC.
Page 607: Clear Arp-Cache
IP A DDRESSING AND ROTOCOL OMMANDS CLEAR ARP CACHE clear arp-cache Overview This command deletes dynamic ARP entries from the ARP cache. You can optionally specify the IPv4 address of an ARP entry to be cleared from the ARP cache. clear arp-cache [<ip-address>] Syntax Parameter...
Page 608: Debug Ip Packet Interface
IP A DDRESSING AND ROTOCOL OMMANDS DEBUG IP PACKET INTERFACE debug ip packet interface Overview The debug ip packet interface command enables IP packet debug and is controlled by the terminal monitor command. If the optional icmp keyword is specified then ICMP packets are shown in the output.
Page 609 IP A DDRESSING AND ROTOCOL OMMANDS DEBUG IP PACKET INTERFACE To turn on ARP packet debugging on vlan1, use the command: Examples awplus# debug ip packet interface vlan1 arp To turn on all packet debugging on all interfaces on the device, use the command: awplus# debug ip packet interface all To turn on TCP packet debugging on vlan1 and IP address 192.168.2.4, use...
Page 610: Ip Address (Ip Addressing And Protocol)
IP A DDRESSING AND ROTOCOL OMMANDS (IP A IP ADDRESS DDRESSING AND ROTOCOL ip address (IP Addressing and Protocol) Overview This command sets a static IP address on an interface. The no variant of this command removes the IP address from the interface. You cannot remove the primary address when a secondary address is present.
Page 611 IP A DDRESSING AND ROTOCOL OMMANDS (IP A IP ADDRESS DDRESSING AND ROTOCOL To add the IP address 10.10.11.50/24 to the local loopback interface lo, use the following commands: awplus# configure terminal awplus(config)# interface lo awplus(config-if)# ip address 10.10.11.50/24 Related interface (to configure) Commands show ip interface...
Page 612: Ip Gratuitous-Arp-Link
IP A DDRESSING AND ROTOCOL OMMANDS IP GRATUITOUS LINK ip gratuitous-arp-link Overview This command sets the Gratuitous ARP time limit for all switchports. The time limit restricts the sending of Gratuitous ARP packets to one Gratuitous ARP packet within the time in seconds. : This command specifies time between sequences of Gratuitous ARP packets, NOTE and time between individual Gratuitous ARP packets occurring in a sequence, to allow...
Page 613 IP A DDRESSING AND ROTOCOL OMMANDS IP GRATUITOUS LINK To restrict the sending of Gratuitous ARP packets to one every 20 seconds, use the commands: awplus# configure terminal awplus(config)# ip gratuitous-arp-link 20 Validation show running-config Commands C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™...
Page 614: Ip Redirects
IP A DDRESSING AND ROTOCOL OMMANDS IP REDIRECTS ip redirects Overview This command enables the device to send ICMP redirects on one or more interfaces. Use the no variant of this command to stop the device from sending ICMP redirects on one or more interfaces.
Page 615: Ip Unreachables
IP A DDRESSING AND ROTOCOL OMMANDS IP UNREACHABLES ip unreachables Overview Use this command to enable ICMP (Internet Control Message Protocol) type 3, destination unreachable, messages. Use the no variant of this command to disable destination unreachable messages. This prevents an attacker from using these messages to discover the topology of a network.
Page 616 IP A DDRESSING AND ROTOCOL OMMANDS IP UNREACHABLES Table 18-1: ICMP type 3 reason codes and description (cont.) Code Description [RFC] Host Precedence Violation [RFC1812] Precedence cutoff in effect [RFC1812] Example To disable destination unreachable messages, use the commands awplus# configure terminal awplus(config)# no ip unreachables...
Page 617: Ping
IP A DDRESSING AND ROTOCOL OMMANDS PING ping Overview This command sends a query to another IPv4 host (send Echo Request messages). ping [ip] <host> [broadcast] [df-bit {yes|no}] [interval Syntax <0-128>] [pattern <hex-data-pattern>] [repeat {<1-2147483647>|continuous}] [size <36-18024>] [source <ip-addr>] [timeout <1-65535>] [tos <0-255>] Parameter Description <host>...
Page 618: Show Arp
IP A DDRESSING AND ROTOCOL OMMANDS SHOW ARP show arp Overview Use this command to display entries in the ARP routing and forwarding table—the ARP cache contains mappings of IP addresses to physical addresses for hosts. To have a dynamic entry in the ARP cache, a host must have used the ARP protocol to access another host.
Page 619 IP A DDRESSING AND ROTOCOL OMMANDS SHOW ARP Related arp (IP address MAC) Commands clear arp-cache C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 620: Show Debugging Ip Packet
IP A DDRESSING AND ROTOCOL OMMANDS SHOW DEBUGGING IP PACKET show debugging ip packet Overview Use this command to show the IP interface debugging status. IP interface debugging is set using the debug ip packet interface command. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 621 IP A DDRESSING AND ROTOCOL OMMANDS SHOW DEBUGGING IP PACKET Related debug ip packet interface Commands terminal monitor C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 622: Show Ip Interface
IP A DDRESSING AND ROTOCOL OMMANDS SHOW IP INTERFACE show ip interface Overview Use this command to display information about interfaces and the IP addresses assigned to them. To display information about a specific interface, specify the interface name with the command. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 623: Show Ip Sockets
IP A DDRESSING AND ROTOCOL OMMANDS SHOW IP SOCKETS show ip sockets Overview Use this command to display information about the IP or TCP sockets that are present on the device. It includes TCP, UDP listen sockets, displaying associated IP address and port.
Page 624 IP A DDRESSING AND ROTOCOL OMMANDS SHOW IP SOCKETS tcp :::23 :::* LISTEN udp 0.0.0.0:111 0.0.0.0:* udp 226.94.1.1:5405 0.0.0.0:* udp 0.0.0.0:161 0.0.0.0:* udp :::161 :::* raw 0.0.0.0:112 0.0.0.0:* 112 raw :::58 :::* 58 raw :::112 :::* 112 Table 20: Parameters in the output of the show ip sockets command Parameter Description Not showing...
Page 625 IP A DDRESSING AND ROTOCOL OMMANDS SHOW IP SOCKETS Table 20: Parameters in the output of the show ip sockets command (cont.) Parameter Description Remote For TCP and UDP listening sockets this shows the source IP address Address (either IPv4 or IPv6) and source TCP or UDP port number for which the socket will accept packets.
Page 626: Show Ip Traffic
IP A DDRESSING AND ROTOCOL OMMANDS SHOW IP TRAFFIC show ip traffic Overview Use this command to display statistics regarding IP traffic sent and received by all interfaces on the device, showing totals for IP and IPv6 and then broken down into sub-categories such as TCP, UDP, ICMP and their IPv6 equivalents when appropriate.
Page 627 IP A DDRESSING AND ROTOCOL OMMANDS SHOW IP TRAFFIC 155 delayed acks sent 21187 headers predicted 736 pure ACKs 80497 pure ACKs predicted UDP: 139468 datagrams received 139468 datagrams sent UDPLite: Table 21: Parameters in the output of the show ip traffic command Parameter Description IPv4...
Page 628 IP A DDRESSING AND ROTOCOL OMMANDS SHOW IP TRAFFIC Table 21: Parameters in the output of the show ip traffic command (cont.) Parameter Description packets transmitted Packets transmitted packets discarded on transmit Packets discarded on transmit packets discarded on transmit Packets discarded on transmit due to no due to no route route...
Page 629 IP A DDRESSING AND ROTOCOL OMMANDS SHOW IP TRAFFIC Table 21: Parameters in the output of the show ip traffic command (cont.) Parameter Description syncookies received Syncookies received syncookies failed Syncookies failed embryonic resets Embryonic resets sockets pruned Sockets pruned ICMPs out of window ICMPs out of window ICMPs dropped due to lock...
Page 630 IP A DDRESSING AND ROTOCOL OMMANDS SHOW IP TRAFFIC Table 21: Parameters in the output of the show ip traffic command (cont.) Parameter Description TCP Reno failures TCP Reno failures SACK failures SACK failures loss failures Loss failures fast retransmits Fast retransmits forward retransmits Forward retransmits...
Page 631 IP A DDRESSING AND ROTOCOL OMMANDS SHOW IP TRAFFIC Table 21: Parameters in the output of the show ip traffic command (cont.) Parameter Description TCP MD5 Unexpected TCP MD5 Unexpected TCP SACKs shifted TCP SACKs shifted TCP SACKs merged TCP SACKs merged TCP SACK shift fallback TCP SACK shift fallback UDP Counters...
Page 632: Tcpdump
IP A DDRESSING AND ROTOCOL OMMANDS TCPDUMP tcpdump Overview Use this command to start a tcpdump, which gives the same output as the Unix-like tcpdump command to display TCP/IP traffic. Press <ctrl> + c to stop a running tcpdump. tcpdump <line> Syntax Parameter Description...
Page 633: Traceroute
IP A DDRESSING AND ROTOCOL OMMANDS TRACEROUTE traceroute Overview Use this command to trace the route to the specified IPv4 host. traceroute {<ip-addr>|<hostname>} Syntax Parameter Description <ip-addr> The destination IPv4 address. The IPv4 address uses the format A.B.C.D. <hostname> The destination hostname. Mode User Exec and Privileged Exec awplus#...
Page 634: Undebug Ip Packet Interface
IP A DDRESSING AND ROTOCOL OMMANDS UNDEBUG IP PACKET INTERFACE undebug ip packet interface Overview This command applies the functionality of the no debug ip packet interface command. C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 635: Domain Name Service (Dns) Commands
Domain Name Service (DNS) Commands Introduction Overview This chapter provides an alphabetical reference of commands used to configure the Domain Name Service (DNS) client. For more information, see the IP Feature Overview and Configuration Guide. Command List • “ip domain-list” on page 636 •...
Page 636: Ip Domain-List
(DNS) C OMAIN ERVICE OMMANDS IP DOMAIN LIST ip domain-list Overview This command adds a domain to the DNS list. Domains are appended to incomplete host names in DNS requests. Each domain in this list is tried in turn in DNS lookups.
Page 637: Ip Domain-Lookup
(DNS) C OMAIN ERVICE OMMANDS IP DOMAIN LOOKUP ip domain-lookup Overview This command enables the DNS client on your device. This allows you to use domain names instead of IP addresses in commands. The DNS client resolves the domain name into an IP address by sending a DNS inquiry to a DNS server, specified with the ip name-server command.
Page 638: Ip Domain-Name
(DNS) C OMAIN ERVICE OMMANDS IP DOMAIN NAME ip domain-name Overview This command sets a default domain for the DNS. The DNS client appends this domain to incomplete host-names in DNS requests. The no variant of this command removes the domain-name previously set by this command.
Page 639: Ip Name-Server
(DNS) C OMAIN ERVICE OMMANDS IP NAME SERVER ip name-server Overview This command adds IPv4 or IPv6 DNS server addresses. The DNS client on your device sends DNS queries to IP addresses in this list when trying to resolve a host name.
Page 640 (DNS) C OMAIN ERVICE OMMANDS IP NAME SERVER Related ip domain-list Commands ip domain-lookup ip domain-name show ip name-server C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 641: Show Hosts
(DNS) C OMAIN ERVICE OMMANDS SHOW HOSTS show hosts Overview This command shows the default domain, domain list, and name servers configured on your device. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 642: Show Ip Domain-List
(DNS) C OMAIN ERVICE OMMANDS SHOW IP DOMAIN LIST show ip domain-list Overview This command shows the domains configured in the domain list. The DNS client uses the domains in this list to append incomplete hostnames when sending a DNS inquiry to a DNS server. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 643: Show Ip Domain-Name
(DNS) C OMAIN ERVICE OMMANDS SHOW IP DOMAIN NAME show ip domain-name Overview This command shows the default domain configured on your device. When there are no entries in the DNS list, the DNS client appends this domain to incomplete hostnames when sending a DNS inquiry to a DNS server.
Page 644: Show Ip Name-Server
(DNS) C OMAIN ERVICE OMMANDS SHOW IP NAME SERVER show ip name-server Overview This command displays a list of IPv4 and IPv6 DNS server addresses that your device will send DNS requests to. This is a static list configured using the name-server command.
Page 645: Ipv6 Commands
IPv6 Commands Introduction Overview This chapter provides an alphabetical reference of commands used to configure IPv6. For more information, see the IPv6 Feature Overview and Configuration Guide. Command List • “clear ipv6 neighbors” on page 647 • “ipv6 address” on page 648 •...
Page 646 OMMANDS • “show ipv6 route summary” on page 671 • “traceroute ipv6” on page 672 C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 647: Clear Ipv6 Neighbors
OMMANDS CLEAR IPV NEIGHBORS clear ipv6 neighbors Overview Use this command to clear all dynamic IPv6 neighbor entries. clear ipv6 neighbors Syntax Mode Privileged Exec awplus# clear ipv6 neighbors Example C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 648: Ipv6 Address
OMMANDS ADDRESS ipv6 address Overview Use this command to set the IPv6 address of a VLAN interface and enable IPv6. Use the optional eui64 parameter to derive the interface identifier of the IPv6 address from the MAC address of the interface. Note that the MAC address of the default VLAN is applied if the interface does not have a MAC address of its own when specifying the eui64 parameter.
Page 649 OMMANDS ADDRESS To assign the IPv6 address 2001:0db8::a2/64 to the VLAN interface vlan2, use the Examples following commands: awplus# configure terminal awplus(config)# interface vlan2 awplus(config-if)# ipv6 address 2001:0db8::a2/64 To remove the IPv6 address 2001:0db8::a2/64 from the VLAN interface vlan2, use the following commands: awplus# configure terminal...
Page 650: Ipv6 Address Autoconfig
OMMANDS ADDRESS AUTOCONFIG ipv6 address autoconfig Overview Use this command to enable IPv6 stateless address autoconfiguration (SLAAC) for an interface. This configures an IPv6 address on an interface derived from the MAC address on the interface. Use the no variant of this command to disable IPv6 SLAAC on an interface. Note that if no global addresses are left after removing all IPv6 autoconfigured addresses then IPv6 is disabled.
Page 651 OMMANDS ADDRESS AUTOCONFIG To disable SLAAC on the VLAN interface vlan2, use the following commands: awplus# configure terminal awplus(config)# interface vlan2 awplus(config-if)# no ipv6 address autoconfig Related ipv6 address Commands ipv6 enable show ipv6 interface brief show ipv6 route show running-config C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™...
Page 652: Ipv6 Enable
OMMANDS ENABLE ipv6 enable Overview Use this command to enable IPv6 on an interface without an IPv6 global address for the interface. This enables IPv6 with a IPv6 link-local address, not an IPv6 global address. Use the no variant of this command to disable IPv6 on an interface without a global address.
Page 653: C613-50104-01 Rev A Command Reference For X230 Series
OMMANDS ENABLE Related ipv6 address Commands ipv6 address autoconfig show ipv6 interface brief show ipv6 route show running-config C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 654: Ipv6 Forwarding
OMMANDS FORWARDING ipv6 forwarding Overview Use this command to turn on IPv6 unicast routing for IPv6 packet forwarding. Execute this command globally on your device prior to issuing ipv6 enable individual interfaces. Use this no variant of this command to turn off IPv6 unicast routing. Note IPv6 unicast routing is disabled by default.
Page 655: Ipv6 Multicast Forward-Slow-Path-Packet
OMMANDS MULTICAST FORWARD SLOW PATH PACKET ipv6 multicast forward-slow-path-packet Overview Use this command to enable multicast packets to be forwarded to the CPU. Enabling this command will ensure that the layer L3 MTU is set correctly for each IP multicast group and will apply the value of the smallest MTU among the outgoing interfaces for the multicast group.
Page 656: Ipv6 Nd Minimum-Ra-Interval
OMMANDS ND MINIMUM INTERVAL ipv6 nd minimum-ra-interval Overview Use this command in Interface Configuration mode to set a minimum Router Advertisement (RA) interval for a VLAN interface. Use the no variant of this command in Interface Configuration mode to remove the minimum RA interval for a VLAN interface.
Page 657: Ipv6 Nd Ra-Interval
OMMANDS ND RA INTERVAL ipv6 nd ra-interval Overview Use this command to specify the interval between IPv6 Router Advertisements (RA) transmissions. Use no parameter with this command to reset the value to the default value (600 seconds). Syntax ipv6 nd ra-interval <seconds> no ipv6 nd ra-interval Parameter Description...
Page 658: Ipv6 Nd Raguard
OMMANDS ND RAGUARD ipv6 nd raguard Overview Use this command to apply the Router Advertisements (RA) Guard feature from the Interface Configuration mode for a device port. This blocks all RA messages received on a device port. For more information about RA Guard, see the IPv6 Feature Overview and Configuration Guide.
Page 659 OMMANDS ND RAGUARD Output Example output from using show running-config interface port1.0.2 to verify RA Guard: ! interface port1.0.2 switchport mode access  ipv6 nd raguard ! Related show running-config interface Commands C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™...
