Page 1: Command Reference
HPE FlexNetwork 5130 EI Switch Series Layer 2—LAN Switching Command Reference Part number: 5200-3954 Software version: Release 32xx Document version: 6W100-20170525...
Page 2 © Copyright 2015, 2017 Hewlett Packard Enterprise Development LP The information contained herein is subject to change without notice. The only warranties for Hewlett Packard Enterprise products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. Hewlett Packard Enterprise shall not be liable for technical or editorial errors or omissions contained herein.
Page 3: Table Of Contents
Contents Ethernet interface commands ····························································· 1 Common Ethernet interface commands ·························································································· 1 bandwidth ·························································································································· 1 broadcast-suppression ········································································································· 1 combo enable ····················································································································· 3 default ······························································································································· 3 description ························································································································· 4 display counters ·················································································································· 4 display counters rate ············································································································...
Page 4 interface range ·················································································································· 52 interface range name ········································································································· 53 MAC address table commands ························································· 56 display mac-address ·········································································································· 56 display mac-address aging-time ··························································································· 57 display mac-address mac-learning ························································································ 58 display mac-address mac-move ··························································································· 59 ...
Page 5 Port isolation commands ································································ 105 display port-isolate group ·································································································· 105 port-isolate enable ··········································································································· 106 port-isolate group ············································································································ 106 Spanning tree commands ······························································ 108 active region-configuration ································································································ 108 bpdu-drop any ················································································································ 108 check region-configuration ································································································ 109 ...
Page 6 stp transmit-limit ·············································································································· 160 stp vlan enable ··············································································································· 161 vlan-mapping modulo ······································································································· 162 Loop detection commands ····························································· 164 display loopback-detection ································································································ 164 loopback-detection action ·································································································· 164 loopback-detection enable ································································································· 166 loopback-detection global action ························································································· 166 ...
Page 7 Private VLAN commands ······························································· 208 display private-vlan ·········································································································· 208 port private-vlan host ········································································································ 210 port private-vlan promiscuous ···························································································· 212 port private-vlan trunk promiscuous ····················································································· 214 port private-vlan trunk secondary ························································································ 216 private-vlan (VLAN interface view) ······················································································ 219 ...
Page 8 lldp encapsulation snap ···································································································· 280 lldp fast-count ················································································································· 281 lldp global enable ············································································································ 281 lldp global tlv-enable basic-tlv management-address-tlv ··························································· 282 lldp hold-multiplier ··········································································································· 283 lldp ignore-pvid-inconsistency ···························································································· 284 lldp management-address-format string ··············································································· 285 ...
Page 9: Ethernet Interface Commands
Ethernet interface commands Common Ethernet interface commands bandwidth Use bandwidth to set the expected bandwidth of an interface. Use undo bandwidth to restore the default. Syntax bandwidth bandwidth-value undo bandwidth Default The expected bandwidth (in kbps) is the interface baud rate divided by 1000. Views Ethernet interface view Predefined user roles...
Page 10 Default Ethernet interfaces do not suppress broadcast traffic. Views Ethernet interface view Predefined user roles network-admin Parameters ratio : Sets the broadcast suppression threshold as a percentage of the interface bandwidth. The value range for this argument is 0 to 100. A smaller value means that less broadcast traffic is allowed to pass through.
Page 11: Combo Enable
combo enable Use combo enable to activate the copper or fiber combo port of a combo interface. Syntax combo enable { copper | fiber } Default The copper combo port of a combo interface is activated. Views Ethernet interface view Predefined user roles network-admin Parameters...
Page 12: Description
Usage guidelines CAUTION: The default command might interrupt ongoing network services. Make sure you are fully aware of the impacts of this command when you use it in a live network. This command might fail to restore the default settings for some commands because of command dependencies or system restrictions.
Page 13 Views Any view Predefined user roles network-admin network-operator Parameters inbound : Displays inbound traffic statistics. outbound : Displays outbound traffic statistics. interface-type : Specifies an interface type. interface-number : Specifies an interface number. Usage guidelines This command displays traffic statistics within a statistics polling interval specified by using the flow-interval command.
Page 14: Display Counters Rate
Related commands flow-interval reset counters interface display counters rate Use display counters rate to display traffic rate statistics for interfaces in up state for the most recent statistics polling interval. Syntax display counters rate { inbound | outbound } interface [ interface-type [ interface-number ] ] Views Any view...
Page 15: Display Ethernet Statistics
Table 2 Command output Field Description Interface Abbreviated interface name. Bandwidth usage (in percentage) of the interface for the last statistics polling Usage (%) interval. Average receiving or sending rate (in pps) for unicast packets for the last Total (pkts/sec) statistics polling interval.
Page 16 NullPoint ErrIfindex ErrIfcb IfShut ErrAnalyse : 5988 ErrSrcMAC : 5988 ErrHdrLen ETH send packet statistics: L3OutNum : 211 VLANOutNum FastOutNum : 155 L2OutNum ETH send error statistics: MbufRelayNum NullMbuf ErrAdjFwd ErrPrepend ErrHdrLen ErrPad ErrQoSTrs ErrVLANTrs ErrEncap ErrTagVLAN IfShut IfErr Table 3 Output description Field Description Statistics about the Ethernet packets received by the Ethernet module:...
Page 17: Display Interface
Field Description Statistics about the Ethernet packets sent by the Ethernet module: • L3OutNum—Number of packets sent out of Layer 3 Ethernet interfaces. • VLANOutNum—Number of packets sent out of VLAN interfaces. ETH send packet statistics • FastOutNum—Number of packets fast forwarded. •...
Page 18 down : Displays information about interfaces in down state and the causes. If you do not specify this keyword, the command displays information about interfaces in all states. Usage guidelines If you do not specify an interface type, this command displays information about all interfaces. If you specify an interface type but do not specify an interface number, this command displays information about all interfaces of the specified type.
Page 19 Output (normal): 0 packets, 0 bytes 0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses Output: 0 output errors, 0 underruns, 0 buffer failures 0 aborts, 0 deferred, 0 collisions, 0 late collisions 0 lost carrier, 0 no carrier Table 4 Command output Field Description Physical link state of the interface:...
Page 20 Field Description The interface is not assigned an IP address and cannot process Internet protocol processing: Disabled IP packets. IP address of the interface. The primary attribute indicates that Internet address the address is the primary IP address. IP packet frame type IPv4 packet framing format.
Page 21 Field Description Multicast storm suppression threshold in ratio, pps, or kbps. The Multicast max- unit of the threshold depends on your configuration. Unknown unicast storm suppression threshold in ratio, pps, or Unicast max- kbps. The unit of the threshold depends on your configuration. PVID Port VLAN ID (PVID) of the interface.
Page 22 Field Description The two fields on the first line represent the inbound normal traffic and pause frame statistics (in packets and bytes) for the interface. The four fields on the second line represent: Input(normal): 0 packets, 0 bytes • Number of inbound normal unicast packets. 0 unicasts, 0 broadcasts, 0 •...
Page 23 Field Description Number of inbound frames dropped because the receiving buffer ignored of the port ran low. parity errors Total number of frames with parity errors. The two fields on the first line represent the outbound traffic statistics (in packets and bytes) for the interface. All outbound normal packets, abnormal packets, and normal pause frames were counted.
Page 24 <Sysname> display interface brief Brief information on interfaces in route mode: Link: ADM - administratively down; Stby - standby Protocol: (s) – spoofing Interface Link Protocol Primary IP Description GE1/0/1 DOWN DOWN Loop0 UP(s) 2.2.2.9 NULL0 UP(s) Vlan1 DOWN Vlan999 192.168.1.42 Brief information on interfaces in bridge mode: Link: ADM - administratively down;...
Page 25 Field Description Interface Interface name. Physical link state of the interface: • UP—The interface is physically up. • DOWN—The interface is physically down. Link • ADM—The interface has been shut down by using the command. To restore the physical state of the shutdown interface, use the command.
Page 26: Display Packet-Drop
Field Description Cause for the physical link state of an interface to be DOWN: • Administratively—The interface has been manually shut down by using the command. To restore the physical state shutdown of the interface, use the command. undo shutdown •...
Page 27: Duplex
If you specify an interface type but do not specify an interface number, this command displays information about dropped packets on all interfaces of the specified type. Examples # Display information about dropped packets on GigabitEthernet 1/0/1. <Sysname> display packet-drop interface gigabitethernet 1/0/1 GigabitEthernet1/0/1: Packets dropped due to full GBP or insufficient bandwidth: 301 Packets dropped due to Fast Filter Processor (FFP): 261...
Page 28: Eee Enable
full : Configures the interface to operate in full duplex mode. In this mode, the interface can receive and transmit packets simultaneously. half : Configures the interface to operate in half duplex mode. In this mode, the interface can only receive or transmit packets at a given time.
Page 29: Flow-Control Receive Enable
Default TxRx-mode generic flow control is disabled on an Ethernet interface. Views Ethernet interface view Predefined user roles network-admin Usage guidelines With TxRx-mode generic flow control configured, an interface can both send and receive flow control frames: • When congested, the interface sends a flow control frame to its peer. •...
Page 30: Flow-Interval
<Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-gigabitethernet 1/0/1] flow-control receive enable Related commands flow-control flow-interval Use flow-interval to set the statistics polling interval. Use undo flow-interval to restore the default. Syntax flow-interval interval undo flow-interval Default The statistics polling interval is 300 seconds. Views Ethernet interface view Predefined user roles...
Page 31: Jumboframe Enable
Examples # Enter the view of GigabitEthernet 1/0/1. <Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] jumboframe enable Use jumboframe enable to allow jumbo frames within the specified length to pass through. Use undo jumboframe enable to prevent jumbo frames from passing through. Syntax jumboframe enable [ size ] undo jumboframe enable...
Page 32: Loopback
Predefined user roles network-admin Parameters msec : Enables the physical state change suppression interval to be accurate to milliseconds. If you do not specify this keyword, the suppression interval is accurate to seconds. delay-time : Sets the physical state change suppression interval on the Ethernet interface. A value of 0 means that physical state changes are immediately reported to the CPU and are not suppressed.
Page 33: Multicast-Suppression
Use loopback to enable loopback testing on an Ethernet interface. Use undo loopback to disable loopback testing on an Ethernet interface. Syntax loopback { external | internal } undo loopback Default Loopback testing is disabled on an Ethernet interface. Views Ethernet interface view Predefined user roles network-admin...
Page 34: Port Auto-Power-Down
