Ethernet interface commands Common Ethernet interface commands bandwidth Use bandwidth to configure the expected bandwidth of an interface. Use undo bandwidth to restore the default. Syntax bandwidth bandwidth-value undo bandwidth Default The expected bandwidth (in kbps) is the interface baud rate divided by 1000. Views Ethernet interface view Predefined user roles...
Usage guidelines CAUTION: The default command might interrupt ongoing network services. Make sure you are fully aware of the impacts of this command when you use it in a live network. This command might fail to restore the default settings for some commands for reasons such as command dependencies or system restrictions.
Page 11
Views Any view Predefined user roles network-admin network-operator Parameters inbound: Displays inbound traffic statistics. outbound: Displays outbound traffic statistics. interface-type: Specifies an interface type. interface-number: Specifies an interface number. Usage guidelines This command displays traffic statistics within a statistics polling interval specified by the flow-interval command.
Field Description --: Not supported The statistical item is not supported. Related commands • flow-interval • reset counters interface display counters rate Use display counters rate to display traffic rate statistics of interfaces in up state over the last statistics polling interval. Syntax display counters rate { inbound | outbound } interface [ interface-type [ interface-number ] ] Views...
Table 2 Command output Field Description Interface Abbreviated interface name. Average rate (in pps) of receiving or sending packets during the statistics Total (pkts/sec) polling interval. Average rate (in pps) of receiving or sending broadcast packets during the Broadcast (pkts/sec) statistics polling interval.
Page 14
ErrAnalyse ErrSrcMAC ErrHdrLen ETH send packet statistics: L3OutNum : 412 VLANOutNum FastOutNum : 181 L2OutNum : 6351 ETH send error statistics: MbufRelayNum NullMbuf ErrAdjFwd ErrPrepend ErrHdrLen ErrPad ErrQosTrs ErrVLANTrs ErrEncap ErrTagVLAN IfShut IfErr Table 3 Command output Field Description receive packet Statistics about the Ethernet packets received on the Ethernet module.
Field Description • FastOutNum—Number of packets fast forwarded. • L2OutNum—Number of packets sent out of Layer 2 Ethernet interfaces. • MbufRelayNum—Number of packets transparently sent. Statistics about the error Ethernet packets in the outbound direction on the Ethernet module: • NullMbuf—Number of packets with null pointers.
Page 16
If you specify an interface type but do not specify an interface number, this command displays information about all interfaces of that type. If you specify both the interface type and interface number, this command displays information about the specified interface. Examples # Display information about Layer 2 interface GigabitEthernet 1/0/1.
Page 17
0 aborts, 0 deferred, 0 collisions, 0 late collisions 0 lost carrier, - no carrier Table 4 Command output Field Description State of the Ethernet interface: • Administratively DOWN—The Ethernet interface was shut down with the shutdown command. The interface is administratively down.
Page 18
Field Description half-duplex mode The interface is operating in half duplex mode. full-duplex mode The interface is operating in full duplex mode. The duplex mode of the interface is unknown because the duplex unknown-duplex mode mode negotiation fails or the interface is physically disconnected. Link speed type is autonegotiation The interface is configured with the speed auto command.
Page 19
Field Description rate. A hyphen (-) indicates that the statistical item is not supported. Average rate of outbound traffic in the last 300 seconds, in pps and Bps, and the ratio of the actual rate to the maximum interface Last 300 second output rate.
Page 20
Field Description pass through the interface. • Symbol error frames—Frames that contained at least one undefined symbol. • Unknown operation code frames—Non-pause MAC control frames. • Length error frames—Frames whose 802.3 length fields did not match the actual frame length (46 to 1500 bytes). Number of inbound frames dropped because the receiving buffer ignored of the port ran low.
Page 21
Interface Link Protocol Primary IP Description GE1/0/1 GE1/0/2 InLoop0 UP(s) M-GE0/0/0 DOWN DOWN NULL0 UP(s) REG0 DOWN -- Vlan1 192.168.0.59 Vlan2 DOWN DOWN Brief information on interfaces in bridge mode: Link: ADM - administratively down; Stby - standby Speed: (a) - auto Duplex: (a)/A - auto;...
Page 22
Table 5 Command output Field Description Brief information on interfaces in Brief information about Layer 3 interfaces. route mode: • ADM—The interface has been shut down by the network administrator. To recover its physical layer state, run the undo Link: ADM - administratively down; shutdown command.
Field Description • F(a)—Autonegotiated full duplex. • H—Half duplex. • H(a)—Autonegotiated half duplex. Link type of the interface: • A—Access. Type • H—Hybrid. • T—Trunk. PVID Port VLAN ID. Cause for the physical link state of an interface to be DOWN: •...
Parameters interface-type: Specifies an interface type. If you do not specify an interface type, this command displays information about dropped packets on all the interfaces on the device. interface-number: Specifies an interface number. If you specify an interface type only, this command displays information about dropped packets on the specified type of interfaces.
full: Configures the interface to operate in full duplex mode, so that the interface can receive and transmit packets at the same time. half: Configures the interface to operate in half duplex mode, so that the interface can only receive or transmit packets at a given time.
Use undo flow-control to disable generic flow control on the Ethernet interface. Syntax flow-control undo flow-control Default Generic flow control is disabled on an Ethernet interface. Views Ethernet interface view Predefined user roles network-admin Usage guidelines To implement flow control on a link, enable the generic flow control function at both ends of the link. TxRx mode generic flow control enables an Ethernet interface to perform the following actions: •...
Predefined user roles network-admin Usage guidelines With the flow-control receive enable command configured, an interface can receive, but not send, flow control frames. When the interface receives a flow control frame from its peer, it suspends sending packets to the peer. When traffic congestion occurs on the interface, it cannot send flow control frames to the peer.
Syntax interface interface-type interface-number Views System view Predefined user roles network-admin Parameters interface-type: Specifies an interface type. interface-number: Specifies an interface number. Examples # Enter GigabitEthernet 1/0/1 interface view. <Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] jumboframe enable Use jumboframe enable to allow jumbo frames within the specified length to pass through. Use undo jumboframe enable to prevent jumbo frames from passing through.
link-delay Use link-delay to set the physical state change suppression interval on an Ethernet interface. Use undo link-delay to restore the default. Syntax link-delay [ msec ] delay-time [ mode { up | updown } ] undo link-delay Default Each time the physical link of a port goes up or comes down, the interface immediately reports the change to the CPU.
Use port auto-power-down to enable auto power-down on an Ethernet interface. Use undo port auto-power-down to restore the default. Syntax port auto-power-down undo port auto-power-down Default Auto power-down is disabled on Ethernet interfaces. Views Ethernet interface view Predefined user roles network-admin Usage guidelines When the auto power-down function is enabled on an interface and the interface has been down for...
If you do not specify an interface type, this command clears statistics for all interfaces. If you specify only the interface type, this command clears statistics for all interfaces of that type. If you specify both the interface type and the interface number, this command clears statistics for the specified interface.
interface-number: Specifies an interface number. If you do not specify this argument, the command clears dropped packet statistics on all interfaces of the specified type. Examples # Clear dropped packet statistics on GigabitEthernet 1/0/1. <Sysname> reset packet-drop interface gigabitethernet 1/0/1 # Clear dropped packet statistics on all interfaces.
Views Ethernet interface view Predefined user roles network-admin Parameters 10: Sets the interface speed to 10 Mbps. 100: Sets the interface speed to 100 Mbps. 1000: Sets the interface speed to 1000 Mbps. 10000: Sets the interface speed to 10000 Mbps. auto: Enables the interface to negotiate a speed with its peer.
Usage guidelines This command takes effect after you configure it on the interface at either end of a link and the two interfaces are configured to automatically negotiate the speed. This command is applicable only to GE interfaces. Examples # Enable automatic negotiation for speed downgrading on GigabitEthernet 1/0/1. <Sysname>...
storm-constrain command. Do not configure the storm constrain command and the broadcast-suppression command at the same time. Otherwise, the traffic suppression result is not determined. When you configure the suppression threshold in kbps, the actual suppression threshold might be different from the configured one as follows: •...
Use mdix-mode to configure the Medium Dependent Interface Cross-Over (MDIX) mode of an Ethernet interface. Use undo mdix-mode to restore the default. Syntax mdix-mode { automdix | mdi | mdix } undo mdix-mode Default Ethernet interfaces operate in automdix mode. Views Layer 2 Ethernet interface view Predefined user roles...
rate. For example, the value range for this argument is 0 to 1488100 on a GE interface and 0 to 59524000 on a 40-GE interface. kbps max-kbps: Specifies the maximum number of kilobits of multicast traffic that the Ethernet interface can forward per second. The value range for this argument (in kbps) is 0 to the maximum interface rate.
Usage guidelines When a packet arrives at an interface, the device looks up the destination MAC address of the packet in the MAC address table. If an entry is found and the outgoing interface is the same as the incoming interface, the device drops the packet. After you configure this command on the Ethernet interface, the device forwards such packets rather than drop them.
On the same type of traffic, do not configure the storm constrain command and either of the broadcast-suppression, multicast-suppression, and unicast-suppression commands at the same time. Otherwise, the traffic suppression result is not determined. When configuring this command, make sure upperlimit is greater than lowerlimit. Examples # Enable unknown unicast storm control on GigabitEthernet 1/0/1, setting the upper and lower thresholds to 200 pps and 150 pps.
forward the traffic. To bring up the interface, use the undo shutdown command or disable the storm control function. Examples # Configure GigabitEthernet 1/0/1 to block the traffic detected crossing the upper storm control threshold. <Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] storm-constrain control block Related commands •...
Views Layer 2 Ethernet interface view Predefined user roles network-admin Examples # Enable GigabitEthernet 1/0/1 to send traps when it detects storm control threshold events. <Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] storm-constrain enable trap storm-constrain interval Use storm-constrain interval to set the traffic polling interval of the storm control module. Use undo storm-constrain interval to restore the default.
Page 45
Use undo unicast-suppression to restore the default. Syntax unicast-suppression { ratio | pps max-pps | kbps max-kbps } undo unicast-suppression Default Ethernet interfaces do not suppress unicast traffic. Views Layer 2 Ethernet interface view Predefined user roles network-admin Parameters ratio: Sets the unicast suppression threshold as a percentage of the maximum interface rate. The value range for this argument (in percentage) is 0 to 100.
Related commands • broadcast-suppression • multicast-suppression virtual-cable-test IMPORTANT: • Fiber ports do not support this command. • If the link of an Ethernet port is up, testing its cable connection will cause the link to go down and then come up. Use virtual-cable-test to test the cable connection of an Ethernet interface and display the test results.
Page 47
Field Description • Failure—The test failed. If the cable connection is working correctly, this field displays the total length of the cable. n metres If the cable connection fails, this field displays the length from the local port to the faulty point.