Page 660: Ipv6 Nd Suppress-Ra
OMMANDS ND SUPPRESS ipv6 nd suppress-ra Overview Use this command to inhibit IPv6 Router Advertisement (RA) transmission for the current interface. Router advertisements are used when applying IPv6 stateless auto-configuration. Use no parameter with this command to enable Router Advertisement transmission.
Page 661: Ipv6 Neighbor
OMMANDS NEIGHBOR ipv6 neighbor Overview Use this command to add a static IPv6 neighbor entry. Use the no variant of this command to remove a specific IPv6 neighbor entry. Syntax ipv6 neighbor <ipv6-address> <vlan-name> <mac-address> <port-list> no ipv6 neighbor <ipv6-address> <vlan-name> <port-list> Parameter Description <ipv6-address>...
Page 662: Ipv6 Opportunistic-Nd
OMMANDS OPPORTUNISTIC ipv6 opportunistic-nd Overview Use this command to enable opportunistic neighbor discovery for the global IPv6 ND cache. Opportunistic neighbor discovery changes the behavior for unsolicited ICMPv6 ND packet forwarding on the device. Use the no variant of this command to disable opportunistic neighbor discovery for the global IPv6 ND cache.
Page 663: Ipv6 Route
OMMANDS ROUTE ipv6 route Overview This command adds a static IPv6 route to the Routing Information Base (RIB). If this route is the best route for the destination, then your device adds it to the Forwarding Information Base (FIB). Your device uses the FIB to advertise routes to neighbors and forward packets.
Page 664: Ipv6 Unreachables
OMMANDS UNREACHABLES ipv6 unreachables Overview Use this command to enable ICMPv6 (Internet Control Message Protocol version 6) type 1, destination unreachable, messages. Use the no variant of this command to disable destination unreachable messages. This prevents an attacker from using these messages to discover the topology of a network.
Page 665: Ping Ipv6
OMMANDS PING IPV ping ipv6 Overview This command sends a query to another IPv6 host (send Echo Request messages). : Use of the interface parameter keyword, plus an interface or an interface range, NOTE with this command is only valid when pinging an IPv6 link local address. Syntax ping ipv6 {<host>|<ipv6-address>} [repeat {<1-2147483647>|continuous}] [size <10-1452>] [interface...
Page 666: Show Ipv6 Forwarding
OMMANDS SHOW IPV FORWARDING show ipv6 forwarding Overview Use this command to display IPv6 forwarding status. show ipv6 forwarding Syntax Mode User Exec and Privileged Exec awplus# show ipv6 forwarding Example Output Figure 20-1: Example output from the show ipv6 forwarding command ...
Page 667: Show Ipv6 Interface Brief
OMMANDS SHOW IPV INTERFACE BRIEF show ipv6 interface brief Overview Use this command to display brief information about interfaces and the IPv6 address assigned to them. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 668: Show Ipv6 Neighbors
OMMANDS SHOW IPV NEIGHBORS show ipv6 neighbors Overview Use this command to display all IPv6 neighbors. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide. Syntax show ipv6 neighbors Mode User Exec and Privileged Exec C613-50104-01 REV A...
Page 669: Show Ipv6 Route
OMMANDS SHOW IPV ROUTE show ipv6 route Overview Use this command to display the IPv6 routing table for a protocol or from a particular table. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 670 OMMANDS SHOW IPV ROUTE Example 2 To display all database entries for an IP route, use the following command: awplus# show ipv6 route database Output Figure 20-4: Example output of the show ipv6 route database command  IPv6 Routing Table Codes: C - connected, S - static >...
Page 671: Show Ipv6 Route Summary
OMMANDS SHOW IPV ROUTE SUMMARY show ipv6 route summary Overview Use this command to display the summary of the current NSM RIB entries. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 672: Traceroute Ipv6
OMMANDS TRACEROUTE IPV traceroute ipv6 Overview Use this command to trace the route to the specified IPv6 host. traceroute ipv6 {<ipv6-addr>|<hostname>} Syntax Parameter Description <ipv6-addr> The destination IPv6 address. The IPv6 address uses the format X:X::X:X. <hostname> The destination hostname. Mode User Exec and Privileged Exec Example...
Page 673: Routing Commands
Routing Commands Introduction Overview This chapter provides an alphabetical reference of routing commands that are common across the routing IP protocols.For more information, see the Route Selection Feature Overview and Configuration Guide. Command List • “ip route” on page 674 •...
Page 674: Ip Route
OUTING OMMANDS IP ROUTE ip route Overview This command adds a static route to the Routing Information Base (RIB). If this route is the best route for the destination, then your device adds it to the Forwarding Information Base (FIB). Your device uses the FIB to advertise routes to neighbors and forward packets.
Page 675 OUTING OMMANDS IP ROUTE To remove the destination 192.168.3.0 with the mask 255.255.255.0 as a static route available through the device at “10.10.0.2” with the default administrative distance, use the commands: awplus# configure terminal awplus(config)# no ip route 192.168.3.0 255.255.255.0 10.10.0.2 To add the destination 192.168.3.0 with the mask 255.255.255.0 as a static route available through the device at “10.10.0.2”...
Page 676: Ipv6 Route
OUTING OMMANDS ROUTE ipv6 route Overview This command adds a static IPv6 route to the Routing Information Base (RIB). If this route is the best route for the destination, then your device adds it to the Forwarding Information Base (FIB). Your device uses the FIB to advertise routes to neighbors and forward packets.
Page 677: Max-Fib-Routes
OUTING OMMANDS ROUTES max-fib-routes Overview This command enables you to control the maximum number of FIB routes configured. It operates by providing parameters that enable you to configure preset maximums and warning message thresholds. The operation of these parameters is explained in the Parameter / Description table shown below. : For static routes use the max-static-routes command.
Page 678: Max-Static-Routes
OUTING OMMANDS STATIC ROUTES max-static-routes Overview Use this command to set the maximum number of static routes, excluding FIB (Forwarding Information Base) routes. : For FIB routes use the max-fib-routes command. NOTE Use the no variant of this command to set the maximum number of static routes to the default of 1000 static routes.
Page 679: Show Ip Route
OUTING OMMANDS SHOW IP ROUTE show ip route Overview Use this command to display routing entries in the FIB (Forwarding Information Base). The FIB contains the best routes to a destination, and your device uses these routes when forwarding traffic. You can display a subset of the entries in the FIB based on protocol.
Page 680 OUTING OMMANDS SHOW IP ROUTE Figure 21-1: Example output from the show ip route command Codes: C - connected, S - static, R - RIP, B - BGP O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2...
Page 681: Show Ip Route Database
OUTING OMMANDS SHOW IP ROUTE DATABASE show ip route database Overview This command displays the routing entries in the RIB (Routing Information Base). When multiple entries are available for the same prefix, RIB uses the routes’ administrative distances to choose the best route. All best routes are entered into the FIB (Forwarding Information Base).
Page 682: Show Ip Route Summary
OUTING OMMANDS SHOW IP ROUTE SUMMARY show ip route summary Overview This command displays a summary of the current RIB (Routing Information Base) entries. To modify the lines displayed, use the | (output modifier token); to save the output to a file, use the > output redirection token. Syntax show ip route summary Mode...
Page 683: Show Ipv6 Route
OUTING OMMANDS SHOW IPV ROUTE show ipv6 route Overview Use this command to display the IPv6 routing table for a protocol or from a particular table. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 684 OUTING OMMANDS SHOW IPV ROUTE Example 2 To display all database entries for an IP route, use the following command: awplus# show ipv6 route database Output Figure 21-5: Example output of the show ipv6 route database command  IPv6 Routing Table Codes: C - connected, S - static >...
Page 685: Show Ipv6 Route Summary
OUTING OMMANDS SHOW IPV ROUTE SUMMARY show ipv6 route summary Overview Use this command to display the summary of the current NSM RIB entries. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 686: Rip Commands
RIP Commands Introduction Overview This chapter provides an alphabetical reference of commands used to configure RIP. For information about configuring RIP, see the RIP Feature Overview and Configuration Guide. Command List • “accept-lifetime” on page 688 • “alliedware-behavior” on page 690 •...
Page 687 RIP C OMMANDS • “ip rip split-horizon” on page 714 • “key” on page 715 • “key chain” on page 716 • “key-string” on page 717 • “maximum-prefix” on page 718 • “neighbor (RIP)” on page 719 • “network (RIP)” on page 720 •...
Page 688: Accept-Lifetime
RIP C OMMANDS ACCEPT LIFETIME accept-lifetime Overview Use this command to specify the time period during which the authentication key on a key chain is received as valid. Use the no variant of this command to remove a specified time period for an authentication key on a key chain as set previously with the accept-lifetime command.
Page 689 RIP C OMMANDS ACCEPT LIFETIME awplus# configure terminal awplus(config)# key chain mychain awplus(config-keychain)# key 1 awplus(config-keychain-key)# accept-lifetime 03:03:01 3 Dec 2007 04:04:02 6 Oct 2008 Related Commands key-string key chain send-lifetime C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 690: Alliedware-Behavior
RIP C OMMANDS ALLIEDWARE BEHAVIOR alliedware-behavior Overview This command configures your device to exhibit AlliedWare behavior when sending RIPv1 response/update messages. Configuring for this behavior may be necessary if you are replacing an AlliedWare device with an AlliedWare Plus device and wish to ensure consistent RIPv1 behavior.
Page 691 RIP C OMMANDS ALLIEDWARE BEHAVIOR To return your device to AlliedWare Plus-like behavior when sending and receiving RIPv1 update messages, enter the commands: awplus# configure terminal awplus(config)# router rip awplus(config-router)# no alliedware-behavior rip1-send awplus(config-router)# no alliedware-behavior rip1-recv Validation show ip protocols rip Commands show running-config Related...
Page 692: Cisco-Metric-Behavior (Rip)
RIP C OMMANDS (RIP) CISCO METRIC BEHAVIOR cisco-metric-behavior (RIP) Overview Use this command to enable or disable the RIP routing metric update to conform to Cisco’s implementation. This command is provided to allow inter-operation with older Cisco devices that do not conform to the RFC standard for RIP route metrics.
Page 693: Clear Ip Rip Route
RIP C OMMANDS CLEAR IP RIP ROUTE clear ip rip route Overview Use this command to clear specific data from the RIP routing table. Parameter Description <ip-dest-network/ Removes entries which exactly match this destination prefix-length> address from RIP routing table. Enter the IP address and prefix length of the destination network.
Page 694: Debug Rip
RIP C OMMANDS DEBUG RIP debug rip Overview Use this command to specify the options for the displayed debugging information for RIP events and RIP packets. Use the no variant of this command to disable the specified debug option. Syntax debug rip {events|nsm|<packet>|all} no debug rip {events|nsm|<packet>|all} Parameter...
Page 695: Default-Information Originate (Rip)
RIP C OMMANDS (RIP) DEFAULT INFORMATION ORIGINATE default-information originate (RIP) Overview Use this command to generate a default route into the Routing Information Protocol (RIP). Use the no variant of this command to disable this feature. Syntax default-information originate no default-information originate Default Disabled Mode...
Page 696: Default-Metric (Rip)
RIP C OMMANDS (RIP) DEFAULT METRIC default-metric (RIP) Overview Use this command to specify the metrics to be assigned to redistributed RIP routes. Use the no variant of this command to reset the RIP metric back to its default (1). Syntax default-metric <metric>...
Page 697: Distance (Rip)
RIP C OMMANDS (RIP) DISTANCE distance (RIP) Overview This command sets the administrative distance for RIP routes. Your device uses this value to select between two or more routes to the same destination obtained from two different routing protocols. The route with the smallest administrative distance value is added to the Forwarding Information Base (FIB).
Page 698: Distribute-List (Rip)
RIP C OMMANDS (RIP) DISTRIBUTE LIST distribute-list (RIP) Overview Use this command to filter incoming or outgoing route updates using the access-list or the prefix-list. Use the no variant of this command to disable this feature. Syntax distribute-list {<access-list> | prefix <prefix-list>} {in|out} [<interface>] no distribute-list {<access-list>...
Page 699: Fullupdate (Rip)
RIP C OMMANDS (RIP) FULLUPDATE fullupdate (RIP) Overview Use this command to specify which routes RIP should advertise when performing a triggered update. By default, when a triggered update is sent, RIP will only advertise those routes that have changed since the last update. When fullupdate is configured, the device advertises the full RIP route table in outgoing triggered updates, including routes that have not changed.
Page 700: Ip Rip Authentication Key-Chain
RIP C OMMANDS IP RIP AUTHENTICATION KEY CHAIN ip rip authentication key-chain Overview Use this command to enable RIPv2 authentication on an interface and specify the name of the key chain to be used. Use the no variant of this command to disable this function. Syntax ip rip authentication key-chain <key-chain-name>...
Page 701 RIP C OMMANDS IP RIP AUTHENTICATION KEY CHAIN Specify the mode of authentication for the given interface (text or MD5), using the following command: awplus(config-if)# ip rip authentication mode {md5|text} Example In the following sample multiple keys authentication RIP configuration, a password toyota is set for key 1 in key chain cars.
Page 702: Ip Rip Authentication Mode
RIP C OMMANDS IP RIP AUTHENTICATION MODE ip rip authentication mode Overview Use this command to specify the type of authentication mode used for RIP v2 packets. Use the no variant of this command to restore clear text authentication. Syntax ip rip authentication mode {md5|text} no ip rip authentication mode Parameter...
Page 703 RIP C OMMANDS IP RIP AUTHENTICATION MODE Usage: multiple For multiple keys authentication, use the following steps to configure a route to enable RIPv2 authentication using multiple keys at different times: Define a key chain with a key chain name, using the following commands: awplus# configure terminal awplus(config)#...
Page 704 RIP C OMMANDS IP RIP AUTHENTICATION MODE Example 2 The following example shows md5 authentication configured on VLAN interface vlan2, ensuring authentication of rip packets received on this interface. awplus# configure terminal awplus(config)# interface vlan2 awplus(config-if)# ip rip authentication mode md5 Example 3 The following example specifies mykey as the authentication string with MD5 authentication, for the VLAN interface vlan2:...
Page 705: Ip Rip Authentication String
RIP C OMMANDS IP RIP AUTHENTICATION STRING ip rip authentication string Overview Use this command to specify the authentication string or password used by a key. Use the no variant of this command to remove the authentication string. Syntax ip rip authentication string <auth-string> no ip rip authentication string Parameter Description...
Page 706 RIP C OMMANDS IP RIP AUTHENTICATION STRING In the following example, the VLAN interface vlan2 is configured to have an Example authentication string as guest. Any received RIP packet in that interface should have the same string as password. awplus# configure terminal awplus(config)# interface vlan2...
Page 707: Ip Rip Receive-Packet
RIP C OMMANDS IP RIP RECEIVE PACKET ip rip receive-packet Overview Use this command to configure the interface to enable the reception of RIP packets. Use the no variant of this command to disable this feature. Syntax ip rip receive-packet no ip rip receive-packet Default Receive-packet is enabled...
Page 708: Ip Rip Receive Version
RIP C OMMANDS IP RIP RECEIVE VERSION ip rip receive version Overview Use this command to specify the version of RIP packets accepted on an interface and override the setting of the version command. Use the no variant of this command to use the setting specified by the version (RIP) command.
Page 709: Ip Rip Send-Packet
RIP C OMMANDS IP RIP SEND PACKET ip rip send-packet Overview Use this command to enable sending RIP packets through the current interface. Use the no variant of this command to disable this feature. Syntax ip rip send-packet no ip rip send-packet Default Send packet is enabled Mode...
Page 710: Ip Rip Send Version
RIP C OMMANDS IP RIP SEND VERSION ip rip send version Overview Use this command in Interface Configuration mode to specify the version of RIP packets sent on an interface and override the setting of the version (RIP) command. This mechanism causes RIP version 2 interfaces to send multicast packets instead of broadcasting packets.