Predefined user roles network-admin Parameters ratio : Sets the multicast suppression threshold as a percentage of the interface bandwidth. The value range for this argument (in percentage) is 0 to 100. A smaller value means that less multicast traffic is allowed to pass through. pps max-pps : Specifies the maximum number of multicast packets that the interface can forward per second.
Page 35: Reset Counters Interface
Use undo port auto-power-down to disable auto power-down on an Ethernet interface. Syntax port auto-power-down undo port auto-power-down Default Auto power-down is disabled on Ethernet interfaces. Views Ethernet interface view Predefined user roles network-admin Usage guidelines Fiber ports do not support this command. When an interface with auto power-down enabled has been down for a specific period of time, both of the following events occur: •...
Page 36: Reset Ethernet Statistics
If you do not specify an interface type, this command clears statistics for all interfaces. If you specify an interface type but do not specify an interface number, this command clears statistics for all interfaces of the specified type. Examples # Clear the statistics for GigabitEthernet 1/0/1.
Page 37: Shutdown
Usage guidelines If you do not specify an interface type, this command clears dropped packet statistics for all interfaces on the device. If you specify an interface type but do not specify an interface number, the command clears dropped packet statistics for all interfaces of the specified type. Examples # Clear dropped packet statistics for GigabitEthernet 1/0/1.
Page 38: Speed Auto Downgrade
Syntax speed { 10 | 100 | 1000 | 10000 | auto } undo speed Default An Ethernet interface negotiates a speed with its peer. Views Ethernet interface view Predefined user roles network-admin Parameters 10 : Sets the interface speed to 10 Mbps. 100 : Sets the interface speed to 100 Mbps.
Page 39: Unicast-Suppression
Predefined user roles network-admin Usage guidelines This command takes effect after you configure it on the interface at either end of a link and the two interfaces are configured to automatically negotiate the speed. This command is applicable only to GE interfaces. Examples # Enable automatic negotiation for speed downgrading on GigabitEthernet 1/0/1.
Page 40: Layer 2 Ethernet Interface Commands
Both the storm-constrain command and the unicast-suppression command can suppress unknown unicast storms on a port. The unicast-suppression command uses the chip to physically suppress unknown unicast traffic. It has less influence on the device performance than the storm-constrain command, which uses software to suppress unknown unicast traffic. For the unknown unicast traffic suppression result to be determined, do not configure both the storm-constrain unicast command and the unicast-suppression command on an interface.
Page 41 interface interface-type interface-number : Specifies an interface by its type and number. If you do not specify this option, the command displays storm control settings and statistics for all storm control-enabled interfaces. Usage guidelines If you do not specify any keywords, this command displays all storm control settings on all storm control-enabled interfaces.
Page 42: Mdix-Mode
mdix-mode IMPORTANT: Fiber ports do not support this command. Use mdix-mode to configure the Medium Dependent Interface Cross-Over (MDIX) mode of an Ethernet interface. Use undo mdix-mode to restore the default. Syntax mdix-mode { automdix | mdi| mdix } undo mdix-mode Default Ethernet interfaces operate in automdix mode.
Page 43: Port Up-Mode
Usage guidelines By default, the device drops packets whose outgoing interface and incoming interface are the same. To enable the device to forward such packets rather than drop them, configure this command in Ethernet interface view. After the device receives a broadcast or unknown unicast packet, the device forwards the packet through all interfaces in the VLAN to which the incoming interface of the packet belongs.
Page 44 Use undo storm-constrain to disable storm control for broadcast, multicast, unknown unicast, or all types of traffic. Syntax storm-constrain { broadcast | multicast | unicast } { pps | kbps | ratio } upperlimit lowerlimit undo storm-constrain { all | broadcast | multicast | unicast } Default Traffic storm control is disabled.
Page 45: Storm-Constrain Control
For the traffic suppression result to be determined, do not configure both storm control and storm suppression for the same type of traffic. When configuring this command, make sure upperlimit is greater than lowerlimit . Examples # Enable unknown unicast storm control on GigabitEthernet 1/0/1 and set the upper and lower thresholds to 200 pps and 150 pps, respectively.
Page 46: Storm-Constrain Enable Log
the traffic. To bring up the interface, use the undo shutdown command or disable storm control on the interface. Examples # Configure GigabitEthernet 1/0/1 to block a specific type of traffic when the type of traffic exceeds the upper storm control threshold. <Sysname>...
Page 47: Storm-Constrain Interval
Default An interface sends out storm control threshold event traps when monitored traffic exceeds the upper threshold or drops below the lower threshold. Views Layer 2 Ethernet interface view Predefined user roles network-admin Examples # Enable GigabitEthernet 1/0/1 to send traps when it detects storm control threshold events. <Sysname>...
Page 48: Virtual-Cable-Test
virtual-cable-test IMPORTANT: This command is not available on fiber ports. Use virtual-cable-test to test the cable connection of an Ethernet interface and display the test result. Syntax virtual-cable-test Views Layer 2 Ethernet interface view Predefined user roles network-admin Usage guidelines If the link of an Ethernet interface is up, testing its cable connection will cause the link to go down and then up.
Page 49: Loopback, Null, And Inloopback Interface Commands
Loopback, null, and inloopback interface commands bandwidth Use bandwidth to set the expected bandwidth for an interface. Use undo bandwidth to restore the default. Syntax bandwidth bandwidth-value undo bandwidth Default The expected bandwidth of a loopback interface is 0 kbps. Views Loopback interface view Predefined user roles...
Page 50: Description
Usage guidelines CAUTION: The default command might interrupt ongoing network services. Make sure you are fully aware of the impact of this command before using it on a live network. This command might fail to restore the default settings for some commands for reasons such as command dependencies and system restrictions.
Page 51: Display Interface Inloopback
display interface inloopback Use display interface inloopback to display information about the inloopback interface. Syntax display interface inloopback [ 0 ] [ brief [ description | down ] ] Views Any view Predefined user roles network-admin network-operator Parameters 0 : Specifies Inloopback 0. brief : Displays brief interface information.
Page 52 Field Description Description of the interface, which is always InLoopBack0 Description Interface and cannot be configured. MTU of the interface, which is always 1536 and cannot be Maximum transmission unit configured Physical: InLoopBack The physical type of the interface is inloopback. Average input rate during the last 300 seconds (displayed when the interface supports traffic statistics collection): •...
Page 53: Display Interface Loopback
display interface loopback Use display interface loopback to display information about the specified or all existing loopback interfaces. Syntax display interface loopback [ interface-number ] [ brief [ description | down ] ] Views Any view Predefined user roles network-admin network-operator Parameters loopback interface-number : Specifies a loopback interface by its number, which can be the...
Page 54 Table 11 Command output Field Description Physical link state of the interface: • UP—The loopback interface can receive and transmit packets. Current state • Administratively DOWN—The interface has been shut down by using the command. shutdown Data link layer state of the interface. UP (spoofing) means that the data link layer protocol of the interface is up, but the link is an Line protocol state on-demand link or does not exist.
Page 55: Display Interface Null
# Display information about all loopback interfaces in down state and the causes. <Sysname> display interface loopback brief down Brief information on interfaces in route mode: Link: ADM - administratively down; Stby - standby Interface Link Cause Loop1 Administratively Table 12 Command output Field Description Physical link state of the interface:...
Page 56: Interface Loopback
Parameters 0 : Specifies Null 0. brief : Displays brief interface information. If you do not specify this keyword, the command displays detailed interface information. description : Displays complete interface descriptions. If you do not specify this keyword, the command displays only the first 27 characters of interface descriptions. down : Displays information about interfaces in down state and the causes.
Page 57: Interface Null
Syntax interface loopback interface-number undo interface loopback interface-number Default No loopback interfaces exist. Views System view Predefined user roles network-admin Parameters interface-number : Specifies a loopback interface by its number. The value range for this argument is 0 to 127. Usage guidelines The physical layer state and link layer protocols of a loopback interface are always up unless the loopback interface is manually shut down.
Page 58: Reset Counters Interface Loopback
<Sysname> system-view [Sysname] interface null 0 [Sysname-NULL0] reset counters interface loopback Use reset counters interface loopback to clear the statistics on the specified or all loopback interfaces. Syntax reset counters interface loopback [ interface-number ] Views User view Predefined user roles network-admin Parameters interface-number : Specifies a loopback interface by its number, which can be the number of...
Page 59: Shutdown
Usage guidelines To determine whether the null interface works correctly within a period by collecting the traffic statistics within that period, first use the reset counters interface [ null [ 0 ] ] command to clear the statistics. Then have the interface automatically collect the statistics. Examples # Clear the statistics on Null 0.
Page 60: Bulk Interface Configuration Commands
Bulk interface configuration commands display interface range Use display interface range to display information about named interface ranges created by using the interface range name command. Syntax display interface range [ name name ] Views Any view Predefined user roles network-admin network-operator Parameters...
Page 61: Interface Range Name
interface-type interface-number1 to interface-type interface-number2 . The start interface number must be identical to or lower than the end interface number. Usage guidelines Use this command to bulk configure multiple interfaces with the same feature instead of configuring them one by one. For example, execute the shutdown command in interface range view to shut down a range of interfaces.
Page 62 Use interface range name name without the interface keyword to enter the view of a named interface range. Use undo interface range name to delete the interface range with the specified name. Syntax interface range name name [ interface interface-list ] undo interface range name name Views System view...
Page 63 • Do not assign both an aggregate interface and any of its member interfaces to an interface range. Some commands, after being executed on both an aggregate interface and its member interfaces, can break up the aggregation. • Understand that the more interfaces you specify, the longer the command execution time. •...
Page 64: Mac Address Table Commands
MAC address table commands This document covers the configuration of unicast MAC address entries, including static, dynamic, blackhole, and multiport unicast MAC address entries. For more information about configuring static multicast MAC address entries, see IGMP snooping in IP Multicast Configuration Guide. display mac-address Use display mac - address to display MAC address entries.
Page 65: Display Mac-Address Aging-Time
entry has lower priority. The device prefers to use the multiport unicast entry to forward frames destined for the MAC address in the entry. Examples # Display MAC address entries for VLAN 100. <Sysname> display mac-address vlan 100 MAC Address VLAN ID State Port/NickName...
Page 66: Display Mac-Address Mac-Learning
Predefined user roles network-admin network-operator Examples # Display the aging timer for dynamic MAC address entries. <Sysname> display mac-address aging-time MAC address aging time: 300s. Related commands mac-address timer display mac-address mac-learning Use display mac-address mac-learning to display the global MAC address learning status and the MAC learning status of the specified interface or all interfaces.
Page 67: Display Mac-Address Mac-Move
Related commands mac-address mac-learning enable display mac-address mac-move Use display mac-address mac-move to display the MAC address move records after the device is started. Syntax display mac-address mac-move [ slot slot-number ] Views Any view Predefined user roles network-admin network-operator Parameters slot slot-number : Specifies an IRF member device by its member ID.
Page 68: Display Mac-Address Statistics
Field Description Source port Interface from which the MAC address was moved. Last time Last time when the MAC address was moved. Number of MAC address moves after the device is started. For a MAC address record, the number of MAC address moves is increased by 1 Times when a new MAC address move has the same MAC address, VLAN, Current Port, and Source Port fields as the MAC address record.
Page 69: Mac-Address (Interface View)
Field Description Number of static unicast MAC address entries added Static Unicast Address (User-defined) Count by users. Number of static unicast MAC address entries added Static Unicast Address (System-defined) Count by the system. Total Unicast MAC Addresses In Use Number of unicast MAC address entries. Maximum number of unicast MAC address entries Total Unicast MAC Addresses Available allowed.
Page 70: Mac-Address (System View)
address entries. For a MAC address, a manually configured static entry takes precedence over a dynamically learned entry. To improve the security for the user device connected to an interface, manually configure a static entry to bind the user device to the interface. Then, the frames destined for the user device (for example, Host A) are always sent out of the interface.
Page 71 undo mac-address multiport mac-address interface interface-list vlan vlan-id undo mac-address [ multiport ] [ [ mac-address ] vlan vlan-id ] Default The system is not configured with MAC address entries. Views System view Predefined user roles network-admin Parameters dynamic : Specifies dynamic MAC address entries. static : Specifies static MAC address entries.
Page 72: Mac-Address Mac-Learning Enable
an entry. When you execute the command again with the same MAC address and VLAN but with different interfaces, this command adds the specified interfaces for this entry. A static or blackhole entry can overwrite a dynamic entry, but not vice versa. If you execute the undo mac-address command without specifying any parameters, this command deletes all unicast MAC address entries and static multicast MAC address entries.
Page 73: Mac-Address Mac-Move Fast-Update
