
XGS3 Command Guide 1-1 Command Guide XGS3-24040 24-Port Gigabit with 4 Optional 10G slots Layer 3 IPv6/IPv4 Managed Stackable Switch XGS
XGS3 Command Guide 1-10 14.4 MLS QOS ...
XGS3 Command Guide 3-100 3.10 cluster run Command: cluster run [key <WORD>][ vid <VID>] no cluster run Function: Enable c
XGS3 Command Guide 3-101 startup-config start the configuration file nos.img system file Command mode: Admin Mode Usage Guide: The commander d
XGS3 Command Guide 3-102 no debug cluster packets {DP | DR | CP} {receive | send} Function: Enable the debug information; the no command di
XGS3 Command Guide 3-103 Cluster VLAN: 1 Role: Member Commander Ip Address: 10.254.254.1 Internal Ip Address: 10.254.254.2 Commamder Mac Address:
XGS3 Command Guide 3-104 ID: 1 Member status: Inactive member (user_config) IP Address: 10.254.254.2 MAC Address: 00-01-02-03-04-06 Des
XGS3 Command Guide 3-105 Usage Guide: Executing this command on the commander switch will display the topology information with its starting node sp
XGS3 Command Guide 3-106 Toplogy role: Member Member status: Active member (user-config) SN: 2 MAC Address: 01-02-03-04-05-02 Description: X
XGS3 Command Guide 3-107
XGS3 Command Guide 4-108 Chapter 4 Commands for Network Port Configuration 4.1 Commands for Ethernet Port Configuration 4.1.1 bandwidth Command: ban
XGS3 Command Guide 4-109 on a 10/100/1000 port working at a speed of 100M. Example: Set the bandwidth limit of 1/1-8 port is 40000K. Switch(config)
XGS3 Command Guide 1-11 17.1.4 interface loopback ...
XGS3 Command Guide 4-110 iber connected, copper not connected Copper cable port Fiber cable port Fiber cable port Fiber cable port Copper connected,
XGS3 Command Guide 4-111 Example: Setting ports 1/21-24 to fiber-forced. Switch(config)#interface ethernet 1/21-24 Switch(Config-Port-Range)#combo-
XGS3 Command Guide 4-112 Port flow control function is not recommended unless the users need a slow speed, low performance network with low packet los
XGS3 Command Guide 4-113 Switch(config)#interface ethernet 1/1-8 Switch(Config-If-Port-Range)#loopback 4.1.7 mdi Command: mdi { auto | across | n
XGS3 Command Guide 4-114 of 1/9 ports which belongs to the engineering department, while the name of 1/12 ports is assigned with Server, which is beca
XGS3 Command Guide 4-115 command disables this traffic throttle function on all ports in the switch, i.e., enables broadcasts, multicasts and unknown
XGS3 Command Guide 4-116 There is no limit on packet reception rate by default. Usage Guide: This command is mainly used to detect the abnormal port
XGS3 Command Guide 4-117 the showing information include port number, Link, Protocl status, Speed, Duplex, Vlan, port type and port name; counter pack
XGS3 Command Guide 4-118 0 output errors, 0 collisions Sshow the information of tunnel 1: Switch#show interface tunnel 1 Tunnel1 is up, line protoc
XGS3 Command Guide 4-119 Show the important information of all layer 2 ports: Switch#show interface ethernet status Codes: A-Down - administrativel
XGS3 Command Guide 1-12 17.2.38 tunnel source ...
XGS3 Command Guide 4-120 Default: Ethernet port is open by default. Usage Guide: When Ethernet port is shut down, no data frames are sent in the
XGS3 Command Guide 4-121 Usage Guide: This command is configures the port speed and duplex mode. When configuring port speed and duplex mode, the sp
XGS3 Command Guide 5-122 Chapter 5 Commands for Port Isolation Function 5.1 isolate-port group Command: isolate-port group <WORD> no is
XGS3 Command Guide 5-123 Parameters: <WORD> is the name identification of the group, no longer than 32 characters. If there is no such group w
XGS3 Command Guide 5-124 Parameters: <WORD> the name identification of the group, no longer than 32 characters; no parameter means to display
XGS3 Command Guide 6-125 Chapter 6 Commands for Port Loopback Detection Function 6.1 loopback-detection control Command: loopback-detection control
XGS3 Command Guide 6-126 Default: Disable the function of detecting the loopbacks through the port. Command Mode: Port Mode. Usage Guide: If a p
XGS3 Command Guide 6-127 6.4 loopback-detection control-recovery timeout Command: loopback-detection control-recovery timeout <0-3600> Functio
XGS3 Command Guide 7-128 6.6 debug loopback-detection Command: debug loopback-detection Function: After enabling the loopback detection debug on a
XGS3 Command Guide 7-129 7.2 uldp disable Command: uldp disable Function: To disable ULDP configuration through this command. Parameters: None.
XGS3 Command Guide 1-13 19.1 IP ARP-SECURITY UPDATEPROTECT ...
XGS3 Command Guide 7-130 Function: To configure ULDP to work in aggressive mode. The no form of this command will restore the normal mode. Parameter
XGS3 Command Guide 7-131 Default: None. Usage Guide: This command can only be effect only if the specified interface is disabled by ULDP. Example:
XGS3 Command Guide 7-132 Example: To display the global ULDP information. Switch(config)# show uldp 7.9 debug uldp fsm interface ethernet Command:
XGS3 Command Guide 7-133 7.11 debug uldp event Command: debug uldp event no debug uldp event Function: Enable the message debug function to displa
XGS3 Command Guide 7-134 Parameter: <IFname>: Name of the interface. Command Mode: Admin Mode. Default: Disabled. Usage Guide: Use this
8-1 Chapter 8 Commands for LLDP Function 8.1 lldp enable Command: lldp enable lldp disable Function: Globally enable LLDP function; the no op
8-2 Switch(Config-if-ethernet 1/5)#lldp disable 8.3 lldp mode Command: l ldp mode <send|receive|both|disable> Function: Configure the opera
8-3 period as long as configured. The interval should be less than or equal with half of aging time, for a too long interval will cause the state of
8-4 Parameters: <seconds>is the time interval, ranging from 1 to 8192 seconds. Default: The interval is 2 seconds by default. Command Mode:
8-5 Default: The Trap function is disabled on the specified port by default. Command Mode: Port Configuration Mode. Usage Guide: The function o
XGS3 Command Guide 1-14 24.1.5 client-identifier ...
8-6 Function: Set the maximum number of entries can be stored in Remote MIB. Parameters: <value> is the configured number of entries, rangi
8-7 Function: Display the configuration information of global LLDP, such as the list of all the ports with LLDP enabled, the interval of sending up
8-8 Example: Check the statistics of LLDP data packets after LLDP is enabled on the switch. Switch(config)#show lldp traffic PortName Ageouts F
8-9 Default: Do not display the LLDP neighbor information of the port. Command Mode: Admin Mode, Global Mode. Usage Guide: Users can check the
8-10 Enable the debug information of LLDP function, the no operation of this command will disable the debug information of LLDP function. Parameters:
8-11 8.19 clear lldp remote-table Command: clear lldp remote-table Function: Clear the Remote-table on the port. Parameters: None. Default: D
9-12 Chapter 9 Commands for Port Channel 9.1 debug port-channel Command: debug port-channel <port-group-number> {all | event | fsm | packet |
9-13 Command mode: Global Mode Usage Guide: On entering aggregated port mode, configuration to GVRP or spanning tree modules will apply to aggreg
9-14 Parameters: <system-priority>: The system priority of LACP protocol, ranging from 0 to 65535. Command mode: Global Mode Default:
9-15 9.6 port-group Command: port-group <port-group-number> }] no port-group <port-group-number> Function: Creates a port group. The
XGS3 Command Guide 1-15 25.12 IPV6 DHCP CLIENT PD HINT ...
9-16 Example: Under the Port Mode of Ethernet1/1, add current port to “port-group 1” in “active” mode. Switch(Config-If-Ethernet1/1)#port-group 1 m
9-17 Port-group number: 1, Mode: on, Load-balance: src-ip Port-group detail information: System ID: 0x8000, 000f-e219-57c3 Port Status: S -- Se
10-18 Chapter 10 Commands for Jumbo 10.1 jumbo enable Command: jumbo enable [<mtu-value>] no jumbo enable Function: Enable the Jumbo rece
11-19 Chapter 11 VLAN Configuration 11.1 Commands for VLAN Configuration 11.1.1 debug gvrp Command: debug gvrp no debug gvrp Function: Enable the
11-20 mutually exclusive. Example: Join port1 into VLAN3, enable dot1q-tunnel function. Switch(config)#vlan 3 Switch(Config-Vlan3)#switchport inte
11-21 Switch(Config-If-Ethernet1/10)#exit Switch(config)# 11.1.4 gvrp Command: gvrp no gvrp Function: Enable the GVRP function for the switch
11-22 Usage Guide: When GARP application entities receive a join message, join message will not be sent immediately. Instead, hold timer is started
11-23 When GARP application entity wants to cancel a certain property information, it sends a leave message. GARP application entities receiving th
11-24 VLAN Configuration Mode. Default: The default VLAN name is vlanXXX, where xxx is VID. Usage Guide: The switch can specify names for diffe
11-25 Switch(Config-Vlan100)#private-vlan primary Note:This will remove all the ports from vlan 100 Switch(Config-Vlan100)#exit Switch(config)#vlan
XGS3 Command Guide 1-16 27.13 IP DHCP SNOOPING TRUST ...
11-26 Example: Associate Isolated VLAN200 and Community VLAN300 to Primary VLAN100. Switch(Config-Vlan100)#private-vlan association 200;300 11.1
11-27 Command: show gvrp [<interface-name>] Function: Display the global and port information for GVRP. Parameter: <interface-name&g
11-28 Ethernet1/11 Ethernet1/12 2 VLAN0002 Static ENET Ethernet1/5 Ethernet1/6
11-29 show vlan-translation Function: Display the information of all the ports at VLAN-translation state. Parameter: None. Command Mode: Admin
11-30 Default: All ports belong to VLAN1 by default. Usage Guide: Only ports in Access mode can join specified VLANs, and an Access port can on
11-31 Set hybrid port allowed vlan 1, 3, 5-20 with untag mode and allow vlan 100; 300; 500-2000 with tag mode. Switch(config)#interface ethernet 1/5
11-32 switchport interface [ethernet | portchannel] [interface-name | interface-list] no switchport interface [ethernet | portchannel] [interface-nam
11-33 convert between Hybrid and Trunk, it must configure to be access at first, then configure to be Hybrid or Trunk. When the Trunk or Hybrid attri
11-34 The user can use this command to set the VLAN traffic allowed to passthrough the Trunk port; traffic of VLANs not included are prohibited. Ex
11-35 Command: vlan WORD no vlan WORD Function: Create VLANs and enter VLAN configuration mode. If using ';' and '-' connec
XGS3 Command Guide 1-17 29.11 MATCH ORIGIN ...
11-36 Parameter: old-vlan-id is the original VLAN ID;new-vlan-id is the translated VLAN ID; in indicates entrance translation; out indicates exit
11-37 Parameter: None. Command Mode: Port Mode. Default: VLAN translation has not been enabled on the port by default. Usage Guide: To apply
11-38 11.1.28 vlan ingress enable Command: vlan ingress enable no vlan ingress enable Function: Enable the VLAN ingress rule for a port; the “no
11-39 11.2 Commands for Dynamic VLAN Configuration 11.2.1 dynamic-vlan mac-vlan prefer Command: dynamic-vlan mac-vlan prefer Function: Set the M
11-40 Switch#config Switch(config)#dynamic-vlan subnet-vlan prefer 11.2.3 mac-vlan Command: mac-vlan mac <mac-addrss> vlan <vlan-id>
11-41 Default: No MAC VLAN is configured by default. Usage Guide: Set specified VLAN for MAC VLAN, There can be only one MAC VLAN at the same tim
11-42 Switch#config Switch(config)#protocol-vlan mode ethernetii etype 2048 vlan 200 11.2.6 show dynamic-vlan prefer Command: show dynamic-vlan
11-43 ------------------ ----------- -------- 00-e0-4c-77-ab-9d 2 2 00-0a-eb-26-8d-f3 2
11-44 Example: Display the configuration of the current Protocol-based VLAN. Switch#show protocol-vlan Protocol_Type VLAN_ID Pr
11-45 Command Mode: Admin Mode and other Configuration Mode. Usage Guide: Display the port of enabling IP-subnet-based VLAN, the character in the
XGS3 Command Guide 1-18 31.10 DISTRIBUTE-LIST ...