Page 711 RIP C OMMANDS IP RIP SEND VERSION In the following example, the VLAN interface vlan4 is configured to send both RIP version 2 and 1 packets. awplus# configure terminal awplus(config)# interface vlan4 awplus(config-if)# ip rip send version 2 1 In the following example, the VLAN interface vlan4 is configured to send RIP version 1 packets only.
Page 712: Ip Rip Send Version 1-Compatible
RIP C OMMANDS IP RIP SEND VERSION COMPATIBLE ip rip send version 1-compatible Overview Use this command in Interface Configuration mode to send RIP version 1 compatible packets from a RIP version 2 interfaces to other RIP Interfaces. This mechanism causes RIP version 2 interfaces to send broadcast packets instead of multicasting packets, and is used in environments where multicast is not enabled or where hosts do not listen to multicast.
Page 713 RIP C OMMANDS IP RIP SEND VERSION COMPATIBLE Related ip rip send version Commands version (RIP) C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 714: Ip Rip Split-Horizon
RIP C OMMANDS IP RIP SPLIT HORIZON ip rip split-horizon Overview Use this command to turn on the split-horizon mechanism on the interface. Use the no variant of this command to disable this mechanism. Syntax ip rip split-horizon [poisoned] no ip rip split-horizon Parameter Description poisoned...
Page 715: Key
RIP C OMMANDS Overview Use this command to manage, add and delete authentication keys in a key-chain. Use the no variant of this command to delete the authentication key. Syntax key <keyid> no key <keyid> Parameter Description <keyid> <0-2147483647> Key identifier number. Mode Keychain Configuration Usage...
Page 716: Key Chain
RIP C OMMANDS KEY CHAIN key chain Overview Use this command to enter the key chain management mode and to configure a key chain with a key chain name. Use the no variant of this command to remove the key chain and all configured keys.
Page 717: Key-String
RIP C OMMANDS STRING key-string Overview Use this command to define the password to be used by a key. Use the no variant of this command to remove a password. Syntax key-string <key-password> no key-string Parameter Description <key-password> A string of characters to be used as a password by the key. Mode Keychain-key Configuration Usage...
Page 718: Maximum-Prefix
RIP C OMMANDS MAXIMUM PREFIX maximum-prefix Overview Use this command to configure the maximum number of RIP routes stored in the routing table. Use the no variant of this command to disable all limiting of the number of RIP routes stored in the routing table. Syntax maximum-prefix <maxprefix>...
Page 719: Neighbor (Rip)
RIP C OMMANDS (RIP) NEIGHBOR neighbor (RIP) Overview Use this command to specify a neighbor router. It is used for each router to which you wish to send unicast RIP updates. Use the no variant of this command to stop sending unicast updates to the specific router.
Page 720: Network (Rip)
RIP C OMMANDS (RIP) NETWORK network (RIP) Overview Use this command to activate the transmission of RIP routing information on the defined network. Use the no variant of this command to remove the specified network or VLAN as one that runs RIP. Syntax network {<network-address>[/<subnet-mask>]|<vlan-name>} no network {<network-address>[/<subnet-mask>]|<vlan-name>}...
Page 721: Offset-List (Rip)
RIP C OMMANDS (RIP) OFFSET LIST offset-list (RIP) Overview Use this command to add an offset to the in and out metrics of routes learned through RIP. Use the no variant of this command to remove the offset list. Syntax offset-list <access-list>...
Page 722: Passive-Interface (Rip)
RIP C OMMANDS (RIP) PASSIVE INTERFACE passive-interface (RIP) Overview Use this command to block RIP broadcasts on the VLAN interface. Use the no variant of this command to disable this function. Syntax passive-interface <interface> no passive-interface <interface> Parameter Description <interface> Specifies the interface name.
Page 723: Recv-Buffer-Size (Rip)
RIP C OMMANDS (RIP) RECV BUFFER SIZE recv-buffer-size (RIP) Overview Use this command to run-time configure the RIP UDP (User Datagram Protocol) receive-buffer size to improve UDP reliability by avoiding UDP receive buffer overrun. Use the no variant of this command to reset the configured RIP UDP receive-buffer size to the system default (196608 bits).
Page 724: Redistribute (Rip)
RIP C OMMANDS (RIP) REDISTRIBUTE redistribute (RIP) Overview Use this command to redistribute information from other routing protocols into RIP. Use the no variant of this command to disable the specified redistribution. The parameters metric and routemap may be used on this command, but have no effect.
Page 725: Restart Rip Graceful
RIP C OMMANDS RESTART RIP GRACEFUL restart rip graceful Overview Use this command to force the RIP process to restart, and optionally set the grace-period. restart rip graceful [grace-period <1-65535>] Syntax Mode Privileged Exec Default The default RIP grace-period is 60 seconds. Usage After this command is executed, the RIP process immediately shuts down.
Page 726: Rip Restart Grace-Period
RIP C OMMANDS RIP RESTART GRACE PERIOD rip restart grace-period Overview Use this command to change the grace period of RIP graceful restart. Use the no variant of this command to disable this function. Syntax rip restart grace-period <1-65535> no rip restart grace-period <1-65535> Mode Global Configuration Default...
Page 727: Route (Rip)
RIP C OMMANDS (RIP) ROUTE route (RIP) Overview Use this command to configure static RIP routes. Use the no variant of this command to disable this function. Syntax route <ip-addr/prefix-length> no route <ip-addr/prefix-length> Parameter Description <ip-addr/prefix-length> The IPv4 address and prefix length. Default No static RIP route is added by default.
Page 728: Router Rip
RIP C OMMANDS ROUTER RIP router rip Overview Use this global command to enter Router Configuration mode to enable the RIP routing process. Use the no variant of this command to disable the RIP routing process. Syntax router rip no router rip Mode Global Configuration Example...
Page 729: Send-Lifetime
RIP C OMMANDS SEND LIFETIME send-lifetime Overview Use this command to specify the time period during which the authentication key on a key chain can be sent. send-lifetime <start-date> {<end-date>| Syntax duration <seconds>|infinite} no send-lifetime Parameter Description Specifies the start time and date in the format:  <start-date>...
Page 730 RIP C OMMANDS SEND LIFETIME Related Commands key-string key chain accept-lifetime C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 731: Show Debugging Rip
RIP C OMMANDS SHOW DEBUGGING RIP show debugging rip Overview Use this command to display the RIP debugging status for these debugging options: nsm debugging, RIP event debugging, RIP packet debugging and RIP nsm debugging. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 732: Show Ip Protocols Rip
RIP C OMMANDS SHOW IP PROTOCOLS RIP show ip protocols rip Overview Use this command to display RIP process parameters and statistics. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 733: Show Ip Rip
RIP C OMMANDS SHOW IP RIP show ip rip Overview Use this command to show RIP routes. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide. Syntax show ip rip Mode User Exec and Privileged Exec awplus#...
Page 734: Show Ip Rip Database
RIP C OMMANDS SHOW IP RIP DATABASE show ip rip database Overview Use this command to display information about the RIP database. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 735: Show Ip Rip Interface
RIP C OMMANDS SHOW IP RIP INTERFACE show ip rip interface Overview Use this command to display information about the RIP interfaces. You can specify an interface name to display information about a specific interface. show ip rip interface [<interface>] Syntax Parameter Description...
Page 736: Timers (Rip)
RIP C OMMANDS (RIP) TIMERS timers (RIP) Overview Use this command to adjust routing network timers. Use the no variant of this command to restore the defaults. Syntax timers basic <update> <timeout> <garbage> no timers basic Parameter Description <update> <5-2147483647> Specifies the period at which RIP route update packets are transmitted.
Page 737: Undebug Rip
RIP C OMMANDS UNDEBUG RIP undebug rip Overview Use this command to disable the options set for debugging information of RIP events, packets and communication between RIP and NSM. This command has the same effect as the no debug rip command. Syntax undebug rip {all|events|nsm|<packet>} Parameter...
Page 738: Version (Rip)
RIP C OMMANDS (RIP) VERSION version (RIP) Overview Use this command to specify a RIP version used globally by the router. Use the no variant of this command to restore the default version. Syntax version {1|2} no version Parameter Description Specifies the version of RIP processing.
Page 739: Part 4: Multicast Applications
Part 4: Multicast Applications C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 740: Igmp And Igmp Snooping Commands
IGMP and IGMP Snooping Commands Introduction Overview Devices running AlliedWare Plus use IGMP (Internet Group Management Protocol) and MLD (Multicast Listener Discovery) to track which multicast groups their clients belong to. This enables them to send the correct multimedia streams to the correct destinations.
Page 741 IGMP IGMP S NOOPING OMMANDS • “ip igmp ra-option” on page 762 • “ip igmp robustness-variable” on page 763 • “ip igmp snooping” on page 764 • “ip igmp snooping fast-leave” on page 765 • “ip igmp snooping mrouter” on page 766 •...
Page 742: Clear Ip Igmp
IGMP IGMP S NOOPING OMMANDS CLEAR IP IGMP clear ip igmp Overview Use this command to clear all IGMP group membership records on all interfaces. clear ip igmp Syntax Mode Privileged Exec awplus# clear ip igmp Example Related clear ip igmp group Commands clear ip igmp interface show ip igmp interface...
Page 743: Clear Ip Igmp Group
IGMP IGMP S NOOPING OMMANDS CLEAR IP IGMP GROUP clear ip igmp group Overview Use this command to clear IGMP group membership records for a specific group on either all interfaces, a single interface, or for a range of interfaces. clear ip igmp group * Syntax clear ip igmp group <ip-address>...
Page 744: Clear Ip Igmp Interface
IGMP IGMP S NOOPING OMMANDS CLEAR IP IGMP INTERFACE clear ip igmp interface Overview Use this command to clear IGMP group membership records on a particular interface. clear ip igmp interface <interface> Syntax Parameter Description <interface> Specifies the name of the interface. All groups learned on this interface are deleted.
Page 745: Debug Igmp
IGMP IGMP S NOOPING OMMANDS DEBUG IGMP debug igmp Overview Use this command to enable debugging of either all IGMP or a specific component of IGMP. Use the no variant of this command to disable all IGMP debugging, or debugging of a specific component of IGMP.
Page 746: Ip Igmp
IGMP IGMP S NOOPING OMMANDS IP IGMP ip igmp Overview Use this command to enable IGMP on an interface. The command configures the device as an IGMP querier. Use the no variant of this command to return all IGMP related configuration to the default on this interface.
Page 747: Ip Igmp Access-Group
IGMP IGMP S NOOPING OMMANDS IP IGMP ACCESS GROUP ip igmp access-group Overview This command adds an access control list to a VLAN interface configured for IGMP or IGMP Snooping. The access control list is used to control and filter the multicast groups learned on the VLAN interface.
Page 748: Ip Igmp Flood Specific-Query
IGMP IGMP S NOOPING OMMANDS IP IGMP FLOOD SPECIFIC QUERY ip igmp flood specific-query Overview Use this command if you want IGMP to flood specific queries to all VLAN member ports, instead of only sending the queries to multicast group member ports. Use the no variant of this command if you want IGMP to only send the queries to multicast group member ports.
Page 749: Ip Igmp Immediate-Leave
IGMP IGMP S NOOPING OMMANDS IP IGMP IMMEDIATE LEAVE ip igmp immediate-leave Overview In IGMP version 2, use this command to minimize the leave latency of IGMP memberships for specified multicast groups. The specified access list number or name defines the multicast groups in which the immediate leave feature is enabled.
Page 750: Ip Igmp Last-Member-Query-Count
IGMP IGMP S NOOPING OMMANDS IP IGMP LAST MEMBER QUERY COUNT ip igmp last-member-query-count Overview Use this command to set the last-member query-count value for an interface. Use the no variant of this command to return to the default on an interface. Syntax ip igmp last-member-query-count <2-7>...
Page 751: Ip Igmp Last-Member-Query-Interval
IGMP IGMP S NOOPING OMMANDS IP IGMP LAST MEMBER QUERY INTERVAL ip igmp last-member-query-interval Overview Use this command to configure the frequency at which the router sends IGMP group specific host query messages. Use the no variant of this command to set this frequency to the default. Syntax ip igmp last-member-query-interval <interval>...
Page 752: Ip Igmp Limit
IGMP IGMP S NOOPING OMMANDS IP IGMP LIMIT ip igmp limit Overview Use this command to configure the limit on the maximum number of group membership entries for the device as a whole or for the specified interface (if in interface mode).
Page 753: Ip Igmp Maximum-Groups
IGMP IGMP S NOOPING OMMANDS IP IGMP MAXIMUM GROUPS ip igmp maximum-groups Overview Use this command to set a limit, per switch port, on the number of IGMP groups clients can join. This stops a single client from using all the switch’s available group-entry resources, and ensures that clients on all ports have a chance to join IGMP groups.
Page 754 IGMP IGMP S NOOPING OMMANDS IP IGMP MAXIMUM GROUPS Example To limit clients to 10 groups on port 1.0.1, which is in vlan1, use the commands: awplus# configure terminal awplus(config)# interface port1.0.1 awplus(config-if)# ip igmp maximum-groups 10 awplus(config-if)# exit awplus(config)# interface vlan1 awplus(config-if)# ip igmp snooping fast-leave...
Page 755: Ip Igmp Querier-Timeout
IGMP IGMP S NOOPING OMMANDS IP IGMP QUERIER TIMEOUT ip igmp querier-timeout Overview Use this command to configure the timeout period before the device takes over as the querier for the interface after the previous querier has stopped querying. Use the no variant of this command to restore the default. Syntax ip igmp querier-timeout <timeout>...
Page 756: Ip Igmp Query-Holdtime
IGMP IGMP S NOOPING OMMANDS IP IGMP QUERY HOLDTIME ip igmp query-holdtime Overview This command sets the time that an IGMP Querier waits after receiving a query solicitation before it sends an IGMP Query. IGMP General Query messages will not be sent during the hold time interval.
Page 757 IGMP IGMP S NOOPING OMMANDS IP IGMP QUERY HOLDTIME Related ip igmp query-interval Commands ip igmp snooping tcn query solicit show ip igmp interface show running-config C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 758: Ip Igmp Query-Interval
IGMP IGMP S NOOPING OMMANDS IP IGMP QUERY INTERVAL ip igmp query-interval Overview Use this command to configure the period for sending IGMP General Query messages. The IGMP query interval specifies the time between IGMP General Query messages being sent. Use the no variant of this command to return to the default query interval period.
Page 759 IGMP IGMP S NOOPING OMMANDS IP IGMP QUERY INTERVAL To reset the period between sending IGMP host-query messages to the default (125 seconds) for vlan10, use the following commands: awplus# configure terminal awplus(config)# interface vlan10 awplus(config-if)# no ip igmp query-interval Related ip igmp query-holdtime Commands...
Page 760: Ip Igmp Query-Max-Response-Time
IGMP IGMP S NOOPING OMMANDS IP IGMP QUERY RESPONSE TIME ip igmp query-max-response-time Overview Use this command to configure the maximum response time advertised in IGMP Queries. Use the no variant of this command to restore the default. : The IGMP query maximum response time must be less than the IGMP query NOTE interval.
Page 761 IGMP IGMP S NOOPING OMMANDS IP IGMP QUERY RESPONSE TIME Related ip igmp query-interval Commands show ip igmp interface show running-config C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 762: Ip Igmp Ra-Option
IGMP IGMP S NOOPING OMMANDS IP IGMP RA OPTION ip igmp ra-option Overview ip igmp ra-option Syntax no ip igmp ra-option Default The default state of RA validation is unset. Mode Interface Configuration for a VLAN interface. Usage This command applies to interfaces configured for IGMP and IGMP Snooping. Examples To enable strict Router Alert (RA) option validation on vlan20, use the following commands:...
Page 763: Ip Igmp Robustness-Variable
IGMP IGMP S NOOPING OMMANDS IP IGMP ROBUSTNESS VARIABLE ip igmp robustness-variable Overview Use this command to change the robustness variable value on an interface. Use the no variant of this command to return to the default on an interface. Syntax ip igmp robustness-variable <1-7>...
Page 764: Ip Igmp Snooping
