Mellanox Technologies Mellanox SX1018 Command Reference Manual
  1. Manuals
  2. Brands
  3. Mellanox Technologies Manuals
  4. Switch
  5. Mellanox SX1018
  6. Command reference manual

Mellanox Technologies Mellanox SX1018 Command Reference Manual

Ethernet managed blade switch
Hide thumbs Also See for Mellanox SX1018:
1
2
Table Of Contents
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
Table of Contents

Advertisement

Quick Links

See also: User Manual , Command Reference Manual
Mellanox MLNX-OS™
Command Reference Guide for SX1018HP
Ethernet Managed Blade Switch
Rev 1.6.2
Software Ver. 3.3.1000
www.mellanox.com

Advertisement

Table of Contents
loading

Related Manuals for Mellanox Technologies Mellanox SX1018

Summary of Contents for Mellanox Technologies Mellanox SX1018

  • Page 1 Mellanox MLNX-OS™ Command Reference Guide for SX1018HP Ethernet Managed Blade Switch Rev 1.6.2 Software Ver. 3.3.1000 www.mellanox.com...
  • Page 2 Rev 1.6.2 Document Number: 3454 Mellanox Technologies...

  • Page 3: Table Of Contents

    Rev 1.6.2 Table of Contents Table of Contents ..........3 Document Revision History .
  • Page 4 Rev 1.6.2 ipv6 enable ..........59 ping .
  • Page 5 Rev 1.6.2 configuration text generate .......106 configuration upload ........107 write .
  • Page 6 Rev 1.6.2 ldap scope ..........160 ldap ssl .
  • Page 7 Rev 1.6.2 web http..........208 web httpd.
  • Page 8 Rev 1.6.2 stats alarm <alarm-id> enable......258 stats alarm <alarm-id> event-repeat ......259 stats alarm <alarm-id>...
  • Page 9 Rev 1.6.2 show interfaces ethernet [<inf>] status..... .307 show interfaces ethernet [<inf>] transceiver ....308 module-type .
  • Page 10 Rev 1.6.2 show ip igmp snooping ........353 show ip igmp snooping groups .
  • Page 11 Rev 1.6.2 description..........397 mtu .

  • Page 12: Document Revision History

    Rev 1.6.2 Document Revision History Table 1 - Document Revision History - Ethernet Document Date Changes Revision Rev. 1.6.2 Jan. 2013 Added command “banner login-local” Added command “banner login-remote” Added “force” option to commands “dcb priority-flow-control mode on”, “flowcontrol”, and “mtu <size>”. Rev.

  • Page 13: About This Manual

    Rev 1.6.2 About this Manual This manual provides general information concerning MLNX-OS™ Command Line Interface. Intended Audience This manual is intended for network administrators who are responsible for configuring and man- aging Mellanox Technologies’ MLNX-OS Switch Platforms. Related Documentation The following table lists the documents referenced in this user’s manual. Table 2 - Reference Documents Document Name Description...

  • Page 14: Typographical Conventions

    Rev 1.6.2 Documentation Conventions Typographical Conventions Table 3 - Typographical Conventions Description Convention Example File names file.extension Directory names directory Commands and their parameters command param1 sx10xx-1 > show hosts Required item < > Optional item Mutually exclusive parameters {p1, p2, p3} or {p1 | p2 | Optional mutually exclusive parame- [p1 | p2 | p3] ters...
  • Page 15 Rev 1.6.2 Glossary Table 4 - Glossary Authentication, Authorization, and Accounting: • Authentication - verifies user credentials (username and password) • Authorization - grants or refuses privileges to a user/client for accessing specific services • Accounting - tracks network resources consumption by users Address Resolution Protocol.
  • Page 16 Rev 1.6.2 Table 4 - Glossary InfiniBand. LACP Link Aggregation Control Protocol (LACP) provides a method to control the bundling of several physical ports together to form a single logical channel. LACP allows a network device to negotiate an automatic bundling of links by sending LACP packets to the peer (directly connected device that also imple- ments LACP).
  • Page 17 Rev 1.6.2 Table 4 - Glossary SM (Subnet Manager) An entity that configures and manages the subnet, discovers the network topology, assign LIDs, determines the routing schemes and sets the routing tables. There is only one master SM and possible several slaves (Standby mode) at a given time.

  • Page 18: Chapter 1 Using The Command Line Interface

    Rev 1.6.2 Using the Command Line Interface This chapter explains how to use the command line interface (CLI) of MLNX-OS SwitchX®. 1.1 CLI Modes The CLI can be in one of three modes, and each mode makes available a certain group (or level) of commands for execution.

  • Page 19: 1.2 Syntax Conventions

    Rev 1.6.2 1.2 Syntax Conventions To help you identify the parts of a CLI command, this section uses conventions to show the syntax of commands. Table 6 - Syntax Conventions Syntax Convention Description Example < > Angled brackets Indicates a value/variable that <1...65535>...
  • Page 20 Rev 1.6.2 Configure CLI shell options enable Enter enable mode exit Log out of the CLI help View description of the interactive help system Negate or clear certain configuration options ping Send ICMP echo requests to a specified host show Display system configuration or statistics slogin Log into another system securely using ssh...

  • Page 21: 1.4 Prompt And Response Conventions

    Rev 1.6.2 1.4 Prompt and Response Conventions The prompt always begins with the hostname of the system. What follows depends on what com- mand mode the user is in. To demonstrate by example, and assuming the machine name is “switch-1”, the prompts for each of the modes are: switch [standalone: master] >...
  • Page 22 Rev 1.6.2 The following example performs the following: 1. Displays the current CLI session options. 2. Disables auto-logout. 3. Displays the new CLI session options (auto-logout is disabled). 4. Re-enables auto-logout (after 15 minutes). 5. Displays the final CLI session options (auto-logout is enabled). // 1.

  • Page 23: 1.7 Parameter Key

    Rev 1.6.2 1.7 Parameter Key This section is a key to the meaning and format of all of the angle-bracketed parameters in all the commands that are listed in this document. <domain> A domain name, e.g. “mellanox.com”. <hostname> A hostname, e.g. “switch-1”. <ifname>...

  • Page 24: Chapter 2 System Management

    Rev 1.6.2 System Management 2.1 Management Interfaces 2.1.1 Interface This chapter describes the commands should be used to configure and monitor the management interface. interface interface {mgmt0 | mgmt1 | lo} Enters a management interface context. Syntax Description mgmt0 Management port 0 (out of band). mgmt1 Management port 1 (out of band).

  • Page 25: Ip Address

    Rev 1.6.2 ip address ip address <IP address> <netmask> no ip address Sets the IP address and netmask of this interface. The no form of the command clears the IP address and netmask of this interface. Syntax Description IP address IPv4 address netmask Subnet mask of IP address...

  • Page 26: Alias

    Rev 1.6.2 alias alias <index> ip address < IP address> <netmask> no alias <index> Adds an additional IP address to the specified interface. The secondary address will appear in the output of “show interface” under the data of the primary interface along with the alias.
  • Page 27 Rev 1.6.2 Related Commands show interfaces <ifname> Note • If DHCP is enabled on the specified interface, then the DHCP IP assignment will hold until DHCP is disabled • More than one additional IP address can be added to the interface Mellanox Technologies...

  • Page 28: Mtu

    Rev 1.6.2 mtu <bytes> no mtu <bytes> Sets the Maximum Transmission Unit (MTU) of this interface. The no form of the command resets the MTU to its default. Syntax Description bytes The entry range is 68-1500. Default 1500 Modes/Context Config Interface Management History 3.1.0000 Role...

  • Page 29: Duplex

    Rev 1.6.2 duplex duplex <duplex> no duplex Sets the interface duplex. The no form of the command resets the duplex setting for this interface to its default value. Syntax Description duplex Sets the duplex mode of the interface. The following are the possible values: •...
  • Page 30 Rev 1.6.2 Related Commands show interfaces <ifname> Note • Setting the duplex to “auto” also sets the speed to “auto” • Setting the duplex to one of the settings “half” or “full” also sets the speed to a manual set- ting which is determined by querying the interface to find out its current auto-detected state Mellanox Technologies...

  • Page 31: Speed

    Rev 1.6.2 speed speed <speed> no speed Sets the interface speed. The no form of the command resets the speed setting for this interface to its default value. Syntax Description speed Sets the speed of the interface. The following are the possible values: •...
  • Page 32 Rev 1.6.2 Related Commands show interfaces <ifname> Note • Setting the speed to “auto” also sets the duplex to “auto” • Setting the speed to one of the manual settings (generally “10”, “100”, or “1000”) also sets the duplex to a manual setting which is determined by querying the interface to find out its current auto-detected state Mellanox Technologies...

  • Page 33: Dhcp

    Rev 1.6.2 dhcp dhcp [renew] no dhcp Enables DHCP on the specified interface. The no form of the command disables DHCP on the specified interface. Syntax Description renew Forces a renewal of the IP address. A restart on the DHCP client for the specified interface will be issued. Default Could be enabled or disabled (per part number) manufactured with 3.2.0500 Modes/Context...

  • Page 34: Shutdown

    Rev 1.6.2 shutdown shutdown no shutdown Disables the specified interface. The no form of the command enables the specified interface. Syntax Description Default no shutdown Modes/Context Config Interface Management History 3.1.0000 Role admin Example switch (config interface mgmt0) # no shutdown switch (config) # show interfaces mgmt0 configured Interface mgmt0 configuration Enabled:...

  • Page 35: Zeroconf

    Rev 1.6.2 zeroconf zeroconf no zeroconf Enables zeroconf on the specified interface. It randomly chooses a unique link-local IPv4 address from the 169.254.0.0/16 block. This command is an alternative to DHCP. The no form of the command disables the use of zeroconf on the specified interface. Syntax Description Default no zeroconf...

  • Page 36: Comment

    Rev 1.6.2 comment comment <comment> no comment Adds a comment for an interface. The no form of the command removes a comment for an interface. Syntax Description comment A free-form string that has no semantics other than being displayed when the interface records are listed. Default no comment Modes/Context...

  • Page 37: Ipv6 Enable

    Rev 1.6.2 ipv6 enable ipv6 enable no ipv6 enable Enables all IPv6 addressing for this interface. The no form of the command disables all IPv6 addressing for this interface. Syntax Description Default IPv6 addressing is disabled Modes/Context Config Interface Management History 3.1.0000 Role...
  • Page 38 Rev 1.6.2 Related Commands ipv6 address show interface <ifname> Note • The interface identifier is a 64-bit long modified EUI-64, which is based on the MAC address of the interface • If IPv6 is enabled on an interface, the system will automatically add a link-local address to the interface.

  • Page 39: Ipv6 Address

    Rev 1.6.2 ipv6 address ipv6 address {<IPv6 address/netmask> | autoconfig [default | privacy]} no ipv6 {<IPv6 address/netmask> | autoconfig [default | privacy]} Configures IPv6 address and netmask to this interface, static or autoconfig options are possible. The no form of the command removes the given IPv6 address and netmask or dis- ables the autoconfig options.
  • Page 40 Rev 1.6.2 Example switch (config interface mgmt0) # ipv6 fe80::202:c9ff:fe5e:a5d8/64 switch (config interface mgmt0) # show interfaces mgmt0 Interface mgmt0 state Admin up: Link up: IP address: 172.30.2.2 Netmask: 255.255.0.0 IPv6 enabled: Autoconf enabled: Autoconf route: Autoconf privacy: IPv6 addresses: IPv6 address: fe80::202:c9ff:fe5e:a5d8/64 Speed:...

  • Page 41: Show Interface

    Rev 1.6.2 show interface show interface {<ifname> [configured | brief]} Displays information about the specified interface, configuration status, and counters. Syntax Description ifname The interface name e.g., “mgmt0”, “mgmt1”, “lo” (loopback), etc. configured Displays the interface configuration. brief Displays a brief info on the interface configuration and status.
  • Page 42 Rev 1.6.2 Related Commands Note Mellanox Technologies...

  • Page 43: Hostname

    Rev 1.6.2 2.1.2 Hostname Resolution hostname hostname <hostname> no hostname Sets a static system hostname. The no form of the command clears the system hostname. Syntax Description hostname A free-form string. Default Default hostname Modes/Context Config History 3.1.0000 Role admin Example switch (config) # hostname my-switch-hostname my-switch-hostname (config) #...

  • Page 44: Ip Name-Server

    Rev 1.6.2 ip name-server ip name-server <IPv4/IPv6 address> no name-server <IPv4/IPv6 address> Sets the static name server. The no form of the command clears the name server. Syntax Description IPv4/v6 address IPv4 or IPv6 address. Default No server name Modes/Context Config History 3.1.0000...

  • Page 45: Ip Domain-List

    Rev 1.6.2 ip domain-list ip domain-list <domain-name> no ip domain-list <domain-name> Sets the static domain name. The no form of the command clears the domain name. Syntax Description domain-name The domain name in a string form. A domain name is an identification string that defines a realm of administrative autonomy, authority, or control in the Internet.

  • Page 46: Ip/Ipv6 Host

    Rev 1.6.2 ip/ipv6 host {ip | ipv6} host <hostname> <IP Address> no {ip | ipv6} host <hostname> <IP Address> Configures the static hostname IPv4 or IPv6 address mappings. The no form of the command clears the static mapping. Syntax Description hostname The hostname in a string form.

  • Page 47: Ip/Ipv6 Map-Hostname

    Rev 1.6.2 ip/ipv6 map-hostname {ip |ipv6} map-hostname no {ip | ipv6} map-hostname Maps between the currently-configured hostname and the loopback address 127.0.0.1. The no form of the command clears the mapping. Syntax Description Default IPv4 mapping is enabled by default IPv6 mapping is disabled by default Modes/Context Config...

  • Page 48: Show Hosts

    Rev 1.6.2 show hosts show hosts Displays hostname, DNS configuration, and static host mappings. Syntax Description Default Modes/Context Any Command Mode History 3.1.0000 Role admin Example switch (config) # show hosts Hostname: my-host-name Name server: 9.9.9.9 (configured) Name server: 10.211.0.121 (dynamic) Name server: 172.30.0.126 (dynamic) Name server: 10.4.0.135 (dynamic) Domain name: mydomain.com (configured)
  • Page 49 Rev 1.6.2 Syntax Description network-prefix IPv4 or IPv6 network prefix. netmask IPv4 netmask formats are: • • 255.255.255.0 IPv6 netmask format is: • /48 (as a part of the network prefix) nexthop-address The IPv4 or IPv6 address of the next hope router for this route.

  • Page 50: Ipv6 Default-Gateway

    Rev 1.6.2 ipv6 default-gateway ipv6 default-gateway {<ip-address> | <ifname>} no ipv6 default-gateway Sets a static default gateway. The no form of the command deletes the default gateway. Syntax Description ip address The default gateway IP address (IPv4 or IPv6). ifname The interface name (e.g., mgmt0, mgmt1).

  • Page 51: Show Ip/Ipv6 Route

    Rev 1.6.2 show ip/ipv6 route show {ip | ipv6} route [static] Displays the routing table in the system. Syntax Description static Filters the table with the static route entries. Default Modes/Context Any Command Mode History 3.1.0000 Role admin Example switch (config) # show ip route Destination Mask Gateway...

  • Page 52: Show Ip/Ipv6 Default-Gateway

    Rev 1.6.2 show ip/ipv6 default-gateway show {ip | ipv6} default-gateway [static] Displays the default gateway. Syntax Description static Displays the static configuration of the default gateway. Default Modes/Context Any Command Mode History 3.1.0000 Role admin Example switch (config) # ip default-gateway 10.10.10.10 switch (config) # show ip default-gateway Active default gateways: 172.30.0.1 (interface: mgmt0)
  • Page 53 Rev 1.6.2 Example switch (config interface mgmt0) #ip arp 20.20.20.20 aa:aa:aa:aa:aa:aa switch (config interface mgmt0) # show ip arp ARP Timeout: 1500 Total number of entries: 6 Address Type MAC Address Interface 10.209.1.103 Dynamic 00:02:C9:11:A1:78 mgmt0 10.209.1.168 Dynamic 00:02:C9:5E:C3:28 mgmt0 10.209.1.104 Dynamic 00:02:C9:11:A1:E6...

  • Page 54: Show Ip Arp

    Rev 1.6.2 show ip arp show ip arp [count] Shows the ARP table Syntax Description Default Modes/Context Any Command Mode History 3.2.0500 Role admin Example switch (config) # show ip arp ARP Timeout: 1500 Total number of entries: 9 Address Type MAC Address Interface...

  • Page 55: Ipv6 Neighbor

    Rev 1.6.2 ipv6 neighbor ipv6 neighbor <IPv6 address> <ifname> <MAC address> no ipv6 neighbor <IPv6 address> <ifname> <MAC address> Adds a static neighbor entry. The no form of the command deletes the static entry. Syntax Description IPv6 address The IPv6 address. ifname The management interface (i.e.

  • Page 56: Clear Ipv6 Neighbors

    Rev 1.6.2 clear ipv6 neighbors clear ipv6 neighbors Clears the dynamic neighbors cache. Syntax Description Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # clear ipv6 neighbors switch (config) # Related Commands ipv6 neighbor show ipv6 neighbor Note •...