11-46 Command: switchport mac-vlan enable no switchport mac-vlan enable Function: Enable the MAC-based VLAN function on the port; the "no” f
11-47 Usage Guide: After adding the IP subnet to specified VLAN, the IP-subnet-based VLAN function will be globally enabled. This command can disab
11-48 11.3.2 switchport voice-vlan enable Command: switchport voice-vlan enable no switchport voice-vlan enable Function: Enable the Voice VLAN
11-49 This command will add a specified voice equipment into the Voice VLAN, if a non VLAN labeled data packet from the specified voice equipment ent
12-50 Chapter 12 Commands for MAC Address Table Configuration 12.1 Commands for MAC Address Table Configuration 12.1.1 mac-address-table aging-time C
12-51 <mac-addr> MAC address to be added or deleted; <interface-name> name of the port transmitting the MAC data packet; <vlan-id>
12-52 Switch#show mac-address-table blackhole 12.2 Commands for Mac Address Binding configuration 12.2.1 clear port-security dynamic Command: cle
12-53 Ethernet1/5 1 0 Protect --------------------------------------------------------------------------------
12-54 Security Mac Address Table -------------------------------------------------------------------------------------------------- Vlan Mac Addre
12-55 Usage Guide: This command displays the detailed configuration information for the secure port. Example: Switch#show port-security interfa
XGS3 Command Guide 1-19 32.6 DEBUG IPV6 RIP ...
12-56 12.2.5 switchport port-security Command: switchport port security no switchport port security Function: Enable MAC address binding functio
12-57 switchport port-security lock no switchport port-security lock Function: Lock the port. After the port is locked, the MAC-address learnin
12-58 Function: Sets the maximum number of secure MAC addresses for a port; the “no switchport port-security maximum” command restores the maximum
12-59 Usage Guide: The port locking timer function is a dynamic MAC address locking function. MAC address locking and conversion of dynamic MAC ent
13-60 Chapter 13 ommands for MSTP 13.1 Commands for MSTP 13.1.1 abort Command: abort Function: Abort the current MSTP region configuration, quit
13-61 Function: In MSTP region mode, create the instance and set the mappings between VLANs and instances; the command “no instance <instance-id
13-62 Set MSTP region name to mstp-test. Switch(config)#spanning-tree mst configuration Switch(Config-Mstp-Region)#description mstp-test 13.1.5 re
13-63 Enable the MSTP in global mode, and disable the MSTP in the interface1/2. Switch(config)#spanning-tree Switch(config)#interface ethernet 1/2
13-64 13.1.8 spanning-tree hello-time Command: spanning-tree hello-time <time> no spanning-tree hello-time Function: Set switch H
13-65 Example: Force the port 1/7-8 as point-to-point type. Switch(config)#interface ethernet 1/7-8 Switch(Config-Port-Range)#spanning-tree link-t
XGS3 Command Guide 1-2 Content CHAPTER 1 COMMANDS FOR BASIC SWITCH CONFIGURATION ...1-421.1 COMMANDS FOR BASIC CONFIGURATION
XGS3 Command Guide 1-20 33.17 DEBUG OSPF ROUTE ...
13-66 Command mode: Global Mode Default: The max hop is 20 by default. Usage Guide: The MSTP uses max-age to count BPDU lifetime. In addition,
13-67 mstp sets the switch in IEEE802.1s MSTP mode; stp sets the switch in IEEE802.1D STP mode; rstp sets the switch in IEEE802.1D RSTP mode. Command
13-68 Switch(config)#spanning-tree mst configuration Switch(Config-Mstp-Region)# 13.1.15 spanning-tree mst cost Command: spanning-tree mst <i
13-69 For the aggregation ports, the default costs are as below: Port Type Allowed Number Of Aggregation Ports Default Port Cost 10Mbps N 2000000
13-70 Command mode: Port Mode Default: The default port priority is 128. Usage Guide: By setting the port priority, users can control the port
13-71 13.1.18 spanning-tree mst rootguard Command: spanning-tree [mst <instance-id>] rootguard no spanning-tree [mst <instanc
13-72 All the ports are non-boundary ports by default when enabling MSTP. Usage Guide: When a port is set to be a boundary port, the port converts
13-73 13.1.21 spanning-tree format Command: spanning-tree format {standard | privacy | auto} no spanning-tree format Function: Config
13-74 13.1.22 spanning-tree digest-snooping Command: spanning-tree digest-snooping no spanning-tree digest-snooping Function: Configure
13-75 Command mode: Global mode Default: Enable Usage Guide: According to MSTP, when topology changes, the port that send change message clears
XGS3 Command Guide 1-21 33.56 SHOW IP OSPF INTERFACE ...
13-76 Example: Configure the spanning-tree flush mode once the topology change is not flush to TC. Switch(config)#interface ethernet 1/2 Switch(Co
13-77 PortName ID ExtRPC IntRPC State Role DsgBridge DsgPort -------------- ------- --------- --------- --- ---- ------------
13-78 Bridge Times Max Age, Hello Time and Forward Delay of the bridge Force Version Version of STP Instance Information Self Bridge Id The prio
13-79 Cost from the current port to the region root of the current instance State Port status of the current instance Role Port role of the current
13-80 Command: show mst-pending Function: In the MSTP region mode, display the configuration of the current MSTP region. Command mode: Admin Mo
13-81 Switch#debug spanning-tree Switch#debug spanning-tree bpdu rx interface e1/1
14-82 Chapter 14 Commands for QoS and PBR 14.1 class Command: class <class-map-name> no class <class-map-name> Function: Associates a
14-83 Usage Guide: Example: Creating and then deleting a class map named “c1”. Switch(config)#class-map c1 Switch(Config-ClassMap-c1)#exit Swi
14-84 Example: Create a class-map named c1, and configure the class rule of this class-map to match packets with IP Precedence of 0. Switch(config)
14-85 Default: The default CoS value is 0. Command mode: Interface Configuration Mode. Usage Guide: Configure the default CoS value for swi
XGS3 Command Guide 1-22 34.30 SHOW IPV6 OSPF ...
14-86 the chip without any CLI prompt. Notice: this configuration only exists in dual bucket mode; conform-action:the actions to take when the CIR is
14-87 Default: No trust. Command mode: Interface Configuration Mode. Usage Guide: trust cos mode: can setting the message cos field based c
14-88 Example: Configuring Ethernet port 1/1 to trust DSCP, using DSCP mutation mapping of mu1. Switch(config)#interface ethernet 1/1 Switch(Con
14-89 Default DSCP-to-CoS Map DSCP Value 0–7 8–15 16–23 24–31 32–39 40–47 48–55 56–63 CoS Value 0 1 2 3 4
14-90 or dual rate dual bucket, by analyzing the parameters. The no command will delete the mode configuration. Parameters: bits_per_second: the
14-91 Switch(config)#policy-map 1 Switch(config-policymap-1)#class cm Switch(config-policymap-1-class-cm)#policy 1000 2000 conform-action set-dscp
14-92 Command: policy-map <policy-map-name> no policy-map <policy-map-name> Function: Creates a policy map and enters the policy map
14-93 Switch(Config-If-Ethernet1/1)#priority-queue out 14.9 queue bandwidth Command: queue-bandwidth <queue-id> <min_kbits_per_second>
14-95 Parameters: input <policy-map-name> applies the specified policy map to the ingress redirection of switch port or VLAN interface. Def
XGS3 Command Guide 1-23 35.29 CLEAR IP BGP DAMPENING ...
14-96 Displayed information Explanation Class map name:c1 Name of the Class map used by 1 times Used times match acl name:1 Classifying rule for
14-97 Name of the class map referred to police 16000000 2000 conform-action drop exceed-action transmit Policy implemented 14.14 show mls qos aggr
14-98 Parameters: <interface-id> is the port ID; buffers is the queue buffer setting on the port; policy is the policy setting on the port; q
14-99 0x200 Displayed information Explanation Ethernet1/2 Port name packet number of 8 queue: 0x200 0x200 0x200 0x200 0x200 0x200 0
14-100 Attached policy map for Ingress: p1 Displayed information Explanation Ethernet1/2 Port name Attached policy map for Ingress: p1 Policy ma
14-101 14.16 show mls qos maps Command: show mls qos maps policed-dscp [normal-burst|max-burst] Function: Display the configuration of policed-ds
14-102 Parameters: N/A. Default: N/A. Command mode: Admin Mode. Usage Guide: This command indicates whether QoS is enabled or not. Exampl
14-103 Switch(Config-If-Ethernet1/1)#wrr-queue bandwidth1 1 2 2 4 4 8 8 14.19 wrr-queue cos-map Command: wrr-queue cos-map <queue-id> <c
15-104 Chapter 15 Commands for IPv6 PBR 15.1 class Command: class <class-map-name> no class <class-map-name> Function: Correlate a cl
15-105 Example: Create and delete a class-map named as c1. Switch(config)#class-map c1 Switch(config-ClassMap)# exit Switch(config)#no class-map
XGS3 Command Guide 1-24 35.68 NEIGHBOR ROUTE-MAP ...
15-106 Usage Guide: There can only be one match standard in each class-map. For the ACL list applied in PBR, the permit action and denies action in
15-107 Function: Set the next hop IP for the classed flows; the no set {ipv6 nexthop} will cancel the new set value. Parameters: <nexthop-ip&g
15-108 Example: Bind policy p1 to the input of ethernet1/1. Switch(config)#interface ethernet 1/1 Switch(Config-Ethernet1/1)# service-policy inp
16-1 Chapter 16 Commands for Flow-based Redirection 16.1 access-group redirect to interface ethernet Command: access-group <aclname> redirect
16-2 Usage Guide: This command is used to display the information of current flow-based redirection in the system/port. Examples: Switch(config)# s
17-3 Chapter 17 Commands for Layer 3 Forwarding 17.1 Commands for Layer 3 Interface 17.1.1 bandwidth Command: bandwidth <bandwidth> no bandwi
17-4 Usage Guide: While shutting down the VLAN interface of the switch, it will not send data frames. If this interface needs to obtain an IP addre
17-5 Global Configuration Mode. Usage Guide: IDs of the VLANs taken up by a Loopback interfaces start from 1006. If Loopback take up a VLAN whose I
17-6 Command mode: Admin Mode Usage Guide: Displays statistics for IP packets received/sent, including source/destination address and bytes, etc.
17-7 size <64> Size of data report proto <58> Protocol field in IPv6 header from Vlan1 IPv6 data report is collected from Layer 3 port
XGS3 Command Guide 1-25 35.107 SHOW IP BGP VIEW NEIGHBORS ...
17-8 from Vlan1 Layer 3 port being sent 17.2.5 debug ipv6 nd Command: debug ipv6 nd [ ns | na | rs | ra | redirect ] no debug ipv6 nd [ ns | na |
17-9 Dst <fe80::203:fff:fe01:59ba> Destination IPv6 address 17.2.6 debug ipv6 tunnel packet Command: debug ipv6 tunnel packet no debug i
17-10 Function: This command enables functions such as Unicast IPv6 Data Packet Transmit, Neighbor Discovery, Router advertisement and Routing Prot
17-11 Switch(config)#ipv6 proxy enable 17.2.9 ip address Command: ip address <ip-address> <mask> [secondary] no ip address [<ip-ad
17-12 Default: None. Usage Guide: IPv6 address prefix can not be multicast address or any other specific IPv6 address, and different layer 3 inte
17-13 Function: Set IPv6 static route. Parameters: Parameter <ipv6-prefix> is the destination prefix of IPv6 static route, parameter <pr
17-14 Usage Guide: If router A, router B, and node C are on the same network link, and router A forwards IPv6 packets from node C to router B, expe
17-15 Function: Set the time interval of Neighbor Solicitation Message sent by the interface. Parameter: parameter <seconds> is the time inte
17-16 parameter <seconds> stands for the number of seconds of router announcement lifetime, <seconds> value must be between 0-9000. Com
17-17 Parameter: Parameter <seconds> is number of seconds of the time interval of sending routing announcement, <seconds> must be betwe
XGS3 Command Guide 1-26 38.3.7 debug pim packet ...
17-18 Default: The default value of valid-lifetime is 2592000 seconds (30 days), the default value of preferred-lifetime is 604800 seconds (7 days
17-19 Switch#(Config-if-Vlan1)#ipv6 nd ra-mtu 500 17.2.22 ipv6 nd reachable-time Command: ipv6 nd reachable-time <seconds> Function: Set
17-20 Parameters: None. Command Mode: Interface Configuration Mode. Default: Information other than the address information won’t be obtained via
17-21 Usage Guide: IPv6 address and multicast address for specific purpose and local address can not be set as neighbor. Example: Set static neig
17-22 None. Usage Guide: This command creates a virtual tunnel interface. Since there is not information such as specific tunnel mode and tunnel so
17-23 TcpInErrs 0, TcpInSegs 3180 TcpMaxConn 0, TcpOutRsts 3 TcpOutSegs 0, TcpPassi
17-24 0 parameter, 0 timestamp, 0 timestamp replies Statistics of total ICMP packets received and classified information Sent: 0 total 0 errors 0 t
17-25 Usage Guide: If only brief is specified, then information of all L3 is displayed, and you can also specify a specific Layer 3 interface. Exam
17-26 [up/up] Layer 3 interface status dev index Internal index No. fe80::203:fff:fe00:10 Automatically configured IPv6 address of Layer 3 interfac
17-27 C ::/0 via ::, tunnel3 256 S 2001:2::/32 via fe80::789, Vlan2 1024 S 2001:2:3:4::/64 via fe80::123, Vlan2 1024 O
XGS3 Command Guide 1-27 38.4.7 connect-source ...