Loopback, null, and inloopback interface commands bandwidth Use bandwidth to configure the expected bandwidth of an interface. Use undo bandwidth to restore the default. Syntax bandwidth bandwidth-value undo bandwidth Default The expected bandwidth of a loopback interface is 0 kbps. Views Loopback interface view Predefined user roles...
Usage guidelines CAUTION: The default command might interrupt ongoing network services. Make sure you are fully aware of the impacts of this command before using it on a live network. This command might fail to restore the default settings for some commands for reasons such as command dependencies and system restrictions.
Page 50
Syntax display interface [ inloopback [ 0 ] ] [ brief [ description ] ] Views Any view Predefined user roles network-admin network-operator Parameters 0: Specifies interface Inloopback 0. brief: Displays brief interface information. If you do not specify this keyword, the command displays detailed interface information.
Page 51
Field Description Maximum transmission unit MTU of the interface, which is always 1536 and cannot be configured Physical: InLoopBack The physical type of the interface is inloopback. Average input rate during the last 300 seconds: • bytes/sec—Average number of bytes received per second. Last 300 seconds input rate: •...
Field Description Physical layer state of the interface, which is always UP, meaning that Link the link is physically up. Protocol Data link layer protocol state of the interface, which is always UP(s). IP address of the interface. Primary IP Because inloopback interfaces do not support CLI configuration, this field does not display a value.
Page 53
LoopBack0 Current state: UP Line protocol state: UP (spoofing) Description: LoopBack0 Interface Bandwidth: 0kbps Maximum transmission unit: 1536 Internet protocol processing: Disabled Physical: Loopback Last clearing of counters: Never Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec Input: 0 packets, 0 bytes, 0 drops...
Page 54
Field Description and the number of dropped packets. # Display brief information about all loopback interfaces. <Sysname> display interface loopback brief Brief information on interfaces in route mode: Link: ADM - administratively down; Stby - standby Protocol: (s) - spoofing Interface Link Protocol Primary IP Description...
Field Description Protocol Data link layer protocol state of the interface. Interface description configured by using the description command. If the description keyword is not specified in the display interface brief Description command, the Description field allows a maximum of 27 characters. If the description keyword is specified in the display interface brief command, the field displays the complete interface description.
Predefined user roles network-admin Parameters interface-number: Specifies a loopback interface by its number in the range of 0 to 127. Usage guidelines The physical layer state and link layer protocols of a loopback interface are always up unless the loopback interface is manually shut down. You can use a loopback interface to achieve the following purposes: •...
Syntax reset counters interface loopback [ interface-number ] Views User view Predefined user roles network-admin Parameters interface-number: Specifies a loopback interface by its number, which can be the number of any existing loopback interface. If you do not specify the interface-number argument, the command clears the statistics on all loopback interfaces.
shutdown Use shutdown to shut down a loopback interface. Use undo shutdown to bring up a loopback interface. Syntax shutdown undo shutdown Default A loopback interface is up. Views Loopback interface view Predefined user roles network-admin Usage guidelines Use the shutdown command with caution, because the command disconnects the connection of the interface and disables the interface from communicating.
Bulk interface configuration commands display interface range Use display interface range to display information about the interface ranges created by using the interface range name command. Syntax display interface range [ name name ] Views Any view Predefined user roles network-admin network-operator Parameters...
Page 61
Parameters interface-list: Specifies a space-separated list of up to 24 interface items. Each item specifies an interface by its type and number or a range of interfaces in the form of interface-type interface-number to interface-type interface-number. When you specify the to keyword in interface-type interface-number1 to interface-type interface-number2, the last-tier value of the interface number before to must not be greater than the one after to.
interface range name Use interface range name name interface interface-list to create an interface range, configure a name for the interface range, and enter the interface range view. Use interface range name name without the interface keyword to enter the view of an interface range with the specified name.
Page 63
To verify the configuration of the first interface in the interface range, execute the display this command in interface range view. To view the member interfaces of an interface range, use the display interface range command. When you bulk configure interfaces, follow these guidelines: •...
MAC address table commands This document covers the configuration of unicast MAC address entries, including static, dynamic, blackhole, and multiport unicast MAC address entries. For more information about configuring static multicast MAC address entries, see IP Multicast Configuration Guide. display mac-address Use display mac-address to display MAC address entries.
0033-0033-0033 Blackhole 0000-0000-0002 Static GE1/0/3 00e0-fc00-5829 Learned GE1/0/4 # Display the number of MAC address entries. <Sysname> display mac-address count 1 mac address(es) found. Table 13 Command output Field Description ID of the VLAN to which the outgoing interface of the MAC address entry VLAN ID belongs.
Related commands mac-address timer display mac-address mac-learning Use display mac-address mac-learning to display the global MAC address learning status and the MAC learning status of the specified interface or all interfaces. Syntax display mac-address mac-learning [ interface interface-type interface-number ] Views Any view Predefined user roles...
display mac-address mac-move Use display mac-address mac-move to display the MAC address move records after the device is started. Syntax display mac-address mac-move [ slot slot-number ] Views Any view Predefined user roles network-admin network-operator Parameters slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, the command displays MAC address move records of all IRF member devices.
Related commands mac-address notification mac-move display mac-address statistics Use display mac-address statistics to display MAC address table statistics. Syntax display mac-address statistics Views Any view Predefined user roles network-admin network-operator Usage guidelines This command displays the number of MAC address entries per type and the maximum number of MAC address entries allowed for each type.
Field Description address entries. Static Multicast Multiport Address Number of static multicast and multiport unicast (User-defined) Count MAC address entries added by users. Total Multicast and Multiport MAC Addresses Maximum number of multicast and multiport unicast Available MAC address entries allowed. mac-address (interface view) Use mac-address to add or modify a MAC address entry on an interface.
Examples # Add a static entry for MAC address 000f-e201-0101 on interface GigabitEthernet 1/0/1 that belongs to VLAN 2. <Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] mac-address static 000f-e201-0101 vlan 2 # Add a static entry for MAC address 000f-e201-0101 on Layer 2 aggregate interface Bridge-Aggregation 1 that belongs to VLAN 1.
Page 71
Parameters dynamic: Specifies dynamic MAC address entries. static: Specifies static MAC address entries. blackhole: Specifies blackhole MAC address entries. Packets whose source or destination MAC addresses match blackhole MAC address entries are dropped. multiport: Specifies multiport unicast MAC address entries. A frame whose destination MAC address matches a multiport unicast MAC address entry is sent out of multiple ports.
# Add a multiport unicast MAC address entry for MAC address 000f-e201-0101. Then, all frames that are destined for this MAC address are sent out of GigabitEthernet 1/0/1 through GigabitEthernet 1/0/3, which belong to VLAN 2. <Sysname> system-view [Sysname] mac-address multiport 000f-e201-0101 interface gigabitethernet 1/0/1 to gigabitethernet 1/0/3 vlan 2 Related commands •...
Examples # Assign high MAC learning priority to interface GigabitEthernet 1/0/1. <Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] mac-address mac-learning priority high # Assign high MAC learning priority to interface Bridge-Aggregation 1. <Sysname> system-view [Sysname] interface bridge-aggregation 1 [Sysname-Bridge-Aggregation1] mac-address mac-learning priority high mac-address mac-roaming enable Use mac-address mac-roaming enable to enable MAC address synchronization.
Default The maximum number of MAC addresses that can be learned on an interface is not configured. Views Layer 2 Ethernet interface view Predefined user roles network-admin Parameters count: Sets the maximum number of MAC addresses that can be learned on an interface. The value range is 0 to 4096.
Examples # Configure GigabitEthernet 1/0/1 to learn up to 600 MAC address entries. <Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] mac-address max-mac-count 600 # Disable the device from forwarding unknown frames received on GigabitEthernet 1/0/1 after the MAC learning limit on GigabitEthernet 1/0/1 is reached. [Sysname-GigabitEthernet1/0/1] undo mac-address max-mac-count enable-forwarding Related commands •...
Views System view Predefined user roles network-admin Parameters interval interval-value: Sets a detection interval for MAC address moves, in the range of 1 to 60 minutes. If you do not specify this option, the default setting of 1 minute is used. Usage guidelines With MAC address move notifications enabled, the system displays the MAC address move logs when it detects MAC address moves.
undo mac-address notification mac-move suppression Default MAC address moves are not suppressed. Views Layer 2 Ethernet interface view, Layer 2 aggregate interface view Predefined user roles network-admin Usage guidelines This feature shuts an interface down when a MAC address has been moved from the interface more than the specified suppression threshold within a MAC move detection interval.
[Sysname] mac-address notification mac-move suppression interval 100 mac-address notification mac-move suppression threshold Use mac-address notification mac-move suppression threshold to set a threshold for MAC address moves sourced from an interface within a detection interval. Use undo mac-address notification mac-move suppression threshold to restore the default. Syntax mac-address notification mac-move suppression threshold threshold-value undo mac-address notification mac-move suppression threshold...
Views System view Predefined user roles network-admin Parameters aging seconds: Sets an aging timer (in seconds) for dynamic MAC address entries, in the range of 10 to 1000000 seconds. no-aging: Configures dynamic MAC address entries not to age. Usage guidelines To set the aging timer appropriately, follow these guidelines: •...
Page 81
The MAC address table supports only SNMP notifications about MAC address moves. When you enable or disable SNMP notifications about MAC address moves, you enable or disable all types of SNMP notifications for the MAC address table. Examples # Disable SNMP notifications about MAC address moves for the MAC address table. <Sysname>...
MAC Information commands mac-address information enable (interface view) Use mac-address information enable to enable MAC Information on an interface. Use undo mac-address information enable to disable MAC Information on an interface. Syntax mac-address information enable { added | deleted } undo mac-address information enable { added | deleted } Default MAC Information is disabled on an interface.
Views System view Predefined user roles network-admin Usage guidelines Before you enable MAC Information on an interface, enable MAC Information globally. Examples # Enable MAC Information globally. <Sysname> system-view [Sysname] mac-address information enable Related commands mac-address information enable (interface view) mac-address information interval Use mac-address information interval to set the MAC change notification interval.
Syntax mac-address information mode { syslog | trap } undo mac-address information mode Default SNMP notifications are sent to notify MAC changes. Views System view Predefined user roles network-admin Parameters syslog: Specifies that the device sends syslog messages to notify MAC changes. trap: Specifies that the device sends SNMP notifications to notify MAC changes.
Page 85
• The device sends syslog messages or SNMP notifications only if the MAC change notification interval expires. Examples # Set the MAC Information queue length to 600. <Sysname> system-view [Sysname] mac-address information queue-length 600...
Ethernet link aggregation commands bandwidth Use bandwidth to set the expected bandwidth for an interface. Use undo bandwidth to restore the default. Syntax bandwidth bandwidth-value undo bandwidth Default The expected bandwidth (in kbps) is the interface baud rate divided by 1000. Views Layer 2 aggregate interface view Predefined user roles...
