Page 1 Series ENTERPRISE POE+ GIGABIT EDGE SWITCHES x230-10GT x230-10GP x230-18GT x230-18GP x230-28GP x230-28GT Command Reference for AlliedWare Plus™ Version 5.4.7-1.x C613-50172-01 Rev B...
Page 2 If you would like a copy of the GPL source code contained in Allied Telesis products, please send us a request by registered mail including a check for US$15 to cover production and shipping costs and a CD with the GPL code will be mailed to you.
Page 3: Table Of Contents
Contents PART 1: Setup and Troubleshooting ......67 Chapter 1: CLI Navigation Commands ......68 Introduction .
Page 4: Table Of Contents
erase factory-default ........103 erase startup-config ........104 ip tftp source-interface .
Page 5: Table Of Contents
terminal resize ........168 username .
Page 6: Table Of Contents
show reboot history ........230 show router-id ........231 show system .
Page 7: Table Of Contents
log email ......... . 298 log email (filter) .
Page 8: Table Of Contents
mirror interface ........380 remote-mirror interface .
Page 9: Table Of Contents
show platform port ........444 show port-security interface .
Page 10: Table Of Contents
show debugging mstp ....... . . 511 show spanning-tree ........512 show spanning-tree brief .
Page 11: Table Of Contents
lacp global-passive-mode enable ......579 lacp port-priority ........580 lacp system-priority .
Page 12: Table Of Contents
show arp ......... . 648 show debugging ip packet .
Page 13: Table Of Contents
show ip route ........706 show ip route database .
Page 14: Table Of Contents
Chapter 24: IGMP and IGMP Snooping Commands ..... 767 Introduction ........767 clear ip igmp .
Page 15: Table Of Contents
ipv6 mld snooping fast-leave ......829 ipv6 mld snooping mrouter ......830 ipv6 mld snooping querier .
Page 16: Table Of Contents
commit (IPv4) ........917 show access-list (IPv4 Hardware ACLs) .
Page 17: Table Of Contents
no police ......... . 998 police single-rate action .
Page 18: Table Of Contents
Chapter 32: Authentication Commands ......1071 Introduction ........1071 auth auth-fail vlan .
Page 19: Table Of Contents
auth-web-server ping-poll reauth-timer-refresh ....1151 auth-web-server ping-poll timeout ......1152 auth-web-server port .
Page 20: Table Of Contents
radius-secure-proxy aaa ....... . 1224 server (radsecproxy-aaa) ....... 1225 server mutual-authentication .
Page 21: Table Of Contents
nas ..........1289 radius-secure-proxy local-server .
Page 22: Table Of Contents
arp security violation ........1348 clear arp security statistics ......1350 clear ip dhcp snooping binding .
Page 23: Table Of Contents
Chapter 42: Allied Telesis Management Framework™ (AMF) Commands ..1446 Introduction ........1446 area-link .
Page 24: Table Of Contents
atmf backup redundancy enable ......1475 atmf backup server ........1476 atmf backup stop .
Page 25: Table Of Contents
log event-host ........1557 modeltype .
Page 26: Table Of Contents
show mstack nodes ........1665 switchport mstack-link ....... . 1666 Chapter 44: Dynamic Host Configuration Protocol (DHCP) Commands .
Page 27: Table Of Contents
show debugging snmp ....... . 1730 show running-config snmp ......1731 show snmp-server .
Page 28: Table Of Contents
show debugging lldp ....... . . 1799 show lldp ......... 1801 show lldp interface .
Page 29: Table Of Contents
show ssh client ........1871 show ssh server .
Page 30: Table Of Contents
ip (ping-polling) ........1937 length (ping-poll data) .
Page 31: Table Of Contents
List of Commands (access-list extended ICMP filter) .........934 (access-list extended IP filter).
Page 32: Table Of Contents
aaa authorization commands ......... . .1335 aaa authorization config-commands .
Page 33: Table Of Contents
atmf authorize provision ..........1459 atmf authorize.
Page 34: Table Of Contents
atmf provision node configure boot config ......1506 atmf provision node configure boot system ......1507 atmf provision node create .
Page 35: Table Of Contents
auth radius send nas-identifier ......... .1238 auth radius send service-type .
Page 36: Table Of Contents
auth-web-server ipaddress..........1140 auth-web-server login-url .
Page 37: Table Of Contents
clear aaa local user lockout..........1220 clear arp security statistics .
Page 38: Table Of Contents
clear mls qos interface policer-counters ........976 clear ping-poll .
Page 39: Table Of Contents
critical-interval ............1933 crypto key destroy hostkey.
Page 40: Table Of Contents
debug ip packet interface ..........637 debug lacp .
Page 41: Table Of Contents
description (interface) ........... 363 description (ping-polling) .
Page 42: Table Of Contents
end ..............74 enrollment (trustpoint configuration mode) .
Page 43: Table Of Contents
instance priority (MSTP)..........505 instance vlan (MSTP) .
Page 44: Table Of Contents
ip igmp last-member-query-interval........778 ip igmp limit.
Page 45: Table Of Contents
ip rip receive version........... . . 735 ip rip receive-packet .
Page 46: Table Of Contents
ipv6 nd raguard ............685 ipv6 nd ra-interval .
Page 47: Table Of Contents
lldp tlv-select ............1783 lldp transmit receive .
Page 48: Table Of Contents
log monitor (filter) ............331 log monitor exclude .
Page 49: Table Of Contents
maximum-prefix............745 max-static-routes .
Page 50: Table Of Contents
ntp trusted-key (deprecated)..........1714 offset-list (RIP) .
Page 51: Table Of Contents
privilege level ............147 proxy-port.
Page 52: Table Of Contents
security-password lifetime ..........150 security-password minimum-categories .
Page 53: Table Of Contents
show access-list (IPv4 Software ACLs)........957 show arp security interface.
Page 54: Table Of Contents
show atmf virtual-links..........1638 show atmf working-set .
Page 55: Table Of Contents
show crypto pki certificates user (deleted) .......1296 show crypto pki certificates ..........1326 show crypto pki enrollment user .
Page 56: Table Of Contents
show dot1x supplicant..........1065 show dot1x.
Page 57: Table Of Contents
show ip dhcp-relay ........... . .1690 show ip domain-list.
Page 58: Table Of Contents
show ipv6 mroute ............866 show ipv6 multicast forwarding .
Page 59: Table Of Contents
show mls qos interface policer-counters....... . .1013 show mls qos interface queue-counters ....... . .1015 show mls qos interface storm-status.
Page 60: Table Of Contents
show radius local-server group......... .1298 show radius local-server nas .
Page 61: Table Of Contents
show spanning-tree mst detail ......... . . 518 show spanning-tree mst instance interface .
Page 62: Table Of Contents
show vlan access-map ........... 471 show vlan filter .
Page 63: Table Of Contents
spanning-tree max-hops (MSTP) ......... 550 spanning-tree mode .
Page 64: Table Of Contents
storm-rate ............. .1025 storm-window.
Page 65: Table Of Contents
terminal length ............167 terminal monitor .
Page 66: Table Of Contents
undebug mail ............1830 undebug mstp .
Page 67: Part 1: Setup And Troubleshooting
Part 1: Setup and Troubleshooting C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 68: Chapter 1: Cli Navigation Commands
CLI Navigation Commands Introduction Overview This chapter provides an alphabetical reference for the commands used to navigate between different modes. This chapter also provides a reference for the help and show commands used to help navigate within the CLI. Command List •...
Page 69: Configure Terminal
CLI N AVIGATION OMMANDS CONFIGURE TERMINAL configure terminal Overview This command enters the Global Configuration command mode. configure terminal Syntax Mode Privileged Exec Example To enter the Global Configuration command mode (note the change in the command prompt), enter the command: awplus# configure terminal awplus(config)#...
Page 70: Disable (Privileged Exec Mode)
CLI N AVIGATION OMMANDS DISABLE RIVILEGED XEC MODE disable (Privileged Exec mode) Overview This command exits the Privileged Exec mode, returning the prompt to the User Exec mode. To end a session, use the exit command. disable Syntax Mode Privileged Exec Example To exit the Privileged Exec mode, enter the command: awplus#...
Page 71 CLI N AVIGATION OMMANDS Overview This command lets you to run User Exec and Privileged Exec mode commands when you are in any configuration mode. do <command> Syntax Parameter Description <command> Specify the command and its parameters. Mode Any configuration mode awplus# configure terminal Example...
Page 72: Enable (Privileged Exec Mode)
CLI N AVIGATION OMMANDS ENABLE RIVILEGED XEC MODE enable (Privileged Exec mode) Overview This command enters the Privileged Exec mode and optionally changes the privilege level for a session. If a privilege level is not specified then the maximum privilege level (15) is applied to the session. If the optional privilege level is omitted then only users with the maximum privilege level can access Privileged Exec mode without providing the password as specified by the enable password...
Page 73 CLI N AVIGATION OMMANDS ENABLE RIVILEGED XEC MODE Privilege Exec mode. Use the enable password command or the enable secret commands to set the password to enable access to Privileged Exec mode. awplus> enable 7 awplus# Related disable (Privileged Exec mode) Commands enable password enable secret...
Page 74 CLI N AVIGATION OMMANDS Overview This command returns the prompt to the Privileged Exec command mode from any other advanced command mode. Syntax Mode All advanced command modes, including Global Configuration and Interface Configuration modes. Example The following example shows the use of the end command to return to the Privileged Exec mode directly from Interface mode.
Page 75: Exit
CLI N AVIGATION OMMANDS EXIT exit Overview This command exits the current mode, and returns the prompt to the mode at the previous level. When used in User Exec mode, the exit command terminates the session. exit Syntax Mode All command modes, including Global Configuration and Interface Configuration modes.
Page 76: Help
CLI N AVIGATION OMMANDS HELP help Overview This command displays a description of the AlliedWare Plus™ OS help system. help Syntax Mode All command modes Example To display a description on how to use the system help, use the command: awplus# help Output...
Page 77: Logout
CLI N AVIGATION OMMANDS LOGOUT logout Overview This command exits the User Exec or Privileged Exec modes and ends the session. logout Syntax Mode User Exec and Privileged Exec Example To exit the User Exec mode, use the command: awplus# logout C613-50172-01 Rev B Command Reference for x230 Series...
Page 78: Show History
CLI N AVIGATION OMMANDS SHOW HISTORY show history Overview This command lists the commands entered in the current session. The history buffer is cleared automatically upon reboot. The output lists all command line entries, including commands that returned an error. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 79: Chapter 2: File And Configuration Management Commands
File and Configuration Management Commands Introduction Overview This chapter provides an alphabetical reference of AlliedWare Plus™ OS file and configuration management commands. Filename Syntax Many of the commands in this chapter use the placeholder “filename” to represent and Keyword the name and location of the file that you want to act on. The following table Usage explains the syntax of the filename for each different type of file location.
Page 80 ILE AND ONFIGURATION ANAGEMENT OMMANDS Valid characters The filename and path can include characters from up to four categories. The categories are: uppercase letters: A to Z lowercase letters: a to z digits: 0 to 9 special symbols: most printable ASCII characters not included in the previous three categories, including the following characters: •...
Page 81 ILE AND ONFIGURATION ANAGEMENT OMMANDS • “boot system backup” on page 87 • “cd” on page 88 • “copy (filename)” on page 89 • “copy current-software” on page 91 • “copy debug” on page 92 • “copy running-config” on page 93 •...
Page 82: Autoboot Enable
ILE AND ONFIGURATION ANAGEMENT OMMANDS AUTOBOOT ENABLE autoboot enable Overview This command enables the device to restore a release file and/or a configuration file from external media, such as an SD card. When the Autoboot feature is enabled, the device looks for a special file called autoboot.txt on the external media.
Page 83: Boot Config-File
ILE AND ONFIGURATION ANAGEMENT OMMANDS BOOT CONFIG FILE boot config-file Overview Use this command to set the configuration file to use during the next boot cycle. Use the no variant of this command to remove the configuration file. Syntax boot config-file <filepath-filename> no boot config-file Parameter Description...
Page 84 ILE AND ONFIGURATION ANAGEMENT OMMANDS BOOT CONFIG FILE To stop running the configuration file “branch.cfg” stored on the device’s SD card filesystem when the device boots up, use the commands: awplus# configure terminal awplus(config)# no boot config-file card:/branch.cfg Related boot config-file backup Commands boot system boot system backup...
Page 85: Boot Config-File Backup
ILE AND ONFIGURATION ANAGEMENT OMMANDS BOOT CONFIG FILE BACKUP boot config-file backup Overview Use this command to set a backup configuration file to use if the main configuration file cannot be accessed. Use the no variant of this command to remove the backup configuration file. Syntax boot config-file backup <filepath-filename>...
Page 86: Boot System
ILE AND ONFIGURATION ANAGEMENT OMMANDS BOOT SYSTEM boot system Overview Use this command to set the release file to load during the next boot cycle. Use the no variant of this command to stop specifying a primary release file to boot from.
Page 87: Boot System Backup
ILE AND ONFIGURATION ANAGEMENT OMMANDS BOOT SYSTEM BACKUP boot system backup Overview Use this command to set a backup release file to load if the main release file cannot be loaded. Use the no variant of this command to stop specifying a backup release file. Syntax boot system backup <filepath-filename>...
Page 88 ILE AND ONFIGURATION ANAGEMENT OMMANDS Overview This command changes the current working directory. cd <directory-name> Syntax Parameter Description <directory-name> Name and path of the directory. Mode Privileged Exec To change to the directory called images, use the command: Example awplus# cd images Related Commands...
Page 89: Copy (Filename)
ILE AND ONFIGURATION ANAGEMENT OMMANDS COPY FILENAME copy (filename) Overview This command copies a file. This allows you to: • copy files from your device to a remote device • copy files from a remote device to your device • copy files stored on Flash memory to or from a different memory type, such as an SD card •...
Page 90 ILE AND ONFIGURATION ANAGEMENT OMMANDS COPY FILENAME To copy the file “config.cfg” into the current directory from an SD (or SDHC) Card, and rename it to “configtest.cfg”, use the command: awplus# copy card:/config.cfg configtest.cfg To copy the file “config.cfg” into the current directory from a remote file server, and rename it to “configtest.cfg”, use the command: awplus# copy fserver:/config.cfg configtest.cfg...
Page 91: Copy Current-Software
ILE AND ONFIGURATION ANAGEMENT OMMANDS COPY CURRENT SOFTWARE copy current-software Overview This command copies the AlliedWare Plus™ OS software that the device has booted from, to a destination file. Specify whether the destination is Flash or card when saving the software to the local filesystem. copy current-software <destination-name>...
Page 92: Copy Debug
ILE AND ONFIGURATION ANAGEMENT OMMANDS COPY DEBUG copy debug Overview This command copies a specified debug file to a destination file. copy debug {<destination-name>|card|debug|flash|scp|tftp} Syntax {<source-name>|card|debug|flash|scp|tftp} Parameter Description <destination-name> The filename and path where you would like the debug output saved. See Introduction on page 79 for valid syntax.
Page 93: Copy Running-Config
ILE AND ONFIGURATION ANAGEMENT OMMANDS COPY RUNNING CONFIG copy running-config Overview This command copies the running-config to a destination file, or copies a source file into the running-config. Commands entered in the running-config do not survive a device reboot unless they are saved in a configuration file. copy <source-name>...
Page 94: Copy Startup-Config
ILE AND ONFIGURATION ANAGEMENT OMMANDS COPY STARTUP CONFIG copy startup-config Overview This command copies the startup-config script into a destination file, or alternatively copies a configuration script from a source file into the startup-config file. Specify whether the destination is Flash or card when loading from the local filesystem.
Page 95: Copy Zmodem
ILE AND ONFIGURATION ANAGEMENT OMMANDS COPY ZMODEM copy zmodem Overview This command allows you to copy files using ZMODEM using Minicom. ZMODEM works over a serial connection and does not need any interfaces configured to do a file transfer. copy <source-name> zmodem Syntax copy zmodem Parameter...
Page 96: Create Autoboot
ILE AND ONFIGURATION ANAGEMENT OMMANDS CREATE AUTOBOOT create autoboot Use this command to create an autoboot.txt file on external media. This Overview command will automatically ensure that the keys and values that are expected in this file are correct. After the file is created the create autoboot command will copy the current release and configuration files across to the external media.
Page 97: Delete
ILE AND ONFIGURATION ANAGEMENT OMMANDS DELETE delete Overview This command deletes files or directories. delete [force] [recursive] <filename> Syntax Parameter Description force Ignore nonexistent filenames and never prompt before deletion. recursive Remove the contents of directories recursively. <filename> The filename and path of the file to delete. See Introduction on page 79 for valid syntax.
Page 98: Delete Debug
ILE AND ONFIGURATION ANAGEMENT OMMANDS DELETE DEBUG delete debug Overview Use this command to delete a specified debug output file. delete debug <source-name> Syntax Parameter Description <source-name> The filename and path where the debug output originates. Introduction on page 79 for valid URL syntax. Mode Privileged Exec Example...
Page 99 ILE AND ONFIGURATION ANAGEMENT OMMANDS Overview This command lists the files on a filesystem. If no directory or file is specified then this command lists the files in the current working directory. dir [all] [recursive] [sort [reverse] [name|size|time] Syntax [<filename>|card|debug|flash|nvs] Parameter Description List all files.
Page 100 ILE AND ONFIGURATION ANAGEMENT OMMANDS To list the files by size, smallest to largest, use the command: awplus# dir sort reverse size To sort the files by modification time, oldest to newest, use the command: awplus# dir sort reverse time Output Figure 2-4: Example output from the dir command...
Page 101: Edit
ILE AND ONFIGURATION ANAGEMENT OMMANDS EDIT edit Overview This command opens a text file in the AlliedWare Plus™ text editor. Once opened you can use the editor to alter to the file. If a filename is specified and it already exists, then the editor opens it in the text editor.
Page 102: Edit (Filename)
ILE AND ONFIGURATION ANAGEMENT OMMANDS EDIT FILENAME edit (filename) Overview This command opens a remote text file as read-only in the AlliedWare Plus™ text editor. Before starting the editor make sure your terminal, terminal emulation program, or Telnet client is 100% compatible with a VT100 terminal. The editor uses VT100 control sequences to display text on the terminal.
Page 103: Erase Factory-Default
ILE AND ONFIGURATION ANAGEMENT OMMANDS ERASE FACTORY DEFAULT erase factory-default Overview This command erases all data from flash excluding the following: • the current release file • the backup release file • license files The device is then rebooted and returned to its factory default condition. The device can then be used for AMF automatic node recovery.
Page 104: Erase Startup-Config
ILE AND ONFIGURATION ANAGEMENT OMMANDS ERASE STARTUP CONFIG erase startup-config Overview This command deletes the file that is set as the startup-config file, which is the configuration file that the system runs when it boots up. At the next restart, the device loads the default configuration file, default.cfg. If default.cfg no longer exists, then the device loads with the factory default configuration.
Page 105: Ip Tftp Source-Interface
ILE AND ONFIGURATION ANAGEMENT OMMANDS IP TFTP SOURCE INTERFACE ip tftp source-interface Overview Use this command to manually specify the IP address that all TFTP requests originate from. This is useful in network configurations where TFTP servers only accept requests from certain devices, or where the server cannot dynamically determine the source of the request.
Page 106: Ipv6 Tftp Source-Interface
ILE AND ONFIGURATION ANAGEMENT OMMANDS TFTP SOURCE INTERFACE ipv6 tftp source-interface Overview Use this command to manually specify the IPv6 address that all TFTP requests originate from. This is useful in network configurations where TFTP servers only accept requests from certain devices, or where the server cannot dynamically determine the source of the request.
Page 107: Mkdir
ILE AND ONFIGURATION ANAGEMENT OMMANDS MKDIR mkdir Overview This command makes a new directory. mkdir <name> Syntax Parameter Description <name> The name and path of the directory that you are creating. Mode Privileged Exec Usage You cannot name a directory or subdirectory flash, nvs, usb, card, tftp, scp, sftp or http.
Page 108: Move
ILE AND ONFIGURATION ANAGEMENT OMMANDS MOVE move Overview This command renames or moves a file. move <source-name> <destination-name> Syntax Parameter Description <source-name> The filename and path of the source file. See Introduction on page 79 for valid syntax. <destination-name> The filename and path of the destination file. See Introduction on page 79 for valid syntax.
Page 109: Move Debug
ILE AND ONFIGURATION ANAGEMENT OMMANDS MOVE DEBUG move debug Overview This command moves a specified debug file to a destination debug file. move debug {<destination-name>|card|debug|flash} Syntax Parameter Description <destination-name> The filename and path where you would like the debug output moved to. See Introduction on page 79 for valid syntax.
Page 110 ILE AND ONFIGURATION ANAGEMENT OMMANDS Overview This command prints the current working directory. Syntax Mode Privileged Exec Example To print the current working directory, use the command: awplus# Related Commands C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 111: Rmdir
ILE AND ONFIGURATION ANAGEMENT OMMANDS RMDIR rmdir Overview This command removes a directory. This command only works on empty directories, unless you specify the optional force keyword. rmdir [force] <name> Syntax Parameter Description force Optional keyword that allows you to delete directories that are not empty and contain files or subdirectories.
Page 112: Show Autoboot
ILE AND ONFIGURATION ANAGEMENT OMMANDS SHOW AUTOBOOT show autoboot Overview This command displays the Autoboot configuration and status. show autoboot Syntax Mode Privileged Exec Example To show the Autoboot configuration and status, use the command: awplus# show autoboot Output Figure 2-6: Example output from the show autoboot command awplus#show autoboot...
Page 113: Show Boot
ILE AND ONFIGURATION ANAGEMENT OMMANDS SHOW BOOT show boot Overview This command displays the current boot configuration. We recommend that the currently running release is set as the current boot image. show boot Syntax Mode Privileged Exec Example To show the current boot configuration, use the command: awplus# show boot Output...
Page 114 ILE AND ONFIGURATION ANAGEMENT OMMANDS SHOW BOOT Table 2-1: Parameters in the output from show boot (cont.) Parameter Description Backup boot config The configuration file to use during the next boot cycle if the main configuration file cannot be loaded. Autoboot status The status of the Autoboot feature;...
Page 115: Show File
ILE AND ONFIGURATION ANAGEMENT OMMANDS SHOW FILE show file Overview This command displays the contents of a specified file. show file <filename> Syntax Parameter Description <filename> Name of a file on the local Flash filesystem, or name and directory path of a file. Mode Privileged Exec To display the contents of the file oldconfig.cfg, which is in the current...
Page 116: Show File Systems
ILE AND ONFIGURATION ANAGEMENT OMMANDS SHOW FILE SYSTEMS show file systems Overview This command lists the filesystems and their utilization information where appropriate. show file systems Syntax Mode Privileged Exec Examples To display the filesystems, use the command: awplus# show file systems Output Figure 2-9: Example output from the show file systems command...
Page 117 ILE AND ONFIGURATION ANAGEMENT OMMANDS SHOW FILE SYSTEMS Table 3: Parameters in the output of the show file systems command (cont.) Parameter Description Prefixes The prefixes used when entering commands to access the filesystems; one of: flash system card tftp sftp http.
Page 118: Show Running-Config
Antivirus configuration application Application configuration as-path Autonomous system path filter configuration as-path access-list Configuration of ACLs for AS path filtering atmf Allied Telesis Management Framework configuration Border Gateway Protocol (BGP) configuration community-list Community-list configuration crypto Security-specific configuration dhcp DHCP configuration...
Page 119 ILE AND ONFIGURATION ANAGEMENT OMMANDS SHOW RUNNING CONFIG Parameter Description Internet Protocol (IP) configuration ip pim dense-mode PIM-DM configuration ip pim sparse-mode PIM-SM configuration ip route IP static route configuration ip-reputation IP Reputation configuration IPS configuration ipsec Internet Protocol Security (IPSec) configuration ipv6 Internet Protocol version 6 (IPv6)
Page 120 ILE AND ONFIGURATION ANAGEMENT OMMANDS SHOW RUNNING CONFIG Parameter Description switch Switch configuration web-control Web Control configuration Mode Privileged Exec and Global Configuration Example To display the current configuration of your device, use the command: awplus# show running-config Output Figure 2-10: Example output from show running-config awplus#show running-config...
Page 121: Show Running-Config Interface
ILE AND ONFIGURATION ANAGEMENT OMMANDS SHOW RUNNING CONFIG INTERFACE show running-config interface Overview This command displays the current configuration of one or more interfaces on the device. show running-config interface [<interface-list>] [dot1x|ip Syntax igmp|ip multicast|ip pim dense-mode|ip pim sparse-mode|ipv6 rip|lacp|mstp|ospf|rip|rstp|stp] Parameter Description <interface-list>...
Page 122 ILE AND ONFIGURATION ANAGEMENT OMMANDS SHOW RUNNING CONFIG INTERFACE To display the current running configuration of a device for VLAN 1, use the command: awplus# show running-config interface vlan1 To display the current running configuration of a device for VLANs 1 and 3-5, use the command: awplus# show running-config interface vlan1,vlan3-vlan5...
Page 123: Show Startup-Config
ILE AND ONFIGURATION ANAGEMENT OMMANDS SHOW STARTUP CONFIG show startup-config Overview This command displays the contents of the start-up configuration file, which is the file that the device runs on start-up. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 124: Show Version
ILE AND ONFIGURATION ANAGEMENT OMMANDS SHOW VERSION show version Overview This command displays the version number and copyright details of the current AlliedWare Plus™ OS your device is running. show version Syntax Mode User Exec and Privileged Exec Example To display the version details of your currently installed software, use the command: awplus# show version...
Page 125 ILE AND ONFIGURATION ANAGEMENT OMMANDS SHOW VERSION Corosync Cluster Engine  Copyright (c) 2002-2004 MontaVista Software, Inc. All rights reserved.  Copyright (c) 2005-2010 Red Hat, Inc. File Utility Library  Copyright (c) Ian F. Darwin 1986-1987, 1989-1992, 1994-1995.  Software written by Ian F.
Page 126: Unmount
ILE AND ONFIGURATION ANAGEMENT OMMANDS UNMOUNT unmount Overview Use this command to unmount an external storage device. We recommend you unmount storage devices before removing them, to avoid file corruption. This is especially important if files may be automatically written to the storage device, such as external log files or AMF backup files.
Page 127: Write File
ILE AND ONFIGURATION ANAGEMENT OMMANDS WRITE FILE write file Overview This command copies the running-config into the file that is set as the current startup-config file. This command is a synonym of the write memory and copy running-config startup-config commands. write [file] Syntax Mode...
Page 128: Write Memory
ILE AND ONFIGURATION ANAGEMENT OMMANDS WRITE MEMORY write memory Overview This command copies the running-config into the file that is set as the current startup-config file. This command is a synonym of the write file and copy running-config startup-config commands. write [memory] Syntax Mode...
Page 129: Write Terminal
ILE AND ONFIGURATION ANAGEMENT OMMANDS WRITE TERMINAL write terminal Overview This command displays the current configuration of the device. This command is a synonym of the show running-config command. write terminal Syntax Mode Privileged Exec Example To display the current configuration of your device, use the command: awplus# write terminal Related...
Page 130: Chapter 3: User Access Commands
User Access Commands Introduction Overview This chapter provides an alphabetical reference of commands used to configure user access. Command List • “clear line console” on page 132 • “clear line vty” on page 133 • “enable password” on page 134 •...
Page 131 CCESS OMMANDS • “service terminal-length (deleted)” on page 159 • “show privilege” on page 160 • “show security-password configuration” on page 161 • “show security-password user” on page 162 • “show telnet” on page 163 • “show users” on page 164 •...
Page 132: Clear Line Console
CCESS OMMANDS CLEAR LINE CONSOLE clear line console Overview This command resets a console line. If a terminal session exists on the line then the terminal session is terminated. If console line settings have changed then the new settings are applied. clear line console 0 Syntax Mode...
Page 133: Clear Line Vty
CCESS OMMANDS CLEAR LINE VTY clear line vty Overview This command resets a VTY line. If a session exists on the line then it is closed. clear line vty <0-32> Syntax Parameter Description <0-32> Line number Mode Privileged Exec Example To reset the first VTY line, use the command: awplus# clear line vty 1...
Page 134: Enable Password
CCESS OMMANDS ENABLE PASSWORD enable password Overview To set a local password to control access to various privilege levels, use the enable password Global Configuration command. Use the enable password command to modify or create a password to be used, and use the no enable password command to remove the password.
Page 135 CCESS OMMANDS ENABLE PASSWORD Note that the enable password command is an alias for the enable secret command and one password per privilege level is allowed using these commands. Do not assign one password to a privilege level with enable password and another password to a privilege level with enable...
Page 136 CCESS OMMANDS ENABLE PASSWORD this method. The output in the configuration file will show only the encrypted string, and not the text string. awplus# configure terminal awplus(config)# enable password 8 fU7zHzuutY2SA awplus(config)# This results in the following show output: awplus#show run Current configuration:...
Page 137: Enable Secret
CCESS OMMANDS ENABLE SECRET enable secret Overview To set a local password to control access to various privilege levels, use the enable secret Global Configuration command. Use the enable secret command to modify or create a password to be used, and use the no enable secret command to remove the password.
Page 138 CCESS OMMANDS ENABLE SECRET Note that the enable secret command is an alias for the enable password command and one password per privilege level is allowed using these commands. Do not assign one password to a privilege level with enable password and another password to a privilege level with enable...
Page 139 CCESS OMMANDS ENABLE SECRET The output in the configuration file will show only the encrypted string, and not the text string: awplus# configure terminal awplus(config)# enable secret 8 fU7zHzuutY2SA awplus(config)# This results in the following show output: awplus#show run Current configuration: hostname awplus...
Page 140: Exec-Timeout
CCESS OMMANDS EXEC TIMEOUT exec-timeout Overview This command sets the interval your device waits for user input from either a console or VTY connection. Once the timeout interval is reached, the connection is dropped. This command sets the time limit when the console or VTY connection automatically logs off after no activity.
Page 141 CCESS OMMANDS EXEC TIMEOUT Related line Commands service telnet C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 142: Flowcontrol Hardware (Asyn/Console)
CCESS OMMANDS FLOWCONTROL HARDWARE ASYN CONSOLE flowcontrol hardware (asyn/console) Overview Use this command to enable RTS/CTS (Ready To Send/Clear To Send) hardware flow control on a terminal console line (asyn port) between the DTE (Data Terminal Equipment) and the DCE (Data Communications Equipment). flowcontrol hardware Syntax no flowcontrol hardware...
Page 143 CCESS OMMANDS FLOWCONTROL HARDWARE ASYN CONSOLE Examples To enable hardware flow control on terminal console line asyn0, use the commands: awplus# configure terminal awplus(config)# line console 0 awplus(config-line)# flowcontrol hardware To disable hardware flow control on terminal console line asyn0, use the commands: awplus# configure terminal...
Page 144: Length (Asyn)
CCESS OMMANDS LENGTH ASYN length (asyn) Overview Use this command to specify the number of rows of output that the device will display before pausing, for the console or VTY line that you are configuring. The no variant of this command restores the length of a line (terminal session) attached to a console port or to a VTY to its default length of 22 rows.
Page 145: Line
CCESS OMMANDS LINE line Overview Use this command to enter line configuration mode for the specified VTYs or the console. The command prompt changes to show that the device is in Line Configuration mode. line vty <first-line> [<last-line>] Syntax line console 0 Parameter Description <first-line>...
Page 146 CCESS OMMANDS LINE To enter Line Configuration mode to configure the console (asyn 0) port terminal line, use the commands: awplus# configure terminal awplus(config)# line console 0 awplus(config-line)# Related accounting login Commands clear line console clear line vty flowcontrol hardware (asyn/console) length (asyn) login authentication privilege level...
Page 147: Privilege Level
CCESS OMMANDS PRIVILEGE LEVEL privilege level Overview This command sets a privilege level for VTY or console connections. The configured privilege level from this command overrides a specific user’s initial privilege level at the console login. privilege level <1-15> Syntax Mode Line Configuration Usage...
Page 148: Security-Password History
CCESS OMMANDS SECURITY PASSWORD HISTORY security-password history Overview This command specifies the number of previous passwords that are unable to be reused. A new password is invalid if it matches a password retained in the password history. The no variant of the command disables this feature. Syntax security-password history <0-15>...
Page 149: Security-Password Forced-Change
CCESS OMMANDS SECURITY PASSWORD FORCED CHANGE security-password forced-change Overview This command specifies whether or not a user is forced to change an expired password at the next login. If this feature is enabled, users whose passwords have expired are forced to change to a password that must comply with the current password security rules at the next login.
Page 150: Security-Password Lifetime
CCESS OMMANDS SECURITY PASSWORD LIFETIME security-password lifetime Overview This command enables password expiry by specifying a password lifetime in days. Note that when the password lifetime feature is disabled, it also disables the security-password forced-change command and the security-password warning command.
Page 151: Security-Password Min-Lifetime-Enforce
CCESS OMMANDS SECURITY PASSWORD MIN LIFETIME ENFORCE security-password min-lifetime-enforce Overview Use this command to configure a minimum number of days before a password can be changed by a user. With this feature enabled, once a user sets the password, the user cannot change it again until the minimum lifetime has passed.
Page 152: Security-Password Minimum-Categories
CCESS OMMANDS SECURITY PASSWORD MINIMUM CATEGORIES security-password minimum-categories Overview This command specifies the minimum number of categories that the password must contain in order to be considered valid. The password categories are: • uppercase letters: A to Z • lowercase letters: a to z •...
Page 153: Security-Password Minimum-Length
CCESS OMMANDS SECURITY PASSWORD MINIMUM LENGTH security-password minimum-length Overview This command specifies the minimum allowable password length. This value is checked against when there is a password change or a user account is created. security-password minimum-length <1-23> Syntax Parameter Description <1-23>...
Page 154: Security-Password Reject-Expired-Pwd
CCESS OMMANDS SECURITY PASSWORD REJECT EXPIRED security-password reject-expired-pwd Overview This command specifies whether or not a user is allowed to login with an expired password. Users with expired passwords are rejected at login if this functionality is enabled. Users then have to contact the Network Administrator to change their password.
Page 155: Security-Password Warning
CCESS OMMANDS SECURITY PASSWORD WARNING security-password warning Overview This command specifies the number of days before the password expires that the user will receive a warning message specifying the remaining lifetime of the password. Note that the warning period cannot be set unless the lifetime feature is enabled with the security-password lifetime command.
Page 156: Service Advanced-Vty
CCESS OMMANDS SERVICE ADVANCED service advanced-vty Overview This command enables the advanced-vty help feature. This allows you to use TAB completion for commands. Where multiple options are possible, the help feature displays the possible options. The no service advanced-vty command disables the advanced-vty help feature. Syntax service advanced-vty no service advanced-vty...
Page 157: Service Password-Encryption
CCESS OMMANDS SERVICE PASSWORD ENCRYPTION service password-encryption Overview Use this command to enable password encryption. This is enabled by default. When password encryption is enabled, the device displays passwords in the running config in encrypted form instead of in plain text. Use the no service password-encryption command to stop the device from displaying newly-entered passwords in encrypted form.
Page 158: Service Telnet
CCESS OMMANDS SERVICE TELNET service telnet Overview Use this command to enable the telnet server. The server is enabled by default. Enabling the telnet server starts the device listening for incoming telnet sessions on the configured port. The server listens on port 23, unless you have changed the port by using the privilege level command.
Page 159: Service Terminal-Length (Deleted)
CCESS OMMANDS SERVICE TERMINAL LENGTH DELETED service terminal-length (deleted) Overview This command has been deleted in Software Version 5.4.5-0.1 and later. C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 160: Show Privilege
CCESS OMMANDS SHOW PRIVILEGE show privilege Overview This command displays the current user privilege level, which can be any privilege level in the range <1-15>. Privilege levels <1-6> allow limited user access (all User Exec commands), privilege levels <7-14> allow restricted user access (all User Exec commands plus Privileged Exec show commands).
Page 161: Show Security-Password Configuration
CCESS OMMANDS SHOW SECURITY PASSWORD CONFIGURATION show security-password configuration Overview This command displays the configuration settings for the various security password rules. show security-password configuration Syntax Mode Privileged Exec Example To display the current security-password rule configuration settings, use the command: awplus# show security-password configuration...
Page 162: Show Security-Password User
CCESS OMMANDS SHOW SECURITY PASSWORD USER show security-password user Overview This command displays user account and password information for all users. show security-password user Syntax Mode Privileged Exec Example To display the system users’ remaining lifetime or last password change, use the command: awplus# show security-password user...
Page 163: Show Telnet
CCESS OMMANDS SHOW TELNET show telnet Overview This command shows the Telnet server settings. show telnet Syntax Mode User Exec and Privileged Exec Example To show the Telnet server settings, use the command: awplus# show telnet Output Figure 3-4: Example output from the show telnet command Telnet Server Configuration...
Page 164: Show Users
CCESS OMMANDS SHOW USERS show users Overview This command shows information about the users who are currently logged into the device. show users Syntax Mode User Exec and Privileged Exec Example To show the users currently connected to the device, use the command: awplus# show users Output...
Page 165: Telnet
CCESS OMMANDS TELNET telnet Overview Use this command to open a telnet session to a remote device. telnet {<hostname>|[ip] <ipv4-addr>|[ipv6] <ipv6-addr>} Syntax [<port>] Parameter Description <hostname> The host name of the remote system. Keyword used to specify the IPv4 address or host name of a remote system.
