HP FlexNetwork 5130 HI series Command Reference Manual

HP FlexNetwork 5130 HI series Command Reference Manual

Layer 2 - lan switching
Table of Contents

Advertisement

Quick Links

HPE FlexNetwork 5130 HI Switch Series
Layer 2—LAN Switching

Command Reference

Part number: 5998-8408a
Software version: Release 11xx
Document version: 6W101-20161221

Advertisement

Table of Contents
loading

Summary of Contents for HP FlexNetwork 5130 HI series

  • Page 1: Command Reference

    HPE FlexNetwork 5130 HI Switch Series Layer 2—LAN Switching Command Reference Part number: 5998-8408a Software version: Release 11xx Document version: 6W101-20161221...
  • Page 2 © Copyright 2015, 2016 Hewlett Packard Enterprise Development LP The information contained herein is subject to change without notice. The only warranties for Hewlett Packard Enterprise products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. Hewlett Packard Enterprise shall not be liable for technical or editorial errors or omissions contained herein.
  • Page 3: Table Of Contents

    Contents Ethernet interface commands ········································································· 1     Common Ethernet interface commands ············································································································ 1   bandwidth ··················································································································································· 1   default ························································································································································ 1   description ·················································································································································· 2   display counters ········································································································································· 2   display counters rate ·································································································································· 4   display ethernet statistics ··························································································································· 5  ...
  • Page 4   interface range name ······························································································································· 54 MAC address table commands ····································································· 56     display mac-address ································································································································ 56   display mac-address aging-time ·············································································································· 57   display mac-address mac-learning ·········································································································· 58   display mac-address mac-move ·············································································································· 59   display mac-address statistics ················································································································· 60  ...
  • Page 5 Port isolation commands ············································································· 107     display port-isolate group ······················································································································· 107   port-isolate enable ·································································································································· 108   port-isolate group ··································································································································· 108 Spanning tree commands ··········································································· 110     active region-configuration ····················································································································· 110   bpdu-drop any ········································································································································ 110   check region-configuration ····················································································································· 111  ...
  • Page 6   loopback-detection enable ····················································································································· 160   loopback-detection global action ············································································································ 161   loopback-detection global enable ··········································································································· 162   loopback-detection interval-time ············································································································ 163 VLAN commands ························································································ 164     Basic VLAN commands ································································································································· 164   bandwidth ··············································································································································· 164   default ···················································································································································· 164  ...
  • Page 7   private-vlan (VLAN interface view) ········································································································· 215   private-vlan (VLAN view) ························································································································ 216   private-vlan community ·························································································································· 218   private-vlan isolated ······························································································································· 219   private-vlan primary ································································································································ 220 Voice VLAN commands ·············································································· 222     cdp voice-vlan ········································································································································ 222   display voice-vlan mac-address ·············································································································...
  • Page 8   lldp notification med-topology-change enable ························································································ 278   lldp notification remote-change enable ·································································································· 278   lldp timer fast-interval ····························································································································· 279   lldp timer notification-interval ·················································································································· 279   lldp timer reinit-delay ······························································································································ 280   lldp timer tx-interval ································································································································ 280   lldp tlv-enable ········································································································································· 281 Service loopback group commands ····························································...
  • Page 9: Ethernet Interface Commands

    Ethernet interface commands Common Ethernet interface commands bandwidth Use bandwidth to configure the expected bandwidth of an interface. Use undo bandwidth to restore the default. Syntax bandwidth bandwidth-value undo bandwidth Default The expected bandwidth (in kbps) is the interface baud rate divided by 1000. Views Ethernet interface view Predefined user roles...
  • Page 10: Description

    Usage guidelines CAUTION: The default command might interrupt ongoing network services. Make sure you are fully aware of the impacts of this command when you use it in a live network. This command might fail to restore the default settings for some commands for reasons such as command dependencies or system restrictions.
  • Page 11 Views Any view Predefined user roles network-admin network-operator Parameters inbound: Displays inbound traffic statistics. outbound: Displays outbound traffic statistics. interface-type: Specifies an interface type. interface-number: Specifies an interface number. Usage guidelines This command displays traffic statistics within a statistics polling interval specified by the flow-interval command.
  • Page 12: Display Counters Rate

    Field Description --: Not supported The statistical item is not supported. Related commands • flow-interval • reset counters interface display counters rate Use display counters rate to display traffic rate statistics of interfaces in up state over the last statistics polling interval. Syntax display counters rate { inbound | outbound } interface [ interface-type [ interface-number ] ] Views...
  • Page 13: Display Ethernet Statistics

    Table 2 Command output Field Description Interface Abbreviated interface name. Average rate (in pps) of receiving or sending packets during the statistics Total (pkts/sec) polling interval. Average rate (in pps) of receiving or sending broadcast packets during the Broadcast (pkts/sec) statistics polling interval.
  • Page 14 ErrAnalyse ErrSrcMAC ErrHdrLen ETH send packet statistics: L3OutNum : 412 VLANOutNum FastOutNum : 181 L2OutNum : 6351 ETH send error statistics: MbufRelayNum NullMbuf ErrAdjFwd ErrPrepend ErrHdrLen ErrPad ErrQosTrs ErrVLANTrs ErrEncap ErrTagVLAN IfShut IfErr Table 3 Command output Field Description receive packet Statistics about the Ethernet packets received on the Ethernet module.
  • Page 15: Display Interface

    Field Description • FastOutNum—Number of packets fast forwarded. • L2OutNum—Number of packets sent out of Layer 2 Ethernet interfaces. • MbufRelayNum—Number of packets transparently sent. Statistics about the error Ethernet packets in the outbound direction on the Ethernet module: • NullMbuf—Number of packets with null pointers.
  • Page 16 If you specify an interface type but do not specify an interface number, this command displays information about all interfaces of that type. If you specify both the interface type and interface number, this command displays information about the specified interface. Examples # Display information about Layer 2 interface GigabitEthernet 1/0/1.
  • Page 17 0 aborts, 0 deferred, 0 collisions, 0 late collisions 0 lost carrier, - no carrier Table 4 Command output Field Description State of the Ethernet interface: • Administratively DOWN—The Ethernet interface was shut down with the shutdown command. The interface is administratively down.
  • Page 18 Field Description half-duplex mode The interface is operating in half duplex mode. full-duplex mode The interface is operating in full duplex mode. The duplex mode of the interface is unknown because the duplex unknown-duplex mode mode negotiation fails or the interface is physically disconnected. Link speed type is autonegotiation The interface is configured with the speed auto command.
  • Page 19 Field Description rate. A hyphen (-) indicates that the statistical item is not supported. Average rate of outbound traffic in the last 300 seconds, in pps and Bps, and the ratio of the actual rate to the maximum interface Last 300 second output rate.
  • Page 20 Field Description pass through the interface. • Symbol error frames—Frames that contained at least one undefined symbol. • Unknown operation code frames—Non-pause MAC control frames. • Length error frames—Frames whose 802.3 length fields did not match the actual frame length (46 to 1500 bytes). Number of inbound frames dropped because the receiving buffer ignored of the port ran low.
  • Page 21 Interface Link Protocol Primary IP Description GE1/0/1 GE1/0/2 InLoop0 UP(s) M-GE0/0/0 DOWN DOWN NULL0 UP(s) REG0 DOWN -- Vlan1 192.168.0.59 Vlan2 DOWN DOWN Brief information on interfaces in bridge mode: Link: ADM - administratively down; Stby - standby Speed: (a) - auto Duplex: (a)/A - auto;...
  • Page 22 Table 5 Command output Field Description Brief information on interfaces in Brief information about Layer 3 interfaces. route mode: • ADM—The interface has been shut down by the network administrator. To recover its physical layer state, run the undo Link: ADM - administratively down; shutdown command.
  • Page 23: Display Packet-Drop

    Field Description • F(a)—Autonegotiated full duplex. • H—Half duplex. • H(a)—Autonegotiated half duplex. Link type of the interface: • A—Access. Type • H—Hybrid. • T—Trunk. PVID Port VLAN ID. Cause for the physical link state of an interface to be DOWN: •...
  • Page 24: Duplex

    Parameters interface-type: Specifies an interface type. If you do not specify an interface type, this command displays information about dropped packets on all the interfaces on the device. interface-number: Specifies an interface number. If you specify an interface type only, this command displays information about dropped packets on the specified type of interfaces.
  • Page 25: Eee Enable

    full: Configures the interface to operate in full duplex mode, so that the interface can receive and transmit packets at the same time. half: Configures the interface to operate in half duplex mode, so that the interface can only receive or transmit packets at a given time.
  • Page 26: Flow-Control Receive Enable

    Use undo flow-control to disable generic flow control on the Ethernet interface. Syntax flow-control undo flow-control Default Generic flow control is disabled on an Ethernet interface. Views Ethernet interface view Predefined user roles network-admin Usage guidelines To implement flow control on a link, enable the generic flow control function at both ends of the link. TxRx mode generic flow control enables an Ethernet interface to perform the following actions: •...
  • Page 27: Flow-Interval

    Predefined user roles network-admin Usage guidelines With the flow-control receive enable command configured, an interface can receive, but not send, flow control frames. When the interface receives a flow control frame from its peer, it suspends sending packets to the peer. When traffic congestion occurs on the interface, it cannot send flow control frames to the peer.
  • Page 28: Jumboframe Enable

    Syntax interface interface-type interface-number Views System view Predefined user roles network-admin Parameters interface-type: Specifies an interface type. interface-number: Specifies an interface number. Examples # Enter GigabitEthernet 1/0/1 interface view. <Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] jumboframe enable Use jumboframe enable to allow jumbo frames within the specified length to pass through. Use undo jumboframe enable to prevent jumbo frames from passing through.
  • Page 29: Link-Delay

    link-delay Use link-delay to set the physical state change suppression interval on an Ethernet interface. Use undo link-delay to restore the default. Syntax link-delay [ msec ] delay-time [ mode { up | updown } ] undo link-delay Default Each time the physical link of a port goes up or comes down, the interface immediately reports the change to the CPU.
  • Page 30: Loopback

    Examples # Set the link-down event suppression interval to 8 seconds on interface GigabitEthernet 1/0/1. <Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] link-delay 8 # Set the link-up event suppression interval to 800 milliseconds on interface GigabitEthernet 1/0/1. <Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] link-delay msec 800 mode up loopback...
  • Page 31: Reset Counters Interface

    Use port auto-power-down to enable auto power-down on an Ethernet interface. Use undo port auto-power-down to restore the default. Syntax port auto-power-down undo port auto-power-down Default Auto power-down is disabled on Ethernet interfaces. Views Ethernet interface view Predefined user roles network-admin Usage guidelines When the auto power-down function is enabled on an interface and the interface has been down for...
  • Page 32: Reset Ethernet Statistics

    If you do not specify an interface type, this command clears statistics for all interfaces. If you specify only the interface type, this command clears statistics for all interfaces of that type. If you specify both the interface type and the interface number, this command clears statistics for the specified interface.
  • Page 33: Shutdown

    interface-number: Specifies an interface number. If you do not specify this argument, the command clears dropped packet statistics on all interfaces of the specified type. Examples # Clear dropped packet statistics on GigabitEthernet 1/0/1. <Sysname> reset packet-drop interface gigabitethernet 1/0/1 # Clear dropped packet statistics on all interfaces.
  • Page 34: Speed Auto Downgrade

    Views Ethernet interface view Predefined user roles network-admin Parameters 10: Sets the interface speed to 10 Mbps. 100: Sets the interface speed to 100 Mbps. 1000: Sets the interface speed to 1000 Mbps. 10000: Sets the interface speed to 10000 Mbps. auto: Enables the interface to negotiate a speed with its peer.
  • Page 35: Layer 2 Ethernet Interface Commands

    Usage guidelines This command takes effect after you configure it on the interface at either end of a link and the two interfaces are configured to automatically negotiate the speed. This command is applicable only to GE interfaces. Examples # Enable automatic negotiation for speed downgrading on GigabitEthernet 1/0/1. <Sysname>...
  • Page 36: Display Storm-Constrain

    storm-constrain command. Do not configure the storm constrain command and the broadcast-suppression command at the same time. Otherwise, the traffic suppression result is not determined. When you configure the suppression threshold in kbps, the actual suppression threshold might be different from the configured one as follows: •...
  • Page 37: Mdix-Mode

    KNUC – known unicast; FW - forwarding Flow Statistic Interval: 5 (in seconds) Port Type Lower Upper Unit CtrlMode Status Trap SwitchNum ------------------------------------------------------------------------------------- GE1/0/1 12345 3456 block GE1/0/2 ratio block block GE1/0/3 kbps shutdown shutdown GE1/0/4 kbps shutdown normal GE1/0/5 1500 normal Table 7 Command output...
  • Page 38: Multicast-Suppression

    Use mdix-mode to configure the Medium Dependent Interface Cross-Over (MDIX) mode of an Ethernet interface. Use undo mdix-mode to restore the default. Syntax mdix-mode { automdix | mdi | mdix } undo mdix-mode Default Ethernet interfaces operate in automdix mode. Views Layer 2 Ethernet interface view Predefined user roles...
  • Page 39: Port Bridge Enable

    rate. For example, the value range for this argument is 0 to 1488100 on a GE interface and 0 to 59524000 on a 40-GE interface. kbps max-kbps: Specifies the maximum number of kilobits of multicast traffic that the Ethernet interface can forward per second. The value range for this argument (in kbps) is 0 to the maximum interface rate.
  • Page 40: Port Up-Mode

    Usage guidelines When a packet arrives at an interface, the device looks up the destination MAC address of the packet in the MAC address table. If an entry is found and the outgoing interface is the same as the incoming interface, the device drops the packet. After you configure this command on the Ethernet interface, the device forwards such packets rather than drop them.
  • Page 41: Storm-Constrain