This command might fail to restore the default settings for some commands for reasons such as command dependencies and system restrictions. Use the display this command in interface view to identify these commands, and then use their undo forms or follow the command reference to restore their default settings.
Page 88
Predefined user roles network-admin network-operator Parameters bridge-aggregation: Specifies Layer 2 aggregate interfaces. interface-number: Specifies an existing aggregate interface number. The value range for the interface-number argument is the set of all existing aggregate interface numbers. brief: Displays brief interface information. If you do not specify this keyword, the command displays detailed interface information.
Page 90
Field Description access or hybrid. Packets from the specified VLANs are sent out of this interface without a VLAN tag: • Untagged Vlan: none—All packets are sent out of this interface with a VLAN tag. Untagged VLANs • Untagged Vlan: 1—Packets from VLAN 1 are sent out of this interface without a VLAN tag.
Field Description conditions exist: • The data link layer protocol state of an interface is shown as UP. • The link is an on-demand link or not present. Interface Abbreviated interface name. Link Physical link state of the interface. Speed Interface speed, in bps.
Page 92
Syntax display link-aggregation load-sharing mode interface bridge-aggregation interface-number ] ] Views Any view Predefined user roles network-admin network-operator Parameters bridge-aggregation: Specifies Layer 2 aggregate interfaces. interface-number: Specifies an existing aggregate interface number. Usage guidelines If you do not specify the interface keyword, the command displays the global link-aggregation load sharing modes.
<Sysname> display link-aggregation load-sharing mode interface bridge-aggregation 10 Bridge-Aggregation10 Load-Sharing Mode: destination-mac address source-mac address Table 19 Command output Field Description Per-flow load sharing algorithm for Ethernet link aggregation. Link-Aggregation Load-Sharing By default, this field displays Default. If you have configured the Algorithm load sharing algorithm, this field displays the configured algorithm.
Page 94
Views Any view Predefined user roles network-admin network-operator Parameters interface-list: Specifies a list of link aggregation member ports, in the format interface-type interface-number [ to interface-type interface-number ]. interface-type interface-number specifies an interface by its type and number. Usage guidelines A member port in a static aggregation group is unaware of information about the peer group.
Illegal: 0 packet(s) Sent LACP Packets: 7 packet(s) Table 20 Command output Field Description LACP state flags. This field is one byte long, represented by ABCDEFGH from the least significant bit to the most significant bit. The letter is present when its bit is 1 and absent when its bit is 0.
Page 96
Usage guidelines Static link aggregation groups are unaware of information about the peer groups. As a result, the Partner ID field displays None or nothing for a static link aggregation group. Examples # Display brief information about all aggregation groups. <Sysname>...
Field Description Selected Ports Total number of Selected ports. Unselected Ports Total number of Unselected ports. Individual Ports Total number of Individual ports. Share Type Load sharing type. display link-aggregation verbose Use display link-aggregation verbose to display detailed information about the aggregation groups that correspond to the specified aggregate interfaces.
Page 98
-------------------------------------------------------------------------------- GE1/0/1 32768 {ACDEF} GE1/0/2 32768 {ACDEF} Remote: Actor Partner Priority Oper-Key SystemID Flag -------------------------------------------------------------------------------- GE1/0/1 32768 0x8000, 000f-e267-57ad {ACDEF} GE1/0/2 32768 0x8000, 000f-e267-57ad {ACDEF} # Display detailed information about Layer 2 aggregation group 20, which is a static aggregation group.
Field Description Aggregate Interface Name of the aggregate interface. Aggregation group type: • Aggregation Mode S—Static. • D—Dynamic. Local system ID, containing the local system LACP priority and the local system System ID MAC address. Information about the local end: •...
Deleting a Layer 2 aggregate interface also deletes the Layer 2 aggregation group. At the same time, the member ports of the aggregation group, if any, leave the aggregation group. Examples # Create Layer 2 aggregate interface Bridge-Aggregation 1, and enter its view. <Sysname>...
Views Layer 2 Ethernet interface view Predefined user roles network-admin Usage guidelines When LACP is operating in passive mode on a local member port and its peer port, both ports cannot send LACPDUs. When LACP is operating in active mode on either end of a link, both ports can send LACPDUs.
Default The system LACP priority is 32768. Views System view Predefined user roles network-admin Parameters system-priority: Specifies the system LACP priority in the range of 0 to 65535. The smaller the value, the higher the system LACP priority. Examples # Set the system LACP priority to 64. <Sysname>...
Examples # Enable BFD for Layer 2 aggregation group 1, and specify the source and destination IP addresses as 1.1.1.1 and 2.2.2.2 for BFD sessions. <Sysname> system-view [Sysname] interface bridge-aggregation 1 [Sysname-Bridge-Aggregation1] link-aggregation bfd ipv4 source 1.1.1.1 destination 2.2.2.2 link-aggregation global load-sharing algorithm Use link-aggregation global load-sharing algorithm to configure the per-flow load sharing algorithm for Ethernet link aggregation.
Page 104
Syntax link-aggregation global load-sharing mode destination-ip destination-mac destination-port | ingress-port | source-ip | source-mac | source-port } * undo link-aggregation global load-sharing mode Default The system automatically chooses the global link-aggregation load sharing mode according to the packet type. The switch can perform link-aggregation load sharing for only Layer 2 or Layer 3 packets. •...
NOTE: Packets cannot be load shared based on source MAC addresses when the destination IP addresses of the packets match multiport ARP entries. For more information about multiport ARP entries, see Layer 3—IP Services Configuration Guide. • Destination MAC address. •...
Syntax link-aggregation lacp traffic-redirect-notification enable undo link-aggregation lacp traffic-redirect-notification enable Default Link-aggregation traffic redirection is disabled. Views System view, Layer 2 aggregate interface view Predefined user roles network-admin Usage guidelines In Release 1111, this command is supported only in system view. In Release 1121 and later, this command is supported in system view and Layer 2 aggregate interface view.
Default The load sharing mode is the same as the global load sharing mode. Views Layer 2 aggregate interface view Predefined user roles network-admin Parameters destination-ip: Load shares traffic based on destination IP addresses. destination-mac: Load shares traffic based on destination MAC addresses. source-ip: Load shares traffic based on source IP addresses.
Syntax link-aggregation load-sharing mode local-first undo link-aggregation load-sharing mode local-first Default Local-first load sharing is enabled for link aggregation. Views System view Predefined user roles network-admin Usage guidelines After you disable local-first load sharing, the packets will be load shared among all Selected ports of the aggregate interface on all IRF member devices.
Syntax link-aggregation port-priority port-priority undo link-aggregation port-priority Default The port priority of an interface is 32768. Views Layer 2 Ethernet interface view Predefined user roles network-admin Parameters port-priority: Specifies the port priority in the range of 0 to 65535. The smaller the value, the higher the port priority.
The maximum number of Selected ports allowed in an aggregation group is limited by one of the following values, whichever is smaller: • Maximum number configured by using the link-aggregation selected-port maximum command. • Hardware limitation. You can implement backup between two ports by performing the following tasks: •...
<Sysname> system-view [Sysname] interface bridge-aggregation 1 [Sysname-Bridge-Aggregation1] link-aggregation selected-port minimum 3 Related commands link-aggregation selected-port maximum port link-aggregation group Use port link-aggregation group to assign an Ethernet interface to an aggregation group. Use undo port link-aggregation group to remove the Ethernet interface from the aggregation group to which it belongs.
interface-number: Specifies an aggregate interface number. Usage guidelines Use this command to clear history statistics before you collect traffic statistics for a time period. If you do not specify any options, the command clears statistics for all interfaces in the system. If you specify only the bridge-aggregation keyword, the command clears statistics for all Layer 2 aggregate interfaces.
Port isolation commands display port-isolate group Use display port-isolate group to display port isolation group information. Syntax display port-isolate group [ group-number ] Views Any view Predefined user roles network-admin network-operator Parameters group-number: Specifies an isolation group by its number in the range of 1 to 8. Examples # Display all isolation groups.
port-isolate enable Use port-isolate enable to assign a port to an isolation group. Use undo port-isolate enable to remove a port from an isolation group. Syntax port-isolate enable group group-number undo port-isolate enable Default The port is not assigned to any isolation group. Views Layer 2 Ethernet interface view, Layer 2 aggregate interface view Predefined user roles...
Page 117
Syntax port-isolate group group-number undo port-isolate group { group-number | all } Default No isolation group exists. Views System view Predefined user roles network-admin Parameters group-number: Specifies an isolation group by its number in the range of 1 to 8. all: Deletes all isolation groups.
Spanning tree commands active region-configuration Use active region-configuration to activate your MST region configuration. Syntax active region-configuration Views MST region view Predefined user roles network-admin Usage guidelines When you configure MST region parameters, MSTP launches a new spanning tree calculation process that might cause network topology instability.
Views Layer 2 Ethernet interface view Predefined user roles network-admin Examples # Enable BPDU drop on port GigabitEthernet 1/0/1. <Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] bpdu-drop any check region-configuration Use check region-configuration to display MST region pre-configuration information, including the region name, revision level, and VLAN-to-instance mapping settings.
Table 24 Command output Field Description Format selector Format selector of the MST region, which is 0 (not configurable). Region name MST region name. Revision level Revision level of the MST region. Instance VLANs Mapped VLAN-to-instance mappings in the MST region. Related commands •...
Page 121
Usage guidelines In STP or RSTP mode, the command output is sorted by port name. • If you do not specify a port, this command applies to all ports. • If you specify a port list, this command applies to the specified ports. In PVST mode, the command output is sorted by VLAN ID and by port name in each VLAN.
Page 122
Field Description Port role: • ALTE—The port is an alternate port. • BACK—The port is a backup port. • Role ROOT—The port is a root port. • DESI—The port is a designated port. • MAST—The port is a master port. •...
Page 123
Digest-Snooping : Disabled Rapid transition : False Num of VLANs mapped : 1 Port times : Hello 2s MaxAge 20s FwdDelay 15s MsgAge 2s RemHops 20 BPDU sent : 186 TCN: 0, Config: 0, RST: 0, MST: 186 BPDU received TCN: 0, Config: 0, RST: 0, MST: 0 -------[MSTI 1 Global Info]------- Bridge ID...
Page 124
VlanRoot ID/RPC : 0.00e0-fc0e-6554, 200200 RootPort ID : 128.48 BPDU-Protection : Disabled TC or TCN received Time since last TC : 0 days 0h:5m:42s # In MSTP mode, display the spanning tree status and statistics when the spanning tree feature is disabled.
Page 125
Field Description BPDU-Protection Global status of the BPDU guard function. Bridge Config- Global status of Digest Snooping. Digest-Snooping TC or TCN received Number of TC/TCN BPDUs received in the MSTI or VLAN. Time since last TC Time since the latest topology change in the MSTI or VLAN. [FORWARDING] The port is in forwarding state.