Page 166: Telnet Server
CCESS OMMANDS TELNET SERVER telnet server Overview This command enables the telnet server on the specified TCP port. If the server is already enabled then it will be restarted on the new port. Changing the port number does not affect the port used by existing sessions. telnet server {<1-65535>|default} Syntax Parameter...
Page 167: Terminal Length
CCESS OMMANDS TERMINAL LENGTH terminal length Overview Use the terminal length command to specify the number of rows of output that the device will display before pausing, for the currently-active terminal only. Use the terminal no length command to remove the length specified by this command.
Page 168: Terminal Resize
CCESS OMMANDS TERMINAL RESIZE terminal resize Overview Use this command to automatically adjust the number of rows of output on the console, which the device will display before pausing, to the number of rows configured on the user’s terminal. terminal resize Syntax Mode User Exec and Privileged Exec...
Page 169: Username
CCESS OMMANDS USERNAME username Overview This command creates or modifies a user to assign a privilege level and a password. : The default username privilege level of 1 is not shown in running-config output. NOTE Any username privilege level that has been modified from the default is shown. Syntax username <name>...
Page 170 CCESS OMMANDS USERNAME Usage An intermediate CLI security level (privilege level 7 to privilege level 14) allows a CLI user access to the majority of show commands, including the platform show commands that are available at privilege level 1 to privilege level 6. Note that some show commands, such as show running-configuration and show startup-configuration, are only available at privilege level 15.
Page 171: Chapter 4: Feature Licensing Commands
Feature Licensing Commands Introduction Overview This chapter provides an alphabetical reference for each of the Feature Licensing commands. Feature Licensing enables you to use advanced features such as Layer 3 routing. To see which Feature Licenses are available for your device, see the AlliedWare Plus Datasheet.
Page 172: License
EATURE ICENSING OMMANDS LICENSE license Overview This command activates the licensed software feature set on a device. Use the no variant of this command to deactivate the licensed software feature set on a device. For feature licenses, contact your authorized distributor or reseller. If a license key expires or is incorrect so the license key is invalid, then some software features will be unavailable.
Page 173: Show License
EATURE ICENSING OMMANDS SHOW LICENSE show license Overview This command displays information about a specific software feature license, or all enabled software feature licenses on the device. show license [feature] [<label>|index <index-number>] Syntax Parameter Description feature Only display license information for any applied feature licenses. <label>...
Page 174: Show License Brief
EATURE ICENSING OMMANDS SHOW LICENSE Related license Commands show license brief C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 175: Show License Brief
EATURE ICENSING OMMANDS SHOW LICENSE BRIEF show license brief Overview This command displays information about a specific software feature license, or all enabled software feature licenses on the device. show license [feature] [<label>|index <index-number>] brief Syntax Parameter Description feature Only display license information for any applied feature licenses. <label>...
Page 176: Chapter 5: Subscription Licensing Commands
Subscription Licensing Commands Introduction Overview This chapter provides an alphabetical reference for each of the Subscription Licensing commands. For Software Version 5.4.6-2.x and later, Subscription Licensing enables you to use OpenFlow. To see the OpenFlow subscriptions for your device, see the AlliedWare Plus Datasheet.
Page 177: License Update (Filename)
Use this command to load a license, after you have manually copied the license file onto the device. Only use this command if you cannot directly access the Allied Telesis Download Center from this device. Otherwise, use the command license update online instead.
Page 178: License Update Online
LICENSE UPDATE ONLINE license update online Overview Use this command to add or update subscription licenses from the Allied Telesis Download Center, to subscribe to features such as OpenFlow. When you enter this command, the device will: Connect to the Download Center Check if new or changed licenses are available for the device, keyed to the device’s serial number...
Page 179: Show License External
UBSCRIPTION ICENSING OMMANDS SHOW LICENSE EXTERNAL show license external Overview Use this command to show information about subscription (external) licenses. show license external Syntax Mode Privileged Exec Examples To show information about what subscription features the device is licensed for, use the following command: awplus#show license external Output...
Page 180: Chapter 6: Gui Commands
GUI Commands Introduction Overview This chapter provides an alphabetical reference of commands used to configure the GUI. For more information, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide Command List • “atmf topology-gui enable” on page 181 •...
Page 181: Atmf Topology-Gui Enable
GUI C OMMANDS ATMF TOPOLOGY GUI ENABLE atmf topology-gui enable Overview Use this command to enable the operation of Vista Manager EX on the Master device. Vista Manager EX delivers state-of-the-art monitoring and management for your Autonomous Management Framework™ (AMF) network, by automatically creating a complete topology map of switches, firewalls and wireless access points (APs).
Page 182: Gui-Timeout
GUI C OMMANDS TIMEOUT gui-timeout Overview Use this command to configure an idle timeout period for a GUI session. The time can be set in minutes and/or seconds. Use the no variant of this command to disable the GUI session idle timeout. Syntax gui-timeout <minutes>...
Page 183: Log Event-Host
GUI C OMMANDS LOG EVENT HOST log event-host Overview Use this command to set up an external host to log AMF topology events through Vista Manager. This command is run on the Master device. Use the no variant of this command to disable log events through Vista Manager. Syntax log event-host [<ipv4-addr>|<ipv6-addr>] atmf-topology-event no log event-host [<ipv4-addr>|<ipv6-addr>] atmf-topology-event...
Page 184: Service Http
GUI C OMMANDS SERVICE HTTP service http Overview Use this command to enable the HTTP (Hypertext Transfer Protocol) service. This service is required to support Vista Manager EX™ and the AlliedWare Plus™ GUI Java applet. Use the no variant of this command to disable the HTTP feature. service http Syntax no service http...
Page 185: Show Http
GUI C OMMANDS SHOW HTTP show http Overview This command shows the HTTP server settings. show http Syntax Mode User Exec and Privileged Exec Example To show the HTTP server settings, use the command: awplus# show http Output Figure 6-2: Example output from the show http command awplus#show http...
Page 186: Introduction
System Configuration and Monitoring Commands Introduction Overview This chapter provides an alphabetical reference of commands for configuring and monitoring the system. Command List • “banner exec” on page 188 • “banner login (system)” on page 190 • “banner motd” on page 192 •...
Page 187 YSTEM ONFIGURATION AND ONITORING OMMANDS • “show interface memory” on page 219 • “show memory” on page 221 • “show memory allocations” on page 223 • “show memory history” on page 225 • “show memory pools” on page 226 • “show memory shared”...
Page 188: Banner Exec
YSTEM ONFIGURATION AND ONITORING OMMANDS BANNER EXEC banner exec Overview This command configures the User Exec mode banner that is displayed on the console after you login. The banner exec default command restores the User Exec banner to the default banner. Use the no banner exec command to disable the User Exec banner and remove the default User Exec banner.
Page 189 YSTEM ONFIGURATION AND ONITORING OMMANDS BANNER EXEC To remove the User Exec mode banner after login, enter the following commands: awplus#configure terminal awplus(config)#no banner exec awplus(config)#exit awplus#exit  awplus login: manager Password:  awplus> Related banner login (system) Commands banner motd C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™...
Page 190: Banner Login (System)
YSTEM ONFIGURATION AND ONITORING OMMANDS BANNER LOGIN SYSTEM banner login (system) Overview This command configures the login banner that is displayed on the console when you login. The login banner is displayed on all connected terminals. The login banner is displayed after the MOTD (Message-of-the-Day) banner and before the login username and password prompts.
Page 191: Banner Motd
YSTEM ONFIGURATION AND ONITORING OMMANDS BANNER LOGIN SYSTEM Related banner exec Commands banner motd C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 192: Banner Motd
YSTEM ONFIGURATION AND ONITORING OMMANDS BANNER MOTD banner motd Overview Use this command to create or edit the text MotD (Message-of-the-Day) banner displayed before login. The MotD banner is displayed on all connected terminals. The MotD banner is useful for sending messages that affect all network users, for example, any imminent system shutdowns.
Page 193 YSTEM ONFIGURATION AND ONITORING OMMANDS BANNER MOTD awplus>enable awplus#configure terminal Enter configuration commands, one per line. End with CNTL/Z. awplus(config)#no banner motd awplus(config)#exit awplus#exit  awplus login: manager Password:  AlliedWare Plus (TM) 5.4.7 01/03/17 12:00:00  awplus> Related banner exec Commands banner login (system) C613-50172-01 Rev B...
Page 194: Clock Set
YSTEM ONFIGURATION AND ONITORING OMMANDS CLOCK SET clock set Overview This command sets the time and date for the system clock. clock set <hh:mm:ss> <day> <month> <year> Syntax Parameter Description <hh:mm:ss> Local time in 24-hour format <day> Day of the current month, from 1 to 31 <month>...
Page 195: Clock Summer-Time Date
YSTEM ONFIGURATION AND ONITORING OMMANDS CLOCK SUMMER TIME DATE clock summer-time date Overview This command defines the start and end of summertime for a specific year only, and specifies summertime’s offset value to Standard Time for that year. The no variant of this command removes the device’s summertime setting. This clears both specific summertime dates and recurring dates (set with the clock summer-time recurring...
Page 196 YSTEM ONFIGURATION AND ONITORING OMMANDS CLOCK SUMMER TIME DATE Related clock summer-time recurring Commands clock timezone C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 197: Clock Summer-Time Recurring
YSTEM ONFIGURATION AND ONITORING OMMANDS CLOCK SUMMER TIME RECURRING clock summer-time recurring Overview This command defines the start and end of summertime for every year, and specifies summertime’s offset value to Standard Time. The no variant of this command removes the device’s summertime setting. This clears both specific summertime dates (set with the clock summer-time date command) and recurring dates.
Page 198 YSTEM ONFIGURATION AND ONITORING OMMANDS CLOCK SUMMER TIME RECURRING Mode Global Configuration Examples To set a summertime definition for New Zealand using NZST (UTC+12:00) as the standard time, and NZDT (UTC+13:00) as summertime, with summertime set to start on the last Sunday in September, and end on the 1st Sunday in April, use the command: awplus(config)# clock summer-time NZDT recurring 5 sun sep 2:00...
Page 199: Clock Timezone
YSTEM ONFIGURATION AND ONITORING OMMANDS CLOCK TIMEZONE clock timezone Overview This command defines the device’s clock timezone. The timezone is set as a offset to the UTC. The no variant of this command resets the system time to UTC. By default, the system time is set to UTC. clock timezone <timezone-name>...
Page 200: Ecofriendly Led
YSTEM ONFIGURATION AND ONITORING OMMANDS ECOFRIENDLY LED ecofriendly led Overview Use this command to enable the eco-friendly LED (Light Emitting Diode) feature, which turns off power to the port LEDs. Power to the system status LED is not disabled. Use the no variant of this command to disable the eco-friendly LED feature. Syntax ecofriendly led no ecofriendly led...
Page 201: Findme
YSTEM ONFIGURATION AND ONITORING OMMANDS FINDME findme Overview Use this command to physically locate a specific device from a group of similar devices. Activating the command causes a selected number of port LEDs to alternately flash green then amber (if that device has amber LEDs) at a rate of 1 Hz. Use the no variant of this command to deactivate the Find Me feature prior to the timeout expiring.
Page 202 YSTEM ONFIGURATION AND ONITORING OMMANDS FINDME To deactivate the Find Me feature, use the following command: awplus# no findme C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 203: Hostname
YSTEM ONFIGURATION AND ONITORING OMMANDS HOSTNAME hostname Overview This command sets the name applied to the device as shown at the prompt. The hostname is: • displayed in the output of the show system command • displayed in the CLI prompt so you know which device you are configuring •...
Page 204 YSTEM ONFIGURATION AND ONITORING OMMANDS HOSTNAME : When AMF is configured, running the no hostname command will apply a NOTE hostname that is based on the MAC address of the device node, for example, node_0000_5e00_5301. Related show system Commands C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™...
Page 205: Max-Fib-Routes
YSTEM ONFIGURATION AND ONITORING OMMANDS ROUTES max-fib-routes Overview This command enables you to control the maximum number of FIB routes configured. It operates by providing parameters that enable you to configure preset maximums and warning message thresholds. : For static routes use the max-static-routes command.
Page 206: Max-Static-Routes
YSTEM ONFIGURATION AND ONITORING OMMANDS STATIC ROUTES max-static-routes Overview Use this command to set the maximum number of static routes, excluding FIB (Forwarding Information Base) routes. : For FIB routes use the max-fib-routes command. NOTE Use the no variant of this command to set the maximum number of static routes to the default of 1000 static routes.
Page 207: No Debug All
YSTEM ONFIGURATION AND ONITORING OMMANDS NO DEBUG ALL no debug all Overview This command disables the debugging facility for all features on your device. This stops the device from generating any diagnostic debugging messages. The debugging facility is disabled by default. Syntax no debug all [ipv6|dot1x|nsm|rip] Parameter...
Page 208: Reboot
YSTEM ONFIGURATION AND ONITORING OMMANDS REBOOT reboot Overview This command halts the device and performs a cold restart (also known as reload). It displays a confirmation request before restarting. reboot Syntax reload Mode Privileged Exec Usage The reboot and reload commands perform the same action. Examples To restart the device, use the command: awplus#...
Page 209: Reload
YSTEM ONFIGURATION AND ONITORING OMMANDS RELOAD reload Overview This command performs the same function as the reboot command. C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 210: Show Clock
YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW CLOCK show clock Overview This command displays the system’s current configured local time and date. It also displays other clock related information such as timezone and summertime configuration. show clock Syntax Mode User Exec and Privileged Exec Example To display the system’s current local time, use the command: awplus#...
Page 211 YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW CLOCK Related clock set Commands clock summer-time date clock summer-time recurring clock timezone C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 212: Show Cpu
YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW CPU show cpu Overview This command displays a list of running processes with their CPU utilization. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 213 YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW CPU Output Figure 7-2: Example output from show cpu CPU averages: 1 second: 12%, 20 seconds: 2%, 60 seconds: 2% System load averages: 1 minute: 0.03, 5 minutes: 0.02, 15 minutes: 0.00 Current CPU load: userspace: 6%, kernel: 4%, interrupts: 1% iowaits: 0%...
Page 214 YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW CPU Table 2: Parameters in the output of the show cpu command (cont.) Parameter Description sleep% Percentage of time that the process is in the sleep state. runtime The time that the process has been running for, measured in jiffies.
Page 215: Show Cpu History
YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW CPU HISTORY show cpu history Overview This command prints a graph showing the historical CPU utilization. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 216 YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW CPU HISTORY Per minute CPU load history  100 90 80 70 + 50 40 30 20 ++ +++++++++ +++++++ ++++ + ++++++ ++++ +++ +++++ +++++++++ 10 ************************************************************ |..|..|..|..|..|..|..|..|..|..|..|.. Oldest Newest CPU load% per minute (last 60 minutes) * = average CPU load%, + = maximum...
Page 217: Show Debugging
User Exec and Privileged Exec Usage This command displays all debugging information, similar to the way the show tech-support command displays all show output for use by Allied Telesis authorized service personnel only. Example To display all debugging information, use the command: awplus#...
Page 218: Show Ecofriendly
YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW ECOFRIENDLY show ecofriendly Overview This command displays the switch’s eco-friendly configuration status. The ecofriendly led configuration status are shown in the show ecofriendly output. show ecofriendly Syntax Mode Privileged Exec and Global Configuration Example To display the switch’s eco-friendly configuration status, use the following command: awplus#...
Page 219: Show Interface Memory
This command displays the shared memory used by either all interfaces, or the specified interface or interfaces. The output is useful for diagnostic purposes by Allied Telesis authorized service personnel. For information on filtering and saving command output, see the “Getting Started...
Page 220 YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW INTERFACE MEMORY Output Figure 7-6: Example output from the show interface memory command awplus#show interface memory Vlan blocking state shared memory usage --------------------------------------------- Interface shmid Bytes Used nattch Status port1.0.1 393228 1 port1.0.2 458766 1...
Page 221: Show Memory
YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW MEMORY show memory Overview This command displays the memory used by each process that is currently running For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 222 YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW MEMORY Table 4: Parameters in the output of the show memory command Parameter Description RAM total Total amount of RAM memory free. free Available memory size. buffers Memory allocated kernel buffers. Identifier number for the process. name Short name used to describe the process.
Page 223: Show Memory Allocations
YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW MEMORY ALLOCATIONS show memory allocations Overview This command displays the memory allocations used by processes. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 224: Show Memory History
YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW MEMORY ALLOCATIONS Related show memory Commands show memory history show memory pools show memory shared show tech-support C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 225: Show Memory History
YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW MEMORY HISTORY show memory history Overview This command prints a graph showing the historical memory usage. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 226: Show Memory Pools
YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW MEMORY POOLS show memory pools Overview This command shows the memory pools used by processes. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 227: Show Memory Shared
Overview This command displays shared memory allocation information. The output is useful for diagnostic purposes by Allied Telesis authorized service personnel. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 228: Show Process
YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW PROCESS show process Overview This command lists a summary of the current running processes. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide. Syntax show process [sort {cpu|mem}] Parameter...
Page 229 YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW PROCESS Table 5: Parameters in the output from the show process command Parameter Description CPU averages Average CPU utilization for the periods stated. System load The average number of processes waiting for CPU time for the averages periods stated.
Page 230: Show Reboot History
YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW REBOOT HISTORY show reboot history Overview Use this command to display the device’s reboot history. show reboot history Syntax Mode User Exec and Privileged Exec Example To show the reboot history, use the command: awplus# show reboot history Output...
Page 231: Show Router-Id
YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW ROUTER show router-id Overview Use this command to show the Router ID of the current system. show router-id Syntax Mode User Exec and Privileged Exec Example To display the Router ID of the current system, use the command: awplus# show router-id Output...
Page 232: Show System
YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW SYSTEM show system Overview This command displays general system information about the device, including the hardware, memory usage, and software version. It also displays location and contact details when these have been set. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 233: Show System Environment
Output Figure 7-17: Example output from show system environment awplus#show system environment Environment Monitoring Status  Overall Status: Normal  Resource ID: 1 Name: x230-10GP Sensor (Units) Reading Low Limit High Limit Status Fan: Fan 1 (Rpm) 4825 2025 Ok...
Page 234: Show System Interrupts
YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW SYSTEM INTERRUPTS show system interrupts Overview Use this command to display the number of interrupts for each IRQ (Interrupt Request) used to interrupt input lines on a PIC (Programmable Interrupt Controller) on your device. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 235: Show System Mac
YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW SYSTEM MAC show system mac Overview This command displays the physical MAC address of the device. show system mac Syntax Mode User Exec and Privileged Exec Example To display the physical MAC address enter the following command: awplus# show system mac Output...
Page 236: Show System Serialnumber
YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW SYSTEM SERIALNUMBER show system serialnumber Overview This command shows the serial number information for the device. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 237: Show Tech-Support
YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW TECH SUPPORT show tech-support Overview This command generates system and debugging information for the device and saves it to a file. This command is useful for collecting a large amount of information so that it can then be analyzed for troubleshooting purposes.
Page 238 YSTEM ONFIGURATION AND ONITORING OMMANDS SHOW TECH SUPPORT Parameter Description tacacs+ Display TACACS+ information update Display resource update specific information Output modifier > Output redirection >> Output redirection (append) outfile Output file name <filename> Specifies a name for the output file. If no name is specified, this file will be saved as: tech-support.txt.gz.
Page 239: Speed (Asyn)
YSTEM ONFIGURATION AND ONITORING OMMANDS SPEED ASYN speed (asyn) Overview This command changes the console speed from the device. Note that a change in console speed is applied for subsequent console sessions. Exit the current session to enable the console speed change using the clear line console command.
Page 240 YSTEM ONFIGURATION AND ONITORING OMMANDS SPEED ASYN Related clear line console Commands line show running-config show startup-config speed C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 241: System Territory (Deprecated)
YSTEM ONFIGURATION AND ONITORING OMMANDS SYSTEM TERRITORY DEPRECATED system territory (deprecated) Overview This command has been deprecated in Software Version 5.4.4-0.1 and later. It now has no effect. It is no longer useful to specify a system territory, so there is no alternative command.
Page 242: Terminal Monitor
YSTEM ONFIGURATION AND ONITORING OMMANDS TERMINAL MONITOR terminal monitor Overview Use this command to display debugging output on a terminal. To display the cursor after a line of debugging output, press the Enter key. Use the command terminal no monitor to stop displaying debugging output on the terminal, or use the timeout option to stop displaying debugging output on the terminal after a set time.
Page 243: Undebug All
YSTEM ONFIGURATION AND ONITORING OMMANDS UNDEBUG ALL undebug all Overview This command applies the functionality of the no debug all command. C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 244: Chapter 8: Pluggables And Cabling Commands
Pluggables and Cabling Commands Introduction Overview This chapter provides an alphabetical reference of commands used to configure and monitor Pluggables and Cabling, including: • Cable Fault Locator for finding faults in copper cabling • Optical Digital Diagnostic Monitoring (DDM) to help find fiber issues when links go down •...
Page 245: Clear Test Cable-Diagnostics Tdr
LUGGABLES AND ABLING OMMANDS CLEAR TEST CABLE DIAGNOSTICS TDR clear test cable-diagnostics tdr Overview Use this command to clear the results of the last cable test that was run. clear test cable-diagnostics tdr Syntax Mode Privileged Exec Examples To clear the results of a previous cable-diagnostics test use the following commands: awplus# clear test cable-diagnostics tdr...
Page 246: Debug Fiber-Monitoring
LUGGABLES AND ABLING OMMANDS DEBUG FIBER MONITORING debug fiber-monitoring Overview Use this command to enable debugging of active fiber monitoring on the specified ports. Use the no variant of this command to disable debugging on all ports or the specified ports. Syntax debug fiber-monitoring interface <port-list>...
Page 247 LUGGABLES AND ABLING OMMANDS DEBUG FIBER MONITORING Output Figure 8-1: Example output from debug fiber-monitoring awplus#debug fiber-monitoring interface port2.0.1 awplus#terminal monitor  % Warning: Console logging enabled awplus#01:42:50 awplus Pluggable[522]: Fiber-monitor port2.0.1: Channel:1 Reading:1748 Baseline:1708 Threshold:1356 01:42:52 awplus Pluggable[522]: Fiber-monitor port2.0.1: Channel:1 Reading:1717 Baseline:1709 Threshold:1357...
Page 248: Fiber-Monitoring Action
LUGGABLES AND ABLING OMMANDS FIBER MONITORING ACTION fiber-monitoring action Overview Use this command to specify an action to be taken if the optical power received on the port changes from the baseline by the amount specified in the fiber-monitoring sensitivity command. Use the no variant of this command to remove the specified action or all actions from the port.
Page 249: Fiber-Monitoring Baseline
LUGGABLES AND ABLING OMMANDS FIBER MONITORING BASELINE fiber-monitoring baseline Overview Use this command to configure how the baseline value for comparison is calculated for active fiber monitoring on the port. Note that alarm generation will not commence until the link has been up for a full averaging period.
Page 250 LUGGABLES AND ABLING OMMANDS FIBER MONITORING BASELINE Related fiber-monitoring interval Commands fiber-monitoring sensitivity C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 251: Fiber-Monitoring Enable
LUGGABLES AND ABLING OMMANDS FIBER MONITORING ENABLE fiber-monitoring enable Overview Use this command to enable active fiber monitoring on a fiber port. If the port can support fiber monitoring but does not have the correct SFP or fiber type installed, the configuration will be saved, and monitoring will commence when a supported SFP is inserted.
Page 252: Fiber-Monitoring Interval
LUGGABLES AND ABLING OMMANDS FIBER MONITORING INTERVAL fiber-monitoring interval Overview Use this command to configure the fiber monitoring polling interval in seconds for the port. The optical power will be read every <interval> seconds and compared against the calculated threshold values to see if a log message or other action is required.
Page 253: Fiber-Monitoring Sensitivity
LUGGABLES AND ABLING OMMANDS FIBER MONITORING SENSITIVITY fiber-monitoring sensitivity Overview Use this command to configure the sensitivity of the alarm thresholds on the port for active fiber monitoring. Use the no variant of this command to reset the sensitivity to the default. Syntax fiber-monitoring sensitivity (low|medium|high|highest|fixed <25-65535>)|relative <0.01-10.0>...
Page 254 LUGGABLES AND ABLING OMMANDS FIBER MONITORING SENSITIVITY Related fiber-monitoring action Commands fiber-monitoring baseline show system fiber-monitoring C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 255: Show System Fiber-Monitoring
LUGGABLES AND ABLING OMMANDS SHOW SYSTEM FIBER MONITORING show system fiber-monitoring Overview Use this command to display settings and current status for Active Fiber Monitoring. show system fiber-monitoring Syntax Mode User Exec/Privileged Exec Example To display configuration and status for active fiber monitoring on ports, use the command: awplus# show system fiber-monitoring...
Page 256 LUGGABLES AND ABLING OMMANDS SHOW SYSTEM FIBER MONITORING Table 8-1: Parameters in the output from show system fiber-monitoring Parameter Description Reading units The units for optical power readings in the rest of the display, e.g. 0.0001mW. Status Whether active fiber monitoring is enabled or disabled for this port.
Page 257 LUGGABLES AND ABLING OMMANDS SHOW SYSTEM FIBER MONITORING fiber-monitoring interval fiber-monitoring sensitivity C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 258: Show System Pluggable
Different types of pluggable transceivers are supported in different models of device. See your Allied Telesis dealer for more information about the models of pluggables that your device supports.
Page 259: Serial Number
LUGGABLES AND ABLING OMMANDS SHOW SYSTEM PLUGGABLE Table 9: Parameters in the output from the show system pluggable command Parameter Description Serial Number Specifies the serial number for the installed pluggable transceiver. Datecode Specifies the manufacturing datecode for the installed pluggable transceiver.
Page 260: Show System Pluggable Detail
Different types of pluggable transceivers are supported in different models of device. See your Allied Telesis dealer for more information about the models of pluggables that your device supports.
Page 261 LUGGABLES AND ABLING OMMANDS SHOW SYSTEM PLUGGABLE DETAIL • Power Monitoring: Displays the received power measurement type, which can be either OMA(Optical Module Amplitude) or Avg(Average Power) measured in μW. : For parameters that are not supported or not specified, a hyphen is displayed NOTE instead.
Page 262 LUGGABLES AND ABLING OMMANDS SHOW SYSTEM PLUGGABLE DETAIL Table 8-1: Parameters in the output from show system pluggable detail (cont.) Parameter Description Device Type Specifies the device type for the installed pluggable transceiver. Serial Number Specifies the serial number for the installed pluggable transceiver.
Page 263: Show System Pluggable Diagnostics
LUGGABLES AND ABLING OMMANDS SHOW SYSTEM PLUGGABLE DIAGNOSTICS show system pluggable diagnostics Overview This command displays diagnostic information about SFP pluggable transceivers that support Digital Diagnostic Monitoring (DDM). Different types of pluggable transceivers are supported in different models of device. See your device’s Datasheet for more information about the models of pluggables that your device supports.
Page 264 LUGGABLES AND ABLING OMMANDS SHOW SYSTEM PLUGGABLE DIAGNOSTICS Output Figure 8-5: Example output from the show system pluggable diagnostics command on a device awplus#show system pluggable diagnostics  System Pluggable Information Diagnostics  Port1.0.9 Status Alarms Warnings Min  Reading Alarm Warning Temp: (Degrees C)
Page 265: Show Test Cable-Diagnostics Tdr
LUGGABLES AND ABLING OMMANDS SHOW TEST CABLE DIAGNOSTICS TDR show test cable-diagnostics tdr Overview Use this command to display the results of the last cable-diagnostics test that was run using the TDR (Time Domain Reflectometer) on a fixed copper cable port. The displayed status of the cable can be either: •...
Page 266: Test Cable-Diagnostics Tdr Interface
LUGGABLES AND ABLING OMMANDS TEST CABLE DIAGNOSTICS TDR INTERFACE test cable-diagnostics tdr interface Overview Use this command to apply the Cable Fault Locator’s cable-diagnostics tests to twisted pair data cables for a selected port. The tests will detect either correct, short circuit, or open, circuit terminations.
Page 267: Chapter 9: Logging Commands
Logging Commands Introduction Overview This chapter provides an alphabetical reference of commands used to configure logging. See the Logging Feature Overview and Configuration Guide for more information about the different types of log and how to filter log messages. Command List •...
Page 268 OGGING OMMANDS • “log console (filter)” on page 292 • “log console exclude” on page 295 • “log email” on page 298 • “log email (filter)” on page 299 • “log email exclude” on page 302 • “log email time” on page 305 •...
Page 269: Clear Exception Log
OGGING OMMANDS CLEAR EXCEPTION LOG clear exception log Overview This command resets the contents of the exception log, but does not remove the associated core files. clear exception log Syntax Mode Privileged Exec awplus# clear exception log Example C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™...
Page 270: Clear Log
OGGING OMMANDS CLEAR LOG clear log Overview This command removes the contents of the buffered and permanent logs. clear log Syntax Mode Privileged Exec Example To delete the contents of the buffered and permanent log use the command: awplus# clear log Related clear log buffered Commands...
Page 271: Clear Log Buffered
OGGING OMMANDS CLEAR LOG BUFFERED clear log buffered Overview This command removes the contents of the buffered log. clear log buffered Syntax Mode Privileged Exec Example To delete the contents of the buffered log use the following commands: awplus# clear log buffered Related default log buffered Commands...
Page 272: Clear Log External
OGGING OMMANDS CLEAR LOG EXTERNAL clear log external Overview Use this command to delete the external log file from the SD card it is stored on. If the external log is rotating between multiple files, this command deletes all those files, not just the most recent one. Syntax clear log external Mode...
Page 273: Clear Log Permanent
OGGING OMMANDS CLEAR LOG PERMANENT clear log permanent Overview This command removes the contents of the permanent log. clear log permanent Syntax Mode Privileged Exec Example To delete the contents of the permanent log use the following commands: awplus# clear log permanent Related default log permanent Commands...
Page 274: Copy Buffered-Log
OGGING OMMANDS COPY BUFFERED copy buffered-log Overview Use this command to copy the buffered log to an internal or external destination. copy buffered-log <destination-name> Syntax Parameter Description <destination-name> The filename and path for the destination file. See Introduction on page 79 for valid syntax. Mode Privileged Exec Example...
Page 275: Copy Permanent-Log
OGGING OMMANDS COPY PERMANENT copy permanent-log Overview Use this command to copy the permanent log to an internal or external destination. copy permanent-log <destination-name> Syntax Parameter Description <destination-name> The filename and path for the destination file. See Introduction on page 79 for valid syntax. Mode Privileged Exec Example...
Page 276: Default Log Buffered
OGGING OMMANDS DEFAULT LOG BUFFERED default log buffered Overview This command restores the default settings for the buffered log stored in RAM. By default the size of the buffered log is 50 kB and it accepts messages with the severity level of “warnings” and above. default log buffered Syntax Default...
Page 277: Default Log Console
OGGING OMMANDS DEFAULT LOG CONSOLE default log console Overview This command restores the default settings for log messages sent to the terminal when a log console command is issued. By default all messages are sent to the console when a log console command is issued. default log console Syntax Mode...
Page 278: Default Log Email
OGGING OMMANDS DEFAULT LOG EMAIL default log email Overview This command restores the default settings for log messages sent to an email address. By default no filters are defined for email addresses. Filters must be defined before messages will be sent. This command also restores the remote syslog server time offset value to local (no offset).
Page 279: Default Log External
OGGING OMMANDS DEFAULT LOG EXTERNAL default log external Overview Use this command to restore the default settings for the external log. By default, the size of the external log is 50 kB, it rotates through 1 additional file, and it accepts messages with a severity level of notices and above.
Page 280: Default Log Host
OGGING OMMANDS DEFAULT LOG HOST default log host Overview This command restores the default settings for log sent to a remote syslog server. By default no filters are defined for remote syslog servers. Filters must be defined before messages will be sent. This command also restores the remote syslog server time offset value to local (no offset).
Page 281: Default Log Monitor
OGGING OMMANDS DEFAULT LOG MONITOR default log monitor Overview This command restores the default settings for log messages sent to the terminal when a terminal monitor command is used. default log monitor Syntax Default All messages are sent to the terminal when a terminal monitor command is used.
Page 282: Default Log Permanent
OGGING OMMANDS DEFAULT LOG PERMANENT default log permanent Overview This command restores the default settings for the permanent log stored in Flash. By default, the size of the permanent log is 50 kB and it accepts messages with the severity level of warnings and above. default log permanent Syntax Default...
Page 283: Log Buffered
OGGING OMMANDS LOG BUFFERED log buffered Overview This command configures the device to store log messages in RAM. Messages stored in RAM are not retained on the device over a restart. Once the buffered log reaches its configured maximum allowable size old messages will be deleted to make way for new ones.
Page 284: Log Buffered (Filter)
OGGING OMMANDS LOG BUFFERED FILTER log buffered (filter) Overview Use this command to create a filter to select messages to be sent to the buffered log. Selection can be based on the priority/ severity of the message, the program that generated the message, the logging facility used, a sub-string within the message or a combination of some or all of these.
Page 285 OGGING OMMANDS LOG BUFFERED FILTER Parameter Description imish Integrated Management Interface Shell (IMISH) epsr Ethernet Protection Switched Rings (EPSR) rmon Remote Monitoring loopprot Loop Protection dhcpsn DHCP snooping (DHCPSN) facility Filter messages to the buffered log by syslog facility. <facility> Specify one of the following syslog facilities to include messages from in the buffered log: kern Kernel messages...
Page 286 OGGING OMMANDS LOG BUFFERED FILTER To remove a filter that sends all messages generated by EPSR that have a severity of notices or higher to the buffered log, use the following commands: awplus# configure terminal awplus(config)# no log buffered level notices program epsr To remove a filter that sends all messages containing the text “Bridging initialization”...
Page 287: Log Buffered Exclude
OGGING OMMANDS LOG BUFFERED EXCLUDE log buffered exclude Overview Use this command to exclude specified log messages from the buffered log. You can exclude messages on the basis of: • the priority/severity of the message • the program that generated the message •...
Page 288 OGGING OMMANDS LOG BUFFERED EXCLUDE Parameter Description Integrated Management Interface (IMI) imish Integrated Management Interface Shell (IMISH) epsr Ethernet Protection Switched Rings (EPSR) rmon Remote Monitoring loopprot Loop Protection dhcpsn DHCP snooping (DHCPSN) facility Exclude messages from a syslog facility. <facility>...
Page 289: Log Buffered Size
OGGING OMMANDS LOG BUFFERED EXCLUDE log buffered log buffered (filter) log buffered size show log show log config C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 290: Log Buffered Size
OGGING OMMANDS LOG BUFFERED SIZE log buffered size Overview This command configures the amount of memory that the buffered log is permitted to use. Once this memory allocation has been filled old messages will be deleted to make room for new messages. log buffered size <50-250>...
Page 291: Log Console
OGGING OMMANDS LOG CONSOLE log console Overview This command configures the device to send log messages to consoles. The console log is configured by default to send messages to the device’s main console port. Use the no variant of this command to configure the device not to send log messages to consoles.
Page 292: Log Console (Filter)
OGGING OMMANDS LOG CONSOLE FILTER log console (filter) Overview This command creates a filter to select messages to be sent to all consoles when the log console command is given. Selection can be based on the priority/severity of the message, the program that generated the message, the logging facility used, a sub-string within the message or a combination of some or all of these.
Page 293 OGGING OMMANDS LOG CONSOLE FILTER Parameter Description loopprot Loop Protection dhcpsn DHCP snooping (DHCPSN) facility Filter messages by syslog facility. <facility> Specify one of the following syslog facilities to include messages from: kern Kernel messages user Random user-level messages mail Mail system daemon System daemons...
Page 294 OGGING OMMANDS LOG CONSOLE FILTER To remove a default filter that includes sending critical, alert and emergency level messages to the console, use the following commands: awplus# configure terminal awplus(config)# no log console level critical Related default log console Commands log console log console exclude show log config...
Page 295: Log Console Exclude
OGGING OMMANDS LOG CONSOLE EXCLUDE log console exclude Overview Use this command to prevent specified log messages from being sent to the console, when console logging is turned on. You can exclude messages on the basis of: • the priority/severity of the message •...
Page 296 OGGING OMMANDS LOG CONSOLE EXCLUDE Parameter Description mstp Multiple Spanning Tree Protocol (MSTP) Integrated Management Interface (IMI) imish Integrated Management Interface Shell (IMISH) epsr Ethernet Protection Switched Rings (EPSR) rmon Remote Monitoring loopprot Loop Protection dhcpsn DHCP snooping (DHCPSN) facility Exclude messages from a syslog facility.
Page 297: C613-50172-01 Rev B Command Reference For X230 Series
OGGING OMMANDS LOG CONSOLE EXCLUDE log console (filter) show log config C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 298: Log Email
OGGING OMMANDS LOG EMAIL log email Overview This command configures the device to send log messages to an email address. The email address is specified in this command. log email <email-address> Syntax Parameter Description <email-address> The email address to send log messages to Default By default no filters are defined for email log targets.
Page 299: Log Email (Filter)
OGGING OMMANDS LOG EMAIL FILTER log email (filter) Overview This command creates a filter to select messages to be sent to an email address. Selection can be based on the priority/ severity of the message, the program that generated the message, the logging facility used, a sub-string within the message or a combination of some or all of these.
Page 300 OGGING OMMANDS LOG EMAIL FILTER Parameter Description Integrated Management Interface (IMI) imish Integrated Management Interface Shell (IMISH) epsr Ethernet Protection Switched Rings (EPSR) rmon Remote Monitoring loopprot Loop Protection dhcpsn DHCP snooping (DHCPSN) facility Filter messages by syslog facility. <facility> Specify one of the following syslog facilities to include messages from: kern Kernel messages...