IGMP IGMP S NOOPING OMMANDS IP IGMP SNOOPING ip igmp snooping Overview Use this command to enable IGMP Snooping. When this command is used in the Global Configuration mode, IGMP Snooping is enabled at the device level. When this command is used in Interface Configuration mode, IGMP Snooping is enabled for the specified VLANs.
Page 765: Ip Igmp Snooping Fast-Leave
IGMP IGMP S NOOPING OMMANDS IP IGMP SNOOPING FAST LEAVE ip igmp snooping fast-leave Overview Use this command to enable IGMP Snooping fast-leave processing. Fast-leave processing is analogous to immediate-leave processing. The IGMP group-membership entry is removed as soon as an IGMP leave group message is received, without sending out a group-specific query.
Page 766: Ip Igmp Snooping Mrouter
IGMP IGMP S NOOPING OMMANDS IP IGMP SNOOPING MROUTER ip igmp snooping mrouter Overview Use this command to statically configure the specified port as a multicast router port for IGMP Snooping for an interface. This command applies to interfaces configured for IGMP Snooping. Use the no variant of this command to remove the static configuration of the port as a multicast router port.
Page 767: Ip Igmp Snooping Querier
IGMP IGMP S NOOPING OMMANDS IP IGMP SNOOPING QUERIER ip igmp snooping querier Overview Use this command to enable IGMP querier operation when no multicast routing protocol is configured. When enabled, the IGMP Snooping querier sends out periodic IGMP queries for all interfaces. This command applies to interfaces configured for IGMP Snooping.
Page 768: Ip Igmp Snooping Report-Suppression
IGMP IGMP S NOOPING OMMANDS IP IGMP SNOOPING REPORT SUPPRESSION ip igmp snooping report-suppression Overview Use this command to enable report suppression for IGMP versions 1 and 2. This command applies to interfaces configured for IGMP Snooping. Report suppression stops reports being sent to an upstream multicast router port when there are already downstream ports for this group on this interface.
Page 769: Ip Igmp Snooping Routermode
IGMP IGMP S NOOPING OMMANDS IP IGMP SNOOPING ROUTERMODE ip igmp snooping routermode Overview Use this command to set the destination IP addresses as router multicast addresses. Use the no variant of this command to set it to the default. You can also remove a specified IP address from a custom list of multicast addresses.
Page 770 IGMP IGMP S NOOPING OMMANDS IP IGMP SNOOPING ROUTERMODE Examples To set ip igmp snooping routermode for all default reserved addresses enter: awplus(config)# ip igmp snooping routermode default To remove the multicast address 224.0.0.5 from the custom list of multicast addresses enter: awplus(config)# no ip igmp snooping routermode address...
Page 771: Ip Igmp Snooping Tcn Query Solicit
IGMP IGMP S NOOPING OMMANDS IP IGMP SNOOPING TCN QUERY SOLICIT ip igmp snooping tcn query solicit Overview Use this command to enable IGMP (Internet Group Management Protocol) Snooping TCN (Topology Change Notification) Query Solicitation feature. When this command is used in the Global Configuration mode, Query Solicitation is enabled.
Page 772: Ip Igmp Snooping Tcn Query Solicit
IGMP IGMP S NOOPING OMMANDS IP IGMP SNOOPING TCN QUERY SOLICIT Command issued from Command issued Device is STP Root Global from Interface Bridge or the IGMP Query Solicit Configuration Configuration EPSR Master Node message sent on VLAN See the IGMP Feature Overview and Configuration Guide for introductory information about the Query Solicitation feature.
Page 773: Ip Igmp Source-Address-Check
IGMP IGMP S NOOPING OMMANDS IP IGMP SOURCE ADDRESS CHECK ip igmp source-address-check Overview This command enables the checking of the Source Address for an IGMP Report, rejecting any IGMP Reports originating on devices outside of the local subnet. Use the no variant of this command to disable the checking of the Source Address for an IGMP Report, which allows IGMP Reports from devices outside of the local subnet.
Page 774: Ip Igmp Static-Group
IGMP IGMP S NOOPING OMMANDS IP IGMP STATIC GROUP ip igmp static-group Overview Use this command to statically configure multicast group membership entries on a VLAN interface, or to statically forward a multicast channel out a particular port or port range. To statically add only a group membership, do not specify any parameters.
Page 775 IGMP IGMP S NOOPING OMMANDS IP IGMP STATIC GROUP Example The following example show how to statically add group and source records for IGMP on vlan3: awplus# configure terminal awplus(config)# interface vlan3 awplus(config-if)# ip igmp awplus(config-if)# ip igmp static-group 226.1.2.4 source 10.2.3.4 C613-50104-01 REV A Command Reference for x230 Series...
Page 776: Ip Igmp Startup-Query-Count
IGMP IGMP S NOOPING OMMANDS IP IGMP STARTUP QUERY COUNT ip igmp startup-query-count Overview Use this command to configure the IGMP startup query count for an interface. The IGMP startup query count is the number of IGMP General Query messages sent by a querier at startup.
Page 777: Ip Igmp Startup-Query-Interval
IGMP IGMP S NOOPING OMMANDS IP IGMP STARTUP QUERY INTERVAL ip igmp startup-query-interval Overview Use this command to configure the IGMP startup query interval for an interface. The IGMP startup query interval is the amount of time in seconds between successive IGMP General Query messages sent by a querier during startup.
Page 778: Ip Igmp Trusted
IGMP IGMP S NOOPING OMMANDS IP IGMP TRUSTED ip igmp trusted Overview Use this command to allow IGMP to process packets received on certain trusted ports only. Use the no variant of this command to stop IGMP from processing specified packets if the packets are received on the specified ports or aggregator.
Page 779: Ip Igmp Version
IGMP IGMP S NOOPING OMMANDS IP IGMP VERSION ip igmp version Overview Use this command to set the current IGMP version (IGMP version 1, 2 or 3) on an interface. Use the no variant of this command to return to the default version. Syntax ip igmp version <1-3>...
Page 780: Show Debugging Igmp
IGMP IGMP S NOOPING OMMANDS SHOW DEBUGGING IGMP show debugging igmp Overview Use this command to display the IGMP debugging options set. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 781: Show Ip Igmp Groups
IGMP IGMP S NOOPING OMMANDS SHOW IP IGMP GROUPS show ip igmp groups Overview Use this command to display the multicast groups with receivers directly connected to the router, and learned through IGMP. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 782 IGMP IGMP S NOOPING OMMANDS SHOW IP IGMP GROUPS Table 1: Parameters in the output of the show ip igmp groups command (cont.) Parameter Description Expires Time (in hours, minutes, and seconds) until the entry expires. Last Last host to report being a member of the multicast group. Reporter C613-50104-01 REV A Command Reference for x230 Series...
Page 783: Show Ip Igmp Interface
IGMP IGMP S NOOPING OMMANDS SHOW IP IGMP INTERFACE show ip igmp interface Overview Use this command to display the state of IGMP Snooping for a specified VLAN, or all VLANs. IGMP is shown as Active or Disabled in the show output. You can also display the number of groups a switch port belongs to.
Page 784 IGMP IGMP S NOOPING OMMANDS SHOW IP IGMP INTERFACE awplus#show ip igmp interface vlan2 Interface vlan2 (Index 202) IGMP Disabled, Inactive, Version 3 (default) IGMP interface has 0 group-record states IGMP activity: 0 joins, 0 leaves IGMP robustness variable is 2 IGMP last member query count is 2...
Page 785: Show Ip Igmp Snooping Mrouter
IGMP IGMP S NOOPING OMMANDS SHOW IP IGMP SNOOPING MROUTER show ip igmp snooping mrouter Overview Use this command to display the multicast router ports, both static and dynamic, in a VLAN. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 786: Show Ip Igmp Snooping Routermode
IGMP IGMP S NOOPING OMMANDS SHOW IP IGMP SNOOPING ROUTERMODE show ip igmp snooping routermode Overview Use this command to display the current routermode and the list of IP addresses set as router multicast addresses from the ip igmp snooping routermode command.
Page 787: Show Ip Igmp Snooping Statistics
IGMP IGMP S NOOPING OMMANDS SHOW IP IGMP SNOOPING STATISTICS show ip igmp snooping statistics Overview Use this command to display IGMP Snooping statistics data. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 788 IGMP IGMP S NOOPING OMMANDS SHOW IP IGMP SNOOPING STATISTICS Figure 23-7: Example output from the show ip igmp snooping statistics command for a switch port awplus#show ip igmp interface port1.0.1 IGMP information for port1.0.1 Maximum groups limit set: 10 Number of groups port belongs to: 0 C613-50104-01 REV A Command Reference for x230 Series...
Page 789: Undebug Igmp
IGMP IGMP S NOOPING OMMANDS UNDEBUG IGMP undebug igmp Overview This command applies the functionality of the no debug igmp command. C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 790: Mld Snooping Commands
MLD Snooping Commands Introduction Overview This chapter provides an alphabetical reference of configuration, clear, and show commands related to MLD Snooping. Command List • “clear ipv6 mld” on page 791 • “clear ipv6 mld group” on page 792 • “clear ipv6 mld interface”...
Page 791: Clear Ipv6 Mld
MLD S NOOPING OMMANDS CLEAR IPV clear ipv6 mld Overview Use this command to clear all MLD local memberships on all interfaces. clear ipv6 mld Syntax Mode Privileged Exec awplus# clear ipv6 mld Example Related clear ipv6 mld group Commands clear ipv6 mld interface C613-50104-01 REV A Command Reference for x230 Series...
Page 792: Clear Ipv6 Mld Group
MLD S NOOPING OMMANDS CLEAR IPV MLD GROUP clear ipv6 mld group Overview Use this command to clear MLD specific local-membership(s) on all interfaces, for a particular group. clear ipv6 mld group {*|<ipv6-address>} Syntax Parameter Description Clears all groups on all interfaces. This is an alias to the clear ipv6 mld command.
Page 793: Clear Ipv6 Mld Interface
MLD S NOOPING OMMANDS CLEAR IPV MLD INTERFACE clear ipv6 mld interface Overview Use this command to clear MLD interface entries. clear ipv6 mld interface <interface> Syntax Parameter Description <interface> Specifies name of the interface; all groups learned from this interface are deleted.
Page 794: Debug Mld
MLD S NOOPING OMMANDS DEBUG MLD debug mld Overview Use this command to enable all MLD debugging modes, or a specific MLD debugging mode. Use the no variant of this command to disable all MLD debugging modes, or a specific MLD debugging mode. Syntax debug mld {all|decode|encode|events|fsm|tib} no debug mld {all|decode|encode|events|fsm|tib}...
Page 795: Ipv6 Mld Immediate-Leave
MLD S NOOPING OMMANDS MLD IMMEDIATE LEAVE ipv6 mld immediate-leave Overview Use this command to minimize the leave latency of MLD memberships. Use the no variant of this command to disable this feature. Syntax ipv6 mld immediate-leave group-list <IPv6-access-list-name> no ipv6 mld immediate-leave Parameter Description <IPv6-access-...
Page 796: Ipv6 Mld Limit
MLD S NOOPING OMMANDS MLD LIMIT ipv6 mld limit Overview Use this command to configure a limit on the maximum number of group memberships that may be learned. The limit may be set for the device as a whole, or for a specific interface. Once the specified group membership limit is reached, all further local-memberships will be ignored.
Page 797 MLD S NOOPING OMMANDS MLD LIMIT The following example configures an MLD limit of 100 group-membership states on the VLAN interface vlan2: awplus# configure terminal awplus(config)# ipv6 forwarding awplus(config)# ipv6 multicast-routing awplus(config)# interface vlan2 awplus(config-if)# ipv6 enable awplus(config-if)# ipv6 mld limit 100 The following example configures an MLD limit of 100 group-membership states on the VLAN interfaces vlan2-vlan4: awplus#...
Page 798: Ipv6 Mld Snooping
MLD S NOOPING OMMANDS MLD SNOOPING ipv6 mld snooping Overview Use this command to enable MLD Snooping. When this command is issued in the Global Configuration mode, MLD Snooping is enabled globally for the device. When this command is issued in Interface mode for a VLAN then MLD Snooping is enabled for the specified VLAN.
Page 799 MLD S NOOPING OMMANDS MLD SNOOPING To configure MLD Snooping on the VLAN interfaces vlan2-vlan4, enter the following commands: awplus# configure terminal awplus(config)# interface vlan2-vlan4 awplus(config-if)# ipv6 mld snooping To disable MLD Snooping for the VLAN interface vlan2, enter the following commands: awplus# configure terminal...
Page 800: Ipv6 Mld Snooping Fast-Leave
MLD S NOOPING OMMANDS MLD SNOOPING FAST LEAVE ipv6 mld snooping fast-leave Overview Use this command to enable MLD Snooping fast-leave processing. Fast-leave processing is analogous to immediate-leave processing; the MLD group-membership is removed as soon as an MLD leave group message is received, without sending out a group-specific query.
Page 801: Ipv6 Mld Snooping Mrouter
MLD S NOOPING OMMANDS MLD SNOOPING MROUTER ipv6 mld snooping mrouter Overview Use this command to statically configure the specified port as a Multicast Router interface for MLD Snooping within the specified VLAN. See detailed usage notes below to configure static multicast router ports when using static IPv6 multicast routes with EPSR, and the destination VLAN is an EPSR data VLAN.
Page 802 MLD S NOOPING OMMANDS MLD SNOOPING MROUTER Examples This example shows how to specify the next-hop interface to the multicast router for VLAN interface vlan2: awplus# configure terminal awplus(config)# interface vlan2 awplus(config-if)# ipv6 mld snooping mrouter interface port1.0.5 This example shows how to specify the next-hop interface to the multicast router for VLAN interfaces vlan2-vlan4: awplus# configure terminal...
Page 803: Ipv6 Mld Snooping Querier
MLD S NOOPING OMMANDS MLD SNOOPING QUERIER ipv6 mld snooping querier Overview Use this command to enable MLD querier operation on a subnet (VLAN) when no multicast routing protocol is configured in the subnet (VLAN). When enabled, the MLD Snooping querier sends out periodic MLD queries for all interfaces on that VLAN.
Page 804: Ipv6 Mld Snooping Report-Suppression
MLD S NOOPING OMMANDS MLD SNOOPING REPORT SUPPRESSION ipv6 mld snooping report-suppression Overview Use this command to enable report suppression from hosts for Multicast Listener Discovery version 1 (MLDv1) on a VLAN in Interface Configuration mode. Use the no variant of this command to disable report suppression on a VLAN in Interface Configuration mode.
Page 805 MLD S NOOPING OMMANDS MLD SNOOPING REPORT SUPPRESSION This example shows how to disable report suppression for MLD reports on VLAN interfaces vlan2-vlan4: awplus# configure terminal awplus(config)# interface vlan2-vlan4 awplus(config-if)# no ipv6 mld snooping report-suppression C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™...
Page 806: Ipv6 Mld Static-Group
MLD S NOOPING OMMANDS MLD STATIC GROUP ipv6 mld static-group Overview Use this command to statically configure IPv6 group membership entries on an interface. To statically add only a group membership, do not specify any parameters. Use the no variant of this command to delete static group membership entries. Syntax ipv6 mld static-group <ipv6-group-address>...
Page 807 MLD S NOOPING OMMANDS MLD STATIC GROUP To add a static group record on a specific port on vlan2, use the following commands: awplus# configure terminal awplus(config)# interface vlan2 awplus(config-if)# ipv6 mld static-group ff1e::10 interface port1.0.4 C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™...
Page 808: Show Debugging Mld
MLD S NOOPING OMMANDS SHOW DEBUGGING MLD show debugging mld Overview Use this command to display the MLD debugging modes enabled with the debug command. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 809: Show Ipv6 Mld Groups
MLD S NOOPING OMMANDS SHOW IPV MLD GROUPS show ipv6 mld groups Overview Use this command to display the multicast groups that have receivers directly connected to the router and learned through MLD. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 810: Show Ipv6 Mld Interface
MLD S NOOPING OMMANDS SHOW IPV MLD INTERFACE show ipv6 mld interface Overview Use this command to display the state of MLD and MLD Snooping for a specified interface, or all interfaces. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 811: Show Ipv6 Mld Snooping Mrouter
MLD S NOOPING OMMANDS SHOW IPV MLD SNOOPING MROUTER show ipv6 mld snooping mrouter Overview Use this command to display the multicast router interfaces, both configured and learned, in a VLAN. If you do not specify a VLAN interface then all the VLAN interfaces are displayed.
Page 812: Show Ipv6 Mld Snooping Statistics
MLD S NOOPING OMMANDS SHOW IPV MLD SNOOPING STATISTICS show ipv6 mld snooping statistics Overview Use this command to display MLD Snooping statistics data. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 813: Multicast Commands
Multicast Commands Introduction Overview This chapter provides an alphabetical reference of multicast commands for configuring: • IPv4 and IPv6 multicast forwarding • IPv4 and IPv6 static multicast routes • mroutes (routes back to a multicast source) For commands for other multicast protocols, see: •...