Predefined user roles network-admin Usage guidelines To prevent the MAC address table from becoming saturated, you can disable MAC address learning. For example, a number of packets with different source MAC addresses reaching a device can affect the MAC address table update. To avoid such attacks, you can disable MAC address learning by following these guidelines: •...
Page 74: Mac-Address Mac-Roaming Enable
Default ARP fast update is disabled for MAC address moves. Views System view Predefined user roles network-admin Examples # Enable ARP fast update for MAC address moves. <Sysname> system-view [Sysname] mac-address mac-move fast-update mac-address mac-roaming enable Use mac-address mac-roaming enable to enable MAC address synchronization. Use undo mac-address mac-roaming enable to disable MAC address synchronization.
Page 75: Mac-Address Max-Mac-Count Enable-Forwarding
Syntax mac-address max-mac-count count undo mac-address max-mac-count Default The number of MAC addresses that can be learned on an interface is not limited. Views Layer 2 Ethernet interface view Predefined user roles network-admin Parameters count : Specifies the maximum number of MAC addresses that can be learned on an interface. When the argument is set to 0, the interface is not allowed to learn MAC addresses.
Page 76: Mac-Address Notification Mac-Move
Predefined user roles network-admin Examples # Configure GigabitEthernet 1/0/1 to learn a maximum of 600 MAC address entries. <Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] mac-address max-mac-count 600 # Disable the device from forwarding unknown frames received on GigabitEthernet 1/0/1 after the MAC learning limit on GigabitEthernet 1/0/1 is reached.
Page 77: Mac-Address Notification Mac-Move Suppression (Interface View)
Within a detection interval, an IRF member device can record MAC address move information for a maximum of 20 MAC addresses. The records are ranked in descending order of MAC move counts. When the MAC move count of a new record is higher than the MAC move count of any existing record, the device performs the following operations: •...
Page 78: Mac-Address Notification Mac-Move Suppression (System View)
Usage guidelines This feature shuts an interface down when a MAC address has been moved to or from the interface more than the suppression threshold within a MAC move detection interval. The shutdown interface automatically goes up after a suppression interval. Also, you can use the shutdown command and then the undo shutdown command to bring up the interface.
Page 79: Mac-Address Static Source-Check Enable
If you set the suppression interval or suppression threshold multiple times, the most recent configuration applies. The suppression interval setting is independent of the suppression threshold setting. Examples # Set the suppression interval to 40 seconds and the suppression threshold to 1 for MAC address moves.
Page 80: Snmp-Agent Trap Enable Mac-Address
Default The aging timer is 300 seconds for dynamic MAC address entries. Views System view Predefined user roles network-admin Parameters aging seconds : Specifies an aging timer for dynamic MAC address entries, in seconds. The value range for the seconds argument is 10 to 1000000. no-aging : Configures dynamic MAC address entries not to age.
Page 81 Usage guidelines To report critical MAC address move events to an NMS, enable SNMP notifications for the MAC address table. For MAC address move event notifications to be sent correctly, you must also configure SNMP on the device. When SNMP notifications are disabled for the MAC address table, the device sends the generated logs to the information center.
Page 82: Mac Information Commands
MAC Information commands mac-address information enable (interface view) Use mac-address information enable to enable MAC Information on an interface. Use undo mac-address information enable to disable MAC Information on an interface. Syntax mac-address information enable { added | deleted } undo mac-address information enable { added | deleted } Default MAC Information is disabled on an interface.
Page 83: Mac-Address Information Interval
Views System view Predefined user roles network-admin Usage guidelines Before you enable MAC Information on an interface, enable MAC Information globally. Examples # Enable MAC Information globally. <Sysname> system-view [Sysname] mac-address information enable Related commands mac-address information enable (interface view) mac-address information interval Use mac-address information interval to set the MAC change notification interval.
Page 84: Mac-Address Information Queue-Length
Syntax mac-address information mode { syslog | trap } undo mac-address information mode Default SNMP notifications are sent to notify MAC changes. Views System view Predefined user roles network-admin Parameters syslog : Specifies that the device sends syslog messages to notify MAC changes. trap : Specifies that the device sends SNMP notifications to notify MAC changes.
Page 85 • The device sends syslog messages or SNMP notifications only if the MAC change notification interval expires. Examples # Set the MAC Information queue length to 600. <Sysname> system-view [Sysname] mac-address information queue-length 600...
Page 86: Ethernet Link Aggregation Commands
Ethernet link aggregation commands bandwidth Use bandwidth to set the expected bandwidth for an interface. Use undo bandwidth to restore the default. Syntax bandwidth bandwidth-value undo bandwidth Default The expected bandwidth (in kbps) is the interface baud rate divided by 1000. Views Layer 2 aggregate interface view Predefined user roles...
Page 87: Description
This command might fail to restore the default settings for some commands for reasons such as command dependencies and system restrictions. Use the display this command in interface view to identify these commands, and then use their undo forms or follow the command reference to restore their default settings.
Page 88 Predefined user roles network-admin network-operator Parameters bridge-aggregation : Specifies Layer 2 aggregate interfaces. interface-number : Specifies an existing aggregate interface number. brief : Displays brief interface information. If you do not specify this keyword, the command displays detailed interface information. description : Displays complete interface descriptions.
Page 89 0 aborts, 0 deferred, 0 collisions, 0 late collisions - lost carrier, - no carrier # Display brief information about Layer 2 aggregate interface Bridge-Aggregation 1. <Sysname> display interface bridge-aggregation 1 brief Brief information on interfaces in bridge mode: Link: ADM - administratively down; Stby - standby Speed: (a) –...
Page 90 Field Description Tagged VLANs VLAN whose packets are sent out of this interface with a tag. Untagged VLANs VLAN whose packets are sent out of this interface without a tag. Time when the reset counters interface command was last used to clear the interface statistics. This field displays Never if Last clearing of counters the reset counters interface command has never been used on the interface since device startup.
Page 91: Display Lacp System-Id
display lacp system-id Use display lacp system-id to display the local system ID. Syntax display lacp system-id Views Any view Predefined user roles network-admin network-operator Usage guidelines You can use the lacp system-priority command to change the LACP priority of the local system.
Page 92 interface-number : Specifies an existing aggregate interface number. Usage guidelines If you do not specify the interface keyword, the command displays the global link-aggregation load sharing modes. If you specify the interface keyword, but do not specify an interface, the command displays all group-specific load sharing modes.
Page 93: Display Link-Aggregation Member-Port
Field Description User-configured link-aggregation load sharing mode. In this destination-mac address, source-mac sample output, traffic is load shared based on source and address destination MAC addresses. display link-aggregation member-port Use display link-aggregation member-port to display detailed link aggregation information for the specified member ports. Syntax display link-aggregation member-port [ interface-list ] Views...
Page 94 GigabitEthernet1/0/2: Aggregate Interface: Bridge-Aggregation10 Local: Port Number: 2 Port Priority: 32768 Oper-Key: 2 Flag: {ACDEF} Remote: System ID: 0x8000, 000f-e267-6c6a Port Number: 26 Port Priority: 32768 Oper-Key: 2 Flag: {ACDEF} Received LACP Packets: 5 packet(s) Illegal: 0 packet(s) Sent LACP Packets: 7 packet(s) Table 20 Command output Field Description...
Page 95: Display Link-Aggregation Summary
display link-aggregation summary Use display link-aggregation summary to display brief information about all aggregation groups. Syntax display link-aggregation summary Views Any view Predefined user roles network-admin network-operator Usage guidelines Static link aggregation groups cannot obtain information about the peer groups. As a result, the Partner ID field displays None for a static link aggregation group.
Page 96: Display Link-Aggregation Verbose
Field Description System ID of the peer system, which contains the peer system LACP priority Partner ID and the peer system MAC address. Selected Ports Total number of Selected ports. Unselected Ports Total number of Unselected ports. Individual Ports Total number of Individual ports. Share Type Load sharing type.
Page 97 Loadsharing Type: Shar Management VLANs: None System ID: 0x8000, 000f-e267-6c6a Local: Port Status Priority Index Oper-Key Flag GE1/0/1 32768 {ACDEF} GE1/0/2 32768 {ACDEF} GE1/0/3 32768 {AG} Remote: Actor Priority Index Oper-Key SystemID Flag GE1/0/1(R) 32768 0x8000, 000f-e267-57ad {ACDEF} GE1/0/2 32768 0x8000, 000f-e267-57ad {ACDEF} GE1/0/3 32768...
Page 98: Interface Bridge-Aggregation
Field Description LACP state flags. This field is one byte long, represented by ABCDEFGH from the least significant bit to the most significant bit. A letter appears when its bit is 1 and does not appear when its bit is 0. •...
Page 99: Lacp Edge-Port
Use undo interface bridge-aggregation to delete a Layer 2 aggregate interface. Syntax interface bridge-aggregation interface-number undo interface bridge-aggregation interface-number Default No Layer 2 aggregate interfaces exist. Views System view Predefined user roles network-admin Parameters interface-number : Specifies a Layer 2 aggregate interface number. The value range for the interface-number argument is 1 to 1024.
Page 100: Lacp Mode
This command takes effect only on an aggregate interface corresponding to a dynamic aggregation group. Link-aggregation traffic redirection cannot operate correctly on an edge aggregate interface. Examples # Configure Layer 2 aggregate interface Bridge-Aggregation 1 as an edge aggregate interface. <Sysname>...
Page 101: Lacp Select Speed
Views Layer 2 Ethernet interface view Predefined user roles network-admin Examples # Enable the short LACP timeout interval (3 seconds) on GigabitEthernet 1/0/1. <Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] lacp period short lacp select speed Use lacp select speed to configure a dynamic aggregation group to use port speed as the prioritized criterion for reference port selection.
Page 102: Lacp System-Priority
[Sysname-Bridge-Aggregation1] lacp select speed lacp system-priority Use lacp system - priority to set the system LACP priority. Use undo lacp system-priority to restore the default. Syntax lacp system-priority priority undo lacp system-priority Default The system LACP priority is 32768. Views System view Predefined user roles network-admin...
Page 103: Link-Aggregation Global Load-Sharing Mode
destination ip-address : Specifies the unicast destination IP address of BFD sessions. The destination IP address cannot be 0.0.0.0. Usage guidelines Make sure the source and destination IP addresses are consistent between the two ends of an aggregate link. For example, if you execute link-aggregation bfd ipv4 source 1.1.1.1 destination 2.2.2.2 at the local end, execute link-aggregation bfd ipv4 source 2.2.2.2 destination 1.1.1.1 at the peer end.
Page 104: Link-Aggregation Ignore Vlan
destination-mac : Distributes traffic based on destination MAC addresses. destination-port : Distributes traffic based on destination ports. ingress-port : Distributes traffic based on ingress ports. source-ip : Distributes traffic based on source IP addresses. source-mac : Distributes traffic based on source MAC addresses. source-port : Distributes traffic based on source ports.
Page 105: Link-Aggregation Lacp Traffic-Redirect-Notification Enable
Predefined user roles network-admin Parameters vlan-id-list : Specifies a space-separated list of up to 10 VLAN items. Each item specifies a VLAN ID or a range of VLAN IDs in the form of vlan-id1 to vlan-id2 . The value range for VLAN IDs is 1 to 4094.
Page 106: Link-Aggregation Load-Sharing Mode
To prevent packet loss that might occur when a slot reboots, do not enable spanning tree together with link-aggregation traffic redirection. Link-aggregation traffic redirection cannot operate correctly on an edge aggregate interface. Global link-aggregation traffic redirection settings take effect on all aggregation groups. A link aggregation group preferentially uses the group-specific link-aggregation traffic redirection settings.
Page 107: Link-Aggregation Load-Sharing Mode Local-First
• Source MAC. • Destination MAC. • Source IP and destination IP. • Source MAC and destination MAC. Examples # Configure Layer 2 aggregation group 1 to load share packets based on destination MAC addresses. <Sysname> system-view [Sysname] interface bridge-aggregation 1 [Sysname-Bridge-Aggregation1] link-aggregation load-sharing mode destination-mac Related commands link-aggregation global load-sharing mode...
Page 108: Link-Aggregation Port-Priority
Syntax link-aggregation mode dynamic undo link-aggregation mode Default An aggregation group operates in static aggregation mode. Views Layer 2 aggregate interface view Predefined user roles network-admin Examples # Configure Layer 2 aggregation group 1 to operate in dynamic aggregation mode. <Sysname>...
Page 109: Link-Aggregation Selected-Port Maximum
link-aggregation selected-port maximum Use link-aggregation selected-port maximum to set the maximum number of Selected ports allowed in an aggregation group. Use undo link-aggregation selected-port maximum to restore the default. Syntax link-aggregation selected-port maximum max-number undo link-aggregation selected-port maximum Default The maximum number of Selected ports allowed in an aggregation group is 8. Views Layer 2 aggregate interface view Predefined user roles...
Page 110: Link-Aggregation Selected-Port Minimum
link-aggregation selected-port minimum Use link-aggregation selected-port minimum to set the minimum number of Selected ports in an aggregation group. Use undo link-aggregation selected-port minimum to restore the default. Syntax link-aggregation selected-port minimum min-number undo link-aggregation selected-port minimum Default The minimum number of Selected ports in an aggregation group is not specified. Views Layer 2 aggregate interface view Predefined user roles...
Page 111: Reset Counters Interface
Views Layer 2 Ethernet interface view Predefined user roles network-admin Parameters group-id : Specifies an aggregation group by its aggregate interface number. The value range for the number argument is 1 to 1024. force : Enables the current interface to synchronize the attribute configurations from the aggregate interface.
Page 112: Reset Lacp Statistics