17-28 show ipv6 neighbors[{vlan|ethernet|tunnel}interface-number| interface-name | address <ipv6address>] Function: Display neighbor table
17-29 Displayed information Explanation IPv6 Addres Neighbor IPv6 address Link-layer Addr. Neighbor MAC address Interface Exit interface name Por
17-30 Displayed information Explanation IP statistics IPv6 data report statistics Rcvd: 90 total, 17 local destination0 header errors, 0 addres
17-31 17.2.35 show ipv6 redirect Command: show ipv6 redirect Function: Display the state IPv6 redirect switch. Parameters: None. Default: No
17-32 Tunnel name Mode Tunnel type Source Tunnel source ipv4 address Destination Tunnel destination ipv4 address Nexthop Tunnel next hop (only ap
17-33 no tunnel source {<ipaddress>|<interface-name>} Function: Configure tunnel source. Parameter: <ipv4-daddress> is the ip
17-34 Usage Guide: None. Example: Configure tunnel destination 203.78.120.5. Switch(Config-if-Tunnel1)#tunnel destination 203.78.120.5 17.2.40
17-35 when configuring 6to4 tunnel relay. This relay IPv4 address will only be used when the packet uses default route with a destination address not
17-36 17.3 Commands for IP Route Aggregation 17.3.1 ip fib optimize Command: ip fib optimize no ip fib optimize Function: Enables the switch to
17-37 17.4.2 ip urpf enable Command: ip urpf enable {loose | strict} {allow-default-route} no ip urpf enable Function: Enable the URPF function
XGS3 Command Guide 1-28 38.5.8 show ip pim anycast-rp non-first-hop ...
17-38 17.4.3 show urpf rule ipv4 num Command: show urpf rule ipv4 num interface {ethernet IFNAME | IFNAME} Function: Display the number of IPv4
17-39 Command Mode: Admin and Configuration Mode Usage Guide: Display the currently distributed rules. Examples: Display the details of IPv4 ru
17-40 no urpf enable Function: Enable the global URPF function. Parameters: None Command mode: Global Mode Default: The URPF protocol module
17-41 17.5.2 clear arp-cache Command: clear arp-cache Function: Clears ARP table. Command mode: Admin Mode Usage Guide: Clears the content o
17-42 Usage Guide: Display contents for ARP packets received/sent, including type, source and destination address, etc. Example: Enabling ARP deb
17-43 17.5.6 l3 hashselect Command: l3 hashselect [<crc16l|crc16u|crc32l|crc32u|lsb>] Function: Set L3 table (hardware ARP table) HASH a
17-44 Usage Guide: Displays the content of current ARP table such as IP address, MAC address, hardware type, interface name, etc. Example: Switch#s
17-45 Layer 3 interface corresponding to the ARP entry. Port Physical (Layer2) port corresponding to the ARP entry. Flag Describes whether ARP entr
18-1 Chapter 18 Commands for ARP Scanning Prevention 18.1 anti-arpscan enable Command: anti-arpscan enable no anti-arpscan enable Function: Glob
18-2 User Guide: the threshold of port-based ARP scanning prevention should be larger than the threshold of IP-based ARP scanning prevention, or,
XGS3 Command Guide 1-29 38.9.7 ip igmp last-member-query-interval ...
18-3 Command Mode: Port configuration mode User Guide: If a port is configured as a trusted port, then the ARP scanning prevention function will
18-4 18.6 anti-arpscan recovery enable Command: anti-arpscan recovery enable no anti-arpscan recovery enable Function: Enable the automatic reco
18-5 18.8 anti-arpscan log enable Command: anti-arpscan log enable no anti-arpscan log enable Function: Enable ARP scanning prevention log func
18-6 18.10 show anti-arpscan Command: show anti-arpscan [trust [ip | port | supertrust-port] |prohibited [ip | port]] Function: Display the ope
18-7 Ethernet4/12 untrust N 0 Ethernet4/13 untrust N 0 Ethernet4/14 untrust N 0 Ethernet4/15
19-8 Chapter 19 Commands for Preventing ARP, ND Spoofing 19.1 ip arp-security updateprotect Command: ip arp-security updateprotect no ip arp-secu
19-9 19.2 ipv6 nd-security updateprotect Command: ipv6 nd-security updateprotect no ipv6 nd-security updateprotect Function: Forbid ND automati
19-10 Switch(config)# ip arp-security learnprotect 19.4 ipv6 nd-security learnprotect Command: ipv6 nd-security learnprotect no ipv6 nd-securi
19-11 Switch(config)#ip arp -security convert 19.6 ipv6 nd-security convert Command: ipv6 nd-security convert Function: Change all of dynamic
19-12 Parameter: None Command mode: Interface Configuration Usage Guide: This command will clear dynamic entries before binding ND. Once imple
XGS3 Command Guide 1-3 1.2.1 authentication ip access-class ...
XGS3 Command Guide 1-30 38.11.9 ip igmp proxy downstream ...
20-13 Chapter 20 Command for ARP GUARD 20.1 arp-guard ip Command: arp-guard ip <addr> no arp-guard ip <addr> Function: Add a ARP GUA
21-14 Chapter 21 Command for ARP Local Proxy 21.1 ip local proxy-arp Command: ip local proxy-arp no ip local proxy-arp Function: Enable/disable
22-15 Chapter 22 Commands for Gratuitous ARP Configuration 22.1 ip gratuitous-arp Command: ip gratuitous-arp [<interval-time>] no ip gratuit
22-16 Function: To display configuration information about gratuitous ARP. Parameters: <vlan-id> is the VLAN ID. The valid range for <v
23-17 Chapter 23 Commands for ND Snooping 23.1 clear ipv6 nd snooping binding Command: clear ipv6 nd snooping binding [<interface-name>] Fun
23-18 Receive packet, smac 00-21-27-aa-0f-46, dmac 00-30-4f-00-de-01, saddr fe80::221:27ff:feaa:f46, daddr 2001::1, interface Ethernet1/17(portI
23-19 a) After receiving this configuration command, set globally the max number of dynamic binding which relate to the same MAC address. b) Accou
23-20 Parameter: <max-dad-prepare-delay> is the lifetime of SAC_QUERY state, the range from 1 to 10, the unit is second. Command mode: Glo
23-21 23.8 ipv6 nd snooping policy Command: ipv6 nd snooping policy {bind-eui64-address | bind-non-eui64-address} no ipv6 nd snooping policy {bin
23-22 age until the number of the dynamic binding equals this configuration value, and stop creating new dynamic binding of this port. If the number
XGS3 Command Guide 1-31 39.3.6 debug ipv6 pim nsm ...
23-23 Switch(config)#ipv6 nd snooping static-binding 2001::2:1 hardware-address 00-11-22-33-44-55 interface ethernet1/1 23.11 ipv6 nd snooping tr
23-24 Example: Configure ND Snooping function on the port. Switch(config)#ipv6 nd snooping enable Switch(config)#interface ethernet 1 Swithc(con
23-25 Usage Guide: 1.If specify the MAC address, then show the information of the static binding and the dynamic binding corresponding with this M
24-26 Chapter 24 Commands for DHCP 24.1 Commands for DHCP Server Configuration 24.1.1 bootfile Command: bootfile <filename> no bootfile
24-27 will be reallocated. Example: Removing all IP-hardware address binding records. Switch#clear ip dhcp binding all Related Command: sh
24-28 information is accumulated. You can use the “clear ip dhcp server statistics” command to clear the count for easier statistics checking. Exa
24-29 Function: Specifies the username when binding addresses manually; the “no client-name” command deletes the username. Parameters: <nam
24-30 Command Mode: DHCP Address Pool Mode Usage Guide: The IP address of default gateway(s) should be in the same subnet as the DHCP client IP,
24-31 Parameters: <domain> is the domain name, up to 255 characters are allowed. Command Mode: DHCP Address Pool Mode Default: None Usag
24-32 Command: host <address> [<mask> | <prefix-length> ] no host Function: Specifies the IP address to be assigned to the u
XGS3 Command Guide 1-32 39.4.6 show debugging ipv6 pim ...
24-33 Default: Logging for address conflict is enabled by default. Command mode: Global Mode Usage Guide: When logging is enabled, once the
24-34 Parameters: <name> is the address pool name, up to 32 characters are allowed. Command mode: Global Mode Usage Guide: This command
24-35 Set the max number of Ping request (Echo Request) message to be sent in Ping-detection of conflict on DHCP server, whose default value is 2;
24-36 no lease Function: Sets the lease time for addresses in the address pool; the “no lease” command restores the default setting. Parameters:
24-37 24.1.21 netbios-node-type Command: netbios-node-type {b-node | h-node | m-node | p-node | <type-number>} no netbios-node-type Func
24-38 24.1.22 network-address Command: network-address <network-number> [<mask> | <prefix-length>] no network-address Functio
24-39 Switch(dhcp-1-config)#next-server 10.1.128.4 24.1.24 option Command: option <code> {ascii <string> | hex <hex> | ipaddre
24-40 Example: Enabling DHCP server. Switch(config)#service dhcp 24.1.26 show ip dhcp binding Command: show ip dhcp binding [ [<ip-addr&
24-41 24.1.27 show ip dhcp conflict Command: show ip dhcp conflict Function: Displays log information for addresses that have a conflict record
24-42 Message Received BOOTREQUEST 3814 DHCPDISCOVER 1899 DHCPREQUEST 6 DHCPDECLINE 0 DHCPRELEASE 1 DHCPINFORM 1 Message Send BOOTREPLY 1
XGS3 Command Guide 1-33 39.8 COMMANDS FOR MLD SNOOPING CONFIGURATION ... 39-52
24-43 Statistics for DHCP packets received BOOTREQUEST Total packets received DHCPDISCOVER Number of DHCPDISCOVER packets DHCPREQUEST Number
24-44 24.2 Commands for DHCP Relay Configuration 24.2.1 ip forward-protocol udp bootps Command: ip forward-protocol udp bootps no ip forward-proto
25-45 Chapter 25 Commands for DHCPv6 25.1 clear ipv6 dhcp binding Command: clear ipv6 dhcp binding [<ipv6-address>] [pd<ipv6-prefix | p
25-46 Relative Command: show ip dhcp server statistics 25.3 debug ipv6 dhcp client packet Command: debug ipv6 dhcp client {event | packet} no d
25-47 Command Mode: Admin Mode. Example: Switch# debug ipv6 dhcp relay packet 25.6 debug ipv6 dhcp server Command: debug ipv6 dhcp server { ev
25-48 Switch(dhcp-1-config)#dns-server 2001:da8::1 25.8 domain-name Command: domain-name <domain-name> no domain-name <domain-name>
25-49 Switch(config)#excluded-address 2001:da8:123::1 25.10 ipv6 address Command: ipv6 address <prefix-name> <ipv6-prefix/prefix-length
25-50 Command Mode: Interface Configuration Mode. Default: DHCPv6 prefix delegation client is not enabled by default. Usage Guide: This comman
25-51 25.13 ipv6 dhcp pool Command: ipv6 dhcp pool <poolname> no ipv6 dhcp pool <poolname> Function: To configure the address pool
25-52 Command Mode: Interface Configuration Mode. Default: By default, destination address for DHCPv6 relay is not configured. Usage Guide: Th
XGS3 Command Guide 1-34 41.18 MAC-IP ACCESS EXTENDED ...