    <Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] port up-mode storm-constrain Use storm-constrain to enable broadcast, multicast, or unknown unicast storm control on an Ethernet port. Use undo storm-constrain to disable storm control. Syntax storm-constrain { broadcast | known-unicast | multicast | unicast } { pps | kbps | ratio } upperlimit lowerlimit undo storm-constrain { all | broadcast | known-unicast | multicast | unicast } Default...
  • Page 42: Storm-Constrain Control

    On the same type of traffic, do not configure the storm constrain command and either of the broadcast-suppression, multicast-suppression, and unicast-suppression commands at the same time. Otherwise, the traffic suppression result is not determined. When configuring this command, make sure upperlimit is greater than lowerlimit. Examples # Enable unknown unicast storm control on GigabitEthernet 1/0/1, setting the upper and lower thresholds to 200 pps and 150 pps.
  • Page 43: Storm-Constrain Enable Log

    forward the traffic. To bring up the interface, use the undo shutdown command or disable the storm control function. Examples # Configure GigabitEthernet 1/0/1 to block the traffic detected crossing the upper storm control threshold. <Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] storm-constrain control block Related commands •...
  • Page 44: Storm-Constrain Interval

    Views Layer 2 Ethernet interface view Predefined user roles network-admin Examples # Enable GigabitEthernet 1/0/1 to send traps when it detects storm control threshold events. <Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] storm-constrain enable trap storm-constrain interval Use storm-constrain interval to set the traffic polling interval of the storm control module. Use undo storm-constrain interval to restore the default.
  • Page 45 Use undo unicast-suppression to restore the default. Syntax unicast-suppression { ratio | pps max-pps | kbps max-kbps } undo unicast-suppression Default Ethernet interfaces do not suppress unicast traffic. Views Layer 2 Ethernet interface view Predefined user roles network-admin Parameters ratio: Sets the unicast suppression threshold as a percentage of the maximum interface rate. The value range for this argument (in percentage) is 0 to 100.
  • Page 46: Virtual-Cable-Test

    Related commands • broadcast-suppression • multicast-suppression virtual-cable-test IMPORTANT: • Fiber ports do not support this command. • If the link of an Ethernet port is up, testing its cable connection will cause the link to go down and then come up. Use virtual-cable-test to test the cable connection of an Ethernet interface and display the test results.
  • Page 47 Field Description • Failure—The test failed. If the cable connection is working correctly, this field displays the total length of the cable. n metres If the cable connection fails, this field displays the length from the local port to the faulty point.
  • Page 48: Loopback, Null, And Inloopback Interface Commands

    Loopback, null, and inloopback interface commands bandwidth Use bandwidth to configure the expected bandwidth of an interface. Use undo bandwidth to restore the default. Syntax bandwidth bandwidth-value undo bandwidth Default The expected bandwidth of a loopback interface is 0 kbps. Views Loopback interface view Predefined user roles...
  • Page 49: Description

    Usage guidelines CAUTION: The default command might interrupt ongoing network services. Make sure you are fully aware of the impacts of this command before using it on a live network. This command might fail to restore the default settings for some commands for reasons such as command dependencies and system restrictions.
  • Page 50 Syntax display interface [ inloopback [ 0 ] ] [ brief [ description ] ] Views Any view Predefined user roles network-admin network-operator Parameters 0: Specifies interface Inloopback 0. brief: Displays brief interface information. If you do not specify this keyword, the command displays detailed interface information.
  • Page 51 Field Description Maximum transmission unit MTU of the interface, which is always 1536 and cannot be configured Physical: InLoopBack The physical type of the interface is inloopback. Average input rate during the last 300 seconds: • bytes/sec—Average number of bytes received per second. Last 300 seconds input rate: •...
  • Page 52: Display Interface Loopback

    Field Description Physical layer state of the interface, which is always UP, meaning that Link the link is physically up. Protocol Data link layer protocol state of the interface, which is always UP(s). IP address of the interface. Primary IP Because inloopback interfaces do not support CLI configuration, this field does not display a value.
  • Page 53 LoopBack0 Current state: UP Line protocol state: UP (spoofing) Description: LoopBack0 Interface Bandwidth: 0kbps Maximum transmission unit: 1536 Internet protocol processing: Disabled Physical: Loopback Last clearing of counters: Never Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec Input: 0 packets, 0 bytes, 0 drops...
  • Page 54 Field Description and the number of dropped packets. # Display brief information about all loopback interfaces. <Sysname> display interface loopback brief Brief information on interfaces in route mode: Link: ADM - administratively down; Stby - standby Protocol: (s) - spoofing Interface Link Protocol Primary IP Description...
  • Page 55: Display Interface Null

    Field Description Protocol Data link layer protocol state of the interface. Interface description configured by using the description command. If the description keyword is not specified in the display interface brief Description command, the Description field allows a maximum of 27 characters. If the description keyword is specified in the display interface brief command, the field displays the complete interface description.
  • Page 56: Interface Loopback

    Line protocol state: UP (spoofing) Description: NULL0 Interface Bandwidth: 0kbps Maximum transmission unit: 1500 Internet protocol processing: Disabled Physical: NULL DEV Last clearing of counters: Never Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec Input: 0 packets, 0 bytes, 0 drops Output: 0 packets, 0 bytes, 0 drops...
  • Page 57: Interface Null

    Predefined user roles network-admin Parameters interface-number: Specifies a loopback interface by its number in the range of 0 to 127. Usage guidelines The physical layer state and link layer protocols of a loopback interface are always up unless the loopback interface is manually shut down. You can use a loopback interface to achieve the following purposes: •...
  • Page 58: Reset Counters Interface Null

    Syntax reset counters interface loopback [ interface-number ] Views User view Predefined user roles network-admin Parameters interface-number: Specifies a loopback interface by its number, which can be the number of any existing loopback interface. If you do not specify the interface-number argument, the command clears the statistics on all loopback interfaces.
  • Page 59: Shutdown

    shutdown Use shutdown to shut down a loopback interface. Use undo shutdown to bring up a loopback interface. Syntax shutdown undo shutdown Default A loopback interface is up. Views Loopback interface view Predefined user roles network-admin Usage guidelines Use the shutdown command with caution, because the command disconnects the connection of the interface and disables the interface from communicating.
  • Page 60: Bulk Interface Configuration Commands

    Bulk interface configuration commands display interface range Use display interface range to display information about the interface ranges created by using the interface range name command. Syntax display interface range [ name name ] Views Any view Predefined user roles network-admin network-operator Parameters...
  • Page 61 Parameters interface-list: Specifies a space-separated list of up to 24 interface items. Each item specifies an interface by its type and number or a range of interfaces in the form of interface-type interface-number to interface-type interface-number. When you specify the to keyword in interface-type interface-number1 to interface-type interface-number2, the last-tier value of the interface number before to must not be greater than the one after to.
  • Page 62: Interface Range Name

    interface range name Use interface range name name interface interface-list to create an interface range, configure a name for the interface range, and enter the interface range view. Use interface range name name without the interface keyword to enter the view of an interface range with the specified name.
  • Page 63 To verify the configuration of the first interface in the interface range, execute the display this command in interface range view. To view the member interfaces of an interface range, use the display interface range command. When you bulk configure interfaces, follow these guidelines: •...
  • Page 64: Mac Address Table Commands

    MAC address table commands This document covers the configuration of unicast MAC address entries, including static, dynamic, blackhole, and multiport unicast MAC address entries. For more information about configuring static multicast MAC address entries, see IP Multicast Configuration Guide. display mac-address Use display mac-address to display MAC address entries.
  • Page 65: Display Mac-Address Aging-Time

    0033-0033-0033 Blackhole 0000-0000-0002 Static GE1/0/3 00e0-fc00-5829 Learned GE1/0/4 # Display the number of MAC address entries. <Sysname> display mac-address count 1 mac address(es) found. Table 13 Command output Field Description ID of the VLAN to which the outgoing interface of the MAC address entry VLAN ID belongs.
  • Page 66: Display Mac-Address Mac-Learning

    Related commands mac-address timer display mac-address mac-learning Use display mac-address mac-learning to display the global MAC address learning status and the MAC learning status of the specified interface or all interfaces. Syntax display mac-address mac-learning [ interface interface-type interface-number ] Views Any view Predefined user roles...
  • Page 67: Display Mac-Address Mac-Move

    display mac-address mac-move Use display mac-address mac-move to display the MAC address move records after the device is started. Syntax display mac-address mac-move [ slot slot-number ] Views Any view Predefined user roles network-admin network-operator Parameters slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, the command displays MAC address move records of all IRF member devices.
  • Page 68: Display Mac-Address Statistics

    Related commands mac-address notification mac-move display mac-address statistics Use display mac-address statistics to display MAC address table statistics. Syntax display mac-address statistics Views Any view Predefined user roles network-admin network-operator Usage guidelines This command displays the number of MAC address entries per type and the maximum number of MAC address entries allowed for each type.
  • Page 69: Mac-Address (Interface View)

    Field Description address entries. Static Multicast Multiport Address Number of static multicast and multiport unicast (User-defined) Count MAC address entries added by users. Total Multicast and Multiport MAC Addresses Maximum number of multicast and multiport unicast Available MAC address entries allowed. mac-address (interface view) Use mac-address to add or modify a MAC address entry on an interface.
  • Page 70: Mac-Address (System View)

    Examples # Add a static entry for MAC address 000f-e201-0101 on interface GigabitEthernet 1/0/1 that belongs to VLAN 2. <Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] mac-address static 000f-e201-0101 vlan 2 # Add a static entry for MAC address 000f-e201-0101 on Layer 2 aggregate interface Bridge-Aggregation 1 that belongs to VLAN 1.
  • Page 71 Parameters dynamic: Specifies dynamic MAC address entries. static: Specifies static MAC address entries. blackhole: Specifies blackhole MAC address entries. Packets whose source or destination MAC addresses match blackhole MAC address entries are dropped. multiport: Specifies multiport unicast MAC address entries. A frame whose destination MAC address matches a multiport unicast MAC address entry is sent out of multiple ports.
  • Page 72: Mac-Address Mac-Learning Enable

    # Add a multiport unicast MAC address entry for MAC address 000f-e201-0101. Then, all frames that are destined for this MAC address are sent out of GigabitEthernet 1/0/1 through GigabitEthernet 1/0/3, which belong to VLAN 2. <Sysname> system-view [Sysname] mac-address multiport 000f-e201-0101 interface gigabitethernet 1/0/1 to gigabitethernet 1/0/3 vlan 2 Related commands •...
  • Page 73: Mac-Address Mac-Learning Priority

    <Sysname> system-view [Sysname] undo mac-address mac-learning enable # Disable MAC address learning for VLAN 10. <Sysname> system-view [Sysname] vlan 10 [Sysname-vlan10] undo mac-address mac-learning enable # Disable MAC address learning on interface GigabitEthernet 1/0/1. <Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] undo mac-address mac-learning enable # Disable MAC address learning on interface Bridge-Aggregation 1.
  • Page 74: Mac-Address Mac-Roaming Enable

    Examples # Assign high MAC learning priority to interface GigabitEthernet 1/0/1. <Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] mac-address mac-learning priority high # Assign high MAC learning priority to interface Bridge-Aggregation 1. <Sysname> system-view [Sysname] interface bridge-aggregation 1 [Sysname-Bridge-Aggregation1] mac-address mac-learning priority high mac-address mac-roaming enable Use mac-address mac-roaming enable to enable MAC address synchronization.
  • Page 75: Mac-Address Max-Mac-Count Enable-Forwarding

    Default The maximum number of MAC addresses that can be learned on an interface is not configured. Views Layer 2 Ethernet interface view Predefined user roles network-admin Parameters count: Sets the maximum number of MAC addresses that can be learned on an interface. The value range is 0 to 4096.
  • Page 76: Mac-Address Mac-Move Fast-Update

    Examples # Configure GigabitEthernet 1/0/1 to learn up to 600 MAC address entries. <Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] mac-address max-mac-count 600 # Disable the device from forwarding unknown frames received on GigabitEthernet 1/0/1 after the MAC learning limit on GigabitEthernet 1/0/1 is reached. [Sysname-GigabitEthernet1/0/1] undo mac-address max-mac-count enable-forwarding Related commands •...
  • Page 77: Mac-Address Notification Mac-Move Suppression

    Views System view Predefined user roles network-admin Parameters interval interval-value: Sets a detection interval for MAC address moves, in the range of 1 to 60 minutes. If you do not specify this option, the default setting of 1 minute is used. Usage guidelines With MAC address move notifications enabled, the system displays the MAC address move logs when it detects MAC address moves.
  • Page 78: Mac-Address Notification Mac-Move Suppression Interval

    undo mac-address notification mac-move suppression Default MAC address moves are not suppressed. Views Layer 2 Ethernet interface view, Layer 2 aggregate interface view Predefined user roles network-admin Usage guidelines This feature shuts an interface down when a MAC address has been moved from the interface more than the specified suppression threshold within a MAC move detection interval.
  • Page 79: Mac-Address Notification Mac-Move Suppression Threshold

    [Sysname] mac-address notification mac-move suppression interval 100 mac-address notification mac-move suppression threshold Use mac-address notification mac-move suppression threshold to set a threshold for MAC address moves sourced from an interface within a detection interval. Use undo mac-address notification mac-move suppression threshold to restore the default. Syntax mac-address notification mac-move suppression threshold threshold-value undo mac-address notification mac-move suppression threshold...
  • Page 80: Snmp-Agent Trap Enable Mac-Address

    Views System view Predefined user roles network-admin Parameters aging seconds: Sets an aging timer (in seconds) for dynamic MAC address entries, in the range of 10 to 1000000 seconds. no-aging: Configures dynamic MAC address entries not to age. Usage guidelines To set the aging timer appropriately, follow these guidelines: •...
  • Page 81 The MAC address table supports only SNMP notifications about MAC address moves. When you enable or disable SNMP notifications about MAC address moves, you enable or disable all types of SNMP notifications for the MAC address table. Examples # Disable SNMP notifications about MAC address moves for the MAC address table. <Sysname>...
  • Page 82: Mac Information Commands