Page 301 OGGING OMMANDS LOG EMAIL FILTER To create a filter to send messages with a severity level of informational and above to the email address admin@alliedtelesis.com, use the following commands: awplus# configure terminal awplus(config)# log email admin@alliedtelesis.com level informational To stop the device emailing log messages emailed to the email address admin@alliedtelesis.com, use the following commands: awplus# configure terminal...
Page 302: Log Email Exclude
OGGING OMMANDS LOG EMAIL EXCLUDE log email exclude Overview Use this command to prevent specified log messages from being emailed, when the device is configured to send log messages to an email address. You can exclude messages on the basis of: •...
Page 303 OGGING OMMANDS LOG EMAIL EXCLUDE Parameter Description mstp Multiple Spanning Tree Protocol (MSTP) Integrated Management Interface (IMI) imish Integrated Management Interface Shell (IMISH) epsr Ethernet Protection Switched Rings (EPSR) rmon Remote Monitoring loopprot Loop Protection dhcpsn DHCP snooping (DHCPSN) facility Exclude messages from a syslog facility.
Page 304: Log Email Time
OGGING OMMANDS LOG EMAIL EXCLUDE log email (filter) log email time show log config C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 305: Log Email Time
OGGING OMMANDS LOG EMAIL TIME log email time Overview This command configures the time used in messages sent to an email address. If the syslog server is in a different time zone to your device then the time offset can be configured using either the utc-offset parameter option keyword or the local-offset parameter option keyword, where utc-offset is the time difference from UTC (Universal Time, Coordinated) and local-offset is the difference from...
Page 306 OGGING OMMANDS LOG EMAIL TIME To send messages to the email address test@home.com in the same time zone Examples as the device’s local time zone, use the following commands: awplus# configure terminal awplus(config)# log email admin@base.com time local 0 To send messages to the email address admin@base.com with the time information converted to the time zone of the email recipient, which is 3 hours ahead of the device’s local time zone, use the following commands: awplus#...
Page 307: Log External
OGGING OMMANDS LOG EXTERNAL log external Overview Use this command to enable external logging. External logging sends syslog messages to a file on an SD card. If the file does not already exist on the storage device, it (and any specified subdirectory) will be automatically created.
Page 308 OGGING OMMANDS LOG EXTERNAL show log external unmount Command Version 5.4.7-1.1: command added changes C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 309: Log External (Filter)
OGGING OMMANDS LOG EXTERNAL FILTER log external (filter) Overview Use this command to create a filter to select messages to be sent to the external log. You can include messages based on: • the priority/severity of the message • the program that generated the message •...
Page 310 OGGING OMMANDS LOG EXTERNAL FILTER Parameter Description Spanning Tree Protocol (STP) rstp Rapid Spanning Tree Protocol (RSTP) mstp Multiple Spanning Tree Protocol (MSTP) Integrated Management Interface (IMI) imish Integrated Management Interface Shell (IMISH) epsr Ethernet Protection Switched Rings (EPSR) rmon Remote Monitoring loopprot Loop Protection...
Page 311 OGGING OMMANDS LOG EXTERNAL FILTER To add a filter to send all messages containing the text “Bridging initialization” to the external log, use the following commands: awplus# configure terminal awplus(config)# log external msgtext Bridging initialization To remove a filter that sends all messages generated by EPSR that have a severity of notices or higher to the external log, use the following commands: awplus# configure terminal...
Page 312: Log External Exclude
OGGING OMMANDS LOG EXTERNAL EXCLUDE log external exclude Overview Use this command to exclude specified log messages from the external log. You can exclude messages on the basis of: • the priority/severity of the message • the program that generated the message •...
Page 313 OGGING OMMANDS LOG EXTERNAL EXCLUDE Parameter Description Integrated Management Interface (IMI) imish Integrated Management Interface Shell (IMISH) epsr Ethernet Protection Switched Rings (EPSR) rmon Remote Monitoring loopprot Loop Protection dhcpsn DHCP snooping (DHCPSN) facility Exclude messages from a syslog facility. <facility>...
Page 314 OGGING OMMANDS LOG EXTERNAL EXCLUDE log external (filter) log external rotate log external size show log config show log external unmount Command Version 5.4.7-1.1: command added changes C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 315: Log External Rotate
OGGING OMMANDS LOG EXTERNAL ROTATE log external rotate Overview Use this command to configure the number of files that the external log can rotate through. Use the no variant of this command to return to the default. Syntax log external rotate <0-255> no log external rotate Parameter Description...
Page 316 OGGING OMMANDS LOG EXTERNAL ROTATE Related clear log external Commands default log external log external log external (filter) log external exclude log external size show log config show log external unmount Command Version 5.4.7-1.1: command added changes C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™...
Page 317: Log External Size
OGGING OMMANDS LOG EXTERNAL SIZE log external size Overview Use this command to configure the total amount of size that the external log is permitted to use, in kilobytes. The maximum possible depends on the storage device’s file system. Note that if you are rotating between multiple files, this is the maximum size of all files, not of each individual file.
Page 318: Log Facility
OGGING OMMANDS LOG FACILITY log facility Overview Use this command to assign a facility to all log messages generated on this device. This facility overrides any facility that is automatically generated as part of the log message. Use the no variant of this command to remove the configured facility. Syntax log facility {kern|user|mail|daemon|auth|syslog|lpr|news|uucp|...
Page 319 OGGING OMMANDS LOG FACILITY Table 9-1: Ordinary meanings of the facility parameter in log messages (cont.) Facility Description FTP daemon local<0..7> The facility labels above have specific meanings, while the local facility labels are intended to be put to local use. In AlliedWare Plus, some of these local facility labels are used in log messages.
Page 320: Log Host
OGGING OMMANDS LOG HOST log host Overview This command configures the device to send log messages to a remote syslog server via UDP port 514. The IP address of the remote server must be specified. By default no filters are defined for remote syslog servers. Filters must be defined before messages will be sent.
Page 321 OGGING OMMANDS LOG HOST log host exclude log host source log host time log trustpoint show log config C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 322: Log Host (Filter)
OGGING OMMANDS LOG HOST FILTER log host (filter) Overview This command creates a filter to select messages to be sent to a remote syslog server. Selection can be based on the priority/severity of the message, the program that generated the message, the logging facility used, a substring within the message or a combination of some or all of these.
Page 323 OGGING OMMANDS LOG HOST FILTER Parameter Description imish Integrated Management Interface Shell (IMISH) epsr Ethernet Protection Switched Rings (EPSR) rmon Remote Monitoring loopprot Loop Protection dhcpsn DHCP snooping (DHCPSN) facility Filter messages by syslog facility. <facility> Specify one of the following syslog facilities to include messages from: kern Kernel messages user...
Page 324 OGGING OMMANDS LOG HOST FILTER To create a filter to send messages with a severity level of informational and above to the syslog server with IP address 10.32.16.21, use the following commands: awplus# configure terminal awplus(config)# log host 10.32.16.21 level informational To remove a filter that sends all messages generated by EPSR that have a severity of notices or higher to a remote syslog server with IP address 10.32.16.21, use the following commands:...
Page 325: Log Host Exclude
OGGING OMMANDS LOG HOST EXCLUDE log host exclude Overview Use this command to prevent specified log messages from being sent to the remote syslog server, when log host is enabled. You can exclude messages on the basis of: • the priority/severity of the message •...
Page 326 OGGING OMMANDS LOG HOST EXCLUDE Parameter Description mstp Multiple Spanning Tree Protocol (MSTP) Integrated Management Interface (IMI) imish Integrated Management Interface Shell (IMISH) epsr Ethernet Protection Switched Rings (EPSR) rmon Remote Monitoring loopprot Loop Protection dhcpsn DHCP snooping (DHCPSN) facility Exclude messages from a syslog facility.
Page 327 OGGING OMMANDS LOG HOST EXCLUDE log host (filter) log host source log host time show log config C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 328: Log Host Source
OGGING OMMANDS LOG HOST SOURCE log host source Overview Use this command to specify a source interface or IP address for the device to send syslog messages from. You can specify any one of an interface name, an IPv4 address or an IPv6 address. This is useful if the device can reach the syslog server via multiple interfaces or addresses and you want to control which interface/address the device uses.
Page 329: Log Host Time
OGGING OMMANDS LOG HOST TIME log host time Overview This command configures the time used in messages sent to a remote syslog server. If the syslog server is in a different time zone to your device then the time offset can be configured using either the utc-offset parameter option keyword or the local-offset parameter option keyword, where utc-offset is the time difference from UTC (Universal Time, Coordinated) and local-offset is the difference from local time.
Page 330 OGGING OMMANDS LOG HOST TIME To send messages to the remote syslog server with the IP address 10.32.16.12 with the time information converted to the time zone of the remote syslog server, which is 3 hours ahead of the device’s local time zone, use the following commands: awplus# configure terminal...
Page 331: Log Monitor (Filter)
OGGING OMMANDS LOG MONITOR FILTER log monitor (filter) Overview This command creates a filter to select messages to be sent to the terminal when terminal monitor command is given. Selection can be based on the priority/severity of the message, the program that generated the message, the logging facility used, a sub-string within the message or a combination of some or all of these.
Page 332 OGGING OMMANDS LOG MONITOR FILTER Parameter Description rmon Remote Monitoring loopprot Loop Protection dhcpsn DHCP snooping (DHCPSN) facility Filter messages by syslog facility. <facility> Specify one of the following syslog facilities to include messages from: kern Kernel messages user Random user-level messages mail Mail system daemon...
Page 333 OGGING OMMANDS LOG MONITOR FILTER To remove a default filter that includes sending everything to the terminal, use the following commands: awplus# configure terminal awplus(config)# no log monitor level debugging Related default log monitor Commands log monitor exclude show log config terminal monitor C613-50172-01 Rev B Command Reference for x230 Series...
Page 334: Log Monitor Exclude
OGGING OMMANDS LOG MONITOR EXCLUDE log monitor exclude Overview Use this command to prevent specified log messages from being displayed on a terminal, when terminal monitor is enabled. You can exclude messages on the basis of: • the priority/severity of the message •...
Page 335 OGGING OMMANDS LOG MONITOR EXCLUDE Parameter Description mstp Multiple Spanning Tree Protocol (MSTP) Integrated Management Interface (IMI) imish Integrated Management Interface Shell (IMISH) epsr Ethernet Protection Switched Rings (EPSR) rmon Remote Monitoring loopprot Loop Protection dhcpsn DHCP snooping (DHCPSN) facility Exclude messages from a syslog facility.
Page 336 OGGING OMMANDS LOG MONITOR EXCLUDE show log config terminal monitor C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 337: Log Permanent
OGGING OMMANDS LOG PERMANENT log permanent Overview This command configures the device to send permanent log messages to Flash memory on the device. The content of the permanent log is retained over a reboot. Once the permanent log reaches its configured maximum allowable size old messages will be deleted to make way for new messages.
Page 338: Log Permanent (Filter)
OGGING OMMANDS LOG PERMANENT FILTER log permanent (filter) Overview This command creates a filter to select messages to be sent to the permanent log. Selection can be based on the priority/ severity of the message, the program that generated the message, the logging facility used, a sub-string within the message or a combination of some or all of these.
Page 339 OGGING OMMANDS LOG PERMANENT FILTER Parameter Description epsr Ethernet Protection Switched Rings (EPSR) rmon Remote Monitoring loopprot Loop Protection dhcpsn DHCP snooping (DHCPSN) facility Filter messages by syslog facility. <facility> Specify one of the following syslog facilities to include messages from: kern Kernel messages user...
Page 340 OGGING OMMANDS LOG PERMANENT FILTER Related clear log permanent Commands default log permanent log permanent log permanent exclude log permanent size show log config show log permanent C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 341: Log Permanent Exclude
OGGING OMMANDS LOG PERMANENT EXCLUDE log permanent exclude Overview Use this command to prevent specified log messages from being sent to the permanent log. You can exclude messages on the basis of: • the priority/severity of the message • the program that generated the message •...
Page 342 OGGING OMMANDS LOG PERMANENT EXCLUDE Parameter Description Integrated Management Interface (IMI) imish Integrated Management Interface Shell (IMISH) epsr Ethernet Protection Switched Rings (EPSR) rmon Remote Monitoring loopprot Loop Protection dhcpsn DHCP snooping (DHCPSN) facility Exclude messages from a syslog facility. <facility>...
Page 343: Log Permanent Size
OGGING OMMANDS LOG PERMANENT EXCLUDE log permanent (filter) log permanent size show log config show log permanent C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 344: Log Permanent Size
OGGING OMMANDS LOG PERMANENT SIZE log permanent size Overview This command configures the amount of memory that the permanent log is permitted to use. Once this memory allocation has been filled old messages will be deleted to make room for new messages. log permanent size <50-250>...
Page 345: Log-Rate-Limit Nsm
OGGING OMMANDS RATE LIMIT NSM log-rate-limit nsm Overview This command limits the number of log messages generated by the device for a given interval. Use the no variant of this command to revert to the default number of log messages generated by the device of up to 200 log messages per second. Syntax log-rate-limit nsm messages <message-limit>...
Page 346 OGGING OMMANDS RATE LIMIT NSM To return the device the default setting, to generate up to 200 log messages per second, use the following commands: awplus# configure terminal awplus(config)# no log-rate-limit nsm C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™...
Page 347: Log Trustpoint
OGGING OMMANDS LOG TRUSTPOINT log trustpoint Overview This command adds one or more trustpoints to be used with the syslog application. Multiple trustpoints may be specified, or the command may be executed multiple times, to add multiple trustpoints to the application. The no version of this command removes one or more trustpoints from the list of trustpoints associated with the application.
Page 348: Show Counter Log
OGGING OMMANDS SHOW COUNTER LOG show counter log Overview This command displays log counter information. show counter log Syntax Mode User Exec and Privileged Exec Example To display the log counter information, use the command: awplus# show counter log Output Figure 9-1: Example output from the show counter log command Log counters...
Page 349: Show Exception Log
OGGING OMMANDS SHOW EXCEPTION LOG show exception log Overview This command displays the contents of the exception log. show exception log Syntax Mode User Exec and Privileged Exec Example To display the exception log, use the command: awplus# show exception log Output Figure 9-2: Example output from the show exception log command on a...
Page 350: Show Log
OGGING OMMANDS SHOW LOG show log Overview This command displays the contents of the buffered log. For information on filtering and saving command output, see the “Getting Started with AlliedWare_Plus” Feature Overview and Configuration Guide. Syntax show log [tail [<10-250>]] Parameter Description tail...
Page 351 OGGING OMMANDS SHOW LOG Output Figure 9-3: Example output from show log awplus#show log  <date> <time> <facility>.<severity> <program[<pid>]>: <message>  -------------------------------------------------------------------- 2011 Aug 29 07:55:22 kern.notice awplus kernel: Linux version 2.6.32.12-at1 (mak er@awpmaker03-dl) (gcc version 4.3.3 (Gentoo 4.3.3-r3 p1.2, pie-10.1.5) ) #1 Wed Dec 8 11:53:40 NZDT 2010...
Page 352: Show Log Config
OGGING OMMANDS SHOW LOG CONFIG show log config Overview This command displays information about the logging system. This includes the configuration of the various log destinations, such as buffered, permanent, syslog servers (hosts) and email addresses. This also displays the latest status information for each log destination.
Page 353 OGGING OMMANDS SHOW LOG CONFIG Host 10.32.16.21: Time offset ..+2:00 Offset type ..UTC Source ..- Secured ..enabled Filters: 1 Level ..critical Program ..any Facility ..any Message text . any Statistics ..1327 messages received, 1 accepted by filter (2016 Oct 11  10:36:16) Email admin@alliedtelesis.com:...
Page 354: Show Log External
OGGING OMMANDS SHOW LOG EXTERNAL show log external Overview Use this command to display the contents of the external log, which is stored on an SD card. show log external [tail [<10-250>]] Syntax Parameter Description tail Display only the latest log entries. <10-250>...
Page 355: Show Log Permanent
OGGING OMMANDS SHOW LOG PERMANENT show log permanent Overview This command displays the contents of the permanent log. show log permanent [tail [<10-250>]] Syntax Parameter Description tail Display only the latest log entries. <10-250> Specify the number of log entries to display. Usage If the optional tail parameter is specified only, the latest 10 messages in the permanent log are displayed.
Page 356: Show Running-Config Log
OGGING OMMANDS SHOW RUNNING CONFIG LOG show running-config log Overview This command displays the current running configuration of the Log utility. show running-config log Syntax Mode Privileged Exec and Global Configuration Example To display the current configuration of the log utility, use the command: awplus# show running-config log Related...
Page 357 OGGING OMMANDS UNMOUNT unmount Overview Use this command to unmount an external storage device. We recommend you unmount storage devices before removing them, to avoid file corruption. This is especially important if files may be automatically written to the storage device, such as external log files or AMF backup files.
Page 358: Chapter 10: Scripting Commands
Scripting Commands Introduction Overview This chapter provides commands used for command scripts. Command List • “activate” on page 359 • “echo” on page 360 • “wait” on page 361 C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 359: Activate
CRIPTING OMMANDS ACTIVATE activate Overview This command activates a script file. activate [background] <script> Syntax Parameter Description background Activate a script to run in the background. A process that is running in the background will operate as a separate task, and will not interrupt foreground processing.
Page 360: Echo
CRIPTING OMMANDS ECHO echo Overview This command echoes a string to the terminal, followed by a blank line. echo <line> Syntax Parameter Description <line> The string to echo Mode User Exec and Privileged Exec Usage This command may be useful in CLI scripts, to make the script print user-visible comments.
Page 361: Wait
CRIPTING OMMANDS WAIT wait Overview This command pauses execution of the active script for the specified period of time. wait <delay> Syntax Parameter Description <delay> <1-65335> Specify the time delay in seconds Default No wait delay is specified by default to pause script execution. Mode Privileged Exec (when executed from a script not directly from the command line) Usage...
Page 362: Chapter 11: Interface Commands
Interface Commands Introduction Overview This chapter provides an alphabetical reference of commands used to configure and display interfaces. Command List • “description (interface)” on page 363 • “interface (to configure)” on page 364 • “mru” on page 366 • “mtu” on page 368 •...
Page 363: Description (Interface)
NTERFACE OMMANDS DESCRIPTION INTERFACE description (interface) Overview Use this command to add a description to a specific port or interface. description <description> Syntax Parameter Description <description> Text describing the specific interface. Descriptions can contain any printable ASCII characters (ASCII 32-126). Mode Interface Configuration Example...
Page 364: Interface (To Configure)
NTERFACE OMMANDS INTERFACE TO CONFIGURE interface (to configure) Overview Use this command to select one or more interfaces to configure. interface <interface-list> Syntax interface lo Parameter Description <interface-list> The interfaces or ports to configure. An interface-list can be: • an interface such as a VLAN (e.g. vlan2), a switch port (e.g. port1.0.6), a static channel group (e.g.
Page 365 NTERFACE OMMANDS INTERFACE TO CONFIGURE The following example shows how to enter Interface mode to configure the local loopback interface. awplus# configure terminal awplus(config)# interface lo awplus(config-if)# Related ip address (IP Addressing and Protocol) Commands show interface show interface brief C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™...
Page 366 NTERFACE OMMANDS Overview Use this command to set the Maximum Receive Unit (MRU) size for switch ports, where MRU is the maximum frame size (excluding headers) that switch ports can receive. For more information, see the Switching Feature Overview and Configuration Guide.
Page 367 NTERFACE OMMANDS To restore the MRU size of 1500 bytes on port1.0.2, use the commands: awplus# configure terminal awplus(config)# interface port1.0.2 awplus(config-if)# no mru Related show interface Commands C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 368 NTERFACE OMMANDS Overview Use this command to set the Maximum Transmission Unit (MTU) size for VLANs, where MTU is the maximum packet size that VLANs can transmit. The MTU size setting is applied to both IPv4 and IPv6 packet transmission. Use the no variant of this command to remove a previously specified Maximum Transmission Unit (MTU) size for VLANs, and restore the default MTU size (1500 bytes) for VLANs.
Page 369 NTERFACE OMMANDS Related show interface Commands C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 370: Show Interface
NTERFACE OMMANDS SHOW INTERFACE show interface Overview Use this command to display interface configuration and status. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide. Syntax show interface [<interface-list>] show interface lo Parameter Description...
Page 371 NTERFACE OMMANDS SHOW INTERFACE Figure 11-1: Example output from the show interface command awplus#show interface Interface port1.0.1 Scope: both Link is DOWN, administrative state is UP Thrash-limiting Status Not Detected, Action learn-disable, Timeout 1(s) Hardware is Ethernet, address is 001a.eb54.f3ae index 5001 metric 1 mru 1500...
Page 372 NTERFACE OMMANDS SHOW INTERFACE Figure 11-3: Example output from the show interface vlan1,vlan2 command  awplus#show interface vlan1,vlan2 Interface vlan1 Scope: both Link is UP, administrative state is UP Hardware is VLAN, address is 0015.77e9.5c50 IPv4 address 192.168.1.1/24 broadcast 192.168.1.255 index 201 metric 1 mtu 1500...
Page 373: Show Interface Brief
NTERFACE OMMANDS SHOW INTERFACE BRIEF show interface brief Overview Use this command to display brief interface, configuration, and status information, including provisioning information. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 374 This command displays the shared memory used by either all interfaces, or the specified interface or interfaces. The output is useful for diagnostic purposes by Allied Telesis authorized service personnel. For information on filtering and saving command output, see the “Getting Started...
Page 375 NTERFACE OMMANDS SHOW INTERFACE MEMORY Output Figure 11-5: Example output from the show interface memory command awplus#show interface memory Vlan blocking state shared memory usage --------------------------------------------- Interface shmid Bytes Used nattch Status port1.0.1 393228 1 port1.0.2 458766 1 port1.0.3 360459 1...
Page 376: Show Interface Status
NTERFACE OMMANDS SHOW INTERFACE STATUS show interface status Overview Use this command to display the status of the specified interface or interfaces. Note that when no interface or interfaces are specified then the status of all interfaces on the device are shown. show interface [<port-list>] status Syntax Parameter...
Page 377 NTERFACE OMMANDS SHOW INTERFACE STATUS Table 14: Parameters in the output from the show interface status command Parameter Description Port Name/Type of the interface. Name Description of the interface. Status The administrative and operational status of the interface; one of: •...
Page 378: Shutdown
NTERFACE OMMANDS SHUTDOWN shutdown Overview This command shuts down the selected interface. This administratively disables the link and takes the link down at the physical (electrical) layer. Use the no variant of this command to disable this function and therefore to bring the link back up again.
Page 379 Port Mirroring and Remote Mirroring Commands Introduction Overview This chapter provides an alphabetical reference of commands used to configure Port Mirroring and Remote Mirroring (also known as RSPAN). For more information, see the Mirroring Feature Overview and Configuration Guide. Command List •...
Page 380: Mirror Interface
IRRORING AND EMOTE IRRORING OMMANDS MIRROR INTERFACE mirror interface Overview Use this command to define a mirror port and mirrored (monitored) ports and direction of traffic to be mirrored. The port for which you enter interface mode will be the mirror port. The destination port is removed from all VLANs, and no longer participates in other switching.
Page 381 IRRORING AND EMOTE IRRORING OMMANDS MIRROR INTERFACE Mode Interface Configuration Usage Use this command to send traffic to another device connected to the mirror port for monitoring. For more information, see the Mirroring Feature Overview and Configuration Guide. A mirror port cannot be associated with a VLAN. If a switch port is configured to be a mirror port, it is automatically removed from any VLAN it was associated with.
Page 382: Remote-Mirror Interface
IRRORING AND EMOTE IRRORING OMMANDS REMOTE MIRROR INTERFACE remote-mirror interface Overview Use this command on the source device to specify the source port whose traffic is to be remote-mirrored (monitored), and the remote mirroring VLAN ID these mirrored frames will be tagged with when they egress from the source device. The port for which Interface Configuration mode is entered is the port via which the mirrored traffic egresses the source device towards the remote destination device.
Page 383 IRRORING AND EMOTE IRRORING OMMANDS REMOTE MIRROR INTERFACE This command can only be used to configure a single egress port on the source device, not a range of egress ports. Do not use the interface command with multiple interfaces before using this remote-mirror interface command. One egress (destination) port on the source device can transmit mirrored frames from up to four remote mirrored (source) ports.
Page 384: Show Mirror
IRRORING AND EMOTE IRRORING OMMANDS SHOW MIRROR show mirror Overview Use this command to display the status of all mirrored ports. show mirror Syntax Mode User Exec and Privileged Exec Example To display the status of all mirrored ports, use the following command: awplus# show mirror Output...
Page 385: Show Mirror Interface
IRRORING AND EMOTE IRRORING OMMANDS SHOW MIRROR INTERFACE show mirror interface Overview Use this command to display port mirroring configuration for a mirrored (monitored) switch port. show mirror interface <port> Syntax Parameter Description <port> The monitored switch port to display information about. Mode User Exec, Privileged Exec and Interface Configuration To display port mirroring configuration for the port1.0.4, use the following...
Page 386: Show Remote-Mirror
IRRORING AND EMOTE IRRORING OMMANDS SHOW REMOTE MIRROR show remote-mirror Overview Use this command to display information for remote-mirroring. show remote-mirror Syntax Mode User Exec Example To display information about remote mirroring, use the command: awplus# show remote-mirror Output Figure 12-3: Example output from show remote-mirror awplus#show remote-mirror...
Page 387 IRRORING AND EMOTE IRRORING OMMANDS SHOW REMOTE MIRROR Table 12-1: Parameters in the output from show remote-mirror (cont.) Parameter Description Remote mirror On the destination device, this displays : egress ports • the remote mirror egress ports • the remote mirror VLANs they are associated with Remote mirror On source, destination and intermediate devices, this VLANs...
Page 388: Switchport Remote-Mirror-Egress
IRRORING AND EMOTE IRRORING OMMANDS SWITCHPORT REMOTE MIRROR EGRESS switchport remote-mirror-egress Overview Use this command on the device receiving remote mirrored traffic to set the remote mirroring egress port for the specified remote mirroring VLAN. This port removes the remote mirror VLAN tagging before transmitting the mirrored traffic. Ingress traffic on this port is disabled.
Page 389: Vlan Mode Remote-Mirror-Vlan
IRRORING AND EMOTE IRRORING OMMANDS VLAN MODE REMOTE MIRROR VLAN vlan mode remote-mirror-vlan Overview Use this command to create a single VLAN or a range of VLANs in remote mirror mode to be used for remote mirroring. Use the no variant of this command to remove the remote mirror VLAN from the VLAN database and its configurations.
Page 390 IRRORING AND EMOTE IRRORING OMMANDS VLAN MODE REMOTE MIRROR VLAN switchport remote-mirror-egress C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 391 Interface Testing Commands Introduction Overview This chapter provides an alphabetical reference of commands used for testing interfaces. Command List • “clear test interface” on page 392 • “service test” on page 393 • “test interface” on page 394 C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™...
Page 392: Clear Test Interface
NTERFACE ESTING OMMANDS CLEAR TEST INTERFACE clear test interface Overview This command clears test results and counters after issuing the test interface command. Test results and counters must be cleared before executing subsequent test interface commands. clear test interface {<port-list>|all} Syntax Parameter Description...
Page 393: Service Test
NTERFACE ESTING OMMANDS SERVICE TEST service test Overview This command puts the device into the interface testing state, ready to begin testing. After entering this command, enter Interface Configuration mode for the desired interfaces and enter the command test interface. Do not test interfaces on a device that is part of a live network—disconnect the device first.
Page 394: Test Interface
NTERFACE ESTING OMMANDS TEST INTERFACE test interface Overview This command starts a test on a port or all ports or a selected range or list of ports. Use the no variant of this command to disable this function. The test duration can be configured by specifying the time in minutes after specifying a port or ports to test.
Page 395 NTERFACE ESTING OMMANDS TEST INTERFACE Example To test the switch ports in VLAN 1, install loopbacks in the ports, and enter the following commands: awplus(config)# service test awplus(config)# no spanning-tree rstp enable bridge-forward awplus(config)# interface vlan1 awplus(config-if)# shutdown awplus(config-if)# awplus# test interface all To see the output, use the commands: awplus#...
Page 396: Part 2: Interfaces And Layer 2
Part 2: Interfaces and Layer 2 C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 397: Chapter 14: Switching Commands
Switching Commands Introduction Overview This chapter provides an alphabetical reference of commands used to configure switching. For more information, see the Switching Feature Overview and Configuration Guide. Command List • “backpressure” on page 399 • “clear loop-protection counters” on page 401 •...
Page 398 WITCHING OMMANDS • “mac address-table static” on page 424 • “mac address-table thrash-limit” on page 425 • “platform load-balancing” on page 426 • “platform stop-unreg-mc-flooding” on page 427 • “platform vlan-stacking-tpid” on page 429 • “polarity” on page 430 • “show debugging loopprot”...
Page 399: Backpressure
WITCHING OMMANDS BACKPRESSURE backpressure Overview This command provides a method of applying flow control to ports running in half duplex mode. The setting will only apply when the link is in the half-duplex state. You can disable backpressure on an interface using the off parameter or the no variant of this command.
Page 400 WITCHING OMMANDS BACKPRESSURE To disable back pressure flow control on interface port1.0.2 enter the following commands: awplus# configure terminal awplus(config)# interface port1.0.2 awplus(config-if)# backpressure off Validation show running-config Commands show interface Related duplex Commands C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™...
Page 401: Clear Loop-Protection Counters
WITCHING OMMANDS CLEAR LOOP PROTECTION COUNTERS clear loop-protection counters Overview Use this command to clear the counters for the Loop Protection counters. clear loop-protection [interface <port-list>] counters Syntax Parameters Description interface The interface whose counters are to be cleared. <port-list> A port, a port range, or an aggregated link.
Page 402: Clear Mac Address-Table Dynamic
WITCHING OMMANDS CLEAR MAC ADDRESS TABLE DYNAMIC clear mac address-table dynamic Overview Use this command to clear the filtering database of all entries learned for a selected MAC address, an MSTP instance, a switch port interface or a VLAN interface. clear mac address-table dynamic [address Syntax <mac-address>|interface <port>...
Page 403 WITCHING OMMANDS CLEAR MAC ADDRESS TABLE DYNAMIC This example shows how to clear all dynamically learned filtering database entries when learned through device operation for a given MSTP instance 1 on switch port interface port1.0.2. awplus# clear mac address-table dynamic interface port1.0.2 instance 1 Related clear mac address-table static...
Page 404: Clear Mac Address-Table Static
WITCHING OMMANDS CLEAR MAC ADDRESS TABLE STATIC clear mac address-table static Overview Use this command to clear the filtering database of all statically configured entries for a selected MAC address, interface, or VLAN. clear mac address-table static [address <mac-address>|interface Syntax <port>|vlan <vid>] Parameter Description...
Page 405: Clear Port Counter
WITCHING OMMANDS CLEAR PORT COUNTER clear port counter Overview Use this command to clear the packet counters of the port. clear port counter [<port>] Syntax Parameter Description <port> The port number or range Mode Privileged Exec To clear the packet counter for port1.0.1, use the command: Example awplus# clear port counter port1.0.1...
Page 406: Clear Port-Security Intrusion
WITCHING OMMANDS CLEAR PORT SECURITY INTRUSION clear port-security intrusion Overview Use this command to clear the history of the port-security intrusion list on all ports, or an individual port. If a port is not specified, the intrusion lists of all ports are cleared.
Page 407 WITCHING OMMANDS CLEAR PORT SECURITY INTRUSION Table 14-2: Example output from show port-security intrusion  awplus#show port-security intrusion interface port1.0.1 Port Security Intrusion List ------------------------------------------------------------ Interface: port1.0.1 - 1 intrusion(s) detected 801f.0200.19da To clear the history of port-security intrusion list on port1.0.1, use the following command: awplus# clear port-security intrusion interface port1.0.1...
Page 408 WITCHING OMMANDS CLEAR PORT SECURITY INTRUSION Related show port-security interface Commands show port-security intrusion switchport port-security switchport port-security aging switchport port-security maximum switchport port-security violation C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 409: Debug Loopprot
WITCHING OMMANDS DEBUG LOOPPROT debug loopprot Overview This command enables Loop Protection debugging. The no variant of this command disables Loop Protection debugging. Syntax debug loopprot {info|msg|pkt|state|nsm|all} no debug loopprot {info|msg|pkt|state|nsm|all} Parameter Description info General Loop Protection information. Received and transmitted Loop Detection Frames (LDFs). Echo raw ASCII display of received and transmitted LDF packets to the console.
Page 410: Debug Platform Packet
WITCHING OMMANDS DEBUG PLATFORM PACKET debug platform packet Overview This command enables platform to CPU level packet debug functionality on the device. Use the no variant of this command to disable platform to CPU level packet debug. If the result means both send and receive packet debug are disabled, then any active timeout will be canceled.
Page 411 WITCHING OMMANDS DEBUG PLATFORM PACKET To enable packet debug for sFlow packets only for the default timeout of 5 minutes, enter: awplus# debug platform packet sflow To enable send packet debug with no timeout, enter: awplus# debug platform packet send timeout 0 To enable VLAN packet debug for VLAN 2 with a timeout duration of 3 minutes, enter: awplus#...
Page 412: Duplex
WITCHING OMMANDS DUPLEX duplex Overview This command changes the duplex mode for the specified port. To see the currently-negotiated duplex mode for ports whose links are up, use the command show interface. To see the configured duplex mode (when different from the default), use the command show running-config.
Page 413 WITCHING OMMANDS DUPLEX Related backpressure Commands polarity speed show interface C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 414: Flowcontrol (Switch Port)
WITCHING OMMANDS FLOWCONTROL SWITCH PORT flowcontrol (switch port) Overview Use this command to enable flow control, and configure the flow control mode for the switch port. Use the no variant of this command to disable flow control for the specified switch port.
Page 415 WITCHING OMMANDS FLOWCONTROL SWITCH PORT awplus# configure terminal Examples awplus(config)# interface port1.0.2 awplus(config-if)# flowcontrol receive on awplus# configure terminal awplus(config)# interface port1.0.2 awplus(config-if)# flowcontrol send on awplus# configure terminal awplus(config)# interface port1.0.2 awplus(config-if)# flowcontrol receive off awplus# configure terminal awplus(config)# interface port1.0.2 awplus(config-if)# flowcontrol send off...
Page 416: Linkflap Action
WITCHING OMMANDS LINKFLAP ACTION linkflap action Overview Use this command to detect flapping on all ports. If more than 15 flaps occur in less than 15 seconds the flapping port will shut down. Use the no variant of this command to disable flapping detection at this rate. Syntax linkflap action [shutdown] no linkflap action...
Page 417: Loop-Protection Loop-Detect
WITCHING OMMANDS LOOP PROTECTION LOOP DETECT loop-protection loop-detect Overview Use this command to enable the loop-protection loop-detect feature and configure its parameters. Use the no variant of this command to disable the loop-protection loop-detect feature. Syntax loop-protection loop-detect [ldf-interval <period>] [ldf-rx-window <frames>] [fast-block] no loop-protection loop-detect Parameter...
Page 418: Loop-Protection Action
WITCHING OMMANDS LOOP PROTECTION ACTION loop-protection action Overview Use this command to specify the protective action to apply when a network loop is detected on an interface. Use the no variant of this command to reset the loop protection actions to the default action, vlan-disable, on an interface.
Page 419: Loop-Protection Action-Delay-Time
WITCHING OMMANDS LOOP PROTECTION ACTION DELAY TIME loop-protection action-delay-time Overview Use this command to sets the loop protection action delay time for an interface to specified values in seconds. The action delay time specifies the waiting period for the action. Use the no variant of this command to reset the loop protection action delay time for an interface to default.
Page 420: Loop-Protection Timeout
WITCHING OMMANDS LOOP PROTECTION TIMEOUT loop-protection timeout Overview Use this command to specify the Loop Protection recovery action duration on an interface. Use the no variant of this command to set the loop protection timeout to the default. Syntax loop-protection timeout <duration> no loop-protection timeout Parameter Description...
Page 421: Mac Address-Table Acquire
WITCHING OMMANDS MAC ADDRESS TABLE ACQUIRE mac address-table acquire Overview Use this command to enable MAC address learning on the device. Use the no variant of this command to disable learning. Syntax mac address-table acquire no mac address-table acquire Default Learning is enabled by default for all instances.
Page 422: Mac Address-Table Ageing-Time
WITCHING OMMANDS MAC ADDRESS TABLE AGEING TIME mac address-table ageing-time Overview Use this command to specify an ageing-out time for a learned MAC address. The learned MAC address will persist for at least the specified time. The no variant of this command will reset the ageing-out time back to the default of 300 seconds (5 minutes).
Page 423: Mac Address-Table Logging
WITCHING OMMANDS MAC ADDRESS TABLE LOGGING mac address-table logging Overview Use this command to create log entries when the content of the FDB (forwarding database) changes. Log messages are produced when a MAC address is added to or removed from the FDB. : MAC address table logging may impact the performance of the switch.
Page 424: Mac Address-Table Static
WITCHING OMMANDS MAC ADDRESS TABLE STATIC mac address-table static Overview Use this command to statically configure the MAC address-table to forward or discard frames with a matching destination MAC address. mac address-table static <mac-addr> {forward|discard} interface Syntax <port> [vlan <vid>] no mac address-table static <mac-addr>...