  • Page 57: Show Ipv6 Neighbors

    Rev 1.6.2 show ipv6 neighbors show ipv6 neighbors [static] Displays the Neighbor Discovery Protocol (NDP) table. Syntax Description static Filters only the table of the static entries. Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # show ipv6 neighbors IPv6 Address Age MAC Address State...
  • Page 58 Rev 1.6.2 Syntax Description yield-to-static| Does not allow you to install a default gateway from DHCP if there is already a statically configured one. hostname Specifies the hostname to be sent during DHCP client negotiation if send-hostname is enabled. primary-intf <ifname> Sets the interface from which a non-interface-specific configuration (resolver and routes) will be accepted via DHCP.

  • Page 59: Show Ip Dhcp

    Rev 1.6.2 show ip dhcp show ip dhcp Displays the DHCP configuration and status. Syntax Description Default Modes/Context Any Command Mode History 3.1.0000 Role admin Example switch (config) # show ip dhcp DHCP primary interface: Configured: mgmt0 Active: mgmt0 DHCP: yield default gateway to static configuration: yes DHCP Client Options: Send Hostname: Client Hostname:...

  • Page 60: Ip Diagnostic Tools

    Rev 1.6.2 Example switch (config) # ipv6 enable switch (config) # show ipv6 IPv6 summary IPv6 supported: IPv6 admin enabled: IPv6 interface count: switch (config) # Related Commands ipv6 default-gateway ipv6 host ipv6 map-hostname ipv6 neighbor ipv6 route show ipv6 show ipv6 default-gateway show ipv6 route Note...

  • Page 61: Ping

    Rev 1.6.2 ping ping [-LRUbdfnqrvVaA] [-c count] [-i interval] [-w deadline] [-p pattern] [-s packetsize] [-t ttl] [-I interface or address] [-M mtu discovery hint] [-S sndbuf] [- T timestamp option ] [-Q tos ] [hop1 ...] destination Sends ICMP echo requests to a specified host. Syntax Description Linux Ping options http://linux.about.com/od/commands/l/...

  • Page 62: Traceroute

    Rev 1.6.2 traceroute traceroute [-46dFITUnrAV] [-f first_ttl] [-g gate,...] [-i device] [-m max_ttl] [-N squeries] [-p port] [-t tos] [-l flow_label] [-w waittime] [-q nqueries] [-s src_addr] [-z sendwait] host [packetlen] Traces the route packets take to a destination. Mellanox Technologies...
  • Page 63 Rev 1.6.2 Syntax Description Uses IPv4. Uses IPv6. Enables socket level debugging. Sets DF (do not fragment bit) on. Uses ICMP ECHO for tracerouting. Uses TCP SYN for tracerouting. Uses UDP datagram (default) for tracerouting. Does not resolve IP addresses to their domain names. Bypasses the normal routing and send directly to a host on an attached network.
  • Page 64 Rev 1.6.2 Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # traceroute 192.168.10.70 traceroute to 192.168.10.70 (192.168.10.70), 30 hops max, 40 byte pack- 1 172.30.0.1 (172.30.0.1) 3.632 ms 2.849 ms 3.544 ms 2 10.222.128.46 (10.222.128.46) 3.176 ms 3.289 ms 3.656 ms 3 10.158.128.30 (10.158.128.30) 15.331 ms 15.819 ms 16.388 ms 4 10.158.128.65 (10.158.128.65) 20.468 ms 7.893 ms 12.27 ms 5 10.7.34.115 (10.7.34.115) 16.405 ms 11.985 ms 12.264 ms...

  • Page 65: Tcpdump

    Rev 1.6.2 tcpdump tcpdump [-aAdDeflLnNOpqRStuUvxX] [-c count] [ -C file_size ] [ -E algo:secret ] [ -F file ] [ -i interface ] [ -M secret ] [ -r file ] [ -s snaplen ] [ -T type ] [ -w file ] [ -W filecount ] [ -y datalinktype ] [ -Z user ] [ expression ] Invokes standard binary, passing command line parameters straight through.

  • Page 66: Clear Counters

    Rev 1.6.2 clear counters clear counters [all | interface <type> <number>] Clears switch counters. Syntax Description Clears all switch counters. type A specific interface type (i.e. Ethernet, port-channel, Pkey interface, VLAN interface). number The interface number. Default Modes/Context Config interface ethernet Config Interface Port Channel History 3.2.3000...
  • Page 67 Rev 1.6.2 Syntax Description delete Uninstalls an existing license key. Note that this has the same effect as the “no license install”, except that you specify the license by its ID instead of by repeating the license key. install Installs a new license key. If the key is invalid (i.e. it could never have been a valid license), an error mes- sage is printed and it is not added.

  • Page 68: Show Licenses

    Rev 1.6.2 show licenses show licenses Displays a list of all installed licenses. For each license, the following is displayed: • a unique ID which is a small integer • the text of the license key as it was added •...

  • Page 69: 2.3 Ntp, Clock & Time Zones

    Rev 1.6.2 2.3 NTP, Clock & Time Zones clock set clock set <hh:mm:ss> [<yyyy/mm/dd>] Sets the time and date. Syntax Description hh:mm:ss Time. yyyy/mm/dd Date. Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # clock set 23:23:23 2010/08/19 switch (config) # show clock Time: 23:23:26...

  • Page 70: Clock Timezone

    Rev 1.6.2 clock timezone clock timezone [<zone word> [<zone word> [<zone word>] [<zone word>]]] Sets the system time zone. The time zone may be specified in one of three ways: • A nearby city whose time zone rules to follow. The system has a large list of cities which can be displayed by the help and completion system.

  • Page 71: Ntp

    Rev 1.6.2 ntp {disable | enable | {peer | server} <IP address> [version <number> | disable]} no ntp {disable | enable | {peer | server} <IP address> [disable]} Configures NTP. The no form of the command negates NTP options. Syntax Description disable Disables NTP.

  • Page 72: Ntpdate

    Rev 1.6.2 ntpdate ntpdate <IP address> Sets the system clock using the specified SNTP server. Syntax Description IP address Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # ntpdate 192.168.10.10 26 Feb 17:25:40 ntpdate[15206]: adjust time server 192.168.10.10 offset -0.000092 sec switch (config) # Related Commands...

  • Page 73: Show Clock

    Rev 1.6.2 show clock show clock Displays the current system time, date and time zone. Syntax Description Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # show clock Time: 04:21:44‘ Date: 2012/02/26 Time zone: America North United_States Other New_York switch (config) # Related Commands Note...

  • Page 74: Show Ntp

    Rev 1.6.2 show ntp show ntp Displays the current NTP settings. Syntax Description Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # show ntp NTP is enabled. Clock is unsynchronized. No NTP peers or servers configured. switch (config) # Related Commands Note Mellanox Technologies...

  • Page 75: 2.4 Software Management

    Rev 1.6.2 2.4 Software Management This chapter displays all the relevant commands used to manage the system software image. image boot image boot {location <location ID> | next} Specifies the default location where the system should be booted from. Syntax Description location ID Specifies the default destination location.

  • Page 76: Boot Next

    Rev 1.6.2 boot next boot next fallback-reboot enable no boot next fallback-reboot enable Sets the default setting for next boot. Normally, if the system fails to apply the config- uration on startup (after attempting upgrades or downgrades, as appropriate), it will reboot to the other partition as a fallback.

  • Page 77: Image Default-Chip-Fw

    Rev 1.6.2 image default-chip-fw image default-chip-fw <file name> Sets the default firmware package to be installed. Syntax Description filename Specifies the firmware filename. Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # image default-chip-fw image-SX_PPC_M460EX-ppc-m460ex- 20120122-084759.img switch (config) # Related Commands image install-chip fw show images...

  • Page 78: Image Delete

    Rev 1.6.2 image delete image delete <image name> Deletes the specified image file. Syntax Description image name Specifies the image name. Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # image delete image-MLXNX-OS-201140526-010145.img switch (config) # Related Commands show images Note Mellanox Technologies...

  • Page 79: Image Fetch

    Rev 1.6.2 image fetch image fetch <URL> [<filename>] Downloads an image from the specified URL or via SCP. Syntax Description HTTP, HTTPS, FTP, TFTP, SCP and SFTP are sup- ported. Example: scp://username[:password]@host- name/path/filename. filename Specifies a filename for this image to be stored as locally.

  • Page 80: Image Install

    Rev 1.6.2 image install image install <image filename> [location <location ID>] | [progress <prog- options>] [verify <ver-options>] Installs the specified image file. Syntax Description image filename Specifies the image name. location ID Specifies the image destination location. prog-options • “no-track” overrides CLI default and does not track the installation progress •...

  • Page 81: Image Move

    Rev 1.6.2 image move image move <src image name> <dest image name> Renames the specified image file. Syntax Description src image name Specifies the old image name. dest image name Specifies the new image name. Default Modes/Context Config History 3.1.0000 Role admin Example...

  • Page 82: Image Options

    Rev 1.6.2 image options image options require-sig no image options require-sig Requires from all the installed images a valid signature. The no form of the command does not require a signature. However if one is present, it must be valid. Syntax Description require-sig Requires images to be signed by a trusted signature.

  • Page 83: Show Bootvar

    Rev 1.6.2 show bootvar show bootvar Displays the installed system images and the boot parameters. Syntax Description Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # show bootvar Installed images: Partition 1: SX_PPC_M460EX 3.0.0000-dev-HA 2012-01-22 08:47:59 ppc Last dobincp: 2012/01/23 14:54:23 Partition 2: SX_PPC_M460EX 3.0.0000-dev-HA 2012-01-18 09:52:41 ppc Last dobincp: 2012/01/19 16:48:23...

  • Page 84: Show Images

    Rev 1.6.2 show images show image Displays information about the system images and boot parameters. Syntax Description Default Modes/Context Any Command Mode History 3.1.0000 Role admin Example switch (config) # show images Images available to be installed: image-SX_PPC_M460EX-ppc-m460ex-20120122-084759.img SX_PPC_M460EX 3.0.0000-dev-HA 2012-01-22 08:47:59 ppc Installed images: Partition 1: SX_PPC_M460EX 3.0.0000-dev-HA 2012-01-22 08:47:59 ppc...

  • Page 85: File Management

    Rev 1.6.2 File Management 2.5.1 File Transfer ftp-server enable ftp-server enable no ftp-server enable Enables the FTP server. The no form of the command disables the FTP server. Syntax Description Default The FTP server is disabled Modes/Context Config History 3.1.0000 Role admin Example...

  • Page 86: Show Ftp-Server

    Rev 1.6.2 show ftp-server show ftp-server Displays FTP server settings. Syntax Description Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # show ftp-server FTP server enabled: switch (config) # Related Commands ftp-server enable Note 2.5.2 File System debug generate dump debug generate dump Generates a debug dump.

  • Page 87: File Debug-Dump

    Rev 1.6.2 file debug-dump file debug-dump {delete <filename> | email <filename> | upload {<filename> | <URL>}} Manipulates debug dump files. Syntax Description delete <filename> Deletes a debug dump file. email <filename> Emails a debug dump file to pre-configured recipients for “informational events”, regardless of whether they have requested to receive “detailed”...

  • Page 88: File Stats

    Rev 1.6.2 file stats file stats {delete <filename> | move {<source filename> | <destination filename>} | upload <filename> <URL>} Manipulates statistics report files. Syntax Description delete <filename> Deletes a stats report file. move <source filename> Renames a stats report file. <destination filename>...

  • Page 89: File Tcpdump

    Rev 1.6.2 file tcpdump file tcpdump {delete <filename> | upload <filename> <URL>} Manipulates tcpdump output files. Syntax Description delete <filename> Deletes the specified tcpdump output file. upload <filename> Uploads the specified tcpdump output file to the speci- <URL> fied URL. URL - HTTP, HTTPS, FTP, TFTP, SCP and SFTP are supported.

  • Page 90: Show Files Debug-Dump

    Rev 1.6.2 show files debug-dump show files debug-dump [<filename>] Displays a list of debug dump files. Syntax Description filename Displays a summary of the contents of a particular debug dump file. Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # show files debug-dump sysdump-switch-112104-20114052- 091707.tgz System information: Hostname: switch-112104...

  • Page 91: Show Files Stats

    Rev 1.6.2 show files stats show files stats <filename> Displays a list of statistics report files. Syntax Description filename Display the contents of a particular statistics report file. Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # show files stats memory-201140524-111745.csv switch (config) # Related Commands...

  • Page 92: Show Files System

    Rev 1.6.2 show files system show files system [detail] Displays usage information of the file systems on the system. Syntax Description detail Displays more detailed information on file-system. Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # show files system Statistics for /config filesystem: Bytes Total 100 MB...

  • Page 93: Show Files Tcpdump

    Rev 1.6.2 show files tcpdump show files tcpdump Displays a list of statistics report files. Syntax Description Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # show files stats test dump3 switch (config) # Related Commands file tcpdump tcpdump Note Mellanox Technologies...

  • Page 94: Configuration Audit

    Rev 1.6.2 2.5.3 Configuration File configuration audit configuration audit max-changes <number> Chooses settings related to configuration change auditing. Syntax Description max-changes Set maximum number of audit messages to log per change. Default 1000 Modes/Context Config History 3.1.0000 Role admin Example switch (config) # configuration audit max-changes 100 switch (config) # show configuration audit Maximum number of changes to log: 100...

  • Page 95: Configuration Copy

    Rev 1.6.2 configuration copy configuration copy <source name> <dest name> Copies a configuration file. Syntax Description source name Name of source file. dest name Name of destination file. If the file of specified file- name does not exist a new file will be created with said filename.

  • Page 96: Configuration Delete

    Rev 1.6.2 configuration delete configuration delete <filename> Deletes a configuration file. Syntax Description filename Name of file to delete. Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # show configuration files example initial initial.bak initial.prev switch (config) # configuration delete example switch (config) # show configuration files initial initial.bak...

  • Page 97: Configuration Fetch

    Rev 1.6.2 configuration fetch configuration fetch <URL or scp or sftp://username:password@ hostname[:port]/path/filename> [<name>] Downloads a configuration file from a remote host. Syntax Description name The configuration file name. Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # configuration fetch scp://root:password@ 192.168.10.125/tmp/conf1 switch (config) # Related Commands...

  • Page 98: Configuration Jump-Start

    Rev 1.6.2 configuration jump-start configuration jump-start Runs the initial-configuration wizard. Syntax Description Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # configuration jump-start Mellanox configuration wizard Step 1: Hostname? [switch-3cc29c] Step 2: Use DHCP on mgmt0 interface? y Step 3: Admin password (Enter to leave unchanged)? You have entered the following information: 1.

  • Page 99: Configuration Merge

    Rev 1.6.2 configuration merge configuration merge <filename> Merges the “shared configuration” from one configuration file into the running con- figuration. Syntax Description filename Name of file from which to merge settings. Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # configuration merge new-config-file switch (config) # Related Commands Note...

  • Page 100: Configuration Move

    Rev 1.6.2 configuration move configuration move <source name> <dest name> Moves a configuration file. Syntax Description source name Old name of file to move. dest name New name for moved file. Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # show configuration files example1 initial initial.bak...

  • Page 101: Configuration New

    Rev 1.6.2 configuration new configuration new <filename> [factory [keep-basic] [keep-connect]] Creates a new configuration file under the specified name. The parameters specify what configuration, if any, to carry forward from the current running configuration. Syntax Description filename Names for new configuration file. factory Creates new file with only factory defaults.

  • Page 102: Configuration Revert

    Rev 1.6.2 configuration revert configuration revert {factory [keep-basic | keep-connect]| saved} Reverts the system configuration to a previous state. Syntax Description factory Reverts running and saved configurations to factory defaults. If no parameter is set the default is to keep licenses and host keys.

  • Page 103: Configuration Switch-To

    Rev 1.6.2 configuration switch-to configuration switch-to <filename> Loads the configuration from the specified file and makes it the active configuration file. Syntax Description Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # show configuration files initial (active) newcon initial.prev initial.bak switch (config) # configuration switch-to newcon...

  • Page 104: Configuration Text Fetch

    Rev 1.6.2 configuration text fetch configuration text fetch <URL> [apply [discard | fail-continue | filename | over- write | verbose] | filename <filename> | overwrite [apply | filename <filename>]] Fetches a text configuration file (list of CLI commands) from a specified URL. Syntax Description apply Applies the file to the running configuration (i.e.

  • Page 105: Configuration Text File

    Rev 1.6.2 configuration text file configuration text file <filename> {apply [fail-continue] [verbose] | delete | rename <filename> | upload < URL>} Performs operations on text-based configuration files. Syntax Description filename <file> Specifies the filename. apply Applies the configuration on the system. fail-continue Continues execution of the commands even if some commands fail.

  • Page 106: Configuration Text Generate

    Rev 1.6.2 configuration text generate configuration text generate {active {running | saved} | file <filename> } {save <filename> | upload <URL>} Generates a new text-based configuration file from this system's configuration. Syntax Description active Generates from currently active configuration. running Uses running configuration.

  • Page 107: Configuration Upload

    Rev 1.6.2 configuration upload configuration upload {active | <name>} <URL or scp or sftp://username:pass- word@hostname[:port]/path/filename> Uploads a configuration file to a remote host. Syntax Description active Upload the active configuration file. Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # configuration upload active scp://root:password@ 192.168.10.125/tmp/conf1 switch (config) # Related Commands...

  • Page 108: Write

    Rev 1.6.2 write write {memory [local] | terminal} Saves or displays the running configuration. Syntax Description memory Saves running configuration to the active configuration file. It is the same as “configuration write”. local Saves the running configuration only on the local node. It is the same as “configuration write local”.