Page 814 ULTICAST OMMANDS • “debug nsm mcast” on page 820 • “debug nsm mcast6” on page 821 • “ip mroute” on page 822 • “ip multicast forward-first-packet” on page 824 • “ip multicast route-limit” on page 825 • “ip multicast wrong-vif-suppression” on page 826 •...
Page 815: Clear Ip Mroute
ULTICAST OMMANDS CLEAR IP MROUTE clear ip mroute Overview Use this command to delete entries from the IPv4 multicast routing table. : If you use this command, you should also use the clear ip igmp group command NOTE to clear IGMP group membership records. Syntax clear ip mroute {*|<ipv4-group-address>...
Page 816: Clear Ip Mroute Statistics
ULTICAST OMMANDS CLEAR IP MROUTE STATISTICS clear ip mroute statistics Overview Use this command to delete multicast route statistics entries from the IP multicast routing table. clear ip mroute statistics {*|<ipv4-group-addr> Syntax [<ipv4-source-addr>]} Parameter Description All multicast route entries. <ipv4-group-addr> Group IPv4 address, in dotted decimal notation in the format A.B.C.D.
Page 817: Clear Ipv6 Mroute
ULTICAST OMMANDS CLEAR IPV MROUTE clear ipv6 mroute Overview Use this command to delete one or more dynamically-added route entries from the IPv6 multicast routing table. clear ipv6 mroute {*|<ipv6-group-address> Syntax [<ipv6-source-address>]} Parameter Description Deletes all dynamically-learned IPv6 multicast routes. <ipv6-group-address>...
Page 818: Clear Ipv6 Mroute Statistics
ULTICAST OMMANDS CLEAR IPV MROUTE STATISTICS clear ipv6 mroute statistics Overview Use this command to delete multicast route statistics entries from the IPv6 multicast routing table. : Static IPv6 multicast routes take priority over dynamic IPv6 multicast routes. Use NOTE clear ipv6 mroute command to clear static IPv6 multicast routes and ensure dynamic IPv6 multicast routes can take over from previous static IPv6 multicast routes.
Page 819: Ipv6 Multicast Forward-Slow-Path-Packet
ULTICAST OMMANDS MULTICAST FORWARD SLOW PATH PACKET ipv6 multicast forward-slow-path-packet Overview Use this command to enable multicast packets to be forwarded to the CPU. Enabling this command will ensure that the layer L3 MTU is set correctly for each IP multicast group and will apply the value of the smallest MTU among the outgoing interfaces for the multicast group.
Page 820: Debug Nsm Mcast
ULTICAST OMMANDS DEBUG NSM MCAST debug nsm mcast Overview Use this command to debug IPv4 events in the Multicast Routing Information Base (MRIB). debug nsm mcast Syntax {all|fib-msg|mrt|mtrace|mtrace-detail|register|stats|vif} Parameter Description All IPv4 multicast debugging. fib-msg Forwarding Information Base (FIB) messages. Multicast routes.
Page 821: Debug Nsm Mcast6
ULTICAST OMMANDS DEBUG NSM MCAST debug nsm mcast6 Overview Use this command to debug IPv6 events in the Multicast Routing Information Base (MRIB). debug nsm mcast6 Syntax {all|fib-msg|mrt|mtrace|mtrace-detail|register|stats|vif} Parameter Description All IPv4 multicast debugging. fib-msg Forwarding Information Base (FIB) messages. Multicast interfaces.
Page 822: Ip Mroute
ULTICAST OMMANDS IP MROUTE ip mroute Overview Use this command to inform multicast of the RPF (Reverse Path Forwarding) route to a given IPv4 multicast source. Use the no variant of this command to delete a route to an IPv4 multicast source. Syntax ip mroute <ipv4-source-address/mask-length>...
Page 823 ULTICAST OMMANDS IP MROUTE administrative distance - whether a static “multicast route” or a route from the unicast route table - will be chosen as the RPF route to the source. Note that in this context the term “multicast route” does not imply a route via which the current router will forward multicast;...
Page 824: Ip Multicast Forward-First-Packet
ULTICAST OMMANDS IP MULTICAST FORWARD FIRST PACKET ip multicast forward-first-packet Overview Use this command to enable multicast to forward the first multicast packets coming to the device. Use the no variant of this command to disable this feature. Syntax ip multicast forward-first-packet no ip multicast forward-first-packet Default By default, this feature is disabled.
Page 825: Ip Multicast Route-Limit
ULTICAST OMMANDS IP MULTICAST ROUTE LIMIT ip multicast route-limit Overview Use this command to limit the number of multicast routes that can be added to an IPv4 multicast routing table. Use the no variant of this command to return the IPv4 route limit to the default. Syntax ip multicast route-limit <limit>...
Page 826: Ip Multicast Wrong-Vif-Suppression
ULTICAST OMMANDS IP MULTICAST WRONG SUPPRESSION ip multicast wrong-vif-suppression Overview Use this command to prevent unwanted multicast packets received on an unexpected VLAN being trapped to the CPU. Use the no variant of this command to disable wrong VIF suppression. Syntax ip ip multicast wrong-vif-suppression no ip multicast wrong-vif-suppression...
Page 827: Ip Multicast-Routing
ULTICAST OMMANDS IP MULTICAST ROUTING ip multicast-routing Overview Use this command to turn on/off IPv4 multicast routing on the router; when turned off the device does not perform multicast functions. Use the no variant of this command to disable IPv4 multicast routing after enabling it.
Page 828: Ipv6 Mroute
ULTICAST OMMANDS MROUTE ipv6 mroute Overview Use this command to inform multicast of the RPF (Reverse Path Forwarding) route to a given IPv6 multicast source. Use the no variant of this command to delete a route to an IPv6 multicast source. JC - 25/6/12 - added missing IPI IPv6 multicast commands that have been in since 5.4.1 as undocumented and unregistered CLI commands but have been available in 5.4.1/5.4.2 sw - this is out for 542-25 but should be added back in for 543 - check...
Page 829 ULTICAST OMMANDS MROUTE given IPv6 source, the multicast routing protocol will look at these static entries as well as looking into the unicast routing table. The route with the lowest administrative distance - whether a static “multicast route” or a route from the unicast route table - will be chosen as the RPF route to the source.
Page 830: Ipv6 Multicast Route-Limit
ULTICAST OMMANDS MULTICAST ROUTE LIMIT ipv6 multicast route-limit Overview Use this command to limit the number of multicast routes that can be added to an IPv6 multicast routing table. Use the no variant of this command to return the IPv6 route limit to the default. Syntax ipv6 multicast route-limit <limit>...
Page 831: Ipv6 Multicast-Routing
ULTICAST OMMANDS MULTICAST ROUTING ipv6 multicast-routing Overview Use this command to turn on/off IPv6 multicast routing on the router; when turned off the device does not perform multicast functions. Use the no variant of this command to disable IPv6 multicast routing after enabling it.
Page 832: Multicast
ULTICAST OMMANDS MULTICAST multicast Overview Use this command to enable a device port to route multicast packets that ingress the port. Use the no variant of this command to stop the device port from routing multicast packets that ingress the port. Note that this does not affect Layer 2 forwarding of multicast packets.
Page 833: Show Ip Mroute
ULTICAST OMMANDS SHOW IP MROUTE show ip mroute Overview Use this command to display the contents of the IPv4 multicast routing (mroute) table. show ip mroute [<ipv4-group-addr>] [<ipv4-source-addr>] Syntax [{dense|sparse}] [{count|summary}] Parameter Description <ipv4-group-addr> Group IPv4 address, in dotted decimal notation in the format A.B.C.D.
Page 834 ULTICAST OMMANDS SHOW IP MROUTE Figure 25-2: Example output from the show ip mroute command with the source and group IPv4 address specified awplus# show ip mroute 10.10.1.52 224.0.1.3  IP Multicast Routing Table Flags: I - Immediate Stat, T - Timed Stat, F - Forwarder  installed...
Page 835: Show Ip Mvif
ULTICAST OMMANDS SHOW IP MVIF show ip mvif Overview Use this command to display the contents of the IPv4 Multicast Routing Information Base (MRIB) VIF table. show ip mvif [<interface>] Syntax Parameter Description <interface> The interface to display information about. Mode User Exec and Privileged Exec awplus#...
Page 836: Show Ip Rpf
ULTICAST OMMANDS SHOW IP RPF show ip rpf Overview Use this command to display Reverse Path Forwarding (RPF) information for the specified IPv4 source address. show ip rpf <source-addr> Syntax Parameter Description <ipv4-source- addr> Source IPv4 address, in dotted decimal notation in the format A.B.C.D.
Page 837: Show Ipv6 Mroute
ULTICAST OMMANDS SHOW IPV MROUTE show ipv6 mroute Overview Use this command to display the contents of the IPv6 multicast routing (mroute) table. show ipv6 mroute [<ipv6-group-addr>] [<ipv6-source-addr>] Syntax [{count|summary}] Parameter Description <ipv6-group-addr> Group IPv6 address, in hexadecimal notation in the format X.X::X.X.
Page 838 ULTICAST OMMANDS SHOW IPV MROUTE The following is a sample output of this command displaying the IPv6 multicast routing count table for a single static IPv6 Multicast route: Figure 25-8: Example output from the show ipv6 mroute count command awplus#show ipv6 mroute count  ...
Page 839: Show Ipv6 Multicast Forwarding
ULTICAST OMMANDS SHOW IPV MULTICAST FORWARDING show ipv6 multicast forwarding Overview Use this command to view the status of multicast forwarding slow-path-packet setting. show ipv6 multicast forwarding Syntax Mode User Exec Example To show the status of the multicast forwarding, slow-path-packet setting, use the following command: awplus# show ipv6 multicast forwarding...
Page 840: Show Ipv6 Mif
ULTICAST OMMANDS SHOW IPV show ipv6 mif Overview Use this command to display the contents of the IPv6 Multicast Routing Information Base (MRIB) MIF table. show ipv6 mif [<interface>] Syntax Parameter Description <interface> The interface to display information about. Mode User Exec and Privileged Exec awplus# show ipv6 mif...
Page 841: Part 5: Access And Security
Part 5: Access and Security C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 842: Ipv4 Hardware Access Control List (Acl) Commands
IPv4 Hardware Access Control List (ACL) Commands Introduction Overview This chapter provides an alphabetical reference of IPv4 Hardware Access Control List (ACL) commands. It contains detailed command information and command examples about IPv4 hardware ACLs, which are applied directly to interfaces using access-group command To apply ACLs to an LACP channel group, apply it to all the individual switch ports...
Page 843 (ACL) C ARDWARE CCESS ONTROL OMMANDS Table 26-1: IPv4 Hardware Access List Commands and Prompts (cont.) Command Name Command Mode Prompt awplus(config)# access-group Global Configuration awplus(config)# access-list (hardware IP numbered) Global Configuration awplus(config)# access-list (hardware MAC numbered) Global Configuration awplus(config)# access-list hardware (named) Global Configuration awplus(config-if)#...
Page 844: Access-Group
(ACL) C ARDWARE CCESS ONTROL OMMANDS ACCESS GROUP access-group Overview This command adds or removes a hardware-based access-list to or from a switch port interface. The number of hardware numbered and named access-lists that can be added to a switch port interface is determined by the available memory in hardware-based packet classification tables.
Page 845 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACCESS GROUP Examples To add the numbered hardware access-list 3005 to switch port interface port1.0.1, enter the following commands: awplus# configure terminal awplus(config)# interface port1.0.1 awplus(config-if)# access-group 3005 To add the named hardware access-list “hw-acl” to switch port interface port1.0.2, enter the following commands: awplus# configure terminal...
Page 846: Access-List (Hardware Ip Numbered)
(ACL) C ARDWARE CCESS ONTROL OMMANDS ACCESS LIST HARDWARE NUMBERED access-list (hardware IP numbered) Overview This command creates an access-list for use with hardware classification, such as QoS. The access-list will match on either TCP or UDP type packets that have the specified source and destination IP addresses and Layer 4 port values or ranges.
Page 847 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACCESS LIST HARDWARE NUMBERED Table 27: Parameters in the access-list (hardware IP numbered) command - ip|icmp (cont.) Parameter Description <source> The source address of the packets. You can specify a single host, a subnet, or all sources. The following are the valid formats for specifying the source: Matches any source IP address.
Page 848 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACCESS LIST HARDWARE NUMBERED Table 27: Parameters in the access-list (hardware IP numbered) command - ip|icmp (cont.) Parameter Description <type-number> The ICMP type, as defined in RFC792 and RFC950. Specify one of the following integers to create a filter for the ICMP message type: Echo replies.
Page 849 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACCESS LIST HARDWARE NUMBERED Table 28: Parameters in the access-list (hardware IP numbered) command - tcp|udp (cont.) Parameter Description permit The access-list permits packets that match the type, source, and destination filtering specified with this command. send-to-cpu Specify packets to send to the CPU.
Page 850 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACCESS LIST HARDWARE NUMBERED Table 28: Parameters in the access-list (hardware IP numbered) command - tcp|udp (cont.) Parameter Description <sourceport> The source (TCP or UDP) port number, specified as an integer between 0 and 65535. range Range of port numbers.
Page 851 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACCESS LIST HARDWARE NUMBERED Table 29: Parameters in the access-list (hardware IP numbered) command - proto (cont.) Parameter Description <source> The source address of the packets. You can specify a single host, a subnet, or all sources. The following are the valid formats for specifying the source: Matches any source IP address.
Page 852 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACCESS LIST HARDWARE NUMBERED Table 26-1: IP protocol number and description Protocol Number Protocol Description [RFC] Internet Control Message [RFC792] Internet Group Management [RFC1112] Gateway-to-Gateway [RFC823] IP in IP [RFC2003] Stream [RFC1190] [RFC1819] TCP (Transmission Control Protocol) [RFC793] EGP (Exterior Gateway Protocol) [RFC888] IGP (Interior Gateway Protocol) [IANA] Network Voice Protocol [RFC741]...
Page 853 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACCESS LIST HARDWARE NUMBERED Table 26-1: IP protocol number and description (cont.) Protocol Number Protocol Description [RFC] MPLS-in-IP / RFC4023 MANET Protocols / RFC-ietf-manet-iana-07.txt 139-252 Unassigned / IANA Use for experimentation and testing / RFC3692 Use for experimentation and testing / RFC3692 Reserved / IANA Mode...
Page 854 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACCESS LIST HARDWARE NUMBERED To create an access-list that will deny all IGMP packets (IP protocol 2) from the 192.168.0.0 network, enter the commands: awplus# configure terminal awplus(config)# access-list 3000 deny proto 2 192.168.0.0/16 TCP Example To create an access-list that will permit TCP packets with a destination address of 192.168.1.1, a destination port of 80 and any source address and source port,...
Page 855: Access-List (Hardware Mac Numbered)
(ACL) C ARDWARE CCESS ONTROL OMMANDS ACCESS LIST HARDWARE NUMBERED access-list (hardware MAC numbered) Overview This command creates an access-list for use with hardware classification, such as QOS. The access-list will match on packets that have the specified source and destination MAC addresses.
Page 856 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACCESS LIST HARDWARE NUMBERED Parameter Description <destination-mac- The mask that will be applied to the destination MAC mask> addresses. Enter this in the format <HHHH.HHHH.HHHH> where each H is a hexadecimal number that represents a 4 bit binary number.
Page 857 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACCESS LIST HARDWARE NUMBERED To destroy the access-list with an access-list identity of 4000 enter the commands: awplus# configure terminal awplus(config)# no access-list 4000 Related access-group Commands mirror interface show running-config show access-list (IPv4 Hardware ACLs) C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™...
Page 858: Access-List Hardware (Named)
(ACL) C ARDWARE CCESS ONTROL OMMANDS ACCESS LIST HARDWARE NAMED access-list hardware (named) Overview This command creates a named hardware access-list and puts you into IPv4 Hardware ACL Configuration mode, where you can add filters to the ACL. Once you have configured the ACL, you can apply it to a switch port.
Page 859 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACCESS LIST HARDWARE NAMED Related access-group Commands (access-list hardware ICMP filter) (access-list hardware IP protocol filter) (access-list hardware TCP UDP filter) (access-list standard named filter) show access-list (IPv4 Hardware ACLs) C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™...
Page 860: (Access-List Hardware Icmp Filter)
(ACL) C ARDWARE CCESS ONTROL OMMANDS ICMP ACCESS LIST HARDWARE FILTER (access-list hardware ICMP filter) Overview Use this ACL filter to add a new ICMP filter entry to the current hardware access-list. The filter will match on any ICMP packet that has the specified source and destination IP addresses and ICMP type.