<Sysname> reset counters interface bridge-aggregation 1 reset lacp statistics Use reset lacp statistics to clear LACP statistics for the specified link aggregation member ports. Syntax reset lacp statistics [ interface interface-list ] Views User view Predefined user roles network-admin Parameters interface interface-list : Specifies a list of link aggregation member ports, in the format interface-type interface-number1 [ to interface-type interface-number2 ] .
Page 113: Port Isolation Commands
Port isolation commands display port-isolate group Use display port-isolate group to display port isolation group information. Syntax display port-isolate group [ group-id ] Views Any view Predefined user roles network-admin network-operator Parameters group-id : Specifies an isolation group by its ID. The value range is 1 to 8. Examples # Display all isolation groups.
Page 114: Port-Isolate Enable
port-isolate enable Use port-isolate enable to assign a port to an isolation group. Use undo port-isolate enable to remove a port from an isolation group. Syntax port-isolate enable group group-id undo port-isolate enable Default The port is not assigned to any isolation group. Views Layer 2 Ethernet interface view Layer 2 aggregate interface view...
Page 115 undo port-isolate group { group-id | all } Default No isolation groups exist. Views System view Predefined user roles network-admin Parameters group-id : Specifies an isolation group by its ID. The value range is 1 to 8. all : Deletes all isolation groups. Examples # Create isolation group 1.
Page 116: Spanning Tree Commands
Spanning tree commands active region-configuration Use active region-configuration to activate your MST region configuration. Syntax active region-configuration Views MST region view Predefined user roles network-admin Usage guidelines When you configure MST region parameters, MSTP launches a new spanning tree calculation process that might cause network topology instability.
Page 117: Check Region-Configuration
Default BPDU drop is disabled on a port. Views Layer 2 Ethernet interface view Predefined user roles network-admin Examples # Enable BPDU drop on port GigabitEthernet 1/0/1. <Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] bpdu-drop any check region-configuration Use check region-configuration to display MST region pre-configuration information. Syntax check region-configuration Views...
Page 118: Display Stp
Table 24 Command output Field Description Format selector Format selector of the MST region, which is 0 (not configurable). Region name MST region name. Revision level Revision level of the MST region. Instance VLANs Mapped VLAN-to-instance mappings in the MST region. Related commands active region-configuration instance...
Page 119 slot slot-number : Specifies an IRF member device by its member ID. If you do not specify a member device, this command displays information for all member devices. Usage guidelines In STP or RSTP mode, the command output is sorted by port name. •...
Page 120 Field Description Port role: • ALTE—The port is an alternate port. • BACK—The port is a backup port. • Role ROOT—The port is a root port. • DESI—The port is a designated port. • MAST—The port is a master port. •...
Page 121 Port Config- Digest-Snooping : Disabled Rapid transition : True Num of VLANs mapped : 0 Port times : Hello 2s MaxAge 20s FwdDelay 15s MsgAge 0s RemHops 20 BPDU sent : 32 TCN: 0, Config: 0, RST: 0, MST: 32 BPDU received TCN: 0, Config: 0, RST: 0, MST: 2 -------[MSTI 1 Global Info]-------...
Page 122 Port edged : Config=disabled, Active=disabled Point-to-Point : Config=auto, Active=true Transmit limit : 10 packets/hello-time Protection type : Config=none, Active=none Rapid transition : False Port times : Hello 2s MaxAge 20s FwdDelay 15s MsgAge 2s -------[VLAN 2 Global Info]------- Protocol status : Enabled Bridge ID : 32768.000f-e200-2200...
Page 123 Field Description Major parameters for the bridge: • Hello—Hello timer. • Bridge times MaxAge—Maximum age timer. • FwdDelay—Forward delay timer. • MaxHops—Maximum hops within the MST region. Root ID/ERPC CIST root ID and external path cost (the path cost from the device to the CIST root). CIST regional root ID and internal path cost (the path cost from the device to the RegRoot ID/IRPC CIST regional root).
Page 124 Field Description Whether spanning tree protection is configured on the port: • Config—Configured spanning tree protection feature. • Active—Effective spanning tree protection feature. Spanning tree protection features are as follows: • ROOT—Root guard. Protection type • LOOP—Loop guard. • BPDU—BPDU guard. •...
Page 125: Display Stp Abnormal-Port
Field Description Port state transition delay (in seconds, which is the same as the port state transition Forward delay(s) delay for VLAN 1 in PVST mode). Interval for the root bridge to send BPDUs (in seconds, which is the same as the Hello time(s) interval for VLAN 1 in PVST mode).
Page 126: Display Stp Bpdu-Statistics
Field Description Reason that the port was blocked: • Root-Protected—Root guard feature. • Loop-Protected—Loop guard feature. • Loopback-Protected—Self-loop protection. A port in the MSTI receives a BlockReason BPDU sent by itself. • Disputed—Dispute guard. A port receives a low-priority BPDU from a non-blocked designated port in forwarding or learning state.
Page 127 Instance-Independent: Type Count Last Updated --------------------------- ---------- ----------------- Invalid BPDUs Looped-back BPDUs Max-aged BPDUs TCN sent TCN received TCA sent TCA received 10:33:12 01/13/2011 Config sent Config received RST sent RST received MST sent 10:33:11 01/13/2011 MST received 10:37:43 01/13/2011 Instance 0: Type Count...
Page 128: Display Stp Down-Port
Max-hoped BPDUs TC detected 10:32:40 01/13/2010 TC sent 8844 10:33:11 01/13/2010 TC received 1426 10:33:32 01/13/2010 PVID inconsistency BPDUs Table 28 Command output Field Description Port Port name. Instance-Independent Statistics not related to a specific MSTI. Type Statistical item. Looped-back BPDUs Number of BPDUs sent and then received by the same port.
Page 129: Display Stp History
Predefined user roles network-admin network-operator Examples # Display information about ports that were shut down by spanning tree protection features. <Sysname> display stp down-port Down Port Reason GigabitEthernet1/0/1 BPDU protection Table 29 Command output Field Description Down Port Name of a port that was shut down by the spanning tree protection features. Reason that the port was shut down: •...
Page 130 • If you specify a VLAN list, this command applies to the specified VLANs. In MSTP mode, the command output is sorted by MSTI ID and by port role calculation time in each MSTI. • If you do not specify an MSTI, this command applies to all MSTIs. •...
Page 131: Display Stp Region-Configuration
display stp region-configuration Use display stp region-configuration to display effective MST region configuration. Syntax display stp region-configuration Views Any view Predefined user roles network-admin network-operator Examples # In MSTP mode, display effective MST region configuration. <Sysname> display stp region-configuration Oper Configuration Format selector Region name : hello...
Page 132: Display Stp Tc
Syntax display stp root Views Any view Predefined user roles network-admin network-operator Examples # In MSTP mode, display the root bridge information of all spanning trees. <Sysname> display stp root MST ID Root Bridge ID ExtPathCost IntPathCost Root Port 0.00e0-fc0e-6554 200200 GigabitEthernet1/0/1 # In PVST mode, display the root bridge information of all spanning trees.
Page 133: Instance
vlan-id2 must be equal to or greater than the value for vlan-id1 . The value range for the vlan-id argument is 1 to 4094. slot slot-number : Specifies an IRF member device by its member ID. If you do not specify a member device, this command displays information for all member devices.
Page 134: Region-Name
Default All VLANs are mapped to the CIST. Views MST region view Predefined user roles network-admin Parameters instance-id : Specifies an MSTI ID in the range of 0 to 4094. A value of 0 represents the CIST. The value range for the instance-id argument is 1 to 4094 for the undo instance command. vlan vlan-id-list : Specifies a space-separated list of up to 10 VLAN items.
Page 135: Reset Stp
Syntax region-name name undo region-name Default The MST region name of the device is its MAC address. Views MST region view Predefined user roles network-admin Parameters name : Specifies the MST region name, a string of 1 to 32 characters. Usage guidelines The MST region name, the VLAN-to-instance mapping table, and the MSTP revision level of a device determine the device's MST region.
Page 136: Revision-Level
Parameters interface interface-list : Specifies a space-separated list of up to 10 interface items. Each item specifies an interface or a range of interfaces in the form of interface-type interface-number 1 [ to interface-type interface-number 2 ] . The interface number for interface-number 2 must be equal to or greater than the interface number for interface-number 1 .
Page 137: Snmp-Agent Trap Enable Stp
instance region-name vlan-mapping modulo snmp-agent trap enable stp Use snmp-agent trap enable stp to enable SNMP notifications for new-root election events or spanning tree topology changes. Use undo snmp-agent trap enable stp to disable SNMP notifications for new-root election events or spanning tree topology changes. Syntax snmp-agent trap enable stp [ new-root | tc ] undo snmp-agent trap enable stp [ new-root | tc ]...
Page 138: Stp Bridge-Diameter
Syntax stp bpdu-protection undo stp bpdu-protection Default BPDU guard is globally disabled. Views System view Predefined user roles network-admin Examples # Enable BPDU guard globally. <Sysname> system-view [Sysname] stp bpdu-protection Related commands stp edged-port stp port bpdu-protection stp bridge-diameter Use stp bridge-diameter to set the network diameter. The switched network diameter refers to the maximum number of devices on the path for an edge device to reach another through the root bridge.
Page 139: Stp Compliance
network diameter. With the network diameter set to 7 (the default), the three timers are also set to their defaults. In STP, RSTP, or MSTP mode, each MST region is considered as a device. The configured network diameter of the switched network takes effect only on the CIST (or the common root bridge). In PVST mode, the configured network diameter takes effect only on the root bridges of the specified VLANs.
Page 140: Stp Config-Digest-Snooping
If this command is configured in Layer 2 aggregate interface view, it takes effect only on the aggregate interface. If this command is configured on a member port in an aggregation group, it takes effect only after the port leaves the aggregation group. Examples # Configure GigabitEthernet 1/0/1 to send only standard-format (802.1s) MSTP packets.
Page 141: Stp Cost
stp global config-digest-snooping stp cost Use stp cost to set the path cost of a port. Use undo stp cost to restore the default. Syntax stp [ instance instance-list | vlan vlan-id-list ] cost cost-value undo stp [ instance instance-list | vlan vlan-id-list ] cost Default The device automatically calculates the path costs of ports in each spanning tree based on the corresponding standard.
Page 142: Stp Dispute-Protection
If this command is configured on a member port in an aggregation group, is takes effect only after the port leaves the aggregation group. If you do not specify an MSTI or VLAN, this command sets the path cost of a port in the MSTP CIST or in the STP or RSTP spanning tree.
Page 143: Stp Edged-Port
stp edged-port Use stp edged-port to configure a port as an edge port. Use undo stp edged-port to restore the default. Syntax stp edged-port undo stp edged-port Default All ports are non-edge ports. Views Layer 2 Ethernet interface view Layer 2 aggregate interface view Predefined user roles network-admin Usage guidelines...
Page 144: Stp Global Config-Digest-Snooping
Use undo stp enable to disable the spanning tree feature. Syntax stp enable undo stp enable Default The spanning tree feature is enabled on all ports. Views Layer 2 Ethernet interface view Layer 2 aggregate interface view Predefined user roles network-admin Usage guidelines When you enable the spanning tree feature, the device operates in STP, RSTP, PVST, or MSTP...
Page 145: Stp Global Enable
Views System view Predefined user roles network-admin Usage guidelines For Digest Snooping to take effect, you must enable Digest Snooping both globally and on associated ports. As a best practice, first enable Digest Snooping on ports connected to third-party vendor devices and then enable the feature globally. Digest Snooping takes effect on the ports simultaneously, which reduces impact on the network.
Page 146: Stp Global Mcheck
Examples # Enable the spanning tree feature globally. <Sysname> system-view [Sysname] stp global enable Related commands stp enable stp mode stp global mcheck Use stp global mcheck to perform mCheck globally. Syntax stp global mcheck Views System view Predefined user roles network-admin Usage guidelines When a port on an MSTP, RSTP, or PVST device connects to an STP device and receives STP...
Page 147: Stp Log Enable Tc
Syntax stp ignore-pvid-inconsistency undo stp ignore-pvid-inconsistency Default Inconsistent PVID protection is enabled. Views System view Predefined user roles network-admin Usage guidelines This command takes effect only when the device is operating in PVST mode. Disabling inconsistent PVID protection might cause spanning tree calculation errors. To avoid such errors, make sure the following requirements are met: •...
Page 148: Stp Loop-Protection
<Sysname> system-view [Sysname] stp log enable tc stp loop-protection Use stp loop-protection to enable loop guard on a port. Use undo stp loop-protection to disable loop guard on a port. Syntax stp loop-protection undo stp loop-protection Default Loop guard is disabled. Views Layer 2 Ethernet interface view Layer 2 aggregate interface view...
Page 149: Stp Mcheck
Default The maximum number of hops for an MST region is 20. Views System view Predefined user roles network-admin Parameters hops : Specifies the maximum hops in the range of 1 to 40. Examples # Set the maximum hops of the MST region to 35. <Sysname>...
Page 150: Stp Mode
If this command is configured in Layer 2 aggregate interface view, it takes effect only on the aggregate interface. If this command is configured on a member port in an aggregation group, it takes effect only after the port leaves the aggregation group. Examples # Perform mCheck on GigabitEthernet 1/0/1.
Page 151: Stp No-Agreement-Check
[Sysname] stp mode stp Related commands stp enable stp global enable stp global mcheck stp mcheck stp vlan enable. stp no-agreement-check Use stp no-agreement-check to enable No Agreement Check on a port. Use undo stp no-agreement-check to disable No Agreement Check on a port. Syntax stp no-agreement-check undo stp no-agreement-check...
Page 152: Stp Point-To-Point
Syntax stp pathcost-standard { dot1d-1998 | dot1t | legacy } undo stp pathcost-standard Default The default standard used by the device is legacy. Views System view Predefined user roles network-admin Parameters dot1d-1998 : Configures the device to calculate the default path cost for ports based on IEEE 802.1d-1998.
Page 153: Stp Port Bpdu-Protection