25-53 Parameter: <prefix-name> is a character string less than 32 characters, to use as IPv6 general prefix name. <ipv6-prefix/prefix-len
25-54 25.18 lifetime Command: lifetime {<valid-time> | infinity} {<preferred-time> | infinity} no lifetime Function: To configure t
25-55 Usage Guide: This command configures the address pool for the DHCPv6 server to allocate addresses, only one address range can be configured
25-56 Switch(dhcp-1-config)#prefix-delegation 2001:da8::/48 0001000600000005000BBFAA2408 iaid 12 25.21 prefix-delegation pool Command: prefix-de
25-57 Command Mode: G lobal Mode. Usage Guide: The DHCPv6 services include DHCPv6 server function, DHCPv6 relay function, DHCPv6 prefix delegation
25-58 Example: Switch#show ipv6 dhcp binding Client: iatype IANA, iaid 0x0e001d92 DUID: 00:01:00:01:0f:55:82:4f:00:19:e0:3f:d1:83 IANA leased
25-59 Example: Switch#show ipv6 dhcp pool binding 25.27 show ipv6 dhcp pool Command: show ipv6 dhcp pool [<poolname>] Function: To show
25-60 DHCP6REPLY 0 DHCP6RENEW 0 DHCP6REBIND 0 DHCP6RELEASE 0 DHCP6DECLINE
25-61 DHCP6SOLICIT The number of DHCPv6 SOLICIT packets. DHCP6ADVERTISE The number of DHCPv6 ADVERTISE packets. DHCPv6REQUEST The number of D
25-62 The number of DHCPv6 SOLICIT packets. DHCP6ADVERTISE The number of DHCPv6 ADVERTISE packets. DHCPv6REQUEST The number of DHCPv6 REQUEST pa
XGS3 Command Guide 1-35 42.26 DOT1X WEB REDIRECT ENABLE ...
25-63 Usage Guide: To show the IPv6 general prefix pool information, include the prefix number in general prefix pool, the name of every prefix, t
26-64 Chapter 26 Commands for DHCP Option 82 26.1 ip dhcp relay information option Command: ip dhcp relay information option no ip dhcp relay info
26-65 Parameters: None Command Mode: Interface configuration mode. Default Settings: The system uses replace mode to replace the option 82 seg
26-66 26.4 ip dhcp server relay information enable Command: ip dhcp server relay information enable no ip dhcp server relay information enable Fun
26-67 Vlan3: ip dhcp relay information policy replace ip dhcp relay information option subscriber-id foobar 26.6 debug ip dhcp rel
27-68 Chapter 27 Commands for DHCP Snooping 27.1 debug ip dhcp snooping packet interface Command: debug ip dhcp snooping packet interface {[ethern
27-69 27.4 debug ip dhcp snooping event Command: debug ip dhcp snooping event no debug ip dhcp snooping event Function: This command is use to
27-70 switch(config)#ip dhcp snooping enable 27.7 ip dhcp snooping binding Command: ip dhcp snooping binding enable no ip dhcp snooping binding
27-71 Usage Guide: The static binding users is deal in the same way as the dynamic binding users captured by DHCP SNOOPING; the follwoing actions
27-72 27.10 ip dhcp snooping binding dot1x Command: ip dhcp snooping binding dot1x no ip dhcp snooping binding dot1x Function: Enable the DHCP
XGS3 Command Guide 1-36 CHAPTER 46 COMMANDS FOR TACACS+ ...46-146.1 TACACS-SERVER AUTH
27-73 snooping binding dot1x“ command. Only after the DHCP SNOOPING binding function is enabled, the binding ARP function can be set. Example: E
27-74 27.13 ip dhcp snooping trust Command: ip dhcp snooping trust no ip dhcp snooping trust Function: Set or delete the DHCP Snooping trust att
27-75 detect fake DHCP Server, so, will never trigger the corresponding defense action. When a port turns into a trusted port from a non-trusted por
27-76 Command Mode: Globe mode Default Settings: The default value is 100. Usage Guide: After enabling DHCP snooping, the switch will monitor
27-77 27.18 ip dhcp snooping option82 enable Command: ip dhcp snooping option82 enable no ip dhcp snooping option82 enable Function: To enable
27-78 Usage Guide: The switch communicates with the TrustView management system through private protocols. By default these packets are not encryp
27-79 switch(Config- If-Vlan1)#ip address 100.1.1.1 255.255.255.0 switch(Config-if-Vlan1)exit switch(config)#ip user helper-address 100.1.1.100 s
27-80 27.22 show ip dhcp snooping Command: show ip dhcp snooping [interface [ethernet] <interfaceName>] Function: Display the current cofi
27-81 Ethernet1/17 untrust none 0second 0 0 Ethernet1/18 untrust none 0second 0 0
27-82 expired binding The number of binding information which is already expired but has not been deleted. The reason why the expired information is
XGS3 Command Guide 1-37 49.3 SHOW IPV6 SECURITY-RA ...
27-83 Displayed Information Explanation interface The name of port trust attribute The truest attributes of the port action The automatic defen
28-84 Chapter 28 Commands for DHCPv6 Snooping 28.1 clear ipv6 dhcp snooping binding Command: clear ipv6 dhcp snooping binding {<MAC> | <
28-85 interface Ethernet4/11, type 1, transaction-ID 3873 %Jan 16 02:25:14 2006 DHCP6SNP BINDING: Create new binding. %Jan 16 02:25:14 2006
28-86 Parameter: None Command Mode: Admin mode Default: None Usage Guide: The processing information of DHCPv6 Snooping packets include the
28-87 %Jan 16 02:18:03 2006 DHCP6SNP PACKET: to vlan 1 except port Ethernet4/11 (designPort flag 0) %Jan 16 02:18:03 2006 DHCP6SNP PACKET: and retur
28-88 Function: After the abnormity is detected by DHCPv6 Snooping, set the max number of blackhole MAC on each non-trusted port. Parameters:
28-89 28.8 ipv6 dhcp snooping binding nd Command: ipv6 dhcp snooping binding nd no ipv6 dhcp snooping binding nd Function: Globally enable the fun
28-90 Port name can the name of a Port-Channel or a Ethernet port, allows the inexistent Port-Channel specified, but it must authenticate the validi
28-91 Function: Set the max dynamic binding number which is allowed to be set on the port for DHCPv6 Snooping. The no command will not limit the n
28-92 28.13 ip dhcp snooping trust Command: ipv6 dhcp snooping trust no ipv6 dhcp snooping trust Function: Set the port to the trusted port. The
XGS3 Command Guide 1-38 54.9 ROUTER VRRP ...
28-93 switch ID: 00-30-4f-dc-dc-dc DHCPv6 Snooping discarded packets: 0 DHCPv6 Snooping alarm count: 0, binding count: 0, static binding count 0
28-94 Ethernet1/24 untrust none 0 0 0 Ethernet1/25 untrust none 0 0 0
28-95 Command Mode: Any Mode. Default Settings: None. Usage Guide: Collect the information about the ports: the relating configuration, the de
29-96 Chapter 29 Commands for Routing Policy 29.1 ip prefix-list description Command: ip prefix-list <list_name> description <description
29-97 be matched(ranging between 0~32), “le” means less than or equal to, <max_prefix_len> is the maximum length of prefix to be matched(rangi
29-98 29.4 match as-path Command: match as-path <list-name> no match as-path [<list-name>] Function: Configure the AS path domain fo
29-99 Example: Switch#config terminal Switch(config)#route-map r1 permit 5 Switch(config-route-map)#match community 100 exact-match 29.6 match
29-100 Command Mode: route-map mode Usage Guide: This command matches according to the next-hop messages or routing prefix in the route. If the
29-101 Function: Configure the next hop for ipv6 routing. The no form command will disable the configuration. Parameters: next-hop is the next s
29-102 29.11 match origin Command: match origin <egp | igp | incomplete > no match origin <egp | igp | incomplete > Function: Confi
XGS3 Command Guide 1-39 57.8 FLUSH DISABLE ARP ...
29-103 Switch(config)#route-map r1 permit 5 Switch(config-route-map)#match route-type external type-1 29.13 match tag Command: match tag <t
29-104 Usage Guide: A route-map may consist of several nodes each of which is a check unit. The check sequence among nodes is identified by sequen
29-105 29.16 set as-path Command: set as-path prepend <as-num> no set as-path prepend [<as-num>] Function: Add AS numbers in the AS
29-106 Switch(config-route-map)#set atomic-aggregate 29.18 set comm-list Command: set comm-list <community-list-name | community-list-num >
29-107 Example: Switch#config terminal Switch(config)#route-map r1 permit 5 Switch(config-route-map)#set community local-as additive 29.20 set
29-108 Example: Switch#config terminal Switch(config)#route-map r1 permit 5 Switch(config-route-map)#set ip next-hop 10.2.2.2 29.22 set local-
29-109 Usage Guide: The metric value only affects the path option from external neighbors to local AS. The less the metric value is the higher is
29-110 Parameter: egp means the route is learnt from the external gateway protocols, igp means the route is learnt from the internal gateway proto
29-111 Parameter: <tag-val > is the tag value, ranging between 0~4294967295. Command Mode: route-map mode Usage Guide: There is a route-
29-112 Parameter: <weight_val> is weight value, ranging between 0~4294967295 Command Mode: route-map mode Usage Guide: Weight value is a
XGS3 Command Guide 1-4 1.4.13 snmp-server enable traps ...
XGS3 Command Guide 1-40 60.8 NTP TRUSTED-KEY ...
29-113 Displayed information Explanation ip prefix-list mylist: 1 entries Show a prefix-list named mylist which includes 1 instance. seq 5 deny 1
29-114 ip prefix-list mylist: To display the prefix list which named mylist. count: 2, range entries: 0, sequences: 5 - 10 count : 2 means there
29-115 the sequence number is 10 Match clauses: Match sub as-path 60 Detailed contents in the Match sub Set clauses: Set sub metric 10 Detailed
30-116 Chapter 30 Commands for Static Route 30.1 ip route Command: ip route {<ip-prefix> <mask> | <ip-prefix>/<prefix-length&
30-117 The direct route has the highest priority when each route management distance value remain unchanged and followed by static route, EBGP、OSPF、
30-118 O IA 172.16.15.0/24 [110/50] via 210.14.0.1, Vlan3014, 00:00:47 O E2 172.16.100.0/24 [110/0] via 210.14.0.1, Vlan3014, 00:00:46 D
30-119 30.3 show ip route vrf Command: show ip route vrf <name> [connected | static | rip| ospf | bgp | isis| kernel|statistics|database[con
31-120 Chapter 31 Commands for RIP 31.1 accept-lifetime Command: accept-lifetime <start-time> {<end-time>| duration<seconds>| in
31-121 key-string key chain send-lifetime 31.2 address-family ipv4 Command: address-family ipv4 vrf <vrf-name> no address-family ipv4 vrf &
31-122 rip only delete RIP routes from the RIP route table ospf only delete OSPF routes from the RIP route table isis only delete ISIS routes from t
XGS3 Command Guide 1-41 62.11 SHOW STARTUP-CONFIG ...
31-123 31.5 debug rip redistribute message send Command: debug rip redistribute message send no debug rip redistribute message send Function: To
31-124 31.7 default-information originate Command: default-information originate no default-information originate Function: Allow the network 0.