  • Page 109: Show Configuration

    Rev 1.6.2 show configuration show configuration [audit | | files [<filename>] | full | running [full] | text files] Displays a list of CLI commands that will bring the state of a fresh system up to match the current persistent state of this system. Syntax Description audit Displays settings for configuration change auditing.

  • Page 110: Show Running-Config

    Rev 1.6.2 show running-config show running-config [full] Displays commands to recreate current running configuration. Syntax Description full Does not exclude commands that set default values. Default Modes/Context Config History 3.1.0000 Role monitor/admin Example switch (config) # show running-config ## Running database "initial" ## Generated at 2012/02/28 14:59:02 +0000 ## Hostname: switch-5ea5d8 ## License keys...

  • Page 111: 2.6 Local And Remote Logging

    Rev 1.6.2 2.6 Local and Remote Logging logging local logging local <log-level> no logging local Sets the minimum severity of log messages to be saved in log files on local persistent storage. The no form disables the ability to log messages locally and remotely. Syntax Description log-level •...

  • Page 112: Logging Local Override

    Rev 1.6.2 logging local override logging local override [class <class> priority <log-level>] no logging local override [class <class> priority <log-level>] Enables class-specific overrides to the local log level. The no form of the command disables all class-specific overrides to the local log level without deleting them from the configuration, but disables them so that the log- ging level for all classes is determined solely by the global setting.
  • Page 113 Rev 1.6.2 Example switch (config) # logging local override class mgmt-front priority warning switch (config) # show logging Local logging level: info Override for class mgmt-front: warning Default remote logging level: notice No remote syslog servers configured. Allow receiving of messages from remote hosts: no Number of archived log files to keep: 10 Log rotation size threshold: 5.000% of partition (43 megabytes) Log format: standard...

  • Page 114: Logging

    Rev 1.6.2 logging <syslog IP address> logging <syslog IP address> [trap {<log-level> | override class <class> priority <log-level>}] no logging <syslog IP address> [trap {<log-level> | override class <class> prior- ity <log-level>}] Enables (by setting the IP address) sending logging messages, with ability to filter the logging messages according to their classes.
  • Page 115 Rev 1.6.2 Example switch (config) # logging local info switch (config) # show logging Local logging level: info Default remote logging level: notice No remote syslog servers configured. Allow receiving of messages from remote hosts: no Number of archived log files to keep: 10 Log rotation size threshold: 5.000% of partition (43 megabytes) Log format: standard Subsecond timestamp field: disabled...

  • Page 116: Logging Receive

    Rev 1.6.2 logging receive logging receive no logging receive Enables receiving logging messages from a remote host. The no form of the command disables the option of receiving logging messages from a remote host. Syntax Description Default Receiving logging is disabled Modes/Context Config History...

  • Page 117: Logging Format

    Rev 1.6.2 logging format logging format {standard | welf [fw-name <hostname>]} no logging format {standard | welf [fw-name <hostname>]} Sets the format of the logging messages. The no form of the command resets the format to its default. Syntax Description standard Standard format.

  • Page 118: Logging Fields

    Rev 1.6.2 logging fields logging fields seconds {enable | fractional-digits <f-digit> | whole-digits <w- digit>} no logging fields seconds {enable | fractional-digits <f-digit> | whole-digits <w- digit>} Specifies whether to include an additional field in each log message that shows the number of seconds since the Epoch or not.
  • Page 119 Rev 1.6.2 Related Commands show logging Note This is independent of the standard syslog date and time at the beginning of each message in the format of “July 15 18:00:00”. Aside from indicating the year at full precision, its main purpose is to provide subsecond precision. Mellanox Technologies...

  • Page 120: Logging Level

    Rev 1.6.2 logging level logging level {cli commands <log-level> | audit mgmt <log-level>} Sets the severity level at which CLI commands or the management audit message that the user executes are logged. This includes auditing of both configuration changes and actions. Syntax Description cli commands Sets the severity level at which CLI commands which...

  • Page 121: Logging Files Delete

    Rev 1.6.2 logging files delete logging files delete {current | oldest [<number of files>]} Deletes the current or oldest log files. Syntax Description current Deletes current log file. oldest Deletes oldest log file. number of files Sets the number of files to be deleted. Default CLI commands and audit message are set to notice logging level Modes/Context...

  • Page 122: Logging Files Rotation

    Rev 1.6.2 logging files rotation logging files rotation {criteria { frequency <freq> | size <size-mb>| size-pct <size- percentage>} | force | max-number <number-of-files>} Sets the rotation criteria of the logging files. Syntax Description freq Sets rotation criteria according to time. Possible options are: •...
  • Page 123 Rev 1.6.2 Example switch (config) # logging files rotation criteria size-pct 6 switch (config) # show logging Local logging level: info Override for class mgmt-front: warning Default remote logging level: notice No remote syslog servers configured. Allow receiving of messages from remote hosts: no Number of archived log files to keep: 10 Log rotation size threshold: 6.000% of partition (51.60 megabytes) Log format: standard...

  • Page 124: Logging Files Upload

    Rev 1.6.2 logging files upload logging files upload {current | <file-number>} <url> Uploads a log file to a remote host. Syntax Description current The current log file. The current log file will have the name “messages” if you do not specify a new name for it in the upload URL.

  • Page 125: Show Logging

    Rev 1.6.2 show logging show logging Displays the logging configurations. Syntax Description Default Modes/Context Any Command Mode History 3.1.0000 Role admin Example switch (config) # show logging Local logging level: info Override for class mgmt-front: warning Default remote logging level: notice No remote syslog servers configured.

  • Page 126: Show Log

    Rev 1.6.2 show log show log [continues | files [<file-number>] ] [ [not] matching <reg-exp>] Displays the log file with optional filter criteria. Syntax Description continues Displays the last few lines of the current log file and then continues to display new lines as they come in until the user hits Ctrl+C, similar to LINUX “tail”...

  • Page 127: 2.7 Maintenance Tools

    Rev 1.6.2 Related Commands logging fields logging files rotation logging level logging local logging receive logging <syslog IP address> show logging Note 2.7 Maintenance Tools reload reload [force | halt [noconfirm] | noconfirm] Reboots or shuts down the system. Syntax Description force Forces an immediate reboot of the system even if the system is busy.

  • Page 128: Reset Factory

    Rev 1.6.2 reset factory reset factory [keep-all-config | keep-basic | only-config] [halt] Clears the system and resets it entirely to its factory state. Syntax Description keep-all-cofig Preserves everything in the running configuration file. The user will be prompted for confirmation before hon- oring this command, unless confirmation is disabled with the command: “no cli default prompt confirm- reset”.
  • Page 129 Rev 1.6.2 Syntax Description username Specifies a username and creates a user account. New users are created initially with admin privileges but is disabled. User capabilities: • admin - full administrative capabilities • monitor - read only capabilities and actions, can not change the running configuration disable [login | password] •...

  • Page 130: Show Usernames

    Rev 1.6.2 show usernames show usernames Displays list of users and their capabilities. Syntax Description Default Modes/Context Any Command Mode History 3.1.0000 Role admin Example switch (config) # show usernames USERNAME FULL NAME CAPABILITY ACCOUNT STATUS USERID System Administrator admin Password set admin System Administrator...

  • Page 131: Show Users

    Rev 1.6.2 show users show users [history] Displays logged in users and related information such as idle time and what host they have connected from. Syntax Description history Displays current and historical sessions. Default Modes/Context Any Command Mode History 3.1.0000 Role admin Example...

  • Page 132: Show Whoami

    Rev 1.6.2 show whoami show whoami Displays username and capabilities of user currently logged in. Syntax Description Default Modes/Context Any Command Mode History 3.1.0000 Role admin Example switch (config) # show whoami Current user: admin Capabilities: admin switch (config) # Related Commands username show usernames...
  • Page 133 Rev 1.6.2 Example switch (config) # aaa accounting changes default stop-only tacacs+ switch (config) # show aaa AAA authorization: Default User: admin Map Order: local-only Authentication method(s): local radius tacacs+ ldap Accounting method(s): tacacs+ switch (config) # Related Commands show aaa Note •...

  • Page 134: Aaa Authentication Login

    Rev 1.6.2 aaa authentication login aaa authentication login default <auth method> [<auth method> [<auth method> [<auth method> [<auth method>]]]] no aaa authentication login Sets a sequence of authentication methods. Up to four methods can be configured. The no form of the command resets the configuration to its default. Syntax Description auth-method •...

  • Page 135: Aaa Authentication Attempts Track Enable

    Rev 1.6.2 aaa authentication attempts track enable aaa authentication attempts track enable no aaa authentication attempts track enable Enables tracking of authentication failures. The no form of the command disables tracking of authentication failures. Syntax Description Default Modes/Context Config History 3.2.3000 Role admin...

  • Page 136: Aaa Authentication Attempts Lockout

    Rev 1.6.2 aaa authentication attempts lockout aaa authentication attempts lockout {enable | lock-time | max-fail | unlock-time} no aaa authentication attempts lockout {enable | lock-time | max-fail | unlock- time} Configures lockout of accounts based on failed authentication attempts. The no form of the command clears configuration for lockout of accounts based on failed authentication attempts.
  • Page 137 Rev 1.6.2 Syntax Description enable Enables locking out of user accounts based on authenti- cation failures. This both suspends enforcement of any existing lock- outs, and prevents any new lockouts from being recorded. If lockouts are later re-enabled, any lockouts that had been recorded previously resume being enforced;...
  • Page 138 Rev 1.6.2 Default Modes/Context Config History 3.2.3000 Role admin Example switch (config) # aaa authentication attempts lockout enable Related Commands Note Mellanox Technologies...

  • Page 139: Aaa Authentication Attempts Class-Override

    Rev 1.6.2 aaa authentication attempts class-override aaa authentication attempts class-override {admin [no-lockout] | unknown {no- track | hash-username}} no aaa authentication attempts class-override {admin | unknown {no-track | hash-username}} Overrides the global settings for tracking and lockouts for a type of account. The no form of the command removes this override and lets the admin be handled according to the global settings.

  • Page 140: Aaa Authentication Attempts Reset

    Rev 1.6.2 aaa authentication attempts reset aaa authentication attempts reset {all | user <username>} [{no-clear-history | no- unlock}] Clears the authentication history for and/or unlocks specified users. Syntax Description Applies function to all users. user Applies function to specified user. no-clear-history Leaves the history of login failures but unlocks the account.

  • Page 141: Clear Aaa Authentication Attempts

    Rev 1.6.2 clear aaa authentication attempts clear aaa authentication attempts {all | user <username>} [no-clear-history | no- unlock] Clears the authentication history for and/or unlocks specified users Syntax Description Applies function to all users. user Applies function to specified user. no-clear-history Clears the history of login failures.

  • Page 142: Aaa Authorization

    Rev 1.6.2 aaa authorization aaa authorization map [default-user <username> | order <policy>] no aaa authorization map [default-user | order] Sets the mapping permissions of a user in case a remote authentication is done. The no form of the command resets the attributes to default. Syntax Description username Specifies what local account the authenticated user will...
  • Page 143 Rev 1.6.2 Related Commands show aaa username Note If, for example, the user is locally defined to have admin permission, but in a remote server such as RADIUS the user is authenticated as monitor and the order is remote- first, then the user will be given monitor permissions. Mellanox Technologies...

  • Page 144: Show Aaa

    Rev 1.6.2 show aaa show aaa Displays the AAA configuration. Syntax Description Default Modes/Context Any Command Mode History 3.1.0000 Role admin Example switch (config) # show aaa AAA authorization: Default User: admin Map Order: remote-first Authentication method(s): local Accounting method(s): tacacs+ switch (config) # Related Commands...

  • Page 145: Show Aaa Authentication Attempts

    Rev 1.6.2 show aaa authentication attempts show aaa authentication attempts [configured | status user <username>]] Shows the current authentication, authorization and accounting settings. Syntax Description authentication attempts Displays configuration and history of authentication failures. configured Displays configuration of authentication failure track- ing.

  • Page 146: Radius-Server

    Rev 1.6.2 2.8.3 RADIUS radius-server radius-server {key <secret>| retransmit <retries> | timeout <seconds>} no radius-server {key | retransmit | timeout} Sets global RADIUS server attributes. The no form of the command resets the attributes to their default values. Syntax Description secret Sets a secret key (shared hidden text string), known to the system and to the RADIUS server.

  • Page 147: Radius-Server Host

    Rev 1.6.2 radius-server host radius-server host <IP address> {enable | auth-port <port> | key <secret>| retransmit <retries> | timeout <seconds>} no radius-server host <IP address> {enable | auth-port } Configures RADIUS server attributes. The no form of the command resets the attributes to their default values and deletes the RADIUS server.

  • Page 148: Show Radius

    Rev 1.6.2 show radius show radius Displays RADIUS configurations. Syntax Description Default Modes/Context Any Command Mode History 3.1.0000 Role admin Example switch (config) # show radius RADIUS defaults: Key: 3333 Timeout: Retransmit: RADIUS servers: 40.40.40.40:1812 Enabled: Key: 3333 (default) Timeout: 3 (default) Retransmit: 1 (default)

  • Page 149: Tacacs-Server

    Rev 1.6.2 2.8.4 TACACS+ tacacs-server tacacs-server {key <secret>| retransmit <retries> | timeout <seconds>} no tacacs-server {key | retransmit | timeout} Sets global TACACS+ server attributes. The no form of the command resets the attributes to default values. Syntax Description secret Set a secret key (shared hidden text string), known to the system and to the TACACS+ server.

  • Page 150: Tacacs-Server Host

    Rev 1.6.2 tacacs-server host tacacs-server host <IP address> {enable | auth-port <port> | auth-type <type> | key <secret> | retransmit <retries> | timeout <seconds>} no tacacs-server host <IP address> {enable | auth-port} Configures TACACS+ server attributes. The no form of the command resets the attributes to their default values and deletes the TACACS+ server.
  • Page 151 Rev 1.6.2 Related Commands aaa authorization show tacacs tacacs-server Note • TACACS+ servers are tried in the order they are configured • A PAP auth-type similar to an ASCII login, except that the username and password arrive at the network access server in a PAP protocol packet instead of being typed in by the user, so the user is not prompted •...

  • Page 152: Show Tacacs

    Rev 1.6.2 show tacacs show tacacs Displays TACACS+ configurations. Syntax Description Default Modes/Context Any Command Mode History 3.1.0000 Role admin Example switch (config) # show tacacs TACACS+ defaults: Key: 3333 Timeout: Retransmit: TACACS+ servers: 40.40.40.40:49 Enabled: Auth-type Key: 3333 (default) Timeout: 3 (default) Retransmit:...

  • Page 153: Ldap Base-Dn

    Rev 1.6.2 2.8.5 LDAP ldap base-dn ldap base-dn <string> no ldap base-dn Sets the base distinguished name (location) of the user information in the schema of the LDAP server. The no form of the command resets the attribute to its default values. Syntax Description string A case-sensitive string that specifies the location in the...

  • Page 154: Ldap Bind-Dn/Bind-Password

    Rev 1.6.2 ldap bind-dn/bind-password ldap {bind-dn | bind-password} <string> no ldap {bind-dn | bind-password} Gives the distinguished name or password to bind to on the LDAP server. This can be left empty for anonymous login (the default). The no form of the command resets the attribute to its default values. Syntax Description string A case-sensitive string that specifies distinguished...

  • Page 155: Ldap Group-Attribute/Group-Dn

    Rev 1.6.2 ldap group-attribute/group-dn ldap {group-attribute {<group-att> |member | uniqueMember} | group-dn <group-dn>} no ldap {group-attribute | group-dn} Sets the distinguished name or attribute name of a group on the LDAP server. The no form of the command resets the attribute to its default values. Syntax Description group-att Specifies a custom attribute name.

  • Page 156: Ldap Host

    Rev 1.6.2 ldap host ldap host <IP Address> [order <number> last] no ldap host <IP Address> Adds an LDAP server to the set of servers used for authentication. The no form of the command deletes the LDAP host. Syntax Description IP Address IPv4 or IPv6 address.

  • Page 157: Ldap Login-Attribute

    Rev 1.6.2 ldap login-attribute ldap login-attribute {<string> | uid | sAMAccountName} no ldap login-attribute Sets the attribute name which contains the login name of the user. The no form of the command resets this attribute to its default. Syntax Description string Custom attribute name.

  • Page 158: Ldap Port

    Rev 1.6.2 ldap port ldap port <port> no ldap port Sets the TCP port on the LDAP server to connect to for authentication. The no form of the command resets this attribute to its default value. Syntax Description port TCP port number. Default Modes/Context Config...

  • Page 159: Ldap Referrals

    Rev 1.6.2 ldap referrals ldap referrals no ldap referrals Enables LDAP referrals. The no form of the command disables LDAP referrals. Syntax Description Default LDAP referrals are enabled Modes/Context Config History 3.1.0000 Role admin Example switch (config) # no ldap referrals switch (config) # show ldap User base DN : ou=department,dc=example,dc=com...

  • Page 160: Ldap Scope

    Rev 1.6.2 ldap scope ldap scope <scope> no ldap scope Specifies the extent of the search in the LDAP hierarchy that the server should make when it receives an authorization request. The no form of the command resets the attribute to its default value. Syntax Description scope •...