Parameters auto : Specifies automatic detection of the link type. force-false : Specifies the non-point-to-point link type. force-true : Specifies the point-to-point link type. Usage guidelines When connecting to a non-point-to-point link, a port is incapable of rapid state transition. You can configure the link type as point-to-point for a Layer 2 aggregate interface or a port that operates in full duplex mode.
Page 154: Stp Port Priority
Parameters enable : Enables BPDU guard. disable : Disables BPDU guard. Usage guidelines If this command is configured in Layer 2 Ethernet interface view, it takes effect only on that interface. If this command is configured in Layer 2 aggregate interface view, it takes effect only on the aggregate interface.
Page 155: Stp Port Shutdown Permanent
priority : Specifies the port priority in the range of 0 to 240 in increments of 16 (as in 0, 16, 32). Usage guidelines The smaller the value, the higher the port priority. If all ports on your device use the same priority value, the port priority depends on the port index.
Page 156: Stp Port-Log
For more information about the port status detection timer, see device management configuration in Fundamentals Configuration Guide. Examples # Disable the device from reactivating edge ports shut down by BPDU guard. <Sysname> system-view [Sysname] stp port shutdown permanent stp port-log Use stp port-log to enable outputting port state transition information.
Page 157: Stp Priority
%Aug 16 00:49:41:856 2006 Sysname STP/3/STP_DISCARDING: VLAN 2's GigabitEthernet1/0/1 has been set to discarding state. %Aug 16 00:49:41:856 2006 Sysname STP/3/STP_FORWARDING: VLAN 2's GigabitEthernet1/0/2 has been set to forwarding state. The output shows that GigabitEthernet 1/0/1 in VLAN 2 transited to the discarding state and GigabitEthernet 1/0/2 in VLAN 2 transited to the forwarding state.
Page 158: Stp Pvst-Bpdu-Protection
stp pvst-bpdu-protection Use stp pvst-bpdu-protection to enable PVST BPDU guard. Use undo stp pvst-bpdu-protection to disable PVST BPDU guard. Syntax stp pvst-bpdu-protection undo stp pvst-bpdu-protection Default PVST BPDU guard is disabled. Views System view Predefined user roles network-admin Usage guidelines PVST BPDU guard enables an MSTP-enabled device to shut down a port if the port receives PVST BPDUs.
Page 159: Stp Role-Restriction
Usage guidelines After you enter MST region view, you can configure MST region parameters, including the region name, VLAN-to-instance mappings, and revision level. Examples # Enter MST region view. <Sysname> system-view [Sysname] stp region-configuration [Sysname-mst-region] stp role-restriction Use stp role-restriction to enable port role restriction. Use undo stp role-restriction to disable port role restriction.
Page 160: Stp Root Secondary
undo stp [ instance instance-list | vlan vlan-id-list ] root Default The device is not a root bridge. Views System view Predefined user roles network-admin Parameters instance instance-list : Specifies a space-separated list of up to 10 MSTI items. Each item specifies an MSTI or a range of MSTIs in the form of instance-id1 [ to instance-id2 ] .
Page 161: Stp Root-Protection
Predefined user roles network-admin Parameters instance instance-list : Specifies a space-separated list of up to 10 MSTI items. Each item specifies an MSTI or a range of MSTIs in the form of instance-id1 [ to instance-id2 ] . The value for instance-id2 must be equal to or greater than the value for instance-id1 . The value range for the instance-id argument is 0 to 4094, and the value 0 represents the CIST.
Page 162: Stp Tc-Protection
Usage guidelines On a port, the loop guard feature and the root guard feature are mutually exclusive. If this command is configured in Layer 2 Ethernet interface view, it takes effect only on that interface. If this command is configured in Layer 2 aggregate interface view, it takes effect only on the aggregate interface.
Page 163: Stp Tc-Protection Threshold
stp tc-protection threshold Use stp tc-protection threshold to set the maximum number of forwarding address entry flushes that the device can perform every 10 seconds. Use undo stp tc-protection threshold to restore the default. Syntax stp tc-protection threshold number undo stp tc-protection threshold Default By default, the device can perform a maximum of 6 forwarding address entry flushes every 10 seconds.
Page 164: Stp Tc-Snooping
Usage guidelines When TC-BPDU transmission restriction is enabled on a port, the port does not send TC-BPDUs to other ports. It also does not delete MAC address entries. If this command is configured in Layer 2 Ethernet interface view, it takes effect only on that interface. If this command is configured in Layer 2 aggregate interface view, it takes effect only on the aggregate interface.
Page 165: Stp Timer Hello
Syntax stp [ vlan vlan-id-list ] timer forward-delay time undo stp [ vlan vlan-id-list ] timer forward-delay Default The forward delay timer is 1500 centiseconds. Views System view Predefined user roles network-admin Parameters vlan vlan-id-list : Specifies a space-separated list of up to 10 VLAN items. Each item specifies a VLAN or a range of VLANs in the form of vlan-id1 [ to vlan-id2 ] .
Page 166: Stp Timer Max-Age
Syntax stp [ vlan vlan-id-list ] timer hello time undo stp [ vlan vlan-id-list ] timer hello Default The hello time is 200 centiseconds. Views System view Predefined user roles network-admin Parameters vlan vlan-id-list : Specifies a space-separated list of up to 10 VLAN items. Each item specifies a VLAN or a range of VLANs in the form of vlan-id1 [ to vlan-id2 ] .
Page 167: Stp Timer-Factor
undo stp [ vlan vlan-id-list ] timer max-age Default The max age is 2000 centiseconds. Views System view Predefined user roles network-admin Parameters vlan vlan-id-list : Specifies a space-separated list of up to 10 VLAN items. Each item specifies a VLAN or a range of VLANs in the form of vlan-id1 [ to vlan-id2 ] . The value for vlan-id2 must be equal to or greater than the value for vlan-id1 .
Page 168: Stp Transmit-Limit
undo stp timer-factor Default The timeout factor of the device is set to 3. Views System view Predefined user roles network-admin Parameters factor : Specifies the timeout factor in the range of 1 to 20. Usage guidelines In a stable network, each non-root-bridge forwards configuration BPDUs to surrounding devices at the interval of hello time to determine whether any link fails.
Page 169: Stp Vlan Enable
Parameters limit : Specifies the BPDU transmission rate in the range of 1 to 255. Usage guidelines The maximum number of BPDUs a port can send within each hello time equals the BPDU transmission rate plus the hello timer value. A larger BPDU transmission rate value requires more system resources.
Page 170: Vlan-Mapping Modulo
Examples # In PVST mode, globally enable the spanning tree feature and then enable the spanning tree feature for VLAN 2. <Sysname> system-view [Sysname] stp mode pvst [Sysname] stp global enable [Sysname] stp vlan 2 enable Related commands stp enable stp global enable stp mode vlan-mapping modulo...
Page 171 revision-level...
Page 172: Loop Detection Commands
Loop detection commands display loopback-detection Use display loopback-detection to display the loop detection configuration and status. Syntax display loopback-detection Views Any view Predefined user roles network-admin network-operator Example # Display the loop detection configuration and status. <Sysname> display loopback-detection Loopback detection is enabled. Loopback detection interval is 30 second(s).
Page 173 Use undo loopback-detection action to restore the default. Syntax In Layer 2 Ethernet interface view: loopback-detection action { block | no-learning | shutdown } undo loopback-detection action In Layer 2 aggregate interface view: loopback-detection action shutdown undo loopback-detection action Default When the device detects a loop on a port, it generates a log but performs no action on the port.
Page 174: Loopback-Detection Enable
loopback-detection enable Use loopback-detection enable to enable loop detection on a per-port basis. Use undo loopback-detection enable to disable loop detection on a port. Syntax loopback-detection enable vlan { vlan-id-list | all } undo loopback-detection enable vlan { vlan-id-list | all } Default Loop detection is disabled on ports.
Page 175: Loopback-Detection Global Enable
Default When the device detects a loop on a port, it generates a log but performs no action on the port. Views System view Predefined user roles network-admin Parameters shutdown : Enables the shutdown mode. If a loop is detected, the device generates a log and shuts down the port.
Page 176: Loopback-Detection Interval-Time
Usage guidelines To enable loop detection on a per-port basis, use the loopback-detection enable command in interface view. The loop protection action on a port can be triggered even if loop detection is disabled on the port when the following requirements are met: •...
Page 177: Vlan Commands
VLAN commands Basic VLAN commands bandwidth Use bandwidth to set the expected bandwidth of an interface. Use undo bandwidth to restore the default. Syntax bandwidth bandwidth-value undo bandwidth Default The expected bandwidth (in kbps) is the interface baud rate divided by 1000. Views VLAN interface view Predefined user roles...
Page 178: Description
Usage guidelines CAUTION: The default command might interrupt ongoing network services. Make sure you are fully aware of the impact of this command when you use it on a live network. This command might fail to restore the default settings for some commands for reasons such as command dependencies or system restrictions.
Page 179: Display Interface Vlan-Interface
# Configure the description of VLAN-interface 2 as linktoPC56. <Sysname> system-view [Sysname] vlan 2 [Sysname-vlan2] quit [Sysname] interface vlan-interface 2 [Sysname-Vlan-interface2] description linktoPC56 Related commands display interface vlan-interface display vlan display interface vlan-interface Use display interface vlan-interface to display VLAN interface information. Syntax display interface vlan-interface [ interface-number ] [ brief [ description | down ] ]...
Page 180 <Sysname> display interface vlan-interface 2 brief Brief information on interfaces in route mode: Link: ADM - administratively down; Stby - standby Protocol: (s) - spoofing Interface Link Protocol Primary IP Description Vlan2 DOWN DOWN Table 35 Command output Field Description Vlan-interface2 VLAN interface name.
Page 181: Display Vlan
Field Description Physical link state of the interface: • UP—The interface is physically up. • DOWN—The interface is physically down. • ADM—The interface has been shut down by using the Link shutdown command. To restore the physical state of the interface, use the command.
Page 182 Examples # Display information about VLAN 2. <Sysname> display vlan 2 VLAN ID: 2 VLAN type: Static Route interface: Not configured Description: VLAN 0002 Name: VLAN 0002 Tagged ports: None Untagged ports: GigabitEthernet1/0/1 GigabitEthernet1/0/2 GigabitEthernet1/0/3 # Display information about VLAN 3. <Sysname>...
Page 183: Display Vlan Brief
display vlan brief Use display vlan brief to display brief VLAN information. Syntax display vlan brief Views Any view Predefined user roles network-admin network-operator Examples # Display brief VLAN information. <Sysname> display vlan brief Brief information about all VLANs: Supported Minimum VLAN ID: 1 Supported Maximum VLAN ID: 4094 Default VLAN ID: 1 VLAN ID...
Page 184: Interface Vlan-Interface
interface vlan-interface Use interface vlan-interface to create a VLAN interface and enter its view, or enter the view of an existing VLAN interface. Use undo interface vlan-interface to delete a VLAN interface. Syntax interface vlan-interface interface-number undo interface vlan-interface interface-number Default No VLAN interfaces exist.
Page 185: Name
Views VLAN interface view Predefined user roles network-admin Parameters size : Sets the MTU in bytes. The value range for this argument is 46 to 1500. Usage guidelines If you configure both the mtu and ip mtu commands on a VLAN interface, the MTU set by the ip mtu command is used for fragmentation.
Page 186: Reset Counters Interface Vlan-Interface
[Sysname-vlan2] name test vlan Related commands display vlan reset counters interface vlan-interface Use reset counters interface vlan-interface to clear statistics on a VLAN interface. Syntax reset counters interface vlan-interface [ interface-number ] Views User view Predefined user roles network-admin Parameters vlan-interface interface-number : Specifies a VLAN interface by its number.
Page 187: Vlan
Usage guidelines When you use this command to shut down a VLAN interface, the VLAN interface remains in DOWN (Administratively) state. In this case, the VLAN interface state is not affected by the state of the ports in the VLAN. Before you configure parameters for a VLAN interface, use this command to shut it down to prevent the configuration from affecting the network.
Page 188: Port-Based Vlan Commands
Examples # Create VLAN 2 and enter its view. <Sysname> system-view [Sysname] vlan 2 [Sysname-vlan2] # Create VLAN 2 and VLANs 4 through 100. <Sysname> system-view [Sysname] vlan 2 4 to 100 Related commands display vlan Port-based VLAN commands display port Use display port to display information about hybrid or trunk ports.
Page 189: Port
Table 38 Command output Field Description Interface Interface name. PVID Port VLAN ID. VLAN Passing Existing VLANs allowed on the port. Tagged VLANs from which the port sends packets without removing VLAN tags. Untagged VLANs from which the port sends packets after removing VLAN tags. port Use port to assign the specified access ports to a VLAN.
Page 190: Port Hybrid Pvid
Use undo port access vlan to restore the default. Syntax port access vlan vlan-id undo port access vlan Default All access ports belong to VLAN 1. Views Layer 2 aggregate interface view Layer 2 Ethernet interface view Predefined user roles network-admin Parameters vlan-id : Specifies a VLAN by its ID in the range of 1 to 4094.
Page 191: Port Hybrid Vlan
Usage guidelines You can use a nonexistent VLAN as the PVID of a hybrid port. When you delete the PVID of a hybrid port by using the undo vlan command, the PVID setting of the port does not change. For correct packet transmission, set the same PVID for a local hybrid port and its peer. To enable a hybrid port to transmit packets from its PVID, you must assign the hybrid port to the PVID by using the port hybrid vlan command.
Page 192: Port Link-Type
untagged : Configures the port as an untagged member of the specified VLANs. An untagged member of a VLAN sends packets from the VLAN after removing VLAN tags. Usage guidelines A hybrid port can allow multiple VLANs. If you execute this command multiple times on a hybrid port, the hybrid port allows all the specified VLANs.
Page 193: Port Trunk Permit Vlan
port trunk permit vlan Use port trunk permit vlan to assign a trunk port to the specified VLANs. Use undo port trunk permit vlan to remove a trunk port from the specified VLANs. Syntax port trunk permit vlan { vlan-id-list | all } undo port trunk permit vlan { vlan-id-list | all } Default A trunk port allows packets only from VLAN 1 to pass through.
Page 194: Mac-Based Vlan Commands
Default The PVID of a trunk port is VLAN 1. Views Layer 2 aggregate interface view Layer 2 Ethernet interface view Predefined user roles network-admin Parameters vlan-id : Specifies a VLAN by its ID in the range of 1 to 4094. Usage guidelines You can use a nonexistent VLAN as the PVID for a trunk port.
Page 195: Display Mac-Vlan Interface