31-125 Switch(config-router)#default-metric 3 Relevant Commands: Redistribute 31.9 distance Command: distance <number> [<A.B.C.D/M>
31-126 Parameter: <access-list-number |access-list-name> is the name or access-list number to be applied. <prefix-list-name> is the n
31-127 Parameter: A.B.C.D/M:IPv4 address and mask length. Command Mode: Router Mode or Interface Configuration Mode. Default: Disabled. Usag
31-128 Switch(Config-if-Vlan1)# ip rip authentication key my key Relevant Commands: key, key chain 31.14 ip rip authentication mode Command: i
31-129 Parameter: <text> is the password used in authentication of which the length should be 1-16 characters with space available. The pass
31-130 Switch(config)# interface vlan 1 Switch(Config-if-Vlan1)# ip rip authentication cisco-compatible Related Command: ip rip authentication m
31-131 Example: Switch# config terminal Switch(config)# interface vlan 1 Switch(Config-if-Vlan1)# ip rip receive version 1 2 Related Command:
31-132 Command Mode: Interface Configuration Mode. Example: Switch# config terminal Switch(config)# interface vlan 1 Switch(Config-if-Vlan1)#
XGS3 Command Guide 1-42 Chapter 1 Commands for Basic Switch Configuration 1.1 Commands for Basic Configuration 1.1.1 Authentication line Command: au
31-133 Parameter: <keyid> is key ID, ranging between 0-2147483647. Command Mode: Keychain mode and keychain-key mode Usage Guide: The co
31-134 31.24 key-string Command: key-string <text> no key-string <text> Function: Configure a password corresponding to a key. The
31-135 is performed is the number of route marked R in the show ip route database, and also the number of RIP routes displayed in the show ip route
31-136 Parameter: <A.B.C.C/M|> is the IP address prefix and its length in the network. <ifname> is the name of a interface. Default:
31-137 Switch(config-router)# offset-list 1 in 5 vlan 1 Related Command: access-list 31.29 passive-interface Command: passive-interface <if
31-138 Example: Switch# config terminal Switch(config)# router rip Switch(config-router)# recv-buffer-size 23456789 31.31 redistribute Command
31-139 31.32 route Command: route <A.B.C.D/M> no route <A.B.C.D/M> Function: This command configures a static RIP route. The “no ro
31-140 31.34 send-lifetime Command: send-lifetime <start-time> {<end-time>| duration<seconds>| infinite} no send-lifetime Funct
31-141 31.35 show debugging rip Command: show debugging rip Function: Show RIP event debugging, RIP packet debugging and RIP nsm debugging statu
31-142 Distance: (default is 120) Displayed information Explanation Sending updates every 30 seconds with +/-50%, next due in 8 seconds Sending upd
XGS3 Command Guide 1-43 Function: Configure the first and second img files used in the next boot of the main control boardcard. Parameters: . primar
31-143 31.37 show ip rip Command: show ip rip Function: Show the routes in the RIP route data base. Command Mode: Admin mode Example: show i
31-144 Parameter: <ifname> is the name of the interface to show the messages. Command Mode: Admin mode Example: Switch# show ip rip inte
31-145 Displayed information Explaination Network Route prefix and prefix length. Aggregated Ifname To configure the interface name of the aggrega
31-146 Usage Guide: The system is defaulted broadcasting RIPng update packets every 30 seconds; and the route is considered invalid after 180 seco
32-147 Chapter 32 Commands for RIPng 32.1 clear ipv6 route Command: clear ipv6 rip route {<ipv6-address >| kernel |static | connected |rip |
32-148 Example: Switch#config terminal Switch(config)#router ipv6 rip Switch(config-router)#default-information originate 32.3 default-metric
32-149 <ipv6-address> is the local link address or its prefix. <access-list-name|access-list-number> specifies the access-list number
32-150 Switch(config-router)#distribute-list prefix myfilter in Vlan1 32.6 debug ipv6 rip Command: debug ipv6 rip [events| nsm| packet [recv|sen
32-151 Default: Close the debug by default. Command Mode: Admin Mode. Usage Guide: None. Example: Switch# debug ipv6 rip redistribute message
32-152 Command Mode: Router Mode or Interface Configuration Mode. Default: No aggregation route configured. Usage Guide: If to configure aggre
XGS3 Command Guide 1-44 Function: Configure the CGF file used in the next booting of the main control boardcard. Parameters: The NULL keyword means
32-153 32.11 ipv6 router rip Command: ipv6 router rip no ipv6 router rip Function: Enable RIPng on the interface. The “no ipv6 router rip”
32-154 Switch(config)#router ipv6 rip Switch(config-router)#neighbor FE80:506::2 Vlan1 Related Command: passive-interface 32.13 offset-list Com
32-155 Parameter: <ifname> is the specific interface name. Default: Not configured Command Mode: Router mode Example: Switch#config te
32-156 32.16 redistribute ospf Command: redistribute ospf [<process-tag>] [metric<value>] [route-map<word>] no redistribute osp
32-157 Switch(config)#router ipv6 rip Switch(config-router)#route 3ffe:1234:5678::1/64 32.18 router ipv6 rip Command: router ipv6 rip no route
32-158 32.20 show ipv6 rip interface Command: show ipv6 rip interface Function: Make sure the interface and line protocols is up. Command Mode:
32-159 32.21 show ipv6 rip redistribute Command: show ipv6 rip redistribute Function: Show the configuration information of redistributed other
32-160 Sending updates every 30 seconds with +/-50%, next due in 1 seconds Sending updates every 30 seconds Timeout after 180 seconds, garbage coll
32-161 Amongst R stands for RIP route, namely a RIP route with the destination network address 2001:1:1::/64, next-hop address at fe80::203:fff:fe0
32-162 Displayed information Explaination Network Route prefix and prefix length. Aggregated Ifname To configure the interface name of the aggreg
XGS3 Command Guide 1-45 1.1.5 config Command: config [terminal] Function: Enter Global Mode from Admin Mode. Parameter: [terminal] indicates termi
32-163 32.27 timers basic Command: timers basic <update> <invalid> <garbage> no timers basic Function: Adjust the RIP timer up
33-164 Chapter 33 Commands for OSPF 33.1 area authentication Command: area <id> authentication [message-digest] no area <id> authentic
33-165 Usage Guide: The command is only adaptive to the ABR router connected to the stub area or NSSA area. Example: Set the default-cost of are
33-166 Parameter: <id> is the area number which could be digits ranging between 0~4294967295, and also as an IP address. TRANLATOR = transla
33-167 advertise: Advertise this area, which is the default. not-advertise : Not advertise this area. substitute= substitute <A.B.C.D/M>: adve
33-168 Switch (config)# router ospf 100 Switch (config-router)# area 1 stub Related Command: area default-cost 33.7 area virtual-link Command:
33-169 Example: Switch#config terminal Switch(config) #router ospf 100 Switch(config-router) #area 1 virtual-link 10.10.11.50 hello 5 dead 20
33-170 Default: Rfc 2328 compatible by default. Command Mode: OSPF protocol mode Example: Switch#config terminal Switch(config)#router ospf 1
33-171 33.12 debug ospf ifsm Command: debug ospf ifsm [status|events|timers] no debug ospf ifsm [status|events|timers] Function: Open debugging
33-172 Switch#debug ospf nfsm events 33.15 debug ospf nsm Command: debug ospf nsm [interface|redistribute] no debug ospf nsm [interface|redistri
XGS3 Command Guide 1-46 Switch# 1.1.8 enable password Command: enable password [8] <password> no enable password Function: Configure the pas
33-173 Command Mode: Admin mode and global mode Example: Switch#debug ospf route spf 33.18 debug ospf redistribute message send Command: deb
33-174 Switch# debug ospf redistribute route receive 33.20 default-information originate Command: default-information originate [always | METRIC
33-175 Function: The command set the default metric value of OSPF routing protocol; the “no default-metric” returns to the default state. Parame
33-176 Usage Guide: Manage distance shows the reliability of the routing message source. The distance value may range between 1~255. The larger th
33-177 Switch(config-router)#redistribute bgp 33.24 host area Command: host <host-address> area <area-id> [cost <cost>] no ho
33-178 Default: Authentication not required in receiving OSPF packets on the interface. Command Mode: Interface Configuration Mode. Example: S
33-179 Default: Default OSPF cost on the interface is auto-figure out based bandwidth. Command Mode: Interface Configuration Mode. Example: Sw
33-180 Parameter: <ip-address> is the interface IP address shown in dotted decimal notation; <time > is the dead interval length of th
33-181 no ip ospf [<ip-address>] hello-interval Function: Specify the hello-interval on the interface; the “no ip ospf [<ip-address>]
33-182 Usage Guide: MD5 key encrypted authentication is used for ensure the safety between the OSPF routers on the network. Same key id and key sh
XGS3 Command Guide 1-47 Configure the timeout of exiting admin mode. The “no exec-timeout” command restores the default value. Parameters: <minut
33-183 <ip-address> mtu-ignore” will ensure the mtu size check when performing DD switch. Parameter: <ip-address> is the interface IP
33-184 Function: Configure the priority when electing “Defined layer 3 switch” at the interface. The “no ip ospf [<ip-address>] priority” co
33-185 When a layer 3 switch transmits LSA to its neighbor, it will maintain the link state announcements till confirm from the object side is recei
33-186 no key <keyid> Function: This command is for managing and adding keys in the key chain. The “no key <keyid>” command deletes on
33-187 log-adjacency-changes detail no log-adjacency-changes detail Function: Configure to keep a log for OSPF adjacency changes or not. Par
33-188 Switch(config-router)#max-concurrent-dd 20 33.43 neighbor Command: neighbor A.B.C.D [<cost>| priority <value> | poll-interval
33-189 Parameter: NETWORKADDRESS = A.B.C.D/M | A.B.C.D X.Y.Z.W, Shown with the network address prefix or the mask. Wildcast mask if shown in mask;
33-190 Switch(config)#router ospf 100 Switch(config-router)#ospf abr-type standard 33.46 ospf router-id Command: ospf router-id <address>
33-191 Command Mode: OSPF Protocol Mode. Example: Switch#config terminal Switch(config)#router ospf Switch(config-router)#overflow databas
33-192 Default: Not configured. Command Mode: OSPF protocol mode Example: Switch#config terminal Switch(config)#router ospf Switch(config-ro
XGS3 Command Guide 1-48 including complete help and partial help. The user can type in ? any time to get online help. Example: switch(config)#help
33-193 Switch(config-router)#redistribute bgp metric 12 33.51 redistribute ospf Command: redistribute ospf [<process-id>] [metric<value
33-194 33.53 show ip ospf Command: show ip ospf [<process-id>] Function: Display OSPF main messages. Parameter: <process-id> is th
33-195 Number of opaque AS LSA 0. Checksum Sum 0x000000 Number of non-default external LSA 0 External LSA database is unlimited. Number of L
33-196 |opaque-link [{<linkstate_id>| self-originate |adv-router <advertiser_router>}] | router [{<linkstate_id>| self-originate |
33-197 Link ID ADV Router Age Seq# CkSum Route 2.2.2.0 192.168.1.1 1499 0x80000056 0x3a63 E2 2.2.2.0/24 [0x0] 2
33-198 Default: Not displayed Command Mode: Admin and configuration mode Usage Guide: OSPF neighbor state can be checked by viewing the outp
33-199 Default: None. Command Mode: Admin Mode and Configuration Mode. Usage Guide: None. Example: Switch#show ip ospf redistribute ospf proce
33-200 IA 11.1.1.2/32 [20] via 10.1.1.1, Vlan1, Area 0.0.0.0 IA 12.1.1.0/24 [20] via 10.1.1.2, Vlan1, Area 0.0.0.0 IA 12.1.1.2/32 [20] via 10.1.1.2,
33-201 Parameters: The parameter of database means displaying all the routers, no parameter means only displaying effective routers. Default: No
33-202 10.1.1.0/24 12.1.1.0/24 Routing Information Sources: Gateway Distance Last Update Distance: (default is 110)
XGS3 Command Guide 1-49 delete the mapping. Parameter: <hostname> is the host name, up to 15 characters are allowed; <ip_addr> is the
33-203 33.64 timers spf Command: timers spf <spf-delay> <spf-holdtime> no timers spf Function: Adjust the value of the route calcula
34-204 Chapter 34 Commands for OSPFv3 34.1 area default cost Command: area <id> default-cost <cost> no area <id> default-cos
34-205 Example: Switch # config terminal Switch (config)# router ipv6 ospf Switch (config-router)# area 1 range 2000::/3 34.3 area stub Comman
34-206 Function: Configure a logical link between two backbone areas physically divided by non-backbone area. The “no area <id> virtual-lin
34-207 standard, realize with standard(RFC2328)ABR. Default: Cisco configured by default Command Mode: OSPFv3 protocol mode Usage Guide: For S
34-208 34.7 debug ipv6 ospf events Command: [no] debug ipv6 ospf events [abr|asbr|os|router|vlink] Function: Open debugging switches showing OS
34-209 34.10 debug ipv6 ospf nfsm Command: [no] debug ipv6 ospf nfsm [status|events|timers] Function: Open debugging switches showing showing OS
34-210 Default: Disabled. Command Mode: Admin Mode. Usage Guide: None. Example: Switch#debug ipv6 ospf redistribute message send 34.14 debug ipv
34-211 Example: Switch # config terminal Switch (config)# router ipv6 ospf Switch(Config-if-Vlan1)#ipv6 ospf cost 3 34.17 ipv6 ospf dead-inter
34-212 Example: Switch # config terminal Switch(config)#ipv6 ospf display route single-line 34.19 ipv6 ospf hello-interval Command: ipv6 ospf
XGS3 Command Guide 1-5 3.6 CLUSTER KEEPALIVE LOSS-COUNT ...