Page 425: Mac Address-Table Thrash-Limit
WITCHING OMMANDS MAC ADDRESS TABLE THRASH LIMIT mac address-table thrash-limit Overview Use this command to set the thrash limit on the device. Thrashing occurs when a MAC address table rapidly “flips” its mapping of a single MAC address between two subnets, usually as a result of a network loop. Use the no variant of this command to disable thrash limiting.
Page 426: Platform Load-Balancing
WITCHING OMMANDS PLATFORM LOAD BALANCING platform load-balancing Overview This command selects which address fields are used as inputs into the load balancing algorithm for aggregated links. The output from this algorithm is used to select which individual path a given packet will traverse within an aggregated link.
Page 427: Platform Stop-Unreg-Mc-Flooding
WITCHING OMMANDS PLATFORM STOP UNREG FLOODING platform stop-unreg-mc-flooding Overview If a multicast stream is arriving at a network device, and that network device has received no IGMP reports that request the receipt of the stream, then that stream is referred to as "unregistered". IGMP snooping actively prevents the flooding of unregistered streams to all ports in the VLAN on which the stream is received.
Page 428 WITCHING OMMANDS PLATFORM STOP UNREG FLOODING Examples To enable this feature and stop multicast packet flooding, use the following commands: awplus# configure terminal awplus(config)# platform stop-unreg-mc-flooding To disable this feature and allow multicast packet flooding, use the following commands: awplus# configure terminal awplus(config)# no platform stop-unreg-mc-flooding...
Page 429: Platform Vlan-Stacking-Tpid
WITCHING OMMANDS PLATFORM VLAN STACKING TPID platform vlan-stacking-tpid Overview This command specifies the Tag Protocol Identifier (TPID) value that applies to all frames that are carrying double tagged VLANs. All nested VLANs must use the same TPID value. (This feature is sometimes referred to as VLAN stacking or VLAN double-tagging.) Use the no variant of this command to revert to the default TPID value (0x8100).
Page 430: Polarity
WITCHING OMMANDS POLARITY polarity Overview This command sets the MDI/MDIX polarity on a copper-based switch port. polarity {auto|mdi|mdix} Syntax Parameter Description Sets the polarity to MDI (medium dependent interface). mdix Sets the polarity to MDI-X (medium dependent interface crossover). auto The switch port sets the polarity automatically.
Page 431: Show Debugging Loopprot
WITCHING OMMANDS SHOW DEBUGGING LOOPPROT show debugging loopprot Overview This command shows Loop Protection debugging information. show debugging loopprot Syntax Mode User Exec and Privileged Exec Example To display the enabled Loop Protection debugging modes, use the command: awplus# show debugging loopprot Related debug loopprot Commands...
Page 432: Show Debugging Platform Packet
WITCHING OMMANDS SHOW DEBUGGING PLATFORM PACKET show debugging platform packet Overview This command shows platform to CPU level packet debugging information. show debugging platform packet Syntax Mode User Exec and Privileged Exec Example To display the platform packet debugging information, use the command: awplus# show debugging platform packet Related...
Page 433: Show Flowcontrol Interface
WITCHING OMMANDS SHOW FLOWCONTROL INTERFACE show flowcontrol interface Overview Use this command to display flow control information. show flowcontrol interface <port> Syntax Parameter Description <port> Specifies the name of the port to be displayed. Mode User Exec and Privileged Exec To display the flow control for the port1.0.5, use the command: Example awplus#...
Page 434: Show Interface Err-Disabled
WITCHING OMMANDS SHOW INTERFACE ERR DISABLED show interface err-disabled Overview Use this command to show the ports which have been dynamically shut down by protocols running on the device and the protocols responsible for the shutdown. show interface [<interface-range> err-disabled] Syntax Parameter Description...
Page 435: Show Interface Switchport
WITCHING OMMANDS SHOW INTERFACE SWITCHPORT show interface switchport Overview Use this command to show VLAN information about each switch port. show interface switchport Syntax Mode User Exec and Privileged Exec Example To display VLAN information about each switch port, enter the command: awplus# show interface switchport Output...
Page 436: Show Loop-Protection
WITCHING OMMANDS SHOW LOOP PROTECTION show loop-protection Overview Use this command to display the current loop protection setup for the device. show loop-protection [interface <port-list>] [counters] Syntax Parameter Description interface The interface selected for display. <port-list> A port, a port range, or an aggregated link. counters Displays counter information for loop protection.
Page 437 WITCHING OMMANDS SHOW LOOP PROTECTION awplus#show loop-protection counters  Switch Loop Detection Counter  Interface Rx Invalid Last LDF Rx ------------------------------------------------------------------------- port1.0.1 vlan1 - port1.0.2 vlan1 - port1.0.3 vlan1 - C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 438: Show Mac Address-Table
WITCHING OMMANDS SHOW MAC ADDRESS TABLE show mac address-table Overview Use this command to display the mac address-table for all configured VLANs. show mac address-table Syntax Mode User Exec and Privileged Exec Usage The show mac address-table command is only applicable to view a mac address-table for Layer 2 switched traffic within VLANs.
Page 439 WITCHING OMMANDS SHOW MAC ADDRESS TABLE awplus(config)#mac address-table static 0000.1111.2222 for int  port1.0.3 vlan 2 awplus(config)#end awplus# awplus#show mac address-table  VLAN Port State unknown 0000.cd28.0752 static port1.0.2 0030.846e.bac7 dynamic port1.0.3 0000.1111.2222 static unknown 0000.cd28.0752 static port1.0.5 0030.846e.9bf4 dynamic 0000.cd00.0000 static Related...
Page 440: Show Mac Address-Table Thrash-Limit
WITCHING OMMANDS SHOW MAC ADDRESS TABLE THRASH LIMIT show mac address-table thrash-limit Overview Use this command to display the current thrash limit set for all interfaces on the device. show mac address-table thrash-limit Syntax Mode User Exec and Privileged Exec Example To display the current, use the following command: awplus#...
Page 441: Show Platform
WITCHING OMMANDS SHOW PLATFORM show platform Overview This command displays the settings configured by using the platform commands. show platform Syntax Mode Privileged Exec Usage This command displays the settings in the running config. For changes in some of these settings to take effect, the device must be rebooted with the new settings in the startup config.
Page 442 WITCHING OMMANDS SHOW PLATFORM Table 15: Parameters in the output of the show platform command (cont.) Parameter Description stop-unreg-mc-flooding Whether the stop-unreg-mc-flooding feature is on or off (set with the platform stop-unreg-mc-flooding command). This feature prevents flooding of unregistered multicast packets in the occasional situations in which IGMP snooping does not prevent it.
Page 443: Show Platform Classifier Statistics Utilization Brief
WITCHING OMMANDS SHOW PLATFORM CLASSIFIER STATISTICS UTILIZATION BRIEF show platform classifier statistics utilization brief Overview This command displays the number of used entries available for various platform functions, and the percentage that number of entries represents of the total available. Syntax show platform classifier statistics utilization brief Mode...
Page 444: Show Platform Port
WITCHING OMMANDS SHOW PLATFORM PORT show platform port Overview This command displays the various port registers or platform counters for specified switchports. show platform port [<port-list>|counters] Syntax Parameter Description <port-list> The ports to display information about. A port-list can be: •...
Page 445 WITCHING OMMANDS SHOW PLATFORM PORT Output Figure 14-9: Example output from the show platform port command awplus#show platform port port1.0.1 Phy register value for port1.0.1 (ifindex: 5001)   00:1140 01:79ed 02:600d 03:85b0 04:01e1 05:c1e1 06:006d 07:2001  08:4d44 09:0600 0a:3800 0b:0000 0c:0000...
Page 446 WITCHING OMMANDS SHOW PLATFORM PORT Table 16: Parameters in the output from the show platform port command Parameter Description 256 - 511 Number of 256 - 511 octet packets received and transmitted. 512 - 1023 Number of 512 - 1023 octet packets received and transmitted.
Page 447 WITCHING OMMANDS SHOW PLATFORM PORT Table 16: Parameters in the output from the show platform port command Parameter Description CarrierSenseErr Receive False Carrier Counter. UndersizePkts Number of undersized packets received. Transmit Counters for traffic transmitted. Octets Number of octets transmitted. Pkts Number of packets transmitted.
Page 448: Show Port-Security Interface
WITCHING OMMANDS SHOW PORT SECURITY INTERFACE show port-security interface Overview Use this command to show the current port-security configuration and the switch port status. show port-security interface <port> Syntax Parameter Description <port> The port to display information about. The port may be a switch port (e.g.
Page 449: Show Port-Security Intrusion
WITCHING OMMANDS SHOW PORT SECURITY INTRUSION show port-security intrusion Overview Use this command to show the intrusion list. If the port is not specified, the entire intrusion table is shown. show port-security intrusion [interface <port>] Syntax Parameter Description interface Specify a port <port>...
Page 450: Show Storm-Control
WITCHING OMMANDS SHOW STORM CONTROL show storm-control Overview Use this command to display storm-control information for all interfaces or a particular interface. show storm-control [<port>] Syntax Parameter Description <port> The port to display information about. The port may be a switch port (e.g.
Page 451: Speed
WITCHING OMMANDS SPEED speed Overview This command changes the speed of the specified port. You can optionally specify the speed or speeds that get autonegotiated, so autonegotiation is only attempted at the specified speeds. To see the currently-negotiated speed for ports whose links are up, use the show interface command.
Page 452 WITCHING OMMANDS SPEED To return the port to auto-negotiating its speed, enter the following commands: awplus# configure terminal awplus(config)# interface port1.0.2 awplus(config-if)# speed auto To set the port to auto-negotiate its speed at 100Mbps and 1000Mbps, enter the following commands: awplus# configure terminal awplus(config)#...
Page 453: Storm-Control Level
WITCHING OMMANDS STORM CONTROL LEVEL storm-control level Overview Use this command to specify the speed limiting level for broadcasting, multicast, or destination lookup failure (DLF) traffic for the port. Storm-control limits the selected traffic type to the specified percentage of the maximum port speed. Use the no variant of this command to disable storm-control for broadcast, multicast or DLF traffic.
Page 454: Switchport Port-Security
WITCHING OMMANDS SWITCHPORT PORT SECURITY switchport port-security Overview Use this command to enable the port-security feature. This feature is also known as the port-based learn limit. It allows the user to set the maximum number of MAC addresses that each port can learn. Use the no variant of this command to disable the port-security feature.
Page 455: Switchport Port-Security Aging
WITCHING OMMANDS SWITCHPORT PORT SECURITY AGING switchport port-security aging Overview Use this command to set MAC addresses that have been learned by port security to age out. Use the no variant of this command to set the MAC addresses to not age out. Syntax switchport port-security aging no switchport port-security aging...
Page 456: Switchport Port-Security Maximum
WITCHING OMMANDS SWITCHPORT PORT SECURITY MAXIMUM switchport port-security maximum Overview Use this command to set the maximum number of MAC addresses that each port can learn. Use the no variant of this command to unset the maximum number of MAC addresses that each port can learn.
Page 457: Switchport Port-Security Violation
WITCHING OMMANDS SWITCHPORT PORT SECURITY VIOLATION switchport port-security violation Overview Use this command to set the action taken on a switch port when the port exceeds the learning limits. The port action can be either shutdown, restrict or protect. If shutdown is set, the physical link will be disabled and “shutdown”...
Page 458: Thrash-Limiting
WITCHING OMMANDS THRASH LIMITING thrash-limiting Overview Sets and configures the thrash limit action that will be applied to any port on the device when a thrashing condition is detected. The thrash-limiting timeout specifies the time, in seconds, for which the thrash action is employed. thrash-limiting {[action Syntax {learn-disable|link-down|port-disable|vlan-disable|none}]...
Page 459 WITCHING OMMANDS THRASH LIMITING To set the thrash limiting action to its default, use the following command: awplus(config-if)# no thrash-limiting action To set the thrash limiting timeout to its default, use the following command: awplus(config-if)# no thrash-limiting timeout Related loop-protection loop-detect Commands loop-protection action loop-protection timeout...
Page 460: Undebug Loopprot
WITCHING OMMANDS UNDEBUG LOOPPROT undebug loopprot Overview This command applies the functionality of the no debug loopprot command. C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 461: Undebug Platform Packet
WITCHING OMMANDS UNDEBUG PLATFORM PACKET undebug platform packet Overview This command applies the functionality of the no debug platform packet command. C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 462: Chapter 15: Vlan Commands
VLAN Commands Introduction Overview This chapter provides an alphabetical reference of commands used to configure VLANs. For more information see the VLAN Feature Overview and Configuration Guide. Command List • “port-vlan-forwarding-priority” on page 464 • “private-vlan” on page 467 • “private-vlan association”...
Page 463 VLAN C OMMANDS • “switchport voice dscp” on page 489 • “switchport voice vlan” on page 490 • “switchport voice vlan priority” on page 492 • “vlan” on page 493 • “vlan access-map” on page 494 • “vlan database” on page 495 •...
Page 464: Port-Vlan-Forwarding-Priority
VLAN C OMMANDS PORT VLAN FORWARDING PRIORITY port-vlan-forwarding-priority Overview Use this command to specify which protocol has the highest priority for controlling transitions from blocking to forwarding traffic, when more than one of EPSR, Loop Protection, and MAC thrashing protection are used on the switch. These protocols use the same mechanism to block or forward traffic.
Page 465 VLAN C OMMANDS PORT VLAN FORWARDING PRIORITY effects on a port would conflict and override each other. Without this command, each protocol could set a port to forwarding for a VLAN, sometimes overriding the previous setting by another protocol to block the port. This could sometimes lead to unexpected broadcast storms.
Page 466 VLAN C OMMANDS PORT VLAN FORWARDING PRIORITY To prioritize Loop Protection over EPSR or MAC Thrashing protection settings, so that EPSR or MAC Thrashing protection cannot set a port to the forwarding state for a VLAN if Loop Protection has set it to the blocking state, use the commands: awplus# configure terminal awplus(config)#...
Page 467: Private-Vlan
VLAN C OMMANDS PRIVATE VLAN private-vlan Overview Use this command to a create a private VLAN. Private VLANs can be either primary or secondary. Secondary VLANs can be ether community or isolated. Use the no variant of this command to remove the specified private VLAN. For more information, see the VLAN Feature Overview and Configuration Guide.
Page 468: Private-Vlan Association
VLAN C OMMANDS PRIVATE VLAN ASSOCIATION private-vlan association Overview Use this command to associate a secondary VLAN to a primary VLAN. Only one isolated VLAN can be associated to a primary VLAN. Multiple community VLANs can be associated to a primary VLAN. Use the no variant of this command to remove association of all the secondary VLANs to a primary VLAN.
Page 469: Show Port-Vlan-Forwarding-Priority
VLAN C OMMANDS SHOW PORT VLAN FORWARDING PRIORITY show port-vlan-forwarding-priority Overview Use this command to display the highest priority protocol that controls port-vlan forwarding or blocking traffic. This command displays whether EPSR or Loop Protection is set as the highest priority for determining whether a port forwards a VLAN, as set by the port-vlan-forwarding-priority command.
Page 470: Show Vlan
VLAN C OMMANDS SHOW VLAN show vlan Overview Use this command to display information about a particular VLAN by specifying its VLAN ID. Selecting all will display information for all the VLANs configured. show vlan Syntax {all|brief|dynamic|static|auto|static-ports|<1-4094>} Parameter Description <1-4094> Display information about the VLAN specified by the VLAN ID.
Page 471: Show Vlan Access-Map
VLAN C OMMANDS SHOW VLAN ACCESS show vlan access-map Overview Use this command to display information about the configured VLAN access-maps. VLAN access-maps contain a series of ACLs and enable you to filter traffic ingressing specified VLANs. show vlan access-map [<name>] Syntax Parameter Description...
Page 472: Show Vlan Filter
VLAN C OMMANDS SHOW VLAN FILTER show vlan filter Overview Use this command to display information about the configured VLAN filters. VLAN filters apply access-maps (and therefore ACLs) to VLANs. This enables you to filter traffic ingressing specified VLANs. show vlan filter [<access-map-name>] Syntax Parameter Description...
Page 473: Show Vlan Private-Vlan
VLAN C OMMANDS SHOW VLAN PRIVATE VLAN show vlan private-vlan Overview Use this command to display the private VLAN configuration and associations. show vlan private-vlan Syntax Mode User Exec and Privileged Exec Example To display the private VLAN configuration and associations, enter the command: awplus# show vlan private-vlan Output...
Page 474: Switchport Access Vlan
VLAN C OMMANDS SWITCHPORT ACCESS VLAN switchport access vlan Overview Use this command to change the port-based VLAN of the current port. Use the no variant of this command to change the port-based VLAN of this port to the default VLAN, vlan1. Syntax switchport access vlan <vlan-id>...
Page 475: Switchport Mode Access
VLAN C OMMANDS SWITCHPORT MODE ACCESS switchport mode access Overview Use this command to set the switching characteristics of the port to access mode. Received frames are classified based on the VLAN characteristics, then accepted or discarded based on the specified filtering criteria. switchport mode access [ingress-filter {enable|disable}] Syntax Parameter...
Page 476: Switchport Mode Private-Vlan
VLAN C OMMANDS SWITCHPORT MODE PRIVATE VLAN switchport mode private-vlan Overview Use this command to make a Layer 2 port a private VLAN host port or a promiscuous port. Use the no variant of this command to remove the configuration. Syntax switchport mode private-vlan {host|promiscuous} no switchport mode private-vlan {host|promiscuous}...
Page 477: Switchport Mode Private-Vlan Trunk Promiscuous
VLAN C OMMANDS SWITCHPORT MODE PRIVATE VLAN TRUNK PROMISCUOUS switchport mode private-vlan trunk promiscuous Overview Use this command to enable a port in trunk mode to be promiscuous port for isolated VLANs. Use the no variant of this command to remove a port in trunk mode as a promiscuous port for isolated VLANs.
Page 478 VLAN C OMMANDS SWITCHPORT MODE PRIVATE VLAN TRUNK PROMISCUOUS To create the isolated VLANs 2, 3 and 4 and then enable port1.0.2 in trunk Examples mode as a promiscuous port for these VLANs with the group ID of 3, use the following commands: awplus# configure terminal...
Page 479: Switchport Mode Private-Vlan Trunk Secondary
VLAN C OMMANDS SWITCHPORT MODE PRIVATE VLAN TRUNK SECONDARY switchport mode private-vlan trunk secondary Overview Use this command to enable a port in trunk mode to be a secondary port for isolated VLANs. Use the no variant of this command to remove a port in trunk mode as a secondary port for isolated VLANs.
Page 480 VLAN C OMMANDS SWITCHPORT MODE PRIVATE VLAN TRUNK SECONDARY To create isolated private VLAN 2 and then enable port1.0.3 in trunk mode as Examples a secondary port for the this VLAN with the group ID of 3, use the following commands: awplus# configure terminal...
Page 481: Switchport Mode Trunk
VLAN C OMMANDS SWITCHPORT MODE TRUNK switchport mode trunk Overview Use this command to set the switching characteristics of the port to trunk. Received frames are classified based on the VLAN characteristics, then accepted or discarded based on the specified filtering criteria. switchport mode trunk [ingress-filter {enable|disable}] Syntax Parameter...
Page 482: Switchport Private-Vlan Host-Association
VLAN C OMMANDS SWITCHPORT PRIVATE VLAN HOST ASSOCIATION switchport private-vlan host-association Overview Use this command to associate a primary VLAN and a secondary VLAN to a host port. Only one primary and secondary VLAN can be associated to a host port. Use the no variant of this command to remove the association.
Page 483: Switchport Private-Vlan Mapping
VLAN C OMMANDS SWITCHPORT PRIVATE VLAN MAPPING switchport private-vlan mapping Overview Use this command to associate a primary VLAN and a set of secondary VLANs to a promiscuous port. Use the no variant of this to remove all the association of secondary VLANs to primary VLANs for a promiscuous port.
Page 484: Switchport Trunk Allowed Vlan
VLAN C OMMANDS SWITCHPORT TRUNK ALLOWED VLAN switchport trunk allowed vlan Overview Use this command to add VLANs to be trunked over this switch port. Traffic for these VLANs can be sent and received on the port. Use the no variant of this command to reset switching characteristics of a specified interface to negate a trunked configuration specified with switchport trunk allowed vlan command.
Page 485 VLAN C OMMANDS SWITCHPORT TRUNK ALLOWED VLAN Usage The all parameter sets the port to be a tagged member of all the VLANs configured on the device. The none parameter removes all VLANs from the port’s tagged member set. The add and remove parameters will add and remove VLANs to and from the port’s member set.
Page 486 VLAN C OMMANDS SWITCHPORT TRUNK ALLOWED VLAN Examples The following shows adding a single VLAN to the port’s member set. awplus# configure terminal awplus(config)# interface port1.0.2 awplus(config-if)# switchport trunk allowed vlan add 2 The following shows adding a range of VLANs to the port’s member set. awplus# configure terminal awplus(config)#...
Page 487: Switchport Trunk Native Vlan
VLAN C OMMANDS SWITCHPORT TRUNK NATIVE VLAN switchport trunk native vlan Overview Use this command to configure the native VLAN for this port. The native VLAN is used for classifying the incoming untagged packets. Use the none parameter with this command to remove the native VLAN from the port and set the acceptable frame types to vlan-tagged only.
Page 488: Switchport Vlan-Stacking (Double Tagging)
VLAN C OMMANDS SWITCHPORT VLAN STACKING DOUBLE TAGGING switchport vlan-stacking (double tagging) Overview Use this command to enable VLAN stacking on a port and set it to be a customer-edge-port or provider-port. This is sometimes referred to as VLAN double-tagging, nested VLANs, or Q in Q. Use no parameter with this command to disable VLAN stacking on an interface.
Page 489: Switchport Voice Dscp
VLAN C OMMANDS SWITCHPORT VOICE DSCP switchport voice dscp Overview Use this command for a specific port to configure the Layer 3 DSCP value advertised when the transmission of LLDP-MED Network Policy TLVs for voice devices is enabled. When LLDP-MED capable IP phones receive this network policy information, they transmit voice data with the specified DSCP value.
Page 490: Switchport Voice Vlan
VLAN C OMMANDS SWITCHPORT VOICE VLAN switchport voice vlan Overview Use this command to configure the Voice VLAN tagging advertised when the transmission of LLDP-MED Network Policy TLVs for voice endpoint devices is enabled. When LLDP-MED capable IP phones receive this network policy information, they transmit voice data with the specified tagging.
Page 491 VLAN C OMMANDS SWITCHPORT VOICE VLAN “Egress-VLAN-Name (58)” in the RADIUS Accept message when authenticating a phone attached to this port. To set these attributes on the local RADIUS server, use the egress-vlan-id command or the egress-vlan-name command. C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™...
Page 492: Switchport Voice Vlan Priority
VLAN C OMMANDS SWITCHPORT VOICE VLAN PRIORITY switchport voice vlan priority Overview Use this command to configure the Layer 2 user priority advertised when the transmission of LLDP-MED Network Policy TLVs for voice devices is enabled. This is the priority in the User Priority field of the IEEE 802.1Q VLAN tag, also known as the Class of Service (CoS), or 802.1p priority.
Page 493: Vlan
VLAN C OMMANDS VLAN vlan Overview This command creates VLANs, assigns names to them, and enables or disables them. Disabling the VLAN causes all forwarding over the specified VLAN ID to cease. Enabling the VLAN allows forwarding of frames on the specified VLAN. The no variant of this command destroys the specified VLANs or returns their MTU to the default.
Page 494: Vlan Access-Map
VLAN C OMMANDS VLAN ACCESS vlan access-map Overview Use this command to create a VLAN access-map and enter into VLAN access-map mode, so you can add ACLs to the map. You can use any IPv4 or IPv6 hardware ACLs. VLAN access-maps are used to attach ACLs to VLANs, and therefore to filter traffic as it ingresses VLANs.
Page 495: Vlan Database
VLAN C OMMANDS VLAN DATABASE vlan database Overview Use this command to enter the VLAN Configuration mode. vlan database Syntax Mode Global Configuration Usage Use this command to enter the VLAN configuration mode. You can then add or delete a VLAN, or modify its values. Example In the following example, note the change to VLAN configuration mode from Configure mode:...
Page 496: Vlan Filter
VLAN C OMMANDS VLAN FILTER vlan filter Overview Use this command to apply a VLAN access-map to a list of VLANs. The switch uses the ACLs in the access-map to filter traffic ingressing those VLANs. See the ACL Feature Overview and Configuration Guide for more information, including information about the number of rules consumed by per-VLAN ACLs, and ACL processing order.
Page 497: Chapter 16: Spanning Tree Commands
Spanning Tree Commands Introduction Overview This chapter provides an alphabetical reference for commands used to configure RSTP, STP or MSTP. For information about spanning trees, including configuration procedures, see the STP Feature Overview and Configuration Guide. Command List • “clear spanning-tree statistics”...
Page 498 PANNING OMMANDS • “show spanning-tree statistics instance” on page 529 • “show spanning-tree statistics instance interface” on page 530 • “show spanning-tree statistics interface” on page 532 • “show spanning-tree vlan range-index” on page 534 • “spanning-tree autoedge (RSTP and MSTP)”...
Page 499: Clear Spanning-Tree Statistics
PANNING OMMANDS CLEAR SPANNING TREE STATISTICS clear spanning-tree statistics Overview Use this command to clear all the STP BPDU (Bridge Protocol Data Unit) statistics. clear spanning-tree statistics Syntax clear spanning-tree statistics [instance <mstp-instance>] clear spanning-tree statistics [interface <port> [instance <mstp-instance>]] Parameter Description <port>...
Page 500: Clear Spanning-Tree Detected Protocols (Rstp And Mstp)
PANNING OMMANDS (RSTP MSTP) CLEAR SPANNING TREE DETECTED PROTOCOLS clear spanning-tree detected protocols (RSTP and MSTP) Overview Use this command to clear the detected protocols for a specific port, or all ports. Use this command in RSTP or MSTP mode only. clear spanning-tree detected protocols [interface <port>] Syntax Parameter...
Page 501: Debug Mstp (Rstp And Stp)
PANNING OMMANDS (RSTP STP) DEBUG MSTP debug mstp (RSTP and STP) Overview Use this command to enable debugging for the configured spanning tree mode, and echo data to the console, at various levels. Note that although this command uses the keyword mstp it displays debugging output for RSTP and STP protocols as well the MSTP protocol.
Page 502 PANNING OMMANDS (RSTP STP) DEBUG MSTP command. The default terminal monitor filter will select and display these messages. Alternatively, the messages can be directed to any of the other log outputs by adding a filter for the MSTP application using log buffered (filter) command: awplus#...
Page 503 PANNING OMMANDS (RSTP STP) DEBUG MSTP awplus#terminal monitor awplus#debug mstp packet rx decode interface port1.0.4 17:23:42 awplus MSTP[1417]: port1.0.4 xSTP BPDU rx - start 17:23:42 awplus MSTP[1417]: Protocol version: MSTP, BPDU type: RST 17:23:42 awplus MSTP[1417]: CIST Flags: Agree Forward Learn role=Desig 17:23:42 awplus MSTP[1417]: CIST root id : 0000:0000cd1000fe...
Page 504 PANNING OMMANDS (RSTP STP) DEBUG MSTP awplus#terminal monitor awplus#debug mstp packet rx decode interface port1.0.4 awplus#17:30:17 awplus MSTP[1417]: port1.0.4 xSTP BPDU rx - start 17:30:17 awplus MSTP[1417]: Protocol version: RSTP, BPDU type: RST 17:30:17 awplus MSTP[1417]: CIST Flags: Forward Learn role=Desig 17:30:17 awplus MSTP[1417]: CIST root id : 8000:0000cd1000fe...
Page 505: Instance Priority (Mstp)
PANNING OMMANDS (MSTP) INSTANCE PRIORITY instance priority (MSTP) Overview Use this command to set the priority for this device to become the root bridge for the specified MSTI (Multiple Spanning Tree Instance). Use this command for MSTP only. Use the no variant of this command to restore the root bridge priority of the device for the instance to the default.
Page 506 PANNING OMMANDS (MSTP) INSTANCE PRIORITY Related region (MSTP) Commands revision (MSTP) show spanning-tree mst config spanning-tree mst instance spanning-tree mst instance priority C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 507: Instance Vlan (Mstp)
PANNING OMMANDS (MSTP) INSTANCE VLAN instance vlan (MSTP) Overview Use this command to create an MST Instance (MSTI), and associate the specified VLANs with it. An MSTI is a spanning tree instance that exists within an MST region (MSTR). When a VLAN is associated with an MSTI the member ports of the VLAN are automatically configured to send and receive spanning-tree information for the associated MSTI.
Page 508 PANNING OMMANDS (MSTP) INSTANCE VLAN Related region (MSTP) Commands revision (MSTP) show spanning-tree mst config spanning-tree mst instance vlan C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 509: Region (Mstp)
PANNING OMMANDS (MSTP) REGION region (MSTP) Overview Use this command to assign a name to the device’s MST Region. MST Instances (MSTI) of a region form different spanning trees for different VLANs. Use this command for MSTP only. Use the no variant of this command to remove this region name and reset it to the default.
Page 510: Revision (Mstp)
PANNING OMMANDS (MSTP) REVISION revision (MSTP) Overview Use this command to specify the MST revision number to be used in the configuration identifier. Use this command for MSTP only. Syntax revision <revision-number> Parameter Description <revision-number> <0-65535> Revision number. Default The default of revision number is 0. Mode MST Configuration Usage...
Page 511: Show Debugging Mstp
PANNING OMMANDS SHOW DEBUGGING MSTP show debugging mstp Overview Use this command to show the MSTP debugging options set. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide. Syntax show debugging mstp Mode User Exec and Privileged Exec mode...
Page 512: Show Spanning-Tree
PANNING OMMANDS SHOW SPANNING TREE show spanning-tree Overview Use this command to display detailed spanning tree information on the specified port or on all ports. Use this command for RSTP, MSTP or STP. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 513 PANNING OMMANDS SHOW SPANNING TREE Output Figure 16-2: Example output from show spanning-tree in RSTP mode awplus#show spanning-tree % 1: Bridge up - Spanning Tree Enabled % 1: Root Path Cost 0 - Root Port 0 - Bridge Priority 32768 % 1: Forward Delay 15 - Hello Time 2 - Max Age 20...
Page 514 PANNING OMMANDS SHOW SPANNING TREE % 1: Bridge up - Spanning Tree Enabled % 1: Root Path Cost 0 - Root Port 0 - Bridge Priority 32768 % 1: Forward Delay 15 - Hello Time 2 - Max Age 20 % 1: Root Id 80000000cd20f093...
Page 515: Show Spanning-Tree Brief
PANNING OMMANDS SHOW SPANNING TREE BRIEF show spanning-tree brief Overview Use this command to display a summary of spanning tree status information on all ports. Use this command for RSTP, MSTP or STP. show spanning-tree brief Syntax Parameter Description brief A brief summary of spanning tree information.
Page 516: Show Spanning-Tree Mst
PANNING OMMANDS SHOW SPANNING TREE MST show spanning-tree mst Overview This command displays bridge-level information about the CIST and VLAN to MSTI mappings. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 517: Show Spanning-Tree Mst Config
PANNING OMMANDS SHOW SPANNING TREE MST CONFIG show spanning-tree mst config Overview Use this command to display MSTP configuration identifier for the device. show spanning-tree mst config Syntax Mode User Exec, Privileged Exec and Interface Configuration Usage The region name, the revision number, and the digest of the VLAN to MSTI configuration table must be the same on all devices that are intended to be in the same MST region.
Page 518: Show Spanning-Tree Mst Detail
PANNING OMMANDS SHOW SPANNING TREE MST DETAIL show spanning-tree mst detail Overview This command displays detailed information about each instance, and all interfaces associated with that particular instance. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 519 PANNING OMMANDS SHOW SPANNING TREE MST DETAIL port1.0.3: Port 5003 - Id 838b - Role Disabled - State Discarding port1.0.3: Designated External Path Cost 0 -Internal Path Cost 0 port1.0.3: Configured Path Cost 20000000 - Add type Explicit ref count 1 port1.0.3: Designated Port Id 838b - CIST Priority 128 -...
Page 520: Show Spanning-Tree Mst Detail Interface
PANNING OMMANDS SHOW SPANNING TREE MST DETAIL INTERFACE show spanning-tree mst detail interface Overview This command displays detailed information about the specified switch port, and the MST instances associated with it. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 521 PANNING OMMANDS SHOW SPANNING TREE MST DETAIL INTERFACE port1.0.2: No portfast configured - Current portfast off port1.0.2: portfast bpdu-guard default - Current portfast bpdu-guard off port1.0.2: portfast bpdu-filter default - Current portfast bpdu-filter off port1.0.2: no root guard configured - Current root guard off port1.0.2: Configured Link Type point-to-point - Current shared...
Page 522: Show Spanning-Tree Mst Instance
PANNING OMMANDS SHOW SPANNING TREE MST INSTANCE show spanning-tree mst instance Overview This command displays detailed information for the specified instance, and all switch ports associated with that instance. A topology change counter has been included for RSTP and MSTP. You can see the topology change counter for RSTP by using the show spanning-tree command.
Page 523: Show Spanning-Tree Mst Instance Interface
PANNING OMMANDS SHOW SPANNING TREE MST INSTANCE INTERFACE show spanning-tree mst instance interface Overview This command displays detailed information for the specified MST (Multiple Spanning Tree) instance, and the specified switch port associated with that MST instance. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 524: Show Spanning-Tree Mst Interface
PANNING OMMANDS SHOW SPANNING TREE MST INTERFACE show spanning-tree mst interface Overview This command displays the number of instances created, and VLANs associated with it for the specified switch port. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 525 PANNING OMMANDS SHOW SPANNING TREE MST DETAIL INTERFACE show spanning-tree mst detail interface Overview This command displays detailed information about the specified switch port, and the MST instances associated with it. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 526 PANNING OMMANDS SHOW SPANNING TREE MST DETAIL INTERFACE port1.0.2: No portfast configured - Current portfast off port1.0.2: portfast bpdu-guard default - Current portfast bpdu-guard off port1.0.2: portfast bpdu-filter default - Current portfast bpdu-filter off port1.0.2: no root guard configured - Current root guard off port1.0.2: Configured Link Type point-to-point - Current shared...
Page 527: Show Spanning-Tree Statistics
PANNING OMMANDS SHOW SPANNING TREE STATISTICS show spanning-tree statistics Overview This command displays BPDU (Bridge Protocol Data Unit) statistics for all spanning-tree instances, and all switch ports associated with all spanning-tree instances. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 528 PANNING OMMANDS SHOW SPANNING TREE STATISTICS % STATUS of Port Timers % --------------------- % Hello Time Configured : 2 % Hello timer : INACTIVE % Hello Time Value : 0 % Forward Delay Timer : INACTIVE % Forward Delay Timer Value : 0...
Page 529: Show Spanning-Tree Statistics Instance
PANNING OMMANDS SHOW SPANNING TREE STATISTICS INSTANCE show spanning-tree statistics instance Overview This command displays BPDU (Bridge Protocol Data Unit) statistics for the specified MST (Multiple Spanning Tree) instance, and all switch ports associated with that MST instance. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 530: Show Spanning-Tree Statistics Instance Interface
PANNING OMMANDS SHOW SPANNING TREE STATISTICS INSTANCE INTERFACE show spanning-tree statistics instance interface Overview This command displays BPDU (Bridge Protocol Data Unit) statistics for the specified MST (Multiple Spanning Tree) instance and the specified switch port associated with that MST instance. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 531 PANNING OMMANDS SHOW SPANNING TREE STATISTICS INSTANCE INTERFACE Output Figure 16-15: Example output from show spanning-tree statistics instance interface awplus#sh spanning-tree statistics interface port1.0.2 instance 1 Spanning Tree Enabled for Instance : 1 ================================== % INST_PORT port1.0.2 Information & Statistics % ----------------------------------------...
Page 532: Show Spanning-Tree Statistics Interface
PANNING OMMANDS SHOW SPANNING TREE STATISTICS INTERFACE show spanning-tree statistics interface Overview This command displays BPDU (Bridge Protocol Data Unit) statistics for the specified switch port, and all MST instances associated with that switch port. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 533 PANNING OMMANDS SHOW SPANNING TREE STATISTICS INTERFACE % PORT Based Information & Statistics % ----------------------------------- % Config Bpdu's xmitted : 0 % Config Bpdu's received : 0 % TCN Bpdu's xmitted : 0 % TCN Bpdu's received : 0 % Forward Trans Count : 0...
Page 534: Show Spanning-Tree Vlan Range-Index
PANNING OMMANDS SHOW SPANNING TREE VLAN RANGE INDEX show spanning-tree vlan range-index Overview Use this command to display information about MST (Multiple Spanning Tree) instances and the VLANs associated with them including the VLAN range-index value for the device. show spanning-tree vlan range-index Syntax Mode Privileged Exec...
Page 535: Spanning-Tree Autoedge (Rstp And Mstp)
PANNING OMMANDS (RSTP MSTP) SPANNING TREE AUTOEDGE spanning-tree autoedge (RSTP and MSTP) Overview Use this command to enable the autoedge feature on the port. The autoedge feature allows the port to automatically detect that it is an edge port. If it does not receive any BPDUs in the first three seconds after linkup, enabling, or entering RSTP or MSTP mode, it sets itself to be an edgeport and enters the forwarding state.