dynamic : Specifies dynamically configured MAC-to-VLAN entries. mac-address mac-address : Specifies the MAC address in the MAC-to-VLAN entry. The format of the mac-address argument is H-H-H. mask mac-mask : Specifies the mask for matching MAC addresses in MAC-to-VLAN entries. For the mac-mask argument, the high-order bits must be consecutive 1s in binary notation or consecutive Fs in hexadecimal notation.
Page 196: Mac-Vlan Enable
Views Any view Predefined user roles network-admin network-operator Examples # Display all ports that are enabled with the MAC-based VLAN feature. <Sysname> display mac-vlan interface MAC VLAN is enabled on following ports: GigabitEthernet1/0/1 GigabitEthernet1/0/2 GigabitEthernet1/0/3 Related commands mac-vlan enable mac-vlan enable Use mac-vlan enable to enable the MAC-based VLAN feature on a port.
Page 197 undo mac-vlan { all | mac-address mac-address [ mask mac-mask ] | vlan vlan-id } Default No MAC-to-VLAN entries exist. Views System view Predefined user roles network-admin Parameters mac-address mac-address : Specifies a MAC address in the format of H-H-H. The MAC address cannot be a multicast MAC address or all 0s.
Page 198: Mac-Vlan Trigger Enable
mac-vlan trigger enable Use mac-vlan trigger enable to enable dynamic MAC-based VLAN assignment on a port. Use undo mac-vlan trigger enable to disable dynamic MAC-based VLAN assignment on a port. Syntax mac-vlan trigger enable undo mac-vlan trigger enable Default Dynamic MAC-based VLAN assignment is disabled on a port. Views Layer 2 Ethernet interface view Predefined user roles...
Page 199: Vlan Precedence
Usage guidelines Use this feature only with dynamic MAC-based VLAN assignment. Examples # Disable GigabitEthernet 1/0/1 from forwarding packets that fail the exact MAC address match in its PVID. <Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] port pvid forbidden Related commands mac-vlan trigger enable vlan precedence Use vlan precedence to set the VLAN matching order.
Page 200: Ip Subnet-Based Vlan Commands
IP subnet-based VLAN commands display ip-subnet-vlan interface Use display ip-subnet-vlan interface to display IP subnet-based VLANs that are associated with the specified ports. Syntax display ip-subnet-vlan interface { interface-type interface-number1 [ to interface-type interface-number2 ] | all } Views Any view Predefined user roles network-admin network-operator...
Page 201: Display Ip-Subnet-Vlan Vlan
Field Description Whether the IP subnet-based VLAN has taken effect on the port: • Active—The IP subnet-based VLAN has taken effect. • Inactive—The IP subnet-based VLAN has not taken effect. For example, this Status field displays Inactive in one of the following conditions: The configuration of the IP subnet-based VLAN is not complete.
Page 202: Ip-Subnet-Vlan
Related commands display ip-subnet-vlan interface ip-subnet-vlan port hybrid ip-subnet-vlan ip-subnet-vlan Use ip-subnet-vlan to associate a VLAN with the specified IP subnet or IP address. Use undo ip-subnet-vlan to disassociate a VLAN from the specified IP subnet or IP address. Syntax ip-subnet-vlan [ ip-subnet-index ] ip ip-address [ mask ] undo ip-subnet-vlan { ip-subnet-index [ to ip-subnet-end ] | all } Default...
Page 203: Port Hybrid Ip-Subnet-Vlan
port hybrid ip-subnet-vlan Use port hybrid ip-subnet-vlan to associate a port with the specified IP subnet-based VLAN. Use undo port hybrid ip-subnet-vlan to disassociate a port from the specified IP subnet-based VLAN. Syntax port hybrid ip-subnet-vlan vlan vlan-id undo port hybrid ip-subnet-vlan { vlan vlan-id | all } Default A port is not associated with an IP subnet-based VLAN.
Page 204: Protocol-Based Vlan Commands
Related commands display ip-subnet-vlan interface display ip-subnet-vlan vlan ip-subnet-vlan Protocol-based VLAN commands display protocol-vlan interface Use display protocol-vlan interface to display protocol-based VLANs that are associated with the specified ports. Syntax display protocol-vlan interface { interface-type interface-number1 [ to interface-type interface-number2 ] | all } Views Any view Predefined user roles...
Page 205: Display Protocol-Vlan Vlan
Field Description Whether the protocol-based VLAN has taken effect: • Status Active—The protocol-based VLAN has taken effect. • Inactive—The protocol-based VLAN has not taken effect. Related commands display protocol-vlan vlan port hybrid protocol-vlan protocol-vlan display protocol-vlan vlan Use display protocol-vlan vlan to display information about protocol-based VLANs. Syntax display protocol-vlan vlan { vlan - id1 [ to vlan - id2 ] | all } Views...
Page 206: Port Hybrid Protocol-Vlan
Field Description Protocol type or encapsulation format specified by the protocol Protocol type template. Related commands display protocol-vlan interface port hybrid protocol-vlan protocol-vlan port hybrid protocol-vlan Use port hybrid protocol-vlan to associate a port with the specified protocol-based VLAN. Use undo port hybrid protocol-vlan to disassociate a port from the specified protocol-based VLAN.
Page 207: Protocol-Vlan
• If you specify only the all keyword, this command disassociates the port from all protocol templates of all VLANs. Examples # Configure GigabitEthernet 1/0/1 as a hybrid port, assign it to VLAN 2 as an untagged member, and associated it with protocol template 1 in VLAN 2. <Sysname>...
Page 208 ipx : Specifies the IPX-based VLAN. The keywords ethernetii , llc , raw , and snap specify IPX encapsulation formats. mode : Configures a user-defined protocol template for the VLAN. The keywords ethernetii , llc , and snap specify the available encapsulation formats. ethernetii etype etype-id : Matches the Ethernet II encapsulation format and the specified protocol type ID.
Page 209: Vlan Group Commands
Examples # Assign ARP packets in Ethernet II encapsulation and IPv4 packets to VLAN 3 for transmission. (The protocol type ID for ARP is 0806 in hexadecimal notation.) <Sysname> system-view [Sysname] vlan 3 [Sysname-vlan3] protocol-vlan 1 ipv4 [Sysname-vlan3] protocol-vlan 2 mode ethernetii etype 0806 Related commands display protocol-vlan interface display protocol-vlan vlan...
Page 210: Vlan-Group
Field Description VLAN list VLAN list in the VLAN group. Related commands vlan-group vlan-list vlan-group Use vlan-group to create a VLAN group and enter its view, or enter the view of an existing VLAN group. Use undo vlan-group to delete a VLAN group. Syntax vlan-group group-name undo vlan-group group-name...
Page 211 Default No VLANs exist in a VLAN group. Views VLAN group view Predefined user roles network-admin Parameters vlan-id-list : Specifies a space-separated list of up to 10 VLAN items. Each item specifies a VLAN ID or a range of VLAN IDs in the form of vlan-id1 to vlan-id2. The value range for VLAN IDs is 1 to 4094.
Page 212: Super Vlan Commands
Super VLAN commands display supervlan Use display supervlan to display information about super VLANs and their associated sub-VLANs. Syntax display supervlan [ supervlan-id ] Views Any view Predefined user roles network-admin network-operator Parameters supervlan-id : Specifies a super VLAN ID in the range of 1 to 4094. If you do not specify a super VLAN ID, this command displays information about all super VLANs and their associated sub-VLANs.
Page 213 Description: VLAN 0003 Name: VLAN 0003 Tagged ports: None Untagged ports: GigabitEthernet1/0/3 VLAN ID: 4 VLAN type: Static It is a sub VLAN. Route interface: Configured IPv4 address: 10.153.17.41 IPv4 subnet mask: 255.255.252.0 IPv6 global unicast addresses: 2001::1, subnet is 2001::/64 [TENTATIVE] Description: VLAN 0004 Name: VLAN 0004 Tagged ports:...
Page 214: Subvlan
Field Description Tagged ports Tagged members of the VLAN. Untagged ports Untagged members of the VLAN. Related commands subvlan supervlan subvlan Use subvlan to associate a super VLAN with the specified sub-VLANs. Use undo subvlan to dissociate sub-VLANs from a super VLAN. Syntax subvlan vlan-id-list undo subvlan [ vlan-id-list ]...
Page 215: Supervlan
Related commands display supervlan supervlan supervlan Use supervlan to configure a VLAN as a super VLAN. Use undo supervlan to restore the default. Syntax supervlan undo supervlan Default A VLAN is not a super VLAN. Views VLAN view Predefined user roles network-admin Usage guidelines You cannot configure a VLAN as both a super VLAN and a guest VLAN, Auth-Fail VLAN, or critical...
Page 216: Private Vlan Commands
Private VLAN commands display private-vlan Use display private-vlan to display information about primary VLANs and their associated secondary VLANs. Syntax display private-vlan [ primary-vlan-id ] Views Any view Predefined user roles network-admin network-operator Parameters primary-vlan-id : Specifies a primary VLAN ID in the range of 1 to 4094. If you do not specify a primary VLAN ID, this command displays information about all primary VLANs and their associated secondary VLANs.
Page 217 Name: VLAN 0003 Tagged ports: None Untagged ports: GigabitEthernet1/0/2 GigabitEthernet1/0/3 VLAN ID: 4 VLAN type: Static Private VLAN type: Secondary Route interface: Not configured Description: VLAN 0004 Name: VLAN 0004 Tagged ports: None Untagged ports: GigabitEthernet1/0/2 GigabitEthernet1/0/4 Table 46 Command output Field Description VLAN type...
Page 218: Port Private-Vlan Host
Field Description Global unicast IPv6 address of the VLAN interface. This field is not displayed when no IPv6 address is configured for the VLAN interface. The IPv6 address states are as follows: • TENTATIVE—Initial state. DAD is being performed or is to be performed on the address.
Page 219 Assigns the port to the primary VLAN as an untagged member. • For a trunk port, the device does not change the port link type or PVID. • For a hybrid port, the device does not change the port link type or PVID. If the hybrid port has been a tagged or untagged member of the primary VLAN, this member attribute remains in the primary VLAN.
Page 220: Port Private-Vlan Promiscuous
port private-vlan trunk secondary private-vlan (VLAN view) private-vlan primary port private-vlan promiscuous Use port private-vlan promiscuous to configure a port as a promiscuous port of the specified VLAN and assign the port to the VLAN. Use undo port private-vlan to restore the default. Syntax port private-vlan vlan-id promiscuous undo port private-vlan...
Page 221 You can configure the VLAN as a primary VLAN before or after you execute the port private-vlan promiscuous command. This command is mutually exclusive with the port private-vlan trunk promiscuous and port private-vlan trunk secondary commands. Examples In this example, VLAN 2 is a primary VLAN, and it is associated with secondary VLAN 20. # Display information about GigabitEthernet 1/0/1.
Page 222: Port Private-Vlan Trunk Promiscuous
The output shows that: • GigabitEthernet 1/0/1 is removed from primary VLAN 2. • GigabitEthernet 1/0/1 is an untagged member of VLAN 20. • The link type and PVID of GigabitEthernet 1/0/1 do not change. Related commands port private-vlan host port private-vlan trunk promiscuous port private-vlan trunk secondary private-vlan (VLAN view)
Page 223 If the hybrid port has been a tagged or untagged member of part of the primary VLANs and their associated secondary VLANs, this member attribute remains in these VLANs. The device assigns the hybrid port to the rest of the primary VLANs and their associated secondary VLANs as a tagged member.
Page 224: Port Private-Vlan Trunk Secondary
# Execute the undo port private-vlan trunk promiscuous command on GigabitEthernet 1/0/1, and then verify the configuration. [Sysname-GigabitEthernet1/0/1] undo port private-vlan 2 3 trunk promiscuous [Sysname-GigabitEthernet1/0/1] display this interface GigabitEthernet1/0/1 port link-mode bridge port link-type hybrid port hybrid vlan 20 30 tagged port hybrid vlan 1 untagged return The output shows that:...
Page 225 be equal to or greater than the value for the vlan-id1 argument. Though the system default VLAN (VLAN 1) is in the valid value range, it cannot be configured in the command. Usage guidelines If the specified VLANs are secondary VLANs that have been associated with primary VLANs, the command also assigns the port to the associated primary VLANs.
Page 226 [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] display this interface GigabitEthernet1/0/1 port link-mode bridge return # Configure GigabitEthernet 1/0/1 as a trunk secondary port of VLANs 20 and 30, and then verify the configuration. [Sysname-GigabitEthernet1/0/1] port private-vlan 20 30 trunk secondary [Sysname-GigabitEthernet1/0/1] display this interface GigabitEthernet1/0/1 port link-mode bridge port link-type hybrid...
Page 227: Private-Vlan (Vlan Interface View)
port link-mode bridge return # Configure GigabitEthernet 1/0/1 as a trunk secondary port of VLAN 10, and then verify the configuration. [Sysname-GigabitEthernet1/0/1] port private-vlan 10 trunk secondary [Sysname-GigabitEthernet1/0/1] display this interface GigabitEthernet1/0/1 port link-mode bridge port link-type hybrid port hybrid vlan 10 tagged port hybrid vlan 1 untagged port private-vlan 10 trunk secondary return...
Page 228 Use undo private-vlan to cancel the Layer 3 communication configuration for secondary VLANs that are associated with a primary VLAN. Syntax private-vlan secondary vlan-id-list undo private-vlan [ secondary vlan-id-list ] Default Secondary VLANs are isolated at Layer 3. Views VLAN interface view Predefined user roles network-admin Parameters...
Page 229: Private-Vlan (Vlan View)
[Sysname] vlan 2 [Sysname-vlan2] private-vlan primary [Sysname-vlan2] private-vlan secondary 3 to 4 [Sysname-vlan2] quit # Configure the uplink port (GigabitEthernet 1/0/2) as a promiscuous port of VLAN 2. [Sysname] interface gigabitethernet 1/0/2 [Sysname-GigabitEthernet1/0/2] port private-vlan 2 promiscuous [Sysname-GigabitEthernet1/0/2] quit # Assign downlink port GigabitEthernet 1/0/3 to VLAN 3 and configure the port as a host port. [Sysname] interface gigabitethernet 1/0/3 [Sysname-GigabitEthernet1/0/3] port access vlan 3 [Sysname-GigabitEthernet1/0/3] port private-vlan host...
Page 230: Private-Vlan Community
Parameters secondary vlan-id-list : Specifies a space-separated list of up to 10 secondary VLAN items. Each item specifies a secondary VLAN ID or a range of secondary VLAN IDs in the form of vlan-id1 to vlan-id2. The value range for secondary VLAN IDs is 1 to 4094. The value for the vlan-id2 argument must be equal to or greater than the value for the vlan-id1 argument.
Page 231: Private-Vlan Isolated
Predefined user roles network-admin Usage guidelines This command and the undo private-vlan isolated command have the same function. When you use the save command to save the configuration, the private-vlan community command is not saved into the configuration file. Examples This example shows how to meet the following requirements: •...
Page 232 Use undo private-vlan isolated to restore the default. Syntax private-vlan isolated undo private-vlan isolated Default Ports in the same secondary VLAN can communicate with each other at Layer 2. Views VLAN view Predefined user roles network-admin Usage guidelines This command takes effect when the following conditions exist: •...
Page 233: Private-Vlan Primary
# Configure port isolation at Layer 2 in secondary VLAN 4. [Sysname] vlan 4 [Sysname-vlan4] private-vlan isolated Related commands private-vlan (VLAN view) private-vlan community private-vlan primary private-vlan primary Use private-vlan primary to configure a VLAN as a primary VLAN. Use undo private-vlan primary to restore the default. Syntax private-vlan primary undo private-vlan primary...
Page 234: Voice Vlan Commands