    MAC Information commands mac-address information enable (interface view) Use mac-address information enable to enable MAC Information on an interface. Use undo mac-address information enable to disable MAC Information on an interface. Syntax mac-address information enable { added | deleted } undo mac-address information enable { added | deleted } Default MAC Information is disabled on an interface.
  • Page 83: Mac-Address Information Interval

    Views System view Predefined user roles network-admin Usage guidelines Before you enable MAC Information on an interface, enable MAC Information globally. Examples # Enable MAC Information globally. <Sysname> system-view [Sysname] mac-address information enable Related commands mac-address information enable (interface view) mac-address information interval Use mac-address information interval to set the MAC change notification interval.
  • Page 84: Mac-Address Information Queue-Length

    Syntax mac-address information mode { syslog | trap } undo mac-address information mode Default SNMP notifications are sent to notify MAC changes. Views System view Predefined user roles network-admin Parameters syslog: Specifies that the device sends syslog messages to notify MAC changes. trap: Specifies that the device sends SNMP notifications to notify MAC changes.
  • Page 85 • The device sends syslog messages or SNMP notifications only if the MAC change notification interval expires. Examples # Set the MAC Information queue length to 600. <Sysname> system-view [Sysname] mac-address information queue-length 600...
  • Page 86: Ethernet Link Aggregation Commands

    Ethernet link aggregation commands bandwidth Use bandwidth to set the expected bandwidth for an interface. Use undo bandwidth to restore the default. Syntax bandwidth bandwidth-value undo bandwidth Default The expected bandwidth (in kbps) is the interface baud rate divided by 1000. Views Layer 2 aggregate interface view Predefined user roles...
  • Page 87: Description

    This command might fail to restore the default settings for some commands for reasons such as command dependencies and system restrictions. Use the display this command in interface view to identify these commands, and then use their undo forms or follow the command reference to restore their default settings.
  • Page 88 Predefined user roles network-admin network-operator Parameters bridge-aggregation: Specifies Layer 2 aggregate interfaces. interface-number: Specifies an existing aggregate interface number. The value range for the interface-number argument is the set of all existing aggregate interface numbers. brief: Displays brief interface information. If you do not specify this keyword, the command displays detailed interface information.
  • Page 89 Output (normal): 1042508 packets, 133441832 bytes 1042306 unicasts, 0 broadcasts, 202 multicasts, 0 pauses Output: 0 output errors, 0 underruns, 0 buffer failures 0 aborts, 0 deferred, 0 collisions, 0 late collisions 0 lost carrier, 0 no carrier # Display brief information about Layer 2 aggregate interface Bridge-Aggregation 1. <Sysname>...
  • Page 90 Field Description access or hybrid. Packets from the specified VLANs are sent out of this interface without a VLAN tag: • Untagged Vlan: none—All packets are sent out of this interface with a VLAN tag. Untagged VLANs • Untagged Vlan: 1—Packets from VLAN 1 are sent out of this interface without a VLAN tag.
  • Page 91: Display Lacp System-Id

    Field Description conditions exist: • The data link layer protocol state of an interface is shown as UP. • The link is an on-demand link or not present. Interface Abbreviated interface name. Link Physical link state of the interface. Speed Interface speed, in bps.
  • Page 92 Syntax display link-aggregation load-sharing mode interface bridge-aggregation interface-number ] ] Views Any view Predefined user roles network-admin network-operator Parameters bridge-aggregation: Specifies Layer 2 aggregate interfaces. interface-number: Specifies an existing aggregate interface number. Usage guidelines If you do not specify the interface keyword, the command displays the global link-aggregation load sharing modes.
  • Page 93: Display Link-Aggregation Member-Port

    <Sysname> display link-aggregation load-sharing mode interface bridge-aggregation 10 Bridge-Aggregation10 Load-Sharing Mode: destination-mac address source-mac address Table 19 Command output Field Description Per-flow load sharing algorithm for Ethernet link aggregation. Link-Aggregation Load-Sharing By default, this field displays Default. If you have configured the Algorithm load sharing algorithm, this field displays the configured algorithm.
  • Page 94 Views Any view Predefined user roles network-admin network-operator Parameters interface-list: Specifies a list of link aggregation member ports, in the format interface-type interface-number [ to interface-type interface-number ]. interface-type interface-number specifies an interface by its type and number. Usage guidelines A member port in a static aggregation group is unaware of information about the peer group.
  • Page 95: Display Link-Aggregation Summary

    Illegal: 0 packet(s) Sent LACP Packets: 7 packet(s) Table 20 Command output Field Description LACP state flags. This field is one byte long, represented by ABCDEFGH from the least significant bit to the most significant bit. The letter is present when its bit is 1 and absent when its bit is 0.
  • Page 96 Usage guidelines Static link aggregation groups are unaware of information about the peer groups. As a result, the Partner ID field displays None or nothing for a static link aggregation group. Examples # Display brief information about all aggregation groups. <Sysname>...
  • Page 97: Display Link-Aggregation Verbose

    Field Description Selected Ports Total number of Selected ports. Unselected Ports Total number of Unselected ports. Individual Ports Total number of Individual ports. Share Type Load sharing type. display link-aggregation verbose Use display link-aggregation verbose to display detailed information about the aggregation groups that correspond to the specified aggregate interfaces.
  • Page 98 -------------------------------------------------------------------------------- GE1/0/1 32768 {ACDEF} GE1/0/2 32768 {ACDEF} Remote: Actor Partner Priority Oper-Key SystemID Flag -------------------------------------------------------------------------------- GE1/0/1 32768 0x8000, 000f-e267-57ad {ACDEF} GE1/0/2 32768 0x8000, 000f-e267-57ad {ACDEF} # Display detailed information about Layer 2 aggregation group 20, which is a static aggregation group.
  • Page 99: Interface Bridge-Aggregation

    Field Description Aggregate Interface Name of the aggregate interface. Aggregation group type: • Aggregation Mode S—Static. • D—Dynamic. Local system ID, containing the local system LACP priority and the local system System ID MAC address. Information about the local end: •...
  • Page 100: Lacp Edge-Port

    Deleting a Layer 2 aggregate interface also deletes the Layer 2 aggregation group. At the same time, the member ports of the aggregation group, if any, leave the aggregation group. Examples # Create Layer 2 aggregate interface Bridge-Aggregation 1, and enter its view. <Sysname>...
  • Page 101: Lacp Period Short

    Views Layer 2 Ethernet interface view Predefined user roles network-admin Usage guidelines When LACP is operating in passive mode on a local member port and its peer port, both ports cannot send LACPDUs. When LACP is operating in active mode on either end of a link, both ports can send LACPDUs.
  • Page 102: Link-Aggregation Bfd Ipv4

    Default The system LACP priority is 32768. Views System view Predefined user roles network-admin Parameters system-priority: Specifies the system LACP priority in the range of 0 to 65535. The smaller the value, the higher the system LACP priority. Examples # Set the system LACP priority to 64. <Sysname>...
  • Page 103: Link-Aggregation Global Load-Sharing Algorithm

    Examples # Enable BFD for Layer 2 aggregation group 1, and specify the source and destination IP addresses as 1.1.1.1 and 2.2.2.2 for BFD sessions. <Sysname> system-view [Sysname] interface bridge-aggregation 1 [Sysname-Bridge-Aggregation1] link-aggregation bfd ipv4 source 1.1.1.1 destination 2.2.2.2 link-aggregation global load-sharing algorithm Use link-aggregation global load-sharing algorithm to configure the per-flow load sharing algorithm for Ethernet link aggregation.
  • Page 104 Syntax link-aggregation global load-sharing mode destination-ip destination-mac destination-port | ingress-port | source-ip | source-mac | source-port } * undo link-aggregation global load-sharing mode Default The system automatically chooses the global link-aggregation load sharing mode according to the packet type. The switch can perform link-aggregation load sharing for only Layer 2 or Layer 3 packets. •...
  • Page 105: Link-Aggregation Global Load-Sharing Seed

    NOTE: Packets cannot be load shared based on source MAC addresses when the destination IP addresses of the packets match multiport ARP entries. For more information about multiport ARP entries, see Layer 3—IP Services Configuration Guide. • Destination MAC address. •...
  • Page 106: Link-Aggregation Ignore Vlan

    Examples # Specify 1023 (3FF in hexadecimal format) as the per-flow load sharing algorithm seed. <Sysname> system-view [Sysname] link-aggregation global load-sharing seed 3FF Related commands • display link-aggregation load-sharing mode • link-aggregation global load-sharing algorithm • link-aggregation global load-sharing mode •...
  • Page 107: Link-Aggregation Load-Sharing Mode

    Syntax link-aggregation lacp traffic-redirect-notification enable undo link-aggregation lacp traffic-redirect-notification enable Default Link-aggregation traffic redirection is disabled. Views System view, Layer 2 aggregate interface view Predefined user roles network-admin Usage guidelines In Release 1111, this command is supported only in system view. In Release 1121 and later, this command is supported in system view and Layer 2 aggregate interface view.
  • Page 108: Link-Aggregation Load-Sharing Mode Local-First

    Default The load sharing mode is the same as the global load sharing mode. Views Layer 2 aggregate interface view Predefined user roles network-admin Parameters destination-ip: Load shares traffic based on destination IP addresses. destination-mac: Load shares traffic based on destination MAC addresses. source-ip: Load shares traffic based on source IP addresses.
  • Page 109: Link-Aggregation Mode

    Syntax link-aggregation load-sharing mode local-first undo link-aggregation load-sharing mode local-first Default Local-first load sharing is enabled for link aggregation. Views System view Predefined user roles network-admin Usage guidelines After you disable local-first load sharing, the packets will be load shared among all Selected ports of the aggregate interface on all IRF member devices.
  • Page 110: Link-Aggregation Selected-Port Maximum

    Syntax link-aggregation port-priority port-priority undo link-aggregation port-priority Default The port priority of an interface is 32768. Views Layer 2 Ethernet interface view Predefined user roles network-admin Parameters port-priority: Specifies the port priority in the range of 0 to 65535. The smaller the value, the higher the port priority.
  • Page 111: Link-Aggregation Selected-Port Minimum

    The maximum number of Selected ports allowed in an aggregation group is limited by one of the following values, whichever is smaller: • Maximum number configured by using the link-aggregation selected-port maximum command. • Hardware limitation. You can implement backup between two ports by performing the following tasks: •...
  • Page 112: Port Link-Aggregation Group

    <Sysname> system-view [Sysname] interface bridge-aggregation 1 [Sysname-Bridge-Aggregation1] link-aggregation selected-port minimum 3 Related commands link-aggregation selected-port maximum port link-aggregation group Use port link-aggregation group to assign an Ethernet interface to an aggregation group. Use undo port link-aggregation group to remove the Ethernet interface from the aggregation group to which it belongs.
  • Page 113: Reset Lacp Statistics

    interface-number: Specifies an aggregate interface number. Usage guidelines Use this command to clear history statistics before you collect traffic statistics for a time period. If you do not specify any options, the command clears statistics for all interfaces in the system. If you specify only the bridge-aggregation keyword, the command clears statistics for all Layer 2 aggregate interfaces.
  • Page 114 Predefined user roles network-admin Examples # Bring up Layer 2 aggregate interface Bridge-Aggregation 1. <Sysname> system-view [Sysname] interface bridge-aggregation 1 [Sysname-Bridge-Aggregation1] undo shutdown...
  • Page 115: Port Isolation Commands

    Port isolation commands display port-isolate group Use display port-isolate group to display port isolation group information. Syntax display port-isolate group [ group-number ] Views Any view Predefined user roles network-admin network-operator Parameters group-number: Specifies an isolation group by its number in the range of 1 to 8. Examples # Display all isolation groups.
  • Page 116: Port-Isolate Enable

    port-isolate enable Use port-isolate enable to assign a port to an isolation group. Use undo port-isolate enable to remove a port from an isolation group. Syntax port-isolate enable group group-number undo port-isolate enable Default The port is not assigned to any isolation group. Views Layer 2 Ethernet interface view, Layer 2 aggregate interface view Predefined user roles...
  • Page 117 Syntax port-isolate group group-number undo port-isolate group { group-number | all } Default No isolation group exists. Views System view Predefined user roles network-admin Parameters group-number: Specifies an isolation group by its number in the range of 1 to 8. all: Deletes all isolation groups.
  • Page 118: Spanning Tree Commands

    Spanning tree commands active region-configuration Use active region-configuration to activate your MST region configuration. Syntax active region-configuration Views MST region view Predefined user roles network-admin Usage guidelines When you configure MST region parameters, MSTP launches a new spanning tree calculation process that might cause network topology instability.
  • Page 119: Check Region-Configuration

    Views Layer 2 Ethernet interface view Predefined user roles network-admin Examples # Enable BPDU drop on port GigabitEthernet 1/0/1. <Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] bpdu-drop any check region-configuration Use check region-configuration to display MST region pre-configuration information, including the region name, revision level, and VLAN-to-instance mapping settings.
  • Page 120: Display Stp