XGS3 Command Guide 1-50 Usage guide: Web configuation is for supplying a interface configured with HTTP for the user, which is straight and visual,
34-213 layer 3 switch”, the priority will decide which one should be chosen. Normally the one with higher priority will be elected, or the one with
34-214 Parameter: <id> is the instance ID ranging between 0~255 and defaulted at 0 <time> is the delay time of sending LSA on the interf
34-215 34.24 max-concurrent-dd Command: max-concurrent-dd <value> no max-concurrent-dd Function: Configure with this command the current dd ma
34-216 metric <value> is the introduced metric value, ranging between 0-16777214 metric-type {1|2} is the metric value type of the introduced
34-217 34.28 router-id Command: router-id <router-id> no router-id Function: Configure router ID for ospfv3 process. The “no route
34-218 Example: Routing Process "OSPFv3 (*null*)" with ID 192.168.2.2 SPF schedule delay 5 secs, Hold time between SPFs 10 secs Mini
34-219 Link-LSA (Interface Vlan2) Link State ID ADV Router Age Seq# CkSum Prefix 0.0.7.211 192.168.2.1 1450
34-220 Default: Not displayed Command Mode: All modes Example: Loopback is up, line protocol is up OSPFv3 not enabled on this interface Vlan1 is
34-221 Let the interface up both logically and physically IPv6 Prefixes fe80::203:fff:fe01:257c/64 (Link-Local Address) 2001:1:1::1/64 IP
34-222 34.33 show ipv6 ospf neighbor Command: show ipv6 ospf [<tag>] neighbor [<neighbor_id> | <ifname> detail | detail ] Function
XGS3 Command Guide 1-51 no password Function: Configure the password used for enter normal user mode on the console. The “no password” command del
34-223 Default: Not displayed Command Mode: All modes Example: Switch#show ipv6 ospf route Codes: C - connected, D - Discard, O - OSPF, IA - OSPF
34-224 Switch#show ipv6 ospf abc redistribute ospf process abc redistribute information: ospf process def bgp 34.36 show ipv6 ospf topology Comman
34-225 34.38 show ipv6 route process-detail Command: show ipv6 route [database] process-detail Function: Display the IP routing table with specific
35-226 Chapter 35 Commands for BGP and MBGP4+ 35.1 address-family Command: address-family <AFI> <SAFI> Function: Enter address-family mo
35-227 Switch(config-router)#address-family ipv4 vrf DC1 Switch(config-router-af)# 35.3 address-family vpnv4 Command: address-family vpnv4 Funct
35-228 Switch(config-router)#aggregate-address 100.3.0.0/16 as-set Related Command: bgp aggregate-nexthop-check, no bgp aggregate-nexthop-check
35-229 35.7 bgp bestpath as-path ignore Command: bgp bestpath as-path ignore no bgp bestpath as-path ignore Function: Set to ignore the AS-PAT
35-230 35.9 bgp bestpath compare-routerid Command: bgp bestpath compare-routerid no bgp bestpath compare-routerid Function: Compare rout
35-231 35.11 bgp client-to-client reflection Command: bgp client-to-client reflection no bgp client-to-client reflection Function: Configures wheth
35-232 35.13 bgp confederation identifier Command: bgp confederation identifier <as-id> no bgp confederation identifier [<as-id>] Functi
XGS3 Command Guide 1-52 1.1.22 service terminal-length Command: service terminal-length <0-512> no service terminal-length Function: Configu
35-233 <1-20000>: Respectively the penalty reuse border and restrain border. <1-255>: Maximum restrain route time, in
35-234 Parameter: None. Default: Not configured. Command Mode: BGP route mode Usage Guide: Normally if same prefix routes from several paths, each p
35-235 35.20 bgp inbound-route-filter Command: bgp inbound-route-filter no bgp inbound-route-filter Function: The bgp do not install the RD routi
35-236 35.22 bgp log-neighbor-changes Command: bgp log-neighbor-changes no bgp log-neighbor-changes Function: Output log message when BGP neighbor
35-237 Example: Switch(config)# bgp rfc1771-path-select Switch(config)# no bgp rfc1771-path-select 35.25 bgp rfc1771-strict Command: bgp rfc17
35-238 35.27 bgp scan-time Command: bgp scan-time <0-60> no bgp scan-time [<0-60>] Function: Set the time interval of the periodical nex
35-239 35.29 clear ip bgp dampening Command: clear ip bgp [<address-family>] dampening [<ip-address>|<ip-address/M>] Function: Use
35-240 Default: None Command Mode: Admin mode and global mode Usage Guide: For monitoring BGP events and the encountered errors, warning messages. E
35-241 Switch#no debug bgp redistribute route receive 35.34 debug ipv6 bgp redistribute message send Command: debug ipv6 bgp redistribute message
35-242 <ip-address/M>: Routing prefix. <WORD>: Access-list name. Default: Not set. Command Mode: BGP route mode Usage Guide: Set the man
XGS3 Command Guide 1-53 Set the factory address, the “no sysLocation” command reset the switch to factory settings. Parameter: <LINE> is the p
35-243 Switch(config-router-af)# exit-address-family Switch(config-router)# Related Command: address-family 35.39 import map Command: import map
35-244 *>i15.1.1.0/24 10.1.1.68 0 100 0 300 ? *>i100.1.1.0/24 10.1.1.68 0 100 0 300 ?
35-245 Example: Switch(config)# ip community-list LN permit 100:10 35.42 ip extcommunity-list Command: ip extcommunity-list {<LISTNAME>|
35-246 address-family is switched under address-family mode. If this option on any side between local side and partner is not enabled, the address-f
35-247 count it is defaulted at 3 when <1-10> parameters not set. Command Mode: BGP route mode and address family mode Usage Guide: Normally B
35-248 Usage Guide: This is an extended BGP capability. With this configuration supported capabilities by both side will be negotiated in the OPEN m
35-249 35.49 neighbor collide-established Command: neighbor {<ip-address>|<TAG>} collide-established no neighbor {<ip-address>|<
35-250 35.51 neighbor description Command: neighbor {<ip-address>|<TAG>} description <.LINE> no neighbor {<ip-address>|<T
35-251 Switch(config-router)# neighbor 10.1.1.66 distribute-list 101 out Related Command: ip access-list 35.53 neighbor dont-capability-negotiate
35-252 on 10.1.1.64 Switch(config-router)#neighbor 11.1.1.120 ebgp-multihop on 11.1.1.120 Switch(config-router)#neighbor 10.1.1.64 ebgp-multihop
XGS3 Command Guide 1-54 1.1.27 show clock Command: show clock Function: Display the current system clock. Command mode: Admin and Configuration M
35-253 Usage Guide: After first configured the IP AS-PATH access-list, apply this option to specified neighbor will be able to send/receive routes w
35-254 Parameter: <ip-address>: Neighbor IP address. <TAG>: Name of the peer. <1-4294967295>: Max prefix value allowed.
35-255 35.60 neighbor override-capability Command: neighbor {<ip-address>|<TAG>} override-capability no neighbor {<ip-address>|&l
35-256 35.62 neighbor peer-group (Creating) Command: neighbor < TAG> peer-group no neighbor < TAG> peer-group Function: Create/delete a
35-257 Parameter: <ip-address>: Neighbor IP address. <TAG>: Name of the peer group. <0-65535>: TCP port number. Default: Default p
35-258 <TAG>: Name of peer group <as-id>: Neighbor AS number ranging between 1-65535 Default: No neighbors Command Mode: BGP r
35-259 <TAG>: Name of peer group <NAME>: Name of route mapping <in|out>: Direction of route mapping Default: Not set Com
35-260 Switch(config-router)#neighbor 10.1.1.68 remote 100 Switch(config-router)#neighbor 10.1.1.68 route-reflector-client Switch(config-router)#
35-261 [both|extended|standard]: Standard community only, extended community or both. Default: Sending the community attributes. Command Mode: BGP r
35-262 set, will applies as soon as it restarts so to reduce consumptions of switching with other routers. The command is only available when the ro
XGS3 Command Guide 1-55 Switch#show tech-support 1.1.30 show version Command: show version Function: Display the version information of the switch
35-263 Default: No strict capability match configured. Command Mode: BGP route mode and address-family mode Usage Guide: With this command, the conn
35-264 Usage Guide: Configure the connecting time interval when connecting a peer. The NO form restores the default value. Example: Switch(config-
35-265 Default: Not configured, namely use nearest interface. Command Mode: BGP route mode Usage Guide: Specified update source is allowed to connec
35-266 Default: The default weight acquired from other routers is 0. The default weight on the local static configuration is 32768. Usage Guide: Th
35-267 Usage Guide: Route from other ways will be distributed into the BGP route table with this command and transmitted to the neighbors. Example:
35-268 Switch (config-router)#address-family ipv6 unicast Switch (config-router-af)#redistribute ospf abc 35.86 rd Command: rd <rd-val> Fun
35-269 35.88 route-target Command: route-target {import|export|both} <rt-val> no route-target {import|export|both} <rt-val> Function:
35-270 Switch(config-map)#set weight 655 Switch(config-map)#set vpnv4 next-hop 10.1.1.250 Switch(config-map)#exit Switch(config)#router bgp 100
35-271 Default: None. Command Mode: Admin and configuration mode Usage Guide: We can display BGP routing messages by different parameters (such as a
35-272 Command Mode: Admin and configuration mode Usage Guide: We can choose several communities at a time, exact-match shows only the perfect match
XGS3 Command Guide 1-56 Console login method, user1 and user2 can only login the switch in normal user mode through the telnet and console login metho
35-273 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, S Stale Origin codes: i - IGP, e - EGP, ? -
35-274 dampening 15 750 2000 60 15 (route-map rmp) Reach ability Half-Life time : 15 min Reuse penalty : 750 Suppre
35-275 Command Mode: Admin and configuration mode Usage Guide: If same prefix comes from different origin AS, the AS will be regarded as inconsisten
35-276 For address family: IPv4 Unicast BGP table version 2, neighbor version 2 Index 1, Offset 0, Mask 0x2 Community attribute sent to thi
35-277 Network Next Hop Metric LocPrf Weight Path * 100.1.1.0/24 10.1.1.66 0 200 300 ? *&g
35-278 Command Mode: Admin and configuration mode Usage Guide: We can select BGP route of the required AS with normal expression. Example: Switc
35-279 Example: Switch#show ip bgp scan BGP Instance: (Default) AS 200, router-id 11.1.1.100 BGP scan interval is 60 Current BGP nexthop cache:
35-280 community entries The property of the community entries Neighbor Neighbor address V The BGP version of neighbor running AS The AS number o
35-281 Default: None Command Mode: Admin and configuration mode Usage Guide: Display messages of specified BGP instance. Example: Switch#show ip b
35-282 Example: Switch#show ipv6 bgp redistribute 35.110 timers bgp Command: timers bgp <0-65535> <0-65535> no timers bgp [<0-65535
XGS3 Command Guide 1-57 Binding standard IP ACL protocol to login with Telnet/SSH/Web; the no form command will cancel the binding ACL. Parameters:
Commands for Routing Protocol Chapter 8 Commands for Black Hole Routing 36-1 Chapter 36 Commands for Black Hole Routing 36.1 ip route null0 Comman
Commands for Multicast Protocol Content 37-1 Chapter 37 Commands for ECMP 37.1 maximum-paths Command: maximum-path
XGS3 Command Guide 38-1 Chapter 38 IPv4 Multicast Protocol 38.1 Public Commands for Multicast 38.1.1 show ip mroute Command: show ip mroute [<Group
XGS3 Command Guide 38-2 Group the destination address of the entries Origin the source address of the entries Iif ingress interface of the entries
XGS3 Command Guide 38-3 Default: Disabled. Command Mode: Admin Mode. Usage Guide: Enable the switch, and display PIM-DM state-refresh timer informatio
XGS3 Command Guide 38-4 38.2.5 ip pim dense-mode Command: ip pim dense-mode no ip pim dense-mode Function: Enable PIM-DM protocol on inter
XGS3 Command Guide 38-5 Function: This command makes the Hello packets sent by PIM SM do not include GenId option. The “no ipv6 pim exclude-genid” com
XGS3 Command Guide 38-6 Command Mode: Interface Configuration Mode. Usage Guide: Hello message makes PIM-DM switch mutual location, and ensures neighb
XGS3 Command Guide 38-7 Switch (Config-if-Vlan1)#ip pim neighbor-filter 2 Switch (config)#access-list 2 deny 10.1.4.