Page 536: Spanning-Tree Bpdu
PANNING OMMANDS SPANNING TREE BPDU spanning-tree bpdu Overview Use this command to configure BPDU (Bridge Protocol Data Unit) discarding or forwarding, when STP is disabled on the switch. This may be needed for correct STP operation in complex networks. There is no no variant for this command. Instead, apply the discard parameter to reset it back to the default then re-enable STP with the command spanning-tree enable.
Page 537 PANNING OMMANDS SPANNING TREE BPDU Examples To enable STP BPDU discard in Global Configuration mode with STP disabled, which discards all ingress STP BPDU frames, enter the commands: awplus# configure terminal awplus(config)# no spanning-tree rstp enable awplus(config)# spanning-tree bpdu discard To enable STP BPDU forward in Global Configuration mode with STP disabled, which forwards any ingress STP BPDU frames to all ports regardless of any VLAN membership, enter the commands:...
Page 538: Spanning-Tree Cisco-Interoperability (Mstp)
PANNING OMMANDS (MSTP) SPANNING TREE CISCO INTEROPERABILITY spanning-tree cisco-interoperability (MSTP) Overview Use this command to enable/disable Cisco-interoperability for MSTP. Use this command for MSTP only. Syntax spanning-tree cisco-interoperability {enable|disable} Parameter Description enable Enable Cisco interoperability for MSTP. disable Disable Cisco interoperability for MSTP. Default If this command is not used, Cisco interoperability is disabled.
Page 539: Spanning-Tree Edgeport (Rstp And Mstp)
PANNING OMMANDS (RSTP MSTP) SPANNING TREE EDGEPORT spanning-tree edgeport (RSTP and MSTP) Overview Use this command to set a port as an edge-port. Use this command for RSTP or MSTP. This command has the same effect as the spanning-tree portfast (STP) command, but the configuration displays differently in the output of some show commands.
Page 540: Spanning-Tree Enable
PANNING OMMANDS SPANNING TREE ENABLE spanning-tree enable Overview Use this command in Global Configuration mode to enable the specified spanning tree protocol for all switch ports. Note that this must be the spanning tree protocol that is configured on the device by the spanning-tree mode command.
Page 541 PANNING OMMANDS SPANNING TREE ENABLE To disable RSTP in Global Configuration mode, enter the below commands: awplus# configure terminal awplus(config)# no spanning-tree rstp enable Related spanning-tree bpdu Commands spanning-tree mode C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 542: Spanning-Tree Errdisable-Timeout Enable
PANNING OMMANDS SPANNING TREE ERRDISABLE TIMEOUT ENABLE spanning-tree errdisable-timeout enable Overview Use this command to enable the errdisable-timeout facility, which sets a timeout for ports that are disabled due to the BPDU guard feature. Use this command for RSTP or MSTP. Use the no variant of this command to disable the errdisable-timeout facility.
Page 543: Spanning-Tree Errdisable-Timeout Interval
PANNING OMMANDS SPANNING TREE ERRDISABLE TIMEOUT INTERVAL spanning-tree errdisable-timeout interval Overview Use this command to specify the time interval after which a port is brought back up when it has been disabled by the BPDU guard feature. Use this command for RSTP or MSTP. Syntax spanning-tree errdisable-timeout interval <10-1000000>...
Page 544: Spanning-Tree Force-Version
PANNING OMMANDS SPANNING TREE FORCE VERSION spanning-tree force-version Overview Use this command in Interface Configuration mode for a switch port interface only to force the protocol version for the switch port. Use this command for RSTP or MSTP only. spanning-tree force-version <version> Syntax no spanning-tree force-version Parameter...
Page 545: Spanning-Tree Forward-Time
PANNING OMMANDS SPANNING TREE FORWARD TIME spanning-tree forward-time Overview Use this command to set the forward delay value. Use the no variant of this command to reset the forward delay value to the default setting of 15 seconds. The forward delay sets the time (in seconds) to control how fast a port changes its spanning tree state when moving towards the forwarding state.
Page 546: Spanning-Tree Guard Root
PANNING OMMANDS SPANNING TREE GUARD ROOT spanning-tree guard root Overview Use this command in Interface Configuration mode for a switch port only to enable the Root Guard feature for the switch port. The root guard feature disables reception of superior BPDUs. You can use this command for RSTP, STP or MSTP. Use the no variant of this command to disable the root guard feature for the port.
Page 547: Spanning-Tree Hello-Time
PANNING OMMANDS SPANNING TREE HELLO TIME spanning-tree hello-time Overview Use this command to set the hello-time. This sets the time in seconds between the transmission of device spanning tree configuration information when the device is the Root Bridge of the spanning tree or is trying to become the Root Bridge. Use this command for RSTP, STP or MSTP.
Page 548: Spanning-Tree Link-Type
PANNING OMMANDS SPANNING TREE LINK TYPE spanning-tree link-type Overview Use this command in Interface Configuration mode for a switch port interface only to enable or disable point-to-point or shared link types on the switch port. Use this command for RSTP or MSTP only. Use the no variant of this command to return the port to the default link type.
Page 549: Spanning-Tree Max-Age
PANNING OMMANDS SPANNING TREE MAX spanning-tree max-age Overview Use this command to set the max-age. This sets the maximum age, in seconds, that dynamic spanning tree configuration information is stored in the device before it is discarded. Use this command for RSTP, STP or MSTP. Use the no variant of this command to restore the default of max-age.
Page 550: Spanning-Tree Max-Hops (Mstp)
PANNING OMMANDS (MSTP) SPANNING TREE MAX HOPS spanning-tree max-hops (MSTP) Overview Use this command to specify the maximum allowed hops for a BPDU in an MST region. This parameter is used by all the instances of the MST region. Use the no variant of this command to restore the default. Use this command for MSTP only.
Page 551: Spanning-Tree Mode
PANNING OMMANDS SPANNING TREE MODE spanning-tree mode Overview Use this command to change the spanning tree protocol mode on the device. The spanning tree protocol mode on the device can be configured to either STP, RSTP or MSTP. spanning-tree mode {stp|rstp|mstp} Syntax Default The default spanning tree protocol mode on the device is RSTP.
Page 552: Spanning-Tree Mst Configuration
PANNING OMMANDS SPANNING TREE MST CONFIGURATION spanning-tree mst configuration Overview Use this command to enter the MST Configuration mode to configure the Multiple Spanning-Tree Protocol. spanning-tree mst configuration Syntax Mode Global Configuration Examples The following example uses this command to enter MST Configuration mode. Note the change in the command prompt.
Page 553: Spanning-Tree Mst Instance
PANNING OMMANDS SPANNING TREE MST INSTANCE spanning-tree mst instance Overview Use this command to assign a Multiple Spanning Tree instance (MSTI) to a switch port or channel group. Note that ports are automatically configured to send and receive spanning-tree information for the associated MSTI when VLANs are assigned to MSTIs using the instance vlan (MSTP) command.
Page 554: Spanning-Tree Mst Instance Path-Cost
PANNING OMMANDS SPANNING TREE MST INSTANCE PATH COST spanning-tree mst instance path-cost Overview Use this command to set the cost of a path associated with a switch port, for the specified MSTI. This specifies the switch port’s contribution to the cost of a path to the MSTI regional root via that port.
Page 555 PANNING OMMANDS SPANNING TREE MST INSTANCE PATH COST To return the path cost to its default value on instance 3, use the commands: awplus# configure terminal awplus(config)# interface port1.0.2 awplus(config-if)# no spanning-tree mst instance 3 path-cost Related instance vlan (MSTP) Commands spanning-tree mst instance spanning-tree mst instance priority...
Page 556: Spanning-Tree Mst Instance Priority
PANNING OMMANDS SPANNING TREE MST INSTANCE PRIORITY spanning-tree mst instance priority Overview Use this command in Interface Configuration mode for a switch port interface only to set the port priority for an MST instance (MSTI). Use the no variant of this command to restore the default priority value (128). Syntax spanning-tree mst instance <instance-id>...
Page 557: Spanning-Tree Mst Instance Restricted-Role
PANNING OMMANDS SPANNING TREE MST INSTANCE RESTRICTED ROLE spanning-tree mst instance restricted-role Overview Use this command in Interface Configuration mode for a switch port interface only to enable the restricted role for an MSTI (Multiple Spanning Tree Instance) on a switch port.
Page 558 PANNING OMMANDS SPANNING TREE MST INSTANCE RESTRICTED ROLE Related instance vlan (MSTP) Commands spanning-tree priority (port priority) spanning-tree mst instance spanning-tree mst instance path-cost spanning-tree mst instance restricted-tcn C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 559: Spanning-Tree Mst Instance Restricted-Tcn
PANNING OMMANDS SPANNING TREE MST INSTANCE RESTRICTED spanning-tree mst instance restricted-tcn Overview Use this command to prevent a switch port from propagating received topology change notifications and topology changes to other switch ports. This is named restricted TCN (Topology Change Notification). A TCN is a simple Bridge Protocol Data Unit (BPDU) that a bridge sends out to its root port to signal a topology change.
Page 560: Spanning-Tree Path-Cost
PANNING OMMANDS SPANNING TREE PATH COST spanning-tree path-cost Overview Use this command in Interface Configuration mode for a switch port interface only to set the cost of a path for the specified port. This value then combines with others along the path to the root bridge in order to determine the total cost path value from the particular port, to the root bridge.
Page 561: Spanning-Tree Portfast (Stp)
PANNING OMMANDS (STP) SPANNING TREE PORTFAST spanning-tree portfast (STP) Overview Use this command in Interface Configuration mode for a switch port interface only to set a port as an edge-port. The portfast feature enables a port to rapidly move to the forwarding state, without having first to pass through the intermediate spanning tree states.
Page 562 PANNING OMMANDS (STP) SPANNING TREE PORTFAST awplus# configure terminal Example awplus(config)# interface port1.0.2 awplus(config-if)# spanning-tree portfast Related spanning-tree edgeport (RSTP and MSTP) Commands show spanning-tree spanning-tree portfast bpdu-filter spanning-tree portfast bpdu-guard C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 563: Spanning-Tree Portfast Bpdu-Filter
PANNING OMMANDS SPANNING TREE PORTFAST BPDU FILTER spanning-tree portfast bpdu-filter Overview This command sets the bpdu-filter feature and applies a filter to any BPDUs (Bridge Protocol Data Units) received. Enabling this feature ensures that configured ports will not transmit any BPDUs and will ignore (filter out) any BPDUs received. BPDU Filter is not enabled on a port by default.
Page 564 PANNING OMMANDS SPANNING TREE PORTFAST BPDU FILTER To enable STP BPDU filtering in Interface Configuration mode, enter the commands: awplus# configure terminal awplus(config)# interface port1.0.2 awplus(config-if)# spanning-tree portfast bpdu-filter enable Related spanning-tree edgeport (RSTP and MSTP) Commands show spanning-tree spanning-tree portfast (STP) spanning-tree portfast bpdu-guard C613-50172-01 Rev B Command Reference for x230 Series...
Page 565: Spanning-Tree Portfast Bpdu-Guard
PANNING OMMANDS SPANNING TREE PORTFAST BPDU GUARD spanning-tree portfast bpdu-guard Overview This command applies a BPDU (Bridge Protocol Data Unit) guard to the port. A port with the bpdu-guard feature enabled will block all traffic (BPDUs and user data), if it starts receiving BPDUs.
Page 566 PANNING OMMANDS SPANNING TREE PORTFAST BPDU GUARD Use the show spanning-tree command to display the device and port configurations for the BPDU Guard feature. It shows both the administratively configured and currently running values of bpdu-guard. Example To enable STP BPDU guard in Global Configuration mode, enter the below commands: awplus# configure terminal...
Page 567: Spanning-Tree Priority (Bridge Priority)
PANNING OMMANDS SPANNING TREE PRIORITY BRIDGE PRIORITY spanning-tree priority (bridge priority) Overview Use this command to set the bridge priority for the device. A lower priority value indicates a greater likelihood of the device becoming the root bridge. Use this command for RSTP, STP or MSTP. When MSTP mode is configured, this will apply to the CIST.
Page 568: Spanning-Tree Priority (Port Priority)
PANNING OMMANDS SPANNING TREE PRIORITY PORT PRIORITY spanning-tree priority (port priority) Overview Use this command in Interface Configuration mode for a switch port interface only to set the port priority for port. A lower priority value indicates a greater likelihood of the port becoming part of the active topology.
Page 569: Spanning-Tree Restricted-Role
PANNING OMMANDS SPANNING TREE RESTRICTED ROLE spanning-tree restricted-role Overview Use this command in Interface Configuration mode for a switch port interface only to restrict the port from becoming a root port. Use the no variant of this command to disable the restricted role functionality. Syntax spanning-tree restricted-role no spanning-tree restricted-role...
Page 570: Spanning-Tree Restricted-Tcn
PANNING OMMANDS SPANNING TREE RESTRICTED spanning-tree restricted-tcn Overview Use this command in Interface Configuration mode for a switch port interface only to prevent TCN (Topology Change Notification) BPDUs (Bridge Protocol Data Units) from being sent on a port. If this command is enabled, after a topology change a bridge is prevented from sending a TCN to its designated bridge.
Page 571: Spanning-Tree Transmit-Holdcount
PANNING OMMANDS SPANNING TREE TRANSMIT HOLDCOUNT spanning-tree transmit-holdcount Overview Use this command to set the maximum number of BPDU transmissions that are held back. Use the no variant of this command to restore the default transmit hold-count value. Syntax spanning-tree transmit-holdcount no spanning-tree transmit-holdcount Default Transmit hold-count default is 3.
Page 572: Undebug Mstp
PANNING OMMANDS UNDEBUG MSTP undebug mstp Overview This command applies the functionality of the no debug mstp (RSTP and STP) command. C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 573 Link Aggregation Commands Introduction Overview This chapter provides an alphabetical reference of commands used to configure a static channel group (static aggregator) and dynamic channel group (LACP channel group, etherchannel or LACP aggregator). Link aggregation is also sometimes referred to as channeling. : AlliedWare Plus™...
Page 574 GGREGATION OMMANDS • “lacp system-priority” on page 581 • “lacp timeout” on page 582 • “platform load-balancing” on page 584 • “show debugging lacp” on page 585 • “show diagnostic channel-group” on page 586 • “show etherchannel” on page 588 •...
Page 575: Channel-Group
GGREGATION OMMANDS CHANNEL GROUP channel-group Overview Use this command to either create a new dynamic channel group while at the same time adding a port to it, or to add a port to an existing dynamic channel group. Note that you must also set the LACP mode to be either active or passive. You can create up to 32 dynamic (LACP) channel groups (and up to 96 static channel groups).
Page 576 GGREGATION OMMANDS CHANNEL GROUP Examples To add device port1.0.6 to a newly created LACP channel group 2 use the commands below: awplus# configure terminal awplus(config)# interface port1.0.6 awplus(config-if)# channel-group 2 mode active To remove device port1.0.6 from any created LACP channel groups use the command below: awplus# configure terminal...
Page 577: Clear Lacp Counters
GGREGATION OMMANDS CLEAR LACP COUNTERS clear lacp counters Overview Use this command to clear all counters of all present LACP aggregators (channel groups) or a given LACP aggregator. clear lacp [<1-32>] counters Syntax Parameter Description <1-32> Channel-group number. Mode Privileged Exec awplus# clear lacp 2 counters Example...
Page 578: Debug Lacp
GGREGATION OMMANDS DEBUG LACP debug lacp Overview Use this command to enable all LACP troubleshooting functions. Use the no variant of this command to disable this function. Syntax debug lacp {all|cli|event|ha|packet|sync|timer[detail]} no debug lacp {all|cli|event|ha|packet|sync|timer[detail]} Parameter Description Turn on all debugging for LACP. Specifies debugging for CLI messages.
Page 579: Lacp Global-Passive-Mode Enable
GGREGATION OMMANDS LACP GLOBAL PASSIVE MODE ENABLE lacp global-passive-mode enable Overview Use this command to enable LACP channel-groups to dynamically self-configure when they are connected to another device that has LACP channel-groups configured with Active Mode. lacp global-passive-mode enable Syntax no lacp global-passive-mode enable Default Enabled...
Page 580: Lacp Port-Priority
GGREGATION OMMANDS LACP PORT PRIORITY lacp port-priority Overview Use this command to set the priority of a device port. Ports are selected for aggregation based on their priority, with the higher priority (numerically lower) ports selected first. Use the no variant of this command to reset the priority of port to the default. Syntax lacp port-priority <1-65535>...
Page 581: Lacp System-Priority
GGREGATION OMMANDS LACP SYSTEM PRIORITY lacp system-priority Overview Use this command to set the system priority of a local system. This is used in determining the system responsible for resolving conflicts in the choice of aggregation groups. Use the no variant of this command to reset the system priority of the local system to the default.
Page 582: Lacp Timeout
GGREGATION OMMANDS LACP TIMEOUT lacp timeout Overview Use this command to set the short or long timeout on a port. Ports will time out of the aggregation if three consecutive updates are lost. lacp timeout {short|long} Syntax Parameter Description timeout Number of seconds before invalidating a received LACP data unit (DU).
Page 583 GGREGATION OMMANDS LACP TIMEOUT The following commands set the LACP short timeout for 1 second on port1.0.2. awplus# configure terminal awplus(config)# interface port1.0.2 awplus(config-if)# lacp timeout short C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 584 GGREGATION OMMANDS PLATFORM LOAD BALANCING platform load-balancing Overview This command selects which address fields are used as inputs into the load balancing algorithm for aggregated links. The output from this algorithm is used to select which individual path a given packet will traverse within an aggregated link.
Page 585: Show Debugging Lacp
GGREGATION OMMANDS SHOW DEBUGGING LACP show debugging lacp Overview Use this command to display the LACP debugging option set. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide. Syntax show debugging lacp Mode User Exec and Privileged Exec...
Page 586: Show Diagnostic Channel-Group
Overview This command displays dynamic and static channel group interface status information. The output of this command is useful for Allied Telesis authorized service personnel for diagnostic purposes. For information on filtering and saving command output, see the “Getting Started...
Page 587 GGREGATION OMMANDS SHOW DIAGNOSTIC CHANNEL GROUP  Channel Group Info based on HW: Note: Pos - position in hardware table Only entries from first device are displayed. ------------------------------------------------------------- Interface IfIndex Member port IfIndex Active Pos ------------------------------------------------------------- 4503 N/a 4601 N/a ...
Page 588: Show Etherchannel
GGREGATION OMMANDS SHOW ETHERCHANNEL show etherchannel Overview Use this command to display information about a LACP channel specified by the channel group number. The command output also shows the thrash limiting status. If thrash limiting is detected and the action parameter of the thrash-limiting command is set to vlan-disable, the output will also show the VLANs on which thrashing is detected.
Page 589: Show Etherchannel Detail
GGREGATION OMMANDS SHOW ETHERCHANNEL DETAIL show etherchannel detail Overview Use this command to display detailed information about all LACP channels. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide, which is available on our website at alliedtelesis.com.
Page 590: Show Etherchannel Summary
GGREGATION OMMANDS SHOW ETHERCHANNEL SUMMARY show etherchannel summary Overview Use this command to display a summary of all LACP channels. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide, which is available on our website at alliedtelesis.com.
Page 591: Show Lacp Sys-Id
GGREGATION OMMANDS SHOW LACP SYS show lacp sys-id Overview Use this command to display the LACP system ID and priority. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide, which is available on our website at alliedtelesis.com.
Page 592: Show Lacp-Counter
GGREGATION OMMANDS SHOW LACP COUNTER show lacp-counter Overview Use this command to display the packet traffic on all ports of all present LACP aggregators, or a given LACP aggregator. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 593: Show Port Etherchannel
GGREGATION OMMANDS SHOW PORT ETHERCHANNEL show port etherchannel Overview Use this command to show LACP details of the device port specified. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide, which is available on our website at alliedtelesis.com.
Page 594: Show Static-Channel-Group
GGREGATION OMMANDS SHOW STATIC CHANNEL GROUP show static-channel-group Overview Use this command to display all configured static channel groups and their corresponding member ports. Note that a static channel group is the same as a static aggregator. The command output also shows the thrash limiting status. If thrash limiting is detected and the action parameter of the thrash-limiting command is set to...
Page 595: Static-Channel-Group
GGREGATION OMMANDS STATIC CHANNEL GROUP static-channel-group Overview Use this command to create a static channel group, or add a member port to an existing static channel group. Static channel groups are also known as static aggregators. You can create up to 96 static channel groups (and up to 32 dynamic channel groups).
Page 596 GGREGATION OMMANDS STATIC CHANNEL GROUP To reference static channel group 2 as an interface, use the commands: awplus# configure terminal awplus(config)# interface sa2 awplus(config-if)# To make it possible to use QoS Storm Protection on static channel group 2 on port1.0.6, with an ACL named “test-acl”, use the commands: awplus# configure terminal awplus(config)#...
Page 597: Undebug Lacp
GGREGATION OMMANDS UNDEBUG LACP undebug lacp Overview This command applies the functionality of the no debug lacp command. C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 598: Chapter 18: Power Over Ethernet Commands
The following documents offer further information for configuring PoE on AlliedWare Plus switches. • PoE Feature Overview and Configuration_Guide. • Support for Allied Telesis Enterprise_MIBs_in AlliedWare Plus, for information about which PoE MIB objects are supported. • SNMP Feature Overview and Configuration_Guide, for information about SNMP traps.
Page 599 OWER OVER THERNET OMMANDS • “show debugging power-inline” on page 612 • “show power-inline” on page 613 • “show power-inline counters” on page 616 • “show power-inline interface” on page 618 • “show power-inline interface detail” on page 620 C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™...
Page 600: Clear Power-Inline Counters Interface
OWER OVER THERNET OMMANDS CLEAR POWER INLINE COUNTERS INTERFACE clear power-inline counters interface Overview This command will clear the counters from a specified port, a range of ports, or all ports on the switch. If no ports are entered then PoE counters for all ports are cleared.
Page 601: Debug Power-Inline
OWER OVER THERNET OMMANDS DEBUG POWER INLINE debug power-inline Overview This command enables debugging display for messages that are specific to Power over Ethernet (PoE). Use the no variant of this command to disable the specified PoE debugging messages. Syntax debug power-inline [all|event|info|power] no debug power-inline [all|event|info|power] Parameter...
Page 602 OWER OVER THERNET OMMANDS DEBUG POWER INLINE Related show debugging power-inline Commands terminal monitor C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 603: Power-Inline Allow-Legacy
OWER OVER THERNET OMMANDS POWER INLINE ALLOW LEGACY power-inline allow-legacy Overview This command enables detection of pre-IEEE 802.3af Power Ethernet standard legacy Powered Devices (PDs). The no variant of this command disables detection of pre-IEEE 802.3af Power Ethernet standard legacy Powered Devices (PDs). Syntax power-inline allow-legacy no power-inline allow-legacy...
Page 604: Power-Inline Description
OWER OVER THERNET OMMANDS POWER INLINE DESCRIPTION power-inline description Overview This command adds a description for a Powered Device (PD) connected to a PoE port. The no variant of this command clears a previously entered description for a connected PD, resetting the PD description to the default (null). Syntax power-inline description <pd-description>...
Page 605: Power-Inline Enable
OWER OVER THERNET OMMANDS POWER INLINE ENABLE power-inline enable Overview This command enables Power over Ethernet (PoE) to detect a connected Powered Device (PD) and supply power. The no variant of this command disables PoE functionality on the selected PoE port(s).
Page 606: Power-Inline Max
OWER OVER THERNET OMMANDS POWER INLINE MAX power-inline max Overview This command sets the maximum power allocated to a Power over an Ethernet (PoE and PoE+) port. The amount of power actually supplied to the port depends on the power requirements of the connected PD. It is also a function of the total PoE power loading on the switch and the PoE priority set for the port by the power-inline priority command.
Page 607 OWER OVER THERNET OMMANDS POWER INLINE MAX  awplus#configure terminal  awplus(config)#interface port1.0.1  awplus(config-if)#power-line max 5300  % The maximum power has been rounded to 5450mW in hardware. See the LLDP Feature Overview and Configuration Guide for information about power monitoring at the PD.
Page 608: Power-Inline Priority
OWER OVER THERNET OMMANDS POWER INLINE PRIORITY power-inline priority Overview This command sets the Power over Ethernet (PoE) priority level of a PoE port to one of three available priority levels: • • high • critical The no variant of this command restores the PoE port priority to the default (low). power-inline priority {low|high|critical} Syntax no power-inline priority...
Page 609 OWER OVER THERNET OMMANDS POWER INLINE PRIORITY To reset the priority level to the default of low on port1.0.1 to port1.0.4, use the following commands: awplus# configure terminal awplus(config)# interface port1.0.1-port1.0.4 awplus(config-if)# no power-inline priority Related power-inline usage-threshold Commands show power-inline show power-inline interface show running-config power-inline...
Page 610: Power-Inline Usage-Threshold
OWER OVER THERNET OMMANDS POWER INLINE USAGE THRESHOLD power-inline usage-threshold Overview This command sets the level at which the switch will issue a message that the power supplied to all Powered Devices (PDs) has reached a critical level of the nominal power rating for the switch.
Page 611: Service Power-Inline
OWER OVER THERNET OMMANDS SERVICE POWER INLINE service power-inline Overview This command enables Power over Ethernet (PoE) globally on the switch, for all PoE ports. service power-inline Syntax no service power-inline Default PoE functionality is enabled by default Mode Global Configuration Examples To disable PoE, use the following commands: awplus#...
Page 612: Show Debugging Power-Inline
OWER OVER THERNET OMMANDS SHOW DEBUGGING POWER INLINE show debugging power-inline Overview This command displays Power over Ethernet (PoE) debug settings. show debugging power-inline Syntax Mode User Exec and Privileged Exec Example To display PoE debug settings, use the following command: awplus# show debugging power-inline Output...
Page 613: Show Power-Inline
OWER OVER THERNET OMMANDS SHOW POWER INLINE show power-inline Overview This command displays the Power over Ethernet (PoE) status for all ports. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 614 OWER OVER THERNET OMMANDS SHOW POWER INLINE Table 1: Parameters in the show power-inline command output (cont.) Parameter Description Operational Status The operational status of the PSU hardware when this command was issued: • On if the PSU is installed and switched on. •...
Page 615 OWER OVER THERNET OMMANDS SHOW POWER INLINE Table 1: Parameters in the show power-inline command output (cont.) Parameter Description Device The description of the connected PD device if a description has been added with the power-inline description command. No description is shown for PDs not configured with the power-inline description command.
Page 616: Show Power-Inline Counters
OWER OVER THERNET OMMANDS SHOW POWER INLINE COUNTERS show power-inline counters Overview This command displays Power over Ethernet (PoE) event counters for ports on the Power Sourcing Equipment (PSE). The PoE event counters displayed can also be accessed by objects in the PoE MIB (RFC 3621). See the MIB Objects Feature Overview and Configuration Guide for information about which PoE MIB objects...
Page 617 OWER OVER THERNET OMMANDS SHOW POWER INLINE COUNTERS Table 2: Parameters in the show power-inline counters command output Parameter Description Interface The PoE port(s) in the format portx.y.z, where x is the device number, y is the module number within the device, and z is the PoE port number within the module.
Page 618: Show Power-Inline Interface
OWER OVER THERNET OMMANDS SHOW POWER INLINE INTERFACE show power-inline interface Overview This command displays a summary of Power over Ethernet (PoE) information for specified ports. If no ports are specified then PoE information is displayed for all ports. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 619 OWER OVER THERNET OMMANDS SHOW POWER INLINE INTERFACE Table 3: Parameters in show power-inline interface output (cont.) Parameter Description The current PoE priorities for PoE ports on the PSE, as configured from a power-inline priority command: • Low displays when the low parameter is issued. The lowest priority for a PoE enabled port (default).
Page 620: Show Power-Inline Interface Detail
OWER OVER THERNET OMMANDS SHOW POWER INLINE INTERFACE DETAIL show power-inline interface detail Overview This command displays detailed information for one or more Power over Ethernet (PoE) ports. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 621 OWER OVER THERNET OMMANDS SHOW POWER INLINE INTERFACE DETAIL Table 4: Parameters in show power-inline interface detail output Parameter Description Interface The PoE port(s) in the format portx.y.z, where x is the device number, y is the module number within the device, and z is the PoE port number within the module.
Page 622 OWER OVER THERNET OMMANDS SHOW POWER INLINE INTERFACE DETAIL Related show power-inline Commands show power-inline interface C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 623: Part 3: Layer 3 Switching
Part 3: Layer 3 Switching C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 624: Chapter 19: Ip Addressing And Protocol Commands
IP Addressing and Protocol Commands Introduction Overview This chapter provides an alphabetical reference of commands used to configure various IP features, including the following protocols: • Address Resolution Protocol (ARP) For more information, see the IP Feature Overview and Configuration Guide.
Page 625 IP A DDRESSING AND ROTOCOL OMMANDS • “show ip traffic” on page 656 • “tcpdump” on page 658 • “traceroute” on page 659 • “undebug ip packet interface” on page 660 C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 626: Arp-Aging-Timeout
IP A DDRESSING AND ROTOCOL OMMANDS AGING TIMEOUT arp-aging-timeout Overview This command sets a timeout period on dynamic ARP entries associated with a specific interface. If your device stops receiving traffic for the host specified in a dynamic ARP entry, it deletes the ARP entry from the ARP cache after this timeout is reached.
Page 627: Arp-Mac-Disparity
IP A DDRESSING AND ROTOCOL OMMANDS DISPARITY arp-mac-disparity Overview Use this command to enable the switch to support services like Microsoft Network Load Balancing (MS-NLB). Such services use ARP with disparate MAC addresses to ensure that packets destined for a server cluster virtual address are sent to all servers in the cluster. Disparate MAC addresses mean that the MAC address in the “sender hardware address”...
Page 628 IP A DDRESSING AND ROTOCOL OMMANDS DISPARITY For example, to flood only port1.0.1 to port1.0.3, use the commands: awplus# configure terminal awplus(config)# interface vlan2 awplus(config-if)# arp 10.10.1.100 010e.11ff.2222 port1.0.1-port1.0.3 Usage, multicast Multicast-IGMP mode is enabled by using the command arp-mac-disparity igmp mode multicast-igmp.
Page 629 IP A DDRESSING AND ROTOCOL OMMANDS DISPARITY To disable support for MS-NLB in unicast mode on interface vlan2, use the following commands: awplus# configure terminal awplus(config)# interface vlan2 awplus(config-if)# no arp-mac-disparity unicast Related arp (IP address MAC) Commands clear arp-cache show arp C613-50172-01 Rev B Command Reference for x230 Series...
Page 630: Arp (Ip Address Mac)
IP A DDRESSING AND ROTOCOL OMMANDS MAC) ADDRESS arp (IP address MAC) Overview This command adds a static ARP entry to the ARP cache. This is typically used to add entries for hosts that do not support ARP or to speed up the address resolution function for a host.
Page 631: Arp Log
IP A DDRESSING AND ROTOCOL OMMANDS ARP LOG arp log Overview This command enables the logging of dynamic and static ARP entries in the ARP cache. The ARP cache contains mappings of device ports, VLAN IDs, and IP addresses to physical MAC addresses for hosts. This command can display the MAC addresses in the ARP log either using the notation HHHH.HHHH.HHHH, or using the IEEE standard hexadecimal notation (HH-HH-HH-HH-HH-HH).
Page 632 IP A DDRESSING AND ROTOCOL OMMANDS ARP LOG To enable ARP logging and specify that the MAC address in the log message is displayed in the standard IEEE format hexadecimal notation (HH-HH-HH-HH-HH-HH), use the following commands: awplus# configure terminal awplus(config)# arp log mac-address-format ieee To leave ARP logging enabled, but stop using HH-HH-HH-HH-HH-HH format and use HHHH.HHHH.HHHH format instead, use the following commands:...
Page 633 IP A DDRESSING AND ROTOCOL OMMANDS ARP LOG The following table lists the parameters in output of the show log | include ARP_LOG command. The ARP log message format is: <date> <time> <severity> <hostname> <program-name>  ARP_LOG <port-number> <vid> <operation> <MAC> <IP> Table 19-1: Parameters in the output from show log | include ARP_LOG Parameter Description...
Page 634: Arp Opportunistic-Nd
IP A DDRESSING AND ROTOCOL OMMANDS ARP OPPORTUNISTIC arp opportunistic-nd Overview Use this command to enable opportunistic neighbor discovery for the global ARP cache. This command changes the behavior for unsolicited ARP packet forwarding on the device. Use the no variant of this command to disable opportunistic neighbor discovery for the global ARP cache.
Page 635: Arp-Reply-Bc-Dmac
IP A DDRESSING AND ROTOCOL OMMANDS REPLY DMAC arp-reply-bc-dmac Overview Use this command to allow processing of ARP replies that arrive with a broadcast destination MAC (ffff.ffff.ffff). This makes neighbors reachable if they send ARP responses that contain a broadcast destination MAC. Use the no variant of this command to turn off processing of ARP replies that arrive with a broadcast destination MAC.
Page 636: Clear Arp-Cache
IP A DDRESSING AND ROTOCOL OMMANDS CLEAR ARP CACHE clear arp-cache Overview This command deletes dynamic ARP entries from the ARP cache. You can optionally specify the IPv4 address of an ARP entry to be cleared from the ARP cache. clear arp-cache [<ip-address>] Syntax Parameter...
Page 637: Debug Ip Packet Interface
IP A DDRESSING AND ROTOCOL OMMANDS DEBUG IP PACKET INTERFACE debug ip packet interface Overview The debug ip packet interface command enables IP packet debug and is controlled by the terminal monitor command. If the optional icmp keyword is specified then ICMP packets are shown in the output.
Page 638 IP A DDRESSING AND ROTOCOL OMMANDS DEBUG IP PACKET INTERFACE To turn on ARP packet debugging on vlan1, use the command: Examples awplus# debug ip packet interface vlan1 arp To turn on all packet debugging on all interfaces on the device, use the command: awplus# debug ip packet interface all To turn on TCP packet debugging on vlan1 and IP address 192.168.2.4, use...
Page 639: Ip Address (Ip Addressing And Protocol)
IP A DDRESSING AND ROTOCOL OMMANDS (IP A IP ADDRESS DDRESSING AND ROTOCOL ip address (IP Addressing and Protocol) Overview This command sets a static IP address on an interface. The no variant of this command removes the IP address from the interface. You cannot remove the primary address when a secondary address is present.
Page 640 IP A DDRESSING AND ROTOCOL OMMANDS (IP A IP ADDRESS DDRESSING AND ROTOCOL To add the IP address 10.10.11.50/24 to the local loopback interface lo, use the following commands: awplus# configure terminal awplus(config)# interface lo awplus(config-if)# ip address 10.10.11.50/24 Related interface (to configure) Commands show ip interface...
Page 641: Ip Gratuitous-Arp-Link
IP A DDRESSING AND ROTOCOL OMMANDS IP GRATUITOUS LINK ip gratuitous-arp-link Overview This command sets the Gratuitous ARP time limit for all switchports. The time limit restricts the sending of Gratuitous ARP packets to one Gratuitous ARP packet within the time in seconds. : This command specifies time between sequences of Gratuitous ARP packets, NOTE and time between individual Gratuitous ARP packets occurring in a sequence, to allow...
Page 642 IP A DDRESSING AND ROTOCOL OMMANDS IP GRATUITOUS LINK To restrict the sending of Gratuitous ARP packets to one every 20 seconds, use the commands: awplus# configure terminal awplus(config)# ip gratuitous-arp-link 20 Validation show running-config Commands C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™...
Page 643: Ip Redirects
IP A DDRESSING AND ROTOCOL OMMANDS IP REDIRECTS ip redirects Overview This command enables the device to send ICMP redirects on one or more interfaces. Use the no variant of this command to stop the device from sending ICMP redirects on one or more interfaces.
Page 644: Ip Tcp Synack-Retries
IP A DDRESSING AND ROTOCOL OMMANDS IP TCP SYNACK RETRIES ip tcp synack-retries Overview Use this command to specify how many times the switch will retry sending a SYN ACK for a TCP connection for which it has received a SYN but not an ACK. Such connections are called half-open TCP connections.
Page 645: Ip Unreachables
IP A DDRESSING AND ROTOCOL OMMANDS IP UNREACHABLES ip unreachables Overview Use this command to enable ICMP (Internet Control Message Protocol) type 3, destination unreachable, messages. Use the no variant of this command to disable destination unreachable messages. This prevents an attacker from using these messages to discover the topology of a network.
Page 646 IP A DDRESSING AND ROTOCOL OMMANDS IP UNREACHABLES Table 19-2: ICMP type 3 reason codes and description (cont.) Code Description [RFC] Host Precedence Violation [RFC1812] Precedence cutoff in effect [RFC1812] Example To disable destination unreachable messages, use the commands awplus# configure terminal awplus(config)# no ip unreachables...
Page 647: Ping
IP A DDRESSING AND ROTOCOL OMMANDS PING ping Overview This command sends a query to another IPv4 host (send Echo Request messages). ping [ip] <host> [broadcast] [df-bit {yes|no}] [interval Syntax <0-128>] [pattern <hex-data-pattern>] [repeat {<1-2147483647>|continuous}] [size <36-18024>] [source <ip-addr>] [timeout <1-65535>] [tos <0-255>] Parameter Description <host>...
Page 648: Show Arp
IP A DDRESSING AND ROTOCOL OMMANDS SHOW ARP show arp Overview Use this command to display entries in the ARP routing and forwarding table—the ARP cache contains mappings of IP addresses to physical addresses for hosts. To have a dynamic entry in the ARP cache, a host must have used the ARP protocol to access another host.