    Table 24 Command output Field Description Format selector Format selector of the MST region, which is 0 (not configurable). Region name MST region name. Revision level Revision level of the MST region. Instance VLANs Mapped VLAN-to-instance mappings in the MST region. Related commands •...
  • Page 121 Usage guidelines In STP or RSTP mode, the command output is sorted by port name. • If you do not specify a port, this command applies to all ports. • If you specify a port list, this command applies to the specified ports. In PVST mode, the command output is sorted by VLAN ID and by port name in each VLAN.
  • Page 122 Field Description Port role: • ALTE—The port is an alternate port. • BACK—The port is a backup port. • Role ROOT—The port is a root port. • DESI—The port is a designated port. • MAST—The port is a master port. •...
  • Page 123 Digest-Snooping : Disabled Rapid transition : False Num of VLANs mapped : 1 Port times : Hello 2s MaxAge 20s FwdDelay 15s MsgAge 2s RemHops 20 BPDU sent : 186 TCN: 0, Config: 0, RST: 0, MST: 186 BPDU received TCN: 0, Config: 0, RST: 0, MST: 0 -------[MSTI 1 Global Info]------- Bridge ID...
  • Page 124 VlanRoot ID/RPC : 0.00e0-fc0e-6554, 200200 RootPort ID : 128.48 BPDU-Protection : Disabled TC or TCN received Time since last TC : 0 days 0h:5m:42s # In MSTP mode, display the spanning tree status and statistics when the spanning tree feature is disabled.
  • Page 125 Field Description BPDU-Protection Global status of the BPDU guard function. Bridge Config- Global status of Digest Snooping. Digest-Snooping TC or TCN received Number of TC/TCN BPDUs received in the MSTI or VLAN. Time since last TC Time since the latest topology change in the MSTI or VLAN. [FORWARDING] The port is in forwarding state.
  • Page 126: Display Stp Abnormal-Port

    Field Description VLAN. VLANs Number of VLANs that are mapped to the MSTI. mapped Major parameters for the port: • Hello—Hello timer. • MaxAge—Maximum age timer. Port times • FwdDelay—Forward delay timer. • MsgAge—Message age timer. • RemHops—Remaining hops. BPDU sent Statistics on sent BPDUs.
  • Page 127: Display Stp Bpdu-Statistics

    Predefined user roles network-admin network-operator Examples # In MSTP mode, display information about ports that are blocked by spanning tree protection functions. <Sysname> display stp abnormal-port MST ID Blocked Port Reason GigabitEthernet1/0/1 Root-Protected GigabitEthernet1/0/2 Loop-Protected GigabitEthernet1/0/3 Loopback-Protected # In PVST mode, display information about ports that are blocked by spanning tree protection functions.
  • Page 128 network-operator Parameters interface interface-type interface-number: Specifies an interface by its type and number. instance instance-list: Specifies a space-separated list of up to 10 MSTI items. Each item specifies an MSTI or a range of MSTIs in the form of instance-id1 [ to instance-id2 ]. The value for instance-id2 must be equal to or greater than the value for instance-id1.
  • Page 129 TC received # In PVST mode, display the BPDU statistics for GigabitEthernet 1/0/1. <Sysname> system-view [Sysname] stp mode pvst [Sysname] display stp bpdu-statistics interface gigabitethernet 1/0/1 Port: GigabitEthernet1/0/1 Type Count Last Updated --------------------------- ---------- ----------------- Invalid BPDUs Looped-back BPDUs Max-aged BPDUs TCN sent TCN received TCA sent...
  • Page 130: Display Stp Down-Port

    Field Description MST received MSTP BPDUs sent. Instance Statistical information for a particular MSTI. Timeout BPDUs Expired BPDUs. Max-hoped BPDUs BPDUs whose maximum hops were exceeded. TC detected TC BPDUs detected. TC sent TC BPDUs sent. TC received TC BPDUs received. display stp down-port Use display stp down-port to display information about ports that were shut down by spanning tree protection functions.
  • Page 131 network-operator Parameters instance instance-list: Specifies a space-separated list of up to 10 MSTI items. Each item specifies an MSTI or a range of MSTIs in the form of instance-id1 [ to instance-id2 ]. The value for instance-id2 must be equal to or greater than the value for instance-id1. The value range for the instance-id argument is 0 to 4094, and the value 0 represents the CIST.
  • Page 132: Display Stp Region-Configuration

    Designated priority : 0.00e0-fc01-6510 0 0.00e0-fc01-6510 128.1 Port GigabitEthernet1/0/2 Role change : ALTER->ROOT Time : 2009/02/08 00:22:56 Port priority : 0.00e0-fc01-6510 0 0.00e0-fc01-6510 128.2 Designated priority : 0.00e0-fc01-6510 0 0.00e0-fc01-6510 128.2 Table 30 Command output Field Description Port Port name. Role change of the port (Aged means that the change was caused by expiration Role change of the received configuration BPDU).
  • Page 133: Display Stp Root

    Table 31 Command output Field Description Format selector that is defined by the spanning tree protocol. The default Format selector value is 0, and the selector cannot be configured. Region name MST region name. Revision level of the MST region. The default value is 0, and the level can be Revision level configured by using the revision-level command.
  • Page 134: Display Stp Tc

    display stp tc Use display stp tc to display the incoming and outgoing TC/TCN BPDU statistics for ports. Syntax display stp [ instance instance-list | vlan vlan-id-list ] tc [ slot slot-number ] Views Any view Predefined user roles network-admin network-operator Parameters instance instance-list: Specifies a space-separated list of up to 10 MSTI items.
  • Page 135: Instance

    Table 33 Command output Field Description Port Port name. Receive Number of TC/TCN BPDUs received on each port. Send Number of TC/TCN BPDUs sent by each port. instance Use instance to map a list of VLANs to an MSTI. Use undo instance to remap the specified VLAN or all VLANs to the CIST (MSTI 0). Syntax instance instance-id vlan vlan-id-list undo instance instance-id [ vlan vlan-id-list ]...
  • Page 136: Region-Name

    Examples # Map VLAN 2 to MSTI 1. <Sysname> system-view [Sysname] stp region-configuration [Sysname-mst-region] instance 1 vlan 2 Related commands • active region-configuration • check region-configuration • display stp region-configuration region-name Use region-name to configure the MST region name. Use undo region-name to restore the default MST region name. Syntax region-name name undo region-name...
  • Page 137: Reset Stp

    reset stp Use reset stp to clear spanning tree statistics. The spanning tree statistics include the numbers of TCN BPDUs, configuration BPDUs, RST BPDUs, and MST BPDUs that are sent and received through the specified ports. Syntax reset stp [ interface interface-list ] Views User view Predefined user roles...
  • Page 138: Stp Bpdu-Protection

    After configuring this command, run the active region-configuration command to activate the configured MST region level. Examples # Set the MSTP revision level of the MST region to 5. <Sysname> system-view [Sysname] stp region-configuration [Sysname-mst-region] revision-level 5 Related commands • active region-configuration •...
  • Page 139: Stp Compliance

    Views System view Predefined user roles network-admin Parameters vlan vlan-id-list: Specifies a space-separated list of up to 10 VLAN items. Each item specifies a VLAN or a range of VLANs in the form of vlan-id1 [ to vlan-id2 ]. The value for vlan-id2 must be equal to or greater than the value for vlan-id1.
  • Page 140: Stp Config-Digest-Snooping

    Views Layer 2 Ethernet interface view, Layer 2 aggregate interface view Predefined user roles network-admin Parameters auto: Configures the port to recognize the MSTP BPDU format automatically and determine the format of MSTP BPDUs to send. dot1s: Configures the port to receive and send only standard-format (802.1s-compliant) MSTP BPDUs.
  • Page 141: Stp Cost

    When the setting is configured on a member port in an aggregation group, it takes effect only after the port leaves the aggregation group. Examples # Enable Digest Snooping on GigabitEthernet 1/0/1 and then globally. <Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] stp config-digest-snooping [Sysname-GigabitEthernet1/0/1] quit [Sysname] stp global config-digest-snooping...
  • Page 142: Stp Edged-Port

    Usage guidelines Path cost is an important factor in spanning tree calculation. Setting different path costs for a port in MSTIs allows VLAN traffic flows to be forwarded along different physical links. This results in VLAN-based load balancing. The path cost setting of a port can affect the role selection of the port. When the path cost of a port is changed, the system calculates the role of the port and initiates a state transition.
  • Page 143: Stp Enable

    a temporary loop. You can enable the port to transit to the forwarding state rapidly by configuring it as an edge port. As a best practice, configure ports that directly connect to user terminals as edge ports. Typically, configuration BPDUs from other devices cannot reach an edge port, because the edge port does not connect to any other device.
  • Page 144: Stp Global Config-Digest-Snooping

    When the setting is configured in Layer 2 aggregate interface view, it takes effect only on the aggregate interface. When the setting is configured on a member port in an aggregation group, it takes effect only after the port leaves the aggregation group. Examples # In MSTP mode, disable the spanning tree feature on port GigabitEthernet 1/0/1.
  • Page 145: Stp Global Enable

    stp global enable Use stp global enable to enable the spanning tree feature globally. Use undo stp global enable to disable the spanning tree feature globally. Syntax stp global enable undo stp global enable Default If the device starts up with the initial settings, the spanning tree feature is disabled globally. If the device starts up with the factory defaults, the spanning tree feature is enabled globally.
  • Page 146: Stp Loop-Protection

    • The peer STP device is shut down or removed. • The port cannot detect the change. In this case, you can perform an mCheck operation to forcibly transit the port to operate in the original mode. The device operates in STP, RSTP, PVST, or MSTP mode, depending on the spanning tree mode setting.
  • Page 147: Stp Max-Hops

    Related commands • stp edged-port • stp root-protection stp max-hops Use stp max-hops to set the maximum number of hops for an MST region. Use undo stp max-hops to restore the default. Syntax stp max-hops hops undo stp max-hops Default The maximum number of hops for an MST region is 20.
  • Page 148: Stp Mode

    In this case, you can perform an mCheck operation to forcibly transit the port to operation in the original mode. For example, Device A, Device B, and Device C are connected in sequence. Device A runs STP, Device B does not run any spanning tree protocol, and Device C runs RSTP, MSTP, or PVST. When Device C receives an STP BPDU transparently transmitted by Device B, the receiving port transits to the STP mode.
  • Page 149: Stp No-Agreement-Check

    Usage guidelines The MSTP mode is compatible with the RSTP mode, and the RSTP mode is compatible with the STP mode. The PVST mode's compatibility with other modes is as follows: • Access port—The PVST mode is compatible with other modes in any VLAN. •...
  • Page 150: Stp Pathcost-Standard

    [Sysname-GigabitEthernet1/0/1] stp no-agreement-check stp pathcost-standard Use stp pathcost-standard to specify a standard for the device to use when calculating the default path costs for ports. Use undo stp pathcost-standard to restore the default. Syntax stp pathcost-standard { dot1d-1998 | dot1t | legacy } undo stp pathcost-standard Default The devices uses the legacy standard to calculate the default path costs for ports.
  • Page 151: Stp Port Priority

    Default The default setting is auto, and the spanning tree device automatically detects whether a port connects to a point-to-point link. Views Layer 2 Ethernet interface view, Layer 2 aggregate interface view Predefined user roles network-admin Parameters auto: Specifies automatic detection of the link type. force-false: Specifies the non-point-to-point link type.
  • Page 152: Stp Port-Log

    Default The port priority is 128. Views Layer 2 Ethernet interface view, Layer 2 aggregate interface view Predefined user roles network-admin Parameters instance instance-list: Specifies a space-separated list of up to 10 MSTI items. Each item specifies an MSTI or a range of MSTIs in the form of instance-id1 [ to instance-id2 ]. The value for instance-id2 must be equal to or greater than the value for instance-id1.
  • Page 153: Stp Priority

    undo stp port-log { all | instance instance-list | vlan vlan-id-list } Default This feature is disabled. Views System view Predefined user roles network-admin Parameters all: Specifies all MSTIs or VLANs. instance instance-list: Specifies a space-separated list of up to 10 MSTI items. Each item specifies an MSTI or a range of MSTIs in the form of instance-id1 [ to instance-id2 ].
  • Page 154: Stp Region-Configuration

    Views System view Predefined user roles network-admin Parameters instance instance-list: Specifies a space-separated list of up to 10 MSTI items. Each item specifies an MSTI or a range of MSTIs in the form of instance-id1 [ to instance-id2 ]. The value for instance-id2 must be equal to or greater than the value for instance-id1.
  • Page 155: Stp Role-Restriction

    Usage guidelines After you enter MST region view, you can configure the MST region parameters, including the region name, VLAN-to-instance mappings, and revision level. Examples # Enter MST region view. <Sysname> system-view [Sysname] stp region-configuration [Sysname-mst-region] stp role-restriction Use stp role-restriction to enable port role restriction. Use undo stp role-restriction to disable port role restriction.
  • Page 156: Stp Root Secondary

    Default A device is not a root bridge. Views System view Predefined user roles network-admin Parameters instance instance-list: Specifies a space-separated list of up to 10 MSTI items. Each item specifies an MSTI or a range of MSTIs in the form of instance-id1 [ to instance-id2 ]. The value for instance-id2 must be equal to or greater than the value for instance-id1.
  • Page 157: Stp Root-Protection

    Parameters instance instance-list: Specifies a space-separated list of up to 10 MSTI items. Each item specifies an MSTI or a range of MSTIs in the form of instance-id1 [ to instance-id2 ]. The value for instance-id2 must be equal to or greater than the value for instance-id1. The value range for the instance-id argument is 0 to 4094, and the value 0 represents the CIST.
  • Page 158: Stp Tc-Protection

    When the setting is configured on a member port in an aggregation group, it takes effect only after the port leaves the aggregation group. Examples # Enable root guard for GigabitEthernet 1/0/1. <Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] stp root-protection Related commands •...
  • Page 159: Stp Tc-Restriction

    undo stp tc-protection threshold Default By default, the device can perform a maximum of six forwarding address entry flushes every 10 seconds. Views System view Predefined user roles network-admin Parameters number: Sets the maximum number of immediate forwarding address entry flushes that the device can perform every 10 seconds.
  • Page 160: Stp Tc-Snooping