Page 861 (ACL) C ARDWARE CCESS ONTROL OMMANDS ICMP ACCESS LIST HARDWARE FILTER Parameter Description <source> The source address of the packets. You can specify a single host, a subnet, or all sources. The following are the valid formats for specifying the source: <ip-addr>/ An IPv4 address, followed by a <prefix>...
Page 862 (ACL) C ARDWARE CCESS ONTROL OMMANDS ICMP ACCESS LIST HARDWARE FILTER An ACL can be configured with multiple ACL filters using sequence numbers. If the sequence number is omitted, the next available multiple of 10 will be used as the sequence number for the new filter.
Page 863: (Access-List Hardware Ip Protocol Filter)
(ACL) C ARDWARE CCESS ONTROL OMMANDS ACCESS LIST HARDWARE PROTOCOL FILTER (access-list hardware IP protocol filter) Overview Use this ACL filter to add an IP protocol type filter entry to the current hardware access-list. The filter will match on any IP packet that has the specified source and destination IP addresses and IP protocol type, or has the optionally specified source and destination MAC addresses.
Page 864 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACCESS LIST HARDWARE PROTOCOL FILTER Parameter Description proto <ip-protocol> <1-255> Specify IP protocol number, as defined by IANA (Internet Assigned Numbers Authority www.iana.org/assignments/protocol-numbers) See below for a list of IP protocol numbers and their descriptions.
Page 865 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACCESS LIST HARDWARE PROTOCOL FILTER Parameter Description Signifies a MAC and based hardware access-list. <mac-source- The source host’s MAC address, entered in address> HHHH.HHHH.HHHH format. <mac-source-mask> The source host’s MAC wildcard mask entered in HHHH.HHHH.HHHH format.
Page 866 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACCESS LIST HARDWARE PROTOCOL FILTER Table 26-2: IP protocol number and description (cont.) Protocol Number Protocol Description [RFC] NARP (NBMA Address Resolution Protocol) [RFC1735] ICMP for IPv6 [RFC1883] No Next Header for IPv6 [RFC1883] Destination Options for IPv6 [RFC1883] EIGRP (Enhanced Interior Gateway Routing Protocol) OSPFIGP [RFC1583]...
Page 867 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACCESS LIST HARDWARE PROTOCOL FILTER To add an access-list filter entry to the access-list named my-list that will permit Examples any type of IP packet with a source address of 192.168.1.1 and any destination address, use the commands: awplus# configure terminal...
Page 868: (Access-List Hardware Mac Filter)
(ACL) C ARDWARE CCESS ONTROL OMMANDS ACCESS LIST HARDWARE FILTER (access-list hardware MAC filter) Overview Use this ACL filter to add a MAC filter entry to the current hardware access-list. The filter will match on any IP packet that has the specified source and destination MAC addresses.
Page 869 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACCESS LIST HARDWARE FILTER Parameter Description <source-mac-mask> The mask that will be applied to the source MAC addresses. Enter this in the format <HHHH.HHHH.HHHH> where each H is a hexadecimal number that represents a 4 bit binary number. For a mask, each value will be either 0 or F.
Page 870 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACCESS LIST HARDWARE FILTER To remove an access-list filter entry that permit packets with a source MAC address of 0000.00ab.1234 and any destination MAC address, use the commands: awplus# configure terminal awplus(config)# access-list hardware my-list awplus(config-ip-hw-acl)# no permit mac 0000.00ab.1234 0000.0000.0000 any...
Page 871: (Access-List Hardware Tcp Udp Filter)
(ACL) C ARDWARE CCESS ONTROL OMMANDS TCP UDP ACCESS LIST HARDWARE FILTER (access-list hardware TCP UDP filter) Overview Use this ACL filter to add a TCP or UDP filter entry to the current hardware access-list. The filter will match on any TCP or UDP type packet that has the specified source and destination IP addresses.
Page 872 (ACL) C ARDWARE CCESS ONTROL OMMANDS TCP UDP ACCESS LIST HARDWARE FILTER Parameter Description <source> The source address of the packets. You can specify a single host, a subnet, or all sources. The following are the valid formats for specifying the source: Matches any source IP address.
Page 873 (ACL) C ARDWARE CCESS ONTROL OMMANDS TCP UDP ACCESS LIST HARDWARE FILTER Parameter Description <destport> The destination TCP or UDP port number, specified as an integer between 0 and 65535. range Specify the range of port numbers between 0 and 65535.
Page 874: Commit (Ipv4)
(ACL) C ARDWARE CCESS ONTROL OMMANDS COMMIT commit (IPv4) Overview Use this command to commit the IPv4 ACL filter configuration entered at the console to the hardware immediately without exiting the IPv4 Hardware ACL Configuration mode. This command forces the associated hardware and software IPv4 ACLs to synchronize.
Page 875: Show Access-List (Ipv4 Hardware Acls)
(ACL) C ARDWARE CCESS ONTROL OMMANDS SHOW ACCESS LIST ARDWARE show access-list (IPv4 Hardware ACLs) Overview Use this command to display the specified access-list, or all access-lists if none have been specified. Note that only defined access-lists are displayed. An error message is displayed for an undefined access-list.
Page 876 (ACL) C ARDWARE CCESS ONTROL OMMANDS SHOW ACCESS LIST ARDWARE Related access-list extended (named) Commands access-list (hardware MAC numbered) access-list hardware (named) C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 877: Show Interface Access-Group
(ACL) C ARDWARE CCESS ONTROL OMMANDS SHOW INTERFACE ACCESS GROUP show interface access-group Overview Use this command to display the access groups attached to a port. If an access group is specified, then the output only includes the ports that the specified access group is attached to.
Page 878: Ipv4 Software Access Control List (Acl) Commands
IPv4 Software Access Control List (ACL) Commands Introduction Overview This chapter provides an alphabetical reference for the IPv4 Software Access Control List (ACL) commands, and contains detailed command information and command examples about IPv4 software ACLs as applied to Routing and Multicasting, which are not applied to interfaces.
Page 879 (ACL) C OFTWARE CCESS ONTROL OMMANDS Table 27-1: IPv4 Software Access List Commands and Prompts Command Name Command Mode Prompt awplus# show ip access-list Privileged Exec awplus(config)# access-group Global Configuration awplus(config)# access-list (extended named) Global Configuration awplus(config)# access-list (extended numbered) Global Configuration awplus(config)# access-list (standard named)
Page 880 (ACL) C OFTWARE CCESS ONTROL OMMANDS • “show ip access-list” on page 919 • “vty access-class (numbered)” on page 920 C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 881: Access-List Extended (Named)
(ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST EXTENDED NAMED access-list extended (named) Overview This command configures an extended named access-list that permits or denies packets from specific source and destination IP addresses. You can either create an extended named ACL together with an ACL filter entry in the Global Configuration mode, or you can use the IPv4 Extended ACL Configuration mode for sequenced ACL filter entry after entering a list name.
Page 882 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST EXTENDED NAMED Table 27-2: Parameters in the access-list extended (named) command - icmp Parameter Description <source> The source address of the packets. You can specify a single host, a subnet, or all sources. The following are the valid formats for specifying the source: Matches any source IP address.
Page 883 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST EXTENDED NAMED Table 27-2: Parameters in the access-list extended (named) command - icmp Parameter Description <type-number> The ICMP type, as defined in RFC792 and RFC950. Specify one of the following integers to create a filter for the ICMP message type: Echo replies.
Page 884 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST EXTENDED NAMED Table 27-3: Parameters in the access-list extended (named) command - tcp|udp Parameter Description <source> The source address of the packets. You can specify a single host, a subnet, or all sources. The following are the valid formats for specifying the source: Matches any source IP address.
Page 885 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST EXTENDED NAMED Table 27-3: Parameters in the access-list extended (named) command - tcp|udp Parameter Description Matches port numbers not equal to the port number specified immediately after this parameter. Log the results. access-list extended <list-name>...
Page 886 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST EXTENDED NAMED Table 27-4: Parameters in the access-list extended (named) command - proto|ip|any (cont.) Parameter Description <destination> The destination address of the packets. You can specify a single host, a subnet, or all destinations. The following are the valid formats for specifying the destination: Matches any destination IP address.
Page 887 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST EXTENDED NAMED Table 27-5: IP protocol number and description (cont.) Protocol Number Protocol Description [RFC] ISO-TP4 (ISO Transport Protocol Class 4) [RFC905] Bulk Data Transfer Protocol [RFC969] DCCP (Datagram Congestion Control Protocol) [RFC4340] DSR (Dynamic Source Routing Protocol) [RFC4728] ESP (Encap Security Payload) [RFC2406]...
Page 888 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST EXTENDED NAMED From there you can configure your access-lists by using the commands (access-list extended ICMP filter), (access-list extended IP filter), and (access-list extended IP protocol filter). Note that packets must match both the source and the destination details. : Software ACLs will deny access unless explicitly permitted by an ACL action.
Page 889: Access-List (Extended Numbered)
(ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST EXTENDED NUMBERED access-list (extended numbered) Overview This command configures an extended numbered access-list that permits or denies packets from specific source and destination IP addresses. You can either create an extended numbered ACL together with an ACL filter entry in the Global Configuration mode, or you can use the IPv4 Extended ACL Configuration mode for sequenced ACL filter entry after entering a list number.
Page 890 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST EXTENDED NUMBERED Parameter Description <destination> The destination address of the packets. You can specify a single host, a subnet, or all destinations. The following are the valid formats for specifying the destination: Matches any destination IP address.
Page 891: (Access-List Extended Icmp Filter)
(ACL) C OFTWARE CCESS ONTROL OMMANDS ICMP ACCESS LIST EXTENDED FILTER (access-list extended ICMP filter) Overview Use this ACL filter to add a new ICMP filter entry to the current extended access-list. If the sequence number is specified, the new filter is inserted at the specified location.
Page 892 (ACL) C OFTWARE CCESS ONTROL OMMANDS ICMP ACCESS LIST EXTENDED FILTER Parameter Description icmp-type The ICMP type. <icmp-value> The value of the ICMP type. Log the results. Mode IPv4 Extended ACL Configuration Default Any traffic controlled by a software ACL that does not explicitly match a filter is denied.
Page 893: (Access-List Extended Ip Filter)
(ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST EXTENDED FILTER (access-list extended IP filter) Overview Use this ACL filter to add a new IP filter entry to the current extended access-list. If the sequence number is specified, the new filter is inserted at the specified location.
Page 894 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST EXTENDED FILTER Parameter Description <destination> The destination address of the packets. You can specify a single host, a subnet, or all destinations. The following are the valid formats for specifying the destination: Matches any destination IP address.
Page 895 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST EXTENDED FILTER Then use the following commands to add a new entry to the named access-list my-acl that will reject packets from 10.0.0.1 to 192.168.1.1: awplus(config-ip-ext-acl)# deny ip host 10.0.0.1 host 192.168.1.1 awplus(config-ip-ext-acl)# 20 permit ip any any Example 3...
Page 896: (Access-List Extended Ip Protocol Filter)
(ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST EXTENDED PROTOCOL FILTER (access-list extended IP protocol filter) Overview Use this ACL filter to add a new IP protocol type filter entry to the current extended access-list. If the sequence number is specified, the new filter is inserted at the specified location.
Page 897 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST EXTENDED PROTOCOL FILTER Parameter Description <destination> The destination address of the packets. You can specify a single host, a subnet, or all destinations. The following are the valid formats for specifying the destination: <ip-addr>/ An IPv4 address, followed by a forward <prefix>...
Page 898 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST EXTENDED PROTOCOL FILTER Table 27-6: IP protocol number and description (cont.) Protocol Number Protocol Description [RFC] Destination Options for IPv6 [RFC1883] EIGRP (Enhanced Interior Gateway Routing Protocol) OSPFIGP [RFC1583] Ethernet-within-IP Encapsulation / RFC3378 Encapsulation Header / RFC1241 IP Payload Compression Protocol / RFC2393 Virtual Router Redundancy Protocol / RFC3768...
Page 899 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST EXTENDED PROTOCOL FILTER Example 2 Use the following commands to add a new access-list filter entry at sequence position 5 in the access-list named my-list that will accept packets from source [adding to a list] address 10.10.1.1/24 to destination address 192.68.1.1/24: awplus# configure terminal...
Page 900: (Access-List Extended Tcp Udp Filter)
(ACL) C OFTWARE CCESS ONTROL OMMANDS TCP UDP ACCESS LIST EXTENDED FILTER (access-list extended TCP UDP filter) Overview Use this ACL filter to add a new TCP or UDP filter entry to the current extended access-list. If the sequence number is specified, the new filter is inserted at the specified location.
Page 901 (ACL) C OFTWARE CCESS ONTROL OMMANDS TCP UDP ACCESS LIST EXTENDED FILTER To insert a new entry with sequence number 5 of the access-list named my-list Example 2 that will accept UDP packets from 10.1.1.0/24 network to 192.168.1.0/24 [adding to a list] network on UDP port 80, use the commands: awplus# configure terminal...
Page 902: Access-List Standard (Named)
(ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST STANDARD NAMED access-list standard (named) Overview This command configures a standard named access-list that permits or denies packets from a specific source IP address. You can either create a standard named ACL together with an ACL filter entry in the Global Configuration mode, or you can use the IPv4 Standard ACL Configuration mode for sequenced ACL filter entry after first entering an access-list name.
Page 903 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST STANDARD NAMED Usage Use this command when configuring a standard named access-list for filtering IP software packets. You can either create access-lists from within this command, or you can enter access-list standard followed by only the name. Entering only the name moves you to the IPv4 Standard ACL Configuration mode for the selected access-list.
Page 904: Access-List (Standard Numbered)
(ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST STANDARD NUMBERED access-list (standard numbered) Overview This command configures a standard numbered access-list that permits or denies packets from a specific source IP address. You can either create a standard numbered ACL together with an ACL filter entry in the Global Configuration mode, or you can use the IPv4 Standard ACL Configuration mode for sequenced ACL filter entry after first entering an access-list number.
Page 905 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST STANDARD NUMBERED You can either create access-lists from within this command, or you can enter access-list followed by only the number. Entering only the number moves you to the IPv4 Standard ACL Configuration mode for the selected access-list. From there you can configure your access-lists by using the command (access-list standard numbered...
Page 906: (Access-List Standard Named Filter)
(ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST STANDARD NAMED FILTER (access-list standard named filter) Overview This ACL filter adds a source IP address filter entry to a current named standard access-list. If the sequence number is specified, the new filter entry is inserted at the specified location.