Page 649: Mac Address
IP A DDRESSING AND ROTOCOL OMMANDS SHOW ARP Table 20: Parameters in the output of the show arp command Parameter Meaning IP Address IP address of the network device this entry maps to. MAC Address Hardware address of the network device. Interface Interface over which the network device is accessed.
Page 650: Show Debugging Ip Packet
IP A DDRESSING AND ROTOCOL OMMANDS SHOW DEBUGGING IP PACKET show debugging ip packet Overview Use this command to show the IP interface debugging status. IP interface debugging is set using the debug ip packet interface command. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 651 IP A DDRESSING AND ROTOCOL OMMANDS SHOW DEBUGGING IP PACKET Related debug ip packet interface Commands terminal monitor C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 652: Show Ip Interface
IP A DDRESSING AND ROTOCOL OMMANDS SHOW IP INTERFACE show ip interface Overview Use this command to display information about interfaces and the IP addresses assigned to them. To display information about a specific interface, specify the interface name with the command. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 653: Show Ip Sockets
IP A DDRESSING AND ROTOCOL OMMANDS SHOW IP SOCKETS show ip sockets Overview Use this command to display information about the IP or TCP sockets that are present on the device. It includes TCP and UDP listen sockets, and displays the associated IP address and port.
Page 654 IP A DDRESSING AND ROTOCOL OMMANDS SHOW IP SOCKETS Table 19-1: Parameters in the output from show ip sockets Parameter Description Not showing This field refers to established sessions between processes internal <number> to the device, that are used in its operation and management. local These sessions are not displayed as they are not useful to the user.
Page 655 IP A DDRESSING AND ROTOCOL OMMANDS SHOW IP SOCKETS Table 19-1: Parameters in the output from show ip sockets (cont.) Parameter Description Remote For TCP and UDP listening sockets this shows the source IP address Address (either IPv4 or IPv6) and source TCP or UDP port number for which the socket will accept packets.
Page 656: Show Ip Traffic
IP A DDRESSING AND ROTOCOL OMMANDS SHOW IP TRAFFIC show ip traffic Overview Use this command to display statistics regarding IP traffic sent and received by all interfaces on the device, showing totals for IP and IPv6 and then broken down into sub-categories such as TCP, UDP, ICMP and their IPv6 equivalents when appropriate.
Page 657 IP A DDRESSING AND ROTOCOL OMMANDS SHOW IP TRAFFIC 155 delayed acks sent 21187 headers predicted 736 pure ACKs 80497 pure ACKs predicted UDP: 139468 datagrams received 139468 datagrams sent UDPLite: C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 658: Tcpdump
IP A DDRESSING AND ROTOCOL OMMANDS TCPDUMP tcpdump Overview Use this command to start a tcpdump, which gives the same output as the Unix-like tcpdump command to display TCP/IP traffic. Press <ctrl> + c to stop a running tcpdump. tcpdump <line> Syntax Parameter Description...
Page 659: Traceroute
IP A DDRESSING AND ROTOCOL OMMANDS TRACEROUTE traceroute Overview Use this command to trace the route to the specified IPv4 host. traceroute {<ip-addr>|<hostname>} Syntax Parameter Description <ip-addr> The destination IPv4 address. The IPv4 address uses the format A.B.C.D. <hostname> The destination hostname. Mode User Exec and Privileged Exec awplus#...
Page 660: Undebug Ip Packet Interface
IP A DDRESSING AND ROTOCOL OMMANDS UNDEBUG IP PACKET INTERFACE undebug ip packet interface Overview This command applies the functionality of the no debug ip packet interface command. C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 661: Chapter 20: Domain Name Service (Dns) Commands
Domain Name Service (DNS) Commands Introduction Overview This chapter provides an alphabetical reference of commands used to configure the Domain Name Service (DNS) client. For more information about DNS for Switches, see the Domain Name System (DNS) for AlliedWare Plus Switches Feature Overview and Configuration Guide Command List •...
Page 662: Ip Domain-List
(DNS) C OMAIN ERVICE OMMANDS IP DOMAIN LIST ip domain-list Overview This command adds a domain to the DNS list. Domains are appended to incomplete host names in DNS requests. Each domain in this list is tried in turn in DNS lookups.
Page 663: Ip Domain-Lookup
(DNS) C OMAIN ERVICE OMMANDS IP DOMAIN LOOKUP ip domain-lookup Overview This command enables the DNS client on your device. This allows you to use domain names instead of IP addresses in commands. The DNS client resolves the domain name into an IP address by sending a DNS inquiry to a DNS server, specified with the ip name-server command.
Page 664: Ip Domain-Name
(DNS) C OMAIN ERVICE OMMANDS IP DOMAIN NAME ip domain-name Overview This command sets a default domain for the DNS. The DNS client appends this domain to incomplete host-names in DNS requests. The no variant of this command removes the domain-name previously set by this command.
Page 665: Ip Name-Server
(DNS) C OMAIN ERVICE OMMANDS IP NAME SERVER ip name-server Overview This command adds IPv4 or IPv6 DNS server addresses. The DNS client on your device sends DNS queries to IP addresses in this list when trying to resolve a host name.
Page 666: Show Hosts
(DNS) C OMAIN ERVICE OMMANDS SHOW HOSTS show hosts Overview This command shows the default domain, domain list, and name servers configured on your device. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 667: Show Ip Domain-List
(DNS) C OMAIN ERVICE OMMANDS SHOW IP DOMAIN LIST show ip domain-list Overview This command shows the domains configured in the domain list. The DNS client uses the domains in this list to append incomplete hostnames when sending a DNS inquiry to a DNS server. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 668: Show Ip Domain-Name
(DNS) C OMAIN ERVICE OMMANDS SHOW IP DOMAIN NAME show ip domain-name Overview This command shows the default domain configured on your device. When there are no entries in the DNS list, the DNS client appends this domain to incomplete hostnames when sending a DNS inquiry to a DNS server.
Page 669: Show Ip Name-Server
(DNS) C OMAIN ERVICE OMMANDS SHOW IP NAME SERVER show ip name-server Overview This command displays a list of IPv4 and IPv6 DNS server addresses that your device will send DNS requests to. This is a static list configured using the name-server command.
Page 670: Chapter 21: Ipv6 Commands
IPv6 Commands Introduction Overview This chapter provides an alphabetical reference of commands used to configure IPv6. For more information, see the IPv6 Feature Overview and Configuration Guide. Command List • “clear ipv6 neighbors” on page 672 • “ipv6 address” on page 673 •...
Page 671 OMMANDS • “show ipv6 neighbors” on page 695 • “show ipv6 route” on page 696 • “show ipv6 route summary” on page 698 • “traceroute ipv6” on page 699 C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 672: Clear Ipv6 Neighbors
OMMANDS CLEAR IPV NEIGHBORS clear ipv6 neighbors Overview Use this command to clear all dynamic IPv6 neighbor entries. clear ipv6 neighbors Syntax Mode Privileged Exec awplus# clear ipv6 neighbors Example C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 673: Ipv6 Address
OMMANDS ADDRESS ipv6 address Overview Use this command to set the IPv6 address of an interface. The command also enables IPv6 on the interface, which creates an EUI-64 link-local address as well as enabling RA processing and SLAAC. To stop the device from processing prefix information (routes and addresses from the received Router Advertisements) use the command no ipv6 nd accept-ra-pinfo.
Page 674 OMMANDS ADDRESS Related ipv6 address autoconfig Commands ipv6 address dhcp ipv6 enable ipv6 eui64-linklocal show running-config show ipv6 interface brief show ipv6 route C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 675: Ipv6 Address Autoconfig
OMMANDS ADDRESS AUTOCONFIG ipv6 address autoconfig Overview Use this command to enable IPv6 stateless address autoconfiguration (SLAAC) for an interface. This configures an IPv6 address on an interface derived from the MAC address on the interface. Use the no variant of this command to disable IPv6 SLAAC on an interface. Note that if no global addresses are left after removing all IPv6 autoconfigured addresses then IPv6 is disabled.
Page 676 OMMANDS ADDRESS AUTOCONFIG To disable SLAAC on the VLAN interface vlan2, use the following commands: awplus# configure terminal awplus(config)# interface vlan2 awplus(config-if)# no ipv6 address autoconfig Related ipv6 address Commands ipv6 enable show ipv6 interface brief show ipv6 route show running-config C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™...
Page 677: Ipv6 Enable
OMMANDS ENABLE ipv6 enable Overview Use this command to enable automatic configuration of a link-local IPv6 address on an interface using Stateless Automatic Address Configuration (SLAAC). By default, the EUI-64 method is used to generate the link-local address. Use the no variant of this command to disable IPv6 on an interface without a global address.
Page 678 OMMANDS ENABLE Related ipv6 address Commands ipv6 address autoconfig ipv6 address dhcp show ipv6 interface brief show ipv6 route show running-config C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 679: Ipv6 Eui64-Linklocal
OMMANDS LINKLOCAL ipv6 eui64-linklocal Overview When IPv6 is enabled on an interface, an EUI link-local address is generated and installed on the interface. In other words, ipv6 eui64-linklocal is enabled by default on any IPv6 enabled interface. Use the no variant of this command to disallow the automatic generation of the EUI-64 link-local address on an IPv6 enabled interface.
Page 680: Ipv6 Forwarding
OMMANDS FORWARDING ipv6 forwarding Overview Use this command to turn on IPv6 unicast routing for IPv6 packet forwarding. Execute this command globally on your device prior to issuing ipv6 enable individual interfaces. Use this no variant of this command to turn off IPv6 unicast routing. Note IPv6 unicast routing is disabled by default.
Page 681: Ipv6 Multicast Forward-Slow-Path-Packet
OMMANDS MULTICAST FORWARD SLOW PATH PACKET ipv6 multicast forward-slow-path-packet Overview Use this command to enable multicast packets to be forwarded to the CPU. Enabling this command will ensure that the layer L3 MTU is set correctly for each IP multicast group and will apply the value of the smallest MTU among the outgoing interfaces for the multicast group.
Page 682: Ipv6 Nd Accept-Ra-Pinfo
OMMANDS ND ACCEPT PINFO ipv6 nd accept-ra-pinfo Overview Use this command to allow the processing of the prefix information included in a received RA (Router Advertisement) on an IPv6 enabled interface. Use the no variant of this command to disable an IPv6 interface from using the prefix information within a received RA.
Page 683: Ipv6 Nd Minimum-Ra-Interval
OMMANDS ND MINIMUM INTERVAL ipv6 nd minimum-ra-interval Overview Use this command in Interface Configuration mode to set a minimum Router Advertisement (RA) interval for a VLAN interface. Use the no variant of this command in Interface Configuration mode to remove the minimum RA interval for a VLAN interface.
Page 684: Ipv6 Nd Ra-Interval
OMMANDS ND RA INTERVAL ipv6 nd ra-interval Overview Use this command to specify the interval between IPv6 Router Advertisements (RA) transmissions. Use no parameter with this command to reset the value to the default value (600 seconds). Syntax ipv6 nd ra-interval <seconds> no ipv6 nd ra-interval Parameter Description...
Page 685: Ipv6 Nd Raguard
OMMANDS ND RAGUARD ipv6 nd raguard Overview Use this command to apply the Router Advertisements (RA) Guard feature from the Interface Configuration mode for a device port. This blocks all RA messages received on a device port. For more information about RA Guard, see the IPv6 Feature Overview and Configuration Guide.
Page 686 OMMANDS ND RAGUARD Output Example output from using show running-config interface port1.0.2 to verify RA Guard: ! interface port1.0.2 switchport mode access  ipv6 nd raguard ! Related show running-config interface Commands C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™...
Page 687: Ipv6 Nd Suppress-Ra
OMMANDS ND SUPPRESS ipv6 nd suppress-ra Overview Use this command to inhibit IPv6 Router Advertisement (RA) transmission for the current interface. Router advertisements are used when applying IPv6 stateless auto-configuration. Use no parameter with this command to enable Router Advertisement transmission.
Page 688: Ipv6 Neighbor
OMMANDS NEIGHBOR ipv6 neighbor Overview Use this command to add a static IPv6 neighbor entry. Use the no variant of this command to remove a specific IPv6 neighbor entry. Syntax ipv6 neighbor <ipv6-address> <vlan-name> <mac-address> <port-list> no ipv6 neighbor <ipv6-address> <vlan-name> <port-list> Parameter Description <ipv6-address>...
Page 689: Ipv6 Opportunistic-Nd
OMMANDS OPPORTUNISTIC ipv6 opportunistic-nd Overview Use this command to enable opportunistic neighbor discovery for the global IPv6 ND cache. Opportunistic neighbor discovery changes the behavior for unsolicited ICMPv6 ND packet forwarding on the device. Use the no variant of this command to disable opportunistic neighbor discovery for the global IPv6 ND cache.
Page 690: Ipv6 Route
OMMANDS ROUTE ipv6 route Overview This command adds a static IPv6 route to the Routing Information Base (RIB). If this route is the best route for the destination, then your device adds it to the Forwarding Information Base (FIB). Your device uses the FIB to advertise routes to neighbors and forward packets.
Page 691: Ipv6 Unreachables
OMMANDS UNREACHABLES ipv6 unreachables Overview Use this command to enable ICMPv6 (Internet Control Message Protocol version 6) type 1, destination unreachable, messages. Use the no variant of this command to disable destination unreachable messages. This prevents an attacker from using these messages to discover the topology of a network.
Page 692: Ping Ipv6
OMMANDS PING IPV ping ipv6 Overview This command sends a query to another IPv6 host (send Echo Request messages). ping ipv6 {<host>|<ipv6-address>} [repeat Syntax {<1-2147483647>|continuous}] [size <10-1452>] [interface <interface-list>] [timeout <1-65535>] Parameter Description <ipv6-addr> The destination IPv6 address. The IPv6 address uses the format X:X::X:X.
Page 693: Show Ipv6 Forwarding
OMMANDS SHOW IPV FORWARDING show ipv6 forwarding Overview Use this command to display IPv6 forwarding status. show ipv6 forwarding Syntax Mode User Exec and Privileged Exec awplus# show ipv6 forwarding Example Output Figure 21-1: Example output from the show ipv6 forwarding command ...
Page 694: Show Ipv6 Interface Brief
OMMANDS SHOW IPV INTERFACE BRIEF show ipv6 interface brief Overview Use this command to display brief information about interfaces and the IPv6 address assigned to them. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 695: Show Ipv6 Neighbors
OMMANDS SHOW IPV NEIGHBORS show ipv6 neighbors Overview Use this command to display all IPv6 neighbors. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide. Syntax show ipv6 neighbors Mode User Exec and Privileged Exec C613-50172-01 Rev B...
Page 696: Show Ipv6 Route
OMMANDS SHOW IPV ROUTE show ipv6 route Overview Use this command to display the IPv6 routing table for a protocol or from a particular table. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 697 OMMANDS SHOW IPV ROUTE Example 2 To display all database entries for an IP route, use the following command: awplus# show ipv6 route database Output Figure 21-4: Example output of the show ipv6 route database command  IPv6 Routing Table Codes: C - connected, S - static, R - RIP, O - OSPF, B - BGP...
Page 698: Show Ipv6 Route Summary
OMMANDS SHOW IPV ROUTE SUMMARY show ipv6 route summary Overview Use this command to display the summary of the current NSM RIB entries. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 699: Traceroute Ipv6
OMMANDS TRACEROUTE IPV traceroute ipv6 Overview Use this command to trace the route to the specified IPv6 host. traceroute ipv6 {<ipv6-addr>|<hostname>} Syntax Parameter Description <ipv6-addr> The destination IPv6 address. The IPv6 address uses the format X:X::X:X. <hostname> The destination hostname. Mode User Exec and Privileged Exec Example...
Page 700: Chapter 22: Routing Commands
Routing Commands Introduction Overview This chapter provides an alphabetical reference of routing commands that are common across the routing IP protocols. For more information, see the Route Selection Feature Overview and Configuration Guide. Command List • “ip route” on page 701 •...
Page 701: Ip Route
OUTING OMMANDS IP ROUTE ip route Overview This command adds a static route to the Routing Information Base (RIB). If this route is the best route for the destination, then your device adds it to the Forwarding Information Base (FIB). Your device uses the FIB to advertise routes to neighbors and forward packets.
Page 702 OUTING OMMANDS IP ROUTE To remove the destination 192.168.3.0 with the mask 255.255.255.0 as a static route available through the device at “10.10.0.2” with the default administrative distance, use the commands: awplus# configure terminal awplus(config)# no ip route 192.168.3.0 255.255.255.0 10.10.0.2 To add the destination 192.168.3.0 with the mask 255.255.255.0 as a static route available through the device at “10.10.0.2”...
Page 703 OUTING OMMANDS ROUTE ipv6 route Overview This command adds a static IPv6 route to the Routing Information Base (RIB). If this route is the best route for the destination, then your device adds it to the Forwarding Information Base (FIB). Your device uses the FIB to advertise routes to neighbors and forward packets.
Page 704 OUTING OMMANDS ROUTES max-fib-routes Overview This command enables you to control the maximum number of FIB routes configured. It operates by providing parameters that enable you to configure preset maximums and warning message thresholds. : For static routes use the max-static-routes command.
Page 705 OUTING OMMANDS STATIC ROUTES max-static-routes Overview Use this command to set the maximum number of static routes, excluding FIB (Forwarding Information Base) routes. : For FIB routes use the max-fib-routes command. NOTE Use the no variant of this command to set the maximum number of static routes to the default of 1000 static routes.
Page 706: Show Ip Route
OUTING OMMANDS SHOW IP ROUTE show ip route Overview Use this command to display routing entries in the FIB (Forwarding Information Base). The FIB contains the best routes to a destination, and your device uses these routes when forwarding traffic. You can display a subset of the entries in the FIB based on protocol.
Page 707 OUTING OMMANDS SHOW IP ROUTE Figure 22-1: Example output from the show ip route command Codes: C - connected, S - static, R - RIP, B - BGP O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2...
Page 708: Show Ip Route Database
OUTING OMMANDS SHOW IP ROUTE DATABASE show ip route database Overview This command displays the routing entries in the RIB (Routing Information Base). When multiple entries are available for the same prefix, RIB uses the routes’ administrative distances to choose the best route. All best routes are entered into the FIB (Forwarding Information Base).
Page 709: Show Ip Route Summary
OUTING OMMANDS SHOW IP ROUTE SUMMARY show ip route summary Overview This command displays a summary of the current RIB (Routing Information Base) entries. To modify the lines displayed, use the | (output modifier token); to save the output to a file, use the > output redirection token. Syntax show ip route summary Mode...
Page 710 OUTING OMMANDS SHOW IPV ROUTE show ipv6 route Overview Use this command to display the IPv6 routing table for a protocol or from a particular table. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 711 OUTING OMMANDS SHOW IPV ROUTE Example 2 To display all database entries for an IP route, use the following command: awplus# show ipv6 route database Output Figure 22-5: Example output of the show ipv6 route database command  IPv6 Routing Table Codes: C - connected, S - static, R - RIP, O - OSPF, B - BGP...
Page 712 OUTING OMMANDS SHOW IPV ROUTE SUMMARY show ipv6 route summary Overview Use this command to display the summary of the current NSM RIB entries. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 713: Chapter 23: Rip Commands
RIP Commands Introduction Overview This chapter provides an alphabetical reference of commands used to configure RIP. For information about configuring RIP, see the RIP Feature Overview and Configuration Guide. Command List • “accept-lifetime” on page 715 • “alliedware-behavior” on page 717 •...
Page 714 RIP C OMMANDS • “ip rip split-horizon” on page 741 • “key” on page 742 • “key chain” on page 743 • “key-string” on page 744 • “maximum-prefix” on page 745 • “neighbor (RIP)” on page 746 • “network (RIP)” on page 747 •...
Page 715: Accept-Lifetime
RIP C OMMANDS ACCEPT LIFETIME accept-lifetime Overview Use this command to specify the time period during which the authentication key on a key chain is received as valid. Use the no variant of this command to remove a specified time period for an authentication key on a key chain as set previously with the accept-lifetime command.
Page 716 RIP C OMMANDS ACCEPT LIFETIME awplus# configure terminal awplus(config)# key chain mychain awplus(config-keychain)# key 1 awplus(config-keychain-key)# accept-lifetime 03:03:01 3 Sep 2016 04:04:02 6 Oct 2016 Related Commands key-string key chain send-lifetime C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 717: Alliedware-Behavior
RIP C OMMANDS ALLIEDWARE BEHAVIOR alliedware-behavior Overview This command configures your device to exhibit AlliedWare behavior when sending RIPv1 response/update messages. Configuring for this behavior may be necessary if you are replacing an AlliedWare device with an AlliedWare Plus device and wish to ensure consistent RIPv1 behavior.
Page 718 RIP C OMMANDS ALLIEDWARE BEHAVIOR To return your device to AlliedWare Plus-like behavior when sending and receiving RIPv1 update messages, enter the commands: awplus# configure terminal awplus(config)# router rip awplus(config-router)# no alliedware-behavior rip1-send awplus(config-router)# no alliedware-behavior rip1-recv Validation show ip protocols rip Commands show running-config Related...
Page 719: Cisco-Metric-Behavior (Rip)
RIP C OMMANDS (RIP) CISCO METRIC BEHAVIOR cisco-metric-behavior (RIP) Overview Use this command to enable or disable the RIP routing metric update to conform to Cisco’s implementation. This command is provided to allow inter-operation with older Cisco devices that do not conform to the RFC standard for RIP route metrics.
Page 720: Clear Ip Rip Route
RIP C OMMANDS CLEAR IP RIP ROUTE clear ip rip route Overview Use this command to clear specific data from the RIP routing table. Parameter Description <ip-dest-network/ Removes entries which exactly match this destination prefix-length> address from RIP routing table. Enter the IP address and prefix length of the destination network.
Page 721: Debug Rip
RIP C OMMANDS DEBUG RIP debug rip Overview Use this command to specify the options for the displayed debugging information for RIP events and RIP packets. Use the no variant of this command to disable the specified debug option. Syntax debug rip {events|nsm|<packet>|all} no debug rip {events|nsm|<packet>|all} Parameter...
Page 722: Default-Information Originate (Rip)
RIP C OMMANDS (RIP) DEFAULT INFORMATION ORIGINATE default-information originate (RIP) Overview Use this command to generate a default route into the Routing Information Protocol (RIP). Use the no variant of this command to disable this feature. Syntax default-information originate no default-information originate Default Disabled Mode...
Page 723: Default-Metric (Rip)
RIP C OMMANDS (RIP) DEFAULT METRIC default-metric (RIP) Overview Use this command to specify the metrics to be assigned to redistributed RIP routes. Use the no variant of this command to reset the RIP metric back to its default (1). Syntax default-metric <metric>...
Page 724: Distance (Rip)
RIP C OMMANDS (RIP) DISTANCE distance (RIP) Overview This command sets the administrative distance for RIP routes. Your device uses this value to select between two or more routes to the same destination obtained from two different routing protocols. The route with the smallest administrative distance value is added to the Forwarding Information Base (FIB).
Page 725: Distribute-List (Rip)
RIP C OMMANDS (RIP) DISTRIBUTE LIST distribute-list (RIP) Overview Use this command to filter incoming or outgoing route updates using the access-list or the prefix-list. Use the no variant of this command to disable this feature. Syntax distribute-list {<access-list> | prefix <prefix-list>} {in|out} [<interface>] no distribute-list {<access-list>...
Page 726: Fullupdate (Rip)
RIP C OMMANDS (RIP) FULLUPDATE fullupdate (RIP) Overview Use this command to specify which routes RIP should advertise when performing a triggered update. By default, when a triggered update is sent, RIP will only advertise those routes that have changed since the last update. When fullupdate is configured, the device advertises the full RIP route table in outgoing triggered updates, including routes that have not changed.
Page 727: Ip Rip Authentication Key-Chain
RIP C OMMANDS IP RIP AUTHENTICATION KEY CHAIN ip rip authentication key-chain Overview Use this command to enable RIPv2 authentication on an interface and specify the name of the key chain to be used. Use the no variant of this command to disable this function. Syntax ip rip authentication key-chain <key-chain-name>...
Page 728 RIP C OMMANDS IP RIP AUTHENTICATION KEY CHAIN Specify the mode of authentication for the given interface (text or MD5), using the following command: awplus(config-if)# ip rip authentication mode {md5|text} Example In the following example of a configuration for multiple keys authentication, a password “toyota”...
Page 729: Ip Rip Authentication Mode
RIP C OMMANDS IP RIP AUTHENTICATION MODE ip rip authentication mode Overview Use this command to specify the type of authentication mode used for RIP v2 packets. Use the no variant of this command to restore clear text authentication. Syntax ip rip authentication mode {md5|text} no ip rip authentication mode Parameter...
Page 730 RIP C OMMANDS IP RIP AUTHENTICATION MODE Usage: multiple For multiple keys authentication, use the following steps to configure a route to enable RIPv2 authentication using multiple keys at different times: Define a key chain with a key chain name, using the following commands: awplus# configure terminal awplus(config)#...
Page 731 RIP C OMMANDS IP RIP AUTHENTICATION MODE Example 3 The following example specifies “mykey” as the authentication string with MD5 authentication, for the VLAN interface vlan2: awplus# configure terminal awplus(config)# interface vlan2 awplus(config-if)# ip rip authentication string mykey awplus(config-if)# ip rip authentication mode md5 Related ip rip authentication string Commands...
Page 732: Ip Rip Authentication String
RIP C OMMANDS IP RIP AUTHENTICATION STRING ip rip authentication string Overview Use this command to specify the authentication string or password used by a key. Use the no variant of this command to remove the authentication string. Syntax ip rip authentication string <auth-string> no ip rip authentication string Parameter Description...
Page 733 RIP C OMMANDS IP RIP AUTHENTICATION STRING In the following example, the VLAN interface vlan2 is configured to have an Example authentication string as guest. Any received RIP packet in that interface should have the same string as password. awplus# configure terminal awplus(config)# interface vlan2...
Page 734: Ip Rip Receive-Packet
RIP C OMMANDS IP RIP RECEIVE PACKET ip rip receive-packet Overview Use this command to configure the interface to enable the reception of RIP packets. Use the no variant of this command to disable this feature. Syntax ip rip receive-packet no ip rip receive-packet Default Receive-packet is enabled...
Page 735: Ip Rip Receive Version
RIP C OMMANDS IP RIP RECEIVE VERSION ip rip receive version Overview Use this command to specify the version of RIP packets accepted on an interface and override the setting of the version command. Use the no variant of this command to use the setting specified by the version (RIP) command.
Page 736: Ip Rip Send-Packet
RIP C OMMANDS IP RIP SEND PACKET ip rip send-packet Overview Use this command to enable sending RIP packets through the current interface. Use the no variant of this command to disable this feature. Syntax ip rip send-packet no ip rip send-packet Default Send packet is enabled Mode...
Page 737: Ip Rip Send Version
RIP C OMMANDS IP RIP SEND VERSION ip rip send version Overview Use this command in Interface Configuration mode to specify the version of RIP packets sent on an interface and override the setting of the version (RIP) command. This mechanism causes RIP version 2 interfaces to send multicast packets instead of broadcasting packets.
Page 738 RIP C OMMANDS IP RIP SEND VERSION In the following example, the VLAN interface vlan4 is configured to send both RIP version 2 and 1 packets. awplus# configure terminal awplus(config)# interface vlan4 awplus(config-if)# ip rip send version 2 1 In the following example, the VLAN interface vlan4 is configured to send RIP version 1 packets only.
Page 739: Ip Rip Send Version 1-Compatible
RIP C OMMANDS IP RIP SEND VERSION COMPATIBLE ip rip send version 1-compatible Overview Use this command in Interface Configuration mode to send RIP version 1 compatible packets from a RIP version 2 interfaces to other RIP Interfaces. This mechanism causes RIP version 2 interfaces to send broadcast packets instead of multicasting packets, and is used in environments where multicast is not enabled or where hosts do not listen to multicast.
Page 740 RIP C OMMANDS IP RIP SEND VERSION COMPATIBLE Related ip rip send version Commands version (RIP) C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 741: Ip Rip Split-Horizon
RIP C OMMANDS IP RIP SPLIT HORIZON ip rip split-horizon Overview Use this command to turn on the split-horizon mechanism on the interface. Use the no variant of this command to disable this mechanism. Syntax ip rip split-horizon [poisoned] no ip rip split-horizon Parameter Description poisoned...
Page 742 RIP C OMMANDS Overview Use this command to manage, add and delete authentication keys in a key-chain. Use the no variant of this command to delete the authentication key. Syntax key <keyid> no key <keyid> Parameter Description <keyid> <0-2147483647> Key identifier number. Mode Keychain Configuration Usage...
Page 743: Key Chain
RIP C OMMANDS KEY CHAIN key chain Overview Use this command to enter the key chain management mode and to configure a key chain with a key chain name. Use the no variant of this command to remove the key chain and all configured keys.
Page 744: Key-String
RIP C OMMANDS STRING key-string Overview Use this command to define the password to be used by a key. Use the no variant of this command to remove a password. Syntax key-string <key-password> no key-string Parameter Description <key-password> A string of characters to be used as a password by the key. Mode Keychain-key Configuration Usage...
Page 745: Maximum-Prefix
RIP C OMMANDS MAXIMUM PREFIX maximum-prefix Overview Use this command to configure the maximum number of RIP routes stored in the routing table. Use the no variant of this command to disable all limiting of the number of RIP routes stored in the routing table. Syntax maximum-prefix <maxprefix>...
Page 746: Neighbor (Rip)
RIP C OMMANDS (RIP) NEIGHBOR neighbor (RIP) Overview Use this command to specify a neighbor router. It is used for each router to which you wish to send unicast RIP updates. Use the no variant of this command to stop sending unicast updates to the specific router.
Page 747: Network (Rip)
RIP C OMMANDS (RIP) NETWORK network (RIP) Overview Use this command to activate the transmission of RIP routing information on the defined network. Use the no variant of this command to remove the specified network or VLAN as one that runs RIP. Syntax network {<network-address>[/<subnet-mask>]|<vlan-name>} no network {<network-address>[/<subnet-mask>]|<vlan-name>}...
Page 748: Offset-List (Rip)
RIP C OMMANDS (RIP) OFFSET LIST offset-list (RIP) Overview Use this command to add an offset to the in and out metrics of routes learned through RIP. Use the no variant of this command to remove the offset list. Syntax offset-list <access-list>...
Page 749: Passive-Interface (Rip)
RIP C OMMANDS (RIP) PASSIVE INTERFACE passive-interface (RIP) Overview Use this command to block RIP broadcasts on the interface. Use the no variant of this command to disable this function. Syntax passive-interface <interface> no passive-interface <interface> Parameter Description <interface> Specifies the interface name. Default Disabled Mode...
Page 750: Recv-Buffer-Size (Rip)
RIP C OMMANDS (RIP) RECV BUFFER SIZE recv-buffer-size (RIP) Overview Use this command to run-time configure the RIP UDP (User Datagram Protocol) receive-buffer size to improve UDP reliability by avoiding UDP receive buffer overrun. Use the no variant of this command to reset the configured RIP UDP receive-buffer size to the system default (196608 bits).
Page 751: Redistribute (Rip)
RIP C OMMANDS (RIP) REDISTRIBUTE redistribute (RIP) Overview Use this command to redistribute information from other routing protocols into RIP. Use the no variant of this command to disable the specified redistribution. The parameters metric and routemap may be used on this command, but have no effect.
Page 752: Restart Rip Graceful
RIP C OMMANDS RESTART RIP GRACEFUL restart rip graceful Overview Use this command to force the RIP process to restart, and optionally set the grace-period. restart rip graceful [grace-period <1-65535>] Syntax Mode Privileged Exec Default The default RIP grace-period is 60 seconds. Usage After this command is executed, the RIP process immediately shuts down.
Page 753: Rip Restart Grace-Period
RIP C OMMANDS RIP RESTART GRACE PERIOD rip restart grace-period Overview Use this command to change the grace period of RIP graceful restart. Use the no variant of this command to disable this function. Syntax rip restart grace-period <1-65535> no rip restart grace-period <1-65535> Mode Global Configuration Default...
Page 754: Route (Rip)
RIP C OMMANDS (RIP) ROUTE route (RIP) Overview Use this command to add a static RIP route. Use the no variant of this command to remove a static RIP route. Syntax route <ip-addr/prefix-length> no route <ip-addr/prefix-length> Parameter Description <ip-addr/prefix-length> The IPv4 address and prefix length. Default No static RIP route is added by default.
Page 755: Router Rip
RIP C OMMANDS ROUTER RIP router rip Overview Use this global command to enter Router Configuration mode to enable the RIP routing process. Use the no variant of this command to disable the RIP routing process. Syntax router rip no router rip Mode Global Configuration Example...
Page 756: Send-Lifetime
RIP C OMMANDS SEND LIFETIME send-lifetime Overview Use this command to specify the time period during which the authentication key on a key chain can be sent. send-lifetime <start-date> {<end-date>| Syntax duration <seconds>|infinite} no send-lifetime Parameter Description Specifies the start time and date in the format:  <start-date>...
Page 757 RIP C OMMANDS SEND LIFETIME Related Commands key-string key chain accept-lifetime C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 758: Show Debugging Rip
RIP C OMMANDS SHOW DEBUGGING RIP show debugging rip Overview Use this command to display the RIP debugging status for these debugging options: nsm debugging, RIP event debugging, RIP packet debugging and RIP nsm debugging. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 759: Show Ip Protocols Rip
RIP C OMMANDS SHOW IP PROTOCOLS RIP show ip protocols rip Overview Use this command to display RIP process parameters and statistics. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 760 RIP C OMMANDS SHOW IP RIP show ip rip Overview Use this command to show RIP routes. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide. Syntax show ip rip Mode User Exec and Privileged Exec awplus#...
Page 761: Show Ip Rip Database
RIP C OMMANDS SHOW IP RIP DATABASE show ip rip database Overview Use this command to display information about the RIP database. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 762: Show Ip Rip Interface
RIP C OMMANDS SHOW IP RIP INTERFACE show ip rip interface Overview Use this command to display information about the RIP interfaces. You can specify an interface name to display information about a specific interface. show ip rip interface [<interface>] Syntax Parameter Description...
Page 763: Timers (Rip)
RIP C OMMANDS (RIP) TIMERS timers (RIP) Overview Use this command to adjust routing network timers. Use the no variant of this command to restore the defaults. Syntax timers basic <update> <timeout> <garbage> no timers basic Parameter Description <update> <5-2147483647> Specifies the period at which RIP route update packets are transmitted.
Page 764: Undebug Rip
RIP C OMMANDS UNDEBUG RIP undebug rip Overview Use this command to disable the options set for debugging information of RIP events, packets and communication between RIP and NSM. This command has the same effect as the no debug rip command. Syntax undebug rip {all|events|nsm|<packet>} Parameter...
Page 765: Version (Rip)
RIP C OMMANDS (RIP) VERSION version (RIP) Overview Use this command to specify a RIP version used globally by the router. Use the no variant of this command to restore the default version. Syntax version {1|2} no version Parameter Description Specifies the version of RIP processing.
Page 766: Part 4: Multicast Applications
Part 4: Multicast Applications C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 767 IGMP and IGMP Snooping Commands Introduction Overview Devices running AlliedWare Plus use IGMP (Internet Group Management Protocol) and MLD (Multicast Listener Discovery) to track which multicast groups their clients belong to. This enables them to send the correct multimedia streams to the correct destinations.
Page 768 IGMP IGMP S NOOPING OMMANDS • “ip igmp ra-option” on page 789 • “ip igmp robustness-variable” on page 790 • “ip igmp snooping” on page 791 • “ip igmp snooping fast-leave” on page 792 • “ip igmp snooping mrouter” on page 793 •...
Page 769: Clear Ip Igmp
IGMP IGMP S NOOPING OMMANDS CLEAR IP IGMP clear ip igmp Overview Use this command to clear all IGMP group membership records on all VLAN interfaces. clear ip igmp Syntax Mode Privileged Exec awplus# clear ip igmp Example Related clear ip igmp group Commands clear ip igmp interface show ip igmp interface...
Page 770: Clear Ip Igmp Group
IGMP IGMP S NOOPING OMMANDS CLEAR IP IGMP GROUP clear ip igmp group Overview Use this command to clear IGMP group membership records for a specific group on either all interfaces, a single interface, or for a range of interfaces. clear ip igmp group * Syntax clear ip igmp group <ip-address>...
Page 771: Clear Ip Igmp Interface
IGMP IGMP S NOOPING OMMANDS CLEAR IP IGMP INTERFACE clear ip igmp interface Overview Use this command to clear IGMP group membership records on a particular interface. clear ip igmp interface <interface> Syntax Parameter Description <interface> Specifies the name of the interface. All groups learned on this interface are deleted.
Page 772: Debug Igmp
IGMP IGMP S NOOPING OMMANDS DEBUG IGMP debug igmp Overview Use this command to enable debugging of either all IGMP or a specific component of IGMP. Use the no variant of this command to disable all IGMP debugging, or debugging of a specific component of IGMP.
Page 773: No Ip Igmp
IGMP IGMP S NOOPING OMMANDS IP IGMP ip igmp Overview Use this command to enable IGMP on an interface. The command configures the device as an IGMP querier. Use the no variant of this command to return all IGMP related configuration to the default on this interface.
Page 774: Ip Igmp Access-Group
IGMP IGMP S NOOPING OMMANDS IP IGMP ACCESS GROUP ip igmp access-group Overview This command adds an access control list to a VLAN interface configured for IGMP or IGMP Snooping. The access control list is used to control and filter the multicast groups learned on the VLAN interface.