    <Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] stp tc-restriction stp tc-snooping Use stp tc-snooping to enable TC Snooping. Use undo stp tc-snooping to disable TC Snooping. Syntax stp tc-snooping undo stp tc-snooping Default TC Snooping is disabled. Views System view Predefined user roles network-admin Usage guidelines...
  • Page 161: Stp Timer Hello

    Parameters vlan vlan-id-list: Specifies a space-separated list of up to 10 VLAN items. Each item specifies a VLAN or a range of VLANs in the form of vlan-id1 [ to vlan-id2 ]. The value for vlan-id2 must be equal to or greater than the value for vlan-id1. The value range for the vlan-id argument is 1 to 4094. If you set the STP, RSTP, or MSTP forward delay, do not specify this option.
  • Page 162: Stp Timer Max-Age

    Parameters vlan vlan-id-list: Specifies a space-separated list of up to 10 VLAN items. Each item specifies a VLAN or a range of VLANs in the form of vlan-id1 [ to vlan-id2 ]. The value for vlan-id2 must be equal to or greater than the value for vlan-id1. The value range for the vlan-id argument is 1 to 4094. If you set the STP, RSTP, or MSTP hello time, do not specify this option.
  • Page 163: Stp Timer-Factor

    to or greater than the value for vlan-id1. The value range for the vlan-id argument is 1 to 4094. If you set the STP, RSTP, or MSTP max age, do not specify this option. time: Sets the max age in centiseconds in the range of 600 to 4000 in increments of 100 (as in 600, 700, 800).
  • Page 164: Stp Transmit-Limit

    Usage guidelines In a stable network, each non-root-bridge forwards configuration BPDUs to surrounding devices at the interval of hello time to determine whether any link fails. If a device does not receive a BPDU from the upstream device within nine times of the hello time, it assumes that the upstream device has failed.
  • Page 165: Stp Vlan Enable

    <Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] stp transmit-limit 5 stp vlan enable Use stp vlan enable to enable the spanning tree feature for VLANs. Use undo stp enable to disable the spanning tree feature for VLANs. Syntax stp vlan vlan-id-list enable undo stp vlan vlan-id-list enable Default The spanning tree feature is enabled for all VLANs.
  • Page 166 Syntax vlan-mapping modulo modulo Default All VLANs are mapped to the CIST (MSTI 0). Views MST region view Predefined user roles network-admin Parameters modulo: Sets the modulo value in the range of 1 to 64. Usage guidelines You cannot map a VLAN to different MSTIs. If you map a VLAN that has been mapped to an MSTI to a new MSTI, the old mapping is automatically removed.
  • Page 167: Loop Detection Commands

    Loop detection commands display loopback-detection Use display loopback-detection to display the loop detection configuration and status. Syntax display loopback-detection Views Any view Predefined user roles network-admin network-operator Example # Display the loop detection configuration and status. <Sysname> display loopback-detection Loopback detection is enabled. Loopback detection interval is 30 second(s).
  • Page 168: Loopback-Detection Enable

    Syntax In Layer 2 Ethernet interface view: loopback-detection action { block | no-learning | shutdown } undo loopback-detection action In Layer 2 aggregate interface view: loopback-detection action shutdown undo loopback-detection action Default When the device detects a loop on a port, it generates a log but performs no action on the port. Views Layer 2 Ethernet interface view, Layer 2 aggregate interface view Predefined user roles...
  • Page 169: Loopback-Detection Global Action

    Syntax loopback-detection enable vlan { vlan-list | all } undo loopback-detection enable vlan { vlan-list | all } Default The loop detection function is disabled on ports. Views Layer 2 Ethernet interface view, Layer 2 aggregate interface view Predefined user roles network-admin Parameters vlan-list: Specifies a VLAN list, in the format of { vlan-id [ to vlan-id ] }&<1-10>, where vlan-id...
  • Page 170: Loopback-Detection Global Enable

    Parameters shutdown: Enables the shutdown mode. If a loop is detected, the device generates a log and shuts down the port. The device automatically brings up the port after the detection timer expires. You can use the shutdown-interval command to set the detection timer. For more information, see Fundamentals Command Reference.
  • Page 171: Loopback-Detection Interval-Time

    Example # Globally enable loop detection for VLAN 10 through VLAN 20. <Sysname> system-view [System] loopback-detection global enable vlan 10 to 20 Related commands • display loopback-detection • loopback-detection enable loopback-detection interval-time Use loopback-detection interval-time to set the loop detection interval. Use undo loopback-detection interval-time to restore the default.
  • Page 172: Vlan Commands

    VLAN commands Basic VLAN commands bandwidth Use bandwidth to configure the expected bandwidth of an interface. Use undo bandwidth to restore the default. Syntax bandwidth bandwidth-value undo bandwidth Default The expected bandwidth (in kbps) is the interface baud rate divided by 1000. Views VLAN interface view Predefined user roles...
  • Page 173: Description

    This command might fail to restore the default settings for some commands for reasons such as command dependencies or system restrictions. Use the display this command in interface view to identify these commands, and then use their undo forms or follow the command reference to restore their default settings.
  • Page 174: Display Interface Vlan-Interface

    Name Symbol Name Symbol Left brace Semi-colon Right brace Quotation marks " Left parenthesis Apostrophe Right parenthesis Comma Left bracket Right bracket Slash Usage guidelines You can configure a description to describe the function or connection of a VLAN or VLAN interface. The descriptions are helpful when a large number of VLANs and VLAN interfaces are created on the device.
  • Page 175 down: Displays interfaces in a down state and their down causes. If you do not specify this keyword, the command displays information about VLAN interfaces in all states. description: Displays complete interface descriptions. If you do not specify this keyword, the command displays only the first 27 characters of each interface description.
  • Page 176: Display Vlan

    Field Description interface brief command, this field displays the complete interface description. Bandwidth Expected bandwidth of the VLAN interface. Maximum transmission unit MTU of the VLAN interface. The interface cannot process IP packets. This field is displayed Internet protocol processing : Disabled when the interface is not configured with an IP address.
  • Page 177 Syntax display vlan [ vlan-id1 [ to vlan-id2 ] | all | dynamic | reserved | static ] Views Any view Predefined user roles network-admin network-operator Parameters vlan-id1: Specifies a VLAN by its ID in the range of 1 to 4094. vlan-id1 to vlan-id2: Specifies a VLAN ID range.
  • Page 178: Display Vlan Brief

    Table 37 Command output Field Description VLAN type VLAN type, static or dynamic. Whether the VLAN interface is configured for the VLAN. • Route interface Not configured. • Configured. Description Description of the VLAN. Name VLAN name. Primary IPv4 address of the VLAN interface. This field is displayed only when an IPv4 address is configured for the VLAN interface.
  • Page 179: Interface Vlan-Interface

    GE1/0/9 GE1/0/10 GE1/0/11 GE1/0/12 GE1/0/13 GE1/0/14 GE1/0/15 GE1/0/16 GE1/0/17 GE1/0/18 GE1/0/19 GE1/0/20 GE1/0/21 GE1/0/22 GE1/0/23 GE1/0/24 GE1/0/25 GE1/0/26 GE1/0/27 GE1/0/28 GE1/0/29 GE1/0/30 GE1/0/31 GE1/0/32 GE1/0/33 GE1/0/34 GE1/0/35 GE1/0/36 GE1/0/37 GE1/0/38 GE1/0/39 GE1/0/40 GE1/0/41 GE1/0/42 GE1/0/43 GE1/0/44 GE1/0/45 GE1/0/46 GE1/0/47 GE1/0/48 GE1/0/49 GE1/0/50 GE1/0/51...
  • Page 180: Mtu

    You cannot create a VLAN interface for a sub-VLAN. For more information about sub-VLANs, see Layer 2—LAN Switching Configuration Guide. You cannot create VLAN interfaces for secondary VLANs that meet the following requirements: • Associated with the same primary VLAN. •...
  • Page 181: Name

    Related commands display interface vlan-interface name Use name to configure a name for a VLAN. Use undo name to restore the default. Syntax name text undo name Default The name of a VLAN is VLAN vlan-id. The vlan-id argument specifies the VLAN ID in a four-digit format.
  • Page 182: Shutdown

    Views VLAN interface view Predefined user roles network-admin Parameters slot slot-number: Specifies an IRF member device by its member ID. Usage guidelines If no IRF member devices are specified for forwarding the traffic on the current VLAN interface, the traffic is processed on the IRF member device that receives the traffic. Some features, such as IPsec anti-replay, require that traffic for the same VLAN interface be processed on the same IRF member device.
  • Page 183: Vlan

    Before you configure parameters for a VLAN interface, use this command to shut it down to prevent the configuration from affecting the network. After you complete the VLAN interface configuration, use the undo shutdown command to make the settings take effect. To troubleshoot a failed interface, you can use the shutdown command and then the undo shutdown command on the interface to see whether it recovers.
  • Page 184: Port-Based Vlan Commands

    [Sysname-vlan2] # Create VLAN 4 through VLAN 100. <Sysname> system-view [Sysname] vlan 4 to 100 Related commands display vlan Port-based VLAN commands display port Use display port to display information about hybrid or trunk ports. Syntax display port { hybrid | trunk } Views Any view Predefined user roles...
  • Page 185: Port

    Field Description Untagged VLANs from which the port sends packets after removing VLAN tags. port Use port to assign the specified access ports to a VLAN. Use undo port to remove the specified access ports from a VLAN. Syntax port interface-list undo port interface-list Default All ports are in VLAN 1.
  • Page 186: Port Hybrid Pvid

    Default All access ports belong to VLAN 1. Views Layer 2 Ethernet interface view, Layer 2 aggregate interface view Predefined user roles network-admin Parameters vlan-id: Specifies a VLAN by its ID in the range of 1 to 4094. Usage guidelines Before assigning an access port to a VLAN, make sure the VLAN has been created.
  • Page 187: Port Hybrid Vlan

    Usage guidelines You can configure a nonexistent VLAN as the PVID of a hybrid port. When you delete the PVID of a hybrid port by using the undo vlan command, the PVID setting of the port does not change. For correct packet transmission, configure the same PVID for a local hybrid port and its peer. To enable a hybrid port to transmit packets from its PVID, you must assign the hybrid port to the PVID by using the port hybrid vlan command.
  • Page 188: Port Link-Type

    The value for the vlan-id2 argument must be equal to or greater than the value for the vlan-id1 argument. tagged: Configures the port as a tagged member of the specified VLANs. A tagged member of a VLAN sends packets from the VLAN without removing VLAN tags. untagged: Configures the port as an untagged member of the specified VLANs.
  • Page 189: Port Trunk Permit Vlan

    Usage guidelines To change the link type of a port from trunk to hybrid or vice versa, first set the link type to access. • The configuration made in Layer 2 Ethernet interface view applies only to the port. • The configuration made in Layer 2 aggregate interface view applies to the aggregate interface and its aggregation member ports.
  • Page 190: Port Trunk Pvid

    If the system fails to apply the configuration to the aggregate interface, it stops applying the configuration to aggregation member ports. If the system fails to apply the configuration to an aggregation member port, it skips the port and moves to the next member port. Examples # Configure GigabitEthernet 1/0/1 as a trunk port, and assign it to VLAN 2, VLAN 4, and VLANs 50 through 100.
  • Page 191: Mac-Based Vlan Commands

    Examples # Configure VLAN 100 as the PVID of the trunk port GigabitEthernet 1/0/1, and assign GigabitEthernet 1/0/1 to VLAN 100. <Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] port link-type trunk [Sysname-GigabitEthernet1/0/1] port trunk pvid vlan 100 [Sysname-GigabitEthernet1/0/1] port trunk permit vlan 100 Related commands •...
  • Page 192: Display Mac-Vlan Interface

    Total MAC VLAN entries count: 2 Table 40 Command output Field Description S - Static Statically configured MAC-to-VLAN entries. D - Dynamic Dynamically configured MAC-to-VLAN entries. MAC address MAC address of the MAC-to-VLAN entry. Mask MAC address mask of the MAC-to-VLAN entry. VLAN ID VLAN ID of the MAC-to-VLAN entry.
  • Page 193: Mac-Vlan Mac-Address

    Syntax mac-vlan enable undo mac-vlan enable Default The MAC-based VLAN feature is disabled on a port. Views Layer 2 Ethernet interface view Predefined user roles network-admin Usage guidelines Execute this command only on hybrid ports. Examples # Enable the MAC-based VLAN feature on GigabitEthernet 1/0/1. <Sysname>...
  • Page 194: Mac-Vlan Trigger Enable

    Usage guidelines For successful dynamic MAC-based VLAN assignment, use static VLANs when you create MAC-to-VLAN entries. Different types of MAC-to-VLAN entries are created depending on whether you specify the mask keyword. • When you specify this keyword, the created MAC-to-VLAN entry describes the relationship among a group of MAC addresses, a VLAN, and the 802.1p priority for the VLAN.
  • Page 195: Port Pvid Forbidden

    • If the MAC address does not match any MAC-to-VLAN entries or matches only a MAC-to-VLAN entry whose mask is not all Fs, the device does not dynamically learn the MAC address or assign the receiving port to the VLAN. Examples # Enable dynamic MAC-based VLAN assignment on GigabitEthernet 1/0/1.
  • Page 196: Ip Subnet-Based Vlan Commands

    Syntax vlan precedence { mac-vlan | ip-subnet-vlan } undo vlan precedence Default A port matches VLANs based on MAC addresses preferentially. Views Layer 2 Ethernet interface view Predefined user roles network-admin Parameters mac-vlan: Matches VLANs based on MAC addresses preferentially. ip-subnet-vlan: Matches VLANs based on IP subnets preferentially.
  • Page 197: Display Ip-Subnet-Vlan Vlan