Field Description VLAN. VLANs Number of VLANs that are mapped to the MSTI. mapped Major parameters for the port: • Hello—Hello timer. • MaxAge—Maximum age timer. Port times • FwdDelay—Forward delay timer. • MsgAge—Message age timer. • RemHops—Remaining hops. BPDU sent Statistics on sent BPDUs.
Predefined user roles network-admin network-operator Examples # In MSTP mode, display information about ports that are blocked by spanning tree protection functions. <Sysname> display stp abnormal-port MST ID Blocked Port Reason GigabitEthernet1/0/1 Root-Protected GigabitEthernet1/0/2 Loop-Protected GigabitEthernet1/0/3 Loopback-Protected # In PVST mode, display information about ports that are blocked by spanning tree protection functions.
Page 128
network-operator Parameters interface interface-type interface-number: Specifies an interface by its type and number. instance instance-list: Specifies a space-separated list of up to 10 MSTI items. Each item specifies an MSTI or a range of MSTIs in the form of instance-id1 [ to instance-id2 ]. The value for instance-id2 must be equal to or greater than the value for instance-id1.
Page 129
TC received # In PVST mode, display the BPDU statistics for GigabitEthernet 1/0/1. <Sysname> system-view [Sysname] stp mode pvst [Sysname] display stp bpdu-statistics interface gigabitethernet 1/0/1 Port: GigabitEthernet1/0/1 Type Count Last Updated --------------------------- ---------- ----------------- Invalid BPDUs Looped-back BPDUs Max-aged BPDUs TCN sent TCN received TCA sent...
Field Description MST received MSTP BPDUs sent. Instance Statistical information for a particular MSTI. Timeout BPDUs Expired BPDUs. Max-hoped BPDUs BPDUs whose maximum hops were exceeded. TC detected TC BPDUs detected. TC sent TC BPDUs sent. TC received TC BPDUs received. display stp down-port Use display stp down-port to display information about ports that were shut down by spanning tree protection functions.
Page 131
network-operator Parameters instance instance-list: Specifies a space-separated list of up to 10 MSTI items. Each item specifies an MSTI or a range of MSTIs in the form of instance-id1 [ to instance-id2 ]. The value for instance-id2 must be equal to or greater than the value for instance-id1. The value range for the instance-id argument is 0 to 4094, and the value 0 represents the CIST.
Designated priority : 0.00e0-fc01-6510 0 0.00e0-fc01-6510 128.1 Port GigabitEthernet1/0/2 Role change : ALTER->ROOT Time : 2009/02/08 00:22:56 Port priority : 0.00e0-fc01-6510 0 0.00e0-fc01-6510 128.2 Designated priority : 0.00e0-fc01-6510 0 0.00e0-fc01-6510 128.2 Table 30 Command output Field Description Port Port name. Role change of the port (Aged means that the change was caused by expiration Role change of the received configuration BPDU).
Table 31 Command output Field Description Format selector that is defined by the spanning tree protocol. The default Format selector value is 0, and the selector cannot be configured. Region name MST region name. Revision level of the MST region. The default value is 0, and the level can be Revision level configured by using the revision-level command.
display stp tc Use display stp tc to display the incoming and outgoing TC/TCN BPDU statistics for ports. Syntax display stp [ instance instance-list | vlan vlan-id-list ] tc [ slot slot-number ] Views Any view Predefined user roles network-admin network-operator Parameters instance instance-list: Specifies a space-separated list of up to 10 MSTI items.
Table 33 Command output Field Description Port Port name. Receive Number of TC/TCN BPDUs received on each port. Send Number of TC/TCN BPDUs sent by each port. instance Use instance to map a list of VLANs to an MSTI. Use undo instance to remap the specified VLAN or all VLANs to the CIST (MSTI 0). Syntax instance instance-id vlan vlan-id-list undo instance instance-id [ vlan vlan-id-list ]...
Examples # Map VLAN 2 to MSTI 1. <Sysname> system-view [Sysname] stp region-configuration [Sysname-mst-region] instance 1 vlan 2 Related commands • active region-configuration • check region-configuration • display stp region-configuration region-name Use region-name to configure the MST region name. Use undo region-name to restore the default MST region name. Syntax region-name name undo region-name...
reset stp Use reset stp to clear spanning tree statistics. The spanning tree statistics include the numbers of TCN BPDUs, configuration BPDUs, RST BPDUs, and MST BPDUs that are sent and received through the specified ports. Syntax reset stp [ interface interface-list ] Views User view Predefined user roles...
After configuring this command, run the active region-configuration command to activate the configured MST region level. Examples # Set the MSTP revision level of the MST region to 5. <Sysname> system-view [Sysname] stp region-configuration [Sysname-mst-region] revision-level 5 Related commands • active region-configuration •...
Views System view Predefined user roles network-admin Parameters vlan vlan-id-list: Specifies a space-separated list of up to 10 VLAN items. Each item specifies a VLAN or a range of VLANs in the form of vlan-id1 [ to vlan-id2 ]. The value for vlan-id2 must be equal to or greater than the value for vlan-id1.
Views Layer 2 Ethernet interface view, Layer 2 aggregate interface view Predefined user roles network-admin Parameters auto: Configures the port to recognize the MSTP BPDU format automatically and determine the format of MSTP BPDUs to send. dot1s: Configures the port to receive and send only standard-format (802.1s-compliant) MSTP BPDUs.
When the setting is configured on a member port in an aggregation group, it takes effect only after the port leaves the aggregation group. Examples # Enable Digest Snooping on GigabitEthernet 1/0/1 and then globally. <Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] stp config-digest-snooping [Sysname-GigabitEthernet1/0/1] quit [Sysname] stp global config-digest-snooping...
Usage guidelines Path cost is an important factor in spanning tree calculation. Setting different path costs for a port in MSTIs allows VLAN traffic flows to be forwarded along different physical links. This results in VLAN-based load balancing. The path cost setting of a port can affect the role selection of the port. When the path cost of a port is changed, the system calculates the role of the port and initiates a state transition.
a temporary loop. You can enable the port to transit to the forwarding state rapidly by configuring it as an edge port. As a best practice, configure ports that directly connect to user terminals as edge ports. Typically, configuration BPDUs from other devices cannot reach an edge port, because the edge port does not connect to any other device.
When the setting is configured in Layer 2 aggregate interface view, it takes effect only on the aggregate interface. When the setting is configured on a member port in an aggregation group, it takes effect only after the port leaves the aggregation group. Examples # In MSTP mode, disable the spanning tree feature on port GigabitEthernet 1/0/1.
stp global enable Use stp global enable to enable the spanning tree feature globally. Use undo stp global enable to disable the spanning tree feature globally. Syntax stp global enable undo stp global enable Default If the device starts up with the initial settings, the spanning tree feature is disabled globally. If the device starts up with the factory defaults, the spanning tree feature is enabled globally.
• The peer STP device is shut down or removed. • The port cannot detect the change. In this case, you can perform an mCheck operation to forcibly transit the port to operate in the original mode. The device operates in STP, RSTP, PVST, or MSTP mode, depending on the spanning tree mode setting.
Related commands • stp edged-port • stp root-protection stp max-hops Use stp max-hops to set the maximum number of hops for an MST region. Use undo stp max-hops to restore the default. Syntax stp max-hops hops undo stp max-hops Default The maximum number of hops for an MST region is 20.
In this case, you can perform an mCheck operation to forcibly transit the port to operation in the original mode. For example, Device A, Device B, and Device C are connected in sequence. Device A runs STP, Device B does not run any spanning tree protocol, and Device C runs RSTP, MSTP, or PVST. When Device C receives an STP BPDU transparently transmitted by Device B, the receiving port transits to the STP mode.
Usage guidelines The MSTP mode is compatible with the RSTP mode, and the RSTP mode is compatible with the STP mode. The PVST mode's compatibility with other modes is as follows: • Access port—The PVST mode is compatible with other modes in any VLAN. •...
[Sysname-GigabitEthernet1/0/1] stp no-agreement-check stp pathcost-standard Use stp pathcost-standard to specify a standard for the device to use when calculating the default path costs for ports. Use undo stp pathcost-standard to restore the default. Syntax stp pathcost-standard { dot1d-1998 | dot1t | legacy } undo stp pathcost-standard Default The devices uses the legacy standard to calculate the default path costs for ports.
Default The default setting is auto, and the spanning tree device automatically detects whether a port connects to a point-to-point link. Views Layer 2 Ethernet interface view, Layer 2 aggregate interface view Predefined user roles network-admin Parameters auto: Specifies automatic detection of the link type. force-false: Specifies the non-point-to-point link type.
Default The port priority is 128. Views Layer 2 Ethernet interface view, Layer 2 aggregate interface view Predefined user roles network-admin Parameters instance instance-list: Specifies a space-separated list of up to 10 MSTI items. Each item specifies an MSTI or a range of MSTIs in the form of instance-id1 [ to instance-id2 ]. The value for instance-id2 must be equal to or greater than the value for instance-id1.
undo stp port-log { all | instance instance-list | vlan vlan-id-list } Default This feature is disabled. Views System view Predefined user roles network-admin Parameters all: Specifies all MSTIs or VLANs. instance instance-list: Specifies a space-separated list of up to 10 MSTI items. Each item specifies an MSTI or a range of MSTIs in the form of instance-id1 [ to instance-id2 ].
Views System view Predefined user roles network-admin Parameters instance instance-list: Specifies a space-separated list of up to 10 MSTI items. Each item specifies an MSTI or a range of MSTIs in the form of instance-id1 [ to instance-id2 ]. The value for instance-id2 must be equal to or greater than the value for instance-id1.
Usage guidelines After you enter MST region view, you can configure the MST region parameters, including the region name, VLAN-to-instance mappings, and revision level. Examples # Enter MST region view. <Sysname> system-view [Sysname] stp region-configuration [Sysname-mst-region] stp role-restriction Use stp role-restriction to enable port role restriction. Use undo stp role-restriction to disable port role restriction.
Default A device is not a root bridge. Views System view Predefined user roles network-admin Parameters instance instance-list: Specifies a space-separated list of up to 10 MSTI items. Each item specifies an MSTI or a range of MSTIs in the form of instance-id1 [ to instance-id2 ]. The value for instance-id2 must be equal to or greater than the value for instance-id1.
Parameters instance instance-list: Specifies a space-separated list of up to 10 MSTI items. Each item specifies an MSTI or a range of MSTIs in the form of instance-id1 [ to instance-id2 ]. The value for instance-id2 must be equal to or greater than the value for instance-id1. The value range for the instance-id argument is 0 to 4094, and the value 0 represents the CIST.