Voice VLAN commands display voice-vlan mac-address Use display voice-vlan mac-address to display the OUI addresses supported on the device. Syntax display voice-vlan mac-address Views Any view Predefined user roles network-admin network-operator Examples # Display the OUI addresses supported on the device. <Sysname>...
Page 235: Voice-Vlan Aging
Predefined user roles network-admin network-operator Examples # Display voice VLAN information. <Sysname> display voice-vlan state Current voice VLANs: 1 Voice VLAN security mode: Security Voice VLAN aging time: 1440 minutes Voice VLAN enabled ports and their modes: Port VLAN Mode DSCP GE1/0/1 Auto...
Page 236: Voice-Vlan Enable
Views System view Predefined user roles network-admin Parameters minutes : Sets the voice VLAN aging timer to 0 minutes or a value in the range of 5 to 43200 minutes. If you set the voice VLAN aging timer to 0 minutes, the voice VLAN does not age out. Usage guidelines In automatic voice VLAN assignment mode, the device starts an aging timer for a voice VLAN when assigning a port to the voice VLAN.
Page 237: Voice-Vlan Mac-Address
[Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] voice-vlan 2 enable Related commands display voice-vlan state voice-vlan mode auto voice-vlan mac-address Use voice-vlan mac-address to configure the OUI address information for voice packet identification. Use undo voice-vlan mac-address to delete an OUI address. Syntax voice-vlan mac-address mac-address mask oui-mask [ description text ] undo voice-vlan mac-address oui...
Page 238: Voice-Vlan Mode Auto
Usage guidelines You can manually delete or add the system default OUI addresses. The device supports a maximum of 128 OUI addresses. Examples # Add OUI address 1234-1200-0000 by specifying the MAC address as 1234-1234-1234 and the mask as fff-ff00-0000. Configure the OUI address description as PhoneA. <Sysname>...
Page 239: Voice-Vlan Qos Trust
Syntax voice-vlan qos cos-value dscp-value undo voice-vlan qos Default A port modifies the CoS and DSCP values for incoming voice VLAN packets to 6 and 46, respectively. Views Layer 2 Ethernet interface view Predefined user roles network-admin Parameters cos-value : Specifies a CoS value in the range of 0 to 7. A bigger CoS value represents a higher priority.
Page 240: Voice-Vlan Security Enable
Predefined user roles network-admin Usage guidelines When a port trusts the QoS priority settings in incoming voice VLAN packets, the port does not modify their CoS and DSCP values. You cannot execute this command on a voice VLAN-enabled port. Before you execute this command on a port, you must disable the voice VLAN feature on it.
Page 241: Voice-Vlan Track Lldp
voice-vlan track lldp Use voice-vlan track lldp to enable LLDP for automatic IP phone discovery. Use undo voice-vlan track lldp to disable LLDP for automatic IP phone discovery. Syntax voice-vlan track lldp undo voice-vlan track lldp Views System view Default LLDP for automatic IP phone discovery is disabled.
Page 242: Mvrp Commands
MVRP commands display mvrp running-status Use display mvrp running-status to display MVRP running status. Syntax display mvrp running-status [ interface interface-list ] Views Any view Predefined user roles network-admin network-operator Parameters interface interface-list : Specifies a range of Ethernet interfaces in the form of interface-type interface-number1 [ to interface-type interface-number2 ] .
Page 243: Display Mvrp State
Running Status : Disabled Join Timer : 20 (centiseconds) Leave Timer : 60 (centiseconds) Periodic Timer : 100 (centiseconds) LeaveAll Timer : 1000 (centiseconds) Registration Type : Normal Registered VLANs : None Declared VLANs : None Propagated VLANs : None Table 50 Command output Field Description...
Page 244: Display Mvrp Statistics
Syntax display mvrp state interface interface-type interface-number vlan vlan-id Views Any view Predefined user roles network-admin network-operator Parameters interface interface-type interface-number : Specifies a port by its type and number. vlan vlan-id : Specifies a VLAN by its VLAN ID in the range of 1 to 4094. Examples # Display the MVRP state of GigabitEthernet 1/0/1 in VLAN 2.
Page 245 Syntax display mvrp statistics [ interface interface-list ] Views Any view Predefined user roles network-admin network-operator Parameters interface interface-list : Specifies a range of Ethernet interfaces in the form of interface-type interface-number1 [ to interface-type interface-number2 ] . The interface-type interface-number argument represents the interface type and interface number.
Page 246: Mrp Timer Join
JoinIn Event Received In Event Received JoinMt Event Received Mt Event Received Leave Event Received LeaveAll Event Received Frames Transmitted New Event Transmitted JoinIn Event Transmitted In Event Transmitted JoinMt Event Transmitted Mt Event Transmitted Leave Event Transmitted LeaveAll Event Transmitted Frames Discarded Table 52 Command output Field...
Page 247: Mrp Timer Leave
Syntax mrp timer join timer-value undo mrp timer join Default The Join timer is 20 centiseconds. Views Layer 2 Ethernet interface view Layer 2 aggregate interface view Predefined user roles network-admin Parameters timer-value : Specifies the Join timer value (in centiseconds). The Join timer must meet the following requirements: •...
Page 248: Mrp Timer Leaveall
Parameters timer-value : Specifies the Leave timer value (in centiseconds). The Leave timer must meet the following requirements: • Greater than two times the Join timer. • Less than the LeaveAll timer. • Divisible by 20 centiseconds. Examples # Set the Leave timer to 100 centiseconds. (In this example, the Join timer and LeaveAll timer use their default settings.) <Sysname>...
Page 249: Mrp Timer Periodic
To keep the dynamic VLANs learned through MVRP stable, do not set the LeaveAll timer less than its default value. The device randomly changes the LeaveAll timer within a certain range when an MRP participant restarts its LeaveAll timer. This prevents the LeaveAll timer of a particular participant from always expiring first.
Page 250: Mvrp Enable
mvrp enable Use mvrp enable to enable MVRP on a port. Use undo mvrp enable to disable MVRP on a port. Syntax mvrp enable undo mvrp enable Default MVRP is disabled on a port. Views Layer 2 Ethernet interface view Layer 2 aggregate interface view Predefined user roles network-admin...
Page 251: Mvrp Gvrp-Compliance Enable
Views System view Predefined user roles network-admin Usage guidelines For MVRP to take effect on a port, enable MVRP both on the port and globally. Disabling MVRP globally also disables MVRP on all ports. Examples # Enable MVRP globally. <Sysname> system-view [Sysname] mvrp global enable Related commands display mvrp running-status...
Page 252: Reset Mvrp Statistics
Syntax mvrp registration { fixed | forbidden | normal } undo mvrp registration Default The MVRP registration mode is normal. Views Layer 2 Ethernet interface view Layer 2 aggregate interface view Predefined user roles network-admin Parameters fixed : Specifies the fixed registration mode. forbidden : Specifies the forbidden registration mode.
Page 253 Related commands display mvrp statistics...
Page 254: Qinq Commands
QinQ commands This document uses the following terms: • CVLAN—Customer network VLANs, also called inner VLANs, refer to VLANs that a customer uses on the private network. • SVLAN—Service provider network VLANs, also called outer VLANs, refer to VLANs that a service provider uses to transmit VLAN tagged traffic for customers.
Page 255: Qinq Enable
Related commands qinq enable qinq enable Use qinq enable to enable QinQ on an interface. Use undo qinq enable to disable QinQ on an interface. Syntax qinq enable undo qinq enable Default QinQ is disabled on interfaces. Views Layer 2 Ethernet interface view Layer 2 aggregate interface view Predefined user roles network-admin...
Page 256: Qinq Ethernet-Type (System View)
Parameters service-tag : Sets the TPID value in the SVLAN tag. hex-value : Sets a hexadecimal TPID value in the range of 1 to ffff, excluding the reserved EtherType values listed in Table Table 53 Reserved EtherType values Protocol type Value 0x0806 0x0200...
Page 257: Qinq Transparent-Vlan
Default The TPID value in CVLAN tags is 8100 in hexadecimal notation. Views System view Predefined user roles network-admin Parameters customer-tag : Sets the TPID value in the CVLAN tag. hex-value : Sets a hexadecimal TPID value in the range of 1 to ffff, excluding the reserved EtherType values listed in Table Table 54 Reserved EtherType values...
Page 258 Syntax qinq transparent-vlan vlan-id-list undo qinq transparent-vlan { vlan-id-list | all } Default Transparent transmission is disabled for all VLANs. Views Layer 2 Ethernet interface view Layer 2 aggregate interface view Predefined user roles network-admin Parameters vlan-id-list : Specifies a space-separated list of up to 10 VLAN items. Each item specifies a single VLAN ID or a VLAN ID range in the form of vlan-id1 to vlan-id2 .
Page 259: Vlan Mapping Commands
VLAN mapping commands display vlan mapping Use display vlan mapping to display VLAN mapping information. Syntax display vlan mapping [ interface interface-type interface-number ] Views Any view Predefined user roles network-admin network-operator Parameters interface interface-type interface-number : Specifies an interface by its type and number.
Page 260: Vlan Mapping
Field Description Original inner VLAN. Inner VLAN This field displays N/A for one-to-one VLAN mapping, many-to-one VLAN mapping, and one-to-two VLAN mapping. Translated outer VLAN. Translated Outer VLAN This field indicates the translated VLAN for one-to-one VLAN mapping and many-to-one VLAN mapping. Translated inner VLAN.
Page 261 Different VLAN ranges cannot overlap. Any of the original VLANs cannot be the same as the translated VLAN. uni single vlan-id-list translated-vlan vlan-id : Specifies the original VLANs and the translated VLAN for a many-to-one VLAN mapping on the customer-side port. The vlan-id-list argument specifies a space-separated list of up to 10 VLAN IDs, each of which is in the range of 1 to 4094.
Page 262 The MTU of an interface is 1500 bytes by default. After a VLAN tag is added to a packet, the packet length is added by 4 bytes. As a best practice, set the MTU to a minimum of 1504 bytes for ports on the forwarding path of the packet on the service provider network.
Page 263: Lldp Commands
LLDP commands cdp voice-vlan Use cdp voice-vlan to set the voice VLAN ID carried in CDP frames. Use undo cdp voice-vlan to restore the default. Syntax cdp voice-vlan vlan-id undo cdp voice-vlan Default No voice VLAN ID is configured to be carried in CDP frames. Views Layer 2 Ethernet interface view Default command level...
Page 264 Global LLDP local-information: Chassis ID : 00e0-fc00-5600 System name : Sysname System description : HPE Comware Platform Software, Software Version 7.1.070, Release 3207 HPE 5130-24G-4SFP+ EI Switch Copyright (c) 2010-2017 Hewlett Packard Enterprise Develo pment LP System capabilities supported : Bridge, Router, Customer Bridge, Service Bridge...
Page 265 Management address type : IPv4 Management address : 192.168.80.62 Management address interface type : IfIndex Management address interface ID : Unknown Management address OID Port VLAN ID(PVID): 1 Port and protocol VLAN ID(PPVID) : 12 Port and protocol VLAN supported : Yes Port and protocol VLAN enabled : Yes VLAN name of VLAN 12: VLAN 0012...
Page 266 Field Description Supported capabilities: • Bridge—Switching is supported. • Router—Routing is supported. • Repeater—Signal repeating is supported. • Telephone—The local device can act as a telephone. • DocsisCableDevice—The local device can act as a System capabilities supported DOCSIS-compliant cable device. •...
Page 267 Field Description Management address OID Management address object ID. Port VLAN ID(PVID) Port VLAN ID. Port and protocol VLAN Port protocol VLAN ID. ID(PPVID) Port and protocol VLAN Indicates whether protocol VLAN is supported on the port. supported Port and protocol VLAN enabled Indicates whether protocol VLAN is enabled on the port.
Page 268: Display Lldp Neighbor-Information
Field Description • Unknown. • Critical. Power priority • High. • Low. PD requested power value PD requested power in watts. PSE allocated power value PSE allocated power value. PSE power source type: • Unknown—Unknown power supply. PoE PSE power source •...
Page 269 Port ID type : Interface name Port ID : GigabitEthernet1/0/1 Time to live : 121 Port description : GigabitEthernet1/0/1 Interface System name : Sysname System description : HPE Comware Platform Software, Software Version 7.1.070, Release 3207 HPE 5130-24G-4SFP+ EI Switch...
Page 270 : GigabitEthernet1/0/1 Time to live : 121 Port description : GigabitEthernet1/0/1 Interface System name : Sysname System description : HPE Comware Platform Software, Software Version 7.1.070, Release 3207 HPE 5130-24G-4SFP+ EI Switch Copyright (c) 2010-2017 Hewlett Packard Enterprise Develo pment LP...
Page 271 Port description : GigabitEthernet1/0/1 Interface System name : Sysname System description : HPE Comware Platform Software, Software Version 7.1.070, Release 3207 HPE 5130-24G-4SFP+ EI Switch Copyright (c) 2010-2017 Hewlett Packard Enterprise Develo pment LP System capabilities supported : Bridge, Router, Customer Bridge, Service Bridge...
Page 272 Management address interface ID : Unknown Management address OID Port VLAN ID(PVID): 1 Link aggregation supported : Yes Link aggregation enabled : Yes Aggregation port ID : 52 Auto-negotiation supported : Yes Auto-negotiation enabled : Yes OperMau : Speed(1000)/Duplex(Full) Power port class : PD PSE power supported : Yes...
Page 273 LLDP neighbor index : 6 ChassisID/subtype : 0011-2233-4400/MAC address PortID/subtype : 000c-29f5-c715/MAC address Capabilities : None # Display the brief LLDP information that all LLDP agents received from all neighboring devices in a list. <Sysname> display lldp neighbor-information list Chassis ID : * -- --Nearest nontpmr bridge neighbor # -- --Nearest customer bridge neighbor Default -- -- Nearest bridge neighbor System Name...
Page 274 Field Description Capabilities supported on the neighboring device: • Repeater—Signal repeating is supported. • Bridge—Switching is supported. • Router—Routing is supported. • Telephone—The neighboring device can act as a telephone. • DocsisCableDevice—The neighboring device can act as a DOCSIS-compliant cable device. System capabilities supported •...
Page 275 Field Description Power class of the PD: • Class 0. • Class 1. Port power classification • Class 2. • Class 3. • Class 4. Power supply type: • Type 1 PD. • Power type Type 2 PD. • Type 1 PSE. •...
Page 276: Display Lldp Statistics
Field Description Capabilities enabled on the neighboring device: • Repeater—Signal repeating is enabled. • Bridge—Switching is enabled. • Router—Routing is enabled. • Telephone—The neighboring device is acting as a telephone. Capabilities • DocsisCableDevice—The neighboring device is acting as a DOCSIS-compliant cable device. •...
Page 277 Examples # Display the global LLDP statistics and the LLDP statistics of all ports. <Sysname> display lldp statistics LLDP statistics global information: LLDP neighbor information last change time:0 days, 0 hours, 4 minutes, 40 seconds The number of LLDP neighbor information inserted : 1 The number of LLDP neighbor information deleted The number of LLDP neighbor information dropped The number of LLDP neighbor information aged out : 1...