Page 775: Ip Igmp Flood Specific-Query
IGMP IGMP S NOOPING OMMANDS IP IGMP FLOOD SPECIFIC QUERY ip igmp flood specific-query Overview Use this command if you want IGMP to flood specific queries to all VLAN member ports, instead of only sending the queries to multicast group member ports. Use the no variant of this command if you want IGMP to only send the queries to multicast group member ports.
Page 776: Ip Igmp Immediate-Leave
IGMP IGMP S NOOPING OMMANDS IP IGMP IMMEDIATE LEAVE ip igmp immediate-leave Overview In IGMP version 2, use this command to minimize the leave latency of IGMP memberships for specified multicast groups. The specified access list number or name defines the multicast groups in which the immediate leave feature is enabled.
Page 777: Ip Igmp Last-Member-Query-Count
IGMP IGMP S NOOPING OMMANDS IP IGMP LAST MEMBER QUERY COUNT ip igmp last-member-query-count Overview Use this command to set the last-member query-count value for an interface. Use the no variant of this command to return to the default on an interface. Syntax ip igmp last-member-query-count <2-7>...
Page 778: Ip Igmp Last-Member-Query-Interval
IGMP IGMP S NOOPING OMMANDS IP IGMP LAST MEMBER QUERY INTERVAL ip igmp last-member-query-interval Overview Use this command to configure the frequency at which the router sends IGMP group specific host query messages. Use the no variant of this command to set this frequency to the default. Syntax ip igmp last-member-query-interval <interval>...
Page 779: Ip Igmp Limit
IGMP IGMP S NOOPING OMMANDS IP IGMP LIMIT ip igmp limit Overview Use this command to configure the limit on the maximum number of group membership entries for the device as a whole or for the specified interface (if in interface mode).
Page 780: Ip Igmp Maximum-Groups
IGMP IGMP S NOOPING OMMANDS IP IGMP MAXIMUM GROUPS ip igmp maximum-groups Overview Use this command to set a limit, per switch port, on the number of IGMP groups clients can join. This stops a single client from using all the switch’s available group-entry resources, and ensures that clients on all ports have a chance to join IGMP groups.
Page 781 IGMP IGMP S NOOPING OMMANDS IP IGMP MAXIMUM GROUPS Example To limit clients to 10 groups on port 1.0.1, which is in vlan1, use the commands: awplus# configure terminal awplus(config)# interface port1.0.1 awplus(config-if)# ip igmp maximum-groups 10 awplus(config-if)# exit awplus(config)# interface vlan1 awplus(config-if)# ip igmp snooping fast-leave...
Page 782: Ip Igmp Querier-Timeout
IGMP IGMP S NOOPING OMMANDS IP IGMP QUERIER TIMEOUT ip igmp querier-timeout Overview Use this command to configure the timeout period before the device takes over as the querier for the interface after the previous querier has stopped querying. Use the no variant of this command to restore the default. Syntax ip igmp querier-timeout <timeout>...
Page 783: Ip Igmp Query-Holdtime
IGMP IGMP S NOOPING OMMANDS IP IGMP QUERY HOLDTIME ip igmp query-holdtime Overview This command sets the time that an IGMP Querier waits after receiving a query solicitation before it sends an IGMP Query. IGMP General Query messages will not be sent during the hold time interval.
Page 784 IGMP IGMP S NOOPING OMMANDS IP IGMP QUERY HOLDTIME Related ip igmp query-interval Commands ip igmp snooping tcn query solicit show ip igmp interface show running-config C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 785: Ip Igmp Query-Interval
IGMP IGMP S NOOPING OMMANDS IP IGMP QUERY INTERVAL ip igmp query-interval Overview Use this command to configure the period for sending IGMP General Query messages. The IGMP query interval specifies the time between IGMP General Query messages being sent. Use the no variant of this command to return to the default query interval period.
Page 786 IGMP IGMP S NOOPING OMMANDS IP IGMP QUERY INTERVAL To reset the period between sending IGMP host-query messages to the default (125 seconds) for vlan10, use the following commands: awplus# configure terminal awplus(config)# interface vlan10 awplus(config-if)# no ip igmp query-interval Related ip igmp query-holdtime Commands...
Page 787: Ip Igmp Query-Max-Response-Time
IGMP IGMP S NOOPING OMMANDS IP IGMP QUERY RESPONSE TIME ip igmp query-max-response-time Overview Use this command to configure the maximum response time advertised in IGMP Queries. Use the no variant of this command to restore the default. : The IGMP query maximum response time must be less than the IGMP query NOTE interval.
Page 788 IGMP IGMP S NOOPING OMMANDS IP IGMP QUERY RESPONSE TIME Related ip igmp query-interval Commands show ip igmp interface show running-config C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 789: Ip Igmp Ra-Option
IGMP IGMP S NOOPING OMMANDS IP IGMP RA OPTION ip igmp ra-option Overview Use this command to enable strict Router Alert (RA) option validation. With strict RA option enabled, IGMP packets without RA options are ignored. Use the no variant of this command to disable strict RA option validation. Syntax ip igmp ra-option no ip igmp ra-option...
Page 790: Ip Igmp Robustness-Variable
IGMP IGMP S NOOPING OMMANDS IP IGMP ROBUSTNESS VARIABLE ip igmp robustness-variable Overview Use this command to change the robustness variable value on an interface. Use the no variant of this command to return to the default on an interface. Syntax ip igmp robustness-variable <1-7>...
Page 791: Ip Igmp Snooping
IGMP IGMP S NOOPING OMMANDS IP IGMP SNOOPING ip igmp snooping Overview Use this command to enable IGMP Snooping. When this command is used in the Global Configuration mode, IGMP Snooping is enabled at the device level. When this command is used in Interface Configuration mode, IGMP Snooping is enabled for the specified VLANs.
Page 792: Ip Igmp Snooping Fast-Leave
IGMP IGMP S NOOPING OMMANDS IP IGMP SNOOPING FAST LEAVE ip igmp snooping fast-leave Overview Use this command to enable IGMP Snooping fast-leave processing. Fast-leave processing is analogous to immediate-leave processing. The IGMP group-membership entry is removed as soon as an IGMP leave group message is received, without sending out a group-specific query.
Page 793: Ip Igmp Snooping Mrouter
IGMP IGMP S NOOPING OMMANDS IP IGMP SNOOPING MROUTER ip igmp snooping mrouter Overview Use this command to statically configure the specified port as a multicast router port for IGMP Snooping for an interface. This command applies to interfaces configured for IGMP Snooping. Use the no variant of this command to remove the static configuration of the port as a multicast router port.
Page 794: Ip Igmp Snooping Querier
IGMP IGMP S NOOPING OMMANDS IP IGMP SNOOPING QUERIER ip igmp snooping querier Overview Use this command to enable IGMP querier operation when no multicast routing protocol is configured. When enabled, the IGMP Snooping querier sends out periodic IGMP queries for all interfaces. This command applies to interfaces configured for IGMP Snooping.
Page 795: Ip Igmp Snooping Report-Suppression
IGMP IGMP S NOOPING OMMANDS IP IGMP SNOOPING REPORT SUPPRESSION ip igmp snooping report-suppression Overview Use this command to enable report suppression for IGMP versions 1 and 2. This command applies to interfaces configured for IGMP Snooping. Report suppression stops reports being sent to an upstream multicast router port when there are already downstream ports for this group on this interface.
Page 796: Ip Igmp Snooping Routermode
IGMP IGMP S NOOPING OMMANDS IP IGMP SNOOPING ROUTERMODE ip igmp snooping routermode Overview Use this command to set the destination IP addresses as router multicast addresses. Use the no variant of this command to set it to the default. You can also remove a specified IP address from a custom list of multicast addresses.
Page 797 IGMP IGMP S NOOPING OMMANDS IP IGMP SNOOPING ROUTERMODE Examples To set ip igmp snooping routermode for all default reserved addresses enter: awplus(config)# ip igmp snooping routermode default To remove the multicast address 224.0.0.5 from the custom list of multicast addresses enter: awplus(config)# no ip igmp snooping routermode address...
Page 798: Ip Igmp Snooping Source-Timeout
IGMP IGMP S NOOPING OMMANDS IP IGMP SNOOPING SOURCE TIMEOUT ip igmp snooping source-timeout Overview Use this command to set the global IGMP Snooping source time-out value (in seconds) on the switch. Use the no variant of this command to set the source time-out value to be the same as the group membership timeout.
Page 799: Ip Igmp Snooping Tcn Query Solicit
IGMP IGMP S NOOPING OMMANDS IP IGMP SNOOPING TCN QUERY SOLICIT ip igmp snooping tcn query solicit Overview Use this command to enable IGMP (Internet Group Management Protocol) Snooping TCN (Topology Change Notification) Query Solicitation feature. When this command is used in the Global Configuration mode, Query Solicitation is enabled.
Page 800 IGMP IGMP S NOOPING OMMANDS IP IGMP SNOOPING TCN QUERY SOLICIT Command issued from Command issued Device is STP Root Global from Interface Bridge or the IGMP Query Solicit Configuration Configuration EPSR Master Node message sent on VLAN See the IGMP Feature Overview and Configuration Guide for introductory information about the Query Solicitation feature.
Page 801: Ip Igmp Source-Address-Check
IGMP IGMP S NOOPING OMMANDS IP IGMP SOURCE ADDRESS CHECK ip igmp source-address-check Overview This command enables the checking of the Source Address for an IGMP Report, rejecting any IGMP Reports originating on devices outside of the local subnet. Use the no variant of this command to disable the checking of the Source Address for an IGMP Report, which allows IGMP Reports from devices outside of the local subnet.
Page 802: Ip Igmp Static-Group
IGMP IGMP S NOOPING OMMANDS IP IGMP STATIC GROUP ip igmp static-group Overview Use this command to statically configure multicast group membership entries on a VLAN interface, or to statically forward a multicast channel out a particular port or port range. To statically add only a group membership, do not specify any parameters.
Page 803 IGMP IGMP S NOOPING OMMANDS IP IGMP STATIC GROUP Example The following example show how to statically add group and source records for IGMP on vlan3: awplus# configure terminal awplus(config)# interface vlan3 awplus(config-if)# ip igmp awplus(config-if)# ip igmp static-group 226.1.2.4 source 10.2.3.4 C613-50172-01 Rev B Command Reference for x230 Series...
Page 804: Ip Igmp Startup-Query-Count
IGMP IGMP S NOOPING OMMANDS IP IGMP STARTUP QUERY COUNT ip igmp startup-query-count Overview Use this command to configure the IGMP startup query count for an interface. The IGMP startup query count is the number of IGMP General Query messages sent by a querier at startup.
Page 805: Ip Igmp Startup-Query-Interval
IGMP IGMP S NOOPING OMMANDS IP IGMP STARTUP QUERY INTERVAL ip igmp startup-query-interval Overview Use this command to configure the IGMP startup query interval for an interface. The IGMP startup query interval is the amount of time in seconds between successive IGMP General Query messages sent by a querier during startup.
Page 806: Ip Igmp Trusted
IGMP IGMP S NOOPING OMMANDS IP IGMP TRUSTED ip igmp trusted Overview Use this command to allow IGMP to process packets received on certain trusted ports only. Use the no variant of this command to stop IGMP from processing specified packets if the packets are received on the specified ports or aggregator.
Page 807: Ip Igmp Version
IGMP IGMP S NOOPING OMMANDS IP IGMP VERSION ip igmp version Overview Use this command to set the current IGMP version (IGMP version 1, 2 or 3) on an interface. Use the no variant of this command to return to the default version. Syntax ip igmp version <1-3>...
Page 808: Show Debugging Igmp
IGMP IGMP S NOOPING OMMANDS SHOW DEBUGGING IGMP show debugging igmp Overview Use this command to display the IGMP debugging options set. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 809: Show Ip Igmp Groups
IGMP IGMP S NOOPING OMMANDS SHOW IP IGMP GROUPS show ip igmp groups Overview Use this command to display the multicast groups with receivers directly connected to the router, and learned through IGMP. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 810 IGMP IGMP S NOOPING OMMANDS SHOW IP IGMP GROUPS Table 24-1: Parameters in the output of show ip igmp groups (cont.) Parameter Description Expires Time (in hours, minutes, and seconds) until the entry expires. Last Last host to report being a member of the multicast group. Reporter C613-50172-01 Rev B Command Reference for x230 Series...
Page 811: Show Ip Igmp Interface
IGMP IGMP S NOOPING OMMANDS SHOW IP IGMP INTERFACE show ip igmp interface Overview Use this command to display the state of IGMP Snooping for a specified VLAN, or all VLANs. IGMP is shown as Active or Disabled in the show output. You can also display the number of groups a switch port belongs to.
Page 812 IGMP IGMP S NOOPING OMMANDS SHOW IP IGMP INTERFACE awplus#show ip igmp interface vlan2 Interface vlan2 (Index 202) IGMP Disabled, Inactive, Version 3 (default) IGMP interface has 0 group-record states IGMP activity: 0 joins, 0 leaves IGMP robustness variable is 2 IGMP last member query count is 2...
Page 813: Show Ip Igmp Snooping Mrouter
IGMP IGMP S NOOPING OMMANDS SHOW IP IGMP SNOOPING MROUTER show ip igmp snooping mrouter Overview Use this command to display the multicast router ports, both static and dynamic, in a VLAN. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 814: Show Ip Igmp Snooping Routermode
IGMP IGMP S NOOPING OMMANDS SHOW IP IGMP SNOOPING ROUTERMODE show ip igmp snooping routermode Overview Use this command to display the current router mode and the list of IP addresses set as router multicast addresses from the ip igmp snooping routermode command.
Page 815: Show Ip Igmp Snooping Source-Timeout
IGMP IGMP S NOOPING OMMANDS SHOW IP IGMP SNOOPING SOURCE TIMEOUT show ip igmp snooping source-timeout Overview Use this command to display the configured IGMP snooping source timeouts for a specified VLAN or VLAN range. show ip igmp snooping source-timeout [interface| Syntax <interface-range>] Parameter...
Page 816: Show Ip Igmp Snooping Statistics
IGMP IGMP S NOOPING OMMANDS SHOW IP IGMP SNOOPING STATISTICS show ip igmp snooping statistics Overview Use this command to display IGMP Snooping statistics data. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 817 IGMP IGMP S NOOPING OMMANDS SHOW IP IGMP SNOOPING STATISTICS Figure 24-8: Example output from the show ip igmp snooping statistics command for a switch port awplus#show ip igmp interface port1.0.1 IGMP information for port1.0.1 Maximum groups limit set: 10 Number of groups port belongs to: 0 C613-50172-01 Rev B Command Reference for x230 Series...
Page 818: Undebug Igmp
IGMP IGMP S NOOPING OMMANDS UNDEBUG IGMP undebug igmp Overview This command applies the functionality of the no debug igmp command. C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 819: Chapter 25: Mld Snooping Commands
MLD Snooping Commands Introduction Overview This chapter provides an alphabetical reference of configuration, clear, and show commands related to MLD Snooping. Command List • “clear ipv6 mld” on page 820 • “clear ipv6 mld group” on page 821 • “clear ipv6 mld interface”...
Page 820: Clear Ipv6 Mld
MLD S NOOPING OMMANDS CLEAR IPV clear ipv6 mld Overview Use this command to clear all MLD local memberships on all interfaces. clear ipv6 mld Syntax Mode Privileged Exec awplus# clear ipv6 mld Example Related clear ipv6 mld group Commands clear ipv6 mld interface C613-50172-01 Rev B Command Reference for x230 Series...
Page 821: Clear Ipv6 Mld Group
MLD S NOOPING OMMANDS CLEAR IPV MLD GROUP clear ipv6 mld group Overview Use this command to clear MLD specific local-membership(s) on all interfaces, for a particular group. clear ipv6 mld group {*|<ipv6-address>} Syntax Parameter Description Clears all groups on all interfaces. This is an alias to the clear ipv6 mld command.
Page 822: Clear Ipv6 Mld Interface
MLD S NOOPING OMMANDS CLEAR IPV MLD INTERFACE clear ipv6 mld interface Overview Use this command to clear MLD interface entries. clear ipv6 mld interface <interface> Syntax Parameter Description <interface> Specifies name of the interface; all groups learned from this interface are deleted.
Page 823: Debug Mld
MLD S NOOPING OMMANDS DEBUG MLD debug mld Overview Use this command to enable all MLD debugging modes, or a specific MLD debugging mode. Use the no variant of this command to disable all MLD debugging modes, or a specific MLD debugging mode. Syntax debug mld {all|decode|encode|events|fsm|tib} no debug mld {all|decode|encode|events|fsm|tib}...
Page 824: Ipv6 Mld Immediate-Leave
MLD S NOOPING OMMANDS MLD IMMEDIATE LEAVE ipv6 mld immediate-leave Overview Use this command to minimize the leave latency of MLD memberships. Use the no variant of this command to disable this feature. Syntax ipv6 mld immediate-leave group-list <IPv6-access-list-name> no ipv6 mld immediate-leave Parameter Description <IPv6-access-...
Page 825: Ipv6 Mld Limit
MLD S NOOPING OMMANDS MLD LIMIT ipv6 mld limit Overview Use this command to configure a limit on the maximum number of group memberships that may be learned. The limit may be set for the device as a whole, or for a specific interface. Once the specified group membership limit is reached, all further local-memberships will be ignored.
Page 826 MLD S NOOPING OMMANDS MLD LIMIT The following example configures an MLD limit of 100 group-membership states on the VLAN interface vlan2: awplus# configure terminal awplus(config)# ipv6 forwarding awplus(config)# ipv6 multicast-routing awplus(config)# interface vlan2 awplus(config-if)# ipv6 enable awplus(config-if)# ipv6 mld limit 100 The following example configures an MLD limit of 100 group-membership states on the VLAN interfaces vlan2-vlan4: awplus#...
Page 827: Ipv6 Mld Snooping
MLD S NOOPING OMMANDS MLD SNOOPING ipv6 mld snooping Overview Use this command to enable MLD Snooping. When this command is issued in the Global Configuration mode, MLD Snooping is enabled globally for the device. When this command is issued in Interface mode for a VLAN then MLD Snooping is enabled for the specified VLAN.
Page 828 MLD S NOOPING OMMANDS MLD SNOOPING To configure MLD Snooping globally for the device, enter the following commands: awplus# configure terminal awplus(config)# ipv6 mld snooping To disable MLD Snooping globally for the device, enter the following commands: awplus# configure terminal awplus(config)# no ipv6 mld snooping C613-50172-01 Rev B...
Page 829: Ipv6 Mld Snooping Fast-Leave
MLD S NOOPING OMMANDS MLD SNOOPING FAST LEAVE ipv6 mld snooping fast-leave Overview Use this command to enable MLD Snooping fast-leave processing. Fast-leave processing is analogous to immediate-leave processing; the MLD group-membership is removed as soon as an MLD leave group message is received, without sending out a group-specific query.
Page 830: Ipv6 Mld Snooping Mrouter
MLD S NOOPING OMMANDS MLD SNOOPING MROUTER ipv6 mld snooping mrouter Overview Use this command to statically configure the specified port as a Multicast Router interface for MLD Snooping within the specified VLAN. See detailed usage notes below to configure static multicast router ports when using static IPv6 multicast routes with EPSR, and the destination VLAN is an EPSR data VLAN.
Page 831 MLD S NOOPING OMMANDS MLD SNOOPING MROUTER Examples This example shows how to specify the next-hop interface to the multicast router for VLAN interface vlan2: awplus# configure terminal awplus(config)# interface vlan2 awplus(config-if)# ipv6 mld snooping mrouter interface port1.0.5 This example shows how to specify the next-hop interface to the multicast router for VLAN interfaces vlan2-vlan4: awplus# configure terminal...
Page 832: Ipv6 Mld Snooping Querier
MLD S NOOPING OMMANDS MLD SNOOPING QUERIER ipv6 mld snooping querier Overview Use this command to enable MLD querier operation on a subnet (VLAN) when no multicast routing protocol is configured in the subnet (VLAN). When enabled, the MLD Snooping querier sends out periodic MLD queries for all interfaces on that VLAN.
Page 833: Ipv6 Mld Snooping Report-Suppression
MLD S NOOPING OMMANDS MLD SNOOPING REPORT SUPPRESSION ipv6 mld snooping report-suppression Overview Use this command to enable report suppression from hosts for Multicast Listener Discovery version 1 (MLDv1) on a VLAN in Interface Configuration mode. Use the no variant of this command to disable report suppression on a VLAN in Interface Configuration mode.
Page 834 MLD S NOOPING OMMANDS MLD SNOOPING REPORT SUPPRESSION This example shows how to disable report suppression for MLD reports on VLAN interfaces vlan2-vlan4: awplus# configure terminal awplus(config)# interface vlan2-vlan4 awplus(config-if)# no ipv6 mld snooping report-suppression C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™...
Page 835: Ipv6 Mld Static-Group
MLD S NOOPING OMMANDS MLD STATIC GROUP ipv6 mld static-group Overview Use this command to statically configure IPv6 group membership entries on an interface. To statically add only a group membership, do not specify any parameters. Use the no variant of this command to delete static group membership entries. Syntax ipv6 mld static-group <ipv6-group-address>...
Page 836 MLD S NOOPING OMMANDS MLD STATIC GROUP To add a static group record on a specific port on vlan2, use the following commands: awplus# configure terminal awplus(config)# interface vlan2 awplus(config-if)# ipv6 mld static-group ff1e::10 interface port1.0.4 C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™...
Page 837: Show Debugging Mld
MLD S NOOPING OMMANDS SHOW DEBUGGING MLD show debugging mld Overview Use this command to display the MLD debugging modes enabled with the debug command. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 838: Show Ipv6 Mld Groups
MLD S NOOPING OMMANDS SHOW IPV MLD GROUPS show ipv6 mld groups Overview Use this command to display the multicast groups that have receivers directly connected to the router and learned through MLD. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 839: Show Ipv6 Mld Interface
MLD S NOOPING OMMANDS SHOW IPV MLD INTERFACE show ipv6 mld interface Overview Use this command to display the state of MLD and MLD Snooping for a specified interface, or all interfaces. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus”...
Page 840: Show Ipv6 Mld Snooping Mrouter
MLD S NOOPING OMMANDS SHOW IPV MLD SNOOPING MROUTER show ipv6 mld snooping mrouter Overview Use this command to display the multicast router interfaces, both configured and learned, in a VLAN. If you do not specify a VLAN interface then all the VLAN interfaces are displayed.
Page 841: Show Ipv6 Mld Snooping Statistics
MLD S NOOPING OMMANDS SHOW IPV MLD SNOOPING STATISTICS show ipv6 mld snooping statistics Overview Use this command to display MLD Snooping statistics data. For information on filtering and saving command output, see the “Getting Started with AlliedWare Plus” Feature Overview and Configuration Guide.
Page 842: Chapter 26: Multicast Commands
Multicast Commands Introduction Overview This chapter provides an alphabetical reference of multicast commands for configuring: • IPv4 and IPv6 multicast forwarding • IPv4 and IPv6 static multicast routes • mroutes (routes back to a multicast source) For commands for other multicast protocols, see: •...
Page 843 ULTICAST OMMANDS • “debug nsm mcast” on page 849 • “debug nsm mcast6” on page 850 • “ip mroute” on page 851 • “ip multicast forward-first-packet” on page 853 • “ip multicast route-limit” on page 854 • “ip multicast wrong-vif-suppression” on page 855 •...
Page 844: Clear Ip Mroute
ULTICAST OMMANDS CLEAR IP MROUTE clear ip mroute Overview Use this command to delete entries from the IPv4 multicast routing table. : If you use this command, you should also use the clear ip igmp group command NOTE to clear IGMP group membership records. Syntax clear ip mroute {*|<ipv4-group-address>...
Page 845: Clear Ip Mroute Statistics
ULTICAST OMMANDS CLEAR IP MROUTE STATISTICS clear ip mroute statistics Overview Use this command to delete multicast route statistics entries from the IP multicast routing table. clear ip mroute statistics {*|<ipv4-group-addr> Syntax [<ipv4-source-addr>]} Parameter Description All multicast route entries. <ipv4-group-addr> Group IPv4 address, in dotted decimal notation in the format A.B.C.D.
Page 846: Clear Ipv6 Mroute
ULTICAST OMMANDS CLEAR IPV MROUTE clear ipv6 mroute Overview Use this command to delete one or more dynamically-added route entries from the IPv6 multicast routing table. clear ipv6 mroute {*|<ipv6-group-address> Syntax [<ipv6-source-address>]} Parameter Description Deletes all dynamically-learned IPv6 multicast routes. <ipv6-group-address>...
Page 847: Clear Ipv6 Mroute Statistics
ULTICAST OMMANDS CLEAR IPV MROUTE STATISTICS clear ipv6 mroute statistics Overview Use this command to delete multicast route statistics entries from the IPv6 multicast routing table. : Static IPv6 multicast routes take priority over dynamic IPv6 multicast routes. Use NOTE clear ipv6 mroute command to clear static IPv6 multicast routes and ensure dynamic IPv6 multicast routes can take over from previous static IPv6 multicast routes.
Page 848 ULTICAST OMMANDS MULTICAST FORWARD SLOW PATH PACKET ipv6 multicast forward-slow-path-packet Overview Use this command to enable multicast packets to be forwarded to the CPU. Enabling this command will ensure that the layer L3 MTU is set correctly for each IP multicast group and will apply the value of the smallest MTU among the outgoing interfaces for the multicast group.
Page 849: Debug Nsm Mcast
DEBUG NSM MCAST debug nsm mcast Overview Use this command to debug IPv4 events in the Multicast Routing Information Base (MRIB). This command is intended for use by Allied Telesis authorized service personnel for diagnostic purposes. Syntax debug nsm mcast {all|fib-msg|mrt|mtrace|mtrace-detail|register|stats|vif}...
Page 850: Debug Nsm Mcast6
Overview Use this command to debug IPv6 events in the Multicast Routing Information Base (MRIB). This command is intended for use by Allied Telesis authorized service personnel for diagnostic purposes. Syntax debug nsm mcast6 {all|fib-msg|mrt|register|stats|vif} no debug nsm mcast6 {all|fib-msg|mrt|register|stats|vif}...
Page 851: Ip Mroute
ULTICAST OMMANDS IP MROUTE ip mroute Overview Use this command to inform multicast of the RPF (Reverse Path Forwarding) route to a given IPv4 multicast source. Use the no variant of this command to delete a route to an IPv4 multicast source. Syntax ip mroute <ipv4-source-address/mask-length>...
Page 852 ULTICAST OMMANDS IP MROUTE administrative distance - whether a static “multicast route” or a route from the unicast route table - will be chosen as the RPF route to the source. Note that in this context the term “multicast route” does not imply a route via which the current router will forward multicast;...
Page 853: Ip Multicast Forward-First-Packet
ULTICAST OMMANDS IP MULTICAST FORWARD FIRST PACKET ip multicast forward-first-packet Overview Use this command to enable multicast to forward the first multicast packets coming to the device. Use the no variant of this command to disable this feature. Syntax ip multicast forward-first-packet no ip multicast forward-first-packet Default By default, this feature is disabled.
Page 854: Ip Multicast Route-Limit
ULTICAST OMMANDS IP MULTICAST ROUTE LIMIT ip multicast route-limit Overview Use this command to limit the number of multicast routes that can be added to an IPv4 multicast routing table. Use the no variant of this command to return the IPv4 route limit to the default. Syntax ip multicast route-limit <limit>...
Page 855: Ip Multicast Wrong-Vif-Suppression
ULTICAST OMMANDS IP MULTICAST WRONG SUPPRESSION ip multicast wrong-vif-suppression Overview Use this command to prevent unwanted multicast packets received on an unexpected VLAN being trapped to the CPU. Use the no variant of this command to disable wrong VIF suppression. Syntax ip ip multicast wrong-vif-suppression no ip multicast wrong-vif-suppression...
Page 856: Ip Multicast-Routing
ULTICAST OMMANDS IP MULTICAST ROUTING ip multicast-routing Overview Use this command to turn on/off IPv4 multicast routing on the router; when turned off the device does not perform multicast functions. Use the no variant of this command to disable IPv4 multicast routing after enabling it.
Page 857: Ipv6 Mroute
ULTICAST OMMANDS MROUTE ipv6 mroute Overview Use this command to inform multicast of the RPF (Reverse Path Forwarding) route to a given IPv6 multicast source. Use the no variant of this command to delete a route to an IPv6 multicast source. JC - 25/6/12 - added missing IPI IPv6 multicast commands that have been in since 5.4.1 as undocumented and unregistered CLI commands but have been available in 5.4.1/5.4.2 sw - this is out for 542-25 but should be added back in for 543 - check...
Page 858 ULTICAST OMMANDS MROUTE given IPv6 source, the multicast routing protocol will look at these static entries as well as looking into the unicast routing table. The route with the lowest administrative distance - whether a static “multicast route” or a route from the unicast route table - will be chosen as the RPF route to the source.
Page 859: Ipv6 Multicast Route-Limit
ULTICAST OMMANDS MULTICAST ROUTE LIMIT ipv6 multicast route-limit Overview Use this command to limit the number of multicast routes that can be added to an IPv6 multicast routing table. Use the no variant of this command to return the IPv6 route limit to the default. Syntax ipv6 multicast route-limit <limit>...
Page 860: Ipv6 Multicast-Routing
ULTICAST OMMANDS MULTICAST ROUTING ipv6 multicast-routing Overview Use this command to turn on/off IPv6 multicast routing on the router; when turned off the device does not perform multicast functions. Use the no variant of this command to disable IPv6 multicast routing after enabling it.
Page 861: Multicast
ULTICAST OMMANDS MULTICAST multicast Overview Use this command to enable a device port to route multicast packets that ingress the port. Use the no variant of this command to stop the device port from routing multicast packets that ingress the port. Note that this does not affect Layer 2 forwarding of multicast packets.
Page 862: Show Ip Mroute
ULTICAST OMMANDS SHOW IP MROUTE show ip mroute Overview Use this command to display the contents of the IPv4 multicast routing (mroute) table. show ip mroute [<ipv4-group-addr>] [<ipv4-source-addr>] Syntax [{dense|sparse}] [{count|summary}] Parameter Description <ipv4-group-addr> Group IPv4 address, in dotted decimal notation in the format A.B.C.D.
Page 863 ULTICAST OMMANDS SHOW IP MROUTE Figure 26-2: Example output from the show ip mroute command with the source and group IPv4 address specified awplus# show ip mroute 10.10.1.52 224.0.1.3  IP Multicast Routing Table Flags: I - Immediate Stat, T - Timed Stat, F - Forwarder  installed...
Page 864: Show Ip Mvif
ULTICAST OMMANDS SHOW IP MVIF show ip mvif Overview Use this command to display the contents of the IPv4 Multicast Routing Information Base (MRIB) VIF table. show ip mvif <interface> Syntax Parameter Description <interface> The interface to display information about. Mode User Exec and Privileged Exec awplus#...
Page 865 ULTICAST OMMANDS SHOW IP RPF show ip rpf Overview Use this command to display Reverse Path Forwarding (RPF) information for the specified IPv4 source address. show ip rpf <source-addr> Syntax Parameter Description <source-addr> Source IPv4 address, in dotted decimal notation in the format A.B.C.D.
Page 866: Show Ipv6 Mroute
ULTICAST OMMANDS SHOW IPV MROUTE show ipv6 mroute Overview Use this command to display the contents of the IPv6 multicast routing (mroute) table. show ipv6 mroute [<ipv6-group-addr>] [<ipv6-source-addr>] Syntax [{count|summary}] Parameter Description <ipv6-group-addr> Group IPv6 address, in hexadecimal notation in the format X.X::X.X.
Page 867 ULTICAST OMMANDS SHOW IPV MROUTE The following is a sample output of this command displaying the IPv6 multicast routing count table for a single static IPv6 Multicast route: Figure 26-8: Example output from the show ipv6 mroute count command awplus#show ipv6 mroute count  ...
Page 868: Show Ipv6 Multicast Forwarding
ULTICAST OMMANDS SHOW IPV MULTICAST FORWARDING show ipv6 multicast forwarding Overview Use this command to view the status of multicast forwarding slow-path-packet setting. show ipv6 multicast forwarding Syntax Mode User Exec Example To show the status of the multicast forwarding, slow-path-packet setting, use the following command: awplus# show ipv6 multicast forwarding...
Page 869: Show Ipv6 Mif
ULTICAST OMMANDS SHOW IPV show ipv6 mif Overview Use this command to display the contents of the IPv6 Multicast Routing Information Base (MRIB) MIF table. show ipv6 mif [<interface>] Syntax Parameter Description <interface> The interface to display information about. Mode User Exec and Privileged Exec awplus# show ipv6 mif...
Page 870: Part 5: Access And Security
Part 5: Access and Security C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 871: Chapter 27: Ipv4 Hardware Access Control List (Acl) Commands
IPv4 Hardware Access Control List (ACL) Commands Introduction Overview This chapter provides an alphabetical reference of IPv4 Hardware Access Control List (ACL) commands. It contains detailed command information and command examples about IPv4 hardware ACLs, which you can apply directly to interfaces using the access-group command.
Page 872 (ACL) C ARDWARE CCESS ONTROL OMMANDS Table 27-1: IPv4 Hardware Access List Commands and Prompts Command Name Command Mode Prompt awplus# show interface access-group Privileged Exec awplus# show access-list (IPv4 Hardware ACLs) Privileged Exec awplus# show interface access-group Privileged Exec awplus(config)# access-list (numbered hardware ACL for IP Global Configuration...
Page 873 (ACL) C ARDWARE CCESS ONTROL OMMANDS • “access-list (numbered hardware ACL for IP protocols)” on page 883 • “access-list (numbered hardware ACL for MAC addresses)” on page 887 • “access-list (numbered hardware ACL for TCP or UDP)” on page 890 •...
Page 874: Access-Group
(ACL) C ARDWARE CCESS ONTROL OMMANDS ACCESS GROUP access-group Overview This command adds or removes a hardware-based access-list to or from a switch port interface. The number of hardware numbered and named access-lists that can be added to a switch port interface is determined by the available memory in hardware-based packet classification tables.
Page 875 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACCESS GROUP Examples To add the numbered hardware access-list 3005 to switch port interface port1.0.1, enter the following commands: awplus# configure terminal awplus(config)# interface port1.0.1 awplus(config-if)# access-group 3005 To add the named hardware access-list “hw-acl” to switch port interface port1.0.2, enter the following commands: awplus# configure terminal...
Page 876: Access-List (Numbered Hardware Acl For Icmp)
(ACL) C ARDWARE CCESS ONTROL OMMANDS ICMP) ACCESS LIST NUMBERED HARDWARE access-list (numbered hardware ACL for ICMP) Overview This command creates an access-list for use with hardware classification. The access-list will match on ICMP packets that have the specified source and destination IP addresses and, optionally, ICMP type.
Page 877 (ACL) C ARDWARE CCESS ONTROL OMMANDS ICMP) ACCESS LIST NUMBERED HARDWARE Parameter Description host <ip-addr> Match a single source host with the IP address given by <ip-addr> in dotted decimal notation. <ip-addr>/<prefix> Match any source IP address within the specified subnet. Specify the subnet by entering the IPv4 address, then a forward slash, then the prefix length.
Page 878 (ACL) C ARDWARE CCESS ONTROL OMMANDS ICMP) ACCESS LIST NUMBERED HARDWARE Parameter Description Information requests. Information replies. Address mask requests. Address mask replies. vlan <1-4094> The VLAN to match against. The ACL will match against the specified ID in the packet’s VLAN tag. Mode Global Configuration Default...
Page 879 (ACL) C ARDWARE CCESS ONTROL OMMANDS ICMP) ACCESS LIST NUMBERED HARDWARE Command Version 5.4.6-2.1: send-to-vlan-port action parameter added changes C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 880: Access-List (Numbered Hardware Acl For Ip Packets)
(ACL) C ARDWARE CCESS ONTROL OMMANDS ACCESS LIST NUMBERED HARDWARE PACKETS access-list (numbered hardware ACL for IP packets) Overview This command creates an access-list for use with hardware classification. The access-list will match on packets that have the specified source and destination IP addresses.
Page 881 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACCESS LIST NUMBERED HARDWARE PACKETS Table 27-2: IP and ICMP parameters in access-list (hardware IP numbered) Parameter Description Match any source IP address. host <ip-addr> Match a single source host with the IP address given by <ip-addr> in dotted decimal notation.
Page 882 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACCESS LIST NUMBERED HARDWARE PACKETS ACLs numbered in the range 3000-3699 match on packets that have the specified source and destination IP addresses. You can use ACLs to redirect packets, by sending them to the CPU, the mirror port, or a specific VLAN on a specific port.
Page 883: Access-List (Numbered Hardware Acl For Ip Protocols)
(ACL) C ARDWARE CCESS ONTROL OMMANDS ACCESS LIST NUMBERED HARDWARE PROTOCOLS access-list (numbered hardware ACL for IP protocols) Overview This command creates an access-list for use with hardware classification. The access-list will match on packets that have the specified source and destination IP addresses and IP protocol number.
Page 884 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACCESS LIST NUMBERED HARDWARE PROTOCOLS Table 27-3: Parameters in access-list (hardware IP numbered) (cont.) Parameter Description <source-ip> The source addresses to match against. You can specify a single host, a subnet, or all source addresses. The following are the valid formats for specifying the source: Match any source IP address.