When the setting is configured on a member port in an aggregation group, it takes effect only after the port leaves the aggregation group. Examples # Enable root guard for GigabitEthernet 1/0/1. <Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] stp root-protection Related commands •...
undo stp tc-protection threshold Default By default, the device can perform a maximum of six forwarding address entry flushes every 10 seconds. Views System view Predefined user roles network-admin Parameters number: Sets the maximum number of immediate forwarding address entry flushes that the device can perform every 10 seconds.
Parameters vlan vlan-id-list: Specifies a space-separated list of up to 10 VLAN items. Each item specifies a VLAN or a range of VLANs in the form of vlan-id1 [ to vlan-id2 ]. The value for vlan-id2 must be equal to or greater than the value for vlan-id1. The value range for the vlan-id argument is 1 to 4094. If you set the STP, RSTP, or MSTP forward delay, do not specify this option.
Parameters vlan vlan-id-list: Specifies a space-separated list of up to 10 VLAN items. Each item specifies a VLAN or a range of VLANs in the form of vlan-id1 [ to vlan-id2 ]. The value for vlan-id2 must be equal to or greater than the value for vlan-id1. The value range for the vlan-id argument is 1 to 4094. If you set the STP, RSTP, or MSTP hello time, do not specify this option.
to or greater than the value for vlan-id1. The value range for the vlan-id argument is 1 to 4094. If you set the STP, RSTP, or MSTP max age, do not specify this option. time: Sets the max age in centiseconds in the range of 600 to 4000 in increments of 100 (as in 600, 700, 800).
Usage guidelines In a stable network, each non-root-bridge forwards configuration BPDUs to surrounding devices at the interval of hello time to determine whether any link fails. If a device does not receive a BPDU from the upstream device within nine times of the hello time, it assumes that the upstream device has failed.
<Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] stp transmit-limit 5 stp vlan enable Use stp vlan enable to enable the spanning tree feature for VLANs. Use undo stp enable to disable the spanning tree feature for VLANs. Syntax stp vlan vlan-id-list enable undo stp vlan vlan-id-list enable Default The spanning tree feature is enabled for all VLANs.
Page 166
Syntax vlan-mapping modulo modulo Default All VLANs are mapped to the CIST (MSTI 0). Views MST region view Predefined user roles network-admin Parameters modulo: Sets the modulo value in the range of 1 to 64. Usage guidelines You cannot map a VLAN to different MSTIs. If you map a VLAN that has been mapped to an MSTI to a new MSTI, the old mapping is automatically removed.
Loop detection commands display loopback-detection Use display loopback-detection to display the loop detection configuration and status. Syntax display loopback-detection Views Any view Predefined user roles network-admin network-operator Example # Display the loop detection configuration and status. <Sysname> display loopback-detection Loopback detection is enabled. Loopback detection interval is 30 second(s).
Syntax In Layer 2 Ethernet interface view: loopback-detection action { block | no-learning | shutdown } undo loopback-detection action In Layer 2 aggregate interface view: loopback-detection action shutdown undo loopback-detection action Default When the device detects a loop on a port, it generates a log but performs no action on the port. Views Layer 2 Ethernet interface view, Layer 2 aggregate interface view Predefined user roles...
Syntax loopback-detection enable vlan { vlan-list | all } undo loopback-detection enable vlan { vlan-list | all } Default The loop detection function is disabled on ports. Views Layer 2 Ethernet interface view, Layer 2 aggregate interface view Predefined user roles network-admin Parameters vlan-list: Specifies a VLAN list, in the format of { vlan-id [ to vlan-id ] }&<1-10>, where vlan-id...
Parameters shutdown: Enables the shutdown mode. If a loop is detected, the device generates a log and shuts down the port. The device automatically brings up the port after the detection timer expires. You can use the shutdown-interval command to set the detection timer. For more information, see Fundamentals Command Reference.
Example # Globally enable loop detection for VLAN 10 through VLAN 20. <Sysname> system-view [System] loopback-detection global enable vlan 10 to 20 Related commands • display loopback-detection • loopback-detection enable loopback-detection interval-time Use loopback-detection interval-time to set the loop detection interval. Use undo loopback-detection interval-time to restore the default.
VLAN commands Basic VLAN commands bandwidth Use bandwidth to configure the expected bandwidth of an interface. Use undo bandwidth to restore the default. Syntax bandwidth bandwidth-value undo bandwidth Default The expected bandwidth (in kbps) is the interface baud rate divided by 1000. Views VLAN interface view Predefined user roles...
This command might fail to restore the default settings for some commands for reasons such as command dependencies or system restrictions. Use the display this command in interface view to identify these commands, and then use their undo forms or follow the command reference to restore their default settings.
Name Symbol Name Symbol Left brace Semi-colon Right brace Quotation marks " Left parenthesis Apostrophe Right parenthesis Comma Left bracket Right bracket Slash Usage guidelines You can configure a description to describe the function or connection of a VLAN or VLAN interface. The descriptions are helpful when a large number of VLANs and VLAN interfaces are created on the device.
Page 175
down: Displays interfaces in a down state and their down causes. If you do not specify this keyword, the command displays information about VLAN interfaces in all states. description: Displays complete interface descriptions. If you do not specify this keyword, the command displays only the first 27 characters of each interface description.
Field Description interface brief command, this field displays the complete interface description. Bandwidth Expected bandwidth of the VLAN interface. Maximum transmission unit MTU of the VLAN interface. The interface cannot process IP packets. This field is displayed Internet protocol processing : Disabled when the interface is not configured with an IP address.
Page 177
Syntax display vlan [ vlan-id1 [ to vlan-id2 ] | all | dynamic | reserved | static ] Views Any view Predefined user roles network-admin network-operator Parameters vlan-id1: Specifies a VLAN by its ID in the range of 1 to 4094. vlan-id1 to vlan-id2: Specifies a VLAN ID range.
Table 37 Command output Field Description VLAN type VLAN type, static or dynamic. Whether the VLAN interface is configured for the VLAN. • Route interface Not configured. • Configured. Description Description of the VLAN. Name VLAN name. Primary IPv4 address of the VLAN interface. This field is displayed only when an IPv4 address is configured for the VLAN interface.
You cannot create a VLAN interface for a sub-VLAN. For more information about sub-VLANs, see Layer 2—LAN Switching Configuration Guide. You cannot create VLAN interfaces for secondary VLANs that meet the following requirements: • Associated with the same primary VLAN. •...
Related commands display interface vlan-interface name Use name to configure a name for a VLAN. Use undo name to restore the default. Syntax name text undo name Default The name of a VLAN is VLAN vlan-id. The vlan-id argument specifies the VLAN ID in a four-digit format.
Views VLAN interface view Predefined user roles network-admin Parameters slot slot-number: Specifies an IRF member device by its member ID. Usage guidelines If no IRF member devices are specified for forwarding the traffic on the current VLAN interface, the traffic is processed on the IRF member device that receives the traffic. Some features, such as IPsec anti-replay, require that traffic for the same VLAN interface be processed on the same IRF member device.
Before you configure parameters for a VLAN interface, use this command to shut it down to prevent the configuration from affecting the network. After you complete the VLAN interface configuration, use the undo shutdown command to make the settings take effect. To troubleshoot a failed interface, you can use the shutdown command and then the undo shutdown command on the interface to see whether it recovers.
[Sysname-vlan2] # Create VLAN 4 through VLAN 100. <Sysname> system-view [Sysname] vlan 4 to 100 Related commands display vlan Port-based VLAN commands display port Use display port to display information about hybrid or trunk ports. Syntax display port { hybrid | trunk } Views Any view Predefined user roles...
Field Description Untagged VLANs from which the port sends packets after removing VLAN tags. port Use port to assign the specified access ports to a VLAN. Use undo port to remove the specified access ports from a VLAN. Syntax port interface-list undo port interface-list Default All ports are in VLAN 1.
Default All access ports belong to VLAN 1. Views Layer 2 Ethernet interface view, Layer 2 aggregate interface view Predefined user roles network-admin Parameters vlan-id: Specifies a VLAN by its ID in the range of 1 to 4094. Usage guidelines Before assigning an access port to a VLAN, make sure the VLAN has been created.
Usage guidelines You can configure a nonexistent VLAN as the PVID of a hybrid port. When you delete the PVID of a hybrid port by using the undo vlan command, the PVID setting of the port does not change. For correct packet transmission, configure the same PVID for a local hybrid port and its peer. To enable a hybrid port to transmit packets from its PVID, you must assign the hybrid port to the PVID by using the port hybrid vlan command.
The value for the vlan-id2 argument must be equal to or greater than the value for the vlan-id1 argument. tagged: Configures the port as a tagged member of the specified VLANs. A tagged member of a VLAN sends packets from the VLAN without removing VLAN tags. untagged: Configures the port as an untagged member of the specified VLANs.
Usage guidelines To change the link type of a port from trunk to hybrid or vice versa, first set the link type to access. • The configuration made in Layer 2 Ethernet interface view applies only to the port. • The configuration made in Layer 2 aggregate interface view applies to the aggregate interface and its aggregation member ports.
If the system fails to apply the configuration to the aggregate interface, it stops applying the configuration to aggregation member ports. If the system fails to apply the configuration to an aggregation member port, it skips the port and moves to the next member port. Examples # Configure GigabitEthernet 1/0/1 as a trunk port, and assign it to VLAN 2, VLAN 4, and VLANs 50 through 100.
Examples # Configure VLAN 100 as the PVID of the trunk port GigabitEthernet 1/0/1, and assign GigabitEthernet 1/0/1 to VLAN 100. <Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] port link-type trunk [Sysname-GigabitEthernet1/0/1] port trunk pvid vlan 100 [Sysname-GigabitEthernet1/0/1] port trunk permit vlan 100 Related commands •...
Total MAC VLAN entries count: 2 Table 40 Command output Field Description S - Static Statically configured MAC-to-VLAN entries. D - Dynamic Dynamically configured MAC-to-VLAN entries. MAC address MAC address of the MAC-to-VLAN entry. Mask MAC address mask of the MAC-to-VLAN entry. VLAN ID VLAN ID of the MAC-to-VLAN entry.
Syntax mac-vlan enable undo mac-vlan enable Default The MAC-based VLAN feature is disabled on a port. Views Layer 2 Ethernet interface view Predefined user roles network-admin Usage guidelines Execute this command only on hybrid ports. Examples # Enable the MAC-based VLAN feature on GigabitEthernet 1/0/1. <Sysname>...
Usage guidelines For successful dynamic MAC-based VLAN assignment, use static VLANs when you create MAC-to-VLAN entries. Different types of MAC-to-VLAN entries are created depending on whether you specify the mask keyword. • When you specify this keyword, the created MAC-to-VLAN entry describes the relationship among a group of MAC addresses, a VLAN, and the 802.1p priority for the VLAN.