Page 907 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST STANDARD NAMED FILTER Usage An ACL can be configured with multiple ACL filters using sequence numbers. If the sequence number is omitted, the next available multiple of 10 will be used as the sequence number for the new filter.
Page 908: (Access-List Standard Numbered Filter)
(ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST STANDARD NUMBERED FILTER (access-list standard numbered filter) Overview This ACL filter adds a source IP address filter entry to a current standard numbered access-list. If a sequence number is specified, the new filter entry is inserted at the specified location.
Page 909 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST STANDARD NUMBERED FILTER Usage An ACL can be configured with multiple ACL filters using sequence numbers. If the sequence number is omitted, the next available multiple of 10 will be used as the sequence number for the new filter.
Page 910: Dos
(ACL) C OFTWARE CCESS ONTROL OMMANDS Overview Use this command to configure Denial-of-Service (DoS) features for a port. Six different DoS attacks can be detected: IP Options, Land, Ping-of-Death, Smurf, Synflood and Teardrop. When the attack is detected, three different actions are available: •...
Page 911 (ACL) C OFTWARE CCESS ONTROL OMMANDS Type of DoS attack Description ipoptions This type of attack occurs when an attacker sends packets containing bad IP options to a victim node. There are many different types of IP options attacks and this software does not try to distinguish between them.
Page 912 (ACL) C OFTWARE CCESS ONTROL OMMANDS To configure smurf DoS detection on port1.0.1, and shutdown the interface if Examples an attack is detected, use the commands: awplus# configure terminal awplus(config)# interface port1.0.1 awplus(config-if)# dos smurf broadcast 192.168.1.0 action shutdown To configure land DoS detection on port1.0.1, and shutdown the interface if an attack is detected, use the commands: awplus# configure terminal...
Page 913: Maximum-Access-List
(ACL) C OFTWARE CCESS ONTROL OMMANDS MAXIMUM ACCESS LIST maximum-access-list Overview Sets the maximum number of filters that can be added to any access-list. These are access-lists within the ranges <1-199>, <1300-1999> and <2000-2699> and named standard and extended access-lists. The no variant of this command removes the limit on the number of filters that can be added to a software access-list maximum-access-list <1-4294967294>...
Page 914: Show Access-List (Ipv4 Software Acls)
(ACL) C OFTWARE CCESS ONTROL OMMANDS SHOW ACCESS LIST OFTWARE show access-list (IPv4 Software ACLs) Overview Use this command to display the specified access-list, or all access-lists if none have been specified. Note that only defined access-lists are displayed. An error message is displayed for an undefined access-list show access-list Syntax...
Page 915 (ACL) C OFTWARE CCESS ONTROL OMMANDS SHOW ACCESS LIST OFTWARE  Standard IP access-list 20 deny 192.168.10.0, wildcard bits 0.0.0.255 deny 192.168.12.0, wildcard bits 0.0.0.255 Note the following error message is displayed if you attempt to show an undefined access-list: awplus# show access-list 2 ...
Page 916: Show Dos Interface
(ACL) C OFTWARE CCESS ONTROL OMMANDS SHOW DOS INTERFACE show dos interface Overview Use this command to display the Denial-of-Service (DoS) features configured on a switch port interface from the command. See the command for descriptions of DoS attack types. show dos interface {<port-list>} Syntax Parameter...
Page 917 (ACL) C OFTWARE CCESS ONTROL OMMANDS SHOW DOS INTERFACE Figure 27-2: Example output from the show dos interface command after a synflood DoS attack awplus#show dos interface port1.0.1  DoS settings for interface port1.0.1 ----------------------------------------- Port status : Enabled ipoptions : Disabled...
Page 918 (ACL) C OFTWARE CCESS ONTROL OMMANDS SHOW DOS INTERFACE Table 28: Parameters in the show dos interface command output: (cont.) Type of DoS attack Description smurf Displays Enabled when the smurf parameter is configured command, plus the action (Shutdown port, with the Mirror port, or Trap port) and the number of instances of any smurf DoS attacks that have occurred on the interface.
Page 919: Show Ip Access-List
(ACL) C OFTWARE CCESS ONTROL OMMANDS SHOW IP ACCESS LIST show ip access-list Overview Use this command to display IP access-lists. show ip access-list Syntax [<1-99>|<100-199>|<1300-1999>|<2000-2699>|<access-list-name>] Parameter Description <1-99> IP standard access-list. <100-199> IP extended access-list. <1300-1999> IP standard access-list (expanded range). <2000-2699>...
Page 920: Vty Access-Class (Numbered)
(ACL) C OFTWARE CCESS ONTROL OMMANDS VTY ACCESS CLASS NUMBERED vty access-class (numbered) Overview For IPv4, use this command to set a standard numbered software access list to be the management ACL. This is then applied to all available VTY lines for controlling remote access by Telnet and SSH.
Page 921: Ipv6 Software Access Control List (Acl) Commands
IPv6 Software Access Control List (ACL) Commands Introduction Overview This chapter provides an alphabetical reference for the IPv6 Software Access Control List (ACL) commands, and contains detailed command information and command examples about IPv6 software ACLs as applied to Routing and Multicasting, which are not applied to interfaces.
Page 922 (ACL) C OFTWARE CCESS ONTROL OMMANDS Table 28-1: IPv6 Software Access List Commands and Prompts Command Name Command Mode Prompt awplus# show ipv6 access-list (IPv6 Software Privileged Exec ACLs) awplus(config)# ipv6 access-list standard (named) Global Configuration awplus(config-ipv6-std-acl)# (ipv6 access-list standard filter) IPv6 Standard ACL Configuration Command List...
Page 923: Ipv6 Access-List Standard (Named)
(ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST STANDARD NAMED ipv6 access-list standard (named) Overview This command configures an IPv6 standard access-list for filtering frames that permit or deny IPv6 packets from a specific source IPv6 address. The no variant of this command removes a specified IPv6 standard access-list. Syntax ipv6 access-list standard <ipv6-acl-list-name>...
Page 924 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST STANDARD NAMED For backwards compatibility you can either create IPv6 standard access-lists from within this command, or you can enter ipv6 access-list standard followed by only the IPv6 standard access-list name. This latter (and preferred) method moves you to the (config-ipv6-std-acl) prompt for the selected IPv6 standard access-list, and from here you can configure the filters for this selected IPv6 standard access-list.
Page 925: (Ipv6 Access-List Standard Filter)
(ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST STANDARD FILTER (ipv6 access-list standard filter) Overview Use this ACL filter to add a filter entry for an IPv6 source address and prefix length to the current standard IPv6 access-list. If a sequence number is specified, the new entry is inserted at the specified location.
Page 926 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST STANDARD FILTER To remove the ACL filter entry that will deny any IPv6 packets from the standard IPv6 access-list named my-list, enter the commands: awplus# configure terminal awplus(config)# ipv6 access-list standard my-list awplus(config-ipv6-std-acl)# no deny any Alternately, to remove the ACL filter entry with sequence number 5 to the...
Page 927: Show Ipv6 Access-List (Ipv6 Software Acls)
(ACL) C OFTWARE CCESS ONTROL OMMANDS SHOW IPV ACCESS LIST OFTWARE show ipv6 access-list (IPv6 Software ACLs) Overview Use this command to display all configured IPv6 access-lists or the IPv6 access-list specified by name. show ipv6 access-list [<access-list-name>] Syntax show ipv6 access-list standard [<access-list-name>] Parameter Description <access-list-name>...
Page 928: Vty Ipv6 Access-Class (Named)
(ACL) C OFTWARE CCESS ONTROL OMMANDS VTY IPV ACCESS CLASS NAMED vty ipv6 access-class (named) Overview For IPv6, use this command to set a standard named software access list to be the management ACL. This is then applied to all available VTY lines for controlling remote access by Telnet and SSH.
Page 929: Qos Commands
QoS Commands Introduction Overview This chapter provides an alphabetical reference for Quality of Service commands. QoS uses ACLs. For more information about ACLs, see the ACL Feature Overview and Configuration Guide. Command List • “class” on page 931 • “class-map” on page 932 •...
Page 930 OMMANDS • “mls qos map premark-dscp to” on page 953 • “no police” on page 955 • “police single-rate action” on page 956 • “police twin-rate action” on page 958 • “policy-map” on page 960 • “priority-queue” on page 961 •...
Page 931: Class
OMMANDS CLASS class Overview Use this command to associate an existing class-map to a policy or policy-map (traffic classification), and to enter Policy Map Class Configuration mode to configure the class- map. Use the no variant of this command to delete an existing class-map. If your class-map does not exist, you can create it by using the class-map command.
Page 932: Class-Map
OMMANDS CLASS class-map Overview Use this command to create a class-map. Use the no variant of this command to delete the named class-map. Syntax class-map <name> no class-map <name> Parameter Description <name> Name of the class-map to be created. Mode Global Configuration This example creates a class-map called cmap1, use the commands: Example...
Page 933: Clear Mls Qos Interface Policer-Counters
OMMANDS CLEAR MLS QOS INTERFACE POLICER COUNTERS clear mls qos interface policer-counters Overview Resets an interface’s policer counters to zero. You can either clear a specific class-map, or you can clear all class-maps by not specifying a class map. clear mls qos interface <port> policer-counters [class-map Syntax <class-map>] Parameter...
Page 934: Default-Action
OMMANDS DEFAULT ACTION default-action Overview Sets the action for the default class-map belonging to a particular policy-map. The action for a non-default class-map depends on the action of any ACL that is applied to the policy-map. The default action can therefore be thought of as specifying the action that will be applied to any data that does not meet the criteria specified by the applied matching commands.
Page 935: Description (Qos Policy-Map)
OMMANDS DESCRIPTION POLICY description (QoS policy-map) Overview Adds a textual description of the policy-map. This can be up to 80 characters long. Use the no variant of this command to remove the current description from the policy-map. Syntax description <line> no description Parameter Description...
Page 936: Egress-Rate-Limit
OMMANDS EGRESS RATE LIMIT egress-rate-limit Overview Use this command to limit the amount of traffic that can be transmitted per second from this port. Use the no variant of this command to disable the limiting of traffic egressing on the interface. Syntax egress-rate-limit <bandwidth>...
Page 937: Match Access-Group
OMMANDS MATCH ACCESS GROUP match access-group Overview Use this command to define match criterion for a class-map. match access-group {<hw-IP-ACL>|<hw-MAC-ACL>|<hw-named-ACL>} Syntax no match access-group {<hw-IP-ACL>|<hw-MAC-ACL>|<hw-named-ACL>} Parameter Description <hw-IP-ACL> Specify a hardware IP ACL number in the range <3000-3699>. <hw-MAC-ACL> Specify a hardware MAC ACL number in the range <4000-4699>. <hw-named-ACL>...
Page 938 OMMANDS MATCH ACCESS GROUP To configure a class-map named cmap3 with one match criterion: access-list hw_acl, which allows IP traffic from any source to any destination, use the commands: awplus# configure terminal awplus(config)# access-list hardware hw_acl awplus(config-ip-hw-acl)# permit ip any any awplus(config)# class-map cmap3 awplus(config-cmap)#...
Page 939: Match Cos
OMMANDS MATCH COS match cos Overview Use this command to define a COS to match against incoming packets. Use the no variant of this command to remove CoS. Syntax match cos <0-7> no match cos Parameter Description <0-7> Specify the CoS value. Mode Class Map Configuration To set the class-map’s CoS to 4, use the commands:...
Page 940: Match Dscp
OMMANDS MATCH DSCP match dscp Overview Use this command to define the DSCP to match against incoming packets. Use the no variant of this command to remove a previously defined DSCP. Syntax match dscp <0-63> no match dscp Parameter Description <0-63>...
Page 941: Match Eth-Format Protocol
OMMANDS MATCH ETH FORMAT PROTOCOL match eth-format protocol Overview This command sets the Ethernet format and the protocol for a class-map to match Select one Layer 2 format and one Layer 3 protocol when you issue this command. Use the no variant of this command to remove the configured Ethernet format and protocol from a class-map.
Page 942 OMMANDS MATCH ETH FORMAT PROTOCOL Parameter Description netbeui Protocol Number F0 (enter the parameter name or its number). iso-clns-is Protocol Number FE (enter the parameter name or its number). xdot75-internet Protocol Number 0801(enter the parameter name or its number). nbs-internet Protocol Number 0802 (enter the parameter name or its number).
Page 943 OMMANDS MATCH ETH FORMAT PROTOCOL Parameter Description appletalk Protocol Number 809B (enter the parameter name or its number). ibm-sna Protocol Number 80D5 (enter the parameter name or its number). appletalk-aarp Protocol Number 80F3 (enter the parameter name or its number). snmp Protocol Number 814CV.
Page 944: Match Inner-Cos
OMMANDS MATCH INNER match inner-cos Overview Sets the Inner CoS for a class-map to match on. Use the no variant of this command to remove CoS. Syntax match inner-cos <0-7> no match inner-cos Parameter Description <0-7> Specify the Inner CoS value. Mode Class Map Configuration To set the class-map’s inner-cos to 4, use the commands:...
Page 945: Match Inner-Vlan
OMMANDS MATCH INNER VLAN match inner-vlan Overview Use this command to define the inner VLAN ID as match criteria. Use the no variant of this command to disable the VLAN ID used as match criteria. Syntax match inner-vlan <1-4094> no match inner-vlan Parameter Description <1-4094>...
Page 946: Match Ip-Precedence
OMMANDS MATCH IP PRECEDENCE match ip-precedence Overview Use this command to identify IP precedence values as match criteria. Use the no variant of this command to remove IP precedence values from a class-map. Syntax match ip-precedence <0-7> no match ip-precedence Parameter Description <0-7>...
Page 947: Match Mac-Type
OMMANDS MATCH MAC TYPE match mac-type Overview Use this command to set the MAC type for a class-map to match on. Use no variant of this command to remove the MAC type match entry. Syntax match mac-type {l2bcast|l2mcast|l2ucast} no match mac-type Parameter Description l2bcast...
Page 948: Match Tcp-Flags
OMMANDS MATCH TCP FLAGS match tcp-flags Overview Sets one or more TCP flags (control bits) for a class-map to match on. Use the no variant of this command to remove one or more TCP flags for a class-map to match on. Syntax match tcp-flags {[ack][fin][psh][rst][syn][urg]} no match tcp-flags {[ack][fin][psh][rst][syn][urg]}...
Page 949: Match Vlan
OMMANDS MATCH VLAN match vlan Overview Use this command to define the VLAN ID as match criteria. Use the no variant of this command to disable the VLAN ID used as match criteria. Syntax match vlan <1-4094> no match vlan Parameter Description <1-4094>...
Page 950: Mls Qos Cos
OMMANDS MLS QOS COS mls qos cos Overview This command assigns a CoS (Class of Service) user-priority value to untagged frames entering a specified interface. By default, all untagged frames are assigned a CoS value of 0. Use the no variant of this command to return the interface to the default CoS setting for untagged frames entering the interface.
Page 951: Mls Qos Enable
OMMANDS MLS QOS ENABLE mls qos enable Overview Use this command to globally enable QoS on the switch. Use the no variant of this command to globally disable QoS and remove all QoS configuration. The no variant of this command removes all class-maps, policy-maps, and policers that have been created.
Page 952: Mls Qos Map Cos-Queue To
OMMANDS MLS QOS MAP COS QUEUE TO mls qos map cos-queue to Overview Use this command to set the default CoS to egress queue mapping. This is the default queue mapping for packets that do not get assigned an egress queue via any other QoS functionality.
Page 953: Mls Qos Map Premark-Dscp To
OMMANDS MLS QOS MAP PREMARK DSCP TO mls qos map premark-dscp to Overview This command configures the premark-dscp map. It is used when traffic is classified by a class-map that has trust dscp configured. Based on a lookup DSCP, the map determines new QoS settings for the traffic. The no variant of this command resets the premark-dscp map to its defaults.
Page 954 OMMANDS MLS QOS MAP PREMARK DSCP TO To set the entry for DSCP 1 to use a new DSCP of 2, a new CoS of 3, and a new Example bandwidth class of yellow, use the command: awplus# configure terminal awplus(config)# mls qos map premark-dscp 1 to new-dscp 2 new-cos 3 new-bandwidth-class yellow...
Page 955: No Police