    Examples # Display IP subnet-based VLANs on GigabitEthernet 1/0/1. <Sysname> display ip-subnet-vlan interface gigabitethernet 1/0/1 Interface: GigabitEthernet1/0/1 VLAN ID Subnet index IP address Subnet mask Status 192.168.1.0 255.255.255.0 Active Inactive 4094 65535 172.16.1.1 255.255.0.0 Inactive Table 41 Command output Field Description VLAN ID ID of the IP subnet-based VLAN.
  • Page 198: Ip-Subnet-Vlan

    all: Specifies all IP subnet-based VLANs. Examples # Display information about all IP subnet-based VLANs. <Sysname> display ip-subnet-vlan vlan all VLAN ID: 3 Subnet index IP address Subnet mask 192.168.1.0 255.255.255.0 Table 42 Command output Field Description VLAN ID ID of the IP subnet-based VLAN. Subnet index Index of the IP subnet.
  • Page 199: Port Hybrid Ip-Subnet-Vlan

    all: Removes all associations between the VLAN and IP subnets or IP addresses. Usage guidelines The IP subnet or IP address cannot be a multicast network segment or a multicast address. Examples # Configure VLAN 3 as an IP subnet-based VLAN and associate it with the 192.168.1.0/24 network segment.
  • Page 200: Protocol-Based Vlan Commands

    [Sysname-GigabitEthernet1/0/1] port hybrid ip-subnet-vlan vlan 3 # Associate the Layer 2 aggregate interface Bridge-Aggregation 1 with the IP subnet-based VLAN 3. <Sysname> system-view [Sysname] vlan 3 [Sysname-vlan3] ip-subnet-vlan ip 192.168.1.0 255.255.255.0 [Sysname-vlan3] quit [Sysname] interface bridge-aggregation 1 [Sysname-Bridge-Aggregation1] port link-type hybrid [Sysname-Bridge-Aggregation1] port hybrid vlan 3 untagged [Sysname-Bridge-Aggregation1] port hybrid ip-subnet-vlan vlan 3 Related commands...
  • Page 201: Display Protocol-Vlan Vlan

    Table 43 Command output Field Description VLAN ID ID of the protocol-based VLAN. Protocol index Protocol template index. Protocol type specified by the protocol template. Protocol type If you do not specify the protocol type, this field displays N/A. Whether the protocol-based VLAN has taken effect: •...
  • Page 202: Port Hybrid Protocol-Vlan

    Table 44 Command output Field Description VLAN ID ID of the protocol-based VLAN. Protocol index Protocol template index. Protocol type or encapsulation format specified by the protocol Protocol type template. Related commands • display protocol-vlan interface • port hybrid protocol-vlan •...
  • Page 203: Protocol-Vlan

    • If you specify only the all keyword, this command disassociates the port from all protocol templates of all VLANs. Examples # Associate the hybrid port GigabitEthernet 1/0/1 with protocol template 1 (IPv4) in VLAN 2. <Sysname> system-view [Sysname] vlan 2 [Sysname-vlan2] protocol-vlan 1 ipv4 [Sysname-vlan2] quit [Sysname] interface gigabitethernet 1/0/1...
  • Page 204 mode: Configures a user-defined protocol template for the VLAN. The keywords ethernetii, llc, and snap specify the available encapsulation formats. ethernetii etype etype-id: Matches the Ethernet II encapsulation format and the specified protocol type ID. The etype-id argument specifies the protocol type ID of inbound packets, in the range of 0x0600 to 0xFFFF, excluding 0x0800, 0x809B, 0x8137, and 0x86DD.
  • Page 205: Vlan Group Commands

    [Sysname-vlan3] protocol-vlan 1 ipv4 Related commands • display protocol-vlan interface • display protocol-vlan vlan • port protocol-vlan VLAN group commands display vlan-group Use display vlan-group to display VLAN group information. Syntax display vlan-group [ group-name ] Views Any view Predefined user roles network-admin network-operator Parameters...
  • Page 206: Vlan-Group

    vlan-group Use vlan-group to create a VLAN group and enter VLAN group view. Use undo vlan-group to delete a VLAN group. Syntax vlan-group group-name undo vlan-group group-name Default No VLAN group exists. Views System view Predefined user roles network-admin Parameters group-name: Specifies a VLAN group by its name, a case-sensitive string of 1 to 31 characters.
  • Page 207 Predefined user roles network-admin Parameters vlan-id-list: Specifies a space-separated list of up to 10 VLAN items. Each item specifies a VLAN ID or a range of VLAN IDs in the form of vlan-id1 to vlan-id2. The value range for VLAN IDs is 1 to 4094. The value for the vlan-id2 argument must be equal to or greater than the value for the vlan-id1 argument.
  • Page 208: Super Vlan Commands

    Super VLAN commands display supervlan Use display supervlan to display information about super VLANs and their associated sub-VLANs. Syntax display supervlan [ supervlan-id ] Views Any view Predefined user roles network-admin network-operator Parameters supervlan-id: Specifies a super VLAN ID in the range of 1 to 4094. If you do not specify a super VLAN ID, this command displays information about all super VLANs and their associated sub-VLANs.
  • Page 209 Tagged ports: None Untagged ports: GigabitEthernet1/0/3 VLAN ID: 4 VLAN type: Static It is a sub VLAN. Route interface: Configured IPv4 address: 10.153.17.41 IPv4 subnet mask: 255.255.252.0 IPv6 global unicast addresses: 2001::1, subnet is 2001::/64 [TENTATIVE] Description: VLAN 0004 Name: VLAN 0004 Tagged ports: None Untagged ports: GigabitEthernet1/0/4...
  • Page 210: Subvlan

    Related commands • subvlan • supervlan subvlan Use subvlan to associate a super VLAN with the specified sub-VLANs. Use undo subvlan to dissociate sub-VLANs from a super VLAN. Syntax subvlan vlan-id-list undo subvlan [ vlan-id-list ] Default A super VLAN is not associated with any sub-VLANs. Views VLAN view Predefined user roles...
  • Page 211: Supervlan

    supervlan Use supervlan to configure a VLAN as a super VLAN. Use undo supervlan to restore the default. Syntax supervlan undo supervlan Default A VLAN is not a super VLAN. Views VLAN view Predefined user roles network-admin Usage guidelines You cannot configure a super VLAN as the guest VLAN, Auth-Fail VLAN, or critical VLAN for a port, and vice versa.
  • Page 212: Private Vlan Commands

    Private VLAN commands display private-vlan Use display private-vlan to display information about primary VLANs and their associated secondary VLANs. Syntax display private-vlan [ primary-vlan-id ] Views Any view Predefined user roles network-admin network-operator Parameters primary-vlan-id: Specifies a primary VLAN ID in the range of 1 to 4094. If you do not specify a primary VLAN ID, this command displays all primary VLANs and their associated secondary VLANs.
  • Page 213 GigabitEthernet1/0/2 GigabitEthernet1/0/3 VLAN ID: 4 VLAN type: Static Private VLAN type: Secondary Route interface: Not configured Description: VLAN 0004 Name: VLAN 0004 Tagged ports: None Untagged ports: GigabitEthernet1/0/2 GigabitEthernet1/0/4 Table 47 Command output Field Description VLAN type VLAN type: Dynamic or Static. Private VLAN type: •...
  • Page 214: Port Private-Vlan Host

    Field Description Untagged ports Untagged members of the VLAN. Related commands • private-vlan (VLAN view) • private-vlan primary port private-vlan host Use port private-vlan host to configure a port as a host port. Use undo port private-vlan to restore the default. Syntax port private-vlan host undo port private-vlan...
  • Page 215: Port Private-Vlan Promiscuous

    [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] port private-vlan host [Sysname-GigabitEthernet1/0/1] display this interface GigabitEthernet1/0/1 port private-vlan host return The output show that GigabitEthernet 1/0/1 is operating in bridge mode and is a host port. # Assign GigabitEthernet 1/0/1 to VLAN 20, and then verify the configuration. [Sysname-GigabitEthernet1/0/1] port access vlan 20 [Sysname-GigabitEthernet1/0/1] display this interface GigabitEthernet1/0/1...
  • Page 216 Predefined user roles network-admin Parameters vlan-id: Specifies a VLAN ID in the range of 1 to 4094. Though VLAN 1 is in the valid value range, it cannot be configured in the command. Usage guidelines If the specified VLAN is a primary VLAN that has been associated with secondary VLANs, the command assigns the port to the associated secondary VLANs.
  • Page 217: Port Private-Vlan Trunk Promiscuous

    interface GigabitEthernet1/0/1 port link-type hybrid port private-vlan 2 promiscuous undo port hybrid vlan 1 port hybrid vlan 2 20 untagged port hybrid pvid vlan 2 return The output shows that: • GigabitEthernet 1/0/1 is a promiscuous port. • The port link type of GigabitEthernet 1/0/1 is hybrid and its PVID is VLAN 2. •...
  • Page 218 Default A port is not a trunk promiscuous port of any VLAN. Views Layer 2 Ethernet interface view, Layer 2 aggregate interface view Predefined user roles network-admin Parameters vlan-id-list: Specifies a space-separated list of up to 10 primary VLAN items. Each item specifies a primary VLAN ID or a range of primary VLAN IDs in the form of vlan-id1 to vlan-id2.
  • Page 219 <Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] display this interface GigabitEthernet1/0/1 return # Configure GigabitEthernet 1/0/1 as a trunk promiscuous port of VLANs 2 and 3, and then verify the configuration. [Sysname-GigabitEthernet1/0/1] port private-vlan 2 3 trunk promiscuous [Sysname-GigabitEthernet1/0/1] display this interface GigabitEthernet1/0/1 port link-type hybrid port private-vlan 2 3 trunk promiscuous...
  • Page 220: Port Private-Vlan Trunk Secondary

    port private-vlan trunk secondary Use port private-vlan trunk secondary to configure a port as a trunk secondary port of the specified VLANs and assign the port to these VLANs. Use undo port private-vlan trunk secondary to cancel the trunk secondary attribute of a port in the specified VLANs.
  • Page 221 You can configure the specified VLANs as secondary VLANs before or after you execute the port private-vlan trunk secondary command. This command does not take effect on the specified VLAN if any of the following conditions applies: • The specified VLAN does not exist. •...
  • Page 222 interface GigabitEthernet1/0/1 port link-type hybrid port hybrid vlan 2 3 tagged port hybrid vlan 1 untagged return The output shows that: The port link type of GigabitEthernet 1/0/1 does not change. GigabitEthernet 1/0/1 is a tagged member of VLANs 2 and 3. GigabitEthernet 1/0/1 is removed from VLANs 20 and 30.
  • Page 223: Private-Vlan (Vlan Interface View)

    GigabitEthernet 1/0/1 is removed from VLAN 10. Related commands • port private-vlan host • port private-vlan promiscuous • port private-vlan trunk promiscuous • private-vlan (VLAN view) • private-vlan isolated • private-vlan primary private-vlan (VLAN interface view) Use private-vlan secondary to enable Layer 3 communication between secondary VLANs that are associated with a primary VLAN.
  • Page 224: Private-Vlan (Vlan View)

    • If you specify the secondary vlan-id-list option, this command cancels the Layer 3 communication configuration only for the specified secondary VLANs. • If you do not specify the secondary vlan-id-list option, this command cancels the Layer 3 communication configuration for all secondary VLANs of the primary VLAN. Examples This example shows how to meet the following requirements: •...
  • Page 225 Use undo private-vlan to dissociate the specified secondary VLANs from a primary VLAN. Syntax private-vlan secondary vlan-id-list undo private-vlan [ secondary vlan-id-list ] Default A primary VLAN is not associated with any secondary VLANs. Views VLAN view Predefined user roles network-admin Parameters secondary vlan-id-list: Specifies a space-separated list of up to 10 secondary VLAN items.
  • Page 226: Private-Vlan Community

    private-vlan community Use private-vlan community to enable Layer 2 communication between ports in a secondary VLAN. Syntax private-vlan community Default Ports in the same secondary VLAN can communicate with each other at Layer 2. Views VLAN view Predefined user roles network-admin Usage guidelines The private-vlan community command and the undo private-vlan isolated command have the...
  • Page 227: Private-Vlan Isolated

    [Sysname] vlan 4 [Sysname-vlan4] private-vlan community Related commands private-vlan isolated private-vlan isolated Use private-vlan isolated to isolate ports in a secondary VLAN at Layer 2. Use undo private-vlan isolated to restore the default. Syntax private-vlan isolated undo private-vlan isolated Default Ports in the same secondary VLAN can communicate with each other at Layer 2.
  • Page 228: Private-Vlan Primary

    # Assign GigabitEthernet 1/0/2 to VLAN 4 and configure the port as a host port. [Sysname] interface gigabitethernet 1/0/2 [Sysname-GigabitEthernet1/0/2] port access vlan 4 [Sysname-GigabitEthernet1/0/2] port private-vlan host [Sysname-GigabitEthernet1/0/2] quit # Assign GigabitEthernet 1/0/3 to VLAN 4 and configure the port as a host port. [Sysname] interface gigabitethernet 1/0/3 [Sysname-GigabitEthernet1/0/3] port access vlan 4 [Sysname-GigabitEthernet1/0/3] port private-vlan host...
  • Page 229 Related commands • port private-vlan host • port private-vlan promiscuous • port private-vlan trunk promiscuous • port private-vlan trunk secondary • private-vlan primary...
  • Page 230: Voice Vlan Commands

    Voice VLAN commands cdp voice-vlan Use cdp voice-vlan to configure a port to advertise the specified voice VLAN in CDP packets. Use undo cdp voice-vlan to restore the default. Syntax cdp voice-vlan vlan-id undo cdp voice-vlan Default When CDP compatibility is enabled, the port advertises the voice VLAN configured on the port to its connected IP phone through CDP packets.
  • Page 231: Display Voice-Vlan State