• If the MAC address does not match any MAC-to-VLAN entries or matches only a MAC-to-VLAN entry whose mask is not all Fs, the device does not dynamically learn the MAC address or assign the receiving port to the VLAN. Examples # Enable dynamic MAC-based VLAN assignment on GigabitEthernet 1/0/1.
Syntax vlan precedence { mac-vlan | ip-subnet-vlan } undo vlan precedence Default A port matches VLANs based on MAC addresses preferentially. Views Layer 2 Ethernet interface view Predefined user roles network-admin Parameters mac-vlan: Matches VLANs based on MAC addresses preferentially. ip-subnet-vlan: Matches VLANs based on IP subnets preferentially.
Examples # Display IP subnet-based VLANs on GigabitEthernet 1/0/1. <Sysname> display ip-subnet-vlan interface gigabitethernet 1/0/1 Interface: GigabitEthernet1/0/1 VLAN ID Subnet index IP address Subnet mask Status 192.168.1.0 255.255.255.0 Active Inactive 4094 65535 172.16.1.1 255.255.0.0 Inactive Table 41 Command output Field Description VLAN ID ID of the IP subnet-based VLAN.
all: Specifies all IP subnet-based VLANs. Examples # Display information about all IP subnet-based VLANs. <Sysname> display ip-subnet-vlan vlan all VLAN ID: 3 Subnet index IP address Subnet mask 192.168.1.0 255.255.255.0 Table 42 Command output Field Description VLAN ID ID of the IP subnet-based VLAN. Subnet index Index of the IP subnet.
all: Removes all associations between the VLAN and IP subnets or IP addresses. Usage guidelines The IP subnet or IP address cannot be a multicast network segment or a multicast address. Examples # Configure VLAN 3 as an IP subnet-based VLAN and associate it with the 192.168.1.0/24 network segment.
Table 43 Command output Field Description VLAN ID ID of the protocol-based VLAN. Protocol index Protocol template index. Protocol type specified by the protocol template. Protocol type If you do not specify the protocol type, this field displays N/A. Whether the protocol-based VLAN has taken effect: •...
Table 44 Command output Field Description VLAN ID ID of the protocol-based VLAN. Protocol index Protocol template index. Protocol type or encapsulation format specified by the protocol Protocol type template. Related commands • display protocol-vlan interface • port hybrid protocol-vlan •...
• If you specify only the all keyword, this command disassociates the port from all protocol templates of all VLANs. Examples # Associate the hybrid port GigabitEthernet 1/0/1 with protocol template 1 (IPv4) in VLAN 2. <Sysname> system-view [Sysname] vlan 2 [Sysname-vlan2] protocol-vlan 1 ipv4 [Sysname-vlan2] quit [Sysname] interface gigabitethernet 1/0/1...
Page 204
mode: Configures a user-defined protocol template for the VLAN. The keywords ethernetii, llc, and snap specify the available encapsulation formats. ethernetii etype etype-id: Matches the Ethernet II encapsulation format and the specified protocol type ID. The etype-id argument specifies the protocol type ID of inbound packets, in the range of 0x0600 to 0xFFFF, excluding 0x0800, 0x809B, 0x8137, and 0x86DD.
vlan-group Use vlan-group to create a VLAN group and enter VLAN group view. Use undo vlan-group to delete a VLAN group. Syntax vlan-group group-name undo vlan-group group-name Default No VLAN group exists. Views System view Predefined user roles network-admin Parameters group-name: Specifies a VLAN group by its name, a case-sensitive string of 1 to 31 characters.
Page 207
Predefined user roles network-admin Parameters vlan-id-list: Specifies a space-separated list of up to 10 VLAN items. Each item specifies a VLAN ID or a range of VLAN IDs in the form of vlan-id1 to vlan-id2. The value range for VLAN IDs is 1 to 4094. The value for the vlan-id2 argument must be equal to or greater than the value for the vlan-id1 argument.
Super VLAN commands display supervlan Use display supervlan to display information about super VLANs and their associated sub-VLANs. Syntax display supervlan [ supervlan-id ] Views Any view Predefined user roles network-admin network-operator Parameters supervlan-id: Specifies a super VLAN ID in the range of 1 to 4094. If you do not specify a super VLAN ID, this command displays information about all super VLANs and their associated sub-VLANs.
Page 209
Tagged ports: None Untagged ports: GigabitEthernet1/0/3 VLAN ID: 4 VLAN type: Static It is a sub VLAN. Route interface: Configured IPv4 address: 10.153.17.41 IPv4 subnet mask: 255.255.252.0 IPv6 global unicast addresses: 2001::1, subnet is 2001::/64 [TENTATIVE] Description: VLAN 0004 Name: VLAN 0004 Tagged ports: None Untagged ports: GigabitEthernet1/0/4...
Related commands • subvlan • supervlan subvlan Use subvlan to associate a super VLAN with the specified sub-VLANs. Use undo subvlan to dissociate sub-VLANs from a super VLAN. Syntax subvlan vlan-id-list undo subvlan [ vlan-id-list ] Default A super VLAN is not associated with any sub-VLANs. Views VLAN view Predefined user roles...
supervlan Use supervlan to configure a VLAN as a super VLAN. Use undo supervlan to restore the default. Syntax supervlan undo supervlan Default A VLAN is not a super VLAN. Views VLAN view Predefined user roles network-admin Usage guidelines You cannot configure a super VLAN as the guest VLAN, Auth-Fail VLAN, or critical VLAN for a port, and vice versa.
Private VLAN commands display private-vlan Use display private-vlan to display information about primary VLANs and their associated secondary VLANs. Syntax display private-vlan [ primary-vlan-id ] Views Any view Predefined user roles network-admin network-operator Parameters primary-vlan-id: Specifies a primary VLAN ID in the range of 1 to 4094. If you do not specify a primary VLAN ID, this command displays all primary VLANs and their associated secondary VLANs.
Field Description Untagged ports Untagged members of the VLAN. Related commands • private-vlan (VLAN view) • private-vlan primary port private-vlan host Use port private-vlan host to configure a port as a host port. Use undo port private-vlan to restore the default. Syntax port private-vlan host undo port private-vlan...
[Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] port private-vlan host [Sysname-GigabitEthernet1/0/1] display this interface GigabitEthernet1/0/1 port private-vlan host return The output show that GigabitEthernet 1/0/1 is operating in bridge mode and is a host port. # Assign GigabitEthernet 1/0/1 to VLAN 20, and then verify the configuration. [Sysname-GigabitEthernet1/0/1] port access vlan 20 [Sysname-GigabitEthernet1/0/1] display this interface GigabitEthernet1/0/1...
Page 216
Predefined user roles network-admin Parameters vlan-id: Specifies a VLAN ID in the range of 1 to 4094. Though VLAN 1 is in the valid value range, it cannot be configured in the command. Usage guidelines If the specified VLAN is a primary VLAN that has been associated with secondary VLANs, the command assigns the port to the associated secondary VLANs.
interface GigabitEthernet1/0/1 port link-type hybrid port private-vlan 2 promiscuous undo port hybrid vlan 1 port hybrid vlan 2 20 untagged port hybrid pvid vlan 2 return The output shows that: • GigabitEthernet 1/0/1 is a promiscuous port. • The port link type of GigabitEthernet 1/0/1 is hybrid and its PVID is VLAN 2. •...
Page 218
Default A port is not a trunk promiscuous port of any VLAN. Views Layer 2 Ethernet interface view, Layer 2 aggregate interface view Predefined user roles network-admin Parameters vlan-id-list: Specifies a space-separated list of up to 10 primary VLAN items. Each item specifies a primary VLAN ID or a range of primary VLAN IDs in the form of vlan-id1 to vlan-id2.
Page 219
<Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] display this interface GigabitEthernet1/0/1 return # Configure GigabitEthernet 1/0/1 as a trunk promiscuous port of VLANs 2 and 3, and then verify the configuration. [Sysname-GigabitEthernet1/0/1] port private-vlan 2 3 trunk promiscuous [Sysname-GigabitEthernet1/0/1] display this interface GigabitEthernet1/0/1 port link-type hybrid port private-vlan 2 3 trunk promiscuous...
port private-vlan trunk secondary Use port private-vlan trunk secondary to configure a port as a trunk secondary port of the specified VLANs and assign the port to these VLANs. Use undo port private-vlan trunk secondary to cancel the trunk secondary attribute of a port in the specified VLANs.
Page 221
You can configure the specified VLANs as secondary VLANs before or after you execute the port private-vlan trunk secondary command. This command does not take effect on the specified VLAN if any of the following conditions applies: • The specified VLAN does not exist. •...
Page 222
interface GigabitEthernet1/0/1 port link-type hybrid port hybrid vlan 2 3 tagged port hybrid vlan 1 untagged return The output shows that: The port link type of GigabitEthernet 1/0/1 does not change. GigabitEthernet 1/0/1 is a tagged member of VLANs 2 and 3. GigabitEthernet 1/0/1 is removed from VLANs 20 and 30.
GigabitEthernet 1/0/1 is removed from VLAN 10. Related commands • port private-vlan host • port private-vlan promiscuous • port private-vlan trunk promiscuous • private-vlan (VLAN view) • private-vlan isolated • private-vlan primary private-vlan (VLAN interface view) Use private-vlan secondary to enable Layer 3 communication between secondary VLANs that are associated with a primary VLAN.
• If you specify the secondary vlan-id-list option, this command cancels the Layer 3 communication configuration only for the specified secondary VLANs. • If you do not specify the secondary vlan-id-list option, this command cancels the Layer 3 communication configuration for all secondary VLANs of the primary VLAN. Examples This example shows how to meet the following requirements: •...
Page 225
Use undo private-vlan to dissociate the specified secondary VLANs from a primary VLAN. Syntax private-vlan secondary vlan-id-list undo private-vlan [ secondary vlan-id-list ] Default A primary VLAN is not associated with any secondary VLANs. Views VLAN view Predefined user roles network-admin Parameters secondary vlan-id-list: Specifies a space-separated list of up to 10 secondary VLAN items.
private-vlan community Use private-vlan community to enable Layer 2 communication between ports in a secondary VLAN. Syntax private-vlan community Default Ports in the same secondary VLAN can communicate with each other at Layer 2. Views VLAN view Predefined user roles network-admin Usage guidelines The private-vlan community command and the undo private-vlan isolated command have the...
[Sysname] vlan 4 [Sysname-vlan4] private-vlan community Related commands private-vlan isolated private-vlan isolated Use private-vlan isolated to isolate ports in a secondary VLAN at Layer 2. Use undo private-vlan isolated to restore the default. Syntax private-vlan isolated undo private-vlan isolated Default Ports in the same secondary VLAN can communicate with each other at Layer 2.