OMMANDS NO POLICE no police Overview Use this command to disable any policer previously configured on the class-map. no police Syntax Mode Policy Map Class Configuration Usage This command disables any policer previously configured on the class-map. Example To disable policing on a class-map use the command: awplus# configure terminal awplus(config)#...
Page 956: Police Single-Rate Action
OMMANDS POLICE SINGLE RATE ACTION police single-rate action Overview Configures a single-rate policer for a class-map. police single-rate <cir> <cbs> <ebs> action Syntax {drop-red|remark-transmit} Parameter Description <cir> Specify the Committed Information Rate (CIR) (1-40000000 kbps). <cbs> Specify the Committed Burst Size (CBS) (0-16777216 bytes). <ebs>...
Page 957 OMMANDS POLICE SINGLE RATE ACTION traffic is dropped; if action is set to remark-transmit, then the red traffic has the action of the remark map applied to it, and is then transmitted. Example To configure a single rate meter measuring traffic of 10 Mbps that drops a sustained burst of traffic over this rate, use the commands: awplus# configure terminal...
Page 958: Police Twin-Rate Action
OMMANDS POLICE TWIN RATE ACTION police twin-rate action Overview Configures a twin-rate policer for a class-map. police twin-rate <cir> <pir> <cbs> <pbs> action Syntax {drop-red|remark-transmit} Parameter Description <cir> Specify the Committed Information Rate (CIR) (1-40000000 kbps). <pir> Specify the Peak Information Rate (PIR) (1-40000000 kbps). <cbs>...
Page 959 OMMANDS POLICE TWIN RATE ACTION Using an action of remark-transmit means that the packet will be remarked with the values configured in the policed-dscp map. The index into this map is determined by the DSCP in the packet. Note that the remark-map does not only apply to red traffic.
Page 960: Policy-Map
OMMANDS POLICY policy-map Overview Use this command to create a policy-map and to enter Policy Map Configuration mode to configure the specified policy-map. Use the no variant of this command to delete an existing policy-map. Syntax policy-map <name> no policy-map <name> Parameter Description <name>...
Page 961: Priority-Queue
OMMANDS PRIORITY QUEUE priority-queue Overview Configures strict priority based scheduling on the specified egress queues. You must specify at least one queue. priority-queue [0][1][2][3][4][5][6][7] Syntax Parameter Description [0][1]...[7] Specify the queues that will use strict priority scheduling. With strict priority scheduling, the switch will completely empty the highest numbered queue first, then start processing the next lowest numbered queue.
Page 962: Remark-Map
OMMANDS REMARK remark-map Overview Use this command to configure the remark map. If a re-mark map is applied to a class, and a policer is also applied to the same class, then: • green and yellow traffic will all be acted upon by the remark-map, and •...
Page 963 OMMANDS REMARK To remark the policed green traffic to a new DSCP of 2, use the commands: awplus# configure terminal awplus(config)# policy-map pmap1 awplus(config-pmap)# class cmap1 awplus(config-pmap-c)# remark-map bandwidth-class green to new-dscp 2 To reset the DSCP for all bandwidth classes, use the commands: awplus# configure terminal awplus(config)#...
Page 964: Remark New-Cos
OMMANDS REMARK NEW remark new-cos Overview This command enables you to configure and remark either or both of: • the CoS flag in the data packet • the input into the CoS to queue map, thus changing the destination egress queue.
Page 965 OMMANDS REMARK NEW Figure 29-1: Remarking and the CoS to Q map Table 29-1: CoS to egress queue remarking function Input Command Output CoS field = 1 Remark new-cos (not CoS value = 1 configured) Packet sent to egress queue 0 CoS field = 1 Remark new-cos 2 external CoS value = 2...
Page 966: Service-Policy Input
OMMANDS SERVICE POLICY INPUT service-policy input Overview Use this command to apply a policy-map to the input of an interface. Use the no variant of this command to remove a policy-map and interface association. Syntax service-policy input <policy-map> no service-policy input <policy-map> Parameter Description <policy-map>...
Page 967: Show Class-Map
OMMANDS SHOW CLASS show class-map Overview Use this command to display the QoS class-maps’ criteria for classifying traffic. show class-map [<class-map-name>] Syntax Parameter Description <class-map-name> Name of the class-map. Mode User Exec and Privileged Exec Example To display a QoS class-map’s match criteria for classifying traffic, use the command: awplus# show class-map cmap1 Output...
Page 968: Show Mls Qos
OMMANDS SHOW MLS QOS show mls qos Overview Use this command to display whether QoS is enabled or disabled on the switch. show mls qos Syntax Mode User Exec and Privileged Exec Example To display whether QoS is enabled or disabled, use the command: awplus# show mls qos Output...
Page 969: Show Mls Qos Interface
OMMANDS SHOW MLS QOS INTERFACE show mls qos interface Overview Displays the current settings for the interface. This includes its default CoS and queue, scheduling used for each queue, and any policies/maps that are attached. show mls qos interface [<port>] Syntax Parameter Description...
Page 970: Show Mls Qos Interface Policer-Counters
OMMANDS SHOW MLS QOS INTERFACE POLICER COUNTERS show mls qos interface policer-counters Overview This command displays an interface’s policer counters. This can either be for a specific class-map or for all class-maps attached to the interface. If no class-map is specified then all class-map policer counters attached to the interface are displayed.
Page 971 OMMANDS SHOW MLS QOS INTERFACE POLICER COUNTERS This output shows a policer configured with remarking through ‘action remark- transmit’, so although bytes are marked as Red, none are dropped. Therefore, the ‘Non-dropped Bytes’ field shows a summation of Green/Yellow and Red bytes. C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™...
Page 972: Show Mls Qos Interface Queue-Counters
OMMANDS SHOW MLS QOS INTERFACE QUEUE COUNTERS show mls qos interface queue-counters Overview This command displays an interface’s egress queue counters. This can either be for a specific queue or for all queues on the interface. If no queue is specified all queue counters on the interface will be displayed.
Page 973 OMMANDS SHOW MLS QOS INTERFACE QUEUE COUNTERS Table 30: Parameters in the output of the show mls qos interface queue-counters command (cont.) Parameter Description Port queue length Number of frames in the port’s queue. This will be the sum of all egress queues on the port. Egress Queue length Number of frames in a specific egress queue.
Page 974: Show Mls Qos Interface Storm-Status
OMMANDS SHOW MLS QOS INTERFACE STORM STATUS show mls qos interface storm-status Overview Show the current configuration and status of the QoS Storm Protection (QSP) on the given port. show mls qos interface <port> storm-status Syntax Parameter Description <port> Switch port. Mode User Exec and Privileged Exec Example...
Page 975: Show Mls Qos Maps Cos-Queue
OMMANDS SHOW MLS QOS MAPS COS QUEUE show mls qos maps cos-queue Overview Show the current configuration of the cos-queue map. show mls qos maps cos-queue Syntax Mode User Exec and Privileged Exec Example To display the current configuration of the cos-queue map, use the command: awplus# show mls qos maps cos-queue Output...
Page 976: Show Mls Qos Maps Premark-Dscp
OMMANDS SHOW MLS QOS MAPS PREMARK DSCP show mls qos maps premark-dscp Overview This command displays the premark-dscp map. This map is used when the trust dscp command has been specified for a policy-map’s class-map to replace the DSCP, CoS and/or bandwidth class of a packet matching the class-map based on a lookup DSCP value.
Page 977: Show Platform Classifier Statistics Utilization Brief
OMMANDS SHOW PLATFORM CLASSIFIER STATISTICS UTILIZATION BRIEF show platform classifier statistics utilization brief Overview This command displays the number of used entries available for various platform functions, and the percentage that number of entries represents of the total available. Syntax show platform classifier statistics utilization brief Mode Privileged Exec...
Page 978: Show Policy-Map
OMMANDS SHOW POLICY show policy-map Overview Displays the policy-maps configured on the switch. The output also shows whether or not they are connected to a port (attached / detached) and shows their associated class-maps. show policy-map [<name>] Syntax Parameter Description <name>...
Page 979: Storm-Action
OMMANDS STORM ACTION storm-action Overview Sets the action to be taken when triggered by QoS Storm Protection (QSP). There are three available options: • portdisable will disable the port in software. • vlandisable will disable the port from the VLAN matched by the class-map in class-map.
Page 980: Storm-Downtime
OMMANDS STORM DOWNTIME storm-downtime Overview Sets the time to re-enable a port that has been disabled by QoS Storm Protection (QSP). The time is given in seconds, from a minimum of one second to maximum of 86400 seconds (i.e. one day). The no variant of this command resets the time to the default value of 10 seconds.
Page 981: Storm-Protection
OMMANDS STORM PROTECTION storm-protection Overview Use this command to enable Policy Based Storm Protection (such as QSP - QoS Storm Protection). Storm protection is activated as soon as a port is enabled. However, it will only be functional after storm-rate storm-window have been set.
Page 982: Storm-Rate
OMMANDS STORM RATE storm-rate Overview Sets the data rate that triggers the storm-action. The rate is in kbps and the range is from 1kbps to 40Gbps. Note that this setting is made in conjunction with the storm-window command. Use the no variant of this command to negate the storm-rate command. storm-rate <1-40000000>...
Page 983: Storm-Window
OMMANDS STORM WINDOW storm-window Overview Sets the window size of QoS Storm Protection (QSP). This sets the time to poll the data-rate every given milliseconds. Minimum window size is 100 ms and the maximum size is 60 sec. Use the no variant of this command to negate the storm-window command. Syntax storm-window <100-60000>...
Page 984: Trust Dscp
OMMANDS TRUST DSCP trust dscp Overview This command enables the premark-dscp map to replace the bandwidth-class, CoS, DSCP, and queue of classified traffic based on a lookup DSCP value. With the no variant of this command, no premark-dscp mapping function will be applied for the selected class-map.QoS components of the packet existing either at ingress, or applied by the class-map, will pass unchanged.
Page 985: Wrr-Queue Disable Queues
OMMANDS QUEUE DISABLE QUEUES wrr-queue disable queues Overview Use this command to disable an egress queue from transmitting traffic. The no variant of this command enables an egress queue to transmit traffic. Syntax wrr-queue disable queues [0][1][2][3][4][5][6][7] no wrr-queue disable queues [0][1][2][3][4][5][6][7] Parameter Description [0][2]...[7]...
Page 986: Wrr-Queue Egress-Rate-Limit Queues
OMMANDS QUEUE EGRESS RATE LIMIT QUEUES wrr-queue egress-rate-limit queues Overview Sets a limit on the amount of traffic that can be transmitted per second from these queues. The default unit is in Kb, but Mb or Gb can also be specified. The minimum is 651Kb.
Page 987: Wrr-Queue Weight Queues
OMMANDS QUEUE WEIGHT QUEUES wrr-queue weight queues Overview This command configures weighted round-robin based scheduling on the specified egress queues on switch port interfaces only. The weights are specified as ratios relative to each other. wrr-queue weight <1-15> queues [0][1][2][3][4][5][6][7] Syntax Parameter Description...
Page 988: 802.1X Commands
802.1X Commands Introduction Overview This chapter provides an alphabetical reference of commands used to configure 802.1X port access control. For more information, see the AAA and Port Authentication Feature Overview and Configuration Guide Command List • “dot1x accounting” on page 990 •...
Page 989 802.1X C OMMANDS • “show dot1x supplicant” on page 1022 • “show dot1x supplicant interface” on page 1024 • “undebug dot1x” on page 1027 C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 990: Dot1X Accounting
802.1X C OMMANDS X ACCOUNTING dot1x accounting Overview This command overrides the default RADIUS accounting method for IEEE 802.1X-based authentication on an interface by allowing you to apply a user-defined named method list. Use the no variant of this command to remove the named list from the interface and apply the default method list.
Page 991: Dot1X Authentication
802.1X C OMMANDS X AUTHENTICATION dot1x authentication Overview This command overrides the default 802.1X-based authentication method on an interface by allowing you to apply a user-defined named list. Use the no variant of this command to remove the named list from the interface and apply the default method.
Page 992: Debug Dot1X
802.1X C OMMANDS DEBUG DOT debug dot1x Overview Use this command to enable 802.1X IEEE Port-Based Network Access Control troubleshooting functions. Use the no variant of this command to disable this function. Syntax debug dot1x [all|auth-web|event|nsm|packet|timer] no debug all dot1x no debug dot1x [all|auth-web|event|nsm|packet|timer] Parameter Description...
Page 993: Dot1X Control-Direction
802.1X C OMMANDS X CONTROL DIRECTION dot1x control-direction Overview This command sets the direction of the filter for the unauthorized interface. If the optional in parameter is specified with this command then packets entering the specified port are discarded. The in parameter discards the ingress packets received from the supplicant.
Page 994 802.1X C OMMANDS X CONTROL DIRECTION To set the port direction to the default (both) for authentication profile ‘student’, use the commands: awplus# configure terminal awplus(config)# auth profile student awplus(config-auth-profile)# no dot1x control-direction Related auth profile (Global Configuration) Commands show dot1x show dot1x interface show auth interface C613-50104-01 REV A...
Page 995: Dot1X Eap
802.1X C OMMANDS X EAP dot1x eap Overview This command selects the transmit mode for the EAP packet. If the authentication feature is not enabled then EAP transmit mode is not enabled. The default setting discards EAP packets. dot1x eap {discard|forward|forward-untagged-vlan|forward-vlan} Syntax Parameter Description...
Page 996: Dot1X Eapol-Version
802.1X C OMMANDS X EAPOL VERSION dot1x eapol-version Overview This command sets the EAPOL protocol version for EAP packets when 802.1X port authentication is applied. Use the no variant of this command to set the EAPOL protocol version to 1. The default EAPOL protocol version is version 1.
Page 997 802.1X C OMMANDS X EAPOL VERSION Validation auth profile (Global Configuration) Commands show dot1x show dot1x interface C613-50104-01 REV A Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.6-1.x...
Page 998: Dot1X Initialize Interface
802.1X C OMMANDS X INITIALIZE INTERFACE dot1x initialize interface Overview This command removes authorization for a connected interface with the specified<interface-list>. The connection will attempt to re-authorize when the specified port attempts to make use of the network connection. : Reauthentication could be a long time after the use of this command because NOTE the reauthorization attempt is not triggered by this command.
Page 999: Dot1X Initialize Supplicant
802.1X C OMMANDS X INITIALIZE SUPPLICANT dot1x initialize supplicant This command removes authorization for a connected supplicant with the Overview specified MAC address or username. The connection will attempt to re-authorize when the specified supplicant attempts to make use of the network connection. : Reauthentication could be a long time after the use of this command because NOTE the reauthorization attempt is not triggered by this command.
Page 1000: Dot1X Keytransmit
802.1X C OMMANDS X KEYTRANSMIT dot1x keytransmit Overview This command enables key transmission on the interface specified previously in Interface mode. The no variant of this command disables key transmission on the interface specified. Syntax dot1x keytransmit no dot1x keytransmit Default Key transmission for port authentication is enabled by default.

This manual is also suitable for:

At-x230-18gp At-x230-28gp

Allied Telesis AT-x230-10GP User Manual

Part 1: Setup and Troubleshooting

Chapter 1 CLI Navigation Commands

Chapter 2 File and Configuration Management Commands

Chapter 3 User Access Commands

Chapter 4 Feature Licensing Commands

Chapter 5: GUI Commands

GUI Commands

Chapter 6 System Configuration and Monitoring Commands

Chapter 7: Pluggables and Cabling Commands

Pluggables and Cabling Commands

Chapter 8: Logging Commands

Logging Commands

Chapter 9: Scripting Commands

Scripting Commands

Chapter 10: Interface Commands

Interface Commands

Chapter 11 Port Mirroring and Remote Mirroring Commands

Chapter 12 Interface Testing Commands

Part 2: Layer Two Switching

Chapter 13: Switching Commands

Switching Commands

Chapter 14: VLAN Commands

VLAN Commands

Quick Links

Related Manuals for Allied Telesis AT-x230-10GP

Summary of Contents for Allied Telesis AT-x230-10GP