  • Page 161: Ldap Ssl

    Rev 1.6.2 ldap ssl ldap ssl {ca-list <options> | cert-verify | mode <mode>| port <port-number>} no ldap ssl {cert-verify | mode | port} Sets SSL parameter for LDAP. The no form of the command resets the attribute to its default value. Syntax Description options This command specifies the list of supplemental certifi-...
  • Page 162 Rev 1.6.2 History 3.1.0000 Initial version 3.2.3000 Added ca-list argument. Role admin Example switch (config) # ldap ssl mode ssl switch (config) # show ldap User base DN : ou=department,dc=example,dc=com User search scope : subtree Login attribute : uid Bind DN : my-dn Bind password : my-password...

  • Page 163: Ldap Timeout

    Rev 1.6.2 ldap timeout ldap {timeout-bind | timeout-search} <seconds> no ldap {timeout-bind | timeout-search} Sets a global communication timeout in seconds for all LDAP servers to specify the extent of the search in the LDAP hierarchy that the server should make when it receives an authorization request.

  • Page 164: Ldap Version

    Rev 1.6.2 ldap version ldap version <version> no ldap version Sets the LDAP version. The no form of the command resets the attribute to its default value. Syntax Description version Sets the LDAP version. Possible values are 2 and 3. Default Modes/Context Config...

  • Page 165: Show Ldap

    Rev 1.6.2 show ldap show ldap Displays LDAP configurations. Syntax Description Default Modes/Context Any Command Mode History 3.1.0000 Role admin Example switch (config) # show ldap User base DN : ou=department,dc=example,dc=com User search scope : subtree Login attribute : uid Bind DN : my-dn Bind password...

  • Page 166: Crypto Ipsec Peer Local

    Rev 1.6.2 crypto ipsec peer local crypto ipsec peer <IPv4 or IPv6 address> local <IPv4 or IPv6 address> {enable | keying {ike [auth {hmac-md5 | hmac-sha1 | hmac-sha256 | null} | dh-group | dis- able | encrypt | exchange-mode | lifetime | local | mode | peer-identity | pfs-group | preshared-key | prompt-preshared-key | transform-set] | manual [auth | disable | encrypt | local-spi | mode | remote-spi]}} Configures ipsec in the system.
  • Page 167 Rev 1.6.2 Default Modes/Context Config History 3.2.3000 Role admin Example switch (config)# crypto ipsec peer 10.10.10.10 local 10.7.34.139 enable switch (config)# Related Commands Note Mellanox Technologies...

  • Page 168: Crypto Certificate Ca-List

    Rev 1.6.2 crypto certificate ca-list crypto certificate ca-list [default-ca-list name {<cert-name> | system-self- signed}] no crypto certificate ca-list [default-ca-list name {<cert-name> | system-self- signed}] Adds the specified CA certificate to the default CA certificate list. The no form of the command removes the certificate from the default CA certificate list.

  • Page 169: Crypto Certificate Default-Cert

    Rev 1.6.2 crypto certificate default-cert crypto certificate default-cert name {<cert-name> | system-self-signed} no crypto certificate default-cert name {<cert-name> | system-self-signed} Designates the named certificate as the global default certificate role for authentica- tion of this system to clients. The no form of the command reverts the default-cert name to “system-self-signed” (the “cert-name”...

  • Page 170: Crypto Certificate Generation

    Rev 1.6.2 crypto certificate generation crypto certificate generation default {country-code | days-valid | email-addr | key-size-bits | locality | org-unit | organization | state-or-prov} Configures default values for certificate generation. Syntax Description country-code Configures the default certificate value for country code with a two-alphanumeric-character code or -- for none.

  • Page 171: Crypto Certificate Name

    Rev 1.6.2 crypto certificate name crypto certificate name {<cert-name> | system-self-signed} {comment <new comment> | generate self-signed | private-key pem <PEM string> | public-cert [comment <comment string> | pem <PEM string>] | regenerate days-valid <days> | rename <new name>} no crypto certificate name <cert-name> Configures default values for certificate generation.
  • Page 172 Rev 1.6.2 Example switch (config) # crypto certificate name system-self-signed comment test Related Commands Note The certificate parameter of the no form of this command deletes the comment on the certificate. Mellanox Technologies...

  • Page 173: Crypto Certificate System-Self-Signed

    Rev 1.6.2 crypto certificate system-self-signed crypto certificate system-self-signed regenerate [days-valid <days>] Configures default values for certificate generation. Syntax Description days-valid Specifies the number of days the certificate is valid Default Modes/Context Config History 3.2.1000 Role admin Example switch (config) # crypto certificate system-self-signed regenerate days-valid 3 Related Commands Note...

  • Page 174: Show Crypto Certificate

    Rev 1.6.2 show crypto certificate show crypto certificate [detail | public-pem | default-cert [detail | public-pem] | [name <cert-name> [detail | public-pem] | ca-list [default-ca-list]] Displays information about all certificates in the certificate database. Syntax Description ca-list Displays the list of supplemental certificates configured for the global default system CA certificate role.
  • Page 175 Rev 1.6.2 Example switch (config)# show crypto certificate Certificate with name 'system-self-signed' (default-cert) Comment: system-generated self-signed certif- icate Private Key: present Serial Number: 0x546c935511bcafc21ac0e8249fbe0844 SHA-1 Fingerprint: fe6df38dd26801971cb2d44f62dbe492b6063c5f Validity: Starts: 2012/12/02 13:45:05 Expires: 2013/12/02 13:45:05 Subject: Common Name: IBM-DEV-Bay4 Country: State or Province: Locality: Organization: Organizational Unit:...

  • Page 176: Show Crypto Ipsec

    Rev 1.6.2 show crypto ipsec show crypto ipsec [brief | configured | ike | policy | sa ] Displays information ipsec configuration. Syntax Description Default Modes/Context Config History 3.2.1000 Role admin Example switch (config)# show crypto ipsec IPSec Summary ------------- Crypto IKE is using pluto (Openswan) daemon.

  • Page 177: Cli Clear-History

    Rev 1.6.2 cli clear-history cli clear-history Clears the command history of the current user. Syntax Description Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # cli clear-history switch (config) # Related Commands Note Mellanox Technologies...

  • Page 178: Cli Default

    Rev 1.6.2 cli default cli default {auto-logout <minutes> | paging enable | prefix-modes {enable | show- config} | progress enable | prompt {confirm-reload | confirm-reset | confirm- unsaved | empty-password} no cli default {auto-logout | paging enable | prefix-modes {enable | show-config} | progress enable prompt {confirm-reload | confirm-reset | confirm-unsaved | empty-password} Configures default CLI options for all future sessions.
  • Page 179 Rev 1.6.2 Example switch (config) # cli default prefix-modes enable switch (config) # show cli CLI current session settings: Maximum line size: 8192 Terminal width: 171 columns Terminal length: 38 rows Terminal type: xterm X display setting: (none) Auto-logout: disabled Paging: enabled Progress tracking:...

  • Page 180: Cli Session

    Rev 1.6.2 cli session cli session {auto-logout <minutes> | paging enable | prefix-modes {enable | show- config} | progress enable | terminal {length <size> | resize | type <terminal-type> | width} | x-display full <display>} no cli session {auto-logout | paging enable | prefix-modes {enable | show-config} | progress enable | terminal type | x-display} Configures default CLI options for all future sessions.
  • Page 181 Rev 1.6.2 Example switch (config) # cli session auto-logout switch (config) # Related Commands show terminal Note Mellanox Technologies...

  • Page 182: Show Cli

    Rev 1.6.2 show cli show cli Displays the CLI configuration and status. Syntax Description Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # show cli CLI current session settings: Maximum line size: 8192 Terminal width: 171 columns Terminal length: 38 rows Terminal type: xterm...

  • Page 183: 2.11 Banner

    Rev 1.6.2 2.11 Banner banner login banner {login | login-remote | login-local} <string> no banner login Sets the CLI welcome banner message. The login-remote refers to the SSH connec- tions banner, while the login-local refers to the serial connection banner. The no form of the command resets the system login banner to its default.

  • Page 184: Banner Login-Local

    Rev 1.6.2 banner login-local banner login-local <string> no banner login-local Sets system login local banner. The no form of the command resets the banner. Syntax Description string Text string. Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # banner login-local Testing switch (config) # Related Commands show banner...

  • Page 185: Banner Motd

    Rev 1.6.2 banner motd banner motd <string> no banner motd Sets the contents of the /etc/motd file. The no form of the command resets the system Message of the Day banner. Syntax Description string Text string. Default “Mellanox Switch” Modes/Context Config History 3.1.0000...

  • Page 186: Show Banner

    Rev 1.6.2 show banner show banner Displays configured banners. Syntax Description Default Modes/Context Config History 3.1.0000 Role unpriv/monitor/admin Example switch (config) # show banner Banners: MOTD: Testing Login: Mellanox MLNX-OS Switch Management switch (config) # Related Commands banner login banner motd Note 2.12 SSH ssh server enable...
  • Page 187 Rev 1.6.2 Example switch (config) # ssh server enable switch (config) # show ssh server SSH server configuration: SSH server enabled: Minimum protocol version: 2 X11 forwarding enabled: SSH server ports: Interface listen enabled: yes No Listen Interfaces. Host Key Finger Prints: RSA v1 host key: a0:63:db:96:e2:95:5a:5a:fd:a8:d0:f4:ab:e3:5f:f8 RSA v2 host key: 1e:b7:8b:ec:ab:35:98:be:6b:d6:12:c2:18:72:12:d6 DSA v2 host key: 7c:4a:f7:72:51:67:b5:0b:cd:a2:d2:b9:f3:be:3e:68...

  • Page 188: Ssh Server Host-Key

    Rev 1.6.2 ssh server host-key ssh server host-key {<key type> {private-key <private-key>| public-key <public- key>} | generate} Manipulates host keys for SSH. Syntax Description key type • rsa1 - RSAv1 • rsa2 - RSAv2 • dsa2 - DSAv2 private-key Sets new private-key for the host keys of the specified type.
  • Page 189 Rev 1.6.2 Example switch (config) # ssh server host-key dsa2 private-key Key: *********************************************** Confirm: *********************************************** switch (config) # show ssh server host-keys SSH server configuration: SSH server enabled: Minimum protocol version: 2 X11 forwarding enabled: SSH server ports: Interface listen enabled: yes No Listen Interfaces.

  • Page 190: Ssh Server Listen

    Rev 1.6.2 ssh server listen ssh server listen {enable | interface <inf>} no ssh server listen {enable | interface <inf>} Enables the listen interface restricted list for SSH. If enabled, and at least one non- DHCP interface is specified in the list, the SSH connections are only accepted on those specified interfaces.

  • Page 191: Ssh Server Min-Version

    Rev 1.6.2 ssh server min-version ssh server min-version <version> no ssh server min-version Sets the minimum version of the SSH protocol that the server supports. The no form of the command resets the minimum version of SSH protocol supported. Syntax Description version Possible versions are 1 and 2.

  • Page 192: Ssh Server Ports

    Rev 1.6.2 ssh server ports ssh server ports {<port1> [<port2>...]} Specifies which ports the SSH server listens on. Syntax Description port Port number in [1...65535]. Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # ssh server ports 22 switch (config) # show ssh server SSH server configuration: SSH server enabled:...

  • Page 193: Ssh Server X11-Forwarding

    Rev 1.6.2 ssh server x11-forwarding ssh server x11-forwarding enable no ssh server x11-forwarding enable Enables X11 forwarding on the SSH server. The no form of the command disables X11 forwarding. Syntax Description Default X11-forwarding is disabled. Modes/Context Config History 3.1.0000 Role admin Example...

  • Page 194: Ssh Client Global

    Rev 1.6.2 ssh client global ssh client global {host-key-check <policy>} | known-host <known-host-entry>} no ssh client global {host-key-check | known-host localhost} Configures global SSH client settings. The no form of the command negates global SSH client settings. Syntax Description host-key-check <policy> Sets SSH client configuration to control how host key checking is performed.
  • Page 195 Rev 1.6.2 Related Commands show ssh client Note Mellanox Technologies...

  • Page 196: Ssh Client User

    Rev 1.6.2 ssh client user ssh client user <username> {authorized-key sshv2 <public key> | identity <key type> {generate | private-key [<private key>] | public-key [<public key>]} | known-host <known host> remove} no ssh client user admin {authorized-key sshv2 <public key ID> | identity <key type>} Adds an entry to the global known-hosts configuration file, either by generating new key, or by adding manually a public or private key.

  • Page 197: Slogin

    Rev 1.6.2 slogin slogin [<slogin options>] <hostname> Invokes the SSH client. The user is returned to the CLI when SSH finishes. Syntax Description slogin options usage: slogin [-1246AaCfgkNnqsTtVvXxY] [-b bind_address] [-c cipher_spec] [-D port] [-e escape_char] [-F configfile] [-i identity_file] [-L port:host:hostport] [-l login_name] [-m mac_spec] [-o option] [-p port] [-R port:host:hostport] [user@]host- name [command]...

  • Page 198: Show Ssh Client

    Rev 1.6.2 show ssh client show ssh client Displays the client configuration of the SSH server. Syntax Description Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # show ssh client SSH client Strict Hostkey Checking: ask SSH Global Known Hosts: Entry 1: 72.30.2.2 Finger Print: 1e:b7:8b:ec:ab:35:98:be:6b:d6:12:c2:18:72:12:d6 No SSH user identities configured.

  • Page 199: Show Ssh Server

    Rev 1.6.2 show ssh server show ssh server Displays SSH server configuration. Syntax Description Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # show ssh server SSH server configuration: SSH server enabled: Minimum protocol version: 2 X11 forwarding enabled: SSH server ports: Interface listen enabled: yes No Listen Interfaces.

  • Page 200: 2.13 Remote Login

    Rev 1.6.2 2.13 Remote Login telnet-server enable telnet-server enable no telnet-server enable Enables the telnet server. The no form of the command disables the telnet server. Syntax Description Default Telnet server is disabled Modes/Context Config History 3.1.0000 Role admin Example switch (config) # telnet-server enable switch (config) # show telnet-server Telnet server enabled: yes...

  • Page 201: Show Telnet-Server

    Rev 1.6.2 show telnet-server show telnet-server Displays telnet server settings. Syntax Description Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # show telnet-server Telnet server enabled: switch (config) # Related Commands telnet-server enable Note Mellanox Technologies...

  • Page 202: 2.14 Xml Gateway

    Rev 1.6.2 2.14 XML Gateway xml-gw enable xml-gw enable no xml-gw enable Enables the XML gateway. The no form of the command disables the XML gateway. Syntax Description Default XML Gateway is enabled Modes/Context Config History 3.1.0000 Role admin Example switch (config) # xml-gw enable switch (config) # show xml-gw XML Gateway enabled:...

  • Page 203: Show Xml-Gw

    Rev 1.6.2 show xml-gw show xml-gw Displays the XML gateway setting. Syntax Description Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # show xml-gw XML Gateway enabled: switch (config) # Related Commands xml-gw enable Note 2.15 Web Server Mellanox Technologies...

  • Page 204: Web Auto-Logout

    Rev 1.6.2 web auto-logout web auto-logout <number of minutes> no web auto-logout <number of minutes> Configures length of user inactivity before auto-logout of a web session. The no form of the command disables the web auto-logout (web sessions will never logged out due to inactivity).

  • Page 205: Web Client Cert-Verify

    Rev 1.6.2 web client cert-verify web client cert-verify no web client cert-verify Enables verification of server certificates during HTTPS file transfers. The no form of the command disables verification of server certificates during HTTPS file transfers. Syntax Description Default Modes/Context Config History 3.2.3000...

  • Page 206: Web Client Ca-List

    Rev 1.6.2 web client ca-list web client ca-list {<ca-list-name> | default-ca-list | none} no web client ca-list Configures supplemental CA certificates for verification of server certificates during HTTPS file transfers. The no form of the command uses no supplemental certificates. Syntax Description ca-list-name Specifies CA list to configure.

  • Page 207: Web Enable

    Rev 1.6.2 web enable web enable no web enable Enables the web-based management console. The no form of the command disables the web-based management console. Syntax Description Default enable Modes/Context Config History 3.1.0000 Role admin Example switch (config) # web enable switch (config) # show web Web-based management console enabled: yes HTTP enabled:...

  • Page 208: Web Http

    Rev 1.6.2 web http web http {enable | port <port number> | redirect} no web http {enable | port | redirect} Configures HTTP access to the web-based management console. The no form of the command negates HTTP settings for the web-based management console.
  • Page 209 Rev 1.6.2 Related Commands show web web enable Note Enabling HTTP is meaningful if the WebUI as a whole is enabled. Mellanox Technologies...

  • Page 210: Web Httpd

    Rev 1.6.2 web httpd web httpd listen {enable | interface <ifName> } no web httpd listen {enable | interface <ifName> } Enables the listen interface restricted list for HTTP and HTTPS. The no form of the command disables the HTTP server listen ability. Syntax Description enable Enables Web interface restrictions on access to this sys-...

  • Page 211: Web Https

    Rev 1.6.2 web https web https {certificate {regenerate | name | default-cert} | enable | port <port number>} no web https {enable | port <port number>} Configures HTTPS access to the web-based management console. The no form of the command negates HTTPS settings for the web-based management console.
  • Page 212 Rev 1.6.2 Related Commands show web web enable Note • Enabling HTTPS is meaningful if the WebUI as a whole is enabled. • See the command “crypto certificate default-cert name” for how to change the default cer- tificate if inheriting the configured default certificate is preferred Mellanox Technologies...