Page 885 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACCESS LIST NUMBERED HARDWARE PROTOCOLS Table 27-4: IP protocol number and description Protocol Number Protocol Description [RFC] Internet Control Message [RFC792] Internet Group Management [RFC1112] Gateway-to-Gateway [RFC823] IP in IP [RFC2003] Stream [RFC1190] [RFC1819] TCP (Transmission Control Protocol) [RFC793] EGP (Exterior Gateway Protocol) [RFC888] IGP (Interior Gateway Protocol) [IANA]...
Page 886 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACCESS LIST NUMBERED HARDWARE PROTOCOLS Table 27-4: IP protocol number and description (cont.) Protocol Number Protocol Description [RFC] MPLS-in-IP / RFC4023 MANET Protocols / RFC-ietf-manet-iana-07.txt 139-252 Unassigned / IANA Use for experimentation and testing / RFC3692 Use for experimentation and testing / RFC3692 Reserved / IANA Mode...
Page 887: Access-List (Numbered Hardware Acl For Mac Addresses)
(ACL) C ARDWARE CCESS ONTROL OMMANDS ACCESS LIST NUMBERED HARDWARE ADDRESSES access-list (numbered hardware ACL for MAC addresses) Overview This command creates an access-list for use with hardware classification. The access-list will match on packets that have the specified source and destination MAC addresses.
Page 888 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACCESS LIST NUMBERED HARDWARE ADDRESSES Parameter Description <dest-mac> The destination MAC address to match against, followed by the mask. Enter the address in the format <HHHH.HHHH.HHHH>, where each H is a hexadecimal number. Enter the mask in the format <HHHH.HHHH.HHHH>, where each H is a hexadecimal number.
Page 889 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACCESS LIST NUMBERED HARDWARE ADDRESSES To create an access-list that will send a copy of packets to the mirror port if their source MAC address starts with 0000.00ab, use the commands: awplus# configure terminal awplus(config)# access-list 4001 copy-to-mirror 0000.00ab.1234 0000.0000.FFFF any...
Page 890: Access-List (Numbered Hardware Acl For Tcp Or Udp)
(ACL) C ARDWARE CCESS ONTROL OMMANDS UDP) ACCESS LIST NUMBERED HARDWARE access-list (numbered hardware ACL for TCP or UDP) Overview This command creates an access-list for use with hardware classification. The access-list will match on TCP or UDP packets that have the specified source and destination IP addresses and optionally, port values.
Page 891 (ACL) C ARDWARE CCESS ONTROL OMMANDS UDP) ACCESS LIST NUMBERED HARDWARE Parameter Description Match any source IP address. host <ip-addr> Match a single source host with the IP address given by <ip-addr> in dotted decimal notation. <ip-addr>/<prefix> Match any source IP address within the specified subnet.
Page 892 (ACL) C ARDWARE CCESS ONTROL OMMANDS UDP) ACCESS LIST NUMBERED HARDWARE Parameter Description <ip-addr> Match any destination IP address <reverse-mask> within the specified subnet. Specify the subnet by entering a reverse mask in dotted decimal format. For example, entering “192.168.1.1 0.0.0.255”...
Page 893 (ACL) C ARDWARE CCESS ONTROL OMMANDS UDP) ACCESS LIST NUMBERED HARDWARE To create an access-list that will copy TCP packets to the mirror port, if they have a destination address of 192.168.1.1, a destination port of 80, and any source address and source port, enter the commands: awplus# configure terminal...
Page 894: Access-List Hardware (Named Hardware Acl)
(ACL) C ARDWARE CCESS ONTROL OMMANDS ACL) ACCESS LIST HARDWARE NAMED HARDWARE access-list hardware (named hardware ACL) Overview This command creates a named hardware access-list and puts you into IPv4 Hardware ACL Configuration mode, where you can add filter entries to the ACL. Once you have configured the ACL, you can use the access-group or the...
Page 895 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACL) ACCESS LIST HARDWARE NAMED HARDWARE Related access-group Commands (named hardware ACL: ICMP entry) (named hardware ACL: IP protocol entry) (named hardware ACL: TCP or UDP entry) (access-list standard named filter) show access-list (IPv4 Hardware ACLs) C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™...
Page 896 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACL: ICMP NAMED HARDWARE ENTRY (named hardware ACL: ICMP entry) Overview Use this command to add a new ICMP filter entry to the current hardware access-list. The filter will match on any ICMP packet that has the specified source and destination IP addresses and (optionally) ICMP type.
Page 897 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACL: ICMP NAMED HARDWARE ENTRY Parameter Description send-to-mirror Send matching packets to the mirror port. Use the mirror interface command to configure the mirror port. send-to-cpu Send matching packets to the CPU. icmp Match against ICMP packets <source-ip>...
Page 898 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACL: ICMP NAMED HARDWARE ENTRY Parameter Description Echo replies. Destination unreachable messages. Source quench messages. Redirect (change route) messages. Echo requests. Time exceeded messages. Parameter problem messages. Timestamp requests. Timestamp replies. Information requests. Information replies. Address mask requests.
Page 899 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACL: ICMP NAMED HARDWARE ENTRY Examples To add an access-list filter entry with a sequence number of 100 to the access-list named “my-list” that will permit ICMP packets with a source address of 192.168.1.0/24, any destination address and an ICMP type of 5, use the commands: awplus# configure terminal awplus(config)#...
Page 900 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACL: IP NAMED HARDWARE PACKET ENTRY (named hardware ACL: IP packet entry) Overview Use this command to add an IP packet filter entry to the current hardware access-list. The filter will match on IP packets that have the specified IP and/or MAC addresses.
Page 901 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACL: IP NAMED HARDWARE PACKET ENTRY Parameter Description send-to-mirror Send matching packets to the mirror port. Use the mirror interface command to configure the mirror port. send-to-cpu Send matching packets to the CPU. Match against IP packets <source-ip>...
Page 902 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACL: IP NAMED HARDWARE PACKET ENTRY Parameter Description <source-mac> The source MAC address to match against. You can specify a single MAC address, a range (through a mask), the address learned from DHCP snooping, or any: Match against any source MAC address.
Page 903 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACL: IP NAMED HARDWARE PACKET ENTRY sequence number. If you do not specify a sequence number, the switch puts the entry at the end of the ACL and assigns it the next available multiple of 10 as its sequence number.
Page 904 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACL: IP NAMED HARDWARE PROTOCOL ENTRY (named hardware ACL: IP protocol entry) Overview Use this command to add an IP protocol type filter entry to the current hardware access-list. The filter will match on IP packets that have the specified IP protocol number, and the specified IP and/or MAC addresses.
Page 905 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACL: IP NAMED HARDWARE PROTOCOL ENTRY Table 27-5: Parameters in IP protocol ACL entries (cont.) Parameter Description send-to-mirror Send matching packets to the mirror port. Use the mirror interface command to configure the mirror port. send-to-cpu Send matching packets to the CPU.
Page 906 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACL: IP NAMED HARDWARE PROTOCOL ENTRY Table 27-5: Parameters in IP protocol ACL entries (cont.) Parameter Description <ip-addr> Match any destination IP address <reverse-mask> within the specified subnet. Specify the subnet by entering a reverse mask in dotted decimal format.
Page 907 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACL: IP NAMED HARDWARE PROTOCOL ENTRY Table 27-6: IP protocol number and description Protocol Number Protocol Description [RFC] Internet Control Message [RFC792] Internet Group Management [RFC1112] Gateway-to-Gateway [RFC823] IP in IP [RFC2003] Stream [RFC1190] [RFC1819] TCP (Transmission Control Protocol) [RFC793] EGP (Exterior Gateway Protocol) [RFC888] IGP (Interior Gateway Protocol) [IANA]...
Page 908 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACL: IP NAMED HARDWARE PROTOCOL ENTRY Table 27-6: IP protocol number and description (cont.) Protocol Number Protocol Description [RFC] MPLS-in-IP / RFC4023 MANET Protocols / RFC-ietf-manet-iana-07.txt 139-252 Unassigned / IANA Use for experimentation and testing / RFC3692 Use for experimentation and testing / RFC3692 Reserved / IANA Mode...
Page 909 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACL: IP NAMED HARDWARE PROTOCOL ENTRY match access-group show running-config show access-list (IPv4 Hardware ACLs) Command Version 5.4.6-2.1: send-to-vlan-port action parameter added changes C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 910 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACL: MAC NAMED HARDWARE ENTRY (named hardware ACL: MAC entry) Overview Use this command to add a MAC address filter entry to the current hardware access-list. The access-list will match on packets that have the specified source and destination MAC addresses.
Page 911 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACL: MAC NAMED HARDWARE ENTRY Parameter Description <source-mac> The source MAC address to match against, followed by the mask. Enter the address in the format <HHHH.HHHH.HHHH>, where each H is a hexadecimal number. Enter the mask in the format <HHHH.HHHH.HHHH>, where each H is a hexadecimal number.
Page 912 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACL: MAC NAMED HARDWARE ENTRY Examples To add a filter entry to the access-list named “my-list” that will permit packets with a source MAC address of 0000.00ab.1234 and any destination MAC address, use the commands: awplus# configure terminal awplus(config)#...
Page 913 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACL: TCP NAMED HARDWARE ENTRY (named hardware ACL: TCP or UDP entry) Overview Use this command to add a TCP or UDP filter entry to the current hardware access-list. The access-list will match on TCP or UDP packets that have the specified source and destination IP addresses and optionally, port values.
Page 914 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACL: TCP NAMED HARDWARE ENTRY Parameter Description send-to-mirror Send matching packets to the mirror port. Use the mirror interface command to configure the mirror port. send-to-cpu Send matching packets to the CPU. Match against TCP packets. Match against UDP packets.
Page 915 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACL: TCP NAMED HARDWARE ENTRY Parameter Description host <ip-addr> Match a single destination host with the IP address given by <ip-addr> in dotted decimal notation. <ip-addr>/<prefix> Match any destination IP address within the specified subnet. Specify the subnet by entering the IPv4 address, then a forward slash, then the prefix length.
Page 916 (ACL) C ARDWARE CCESS ONTROL OMMANDS ACL: TCP NAMED HARDWARE ENTRY Then use the access-group or the match access-group command to apply this ACL to a port, VLAN or QoS class-map. Note that the ACL will only apply to incoming data packets.
Page 917: Commit (Ipv4)
(ACL) C ARDWARE CCESS ONTROL OMMANDS COMMIT commit (IPv4) Overview Use this command to commit the IPv4 ACL filter configuration entered at the console to the hardware immediately without exiting the IPv4 Hardware ACL Configuration mode. This command forces the associated hardware and software IPv4 ACLs to synchronize.
Page 918: Show Access-List (Ipv4 Hardware Acls)
(ACL) C ARDWARE CCESS ONTROL OMMANDS SHOW ACCESS LIST ARDWARE show access-list (IPv4 Hardware ACLs) Overview Use this command to display the specified access-list, or all access-lists if none have been specified. Note that only defined access-lists are displayed. An error message is displayed for an undefined access-list.
Page 919 (ACL) C ARDWARE CCESS ONTROL OMMANDS SHOW ACCESS LIST ARDWARE % Can't find access-list 2 Related access-list extended (named) Commands access-list (numbered hardware ACL for MAC addresses) access-list hardware (named hardware ACL) C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™...
Page 920: Show Interface Access-Group
(ACL) C ARDWARE CCESS ONTROL OMMANDS SHOW INTERFACE ACCESS GROUP show interface access-group Overview Use this command to display the access groups attached to a port. If an access group is specified, then the output only includes the ports that the specified access group is attached to.
Page 921: Chapter 28: Ipv4 Software Access Control List (Acl) Commands
IPv4 Software Access Control List (ACL) Commands Introduction Overview This chapter provides an alphabetical reference for the IPv4 Software Access Control List (ACL) commands, and contains detailed command information and command examples about IPv4 software ACLs as applied to Routing and Multicasting, which are not applied to interfaces.
Page 922 (ACL) C OFTWARE CCESS ONTROL OMMANDS Table 28-1: IPv4 Software Access List Commands and Prompts Command Name Command Mode Prompt awplus# show ip access-list Privileged Exec awplus(config)# access-group Global Configuration awplus(config)# access-list (extended named) Global Configuration awplus(config)# access-list (extended numbered) Global Configuration awplus(config)# access-list (standard named)
Page 923 (ACL) C OFTWARE CCESS ONTROL OMMANDS • “show ip access-list” on page 962 • “vty access-class (numbered)” on page 963 C613-50172-01 Rev B Command Reference for x230 Series AlliedWare Plus™ Operating System - Version 5.4.7-1.x...
Page 924: Access-List Extended (Named)
(ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST EXTENDED NAMED access-list extended (named) Overview This command configures an extended named access-list that permits or denies packets from specific source and destination IP addresses. You can either create an extended named ACL together with an ACL filter entry in the Global Configuration mode, or you can use the IPv4 Extended ACL Configuration mode for sequenced ACL filter entry after entering a list name.
Page 925 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST EXTENDED NAMED Table 28-2: Parameters in the access-list extended (named) command - icmp Parameter Description <source> The source address of the packets. You can specify a single host, a subnet, or all sources. The following are the valid formats for specifying the source: Matches any source IP address.
Page 926 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST EXTENDED NAMED Table 28-2: Parameters in the access-list extended (named) command - icmp Parameter Description <type-number> The ICMP type, as defined in RFC792 and RFC950. Specify one of the following integers to create a filter for the ICMP message type: Echo replies.
Page 927 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST EXTENDED NAMED Table 28-3: Parameters in the access-list extended (named) command - tcp|udp Parameter Description <source> The source address of the packets. You can specify a single host, a subnet, or all sources. The following are the valid formats for specifying the source: Matches any source IP address.
Page 928 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST EXTENDED NAMED Table 28-3: Parameters in the access-list extended (named) command - tcp|udp Parameter Description Matches port numbers not equal to the port number specified immediately after this parameter. Log the results. access-list extended <list-name>...
Page 929 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST EXTENDED NAMED Table 28-4: Parameters in the access-list extended (named) command - proto|ip|any (cont.) Parameter Description <destination> The destination address of the packets. You can specify a single host, a subnet, or all destinations. The following are the valid formats for specifying the destination: Matches any destination IP address.
Page 930 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST EXTENDED NAMED Table 28-5: IP protocol number and description (cont.) Protocol Number Protocol Description [RFC] ISO-TP4 (ISO Transport Protocol Class 4) [RFC905] Bulk Data Transfer Protocol [RFC969] DCCP (Datagram Congestion Control Protocol) [RFC4340] DSR (Dynamic Source Routing Protocol) [RFC4728] ESP (Encap Security Payload) [RFC2406]...
Page 931 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST EXTENDED NAMED From there you can configure your access-lists by using the commands (access-list extended ICMP filter), (access-list extended IP filter), and (access-list extended IP protocol filter). Note that packets must match both the source and the destination details. : Software ACLs will deny access unless explicitly permitted by an ACL action.
Page 932: Access-List (Extended Numbered)
(ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST EXTENDED NUMBERED access-list (extended numbered) Overview This command configures an extended numbered access-list that permits or denies packets from specific source and destination IP addresses. You can either create an extended numbered ACL together with an ACL filter entry in the Global Configuration mode, or you can use the IPv4 Extended ACL Configuration mode for sequenced ACL filter entry after entering a list number.
Page 933 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST EXTENDED NUMBERED Parameter Description <destination> The destination address of the packets. You can specify a single host, a subnet, or all destinations. The following are the valid formats for specifying the destination: Matches any destination IP address.
Page 934 (ACL) C OFTWARE CCESS ONTROL OMMANDS ICMP ACCESS LIST EXTENDED FILTER (access-list extended ICMP filter) Overview Use this ACL filter to add a new ICMP filter entry to the current extended access-list. If the sequence number is specified, the new filter is inserted at the specified location.
Page 935 (ACL) C OFTWARE CCESS ONTROL OMMANDS ICMP ACCESS LIST EXTENDED FILTER Parameter Description icmp-type The ICMP type. <icmp-value> The value of the ICMP type. Log the results. Mode IPv4 Extended ACL Configuration Default Any traffic controlled by a software ACL that does not explicitly match a filter is denied.
Page 936 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST EXTENDED FILTER (access-list extended IP filter) Overview Use this ACL filter to add a new IP filter entry to the current extended access-list. If the sequence number is specified, the new filter is inserted at the specified location.
Page 937 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST EXTENDED FILTER Parameter Description <destination> The destination address of the packets. You can specify a single host, a subnet, or all destinations. The following are the valid formats for specifying the destination: Matches any destination IP address.
Page 938 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST EXTENDED FILTER Then use the following commands to add a new entry to the named access-list my-acl that will reject packets from 10.0.0.1 to 192.168.1.1: awplus(config-ip-ext-acl)# deny ip host 10.0.0.1 host 192.168.1.1 awplus(config-ip-ext-acl)# 20 permit ip any any Example 3...
Page 939 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST EXTENDED PROTOCOL FILTER (access-list extended IP protocol filter) Overview Use this ACL filter to add a new IP protocol type filter entry to the current extended access-list. If the sequence number is specified, the new filter is inserted at the specified location.
Page 940 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST EXTENDED PROTOCOL FILTER Parameter Description <destination> The destination address of the packets. You can specify a single host, a subnet, or all destinations. The following are the valid formats for specifying the destination: <ip-addr>/ An IPv4 address, followed by a forward <prefix>...
Page 941 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST EXTENDED PROTOCOL FILTER Table 28-6: IP protocol number and description (cont.) Protocol Number Protocol Description [RFC] Destination Options for IPv6 [RFC1883] EIGRP (Enhanced Interior Gateway Routing Protocol) OSPFIGP [RFC1583] Ethernet-within-IP Encapsulation / RFC3378 Encapsulation Header / RFC1241 IP Payload Compression Protocol / RFC2393 Virtual Router Redundancy Protocol / RFC3768...
Page 942 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST EXTENDED PROTOCOL FILTER Example 2 Use the following commands to add a new access-list filter entry at sequence position 5 in the access-list named my-list that will accept packets from source [adding to a list] address 10.10.1.1/24 to destination address 192.68.1.1/24: awplus# configure terminal...
Page 943 (ACL) C OFTWARE CCESS ONTROL OMMANDS TCP UDP ACCESS LIST EXTENDED FILTER (access-list extended TCP UDP filter) Overview Use this ACL filter to add a new TCP or UDP filter entry to the current extended access-list. If the sequence number is specified, the new filter is inserted at the specified location.
Page 944 (ACL) C OFTWARE CCESS ONTROL OMMANDS TCP UDP ACCESS LIST EXTENDED FILTER To insert a new entry with sequence number 5 of the access-list named my-list Example 2 that will accept UDP packets from 10.1.1.0/24 network to 192.168.1.0/24 [adding to a list] network on UDP port 80, use the commands: awplus# configure terminal...
Page 945: Access-List Standard (Named)
(ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST STANDARD NAMED access-list standard (named) Overview This command configures a standard named access-list that permits or denies packets from a specific source IP address. You can either create a standard named ACL together with an ACL filter entry in the Global Configuration mode, or you can use the IPv4 Standard ACL Configuration mode for sequenced ACL filter entry after first entering an access-list name.
Page 946 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST STANDARD NAMED Usage Use this command when configuring a standard named access-list for filtering IP software packets. You can either create access-lists from within this command, or you can enter access-list standard followed by only the name. Entering only the name moves you to the IPv4 Standard ACL Configuration mode for the selected access-list.
Page 947: Access-List (Standard Numbered)
(ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST STANDARD NUMBERED access-list (standard numbered) Overview This command configures a standard numbered access-list that permits or denies packets from a specific source IP address. You can either create a standard numbered ACL together with an ACL filter entry in the Global Configuration mode, or you can use the IPv4 Standard ACL Configuration mode for sequenced ACL filter entry after first entering an access-list number.
Page 948 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST STANDARD NUMBERED You can either create access-lists from within this command, or you can enter access-list followed by only the number. Entering only the number moves you to the IPv4 Standard ACL Configuration mode for the selected access-list. From there you can configure your access-lists by using the command (access-list standard numbered...
Page 949 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST STANDARD NAMED FILTER (access-list standard named filter) Overview This ACL filter adds a source IP address filter entry to a current named standard access-list. If the sequence number is specified, the new filter entry is inserted at the specified location.
Page 950 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST STANDARD NAMED FILTER Usage An ACL can be configured with multiple ACL filters using sequence numbers. If the sequence number is omitted, the next available multiple of 10 will be used as the sequence number for the new filter.
Page 951 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST STANDARD NUMBERED FILTER (access-list standard numbered filter) Overview This ACL filter adds a source IP address filter entry to a current standard numbered access-list. If a sequence number is specified, the new filter entry is inserted at the specified location.
Page 952 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST STANDARD NUMBERED FILTER Usage An ACL can be configured with multiple ACL filters using sequence numbers. If the sequence number is omitted, the next available multiple of 10 will be used as the sequence number for the new filter.
Page 953 (ACL) C OFTWARE CCESS ONTROL OMMANDS Overview Use this command to configure Denial-of-Service (DoS) features for a port. Six different DoS attacks can be detected: IP Options, Land, Ping-of-Death, Smurf, Synflood and Teardrop. When the attack is detected, three different actions are available: •...
Page 954 (ACL) C OFTWARE CCESS ONTROL OMMANDS Type of DoS attack Description ipoptions This type of attack occurs when an attacker sends packets containing bad IP options to a victim node. There are many different types of IP options attacks and this software does not try to distinguish between them.
Page 955 (ACL) C OFTWARE CCESS ONTROL OMMANDS To configure smurf DoS detection on port1.0.1, and shutdown the interface if Examples an attack is detected, use the commands: awplus# configure terminal awplus(config)# interface port1.0.1 awplus(config-if)# dos smurf broadcast 192.168.1.0 action shutdown To configure land DoS detection on port1.0.1, and shutdown the interface if an attack is detected, use the commands: awplus# configure terminal...
Page 956: Maximum-Access-List
(ACL) C OFTWARE CCESS ONTROL OMMANDS MAXIMUM ACCESS LIST maximum-access-list Overview Use this command to set the maximum number of filters that can be added to any access-list. These are access-lists within the ranges 1-199, 1300-1999 and 2000-2699, and named standard and extended access-lists. The no variant of this command removes the limit on the number of filters that can be added to a software access-list.
Page 957: Show Access-List (Ipv4 Software Acls)
(ACL) C OFTWARE CCESS ONTROL OMMANDS SHOW ACCESS LIST OFTWARE show access-list (IPv4 Software ACLs) Overview Use this command to display the specified access-list, or all access-lists if none have been specified. Note that only defined access-lists are displayed. An error message is displayed for an undefined access-list show access-list Syntax...
Page 958 (ACL) C OFTWARE CCESS ONTROL OMMANDS SHOW ACCESS LIST OFTWARE  Standard IP access-list 20 deny 192.168.10.0, wildcard bits 0.0.0.255 deny 192.168.12.0, wildcard bits 0.0.0.255 Note the following error message is displayed if you attempt to show an undefined access-list: awplus# show access-list 2 ...
Page 959: Show Dos Interface
(ACL) C OFTWARE CCESS ONTROL OMMANDS SHOW DOS INTERFACE show dos interface Overview Use this command to display the Denial-of-Service (DoS) features configured on a switch port interface from the command. See the command for descriptions of DoS attack types. show dos interface {<port-list>} Syntax Parameter...
Page 960 (ACL) C OFTWARE CCESS ONTROL OMMANDS SHOW DOS INTERFACE Figure 28-2: Example output from the show dos interface command after a synflood DoS attack awplus#show dos interface port1.0.1  DoS settings for interface port1.0.1 ----------------------------------------- Port status : Enabled ipoptions : Disabled...
Page 961 (ACL) C OFTWARE CCESS ONTROL OMMANDS SHOW DOS INTERFACE Table 29: Parameters in the show dos interface command output: (cont.) Type of DoS attack Description smurf Displays Enabled when the smurf parameter is configured command, plus the action (Shutdown port, with the Mirror port, or Trap port) and the number of instances of any smurf DoS attacks that have occurred on the interface.
Page 962: Show Ip Access-List
(ACL) C OFTWARE CCESS ONTROL OMMANDS SHOW IP ACCESS LIST show ip access-list Overview Use this command to display IP access-lists. show ip access-list Syntax [<1-99>|<100-199>|<1300-1999>|<2000-2699>|<access-list-name>] Parameter Description <1-99> IP standard access-list. <100-199> IP extended access-list. <1300-1999> IP standard access-list (expanded range). <2000-2699>...
Page 963: Vty Access-Class (Numbered)
(ACL) C OFTWARE CCESS ONTROL OMMANDS VTY ACCESS CLASS NUMBERED vty access-class (numbered) Overview For IPv4, use this command to set a standard numbered software access list to be the management ACL. This is then applied to all available VTY lines for controlling remote access by Telnet and SSH.
Page 964: Chapter 29: Ipv6 Software Access Control List (Acl) Commands
IPv6 Software Access Control List (ACL) Commands Introduction Overview This chapter provides an alphabetical reference for the IPv6 Software Access Control List (ACL) commands, and contains detailed command information and command examples about IPv6 software ACLs as applied to Routing and Multicasting, which are not applied to interfaces.
Page 965 (ACL) C OFTWARE CCESS ONTROL OMMANDS Table 29-1: IPv6 Software Access List Commands and Prompts Command Name Command Mode Prompt awplus# show ipv6 access-list (IPv6 Software Privileged Exec ACLs) awplus(config)# ipv6 access-list standard (named) Global Configuration awplus(config-ipv6-std-acl)# (ipv6 access-list standard filter) IPv6 Standard ACL Configuration Command List...
Page 966: Ipv6 Access-List Standard (Named)
(ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST STANDARD NAMED ipv6 access-list standard (named) Overview This command configures an IPv6 standard access-list for filtering frames that permit or deny IPv6 packets from a specific source IPv6 address. The no variant of this command removes a specified IPv6 standard access-list. Syntax ipv6 access-list standard <ipv6-acl-list-name>...
Page 967 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST STANDARD NAMED For backwards compatibility you can either create IPv6 standard access-lists from within this command, or you can enter ipv6 access-list standard followed by only the IPv6 standard access-list name. This latter (and preferred) method moves you to the (config-ipv6-std-acl) prompt for the selected IPv6 standard access-list, and from here you can configure the filters for this selected IPv6 standard access-list.
Page 968 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST STANDARD FILTER (ipv6 access-list standard filter) Overview Use this ACL filter to add a filter entry for an IPv6 source address and prefix length to the current standard IPv6 access-list. If a sequence number is specified, the new entry is inserted at the specified location.
Page 969 (ACL) C OFTWARE CCESS ONTROL OMMANDS ACCESS LIST STANDARD FILTER To remove the ACL filter entry that will deny any IPv6 packets from the standard IPv6 access-list named my-list, enter the commands: awplus# configure terminal awplus(config)# ipv6 access-list standard my-list awplus(config-ipv6-std-acl)# no deny any Alternately, to remove the ACL filter entry with sequence number 5 to the...
Page 970: Show Ipv6 Access-List (Ipv6 Software Acls)
(ACL) C OFTWARE CCESS ONTROL OMMANDS SHOW IPV ACCESS LIST OFTWARE show ipv6 access-list (IPv6 Software ACLs) Overview Use this command to display all configured IPv6 access-lists or the IPv6 access-list specified by name. show ipv6 access-list [<access-list-name>] Syntax show ipv6 access-list standard [<access-list-name>] Parameter Description <access-list-name>...
Page 971: Vty Ipv6 Access-Class (Named)
(ACL) C OFTWARE CCESS ONTROL OMMANDS VTY IPV ACCESS CLASS NAMED vty ipv6 access-class (named) Overview For IPv6, use this command to set a standard named software access list to be the management ACL. This is then applied to all available VTY lines for controlling remote access by Telnet and SSH.
Page 972: Chapter 30: Qos Commands
QoS Commands Introduction Overview This chapter provides an alphabetical reference for Quality of Service commands. QoS uses ACLs. For more information about ACLs, see the ACL Feature Overview and Configuration Guide. Command List • “class” on page 974 • “class-map” on page 975 •...
Page 973 OMMANDS • “mls qos map premark-dscp to” on page 996 • “no police” on page 998 • “police single-rate action” on page 999 • “police twin-rate action” on page 1001 • “policy-map” on page 1003 • “priority-queue” on page 1004 •...
Page 974: Class
OMMANDS CLASS class Overview Use this command to associate an existing class-map to a policy or policy-map (traffic classification), and to enter Policy Map Class Configuration mode to configure the class- map. Use the no variant of this command to delete an existing class-map. If your class-map does not exist, you can create it by using the class-map command.
Page 975: Class-Map
OMMANDS CLASS class-map Overview Use this command to create a class-map. Use the no variant of this command to delete the named class-map. Syntax class-map <name> no class-map <name> Parameter Description <name> Name of the class-map to be created. Mode Global Configuration This example creates a class-map called cmap1, use the commands: Example...
Page 976: Clear Mls Qos Interface Policer-Counters
OMMANDS CLEAR MLS QOS INTERFACE POLICER COUNTERS clear mls qos interface policer-counters Overview Resets an interface’s policer counters to zero. You can either clear a specific class-map, or you can clear all class-maps by not specifying a class map. clear mls qos interface <port> policer-counters [class-map Syntax <class-map>] Parameter...
Page 977: Default-Action
OMMANDS DEFAULT ACTION default-action Overview Sets the action for the default class-map belonging to a particular policy-map. The action for a non-default class-map depends on the action of any ACL that is applied to the policy-map. The default action can therefore be thought of as specifying the action that will be applied to any data that does not meet the criteria specified by the applied matching commands.
Page 978: Description (Qos Policy-Map)
OMMANDS DESCRIPTION POLICY description (QoS policy-map) Overview Adds a textual description of the policy-map. This can be up to 80 characters long. Use the no variant of this command to remove the current description from the policy-map. Syntax description <line> no description Parameter Description...
Page 979: Egress-Rate-Limit
OMMANDS EGRESS RATE LIMIT egress-rate-limit Overview Use this command to limit the amount of traffic that can be transmitted per second from this port. Use the no variant of this command to disable the limiting of traffic egressing on the interface. Syntax egress-rate-limit <rate-limit>...
Page 980: Match Access-Group
OMMANDS MATCH ACCESS GROUP match access-group Overview Use this command to apply an ACL to a class-map or VLAN. Use the no variant of this command to remove the match. Syntax match access-group {<hw-IP-ACL>|<hw-MAC-ACL>|<hw-named-ACL>} no match access-group {<hw-IP-ACL>|<hw-MAC-ACL>|<hw-named-ACL>} Parameter Description <hw-IP-ACL>...
Page 981 OMMANDS MATCH ACCESS GROUP To configure a class-map named “cmap3”, which matches traffic against access-list “hw_acl”, which allows IP traffic from any source to any destination, use the commands: awplus# configure terminal awplus(config)# access-list hardware hw_acl awplus(config-ip-hw-acl)# permit ip any any awplus(config)# class-map cmap3 awplus(config-cmap)#...
Page 982: Match Cos
OMMANDS MATCH COS match cos Overview Use this command to define a COS to match against incoming packets. Use the no variant of this command to remove CoS. Syntax match cos <0-7> no match cos Parameter Description <0-7> Specify the CoS value. Mode Class Map Configuration To set the class-map’s CoS to 4, use the commands:...
Page 983: Match Dscp
OMMANDS MATCH DSCP match dscp Overview Use this command to define the DSCP to match against incoming packets. Use the no variant of this command to remove a previously defined DSCP. Syntax match dscp <0-63> no match dscp Parameter Description <0-63>...
Page 984: Match Eth-Format Protocol
OMMANDS MATCH ETH FORMAT PROTOCOL match eth-format protocol Overview This command sets the Ethernet format and the protocol for a class-map to match Select one Layer 2 format and one Layer 3 protocol when you issue this command. Use the no variant of this command to remove the configured Ethernet format and protocol from a class-map.
Page 985 OMMANDS MATCH ETH FORMAT PROTOCOL Parameter Description netbeui Protocol Number F0 (enter the parameter name or its number). iso-clns-is Protocol Number FE (enter the parameter name or its number). xdot75-internet Protocol Number 0801(enter the parameter name or its number). nbs-internet Protocol Number 0802 (enter the parameter name or its number).
Page 986 OMMANDS MATCH ETH FORMAT PROTOCOL Parameter Description appletalk Protocol Number 809B (enter the parameter name or its number). ibm-sna Protocol Number 80D5 (enter the parameter name or its number). appletalk-aarp Protocol Number 80F3 (enter the parameter name or its number). snmp Protocol Number 814CV.
Page 987: Match Inner-Cos
OMMANDS MATCH INNER match inner-cos Overview Sets the Inner CoS for a class-map to match on. Use the no variant of this command to remove CoS. Syntax match inner-cos <0-7> no match inner-cos Parameter Description <0-7> Specify the Inner CoS value. Mode Class Map Configuration To set the class-map’s inner-cos to 4, use the commands:...
Page 988: Match Inner-Vlan
OMMANDS MATCH INNER VLAN match inner-vlan Overview Use this command to define the inner VLAN ID as match criteria. Use the no variant of this command to disable the VLAN ID used as match criteria. Syntax match inner-vlan <1-4094> no match inner-vlan Parameter Description <1-4094>...
Page 989: Match Ip-Precedence
OMMANDS MATCH IP PRECEDENCE match ip-precedence Overview Use this command to identify IP precedence values as match criteria. Use the no variant of this command to remove IP precedence values from a class-map. Syntax match ip-precedence <0-7> no match ip-precedence Parameter Description <0-7>...
Page 990: Match Mac-Type
OMMANDS MATCH MAC TYPE match mac-type Overview Use this command to set the MAC type for a class-map to match on. Use no variant of this command to remove the MAC type match entry. Syntax match mac-type {l2bcast|l2mcast|l2ucast} no match mac-type Parameter Description l2bcast...
Page 991: Match Tcp-Flags
OMMANDS MATCH TCP FLAGS match tcp-flags Overview Sets one or more TCP flags (control bits) for a class-map to match on. Use the no variant of this command to remove one or more TCP flags for a class-map to match on. Syntax match tcp-flags {[ack][fin][psh][rst][syn][urg]} no match tcp-flags {[ack][fin][psh][rst][syn][urg]}...
Page 992: Match Vlan
OMMANDS MATCH VLAN match vlan Overview Use this command to define the VLAN ID as match criteria. Use the no variant of this command to disable the VLAN ID used as match criteria. Syntax match vlan <1-4094> no match vlan Parameter Description <1-4094>...
Page 993: Mls Qos Cos
OMMANDS MLS QOS COS mls qos cos Overview This command assigns a CoS (Class of Service) user-priority value to untagged frames entering a specified interface. By default, all untagged frames are assigned a CoS value of 0. Use the no variant of this command to return the interface to the default CoS setting for untagged frames entering the interface.
Page 994: Mls Qos Enable
OMMANDS MLS QOS ENABLE mls qos enable Overview Use this command to globally enable QoS on the switch. Use the no variant of this command to globally disable QoS and remove all QoS configuration. The no variant of this command removes all class-maps, policy-maps, and policers that have been created.
Page 995: Mls Qos Map Cos-Queue To
OMMANDS MLS QOS MAP COS QUEUE TO mls qos map cos-queue to Overview Use this command to set the default CoS to egress queue mapping. This is the default queue mapping for packets that do not get assigned an egress queue via any other QoS functionality.
Page 996: Mls Qos Map Premark-Dscp To
OMMANDS MLS QOS MAP PREMARK DSCP TO mls qos map premark-dscp to Overview This command configures the premark-dscp map. It is used when traffic is classified by a class-map that has trust dscp configured. Based on a lookup DSCP, the map determines new QoS settings for the traffic. The no variant of this command resets the premark-dscp map to its defaults.
Page 997 OMMANDS MLS QOS MAP PREMARK DSCP TO To set the entry for DSCP 1 to use a new DSCP of 2, a new CoS of 3, and a new Example bandwidth class of yellow, use the command: awplus# configure terminal awplus(config)# mls qos map premark-dscp 1 to new-dscp 2 new-cos 3 new-bandwidth-class yellow...
Page 998: No Police
OMMANDS NO POLICE no police Overview Use this command to disable any policer previously configured on the class-map. no police Syntax Mode Policy Map Class Configuration Usage This command disables any policer previously configured on the class-map. Example To disable policing on a class-map use the command: awplus# configure terminal awplus(config)#...
Page 999: Police Single-Rate Action
OMMANDS POLICE SINGLE RATE ACTION police single-rate action Overview Configures a single-rate policer for a class-map. police single-rate <cir> <cbs> <ebs> action Syntax {drop-red|remark-transmit} Parameter Description <cir> Specify the Committed Information Rate (CIR) (1-40000000 kbps). <cbs> Specify the Committed Burst Size (CBS) (0-16777216 bytes). <ebs>...
Page 1000 OMMANDS POLICE SINGLE RATE ACTION traffic is dropped; if action is set to remark-transmit, then the red traffic has the action of the remark map applied to it, and is then transmitted. Example To configure a single rate meter measuring traffic of 10 Mbps that drops a sustained burst of traffic over this rate, use the commands: awplus# configure terminal...

This manual is also suitable for:

X230-28gp X230-28gt X230-18gp X230-10gt X230-18gt

Allied Telesis x230-10GP Command Reference Manual

Quick Links

Troubleshooting

Related Manuals for Allied Telesis x230-10GP

Summary of Contents for Allied Telesis x230-10GP