XGS3 Command Guide 38-8 Function: Display PIM interface information Parameter: None Default: None Command Mode: Admin Mode and Global Mode Usage Guide
XGS3 Command Guide 1-58 Usage Guide: The authentication method for Console, VTY and Web login can be configured respectively. And authentication met
XGS3 Command Guide 38-9 Default: Do not display (Off). Command Mode: Admin Mode Usage Guide: The command shows PIM-DM multicast forwarding items,
XGS3 Command Guide 38-10 Interface located in RPF neighbor Upstream State Upstream direction, including FORWARDING(forwarding upstream data), PRUNED(
XGS3 Command Guide 38-11 10.1.6.1 Vlan1 00:00:10/00:01:35 v2 1 / 10.1.6.2 Vlan1 00:00:1
XGS3 Command Guide 38-12 Displayed Information Explanations Destination Destination of next item Type N: created nexthop,RP direction and S directi
XGS3 Command Guide 38-13 38.3.2 debug pim event Command: debug pim event no debug pim event Function: Enable or Disable pim event debug swi
XGS3 Command Guide 38-14 38.3.5 debug pim nexthop Command: debug pim nexthop no debug pim nexthop Function: Enable or Disable pim nexthop d
XGS3 Command Guide 38-15 38.3.8 debug pim state Command: debug pim state no debug pim state Function: Enable or Disable pim debug switch P
XGS3 Command Guide 38-16 no debug pim timer joinprune et no debug pim timer joinprune jt no debug pim timer joinprune ka
XGS3 Command Guide 38-17 Default: Permit the multicast registers from any sources to any groups. Command Mode: Global Mode Usage Guide: This command i
XGS3 Command Guide 38-18 configure PIM-SM information about candidate BSR in order to compete the BSR router with other candidate BSRs. Only this comm
XGS3 Command Guide 1-59 1.2.5 authentication securityipv6 Command: authentication securityipv6 <ipv6-addr> no authentication securityip
XGS3 Command Guide 38-19 ipv6 pim exclude-genid” command restores the default value Parameter: None Default: The Hello packets include GenId option. C
XGS3 Command Guide 38-20 Default: The default periodically transmitted pim hello packets’ hello_interval is30s. Command Mode: Interface Configuration
XGS3 Command Guide 38-21 38.3.21 ip pim multicast-routing Command: ip pim multicast-routing no ip pim multicast-routing Function: Enable PI
XGS3 Command Guide 38-22 38.3.23 ip pim register-rate-limit Command: ip pim register-rate-limit <limit> no ip pim register-rate-li
XGS3 Command Guide 38-23 Example: Configure the source address sent by DR. Switch (config)#ip pim register-source 10.1.1.1 38.3.26 ip pim register-s
XGS3 Command Guide 38-24 Parameter: vlan-id isVlan ID; ifname is the name of the specified interface; A.B.C.D/M is the ip prefix
XGS3 Command Guide 38-25 Example: Switch(Config-if-Vlan2)#ip pim scope-border 3 38.3.31 ip pim sparse-mode Command: ip pim sparse-mode [passive]
XGS3 Command Guide 38-26 Displayed Information Explanations BSR address Bsr-router Address Priority Bsr-router Priority Hash mask length Bsr-router
XGS3 Command Guide 38-27 Ver/Mode Pim version and mode,usually v2,sparse mode displays S,dense mode displays D Nbr Count The interface’s neighbor co
XGS3 Command Guide 38-28 Displayed Information Explanations Entries The counts of each item RP Share tree’s RP address RPF nbr RP direction or upne
XGS3 Command Guide 1-6 6.2 LOOPBACK-DETECTION SPECIFIED-VLAN ...
XGS3 Command Guide 1-60 1.2.7 terminal monitor Command: terminal monitor terminal no monitor Function: Copy debugging messages to current display
XGS3 Command Guide 38-29 Parameter: None Default: None Command Mode: Admin Mode and Global Mode Usage Guide: Display multicast router neighbors mainta
XGS3 Command Guide 38-30 Example: Switch(config)#show ip pim nexthop Flags: N = New, R = RP, S = Source,
XGS3 Command Guide 38-31 38.3.37 show ip pim rp-hash Command: show ip pim rp-hash <A.B.C.D> Function: Display the RP address of A,B,C,D’s merge
XGS3 Command Guide 38-32 Group(s) Group address range of RP Info source Source of Bootstrap messages Priority Priority of Bootstrap messages 38.4
XGS3 Command Guide 38-33 Example: Switch(config)#router msdp Switch(router-msdp)#cache-sa-maximum50000 Switch(router-msdp)#peer 20.1.1.1 Switch(r
XGS3 Command Guide 38-34 38.4.5 clear msdp sa-cache Command: clear msdp sa-cache {group A.B.C.D|* } Function: To clear the Source Active informati
XGS3 Command Guide 38-35 Switch(router-msdp)#peer 20.1.1.1 Switch(router-msdp-peer)# connect-source interface loopback 10 38.4.8 debug msdp all Co
XGS3 Command Guide 38-36 Example: Switch#debug msdp filter 38.4.11 debug msdp fsm Command: debug msdp fsm no debug msdp fsm Function: Enable/disabl
XGS3 Command Guide 38-37 38.4.14 debug msdp packet Command: debug msdp packet {send | receive} no debug msdp packet {send | receive} Function: Enable
XGS3 Command Guide 38-38 Function: To configure static RPF peer. Parameter: <peer-address>: the IP address of the MSDP peer. <acl-list-number
XGS3 Command Guide 1-61 1.2.9 telnet server enable Command: telnet server enable no telnet server enable Function: Enable the Telnet
XGS3 Command Guide 38-39 Default: None. Usage Guide: MSDP configuration mode can be returned to with the exit-peer-mode command, when configuration to
XGS3 Command Guide 38-40 38.4.22 peer Command: peer <A.B.C.D> no peer <A.B.C.D> Function: To configure MSDP Peer, enter MSDP Peer mode; t
XGS3 Command Guide 38-41 Default: The AS number isn’t initialized to 0 by default. Usage Guide: This command set the AS number for specified Peer. The
XGS3 Command Guide 38-42 Switch(router-msdp)#sa-filter in Switch(router-msdp)#peer 20.1.1.1 Switch(router-msdp-peer)# sa-filter in list 120 38.4.2
XGS3 Command Guide 38-43 Example: Switch(config)#router msdp Switch(router-msdp)# sa-request-filter list 1 38.4.29 show msdp global Command: show m
XGS3 Command Guide 38-44 The max entries configured in MSDP configuration mode. MAX Peer External SA Entry The max entries of each Peer. TTL Thresho
XGS3 Command Guide 38-45 38.4.31 show msdp peer Command: show msdp peer {A.B.C.D} Function: Show the configuration information in MSDP Mode. Parameter
XGS3 Command Guide 38-46 The uptime or downtime of MSDP peer. Messages sent/received The statistics of messages sent and received from the Peer. SA
XGS3 Command Guide 38-47 Learn From Peer:20.1.1.1, RPF Peer: 10.1.1.10 SA Received: 10 Encapsulated data received: 0 grp flags: N
XGS3 Command Guide 38-48 Command Mode: Admin and Configuration Mode. Usage Guide: Show the summary of MSDP Cache. Example: Switch#show msdp sa-cache
XGS3 Command Guide 1-62 no ssh-server authentication-retries Function: Configure the number of times for retrying SSH authentication; the
XGS3 Command Guide 38-49 SA total Total number of received SA message from RP. RPF peer The RPF Peer address of corresponding RP. AS-num Autonomous
XGS3 Command Guide 38-50 TLV Rcvd The TLV type and statistics of Peer received. TLV Send The TLV type and statistics of Peer sent SA msgs The SA m
XGS3 Command Guide 38-51 Reset Count The reset count of MSDP Peer. Peer Name The description of MSDP Peer. Active SA The numbers of active SA. TLV
XGS3 Command Guide 38-52 Example: Switch(config)#router msdp Switch(router-msdp)#ttl-threshold 10 38.5 Commands for ANYCAST RP v4 38.5.1 debug pi
XGS3 Command Guide 38-53 Command Mode: Global Configuration Mode. Default: There is no configuration by default. Usage Guide: 1. The anycast-rp-addr
XGS3 Command Guide 38-54 38.5.5 ip pim rp-candidate Command: ip pim rp-candidate {vlan<vlan-id> |loopback<index> |<ifname>} [<A
XGS3 Command Guide 38-55 Switch(config)#show ip pim anycast-rp first-hop IP Multicast Routing Table (*,G) Entries: 0 (S,G) Entries: 1 (E,G) Entries:
XGS3 Command Guide 38-56 Display Explanation Entries The number of all kinds of entries. INCLUDE The mrt information created in the first hop RP.
XGS3 Command Guide 38-57 anycast-rp address: The configured anycast-rp-address. other rp unicast rp address: The configured other RP communication ad
XGS3 Command Guide 38-58 38.7 Commands for DVMRP 38.7.1 debug dvmrp Command: debug dvmrp [events[neighbor|packet|igmp|kernel|prune [detail] |route]|
XGS3 Command Guide 1-63 Usage Guide: This command is used to generate the new host key. When SSH client logs on the server, the new host key is used
XGS3 Command Guide 38-59 38.7.3 ip dvmrp metric Command: ip dvmrp metric <metric_val> no ip dvmrp metric Function: Configure int
XGS3 Command Guide 38-60 <burst_size> is a quantity of transmitted message every time, value range from 1 to 65535 Default: Default the delay o
XGS3 Command Guide 38-61 38.7.8 show ip dvmrp Command: show ip dvmrp Function: Display DVMRP protocol information. Parameter: None Default: Do not dis
XGS3 Command Guide 38-62 Address Address Interface Interface corresponding physical interface name Vif Index Virtual interface index Ver Interface
XGS3 Command Guide 38-63 Detect the neighbor’s interface Uptime/Expires The neighbor uptime/expire time Maj Ver Major version Min Ver Mini version
XGS3 Command Guide 38-64 Group address State Table item state FCR Exptime FCR expire time Prune/Graft ReXmit-Time Prune expire time/ Graft retransm
XGS3 Command Guide 38-65 Nexthop Neighbor Next hop neighbor Metric Routing metric value Uptime Routing uptime Exptime Routing expire time 38.8 Co
XGS3 Command Guide 38-66 Switch(config)#access-list 6000 permit ip 10.1.1.0 0.0.0.255 232.0.0.0 0.0.0.255 Switch(config)# 38.8.2 access-list (Multi
XGS3 Command Guide 38-67 Command Mode: Interface Configuration Mode Usage Guide: The command is only working under global multicast destination-contro
XGS3 Command Guide 38-68 <macaddr>: Transmitting source MAC address of IGMP-REPORT, the format is “xx-xx-xx-xx-xx-xx”; <6000-7999
XGS3 Command Guide 1-64 Switch(config)#ssh-server timeout 240 1.2.16 ssh-user Command: ssh-user <username> password {0 | 7} <password>
XGS3 Command Guide 38-69 Example: Switch(config)#ip multicast source-control 38.8.8 ip multicast source-control access-group Command: ip multicast
XGS3 Command Guide 38-70 38.8.10 show ip multicast destination-control Command: show ip multicast destination-control [detail] show ip mult
XGS3 Command Guide 38-71 38.8.12 show ip multicast policy Command: show ip multicast policy Function: Display multicast policy of configuration Pa
XGS3 Command Guide 38-72 38.9 Commands for IGMP 38.9.1 clear ip igmp group Command: clear ip igmp group [A.B.C.D | IFNAME] Function: Delete the group
XGS3 Command Guide 38-73 02:17:38:58: IGMP: Received membership query on dvmrp2 from 192.168.1.11 for 0.0 .0.0 02:17:39:26: IGMP: Send membership quer
XGS3 Command Guide 38-74 Switch (Config-if-Vlan1)# 38.9.6 ip igmp join-group Command: ip igmp join-group <A.B.C.D > no ip igmp join-group <
XGS3 Command Guide 38-75 Function: Configure limit IGMP state-count on interface; the “no ip igmp limit” command cancels the value of user manual conf
XGS3 Command Guide 38-76 every multicast group, the value of timer is selected random from 0 to maximum response time, the host will transmit member r
XGS3 Command Guide 38-77 38.9.13 ip igmp static-group Command: ip igmp static-group <A.B.C.D > [source <A.B.C.D >] no ip igmp static -gro
XGS3 Command Guide 38-78 Default: Do not display Command Mode: Admin Mode Example: Switch (config)#show ip igmp groups
XGS3 Command Guide 1-65 Function: Display the configured SSH usernames. Command Mode: Admin Mode. Example: Switch#show ssh-user test Relative C
XGS3 Command Guide 38-79 1.1.1.1 00:00:19 00:04:01 Yes 2.2.2.2 00:00:19 00:04:01 Yes
XGS3 Command Guide 38-80 38.9.16 show ip igmp interface Command: show ip igmp interface {vlan <vlan_id>|<ifname>} Function: Display relate
XGS3 Command Guide 38-81 Switch# clear ip igmp snooping vlan 1 mrouter-port Relative Command: show ip igmp snooping mrouter-port 38.10.3 debug igmp
XGS3 Command Guide 38-82 Switch(config)#ip igmp snooping vlan 100 38.10.6 ip igmp snooping vlan immediate-leave Command: ip igmp snooping vlan <v
XGS3 Command Guide 38-83 Usage Guide: It is not supported on Windows 2000/XP to query with the source address as 0.0.0.0. So the layer 2 query source
XGS3 Command Guide 38-84 38.10.11 ip igmp snooping vlan mrouter-port interface Command: ip igmp snooping vlan <vlan-id> mrouter-port interface [