  • Page 213: Web Session

    Rev 1.6.2 web session web session {renewal <minutes> | timeout <minutes>} no web session {renewal | timeout} Configures session settings. The no form of the command resets session settings to default. Syntax Description renewal <minutes> Configures time before expiration to renew a session. timeout <minutes>...

  • Page 214: Web Proxy Auth

    Rev 1.6.2 web proxy auth web proxy auth {authtype <type>| basic [password <password> | username <username>]} no web proxy auth {authtype | basic {password | username } Configures authentication settings for web proxy authentication. The no form of the command resets the attributes to their default values. Syntax Description type Configures the type of authentication to use with web...
  • Page 215 Rev 1.6.2 Related Commands show web web proxy host Note Mellanox Technologies...

  • Page 216: Web Proxy Host

    Rev 1.6.2 web proxy host web proxy host <IP address> [port <port number>] no web proxy Adds and enables a proxy to be used for any HTTP or FTP downloads. The no form of the command disables the web proxy. Syntax Description IP address IPv4 or IPv6 address.

  • Page 217: Show Web

    Rev 1.6.2 show web show web Displays the web configuration. Syntax Description Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # show web Web-based management console enabled: yes HTTP enabled: HTTP port: HTTP redirect to HTTPS: no HTTPS enabled: HTTPS port: Listen enabled: No Listen Interfaces.

  • Page 218: 2.16 Snmp

    Rev 1.6.2 2.16 SNMP The commands in this section are used to manage the SNMP server. snmp-server community snmp-server community <community> [ ro | rw] no snmp-server community <community> Sets a community name for either read-only or read-write SNMP requests. The no form of the command sets the community string to default.

  • Page 219: Snmp-Server Contact

    Rev 1.6.2 snmp-server contact snmp-server contact <contact name> no snmp-server contact Sets a value for the sysContact variable in MIB-II. The no form of the command resets the parameter to its default value. Syntax Description contact name Contact name. Default “”...

  • Page 220: Snmp-Server Enable

    Rev 1.6.2 snmp-server enable snmp-server enable [communities | mult-communities | notify] no snmp-server enable [communities | mult-communities | notify] Enables SNMP-related functionality. The no form of the command disables the SNMP server. Syntax Description enable Enables SNMP-related functionality: • SNMP engine •...

  • Page 221: Snmp-Server Host

    Rev 1.6.2 snmp-server host snmp-server host <IP address> {disable | {traps | informs} [<community> | <port> | version <snmp version>]} no snmp-server host <IPv4 or IPv6 address> {disable | {traps| informs} [<com- munity> | <port>]} Configures hosts to which to send SNMP traps. The no form of the commands removes a host from which SNMP traps should be sent.
  • Page 222 Rev 1.6.2 Example switch (config) # snmp-server host 10.10.10.10 traps version 1 switch (config) # show snmp SNMP enabled: SNMP port: System contact: System location: Read-only communities: public Read-write communities: (none) Interface listen enabled: yes No Listen Interfaces. Traps enabled: Default trap community: public Default trap port:...

  • Page 223: Snmp-Server Listen

    Rev 1.6.2 snmp-server listen snmp-server listen {enable | interface <ifName>} no snmp-server listen {enable | interface <ifName> } Configures SNMP server interface access restrictions. The no form of the command disables the listen interface restricted list for SNMP server. Syntax Description enable Enables SNMP interface restrictions on access to this system.

  • Page 224: Snmp-Server Location

    Rev 1.6.2 snmp-server location snmp-server location <system location> no snmp-server location Sets a value for the sysLocation variable in MIB-II. The no form of the command clears the contents of the sysLocation variable. Syntax Description system location String. Default “” Modes/Context Config History...

  • Page 225: Snmp-Server Notify

    Rev 1.6.2 snmp-server notify snmp-server notify {community <community> | event <event name> | port <port> | send-test} no snmp-server notify {community | event <event name> | port} Configures SNMP notifications (traps and informs). The no form of the commands negate the SNMP notifications. Syntax Description community Sets the default community for traps sent to hosts...

  • Page 226: Snmp-Server Port

    Rev 1.6.2 snmp-server port snmp-server port <port> no snmp-server port Sets the UDP listening port for the SNMP agent. The no form of the command resets the parameter to its default value. Syntax Description port UDP port. Default Modes/Context Config History 3.1.0000 Role...

  • Page 227: Snmp-Server User

    Rev 1.6.2 snmp-server user snmp-server user {admin | <username> } v3 {[encrypted] auth <hash-type> <password> [priv <privacy-type> [<password>]] | capability <cap> | enable <sets> | prompt auth <hash-type> [priv <privacy-type>]} no snmp-server user {admin | <username> } v3 {[encrypted] auth <hash-type> <password>...

  • Page 228: Show Snmp

    Rev 1.6.2 show snmp show snmp [engineID | events | user] Displays SNMP-server configuration and status. Syntax Description engineID SNMP Engine ID. events SNMP events. user SNMP users. Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # show snmp SNMP enabled: SNMP port: System contact:...

  • Page 229: 2.17 Scheduled Jobs

    Rev 1.6.2 2.17 Scheduled Jobs Use the commands in this section to manage and schedule the execution of jobs. Mellanox Technologies...

  • Page 230: Job

    Rev 1.6.2 job <job ID> no job <job ID> Creates a job. The no form of the command deletes the job. Syntax Description job ID An integer. Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # job 100 switch (config job 100) # Related Commands show jobs...

  • Page 231: Command

    Rev 1.6.2 command command <sequence #> | <command> no command <sequence #> Adds a CLI command to the job. The no form of the command deletes the command from the job. Syntax Description sequence # An integer that controls the order the command is exe- cuted relative to other commands in this job.

  • Page 232: Comment

    Rev 1.6.2 comment comment <comment> no comment Adds a comment to the job. The no form of the command deletes the comment. Syntax Description comment The comment to be added (string). Default “” Modes/Context Config job History 3.1.0000 Role admin Example switch (config)# job 100 switch (config job 100) # comment Job_for_example...

  • Page 233: Enable

    Rev 1.6.2 enable enable no enable Enables the specified job. The no form of the command disables the specified job. Syntax Description Default Modes/Context Config job History 3.1.0000 Role admin Example switch (config)# job 100 switch (config job 100) # enable switch (config job 100) # Related Commands show jobs...

  • Page 234: Execute

    Rev 1.6.2 execute execute Forces an immediate execution of the job. Syntax Description Default Modes/Context Config job History 3.1.0000 Role admin Example switch (config)# job 100 switch (config job 100) # execute switch (config job 100) # Related Commands show jobs Note •...

  • Page 235: Fail-Continue

    Rev 1.6.2 fail-continue fail-continue no fail-continue Continues the job execution regardless of any job failures. The no form of the command returns fail-continue to its default. Syntax Description Default A job will halt execution as soon as any of its commands fails Modes/Context Config job History...

  • Page 236: Name

    Rev 1.6.2 name name <job name> no name Configures a name for this job. The no form of the command resets the name to its default. Syntax Description name Specifies a name for the job (string). Default “”. Modes/Context Config job History 3.1.0000 Role...

  • Page 237: Schedule Type

    Rev 1.6.2 schedule type schedule type <recurrence type> no schedule type Sets the type of schedule the job will automatically execute on. The no form of the command resets the schedule type to its default. Syntax Description recurrence type The available schedule types are: •...

  • Page 238: Schedule

    Rev 1.6.2 schedule <recurrence type> schedule <recurrence type> <interval and date> no schedule Sets the type of schedule the job will automatically execute on. The no form of the command resets the schedule type to its default. Syntax Description recurrence type The available schedule types are: •...

  • Page 239: Show Jobs

    Rev 1.6.2 show jobs show jobs [<job-id>] Displays configuration and state (including results of last execution, if any exist) of all jobs, or of one job if a job ID is specified. Syntax Description job-id Job ID. Default Modes/Context Config History 3.1.0000 Role...

  • Page 240: 2.18 Event Notification

    Rev 1.6.2 2.18 Event Notification email autosupport email autosupport {enable | event <event name>} no email autosupport enable Enables the support of the email notification and specifies which events will be sent as email notifications. The no form of the command disables sending of email notifications globally or per event.

  • Page 241: Email Autosupport Ssl Mode

    Rev 1.6.2 email autosupport ssl mode email autosupport ssl mode {none | tls | tls-none} no email autosupport ssl mode Configures type of security to use for auto-support email. The no form of the command resets auto-support email security mode to its default. Syntax Description none Does not use TLS to secure auto-support email.

  • Page 242: Email Autosupport Ssl Cert-Verify

    Rev 1.6.2 email autosupport ssl cert-verify email autosupport ssl cert-verify no email autosupport ssl cert-verify Verifies server certificates. The no form of the command does not verify server certificates. Syntax Description Default Modes/Context Config History 3.2.3000 Role admin Example switch (config) # email autosupport ssl cert-verify Related Commands Note Mellanox Technologies...

  • Page 243: Email Autosupport Ssl Ca-List

    Rev 1.6.2 email autosupport ssl ca-list email autosupport ssl ca-list {<ca-list-name> | default_ca_list | none} no email autosupport ssl ca-list Configures supplemental CA certificates for verification of server certificates. The no form of the command removes supplemental CA certificate list. Syntax Description default_ca_list Default supplemental CA certificate list.

  • Page 244: Email Dead-Letter

    Rev 1.6.2 email dead-letter email dead-letter {cleanup max-age <duration> | enable} no email dead-letter Configures settings for saving undeliverable emails. The no form of the command disables sending of emails to vendor auto-support upon certain failures. Syntax Description duration Example: “5d4h3m2s” for 5 days, 4 hours, 3 minutes, 2 seconds.

  • Page 245: Email Domain

    Rev 1.6.2 email domain email domain <hostname or IP address> no email domain Sets the domain name from which the emails will appear to come from (provided that the return address is not already fully-qualified). This is used in conjunction with the system hostname to form the full name of the host from which the email appears to come.

  • Page 246: Email Mailhub

    Rev 1.6.2 email mailhub email mailhub <hostname or IP address> no email mailhub Sets the mail relay to be used to send notification emails. The no form of the command clears the mail relay to be used to send notification emails.

  • Page 247: Email Mailhub-Port

    Rev 1.6.2 email mailhub-port email mailhub-port <hostname or IP address> no email mailhub-port Sets the mail relay port to be used to send notification emails. The no form of the command resets the port to its default. Syntax Description hostname or IP address hostname or IP address.

  • Page 248: Email Notify Event

    Rev 1.6.2 email notify event email notify event <event name> no email notify event <event name> Enables sending email notifications for the specified event type. The no form of the command disables sending email notifications for the specified event type. Syntax Description event name Example event names would include “process-crash”...

  • Page 249: Email Notify Recipient

    Rev 1.6.2 email notify recipient email notify recipient <email addr> [class {info | failure} | detail] no email notify recipient <email addr> [class {info | failure} | detail] Adds an email address from the list of addresses to which to send email notifications of events.

  • Page 250: Email Return-Addr

    Rev 1.6.2 email return-addr email return-addr <username> no email domain Sets the username or fully-qualified return address from which email notifications are sent. • If the string provided contains an “@” character, it is considered to be fully-qualified and used as-is. •...

  • Page 251: Email Return-Host

    Rev 1.6.2 email return-host email return-host no email return-host Includes the hostname in the return address for emails. The no form of the command does not include the hostname in the return address for emails. Syntax Description Default No return host Modes/Context Config History...

  • Page 252: Email Send-Test

    Rev 1.6.2 email send-test email send-test Sends test-email to all configured event and failure recipients. Syntax Description Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # email autosupport enable switch (config) # Related Commands show email [events] Note Mellanox Technologies...

  • Page 253: Email Ssl Mode

    Rev 1.6.2 email ssl mode email ssl mode {none | tls | tls-none} no email ssl mode Sets the security mode(s) to try for sending email. The no form of the command resets the email SSL mode to its default. Syntax Description none No security mode, operates in plaintext.

  • Page 254: Email Ssl Cert-Verify

    Rev 1.6.2 email ssl cert-verify email ssl cert-verify no email ssl cert-verify Enables verification of SSL/TLS server certificates for email. The no form of the command disables verification of SSL/TLS server certificates for email. Syntax Description Default Modes/Context Config History 3.2.3000 Role admin...

  • Page 255: Email Ssl Ca-List

    Rev 1.6.2 email ssl ca-list email ssl ca-list {<ca-list-name> | default-ca-list | none} no email ssl ca-list Specifies the list of supplemental certificates of authority (CA) from the certificate configuration database that is to be used for verification of server certificates when sending email using TLS, if any.

  • Page 256: Show Email

    Rev 1.6.2 show email show email [events] Shows email configuration or events for which email should be sent upon. Syntax Description events show event list Default Modes/Context Any Command Mode History 3.1.0000 Role admin Example switch (config) # show email Mail hub: Mail hub port: Domain:...

  • Page 257: 2.19 Statistics And Alarms

    Rev 1.6.2 2.19 Statistics and Alarms stats alarm <alarm-id> clear stats alarm <alarm ID> clear Clears alarm state. Syntax Description alarm ID Alarms supported by the system, for example: • cpu_util_indiv - Average CPU utilization too high: per- cent utilization •...

  • Page 258: Stats Alarm Enable

    Rev 1.6.2 stats alarm <alarm-id> enable stats alarm <alarm-id> enable no stats alarm <alarm-id> enable Enables the alarm. The no form of the command disables the alarm, notifications will not be received. Syntax Description alarm ID Alarms supported by the system, for example: •...

  • Page 259: Stats Alarm Event-Repeat

    Rev 1.6.2 stats alarm <alarm-id> event-repeat stats alarm <alarm ID> event-repeat {single | while-not-cleared} no stats alarm <alarm ID> event-repeat Configures repetition of events from this alarm. Syntax Description alarm ID Alarms supported by the system, for example: • cpu_util_indiv - Average CPU utilization too high: per- cent utilization •...

  • Page 260: Stats Alarm {Rising | Falling

    Rev 1.6.2 stats alarm <alarm-id> {rising | falling} stats alarm <alarm ID> {rising | falling} {clear-threshold | error-threshold} <threshold-value> Configure alarms thresholds. Syntax Description alarm ID Alarms supported by the system, for example: • cpu_util_indiv - Average CPU utilization too high: per- cent utilization •...

  • Page 261: Stats Alarm Rate-Limit

    Rev 1.6.2 stats alarm <alarm-id> rate-limit stats alarm <alarm ID> rate-limit {count <count-type> <count> | reset | window <window-type> <duration>} Configures alarms rate limit. Syntax Description alarm ID Alarms supported by the system, for example: • cpu_util_indiv - Average CPU utilization too high: per- cent utilization •...

  • Page 262: Stats Chd Clear

    Rev 1.6.2 stats chd <chd-id> clear stats chd <CHD ID> clear Clears CHD counters. Syntax Description CHD ID CHD supported by the system, for example: • cpu_util - CPU utilization: percentage of time spent • cpu_util_ave - CPU utilization average: percentage of time spent •...

  • Page 263: Stats Chd Enable

    Rev 1.6.2 stats chd <chd-id> enable stats chd <chd-id> enable no stats chd <chd-id> enable Enables the CHD. The no form of the command disables the CHD. Syntax Description chd-id CHD supported by the system, for example: • cpu_util - CPU utilization: percentage of time spent •...

  • Page 264: Stats Chd Compute Time

    Rev 1.6.2 stats chd <chd-id> compute time stats chd <CHD ID> compute time {interval | range} <number of seconds> Sets parameters for when this CHD is computed. Syntax Description CHD ID Possible IDs: • cpu_util - CPU utilization: percentage of time spent •...
  • Page 265 Rev 1.6.2 Related Commands show stats chd Note Mellanox Technologies...

  • Page 266: Stats Sample Clear

    Rev 1.6.2 stats sample <sample-id> clear stats sample <sample ID> clear Clears sample history. Syntax Description sample ID Possible sample IDs are: • congested • cpu_util - CPU utilization: milliseconds of time spent • disk_device_io - Storage device I/O statistics •...

  • Page 267: Stats Sample Enable

    Rev 1.6.2 stats sample <sample-id> enable stats sample <sample-id> enable no states sample <sample-id> enable Enables the sample. The no form of the command disables the sample. Syntax Description sample-id Possible sample IDs are: • congested • cpu_util - CPU utilization: milliseconds of time spent •...

  • Page 268: Stats Sample Interval

    Rev 1.6.2 stats sample <sample-id> interval stats sample <sample ID> interval <number of seconds> Sets the amount of time between samples for the specified group of sample data. Syntax Description sample ID Possible sample IDs are: • congested • cpu_util - CPU utilization: milliseconds of time spent •...

  • Page 269: Stats Clear-All

    Rev 1.6.2 stats clear-all stats clear all Clears data for all samples, CHDs, and status for all alarms. Syntax Description Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # stats clear-all switch (config) # Related Commands Note Mellanox Technologies...

  • Page 270: Stats Export

    Rev 1.6.2 stats export stats export <format> <report name> [{after | before} <yyyy/mm/dd> <hh:mm:ss>] [filename <filename>] Exports statistics to a file. Syntax Description format Currently the only supported value for <format> is “csv” (comma-separated value). report name Determines dataset to be exported. Possible report names are: •...