# Assign GigabitEthernet 1/0/2 to VLAN 4 and configure the port as a host port. [Sysname] interface gigabitethernet 1/0/2 [Sysname-GigabitEthernet1/0/2] port access vlan 4 [Sysname-GigabitEthernet1/0/2] port private-vlan host [Sysname-GigabitEthernet1/0/2] quit # Assign GigabitEthernet 1/0/3 to VLAN 4 and configure the port as a host port. [Sysname] interface gigabitethernet 1/0/3 [Sysname-GigabitEthernet1/0/3] port access vlan 4 [Sysname-GigabitEthernet1/0/3] port private-vlan host...
Page 229
Related commands • port private-vlan host • port private-vlan promiscuous • port private-vlan trunk promiscuous • port private-vlan trunk secondary • private-vlan primary...
Voice VLAN commands cdp voice-vlan Use cdp voice-vlan to configure a port to advertise the specified voice VLAN in CDP packets. Use undo cdp voice-vlan to restore the default. Syntax cdp voice-vlan vlan-id undo cdp voice-vlan Default When CDP compatibility is enabled, the port advertises the voice VLAN configured on the port to its connected IP phone through CDP packets.
Field Description Voice VLAN-enabled port and its voice VLAN assignment Voice VLAN enabled ports and their modes mode. Port Name of the voice VLAN-enabled port. VLAN ID of the voice VLAN enabled on the port. Voice VLAN assignment mode of the port: •...
voice-vlan enable Use voice-vlan enable to enable the voice VLAN feature and configure a VLAN as the voice VLAN for a port. Use undo voice-vlan enable to disable the voice VLAN feature on a port. Syntax voice-vlan vlan-id enable undo voice-vlan [ vlan-id ] enable Default The voice VLAN feature is disabled on ports.
Number OUI address Vendor 0003-6B00-0000 Cisco phone 0004-0D00-0000 Avaya phone 000F-E200-0000 H3C Aolynk phone 0060-B900-0000 Philips/NEC phone 00D0-1E00-0000 Pingtel phone 00E0-7500-0000 Polycom phone 00E0-BB00-0000 3Com phone Views System view Predefined user roles network-admin Parameters mac-address: Specifies a source MAC address of voice traffic, in the format of H-H-H. For example, 1234-1234-1234.
Use undo voice-vlan mode auto to configure a port to operate in manual voice VLAN assignment mode. Syntax voice-vlan mode auto undo voice-vlan mode auto Default A port operates in automatic voice VLAN assignment mode. Views Layer 2 Ethernet interface view Predefined user roles network-admin Usage guidelines...
Usage guidelines Before you execute this command on a port, make sure the voice VLAN feature is disabled on it. If you execute both the voice-vlan qos and voice-vlan qos trust commands multiple times, the most recent configuration takes effect. Examples # Configure GigabitEthernet 1/0/1 to modify the CoS and DSCP values for voice VLAN packets to 5 and 45, respectively.
voice-vlan security enable Use voice-vlan security enable to enable the voice VLAN security mode. Use undo voice-vlan security enable to disable the voice VLAN security mode. Syntax voice-vlan security enable undo voice-vlan security enable Default The voice VLAN security mode is enabled. Views System view Predefined user roles...
MVRP commands display mvrp running-status Use display mvrp running-status to display MVRP running status. Syntax display mvrp running-status [ interface interface-list ] Views Any view Predefined user roles network-admin network-operator Parameters interface interface-list: Specifies a range of Ethernet interfaces in the form of interface-type interface-number [ to interface-type interface-number ].
Page 239
Periodic Timer : 100 (centiseconds) LeaveAll Timer : 1000 (centiseconds) Registration Type : Normal Registered VLANs : None Declared VLANs : None Propagated VLANs : None Table 51 Command output Field Description MVRP Global Info Global MVRP information. Global MVRP status: •...
display mvrp state Use display mvrp state to display the MVRP state of a port in a VLAN. Syntax display mvrp state interface interface-type interface-number vlan vlan-id Views Any view Predefined user roles network-admin network-operator Parameters interface interface-type interface-number: Specifies a port by its type and number. vlan vlan-id: Specifies a VLAN by its VLAN ID in the range of 1 to 4094.
display mvrp statistics Use display mvrp statistics to display MVRP statistics. Syntax display mvrp statistics [ interface interface-list ] Views Any view Predefined user roles network-admin network-operator Parameters interface interface-list: Specifies a range of Ethernet interfaces in the form of interface-type interface-number [ to interface-type interface-number ].
Page 242
Frames Received New Event Received JoinIn Event Received In Event Received JoinMt Event Received Mt Event Received Leave Event Received LeaveAll Event Received Frames Transmitted New Event Transmitted JoinIn Event Transmitted In Event Transmitted JoinMt Event Transmitted Mt Event Transmitted Leave Event Transmitted LeaveAll Event Transmitted Frames Discarded...
Parameters timer-value: Specifies the Leave timer value (in centiseconds). The Leave timer must meet the following requirements: • Greater than two times the Join timer. • Less than the LeaveAll timer. • Divisible by 20. Examples # Set the Leave timer to 100 centiseconds. (In this example, the Join and LeaveAll timer use their default settings.) <Sysname>...
The device randomly changes the LeaveAll timer within a certain range when the MRP participant restarts its LeaveAll timer. This prevents the LeaveAll timer of a particular participant from always expiring first. Examples # Set the LeaveAll timer to 1500 centiseconds. (In this example, the Leave timer has been restored to the default.) <Sysname>...
Use undo mvrp enable to restore the default. Syntax mvrp enable undo mvrp enable Default MVRP is disabled on a port. Views Layer 2 Ethernet interface view, Layer 2 aggregate interface view Predefined user roles network-admin Usage guidelines For MVRP to take effect on a port, make sure the following requirements are met: •...
Predefined user roles network-admin Parameters fixed: Specifies the fixed registration mode. forbidden: Specifies the forbidden registration mode. normal: Specifies the normal registration mode. Examples # Set the MVRP registration mode to fixed on GigabitEthernet 1/0/1. <Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] mvrp registration fixed Related commands display mvrp running-status...
QinQ commands This document uses the following terms: • CVLAN—Customer network VLANs, also called inner VLANs, refer to VLANs that a customer uses on the private network. • SVLAN—Service provider network VLANs, also called outer VLANs, refer to VLANs that a service provider uses to transmit VLAN tagged traffic for customers.
Table 54 Command output Field Description Interface Interface name. GigabitEthernet1/0/1 QinQ-enabled interface. Related commands qinq enable qinq enable Use qinq enable to enable QinQ on an Ethernet interface. Use undo qinq enable to restore the default. Syntax qinq enable undo qinq enable Default QinQ is disabled on Ethernet interfaces.
Predefined user roles network-admin Parameters hex-value: Sets a hexadecimal TPID value in the range of 0x0001 to 0xFFFF, excluding the reserved EtherType values listed in Table Table 55 Reserved EtherType values Protocol type Value 0x0806 0x0200 RARP 0x8035 0x0800 IPv6 0x86DD PPPoE 0x8863/0x8864...
Views Ethernet interface view, aggregate interface view Predefined user roles network-admin Parameters hex-value: Sets a hexadecimal TPID value in the range of 0x0001 to 0xFFFF, excluding the reserved EtherType values listed in Table Usage guidelines A service provider-side port uses the SVLAN TPID to replace the TPID in outgoing frames' SVLAN tags, in addition to matching incoming tagged frames.
Page 253
Examples # Configure GigabitEthernet 1/0/1 as a trunk port, and assign the port to VLAN 2, VLAN 3, and VLANs 50 through 100. Enable QinQ on GigabitEthernet 1/0/1, and configure the port to transparently transmit frames from VLAN 2. <Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] port link-type trunk [Sysname-GigabitEthernet1/0/1] port trunk permit vlan 2 3 50 to 100...
VLAN mapping commands display vlan mapping Use display vlan mapping to display VLAN mappings. Syntax display vlan mapping [ interface interface-type interface-number ] Views Any view Predefined user roles network-admin network-operator Parameters interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, the command displays VLAN mappings on all interfaces.
Field Description • Many-to-one VLAN mapping • One-to-two VLAN mapping Translated outer VLAN. Translated Outer VLAN This field indicates the translated VLAN when the Translated Inner VLAN field displays N/A. Translated inner VLAN. This field displays N/A for the following VLAN mapping types: Translated Inner VLAN •...
Page 256
nni: Configures the network-side port to use the original VLAN tags of the many-to-one mapping to replace the VLAN tags of the packets destined for the user network. nest range vlan-range-list nested-vlan vlan-id: Specifies the CVLAN ranges and the SVLAN for a one-to-two VLAN mapping.
Page 257
<Sysname> system-view [Sysname] interface gigabitethernet 1/0/2 [Sysname-GigabitEthernet1/0/2] vlan mapping uni range 1 to 50 translated-vlan 101 [Sysname-GigabitEthernet1/0/2] vlan mapping uni single 80 translated-vlan 101 [Sysname-GigabitEthernet1/0/2] quit [Sysname] interface gigabitethernet 1/0/3 [Sysname-GigabitEthernet1/0/3] vlan mapping nni # Configure one-to-two VLAN mappings on GigabitEthernet 1/0/4 to add SVLAN tag 101 to packets carrying VLAN tags 1 through 10 and 80.
LLDP commands display lldp local-information Use display lldp local-information to display local LLDP information, which will be contained in the advertisable LLDP TLVs and sent to neighboring devices. Syntax display lldp local-information [ global | interface interface-type interface-number ] Views Any view Predefined user roles network-admin...
Page 259
Model name : HPE 5130 24G PoE+ 4SFP+ 1-slot HI Switch Asset tracking identifier : Unknown LLDP local-information of port 52[GigabitEthernet1/0/52]: Port ID type : Interface name Port ID : GigabitEthernet1/0/52 Port description : GigabitEthernet1/0/52 Interface LLDP agent nearest-bridge management address: Management address type : All802 Management address...
Page 260
Field Description Supported capabilities: • Bridge—Switching is supported. • Router—Routing is supported. • DocsisCableDevice—The local device serve DOCSIS-compliant cable device. System capabilities supported • StationOnly—The local device can serve as a station only. • Customer Bridge—The customer bridge function is supported. •...
Page 261
Field Description Link aggregation supported Indicates whether link aggregation is supported on the port. Link aggregation enabled Indicates whether link aggregation is enabled on the port. Aggregation port ID Member port ID, which is 0 when link aggregation is disabled. Auto-negotiation supported Indicates whether autonegotiation is supported on the port.
Field Description • guestVoice. • guestVoiceSignaling. • softPhoneVoice. • videoconferencing. • streamingVideo. • videoSignaling. Unknown policy Indicates whether the media policy is unknown. VLAN tagged Indicates whether packets of the media VLAN are tagged. Media policy VLAN ID ID of the media VLAN. Media policy L2 priority Layer 2 priority.