    0001-e300-0000 ffff-ff00-0000 Siemens phone 0003-6b00-0000 ffff-ff00-0000 Cisco phone 0004-0d00-0000 ffff-ff00-0000 Avaya phone 000f-e200-0000 ffff-ff00-0000 H3C Aolynk phone 0060-b900-0000 ffff-ff00-0000 Philips/NEC phone 00d0-1e00-0000 ffff-ff00-0000 Pingtel phone 00e0-7500-0000 ffff-ff00-0000 Polycom phone 00e0-bb00-0000 ffff-ff00-0000 3Com phone Table 48 Command output Field Description OUI address OUI address allowed on the device.
  • Page 232: Voice-Vlan Aging

    Field Description Voice VLAN-enabled port and its voice VLAN assignment Voice VLAN enabled ports and their modes mode. Port Name of the voice VLAN-enabled port. VLAN ID of the voice VLAN enabled on the port. Voice VLAN assignment mode of the port: •...
  • Page 233: Voice-Vlan Enable

    voice-vlan enable Use voice-vlan enable to enable the voice VLAN feature and configure a VLAN as the voice VLAN for a port. Use undo voice-vlan enable to disable the voice VLAN feature on a port. Syntax voice-vlan vlan-id enable undo voice-vlan [ vlan-id ] enable Default The voice VLAN feature is disabled on ports.
  • Page 234: Voice-Vlan Mode Auto

    Number OUI address Vendor 0003-6B00-0000 Cisco phone 0004-0D00-0000 Avaya phone 000F-E200-0000 H3C Aolynk phone 0060-B900-0000 Philips/NEC phone 00D0-1E00-0000 Pingtel phone 00E0-7500-0000 Polycom phone 00E0-BB00-0000 3Com phone Views System view Predefined user roles network-admin Parameters mac-address: Specifies a source MAC address of voice traffic, in the format of H-H-H. For example, 1234-1234-1234.
  • Page 235: Voice-Vlan Qos

    Use undo voice-vlan mode auto to configure a port to operate in manual voice VLAN assignment mode. Syntax voice-vlan mode auto undo voice-vlan mode auto Default A port operates in automatic voice VLAN assignment mode. Views Layer 2 Ethernet interface view Predefined user roles network-admin Usage guidelines...
  • Page 236: Voice-Vlan Qos Trust

    Usage guidelines Before you execute this command on a port, make sure the voice VLAN feature is disabled on it. If you execute both the voice-vlan qos and voice-vlan qos trust commands multiple times, the most recent configuration takes effect. Examples # Configure GigabitEthernet 1/0/1 to modify the CoS and DSCP values for voice VLAN packets to 5 and 45, respectively.
  • Page 237: Voice-Vlan Security Enable

    voice-vlan security enable Use voice-vlan security enable to enable the voice VLAN security mode. Use undo voice-vlan security enable to disable the voice VLAN security mode. Syntax voice-vlan security enable undo voice-vlan security enable Default The voice VLAN security mode is enabled. Views System view Predefined user roles...
  • Page 238: Mvrp Commands

    MVRP commands display mvrp running-status Use display mvrp running-status to display MVRP running status. Syntax display mvrp running-status [ interface interface-list ] Views Any view Predefined user roles network-admin network-operator Parameters interface interface-list: Specifies a range of Ethernet interfaces in the form of interface-type interface-number [ to interface-type interface-number ].
  • Page 239 Periodic Timer : 100 (centiseconds) LeaveAll Timer : 1000 (centiseconds) Registration Type : Normal Registered VLANs : None Declared VLANs : None Propagated VLANs : None Table 51 Command output Field Description MVRP Global Info Global MVRP information. Global MVRP status: •...
  • Page 240: Display Mvrp State

    display mvrp state Use display mvrp state to display the MVRP state of a port in a VLAN. Syntax display mvrp state interface interface-type interface-number vlan vlan-id Views Any view Predefined user roles network-admin network-operator Parameters interface interface-type interface-number: Specifies a port by its type and number. vlan vlan-id: Specifies a VLAN by its VLAN ID in the range of 1 to 4094.
  • Page 241: Display Mvrp Statistics

    display mvrp statistics Use display mvrp statistics to display MVRP statistics. Syntax display mvrp statistics [ interface interface-list ] Views Any view Predefined user roles network-admin network-operator Parameters interface interface-list: Specifies a range of Ethernet interfaces in the form of interface-type interface-number [ to interface-type interface-number ].
  • Page 242 Frames Received New Event Received JoinIn Event Received In Event Received JoinMt Event Received Mt Event Received Leave Event Received LeaveAll Event Received Frames Transmitted New Event Transmitted JoinIn Event Transmitted In Event Transmitted JoinMt Event Transmitted Mt Event Transmitted Leave Event Transmitted LeaveAll Event Transmitted Frames Discarded...
  • Page 243: Mrp Timer Join

    mrp timer join Use mrp timer join to set the Join timer. Use undo mrp timer join to restore the default. Syntax mrp timer join timer-value undo mrp timer join Default The Join timer is 20 centiseconds. Views Layer 2 Ethernet interface view, Layer 2 aggregate interface view Predefined user roles network-admin Parameters...
  • Page 244: Mrp Timer Leaveall

    Parameters timer-value: Specifies the Leave timer value (in centiseconds). The Leave timer must meet the following requirements: • Greater than two times the Join timer. • Less than the LeaveAll timer. • Divisible by 20. Examples # Set the Leave timer to 100 centiseconds. (In this example, the Join and LeaveAll timer use their default settings.) <Sysname>...
  • Page 245: Mrp Timer Periodic

    The device randomly changes the LeaveAll timer within a certain range when the MRP participant restarts its LeaveAll timer. This prevents the LeaveAll timer of a particular participant from always expiring first. Examples # Set the LeaveAll timer to 1500 centiseconds. (In this example, the Leave timer has been restored to the default.) <Sysname>...
  • Page 246: Mvrp Global Enable

    Use undo mvrp enable to restore the default. Syntax mvrp enable undo mvrp enable Default MVRP is disabled on a port. Views Layer 2 Ethernet interface view, Layer 2 aggregate interface view Predefined user roles network-admin Usage guidelines For MVRP to take effect on a port, make sure the following requirements are met: •...
  • Page 247: Mvrp Gvrp-Compliance Enable

    Examples # Enable MVRP globally. <Sysname> system-view [Sysname] mvrp global enable Related commands display mvrp running-status mvrp gvrp-compliance enable Use mvrp gvrp-compliance enable to enable GVRP compatibility. Use undo mvrp gvrp-compliance enable to restore the default. Syntax mvrp gvrp-compliance enable undo mvrp gvrp-compliance enable Default GVRP compatibility is disabled.
  • Page 248: Reset Mvrp Statistics

    Predefined user roles network-admin Parameters fixed: Specifies the fixed registration mode. forbidden: Specifies the forbidden registration mode. normal: Specifies the normal registration mode. Examples # Set the MVRP registration mode to fixed on GigabitEthernet 1/0/1. <Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] mvrp registration fixed Related commands display mvrp running-status...
  • Page 249: Qinq Commands

    QinQ commands This document uses the following terms: • CVLAN—Customer network VLANs, also called inner VLANs, refer to VLANs that a customer uses on the private network. • SVLAN—Service provider network VLANs, also called outer VLANs, refer to VLANs that a service provider uses to transmit VLAN tagged traffic for customers.
  • Page 250: Qinq Enable

    Table 54 Command output Field Description Interface Interface name. GigabitEthernet1/0/1 QinQ-enabled interface. Related commands qinq enable qinq enable Use qinq enable to enable QinQ on an Ethernet interface. Use undo qinq enable to restore the default. Syntax qinq enable undo qinq enable Default QinQ is disabled on Ethernet interfaces.
  • Page 251: Qinq Ethernet-Type Service-Tag

    Predefined user roles network-admin Parameters hex-value: Sets a hexadecimal TPID value in the range of 0x0001 to 0xFFFF, excluding the reserved EtherType values listed in Table Table 55 Reserved EtherType values Protocol type Value 0x0806 0x0200 RARP 0x8035 0x0800 IPv6 0x86DD PPPoE 0x8863/0x8864...
  • Page 252: Qinq Transparent-Vlan

    Views Ethernet interface view, aggregate interface view Predefined user roles network-admin Parameters hex-value: Sets a hexadecimal TPID value in the range of 0x0001 to 0xFFFF, excluding the reserved EtherType values listed in Table Usage guidelines A service provider-side port uses the SVLAN TPID to replace the TPID in outgoing frames' SVLAN tags, in addition to matching incoming tagged frames.
  • Page 253 Examples # Configure GigabitEthernet 1/0/1 as a trunk port, and assign the port to VLAN 2, VLAN 3, and VLANs 50 through 100. Enable QinQ on GigabitEthernet 1/0/1, and configure the port to transparently transmit frames from VLAN 2. <Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] port link-type trunk [Sysname-GigabitEthernet1/0/1] port trunk permit vlan 2 3 50 to 100...
  • Page 254: Vlan Mapping Commands

    VLAN mapping commands display vlan mapping Use display vlan mapping to display VLAN mappings. Syntax display vlan mapping [ interface interface-type interface-number ] Views Any view Predefined user roles network-admin network-operator Parameters interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, the command displays VLAN mappings on all interfaces.
  • Page 255: Vlan Mapping

    Field Description • Many-to-one VLAN mapping • One-to-two VLAN mapping Translated outer VLAN. Translated Outer VLAN This field indicates the translated VLAN when the Translated Inner VLAN field displays N/A. Translated inner VLAN. This field displays N/A for the following VLAN mapping types: Translated Inner VLAN •...
  • Page 256 nni: Configures the network-side port to use the original VLAN tags of the many-to-one mapping to replace the VLAN tags of the packets destined for the user network. nest range vlan-range-list nested-vlan vlan-id: Specifies the CVLAN ranges and the SVLAN for a one-to-two VLAN mapping.
  • Page 257 <Sysname> system-view [Sysname] interface gigabitethernet 1/0/2 [Sysname-GigabitEthernet1/0/2] vlan mapping uni range 1 to 50 translated-vlan 101 [Sysname-GigabitEthernet1/0/2] vlan mapping uni single 80 translated-vlan 101 [Sysname-GigabitEthernet1/0/2] quit [Sysname] interface gigabitethernet 1/0/3 [Sysname-GigabitEthernet1/0/3] vlan mapping nni # Configure one-to-two VLAN mappings on GigabitEthernet 1/0/4 to add SVLAN tag 101 to packets carrying VLAN tags 1 through 10 and 80.
  • Page 258: Lldp Commands

    LLDP commands display lldp local-information Use display lldp local-information to display local LLDP information, which will be contained in the advertisable LLDP TLVs and sent to neighboring devices. Syntax display lldp local-information [ global | interface interface-type interface-number ] Views Any view Predefined user roles network-admin...
  • Page 259 Model name : HPE 5130 24G PoE+ 4SFP+ 1-slot HI Switch Asset tracking identifier : Unknown LLDP local-information of port 52[GigabitEthernet1/0/52]: Port ID type : Interface name Port ID : GigabitEthernet1/0/52 Port description : GigabitEthernet1/0/52 Interface LLDP agent nearest-bridge management address: Management address type : All802 Management address...
  • Page 260 Field Description Supported capabilities: • Bridge—Switching is supported. • Router—Routing is supported. • DocsisCableDevice—The local device serve DOCSIS-compliant cable device. System capabilities supported • StationOnly—The local device can serve as a station only. • Customer Bridge—The customer bridge function is supported. •...
  • Page 261 Field Description Link aggregation supported Indicates whether link aggregation is supported on the port. Link aggregation enabled Indicates whether link aggregation is enabled on the port. Aggregation port ID Member port ID, which is 0 when link aggregation is disabled. Auto-negotiation supported Indicates whether autonegotiation is supported on the port.
  • Page 262: Display Lldp Neighbor-Information

    Field Description • guestVoice. • guestVoiceSignaling. • softPhoneVoice. • videoconferencing. • streamingVideo. • videoSignaling. Unknown policy Indicates whether the media policy is unknown. VLAN tagged Indicates whether packets of the media VLAN are tagged. Media policy VLAN ID ID of the media VLAN. Media policy L2 priority Layer 2 priority.
  • Page 263 Examples # Display the detailed LLDP information that the nearest bridge agents on all ports received from the neighboring devices. <Sysname> display lldp neighbor-information agent nearest-bridge verbose LLDP neighbor-information of port 1[GigabitEthernet1/0/1]: LLDP agent nearest-bridge: LLDP Neighbor index : 1 Update time : 0 days, 0 hours, 1 minutes, 1 seconds Chassis type...
  • Page 264 # Display the detailed LLDP information that all LLDP agents on all ports received from the neighboring devices. <Sysname> display lldp neighbor-information verbose LLDP neighbor-information of port 1[GigabitEthernet1/0/1]: LLDP agent nearest-bridge: LLDP Neighbor index : 1 Update time : 0 days, 0 hours, 1 minutes, 1 seconds Chassis type : MAC address Chassis ID...
  • Page 265 Update time : 0 days, 0 hours, 1 minutes, 1 seconds Chassis type : MAC address Chassis ID : 000f-0055-0002 Port ID type : Interface name Port ID : GigabitEthernet1/0/1 Time to live : 121 Port description : GigabitEthernet1/0/1 Interface System name : Sysname System description...
  • Page 266 LLDP neighbor index : 6 ChassisID/subtype : 0011-2233-4400/MAC address PortID/subtype : 000c-29f5-c715/MAC address Capabilities : None CDP neighbor-information of port 52[GigabitEthernet1/0/3]: LLDP agent nearest-bridge: CDP neighbor index Chassis ID : SEP00260B5C0548 Port ID : Port 1 CDP neighbor index Chassis ID : 0011-2233-4400 Port ID : GigabitEthernet1/0/4...
  • Page 267 Field Description depending on the chassis type of the neighboring device. Port ID type: • Interface alias. • Port component. • MAC address. • Port ID type Network address (ipv4). • Interface name. • Agent circuit ID. • Locally assigned—Locally-defined port ID type other than those listed above.
  • Page 268 Field Description Number of supported priorities configured by using the P0- P1- P2- P3- P4- P5- P6- priority-flow-control no-drop dot1p dot1p-list command on the neighbor. CoS map Application protocol-to-CoS mapping. Indicates whether the token bucket mechanism is supported on the port: •...
  • Page 269 Field Description Power source type of an LLDP neighboring device that is a PD device: • Unknown—Unknown power supply. • PSE—PSE power supply. • Local—Local power supply. • PSE and local—PSE and local power supplies. This field appears only on the devices that support PoE. PoE power receiving priority of ports on an LLDP neighboring device that is a PD device: •...
  • Page 270: Display Lldp Statistics