  • Page 271: Show Stats Alarm

    Rev 1.6.2 show stats alarm show stats alarm [<Alarm ID> [rate-limit]] Displays status of all alarms or the specified alarm. Syntax Description Alarm ID May be: • cpu_util_indiv - Average CPU utilization too high: per- cent utilization • disk_io - Operating System Disk I/O per second too high: kilobytes per second •...

  • Page 272: Show Stats Chd

    Rev 1.6.2 show stats chd show stats chd [<CHD ID>] Displays configuration of all statistics CHDs. Syntax Description CHD ID May be: • cpu_util_indiv - Average CPU utilization too high: per- cent utilization • disk_io - Operating System Disk I/O per second too high: kilobytes per second •...

  • Page 273: Show Stats Cpu

    Rev 1.6.2 show stats cpu show stats cpu Displays some basic stats about CPU utilization: • the current level • the peak over the past hour • the average over the past hour Syntax Description Default Modes/Context Config History 3.1.0000 Role admin Example...

  • Page 274: Show Stats Sample

    Rev 1.6.2 show stats sample show stats sample [<sample ID>] Displays sampling interval for all samples, or the specified one. Syntax Description sample ID Possible sample IDs are: • congested • cpu_util - CPU utilization: milliseconds of time spent • disk_device_io - Storage device I/O statistics •...
  • Page 275 Rev 1.6.2 Syntax Description max-report-len <length> Sets the length of the health report - number of line entries. Possible values: 10-2048. re-notif-cntr <counter> Health control changes notification counter, in seconds. Possible values: 120-7200 seconds. report-clear Clears the health report. Default max-report-len: 50 re-notif-cntr: Modes/Context...

  • Page 276: Power Enable

    Rev 1.6.2 power enable power enable <module name> no power enable <module name> Powers on the module. The no form of the command shuts down the module. Syntax Description module name Enables power for selected module. Default Power is enabled on all modules. Modes/Context Config History...

  • Page 277: Usb Eject

    Rev 1.6.2 usb eject usb eject Gracefully turns off the USB interface. Syntax Description Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # usb eject switch (config) # Related Commands Note Applicable only for systems with USB interface. Mellanox Technologies...

  • Page 278: System Profile

    Rev 1.6.2 system profile system profile <profile> [force] Sets the profile of the system to either InfiniBand, Ethernet or VPI. In ib-single-switch profile, all network interfaces link protocol set to InfiniBand. In eth-single-switch profile, all network interfaces link protocol set to Ethernet. In vpi-single-switch profile, some ports can be defined as Ethernet while some other as InfiniBand.

  • Page 279: Show Fan

    Rev 1.6.2 show fan show fan Displays fans status. Syntax Description Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # show fan switch (config) # show fan ===================================================== Module Device Speed Status (RPM) ===================================================== 5340.00 5340.00 5640.00 5640.00 5730.00 NOT PRESENT switch (config) #...

  • Page 280: Show Version

    Rev 1.6.2 show version show version [concise] Displays version information for the currently running system image. Syntax Description concise The concise variant fits the description onto one line. Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # show version Product name: SX_PPC_M460EX Product release:...

  • Page 281: Show Inventory

    Rev 1.6.2 show inventory show inventory Displays system inventory. Syntax Description Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # show inventory ======================================================================= Module Type Part number Serial Number ======================================================================= CHASSIS SX6036 MSX6036F-1BFR MT1140X00300 MGMT SX6036 MSX6036F-1BFR MT1140X00300 SXX0XX_FAN MSX60-FF MT1143X05136...

  • Page 282: Show Module

    Rev 1.6.2 show module show module Displays modules status. Syntax Description Default Modes/Context Config History 3.1.0000 Initial version 3.3.0000 Added “Is Fatal” column Role admin Example switch (config) # show module ==================================================== Module Type Present Power Is Fatal ==================================================== MGMT SX1036 Not Fatal SXX0XX_FAN...

  • Page 283: Show Memory

    Rev 1.6.2 show memory show memory Displays memory status. Syntax Description Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # show memory Total Used Free Used+B/C Free-B/C Physical 2027 MB 761 MB 1266 MB 1214 MB 813 MB Swap 0 MB 0 MB...

  • Page 284: Show Asic-Version

    Rev 1.6.2 show asic-version show asic-version Displays firmware ASIC version. Syntax Description Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # show asic-version =========================== SX module Version =========================== 9.1.1260 switch (config) # Related Commands Note Mellanox Technologies...

  • Page 285: Show Power

    Rev 1.6.2 show power show power Displays power supplies and power usage. Syntax Description Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # show power ================================================================= Module Power Voltage Current Capacity Grid Status (Watts) (Amp) (Watts) Group ================================================================= 0.00 47.11 0.00...

  • Page 286: Show Power Consumers

    Rev 1.6.2 show power consumers show power consumers Displays power consumers. Syntax Description Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # show power consumers ================================================ Module Power Voltage Current Status (Watts) (Amp) ================================================ MGMT 17.47 48.00 0.36 33.26 48.00 0.69...

  • Page 287: Show Temperature

    Rev 1.6.2 show temperature show temperature Displays the system's temperature sensors status. Syntax Description Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # show temperature ============================================ Module Sensor CurTemp Status (Celsius) ============================================ MGMT 32.00 MGMT QSFP_TEMP1 22.50 MGMT QSFP_TEMP2 25.50 MGMT...

  • Page 288: Show Voltage

    Rev 1.6.2 show voltage show voltage Displays power supplies voltage level. Syntax Description Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # show voltage ======================================================================= Module Power Meter Expected Actual Status High Voltage Voltage Range Range ======================================================================= MGMT BOARD_MONITOR 5.00 5.15...

  • Page 289: Show Health-Report

    Rev 1.6.2 show health-report show health-report Displays health report. Syntax Description Default Modes/Context Config History 3.1.0000 Initial version 3.3.0000 Output update Role admin Example switch (config) # show health-report ======================== | ALERTS CONFIGURATION | ======================== Re-notification counter (sec):[3600] Report max counter: [50] ======================== HEALTH REPORT...

  • Page 290: Show Resources

    Rev 1.6.2 show resources show resources Displays system resources. Syntax Description Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # show resources Total Used Free Physical 2027 MB 761 MB 1266 MB Swap 0 MB 0 MB 0 MB Number of CPUs: CPU load averages: 0.11 / 0.23 / 0.23 CPU 1...

  • Page 291: Show System Profile

    Rev 1.6.2 show system profile show system profile Displays system profile. Syntax Description Default Modes/Context Any Command Mode History 3.2.0000 Role admin Example switch (config) # show system profile eth-single-switch switch (config) # Related Commands system profile Note Mellanox Technologies...

  • Page 292: Show System Capabilities

    Rev 1.6.2 show system capabilities show system capabilities Displays system capabilities. Syntax Description Default Modes/Context Config History 3.1.0000 Initial version 3.3.0000 Added GW support Role admin Example switch (config) # show system capabilities IB: Supported Ethernet: Supported, Full L2 GW: Supported Max number of GW ports: 0 Max SM nodes: 648 IB Max licensed speed: FDR...

  • Page 293: Show System Mac

    Rev 1.6.2 show system mac show system mac Displays system MAC address. Syntax Description Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # show system mac 00:02:C9:5E:AF:18 switch (config) # Related Commands Note Mellanox Technologies...

  • Page 294: Show Protocols

    Rev 1.6.2 show protocols show protocols Displays all protocols enabled in the system. Syntax Description Default Modes/Context Config History 3.2.3000 Role admin Example switch (config) # show protocols Ethernet enabled spanning-tree enabled lacp disabled lldp disabled igmp-snooping disabled enabled priority-flow-control disabled IP routing enabled...
  • Page 295 Rev 1.6.2 Mellanox Technologies...
  • Page 296 Rev 1.6.2 Mellanox Technologies...

  • Page 297: Chapter 3 Ethernet Switching

    Rev 1.6.2 Ethernet Switching 3.1 Interface interface ethernet interface ethernet <slot>/<port>[/<subport>]-[<slot>/<port>[/<subport>]] Enters the Ethernet interface or Ethernet interface range configuration mode. Syntax Description <slot>/<port> Ethernet port number. subport Ethernet subport number. to be used in case of split port. Default Modes/Context Config History...

  • Page 298: Flowcontrol

    Rev 1.6.2 flowcontrol flowcontrol {receive | send} {off | on} [force] Enables or disables IEEE 802.3x link-level flow control per direction for the speci- fied interface. Syntax Description receive | send receive - ingresses direction send - egresses direction off | on on - enables IEEE 802.3x link-level flow control for the specified interface on receive or send.

  • Page 299: Mtu

    Rev 1.6.2 mtu <frame-size> Configures the Maximum Transmission Unit (MTU) frame size for the interface. Syntax Description frame-size This value may be 1518-9216 bytes. Default 1522 bytes Modes/Context Config interface ethernet Config Interface Port Channel History 3.1.0000 Role admin Example switch (config interface ethernet 1/1) # mtu 9216 switch (config interface ethernet 1/1) # Related Commands...

  • Page 300: Shutdown

    Rev 1.6.2 shutdown shutdown no shutdown Disables the interface. The no form of the command enables the interface. Syntax Description Default The interface is enabled. Modes/Context Config interface ethernet Config Interface Port Channel History 3.1.0000 Role admin Example switch (config interface ethernet 1/1) # shutdown switch (config interface ethernet 1/1) # Related Commands show interface ethernet...

  • Page 301: Description

    Rev 1.6.2 description description <string> no description Sets an interface description. The no form of the command returns the interface description to its default value. Syntax Description string 40 bytes Default “” Modes/Context Config interface ethernet Config Interface Port Channel History 3.1.0000 Role...

  • Page 302: Speed

    Rev 1.6.2 speed speed <port speed> [force] no speed Sets the speed of the interface. The no form of the command sets the speed of the interface to its default value. Syntax Description port speed 1000 - 1Gbps 10000 - 10Gbps 40000 - 40Gbps 56000 - 56Gbps force...

  • Page 303: Clear Counters

    Rev 1.6.2 clear counters clear counters Clears the interface counters. Syntax Description Default Modes/Context Config interface ethernet Config Interface Port Channel History 3.1.0000 Role admin Example switch (config interface ethernet 1/1) # clear counters switch (config interface ethernet 1/1) # Related Commands show interface ethernet Note...

  • Page 304: Show Interfaces Ethernet

    Rev 1.6.2 show interfaces ethernet show interfaces ethernet <inf> [counters [priority]] Displays the configuration and status for the interface. Syntax Description Interface number: <slot>/<port>. counters Displays interface extended counters. priority Displays interface extended counters, per priority (0-7). Default Modes/Context Any Command Mode History 3.1.0000 Role...

  • Page 305: Show Interfaces Ethernet [] Capabilities

    Rev 1.6.2 show interfaces ethernet [<inf>] capabilities show interfaces ethernet [<inf>] capabilities Displays the interface capabilities. Syntax Description shows only one interface capabilities. Interface number: <slot>/<port>. Default Modes/Context Any Command Mode History 3.1.0000 Role admin Example switch (config) # show interfaces ethernet 1/1 capabilities Eth1/1 Speed : 10000,40000...

  • Page 306: Show Interfaces Ethernet [] Description

    Rev 1.6.2 show interfaces ethernet [<inf>] description show interfaces ethernet [<inf>] description Displays the admin status and protocol status for the specified interface. Syntax Description Interface number: <slot>/<port>. Default Modes/Context Any Command Mode History 3.1.0000 Role admin Example switch (config) # show interfaces ethernet 0/1 description Interface Status Protocol...

  • Page 307: Show Interfaces Ethernet [] Status

    Rev 1.6.2 show interfaces ethernet [<inf>] status show interfaces ethernet [<inf>] status Displays the status, speed and negotiation mode of the specified interface. Syntax Description Interface number: <slot>/<port>. Default Modes/Context Any Command Mode History 3.1.0000 Role admin Example switch (config) # show interfaces ethernet status Port Operational state Speed...

  • Page 308: Show Interfaces Ethernet [] Transceiver

    Rev 1.6.2 show interfaces ethernet [<inf>] transceiver show interfaces ethernet [<inf>] transceiver Displays the transceiver info. Syntax Description interface number: <slot>/<port> Default Modes/Context Any Command Mode History 3.1.0000 Role admin Example switch (config) # show interfaces ethernet 1/1 transceiver Port 1/1 state identifier : QSFP+ cable/ module type...
  • Page 309 Rev 1.6.2 Example switch (config interface ethernet 1/4) # module-type qsfp-split-4 the following interfaces will be unmapped: 1/4 1/1 Type 'yes' to confirm split: yes switch (config interface ethernet 1/4) # Related Commands switchport mode switchport [trunk | hybrid] allowed-vlan show vlan Note •...

  • Page 310: 3.2 Link Aggregation Group (Lag) And Lacp

    Rev 1.6.2 3.2 Link Aggregation Group (LAG) and LACP interface port-channel interface port-channel <1-4096>[-<2-4096>] no interface port-channel <1-4096>[-<2-4096>] Creates a port channel and enters the port-channel configuration mode. There is an option to create a range of port-channel interfaces. The no form of the command deletes the port-channels, or range of port-channels. Syntax Description 1-4096 / 2-4096 Port channel number.

  • Page 311: Lacp

    Rev 1.6.2 lacp lacp no lacp Enables LACP in the switch. The no form of the command disables LACP in the switch. Syntax Description Default LACP is disabled. Modes/Context Config History 3.1.1400 Role admin Example switch (config)# lacp switch (config)# Related Commands Note Mellanox Technologies...

  • Page 312: Lacp System-Priority

    Rev 1.6.2 lacp system-priority lacp system-priority <1-65535> no lacp system-priority Configures the LACP system priority. The no form of the command sets the LACP system-priority to default. Syntax Description 1-65535 LACP system-priority. Default 32768 Modes/Context Config History 3.1.1400 Role admin Example switch (config)# lacp system-priority 1 switch (config)# show lacp interfaces port-channel...

  • Page 313: Lacp (Interface)

    Rev 1.6.2 lacp (interface) lacp {rate fast | port-priority <1-65535>} no lacp {rate fast | port-priority} Configures the LACP interface parameters. The no form of the command sets the LACP interface configuration to default. Syntax Description rate fast Sets LACP PDUs on the port to be in fast (1 second) or slow rate.

  • Page 314: Port-Channel Load-Balance

    Rev 1.6.2 port-channel load-balance lacp port-channel load-balance <method> no lacp port-channel load-balance <method> Configures the port channel load balancing distribution function method. The no form of the command sets the distribution function method to default. Syntax Description method Possible load balance methods: •...

  • Page 315: Channel-Group

    Rev 1.6.2 channel-group channel-group <1-4096> [mode {on | active | passive}] no channel-group Assigns and configures a physical interface to a port channel. The no form of the command removes a physical interface from the port-channel. Syntax Description 1-4096 The port channel number. mode on Static assignment the port to LAG.

  • Page 316: Show Lacp System-Identifier

    Rev 1.6.2 show lacp system-identifier show lacp system-identifier Displays the system identifier of LACP. Syntax Description Default Modes/Context Any Command Mode History 3.1.1400 Role admin Example switch (config)# show lacp system-identifier 00:02:c9:5c:61:70 switch (config)# Related Commands show lacp interface port-channel Note Mellanox Technologies...

  • Page 317: Show Lacp Counters

    Rev 1.6.2 show lacp counters show lacp counters Displays the LACP PDUs counters. Syntax Description Default Modes/Context Any Command Mode History 3.1.1400 Role admin Example switch (config)# show lacp counters LACPDUs Marker Marker Response LACPDUs Port Sent Recv Sent Recv Sent Recv Illegal Unknown ----------------------------------------------------------------------...

  • Page 318: Show Lacp Interface Ethernet

    Rev 1.6.2 show lacp interface ethernet show lacp interface etherent <inf> Displays the LACP interface configuration and status. Syntax Description Interface number, for example “1/1”. Default Modes/Context Any Command Mode History 3.1.1400 Role admin Example switch (config) # show lacp interfaces ethernet 1/4 Port : 1/4 ------------- Port State = Down...
  • Page 319 Rev 1.6.2 Mellanox Technologies...

  • Page 320: Show Lacp Interface Neighbor

    Rev 1.6.2 show lacp interface neighbor show lacp interface neighbor Displays the LACP interface neighbor status. Syntax Description Default Modes/Context Any Command Mode History 3.1.1400 Role admin Example switch (config) # show lacp interfaces neighbor Flags: A - Device is in Active mode P - Device is in Passive mode Channel group 1 neighbors Port 1/4...

  • Page 321: Show Lacp Interfaces Port-Channel

    Rev 1.6.2 show lacp interfaces port-channel show lacp interfaces port-channel Displays the LACP global parameters. Syntax Description Default Modes/Context Any Command Mode History 3.1.1400 Role admin Example switch (config) # show lacp interfaces port-channel Port-channel Module Admin Status is enabled Port-channel System Identifier is 00:01:02:03:04:05 LACP System Priority: 32768 switch (config) #...

  • Page 322: 3.3 Vlans

    Rev 1.6.2 3.3 VLANs vlan vlan {<vlan-id> | <vlan-range>} no vlan {<vlan-id> | <vlan-range>} Creates a VLAN or range of VLANs, and enters a VLAN context. The no form of the command deletes the VLAN or VLAN range. vlan-id Syntax Description 1-4094.

  • Page 323: Name

    Rev 1.6.2 name name <vlan-name> no name Adds VLAN name. The no form of the command deletes the VLAN name. Syntax Description vlan-name 40-character long string. Default No name available. Modes/Context Config Vlan History 3.1.1400 Role admin Example switch (config) # vlan 10 switch (config vlan 10) # name my-vlan-name switch (config vlan 10) # show vlan VLAN...