Page 263
Examples # Display the detailed LLDP information that the nearest bridge agents on all ports received from the neighboring devices. <Sysname> display lldp neighbor-information agent nearest-bridge verbose LLDP neighbor-information of port 1[GigabitEthernet1/0/1]: LLDP agent nearest-bridge: LLDP Neighbor index : 1 Update time : 0 days, 0 hours, 1 minutes, 1 seconds Chassis type...
Page 264
# Display the detailed LLDP information that all LLDP agents on all ports received from the neighboring devices. <Sysname> display lldp neighbor-information verbose LLDP neighbor-information of port 1[GigabitEthernet1/0/1]: LLDP agent nearest-bridge: LLDP Neighbor index : 1 Update time : 0 days, 0 hours, 1 minutes, 1 seconds Chassis type : MAC address Chassis ID...
Page 265
Update time : 0 days, 0 hours, 1 minutes, 1 seconds Chassis type : MAC address Chassis ID : 000f-0055-0002 Port ID type : Interface name Port ID : GigabitEthernet1/0/1 Time to live : 121 Port description : GigabitEthernet1/0/1 Interface System name : Sysname System description...
Page 266
LLDP neighbor index : 6 ChassisID/subtype : 0011-2233-4400/MAC address PortID/subtype : 000c-29f5-c715/MAC address Capabilities : None CDP neighbor-information of port 52[GigabitEthernet1/0/3]: LLDP agent nearest-bridge: CDP neighbor index Chassis ID : SEP00260B5C0548 Port ID : Port 1 CDP neighbor index Chassis ID : 0011-2233-4400 Port ID : GigabitEthernet1/0/4...
Page 267
Field Description depending on the chassis type of the neighboring device. Port ID type: • Interface alias. • Port component. • MAC address. • Port ID type Network address (ipv4). • Interface name. • Agent circuit ID. • Locally assigned—Locally-defined port ID type other than those listed above.
Page 268
Field Description Number of supported priorities configured by using the P0- P1- P2- P3- P4- P5- P6- priority-flow-control no-drop dot1p dot1p-list command on the neighbor. CoS map Application protocol-to-CoS mapping. Indicates whether the token bucket mechanism is supported on the port: •...
Page 269
Field Description Power source type of an LLDP neighboring device that is a PD device: • Unknown—Unknown power supply. • PSE—PSE power supply. • Local—Local power supply. • PSE and local—PSE and local power supplies. This field appears only on the devices that support PoE. PoE power receiving priority of ports on an LLDP neighboring device that is a PD device: •...
Field Description • bridge neighbor A pound sign (#) indicates the nearest customer bridge neighbor. display lldp statistics Use display lldp statistics to display the global LLDP statistics or the LLDP statistics of a port. Syntax display lldp statistics [ global | [ interface interface-type interface-number ] [ agent { nearest-bridge | nearest-customer | nearest-nontpmr } ] ] Views Any view...
Page 271
The number of LLDP neighbor information aged out : 0 The number of CDP frames transmitted The number of CDP frames received The number of CDP frames discarded The number of CDP error frames LLDP agent nearest-nontpmr: The number of LLDP frames transmitted The number of LLDP frames received The number of LLDP frames discarded The number of LLDP error frames...
Table 59 Command output Field Description LLDP statistics global information Global LLDP statistics. Time when the neighbor information was last LLDP neighbor information last change time updated. The number of LLDP neighbor information inserted Number of times neighbor information was added. The number of LLDP neighbor information deleted Number of times neighbor information was removed.
Page 273
Hold multiplier Reinit delay : 2s Trap interval : 5s Fast start times LLDP status information of port 1 [GigabitEthernet1/0/1]: LLDP agent nearest-bridge: Port status of LLDP : Enable Admin status : Tx_Rx Trap flag : No MED trap flag : No Polling interval : 0s...
Field Description Reinit delay LLDP reinitialization delay. Transmit max credit Token bucket size for sending LLDP frames. Trap interval Trap transmission interval. Number of LLDP frames sent each time fast LLDP frame transmission Fast start times is triggered. Port 1 LLDP status of port 1.
Page 275
Usage guidelines If no port is specified, this command displays the types of advertisable optional TLVs of all ports. Examples # Display the types of advertisable optional LLDP TLVs of interface GigabitEthernet 1/0/1. <Sysname> display lldp tlv-config interface gigabitethernet 1/0/1 LLDP tlv-config of port 1[GigabitEthernet1/0/1]: LLDP agent nearest-bridge: NAME...
Page 276
IEEE 802.3 extend TLV: MAC-Physic TLV Power via MDI TLV Maximum Frame Size TLV LLDP-MED extend TLV: Capabilities TLV Network Policy TLV Location Identification TLV Extended Power via MDI TLV Inventory TLV LLDP agent nearest-customer: NAME STATUS DEFAULT Basic optional TLV: Port Description TLV System Name TLV System Description TLV...
Field Description • System description TLV. • System capabilities TLV. • Management address TLV. IEEE 802.1 organizationally specific TLVs: • Port VLAN ID TLV. • Port and protocol VLAN ID TLV. • IEEE 802.1 extended TLV VLAN name TLV. • DCBX TLV.
Parameters agent: Specifies an LLDP agent type. If no agent type is specified in Ethernet interface view, the command enables LLDP polling and sets the polling interval for nearest bridge agents. nearest-customer: Specifies nearest customer bridge agents. nearest-nontpmr: Specifies nearest non-TPMR bridge agents. interval: Sets the LLDP polling interval in the range of 1 to 30 seconds.
Predefined user roles network-admin Usage guidelines LLDP takes effect on a port only when LLDP is enabled both globally and on the port. Examples # Disable LLDP on GigabitEthernet 1/0/1. <Sysname> system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] undo lldp enable Related commands lldp global enable lldp encapsulation snap...
[Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] lldp encapsulation snap lldp fast-count Use lldp fast-count to set the number of LLDP frames sent each time fast LLDP frame transmission is triggered. Use undo lldp fast-count to restore the default. Syntax lldp fast-count count undo lldp fast-count Default The number is 4.
Usage guidelines LLDP takes effect on a port only when LLDP is enabled both globally and on the port. Examples # Disable LLDP globally. <Sysname> system-view [Sysname] undo lldp global enable Related commands lldp enable lldp hold-multiplier Use lldp hold-multiplier to set the TTL multiplier. Use undo lldp hold-multiplier to restore the default.
undo lldp max-credit Default The token bucket size for sending LLDP frames is 5. Views System view Predefined user roles network-admin Parameters credit-value: Specifies the token bucket size for sending LLDP frames, in the range of 1 to 100. Examples # Set the token bucket size for sending LLDP frames to 10.
undo lldp timer notification-interval Default The LLDP trap and LLDP-MED trap transmission interval is 30 seconds. Views System view Predefined user roles network-admin Parameters interval: Sets the LLDP trap and LLDP-MED trap transmission interval in the range of 5 to 3600 seconds.
undo lldp timer tx-interval Default The LLDP frame transmission interval is 30 seconds. Views System view Predefined user roles network-admin Parameters interval: Sets the LLDP frame transmission interval in the range of 5 to 32768 seconds. Examples # Set the LLDP frame transmission interval to 20 seconds. <Sysname>...
Page 291
Parameters agent: Specifies an LLDP agent type. If no agent type is specified in Ethernet interface view, the command configures the types of advertisable TLVs for nearest bridge agents. nearest-customer: Specifies nearest customer bridge agents. nearest-nontpmr: Specifies nearest non-TPMR bridge agents. all: Advertises all TLVs of the specified type.
Page 292
range of 1 to 4094. If no management VLAN ID is specified, the value 0 is advertised, which means that the LLDP agent is not configured with a management VLAN ID. dot3-tlv: Advertises IEEE 802.3 organizationally specific LLDP TLVs. link-aggregation: Advertises link aggregation TLVs. mac-physic: Advertises MAC/PHY configuration/status TLVs.
Service loopback group commands display service-loopback group Use display service-loopback group to display information about service loopback groups. Syntax display service-loopback group [ number ] Views Any view Predefined user roles network-admin network-operator Parameters number: Specifies a service loopback group ID. The value range for the number argument is 1 to 1024.
Default A service loopback group does not contain any ports. Views Layer 2 Ethernet interface view Predefined user roles network-admin Parameters number: Specifies a service loopback group ID. The value range for the number argument is 1 to 1024. Usage guidelines Before assigning a port to a service loopback group, make sure the port supports the service type of the group.
Page 296
A service loopback group must work with other features, such as GRE. It can be used by multiple features. You must create a service loopback group before you can use it with a feature. You cannot change the service type of a service loopback group. For correct traffic processing, do not delete a service loopback group that is being used by a feature.
Document conventions and icons Conventions This section describes the conventions used in the documentation. Port numbering in examples The port numbers in this document are for illustration only and might be unavailable on your device. Command conventions Convention Description Boldface Bold text represents commands and keywords that you enter literally as shown.
Network topology icons Convention Description Represents a generic network device, such as a router, switch, or firewall. Represents a routing-capable device, such as a router or Layer 3 switch. Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supports Layer 2 forwarding and other Layer 2 features.
Hewlett Packard Enterprise Support Center More Information on Access to Support Materials page: www.hpe.com/support/AccessToSupportMaterials IMPORTANT: Access to some updates might require product entitlement when accessed through the Hewlett Packard Enterprise Support Center. You must have an HP Passport set up with relevant entitlements.
Websites Website Link Networking websites Hewlett Packard Enterprise Information Library for www.hpe.com/networking/resourcefinder Networking Hewlett Packard Enterprise Networking website www.hpe.com/info/networking Hewlett Packard Enterprise My Networking website www.hpe.com/networking/support Hewlett Packard Enterprise My Networking Portal www.hpe.com/networking/mynetworking Hewlett Packard Enterprise Networking Warranty www.hpe.com/networking/warranty General websites Hewlett Packard Enterprise Information Library www.hpe.com/info/enterprise/docs Hewlett Packard Enterprise Support Center...
Page 301
part number, edition, and publication date located on the front cover of the document. For online help content, include the product name, product version, help edition, and publication date located on the legal notices page.
Index A B C D E F I J L M N P Q R S U V W display lldp status,264 display lldp tlv-config,266 active region-configuration,110 display loopback-detection,159 display mac-address,56 display mac-address aging-time,57 bandwidth,164 display mac-address mac-learning,58 bandwidth,40 display mac-address mac-move,59 bandwidth,1 display mac-address...
Page 305
port bridge enable,31 shutdown,105 port hybrid ip-subnet-vlan,191 snmp-agent trap enable mac-address,72 port hybrid protocol-vlan,194 speed,25 port hybrid pvid,178 speed auto downgrade,26 port hybrid vlan,179 storm-constrain,33 port link-aggregation group,104 storm-constrain control,34 port link-type,180 storm-constrain enable log,35 port private-vlan host,206 storm-constrain enable trap,35 port private-vlan promiscuous,207...