Page 278: Display Lldp Status
The number of CDP error frames # Display the LLDP statistics for the nearest customer bridge agents on GigabitEthernet 1/0/1. <Sysname> display lldp statistics interface GigabitEthernet1/0/1 agent nearest-customer LLDP statistics information of port 1 [GigabitEthernet1/0/1]: LLDP agent nearest-customer: The number of LLDP frames transmitted The number of LLDP frames received The number of LLDP frames discarded The number of LLDP error frames...
Page 279 nearest-bridge : Specifies nearest bridge agents. nearest-customer : Specifies nearest customer bridge agents. nearest-nontpmr : Specifies nearest non-TPMR bridge agents. Examples # Display the global LLDP status and the LLDP status of each port. <Sysname> display lldp status Global status of LLDP: Enable Bridge mode of LLDP: customer-bridge The current number of LLDP neighbors: 5 The current number of CDP neighbors: 0...
Page 280: Display Lldp Tlv-Config
Trap flag : No MED trap flag : No Polling interval : 0s Number of LLDP neighbors Number of MED neighbors Number of CDP neighbors Number of sent optional TLV : 12 Number of received unknown TLV : 5 Table 59 Command output Field Description Bridge mode of LLDP...
Page 281 Syntax display lldp tlv-config [ interface interface-type interface-number ] [ agent { nearest-bridge | nearest-customer | nearest-nontpmr } ] Views Any view Predefined user roles network-admin network-operator Parameters interface interface-type interface-number : Specifies a port by its type and number. If you do not specify this option, the command displays the types of advertisable optional TLVs of all ports.
Page 282 Extended Power via MDI TLV Inventory TLV LLDP agent nearest-nontpmr: NAME STATUS DEFAULT Basic optional TLV: Port Description TLV System Name TLV System Description TLV System Capabilities TLV Management Address TLV IEEE 802.1 extend TLV: Port VLAN ID TLV Port And Protocol VLAN ID TLV VLAN Name TLV DCBX TLV EVB TLV...
Page 283 Power via MDI TLV Maximum Frame Size TLV LLDP-MED extend TLV: Capabilities TLV Network Policy TLV Location Identification TLV Extended Power via MDI TLV Inventory TLV Table 60 Command output Field Description LLDP tlv-config of port 1 Advertisable optional TLVs of port 1. NAME TLV type.
Page 284: Lldp Admin-Status
lldp admin-status Use lldp admin-status to set the LLDP operating mode. Use undo lldp admin-status to restore the default. Syntax In Layer 2 Ethernet interface view: lldp [ agent { nearest-customer | nearest-nontpmr } ] admin-status { disable | rx | tx | txrx } undo lldp [ agent { nearest-customer | nearest-nontpmr } ] admin-status In Layer 2 aggregate interface view: lldp agent { nearest-customer | nearest-nontpmr } admin-status { disable...
Page 285: Lldp Check-Change-Interval
[Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] lldp agent nearest-customer admin-status rx lldp check-change-interval Use lldp check-change-interval to enable LLDP polling and set the polling interval. Use undo lldp check-change-interval to disable LLDP polling. Syntax In Layer 2 Ethernet interface view: lldp agent nearest-customer nearest-nontpmr...
Page 286: Lldp Compliance Admin-Status Cdp
lldp compliance admin-status cdp Use lldp compliance admin-status cdp to set the operating mode of CDP-compatible LLDP. Use undo lldp compliance admin-status cdp to restore the default. Syntax lldp compliance admin-status cdp { disable | rx | txrx } undo lldp compliance admin-status cdp Default CDP-compatible LLDP operates in Disable mode.
Page 287: Lldp Enable
Default CDP compatibility is disabled. Views System view Predefined user roles network-admin Usage guidelines The maximum TTL that CDP allows is 255 seconds. To make CDP-compatible LLDP work correctly with Cisco IP phones, set the LLDP frame transmission interval to be no more than 1/3 of the TTL value.
Page 288: Lldp Encapsulation Snap
Related commands lldp global enable lldp encapsulation snap Use lldp encapsulation snap to set the encapsulation format for LLDP frames to SNAP. Use undo lldp encapsulation to restore the default. Syntax In Layer 2 Ethernet interface view: lldp [ agent { nearest-customer | nearest-nontpmr } ] encapsulation snap undo lldp [ agent { nearest-customer | nearest-nontpmr } ] encapsulation In Layer 2 aggregate interface view: lldp agent { nearest-customer | nearest-nontpmr } encapsulation snap...
Page 289: Lldp Fast-Count
lldp fast-count Use lldp fast-count to set the number of LLDP frames sent each time fast LLDP frame transmission is triggered. Use undo lldp fast-count to restore the default. Syntax lldp fast-count count undo lldp fast-count Default Four LLDP frames are sent each time fast LLDP frame transmission is triggered. Views System view Predefined user roles...
Page 290: Lldp Global Tlv-Enable Basic-Tlv Management-Address-Tlv
Examples # Disable LLDP globally. <Sysname> system-view [Sysname] undo lldp global enable Related commands lldp enable lldp global tlv-enable basic-tlv management-address-tlv Use lldp global tlv-enable basic-tlv management-address-tlv to enable advertisement of the management address TLV globally and set the management address to be advertised.
Page 291: Lldp Hold-Multiplier
You can configure advertisement of the management address TLV globally or on a per-interface basis. The device selects the management address TLV advertisement setting for an interface in the following order: Interface-based setting, configured by using the lldp tlv-enable command with the management-address-tlv keyword.
Page 292: Lldp Ignore-Pvid-Inconsistency
Parameters value : Sets the TTL multiplier in the range of 2 to 10. Usage guidelines The TTL TLV carried in an LLDPDU determines how long the device information carried in the LLDPDU can be saved on a recipient device. By setting the TTL multiplier, you can set the TTL of locally sent LLDP frames.
Page 293: Lldp Management-Address-Format String
lldp management-address-format string Use lldp management-address-format string to set the encoding format of the management address to string. Use undo lldp management-address-format to restore the default. Syntax In Layer 2 Ethernet interface view: lldp agent nearest-customer nearest-nontpmr management-address-format string undo lldp agent nearest-customer...
Page 294: Lldp Mode
Use undo lldp max-credit to restore the default. Syntax lldp max-credit credit-value undo lldp max-credit Default The token bucket size for sending LLDP frames is 5. Views System view Predefined user roles network-admin Parameters credit-value : Specifies the token bucket size for sending LLDP frames, in the range of 1 to 100. Examples # Set the token bucket size for sending LLDP frames to 10.
Page 295: Lldp Notification Med-Topology-Change Enable
The bridge mode configuration takes effect only when LLDP is enabled globally. If LLDP is disabled globally, LLDP can only operate in customer bridge mode. Examples # Configure LLDP to operate in service bridge mode. <Sysname> system-view [Sysname] lldp mode service-bridge Related commands lldp global enable lldp notification med-topology-change enable...
Page 296: Lldp Timer Fast-Interval
undo lldp agent { nearest-customer | nearest-nontpmr } notification remote-change enable In IRF physical interface view: lldp notification remote-change enable undo lldp notification remote-change enable Default LLDP trapping is disabled. Views Layer 2 Ethernet interface view Layer 2 aggregate interface view IRF physical interface view Predefined user roles network-admin...
Page 297: Lldp Timer Notification-Interval
Examples # Set the interval for fast LLDP frame transmission to 2 seconds. <Sysname> system-view [Sysname] lldp timer fast-interval 2 lldp timer notification-interval Use lldp timer notification-interval to set the LLDP trap and LLDP-MED trap transmission interval. Use undo lldp timer notification-interval to restore the default. Syntax lldp timer notification-interval interval undo lldp timer notification-interval...
Page 298: Lldp Timer Tx-Interval
Parameters delay : Sets the LLDP reinitialization delay in the range of 1 to 10 seconds. Examples # Set the LLDP reinitialization delay to 4 seconds. <Sysname> system-view [Sysname] lldp timer reinit-delay 4 lldp timer tx-interval Use lldp timer tx-interval to set the LLDP frame transmission interval. Use undo lldp timer tx-interval to restore the default.
Page 299 undo lldp tlv-enable { basic-tlv { all | port-description | system-capability | system-description | system-name | management-address-tlv [ ipv6 ] [ ip-address ] } | dot1-tlv { all | port-vlan-id | link-aggregation | protocol-vlan-id | vlan-name | management-vid } | dot3-tlv { all | mac-physic | max-frame-size | power } | med-tlv { all | capability | inventory | network-policy [ vlan-id ] | power-over-ethernet | location-id } } •...
Page 300 undo lldp tlv-enable basic-tlv { port-description | system-capability | system-description | system-name } Default On Layer 2 Ethernet interfaces: • Nearest bridge agents can advertise all types of LLDP TLVs except the following types: Location identification TLVs. Port and protocol VLAN ID TLVs. VLAN name TLVs.
Page 301 management address to be advertised. The interface loopback interface-number option specifies the management address as the IP address of a loopback interface specified by its number. By default, the following rules apply: • When you execute the lldp tlv-enable command, the management address is the IPv4 or IPv6 address of the VLAN interface that meets the following requirements: In up state.
Page 302 civic-address : Inserts the typical address information about the network device in location identification TLVs . device-type : Sets a device type value in the range of 0 to 2: • Value 0 specifies a DHCP server. • Value 1 specifies a network device. •...
Page 303: L2Pt Commands
L2PT commands display l2protocol statistics Use display l2protocol statistics to display Layer 2 Protocol Tunneling (L2PT) statistics. Syntax display l2protocol statistics interface interface-type interface-number ] Views Any view Predefined user roles network-admin network-operator Parameters interface interface-type interface-number : Specifies a Layer 2 Ethernet or aggregate interface by its type and number.
Page 304: L2Protocol Tunnel Dot1Q
MVRP PAGP PVST Tunnel UDLD Table 61 Command output Field Description Number of encapsulated packets. The number increases by 1 when the interface receives and encapsulates a Encapsulated protocol packet from a customer network. For protocol Tunnel, which represents tunneled packets, this field displays N/A. Number of decapsulated packets.
Page 305: L2Protocol Tunnel-Dmac
Views Layer 2 Ethernet interface view Layer 2 aggregate interface view Predefined user roles network-admin Parameters cdp : Specifies CDP. dldp : Specifies DLDP. eoam : Specifies EOAM. gvrp : Specifies GVRP. lacp : Specifies LACP. lldp : Specifies LLDP. L2PT for LLDP supports LLDP packets from only nearest bridge agents. mvrp : Specifies MVRP.
Page 306: Reset L2Protocol Statistics
Use undo l2protocol tunnel-dmac to restore the default. Syntax l2protocol tunnel-dmac mac-address undo l2protocol tunnel-dmac Default The tunneled packets use 010f-e200-0003 as the destination multicast MAC address. Views System view Predefined user roles network-admin Parameters mac - address : Specifies a destination multicast MAC address. The available addresses are 0100-0ccd-cdd0, 0100-0ccd-cdd1, 0100-0ccd-cdd2, and 010f-e200-0003.
Page 307: Document Conventions And Icons
Document conventions and icons Conventions This section describes the conventions used in the documentation. Command conventions Convention Description Bold text represents commands and keywords that you enter literally as shown. Boldface Italic text represents arguments that you replace with actual values. Italic Square brackets enclose syntax choices (keywords or arguments) that are optional.
Page 308: Network Topology Icons
Network topology icons Convention Description Represents a generic network device, such as a router, switch, or firewall. Represents a routing-capable device, such as a router or Layer 3 switch. Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supports Layer 2 forwarding and other Layer 2 features.
Page 309: Support And Other Resources
Support and other resources Accessing Hewlett Packard Enterprise Support • For live assistance, go to the Contact Hewlett Packard Enterprise Worldwide website: www.hpe.com/assistance • To access documentation and support services, go to the Hewlett Packard Enterprise Support Center website: www.hpe.com/support/hpesc Information to collect •...
Page 310: Customer Self Repair
Hewlett Packard Enterprise is committed to providing documentation that meets your needs. To help us improve the documentation, send any errors, suggestions, or comments to Documentation Feedback (docsfeedback@hpe.com). When submitting your feedback, include the document title, part number, edition, and publication date located on the front cover of the document. For online help content, include the product name, product version, help edition, and publication date located on the legal notices page.
Page 311: Index
Index A B C D E F I J L M N P Q R S U V display lldp statistics,268 display lldp status,270 active region-configuration,108 display lldp tlv-config,272 display loopback-detection,164 display mac-address,56 bandwidth,169 display mac-address aging-time,57 bandwidth,78 display mac-address mac-learning,58 bandwidth,41 display mac-address...
Page 312 lldp timer fast-interval,288 lldp timer notification-interval,289 instance,125 lldp timer reinit-delay,289 interface,22 lldp timer tx-interval,290 interface bridge-aggregation,90 lldp tlv-enable,290 interface loopback,48 loopback,24 interface null,49 loopback-detection action,164 interface range,52 loopback-detection enable,166 interface range name,53 loopback-detection global action,166 interface vlan-interface,176 loopback-detection global enable,167 ip-subnet-vlan,194 loopback-detection interval-time,168...
Page 313 port access vlan,181 shutdown,178 port auto-power-down,26 snmp-agent trap enable mac-address,72 port bridge enable,34 snmp-agent trap enable stp,129 port hybrid ip-subnet-vlan,195 speed,29 port hybrid protocol-vlan,198 speed auto downgrade,30 port hybrid pvid,182 storm-constrain,35 port hybrid vlan,183 storm-constrain control,37 port link-aggregation group,102 storm-constrain enable log,38 port link-type,184...
Page 314 stp vlan enable,161 vlan-group,202 subvlan,206 vlan-list,202 supervlan,207 vlan-mapping modulo,162 voice-vlan aging,227 voice-vlan enable,228 unicast-suppression,31 voice-vlan mac-address,229 voice-vlan mode auto,230 voice-vlan qos,230 virtual-cable-test,40 voice-vlan qos trust,231 vlan,179 voice-vlan security enable,232 vlan mapping,252 voice-vlan track lldp,233 vlan precedence,191...

HPE FlexNetwork 5130 EI Series Command Reference Manual

Ethernet Interface Commands

Loopback, Null, and Inloopback Interface Commands

Bulk Interface Configuration Commands

MAC Address Table Commands

MAC Information Commands

Ethernet Link Aggregation Commands

Port Isolation Commands

Spanning Tree Commands

Loop Detection Commands

VLAN Commands

Super VLAN Commands

Private VLAN Commands

Voice VLAN Commands

MVRP Commands

Qinq Commands

VLAN Mapping Commands

LLDP Commands

Quick Links

Command Reference

Need help?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for HPE FlexNetwork 5130 EI Series

Summary of Contents for HPE FlexNetwork 5130 EI Series