    Field Description • bridge neighbor A pound sign (#) indicates the nearest customer bridge neighbor. display lldp statistics Use display lldp statistics to display the global LLDP statistics or the LLDP statistics of a port. Syntax display lldp statistics [ global | [ interface interface-type interface-number ] [ agent { nearest-bridge | nearest-customer | nearest-nontpmr } ] ] Views Any view...
  • Page 271 The number of LLDP neighbor information aged out : 0 The number of CDP frames transmitted The number of CDP frames received The number of CDP frames discarded The number of CDP error frames LLDP agent nearest-nontpmr: The number of LLDP frames transmitted The number of LLDP frames received The number of LLDP frames discarded The number of LLDP error frames...
  • Page 272: Display Lldp Status

    Table 59 Command output Field Description LLDP statistics global information Global LLDP statistics. Time when the neighbor information was last LLDP neighbor information last change time updated. The number of LLDP neighbor information inserted Number of times neighbor information was added. The number of LLDP neighbor information deleted Number of times neighbor information was removed.
  • Page 273 Hold multiplier Reinit delay : 2s Trap interval : 5s Fast start times LLDP status information of port 1 [GigabitEthernet1/0/1]: LLDP agent nearest-bridge: Port status of LLDP : Enable Admin status : Tx_Rx Trap flag : No MED trap flag : No Polling interval : 0s...
  • Page 274: Display Lldp Tlv-Config

    Field Description Reinit delay LLDP reinitialization delay. Transmit max credit Token bucket size for sending LLDP frames. Trap interval Trap transmission interval. Number of LLDP frames sent each time fast LLDP frame transmission Fast start times is triggered. Port 1 LLDP status of port 1.
  • Page 275 Usage guidelines If no port is specified, this command displays the types of advertisable optional TLVs of all ports. Examples # Display the types of advertisable optional LLDP TLVs of interface GigabitEthernet 1/0/1. <Sysname> display lldp tlv-config interface gigabitethernet 1/0/1 LLDP tlv-config of port 1[GigabitEthernet1/0/1]: LLDP agent nearest-bridge: NAME...
  • Page 276 IEEE 802.3 extend TLV: MAC-Physic TLV Power via MDI TLV Maximum Frame Size TLV LLDP-MED extend TLV: Capabilities TLV Network Policy TLV Location Identification TLV Extended Power via MDI TLV Inventory TLV LLDP agent nearest-customer: NAME STATUS DEFAULT Basic optional TLV: Port Description TLV System Name TLV System Description TLV...
  • Page 277: Lldp Admin-Status

    Field Description • System description TLV. • System capabilities TLV. • Management address TLV. IEEE 802.1 organizationally specific TLVs: • Port VLAN ID TLV. • Port and protocol VLAN ID TLV. • IEEE 802.1 extended TLV VLAN name TLV. • DCBX TLV.
  • Page 278: Lldp Check-Change-Interval

    Views Layer 2 aggregate interface view Layer 2 Ethernet interface view Management Ethernet interface view Predefined user roles network-admin Parameters agent: Specifies an LLDP agent type. If no agent type is specified in Ethernet interface view, the command configures the operating mode for nearest bridge agents. nearest-customer: Specifies nearest customer bridge agents.
  • Page 279: Lldp Compliance Admin-Status Cdp

    Parameters agent: Specifies an LLDP agent type. If no agent type is specified in Ethernet interface view, the command enables LLDP polling and sets the polling interval for nearest bridge agents. nearest-customer: Specifies nearest customer bridge agents. nearest-nontpmr: Specifies nearest non-TPMR bridge agents. interval: Sets the LLDP polling interval in the range of 1 to 30 seconds.
  • Page 280: Lldp Compliance Cdp

    Related commands lldp compliance cdp lldp compliance cdp Use lldp compliance cdp to enable CDP compatibility globally. Use undo lldp compliance cdp to restore the default. Syntax lldp compliance cdp undo lldp compliance cdp Default CDP compatibility is globally disabled. Views System view Predefined user roles...
  • Page 281: Lldp Encapsulation Snap

    Predefined user roles network-admin Usage guidelines LLDP takes effect on a port only when LLDP is enabled both globally and on the port. Examples # Disable LLDP on GigabitEthernet 1/0/1. <Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] undo lldp enable Related commands lldp global enable lldp encapsulation snap...
  • Page 282: Lldp Fast-Count

    [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] lldp encapsulation snap lldp fast-count Use lldp fast-count to set the number of LLDP frames sent each time fast LLDP frame transmission is triggered. Use undo lldp fast-count to restore the default. Syntax lldp fast-count count undo lldp fast-count Default The number is 4.
  • Page 283: Lldp Hold-Multiplier

    Usage guidelines LLDP takes effect on a port only when LLDP is enabled both globally and on the port. Examples # Disable LLDP globally. <Sysname> system-view [Sysname] undo lldp global enable Related commands lldp enable lldp hold-multiplier Use lldp hold-multiplier to set the TTL multiplier. Use undo lldp hold-multiplier to restore the default.
  • Page 284: Lldp Management-Address-Format String

    lldp management-address-format string Use lldp management-address-format string to configure the encoding format of the management address as string. Use undo lldp management-address-format to restore the default. Syntax In Layer 2 Ethernet interface view or management Ethernet interface view: lldp [ agent { nearest-customer | nearest-nontpmr } ] management-address-format string undo lldp [ agent { nearest-customer | nearest-nontpmr } ] management-address-format In Layer 2 aggregate interface view: lldp agent { nearest-customer | nearest-nontpmr } management-address-format string...
  • Page 285: Lldp Mode

    undo lldp max-credit Default The token bucket size for sending LLDP frames is 5. Views System view Predefined user roles network-admin Parameters credit-value: Specifies the token bucket size for sending LLDP frames, in the range of 1 to 100. Examples # Set the token bucket size for sending LLDP frames to 10.
  • Page 286: Lldp Notification Med-Topology-Change Enable

    Examples # Configure LLDP to operate in service bridge mode. <Sysname> system-view [Sysname] lldp mode service-bridge Related commands lldp global enable lldp notification med-topology-change enable Use lldp notification med-topology-change enable to enable LLDP-MED trapping. Use undo lldp notification med-topology-change enable to disable LLDP-MED trapping. Syntax lldp notification med-topology-change enable undo lldp notification med-topology-change enable...
  • Page 287: Lldp Timer Fast-Interval

    Layer 2 Ethernet interface view Management Ethernet interface view Predefined user roles network-admin Parameters agent: Specifies an LLDP agent type. If no agent type is specified in Ethernet interface view, the command enables LLDP trapping for nearest bridge agents. nearest-customer: Specifies nearest customer bridge agents. nearest-nontpmr: Specifies nearest non-TPMR bridge agents.
  • Page 288: Lldp Timer Reinit-Delay

    undo lldp timer notification-interval Default The LLDP trap and LLDP-MED trap transmission interval is 30 seconds. Views System view Predefined user roles network-admin Parameters interval: Sets the LLDP trap and LLDP-MED trap transmission interval in the range of 5 to 3600 seconds.
  • Page 289: Lldp Tlv-Enable

    undo lldp timer tx-interval Default The LLDP frame transmission interval is 30 seconds. Views System view Predefined user roles network-admin Parameters interval: Sets the LLDP frame transmission interval in the range of 5 to 32768 seconds. Examples # Set the LLDP frame transmission interval to 20 seconds. <Sysname>...
  • Page 290 • lldp agent nearest-nontpmr tlv-enable { basic-tlv { all | management-address-tlv [ ip-address ] | port-description | system-capability | system-description | system-name } | dot1-tlv { all | port-vlan-id } } • lldp agent nearest-customer tlv-enable { basic-tlv { all | management-address-tlv [ ip-address ] | port-description | system-capability | system-description | system-name } | dot1-tlv { all | port-vlan-id } } •...
  • Page 291 Parameters agent: Specifies an LLDP agent type. If no agent type is specified in Ethernet interface view, the command configures the types of advertisable TLVs for nearest bridge agents. nearest-customer: Specifies nearest customer bridge agents. nearest-nontpmr: Specifies nearest non-TPMR bridge agents. all: Advertises all TLVs of the specified type.
  • Page 292 range of 1 to 4094. If no management VLAN ID is specified, the value 0 is advertised, which means that the LLDP agent is not configured with a management VLAN ID. dot3-tlv: Advertises IEEE 802.3 organizationally specific LLDP TLVs. link-aggregation: Advertises link aggregation TLVs. mac-physic: Advertises MAC/PHY configuration/status TLVs.
  • Page 293 [Sysname-GigabitEthernet1/0/1] lldp agent nearest-customer tlv-enable dot1-tlv link-aggregation...
  • Page 294: Service Loopback Group Commands

    Service loopback group commands display service-loopback group Use display service-loopback group to display information about service loopback groups. Syntax display service-loopback group [ number ] Views Any view Predefined user roles network-admin network-operator Parameters number: Specifies a service loopback group ID. The value range for the number argument is 1 to 1024.
  • Page 295: Service-Loopback Group

    Default A service loopback group does not contain any ports. Views Layer 2 Ethernet interface view Predefined user roles network-admin Parameters number: Specifies a service loopback group ID. The value range for the number argument is 1 to 1024. Usage guidelines Before assigning a port to a service loopback group, make sure the port supports the service type of the group.
  • Page 296 A service loopback group must work with other features, such as GRE. It can be used by multiple features. You must create a service loopback group before you can use it with a feature. You cannot change the service type of a service loopback group. For correct traffic processing, do not delete a service loopback group that is being used by a feature.
  • Page 297: Document Conventions And Icons

    Document conventions and icons Conventions This section describes the conventions used in the documentation. Port numbering in examples The port numbers in this document are for illustration only and might be unavailable on your device. Command conventions Convention Description Boldface Bold text represents commands and keywords that you enter literally as shown.
  • Page 298: Network Topology Icons

    Network topology icons Convention Description Represents a generic network device, such as a router, switch, or firewall. Represents a routing-capable device, such as a router or Layer 3 switch. Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supports Layer 2 forwarding and other Layer 2 features.
  • Page 299: Support And Other Resources

    Hewlett Packard Enterprise Support Center More Information on Access to Support Materials page: www.hpe.com/support/AccessToSupportMaterials IMPORTANT: Access to some updates might require product entitlement when accessed through the Hewlett Packard Enterprise Support Center. You must have an HP Passport set up with relevant entitlements.
  • Page 300: Websites

    Websites Website Link Networking websites Hewlett Packard Enterprise Information Library for www.hpe.com/networking/resourcefinder Networking Hewlett Packard Enterprise Networking website www.hpe.com/info/networking Hewlett Packard Enterprise My Networking website www.hpe.com/networking/support Hewlett Packard Enterprise My Networking Portal www.hpe.com/networking/mynetworking Hewlett Packard Enterprise Networking Warranty www.hpe.com/networking/warranty General websites Hewlett Packard Enterprise Information Library www.hpe.com/info/enterprise/docs Hewlett Packard Enterprise Support Center...
  • Page 301 part number, edition, and publication date located on the front cover of the document. For online help content, include the product name, product version, help edition, and publication date located on the legal notices page.
  • Page 303: Index

    Index A B C D E F I J L M N P Q R S U V W display lldp status,264 display lldp tlv-config,266 active region-configuration,110 display loopback-detection,159 display mac-address,56 display mac-address aging-time,57 bandwidth,164 display mac-address mac-learning,58 bandwidth,40 display mac-address mac-move,59 bandwidth,1 display mac-address...
  • Page 304 flow-interval,19 lldp timer tx-interval,280 lldp tlv-enable,281 loopback,22 instance,127 loopback-detection action,159 interface,19 loopback-detection enable,160 interface bridge-aggregation,91 loopback-detection global action,161 interface loopback,48 loopback-detection global enable,162 interface null,49 loopback-detection interval-time,163 interface range,52 interface range name,54 interface vlan-interface,171 mac-address (interface view),61 ip-subnet-vlan,190 mac-address (system view),62 mac-address information enable (interface view),74...
  • Page 305 port bridge enable,31 shutdown,105 port hybrid ip-subnet-vlan,191 snmp-agent trap enable mac-address,72 port hybrid protocol-vlan,194 speed,25 port hybrid pvid,178 speed auto downgrade,26 port hybrid vlan,179 storm-constrain,33 port link-aggregation group,104 storm-constrain control,34 port link-type,180 storm-constrain enable log,35 port private-vlan host,206 storm-constrain enable trap,35 port private-vlan promiscuous,207...
  • Page 306 virtual-cable-test,38 voice-vlan mac-address,225 vlan,175 voice-vlan mode auto,226 vlan mapping,247 voice-vlan qos,227 vlan precedence,187 voice-vlan qos trust,228 vlan-group,198 voice-vlan security enable,229 vlan-list,198 voice-vlan track lldp,229 vlan-mapping modulo,157 voice-vlan aging,224 Websites,292 voice-vlan enable,225...

Table of Contents