  • Page 324: Show Vlan

    Rev 1.6.2 show vlan show vlan [id <vlan-id>] Displays the VLAN table. vlan-id Syntax Description 1-4094. Default Modes/Context Any Command Mode History 3.1.1400 Role admin Example switch (config vlan 10) # show vlan VLAN Name Ports ---- ----------- -------------------------------------- default Eth1/2, Eth1/3, Eth1/4/1, Eth1/4/2 ...

  • Page 325: Switchport Mode

    Rev 1.6.2 switchport mode switchport mode {access | trunk | hybrid | access-dcb} no switchport mode Sets the switch port mode. The no form of the command sets the switch port mode to access. Syntax Description access Un-tagged port. 802.1q tagged traffic will be filtered. egress traffic is un-tagged.

  • Page 326: Switchport Access

    Rev 1.6.2 switchport access switchport access vlan <vlan-id> no switchport access vlan Sets the port access VLAN. The no form of the command sets the port access VLAN to 1. Syntax Description vlan-id 1-4094. Default Modes/Context Config interface ethernet Config Interface Port Channel History 3.1.1400 Initial version...

  • Page 327: Switchport {Hybrid, Trunk} Allowed Vlan

    Rev 1.6.2 switchport {hybrid, trunk} allowed vlan switchport {hybrid, trunk} allowed vlan {<vlan> | add <vlan> | remove <vlan> all | except <vlan> | none} Sets the port allowed VLANs. vlan Syntax Description VLAN ID (1-4094) or VLAN range. Add VLAN or range of VLANs. remove Remove VLANs or range of VLANs.

  • Page 328: Show Interface Switchport

    Rev 1.6.2 show interface switchport show interface switchport Displays all interface switch port configurations. Syntax Description Default Modes/Context Any Command Mode History 3.1.1400 Role admin Example switch (config) #show interfaces switchport Interface Mode | Access vlan | Allowed vlans -----------|------------|-------------|--------------------------- Eth1/2 access Eth1/3...
  • Page 329 Rev 1.6.2 Default Modes/Context Config History 3.1.0600 Role admin Example switch (config) # mac-address-table aging-time 50 switch (config) # show mac-address-table aging-time Mac Address Aging Time: 50 switch (config) # Related Commands show mac-address-table show mac-address-table aging time Note Mellanox Technologies...

  • Page 330: Mac-Address-Table Static

    Rev 1.6.2 mac-address-table static mac-address-table static <mac address> vlan <vlan> interface <if-type> <if- number> no mac-address-table static <mac address> vlan <vlan> interface <if-type> <if- number> Configures a static MAC address in the forwarding database. The no form of the command deletes a configured static MAC address from the for- warding database.

  • Page 331: Clear Mac-Address-Table Dynamic

    Rev 1.6.2 clear mac-address-table dynamic clear mac-address-table dynamic Clear the dynamic entries in the MAC address table. Syntax Description Default Modes/Context Config History 3.1.0600 Role admin Example switch (config) # clear mac-address-table dynamic switch (config) # Related Commands mac-address-table aging-time mac-address-table static show mac-address-table Note...

  • Page 332: Show Mac-Address-Table

    Rev 1.6.2 show mac-address-table show mac-address-table [address <mac-address> | interface ethernet <if-num- ber> | vlan [<vlan> | range <range>] | unicast | multicast] Displays the static and dynamic unicast and multicast MAC addresses for the switch. Various of filter options available. Syntax Description mac-address Filter the table to a specific MAC address.

  • Page 333: Show Mac-Address-Table Aging-Time

    Rev 1.6.2 show mac-address-table aging-time show mac-address-table aging-time Displays the MAC address table aging time. Syntax Description Default Modes/Context Any Command Mode History 3.1.0600 Role admin Example switch (config) # mac-address-table aging-time 300 switch (config) # show mac-address-table aging-time Mac Address Aging Time: 300 switch (config) # Related Commands mac-address-table aging-time...

  • Page 334: 3.5 Spanning Tree

    Rev 1.6.2 3.5 Spanning Tree spanning-tree spanning-tree no spanning-tree Globally enables the spanning tree feature. The no form disables the spanning tree feature. Syntax Description Default Spanning tree is enabled. Modes/Context Config History 3.1.0000 Role admin Example switch (config) # no spanning-tree switch (config) # Related Commands show spanning-tree...

  • Page 335: Spanning-Tree (Timers)

    Rev 1.6.2 spanning-tree (timers) spanning-tree [forward-time <time in secs> | hello-time <time in secs> | max-age <time in secs>] no spanning-tree [forward-time | hello-time | max-age] Sets the spanning tree timers. The no form of the command sets the timer to default. Syntax Description forward-time Controls how fast a port changes its spanning tree state...

  • Page 336: Spanning-Tree Port Type (Default Global)

    Rev 1.6.2 spanning-tree port type (default global) spanning-tree port type <port-type> default no spanning-tree port type default Configures all switch interfaces as edge/network/normal ports. These ports can be connected to any type of device. The no form of the command disables the spanning tree operation. Syntax Description port-type •...

  • Page 337: Spanning-Tree Priority

    Rev 1.6.2 spanning-tree priority spanning-tree priority <bridge-priority> no spanning-tree priority Sets the spanning tree bridge priority. The no form of the command sets the bridge priority to default. Syntax Description bridge-priority Sets the bridge priority for the spanning tree. Its value must be in steps of 4096, starting from 0.

  • Page 338: Spanning-Tree Port-Priority

    Rev 1.6.2 spanning-tree port-priority spanning-tree port-priority <priority> no spanning-tree port-priority Configures the spanning-tree interface priority. The no form of the command returns configuration to its default. Syntax Description priority Spanning tree interface priority. The possible values are: 0, 16, 32,48, 64, 80, 96, 112, 128,144, 160, 176, 192, 208, 224, 240.

  • Page 339: Spanning-Tree Cost

    Rev 1.6.2 spanning-tree cost spanning-tree cost <port cost> no spanning-tree cost Configures the interface cost of the spanning tree. The no form of the command returns configuration to its default. Syntax Description port cost Sets the spanning tree cost of an interface. Value range is 0-200000000.

  • Page 340: Spanning-Tree Port Type

    Rev 1.6.2 spanning-tree port type spanning-tree port type <port type> no spanning-tree port type Configures spanning-tree port type The no form of the command returns configuration to default. Syntax Description port type Sets the spanning-tree port type. The port type parame- ter has four options: •...

  • Page 341: Spanning-Tree Guard

    Rev 1.6.2 spanning-tree guard spanning-tree guard {loop | root} no spanning-tree guard {loop | root} Configures spanning-tree guard. The no form of the command returns configuration to default. Syntax Description loop Enables loop-guard on the interface. If the loop-guard is enabled, upon a situation where the interface fails to receive BPDUs the switch will not egress data traffic on this interface.

  • Page 342: Spanning-Tree Bpdufilter

    Rev 1.6.2 spanning-tree bpdufilter spanning tree bpdufilter {disable | enable} no spanning tree bpdufilter Configures spanning-tree BPDU filter on the interface. The interface will ignore any BPDU that it receives and will not send PDBUs, The STP state on the port will move to the forwarding state.

  • Page 343: Clear Spanning-Tree Counters

    Rev 1.6.2 clear spanning-tree counters clear spanning-tree counters Clears the spanning-tree counters. Syntax Description Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # clear panning-tree counters switch (config) # Related Commands show spanning tree Note Mellanox Technologies...

  • Page 344: Show Spanning-Tree

    Rev 1.6.2 show spanning-tree show spanning-tree [detail | interface <type> <number>] Displays spanning tree information. Syntax Description detail Displays detailed spanning-tree configuration and sta- tistics. interface <type> <num- Displays the running state for a specific interface. ber> Options for “type”: ethernet or port-channel. Options for “number”: <slot/port>...

  • Page 345: 3.6 Igmp Snooping

    Rev 1.6.2 3.6 IGMP Snooping ip igmp snooping (admin) ip igmp snooping no ip igmp snooping Enables IGMP snooping globally or per VLAN. The no form of the command disables IGMP snooping globally or per VLAN. Syntax Description Default IGMP snooping is disabled, globally and per VLAN. Modes/Context Config Config Vlan...

  • Page 346: Ip Igmp Snooping (Config)

    Rev 1.6.2 ip igmp snooping (config) ip igmp snooping {last-member-query-interval <1-25> | proxy reporting mrouter-timeout <60-600> | port-purge-timeout <130-1225> | report-suppres- sion-interval <1-25>} no ip igmp snooping {last-member-query-interval | proxy reporting | mrouter- timeout | report-suppression-interval} Configures IGMP global parameters. The no form of the command resets the IGMP global parameters to default.
  • Page 347 Rev 1.6.2 Example switch (config) # ip igmp snooping report-suppression-interval 3 switch (config) # show ip igmp snooping IGMP snooping global configuration: IGMP snooping globally enabled IGMP snooping operationally enabled Proxy-reporting globally disabled Last member query interval is 1 seconds Mrouter timeout is 125 seconds Port purge timeout is 260 seconds Report suppression interval is 3 seconds...

  • Page 348: Ip Igmp Snooping Fast-Leave

    Rev 1.6.2 ip igmp snooping fast-leave ip igmp snooping fast-leave no ip igmp snooping fast-leave Enables fast leave processing on a specific interface. The no form of the command disables fast leave processing on a specific interface. Syntax Description Default Normal-leave is enabled.

  • Page 349: Ip Igmp Snooping Static-Group

    Rev 1.6.2 ip igmp snooping static-group ip igmp snooping static-group <IP address> interface <type> <number> no ip igmp snooping static-group <IP address> interface <type> <number> Creates a static multicast group and attaches a port to a specified group. The no form of the command deletes the interface from the multicast group. Syntax Description Ip address Multicast IP address <224.x.x.x - 239.255.255.255>...
  • Page 350 Rev 1.6.2 Mellanox Technologies...

  • Page 351: Ip Igmp Snooping Mrouter

    Rev 1.6.2 ip igmp snooping mrouter ip igmp snooping mrouter interface <type> <number> no ip igmp snooping mrouter interface <type> <number> Creates a static multicast router port on a specific VLAN, on a specific interface. The no form of the command removes the static multicast router port from a specific VLAN.

  • Page 352: Ip Igmp Snooping Unregistered Multicast

    Rev 1.6.2 ip igmp snooping unregistered multicast ip igmp snooping unregistered multicast <options> no ip igmp snooping unregistered multicast Sets the behavior of the snooping switch for unregistered multicast traffic. The no form of the command sets it default. Syntax Description options •...

  • Page 353: Show Ip Igmp Snooping

    Rev 1.6.2 show ip igmp snooping show ip igmp snooping Displays IGMP snooping information for all VLANs or a specific VLAN. Syntax Description Default Modes/Context Any Command Mode History 3.1.1400 Role admin Example switch (config) # show ip igmp snooping IGMP snooping global configuration: IGMP snooping globally enabled IGMP snooping operationally enabled...

  • Page 354: Show Ip Igmp Snooping Groups

    Rev 1.6.2 show ip igmp snooping groups show ip igmp snooping groups Displays per VLAN the list of multicast groups attached (static or dynamic allocated) per port. Syntax Description Default Modes/Context Any Command Mode History 3.1.1400 Role admin Example switch (config) # show ip igmp snooping groups Vlan ID Group St/Dyn...

  • Page 355: Show Ip Igmp Snooping Vlan

    Rev 1.6.2 show ip igmp snooping vlan show ip igmp snooping vlan {<vlan/vlan-range> | all} Displays IGMP configuration per VLAN or VLAN range. Syntax Description vlan/vlan range Displays IGMP VLAN configuration per specific VLAN or VLAN range. Display IGMP VLAN configuration on all VLAN. Default Modes/Context Any Command Mode...

  • Page 356: Show Ip Igmp Snooping Mrouter

    Rev 1.6.2 show ip igmp snooping mrouter show ip igmp snooping mrouter Displays IGMP snooping multicast router information. Syntax Description Default Modes/Context Any Command Mode History 3.1.1400 Role admin Example switch (config) # show ip igmp snooping mrouter Vlan Ports -------- ------------ Eth1/1(static)

  • Page 357: Show Ip Igmp Snooping Interfaces

    Rev 1.6.2 show ip igmp snooping interfaces show ip igmp snooping interfaces Displays IGMP snooping interface information. Syntax Description Default Modes/Context Any Command Mode History 3.1.1400 Role admin Example switch (config) # show ip igmp snooping interfaces interface leave-mode ----------- ------------ Normal Normal...

  • Page 358: Show Ip Igmp Snooping Statistics

    Rev 1.6.2 show ip igmp snooping statistics show ip igmp snooping statistics Displays IGMP snooping statistical counters. Syntax Description Default Modes/Context Any Command Mode History 3.1.1400 Role admin Example switch (config) # show ip igmp snooping statistics Snooping Statistics for VLAN 1 General queries received : 0 Group specific queries received : 0 V1/V2 reports received : 0...

  • Page 359: Link Layer Discovery Protocol (Lldp)

    Rev 1.6.2 3.7 Link Layer Discovery Protocol (LLDP) lldp lldp no lldp Enables LLDP globally. The no form of the command disables the LLDP. Syntax Description Default Disabled Modes/Context Config History 3.2.0300 Role admin Example switch (config)# lldp switch (config)# Related Commands show lldp local Note...

  • Page 360: Lldp Reinit

    Rev 1.6.2 lldp reinit lldp reinit <seconds> no lldp reinit Sets the delay in seconds from enabling the LLDP on the port until re-initialization will be attempted. The no form of the command sets the parameter to default. Syntax Description seconds 1-10 Default...

  • Page 361: Lldp Timer

    Rev 1.6.2 lldp timer lldp timer <seconds> no lldp timer Sets the LLDP interval at which LLDP frames are transmitted. (lldpMessageTxInter- val) The no form of the command sets the parameter to default. Syntax Description seconds 5-32768 Default Modes/Context Config History 3.2.0300 Role...

  • Page 362: Lldp Tx-Delay

    Rev 1.6.2 lldp tx-delay lldp tx-delay <seconds> no lldp tx-delay Indicates the delay in seconds between successive LLDP frame transmissions The no form of the command sets the parameter to default. Syntax Description seconds 1-8192 Default Modes/Context Config History 3.2.0300 Role admin Example...

  • Page 363: Lldp Tx-Hold-Multiplier

    Rev 1.6.2 lldp tx-hold-multiplier lldp tx-hold-multiplier <seconds> no lldp tx-hold-multiplier The time-to-live value expressed as a multiple of the lldpMessageTxInterval object. The no form of the command sets the parameter to default. Syntax Description seconds 1-8192 Default Modes/Context Config History 3.2.0300 Role admin...

  • Page 364: Lldp {Receive | Transmit

    Rev 1.6.2 lldp {receive | transmit} lldp {receive | transmit} no lldp {receive | transmit} Enables LLDP to be received or transmitted on this port. The no form of the command disables the LLDP to be received or transmitted on this port.

  • Page 365: Lldp Tlv-Select

    Rev 1.6.2 lldp tlv-select lldp tlv-select { [port-description] [sys-name] [sys-description] [sys-capababili- ties] [management-address] [none] all} Sets the LLDP basic TLVs to be transmitted on this port. Syntax Description port-description LLDP port description TLV sys-name LLDP system name TLV sys-description LLDP system description TLV sys-capabilities LLDP system capabilities TLV management-address...

  • Page 366: Show Lldp Local

    Rev 1.6.2 show lldp local show lldp local Shows LLDP local information. Syntax Description Default Modes/Context Any Command Mode History 3.2.0300 Role admin Example switch (config)# show lldp local LLDP is Enabled Local global configuration Chassis sub type: macAddress (4) Chassis id: 0002C9030046AF00 System Name: my-switch System Description: SX1036...

  • Page 367: Show Lldp Interface

    Rev 1.6.2 show lldp interface show lldp interface [ethernet <inf>] Shows LLDP local interface table information. Syntax Description Interface number, for example 1/1. Default Modes/Context Any Command Mode History 3.2.0300 Role admin Example switch (config)# show lldp interface ethernet 1/1 TLV flags: PD: port-description, SN: sys-name, SD: sys-description, SC: sys-capa- bilities, MA: management-address...

  • Page 368: Show Lldp Interface Ethernet Remote

    Rev 1.6.2 show lldp interface ethernet <inf> remote show lldp interface ethernet <inf> remote Shows LLDP remote interface table information. Syntax Description local interface number, for example 1/1. Default Modes/Context Any Command Mode History 3.2.0300 Role admin Example switch (config)# show lldp interface ethernet 1/1 Ethernet 1/1 Remote Index:1 Remote chassis id: 0002C903005C8DB0 ;...

  • Page 369: Show Lldp Timers

    Rev 1.6.2 show lldp timers show lldp timers Shows LLDP timers configuration Syntax Description Default Modes/Context Any Command Mode History 3.2.0300 Role admin Example switch (config)# show lldp timers msg-tx-interval:30 tx-delay:2 tx-hold:4 tx-reinit-delay:2 switch (config)# Related Commands Note Mellanox Technologies...

  • Page 370: Show Lldp Statistics Global

    Rev 1.6.2 show lldp statistics global show lldp statistics global Shows LLDP global statistics Syntax Description Default Modes/Context Any Command Mode History 3.2.0300 Role admin Example switch (config)# show lldp timers Remote Table Last Change Time : 10300 Remote Table Inserts : 5 Remote Table Deletes : 0 Remote Table Drops : 0 Remote Table Ageouts : 0...

  • Page 371: Show Lldp Statistics [Interface Ethernet ]

    Rev 1.6.2 show lldp statistics [interface ethernet <inf>] show lldp statistics [interface ethernet <inf>] Shows LLDP interface statistics Syntax Description Default Modes/Context Any Command Mode History 3.2.0300 Role admin Example switch (config)# show lldp statistics ethernet 1/1 Interface Frames TLVs TLVs Ageout Out Discarded Errors Total Discarded Unrecognize...

  • Page 372: 3.8 Quality Of Service

    Rev 1.6.2 3.8 Quality of Service 3.8.1 Enhanced Transmission Selection (ETS) dcb ets enable dcb ets enable no dcb ets enable Sets the switch egress scheduling mode to be weighted round robin. The no form of the command sets the switch egress scheduling mode to be strict pri- ority.

  • Page 373: Dcb Ets Tc Bandwidth

    Rev 1.6.2 dcb ets tc bandwidth dcb ets tc bandwidth <tc-0> <tc-1> <tc-2> <tc-3> no dcb ets tc bandwidth Configures the bandwidth limit of the traffic class. The no form of the command sets the bandwidths per traffic class back to its default. Syntax Description 0-100.

  • Page 374: Vlan Map-Priority

    Rev 1.6.2 vlan map-priority vlan map priority <priority> traffic-class <tc> no vlan map priority <priority> Maps an VLAN user priority to a traffic class. The no form of the command sets the mapping back to default. Syntax Description Default Priority 0,1 mapped to tc 0. Priority 2,3 mapped to tc 1.

  • Page 375: Show Dcb Ets

    Rev 1.6.2 show dcb ets show dcb ets Displays ETS configuration and operational data. Syntax Description Default ETS is enabled. Modes/Context Any Command Mode History 3.1.0000 Role admin Example switch (config)# show dcb ets ETS enabled Bandwidth -------------------------- Number of Traffic Class: 4 switch (config) # Related Commands Note...

  • Page 376: Show Dcb Ets Interface

    Rev 1.6.2 show dcb ets interface show dcb ets interface <type> <number> Displays ETS configuration and operational data, per interface. Syntax Description type ethernet or port-channel number interface number, i.e. 1/1 Default ETS is enabled. Modes/Context Any Command Mode History 3.1.0000 Role admin...
  • Page 377 Rev 1.6.2 Example switch (config)# show dcb ets interface ethernet 1/1 ETS Port Mode :ON MODE ETS Oper State :INIT STATE ETS State Machine Type :Assymetric ----------------------------------------------- ETS Local Port Info ----------------------------------------------- TC bandwidth table ----------------------------------------------- Bandwidth RecomBandwidth ----------------------------------------------- priority assignment table -------------------------------------- Priority --------------------------------------...

  • Page 378: Dcb Priority-Flow-Control Enable

    Rev 1.6.2 3.8.2 Priority Flow Control (PFC) dcb priority-flow-control enable dcb priority-flow-control enable no dcb priority-flow-control enable Enables PFC globally on the switch. The no form of the command globally disables PFC on the switch. Syntax Description Default PFC is disabled. Modes/Context Config History...

  • Page 379: Dcb Priority-Flow-Control Priority

    Rev 1.6.2 dcb priority-flow-control priority dcb priority-flow-control priority <prio> enable no dcb priority-flow-control priority <prio> enable Enables PFC per priority on the switch. The no form of the command disables PFC per priority on the switch. Syntax Description prio 0-7. Default PFC is disabled for all priorities.

  • Page 380: Dcb Priority-Flow-Control Mode On

    Rev 1.6.2 dcb priority-flow-control mode on dcb priority-flow-control mode on [force] no dcb priority-flow-control mode Enables PFC per interface. The no form of the command disables PFC per interface. Syntax Description force Force command implementation. Default PFC is disabled for all interfaces. Modes/Context Config interface ethernet Config Interface Port Channel...

  • Page 381: Show Dcb Priority-Flow-Control

    Rev 1.6.2 show dcb priority-flow-control show dcb priority-flow-control [interface <type> <inf>] [detail] Displays DCB priority flow control configuration and status. Syntax Description type • ethernet • port-channel The interface number. detail Adds details information to the show output. Default Modes/Context Any Command Mode History 3.1.0000...

  • Page 382: 3.9 Access Control List

    Rev 1.6.2 3.9 Access Control List ipv4/mac access-list {ipv4 | mac} access-list <acl-name> no {ipv4 | mac} access-list <acl-name> Creates a MAC or IPv4 ACL and enter the ACL configuration mode. The no form of the command deletes the ACL. Syntax Description ipv4 | mac IPv4 or MAC - access list.

  • Page 383: Ipv4/Mac Port Access-Group

    Rev 1.6.2 ipv4/mac port access-group {ipv4 | mac} port access-list <acl-name> no {ipv4 | mac} port access-list <acl-name> Binds an ACL to the interface. The no form of the command unbinds the ACL from the interface. Syntax Description IPv4 or MAC - access list. ipv4 | mac ACL name.

  • Page 384: Deny/Permit (Mac Acl Rule)

    Rev 1.6.2 deny/permit (MAC ACL rule) [seq-number <sequence-number>] {deny|permit } {any | <source-mac> [mask <mac>]} {any |<destination-mac> [mask <mac>]} [protocol <protocol>] [cos <cos-value>] [vlan <vlan-id>] [action <action-id>] no <sequence-number> Creates a rule for MAC ACL. The no form of the command deletes a rule from the MAC ACL. Syntax Description sequence-number Optional parameter to set a specific sequence number...

  • Page 385: Deny/Permit (Ipv4 Acl Rule)

    Rev 1.6.2 deny/permit (IPv4 ACL rule) [seq-number <sequence-number>] {permit | deny} ip {<source-ip> [mask <ip>] | [any]} {<dest-ip> [mask <ip>] | [any]} [action <action-id>] no <sequence-number> Creates a rule for IPv4 ACL. The no form of the command deletes a rule from the IPv4 ACL. Syntax Description sequence-number Optional parameter to set a specific sequence number...

  • Page 386: Deny/Permit (Ipv4 Tcp/Udp Acl Rule)

    Rev 1.6.2 deny/permit (IPv4 TCP/UDP ACL rule) [seq-number <sequence-number>] {permit | deny} {tcp | udp} {<source-ip> [mask <ip>] | [any]} {<dest-ip> [mask <ip>]| [any]} [eq-source <port-number>] [eq-destination <port-number>] [action <action-id>] no <sequence-number> Creates a rule for IPv4 UDP/TCP ACL. The no form of the command deletes a rule from the ACL. Syntax Description sequence-number Optional parameter to set a specific sequence number...

  • Page 387: Access-List Action

    Rev 1.6.2 access-list action access-list action <action-profile-name> no access-list action <action-profile-name> Creates access-list action profile and entering the action profile configuration mode. The no form of the command deletes the action profile. Syntax Description action-profile-name given name for the profile. Default Modes/Context Config...

  • Page 388: Vlan-Map

    Rev 1.6.2 vlan-map vlan-map <vlan-id> no vlan-map Adds action to map a new VLAN to the packet (in the ingress port or VLAN). The no form of the command removes the action to map a new VLAN. Syntax Description vlan-id 0-4095.

  • Page 389: Show Access-List Action

    Rev 1.6.2 show access-list action show access-list action {<action-profile-name> | summary} Displays the access-list action profiles summary. Syntax Description action-profile-name Filter the table according to the action profile name. summary Display summary of the action list. Default Modes/Context Config History 3.2.0230 Role admin...

  • Page 390: Show Mac/Ipv4 Access-Lists

    Rev 1.6.2 show mac/ipv4 access-lists show [mac |ipv4 |] access-lists <access-list-name> Displays the list of rules for the MAC/IPv4 ACL. Syntax Description ipv4 | mac IPv4 or MAC - access list. access-list-name ACL name. Default Modes/Context Any Command Mode History 3.1.1400 Role admin...

  • Page 391: Show Mac/Ipv4 Access-Lists Summary

    Rev 1.6.2 show mac/ipv4 access-lists summary show [mac |ipv4 |] access-lists summary Displays the summary of number of rules per ACL, and the interfaces attached. Syntax Description ipv4 | mac IPv4 or MAC - Access list access-list-name ACL name Default Modes/Context Any Command Mode History...

  • Page 392: Chapter 4 Ip Routing

    Rev 1.6.2 IP Routing 4.1 General ip routing ip routing no ip routing Enables L3 capabilities: IP router interfaces, static routing and routing protocols. The no form of the command disables L3 capabilities, however does not delete the L3 configuration. Syntax Description Default IP routing is disabled...

  • Page 393: Show Ip Routing

    Rev 1.6.2 show ip routing show ip routing Displays IP routing admin state. Syntax Description Default Modes/Context Any Command Mode History 3.2.0230 Role admin Example switch (config) # show ip routing IP routing: enabled switch (config) # Related Commands ip routing Note 4.1.1 IP Interface interface vlan...
  • Page 394 Rev 1.6.2 Related Commands ip routing vlan <vlan-id> switchport mode switchport access show interfaces vlan Note • Make sure the VLAN was created, using the command “vlan <vlan-id>” in the global con- figuration mode • The VLAN must be assigned to one of the L2 interfaces. To do so, run the command “swichport ...”...

  • Page 395: Ip Address

    Rev 1.6.2 ip address ip address <ip-address> <mask> no ip address <ip-address> <mask> Enters user-defined description for the interface. Syntax Description ip-address IPv4 address mask There are two possible ways to the mask: • /length (i.e. /24) • Network address (i.e. 255.255.255.0) Default 0.0.0.0/0 Modes/Context...

  • Page 396: Counters

    Rev 1.6.2 counters counters no counters Enables counters gathering on the IP interface. The no form of the command disables counters gathering on the IP interface. Syntax Description Default counters are disabled. Modes/Context Config vlan interface History 3.2.0230 Role admin Example switch (config) # interface vlan 10 switch (config interface vlan 10) # counters...

  • Page 397: Description

    Rev 1.6.2 description description <string> no description Enters a description for the interface. The no form of the command sets the description to default. Syntax Description string user defined string Default “” Modes/Context Config vlan interface History 3.2.0230 Role admin Example switch (config interface vlan 10) #description my-ip-interface switch (config interface vlan 10) #show interfaces vlan 10...

  • Page 398: Mtu

    Rev 1.6.2 mtu <size> [force] no mtu Sets the MTU for the interface. The no form of the command sets the MTU to default. Syntax Description size 1518-9216. force Forces command implementation. Default 1522 Modes/Context Config vlan interface History 3.2.0230 Role admin Example...

  • Page 399: Shutdown

    Rev 1.6.2 shutdown shutdown no shutdown Disables the interface. The no form of the command enables the interface. Syntax Description Default The interface is enabled. Modes/Context Config vlan interface History 3.1.0000 Role admin Example switch (config interface vlan 20) # shutdown switch (config interface vlan 20) # show interfaces vlan 20 Vlan 20 Admin state: Disabled...

  • Page 400: Clear Counters

    Rev 1.6.2 clear counters clear counters Clears the interface counters. Syntax Description Default Modes/Context Config vlan interface History 3.2.0230 Role admin Example switch (config interface vlan 10) # clear counters switch (config interface vlan 10) # Related Commands interface vlan counters Note Mellanox Technologies...

  • Page 401: Show Interfaces Vlan

    Rev 1.6.2 show interfaces vlan show interfaces vlan [<vlan-ID> | status] Displays the interface VLAN configuration and status per VLAN or as a summarized list. Syntax Description vlan-id A numeric range of 1-4094 status Displays a summarized status table. Default Modes/Context Any Command Mode History...

  • Page 402: Interface Loopback

    Rev 1.6.2 4.1.2 Loopback Interface interface loopback interface loopback <id> no interface vlan <id> Creates a loopback interface and enters the interface configuration mode. The no form of the command deletes the interface. Syntax Description A numeric range of 1-32 Default Modes/Context Config...

  • Page 403: Ip Route

    Rev 1.6.2 Related Commands Note • 4.1.4 Routing and ECMP ip route ip route <IP prefix> <netmask> <next hop IP address> no ip route <IP prefix> <netmask> <next hop IP address> Sets a static route. The no form of the command deletes the static route Syntax Description IP address IPv4 address...

  • Page 404: Ip Load-Sharing

    Rev 1.6.2 ip load-sharing ip load-sharing <type> no ip load-sharing This command sets the ECMP load sharing mode. The no form of the command sets the load-sharing to default. Syntax Description type • source-ip-port • destination-ip-port • source-destination-ip-port • traffic-class •...

  • Page 405: Show Ip Route

    Rev 1.6.2 show ip route show ip route Displays the route table. Syntax Description Default Modes/Context Any Command Mode History 3.1.0000 Role admin Example switch (config) # show ip route Destination Mask Gateway Interface Source default 0.0.0.0 172.28.0.1 mgmt0 DHCP 10.10.10.0 255.255.255.0 172.28.2.4...

  • Page 406: Show Ip Load-Sharing

    Rev 1.6.2 show ip load-sharing show ip load-sharing Displays ECMP hash attribute. Syntax Description Default Modes/Context Any Command Mode History 3.2.0230 Role admin Example switch (config) # show ip load-sharing Load sharing: all switch (config) # Related Commands ip load-sharing Note Mellanox Technologies...

  • Page 407: Ip Arp

    Rev 1.6.2 4.1.5 Network to Media Resolution (ARP) ip arp ip arp <ip-address> <MAC-address> no ip arp <ip-address> Adds static ARP entry for the defined interface. The no form of the command deletes the static ARP entry from the interface. Syntax Description IP address IPv4 Address...

  • Page 408: Ip Arp Timeout

    Rev 1.6.2 ip arp timeout ip arp timeout <timeout-value> no ip arp timeout Sets the dynamic arp cache timeout. The no form of the command sets the timeout to default. Syntax Description timeout-value Time (in seconds) that an entry remains in the ARP cache.

  • Page 409: Clear Ip Arp

    Rev 1.6.2 clear ip arp clear ip arp {[vlan <vlan-id>] | [<IP-address>]} Clears dynamic arp entries from the ARP table with possible filters. Syntax Description vlan-id Clears dynamic ARP entries only for a specific VLAN, range1-4094 IP address Clears dynamic ARP entries for a specific IP address. Default Modes/Context Config...

  • Page 410: Show Ip Arp

    Rev 1.6.2 show ip arp show ip arp [count] Displays the ARP table. Syntax Description count show ARP table size (inband and out or band) Default Modes/Context Any Command Mode History 3.2.0230 Role admin Example switch (config) # show ip arp ARP Timeout: 1500 Total number of entries: 9 Address...

  • Page 411: Ping

    Rev 1.6.2 4.1.6 IP Diagnostic Tools ping ping [-LRUbdfnqrvVaA] [-c count] [-i interval] [-w deadline] [-p pattern] [-s packetsize] [-t ttl] [-I interface or address] [-M mtu discovery hint] [-S sndbuf] [- T timestamp option ] [-Q tos ] [hop1 ...] destination Sends ICMP echo requests to a specified host.

  • Page 412: Traceroute

    Rev 1.6.2 traceroute traceroute [-46dFITUnrAV] [-f first_ttl] [-g gate,...] [-i device] [-m max_ttl] [-N squeries] [-p port] [-t tos] [-l flow_label] [-w waittime] [-q nqueries] [-s src_addr] [-z sendwait] host [packetlen] Traces the route packets take to a destination. Mellanox Technologies...
  • Page 413 Rev 1.6.2 Syntax Description Uses IPv4. Uses IPv6 Enables socket level debugging. Sets DF (don't fragment bit) on. Uses ICMP ECHO for tracerouting. Uses TCP SYN for tracerouting. Uses UDP datagram (default) for tracerouting. Does not resolve IP addresses to their domain names. Bypasses the normal routing and send directly to a host on an attached network.
  • Page 414 Rev 1.6.2 Default Modes/Context Config History 3.1.0000 Role admin Example switch (config) # traceroute 192.168.10.70 traceroute to 192.168.10.70 (192.168.10.70), 30 hops max, 40 byte packets 1 172.30.0.1 (172.30.0.1) 3.632 ms 2.849 ms 3.544 ms 2 10.222.128.46 (10.222.128.46) 3.176 ms 3.289 ms 3.656 ms 3 10.158.128.30 (10.158.128.30) 15.331 ms 15.819 ms 16.388 ms 4 10.158.128.65 (10.158.128.65) 20.468 ms 7.893 ms 12.27 ms 5 10.7.34.115 (10.7.34.115) 16.405 ms 11.985 ms 12.264 ms...

  • Page 415: Tcpdump

    Rev 1.6.2 tcpdump tcpdump [-aAdeflLnNOpqRStuUvxX] [-c count] [ -C file_size ] [ -E algo:secret ] [ -F file ] [ -i interface ] [ -M secret ] [ -r file ] [ -s snaplen ] [ -T type ] [ -w file ] [ -W filecount ] [ -y datalinktype ] [ -Z user ] [ expression ] Invokes standard binary, passing command line parameters straight through.

This manual is also suitable for:

Sx1018hp

Table of Contents