XGS3 Command Guide 38-85 Usage Guide: It is recommended to use the default settings. Please keep this configure in accordance with IGMP configuration
XGS3 Command Guide 38-86 Command Mode: Global Mode. Default: Disabled. Usage Guide: Default configuration is recommended here. If IGMP snooping needs
XGS3 Command Guide 38-87 Example: Switch(config)#ip igmp snooping vlan 2 suppression-query-time 270 38.10.19 show ip igmp snooping Command: sh
XGS3 Command Guide 38-88 Igmp snooping L2 general querier
XGS3 Command Guide 1-66 Switch(config)#interface vlan 1 Switch(Config-if-Vlan1)# 1.3.2 interface ethernet 0 This command is not supported by the swi
XGS3 Command Guide 38-89 Group membership of this vlan, namely the correspondence between ports and (S,G) Igmp snooping vlan 1 mrouter port mrouter p
XGS3 Command Guide 38-90 Switch(config)#router bgp 1 38.11.4 debug igmp proxy mfc Command: debug igmp proxy mfc no debug igmp proxy mfc Function: En
XGS3 Command Guide 38-91 38.11.7 ip igmp proxy Command: ip igmp proxy no ip igmp proxy Function: Enable the IGMP Proxy function; the “no ip i
XGS3 Command Guide 38-92 38.11.10 ip igmp proxy limit Command: ip igmp proxy limit {group <g_limit> | source <s_limit>} no ip i
XGS3 Command Guide 38-93 Example: Switch(config)#ip igmp proxy unsolicited-report interval 3 38.11.13 ip igmp proxy unsolicited-report robustness Co
XGS3 Command Guide 38-94 Usage Guide: The command configures the address filter for multicast group membership request. The request for the specified
XGS3 Command Guide 38-95 38.11.18 show ip igmp proxy Command: show ip igmp Proxy Function: Display the IGMP Proxy configuration information. Command
XGS3 Command Guide 38-96 The vlan which the downstream port belongs to 38.11.19 show ip igmp proxy mroute Command: show ip igmp Proxy mroute Functio
XGS3 Command Guide 38-97 38.11.20 show ip igmp proxy upstream groups Command: show ip igmp proxy upstream groups {A.B.C.D} Command Mode: Admin Mode. U
XGS3 Command Guide 39-1 Chapter 39 IPv6 Multicast Protocol 39.1 Public Commands for Multicast 39.1.1 show ipv6 mroute Command: show ipv6 mroute [<G
XGS3 Command Guide 1-67 Command Mode: Interface Configuration Mode. Default None. Usage Guide: The prefix of an IPV6 address should not be a multica
XGS3 Command Guide 39-2 unresolved ipmr entries unresolved ip multicast route entries Group the destination address of the entries Origin the sour
XGS3 Command Guide 39-3 Parameter: None Default: Disabled Command Mode: Admin Mode Usage Guide: Enable the switch, and display PIM-DM state-refresh ti
XGS3 Command Guide 39-4 39.2.5 ipv6 pim dense-mode Command: ipv6 pim dense-mode no ipv6 pim dense-mode Function: Enable PIM-DM protocol on i
XGS3 Command Guide 39-5 Default: Hello message includes Genid option Command Mode: Interface Configuration Mode Usage Guide: The command is used to in
XGS3 Command Guide 39-6 interface, but it is successful configuration to only configure tunnel carefully. Example: Configure PIM-DM hello interval on
XGS3 Command Guide 39-7 Switch(config_IPv6_Std-Nacl-myfilter)#permit any 39.2.12 ipv6 pim scope-border Command: ipv6 pim scope-border [<5
XGS3 Command Guide 39-8 Example: Switch#show ipv6 pim interface Interface VIFindex Ver/ Nbr DR
XGS3 Command Guide 39-9 Default: Do not display Command Mode: Admin Mode Usage Guide: The command shows PIM-DM multicast forwarding items, namely forw
XGS3 Command Guide 39-10 Upstream State Upstream direction, including FORWARDING(forwarding upstream data), PRUNED(Upstream stops forwarding data), A
XGS3 Command Guide 39-11 fe80::20e:cff:fe01:facc Vlan1 00:00:13/00:01:32 v2 1 / Displayed Information Explanati
XGS3 Command Guide 1-68 no ip dhcp-client enable Function: Enables the switch to be a DHCP client and obtain IP address and gateway address through DH
XGS3 Command Guide 39-12 Displayed Information Explanations Destination Destination of next item Type N: created nexthop,RP direction and S directio
XGS3 Command Guide 39-13 39.3.2 debug ipv6 pim events Command: debug ipv6 pim events no debug ipv6 pim events Function: Enable or Disable p
XGS3 Command Guide 39-14 Default: Disabled Command Mode: Admin Mode. Usage Guide: Inspect PIM NEXTHOP changing information by the pim nexthop switch.
XGS3 Command Guide 39-15 Usage Guide: Inspect the changing information about PIM state by this switch. Example: Switch# debug ipv6 pim state 39.3.
XGS3 Command Guide 39-16 no debug ipv6 pim timer joinprune pt no debug ipv6 pim timer joinprune no debug ipv6 pim tim
XGS3 Command Guide 39-17 immediately and does not create group records when receiving REGISTER packets. Unlike other access-list, when the access-list
XGS3 Command Guide 39-18 configure PIM-SM information about candidate BSR in order to compete the BSR router with other candidate BSRs. Only this comm
XGS3 Command Guide 39-19 39.3.16 ipv6 pim exclude-genid Command: ipv6 pim exclude-genid no ipv6 pim exclude-genid Function: This command m
XGS3 Command Guide 39-20 Default: The default periodically transmitted pim hello packets’ hello_interval is30s. Command Mode: Interface Configuration
XGS3 Command Guide 39-21 39.3.21 Command: ipv6 pim multicast-routing no ipv6 pim multicast-routing Function: Enable PIM-SM globally. The “
XGS3 Command Guide 1-69 Usage Guide: When user encounters problems in applying SNMP, the SNMP debugging is available to locate the problem causes. Exa
XGS3 Command Guide 39-22 Function: This command is used to configure the speedrate of DR sending register packets, the unit is packet/second. The “no
XGS3 Command Guide 39-23 39.3.26 ipv6 pim register-suppression Command: ipv6 pim register-suppression <value> no ipv6 pim register-s
XGS3 Command Guide 39-24 lower value has more priority Default: This switch is not a RP static router. Command Mode: Global Mode Usage Guide: This com
XGS3 Command Guide 39-25 Default: Disabled PIM-SM Command Mode: Interface Configuration Mode Usage Guide: Enable PIM-SM on the interface. The command
XGS3 Command Guide 39-26 39.3.33 show ipv6 pim interface Command: show ipv6 pim interface [detail] Function: Display PIM interface information. Parame
XGS3 Command Guide 39-27 39.3.34 show ipv6 pim mroute sparse-mode Command: show ipv6 pim mroute sparse-mode Function: Display the multicast route tabl
XGS3 Command Guide 39-28 Displayed Information Explanations Entries The counts of each item RP Share tree’s RP address RPF nbr RP direction or upn
XGS3 Command Guide 39-29 Command Mode: Any Mode Usage Guide: Display multicast router neighbors maintained by the PIM. Example: Switch(config)#
XGS3 Command Guide 39-30 Ifindex Name ___________________________________________________
XGS3 Command Guide 39-31 39.3.37 show ipv6 pim rp-hash Command: show ipv6 pim rp-hash X:X::X:X Function: Display the RP address of group X:X::X:X’s me
XGS3 Command Guide 1-7 8.19 CLEAR LLDP REMOTE-TABLE ...
XGS3 Command Guide 1-70 0 Too big errors (Max packet size 1500) 0 No such name errors 0 Bad values errors 0 General er
XGS3 Command Guide 39-32 Displayed Information Explanations Group(s) Group address range of RP Info source Source of Bootstrap messages Priority Pr
XGS3 Command Guide 39-33 39.4.3 ipv6 pim anycast-rp Command: ipv6 pim anycast-rp <anycast-rp-addr> <other-rp-addr> no ipv6 pim
XGS3 Command Guide 39-34 register-stop message, whose destination address is the source address of the register message. 3. self-rp-address has to be
XGS3 Command Guide 39-35 39.4.7 show ipv6 pim anycast-rp first-hop Command: show ipv6 pim anycast-rp first-hop Command Mode: Admin and Configuration
XGS3 Command Guide 39-36 INCLUDE (2002:1:111::2, ffle::2) Local .l... Display Explanation Entries The number of a
XGS3 Command Guide 39-37 self-rp-address: The configured self-rp-address. anycast-rp address: The configured anycast-rp-address. other rp unicast rp
XGS3 Command Guide 39-38 Switch(config)#ipv6 access-list standard myfilter Switch(config_IPv6_Std-Nacl-myfilter)#permit ff1e::/48 39.6 Commands for
XGS3 Command Guide 39-39 Function: Configure IPv6 destination control multicast access list, the no operation of this command is used to delete the ac
XGS3 Command Guide 39-40 39.6.4 ipv6 multicast destination-control access-group (sip) Command: ipv6 multicast destination-control <IPADDRESS/M>
XGS3 Command Guide 39-41 Example: switch(config)#ipv6 multicast destination-control 1 00-01-03-05-07-09 access-group 9000 39.6.6 ipv6 multicast poli
XGS3 Command Guide 1-71 too big errors Number of “Too_ big” error SNMP packets. maximum packet size Maximum length of SNMP packets. no such name
XGS3 Command Guide 39-42 Function: Configure the multicast source control access list used by the port, the no operation of this command is used to de
XGS3 Command Guide 39-43 <mac>: MAC address. Default: None. Command Mode: Admin Mode. Usage Guide: Use this command to display the configured mu
XGS3 Command Guide 39-44 ipv6 multicast-policy 2003::2/64 ff1e::3/64 cos 5 39.6.13 show ipv6 multicast source-control Command: show ipv6 multicast s
XGS3 Command Guide 39-45 Example: Delete all groups. Switch#clear ipv6 mld group Relative Command: show ipv6 mld group 39.7.2 debug ipv6 mld events
XGS3 Command Guide 39-46 1970/01/01 07:33:12 IMI: Reserved: 0 1970/01/01 07:33:12 IMI: Multicast Address: ff1e::1:3 1970/01/01 07:33:12 IMI: MLD
XGS3 Command Guide 39-47 39.7.6 ipv6 mld join-group Command: ipv6 mld join-group <address> no ipv6 mld join-group <address> Function: Con
XGS3 Command Guide 39-48 Function: Configure the interface’s sending interval of querying specific group. The “no ipv6 mld last-member-query-interva
XGS3 Command Guide 39-49 Example: Configure the interval of the periodically sent MLD host-query messages to 10s. Switch (config)#interface vlan 1 Sw
XGS3 Command Guide 39-50 39.7.13 ipv6 mld static-group Command: ipv6 mld static-group <group_address> [source <source_address>] no ipv6 ml
XGS3 Command Guide 39-51 39.7.15 show ipv6 mld groups Command: show ipv6 mld groups [{<ifname | group_addr>}] Function: Display the MLD group in
XGS3 Command Guide 1-72 1.4.6 show snmp group Command: show snmp group Function: Display the group information commands. Command Mode: Admin and
XGS3 Command Guide 39-52 MLD querier MLD query interval is 100 seconds MLD querier timeout is 205 seconds MLD max query response time is 10 se
XGS3 Command Guide 39-53 39.8.2 clear ipv6 mld snooping vlan <1-4094> mrouter-port Command: clear ipv6 mld snooping vlan <1-4094> mrouter-
XGS3 Command Guide 39-54 39.8.5 ipv6 mld snooping vlan Command: ipv6 mld snooping vlan <vlan-id> no ipv6 mld snooping vlan <vlan-id
XGS3 Command Guide 39-55 Comment: There are three ways to learn mrouter port in MLD Snooping: 1. The port which receives MLD query messages 2. The p
XGS3 Command Guide 39-56 Example: Switch(config)#ipv6 mld snooping vlan 2 mrouter-port interface ethernet1/13 39.8.10 ipv6 mld snooping vlan mrpt
XGS3 Command Guide 39-57 Example: Switch(config)#ipv6 mld snooping vlan 2 query-mrsp 18 39.8.13 ipv6 mld snooping vlan query
XGS3 Command Guide 39-58 Function: Configure the suppression query time; the “no” form of this command restores the default value. Parameter: vlan-id:
XGS3 Command Guide 39-59 Mld snooping is turned on for vlan 1(querier) On which VLAN of the switch is enabled MLD Snooping, if the VLAN are l2-general
XGS3 Command Guide 39-60 Robustness configured on the vlan Mld snooping mrouter port keep-alive time Keep-alive time of the dynamic mrouter on this v
Commands for Security Function Chapter 2 Commands for 802.1x 40-1 Chapter 40 Commands for Multicast VLAN 40.1 multicast-vlan Comma
XGS3 Command Guide 1-73 Display all MIB supported by the switch. Command Mode: Admin and Configuration Mode. 1.4.8 show snmp status Command: show s
Commands for Security Function Chapter 2 Commands for 802.1x 41-2 Chapter 41 Commands for ACL 41.1 absolute-periodic/periodic Comm
Commands for Security Function Chapter 2 Commands for 802.1x 41-3 41.2 absolute start Command: [no] absolute start <start_time&
Commands for Security Function Chapter 2 Commands for 802.1x 41-4 access-list of this coded numeric extended does not exist, thus
Commands for Security Function Chapter 2 Commands for 802.1x 41-5 notation. Command Mode: Global mode Default: No access-lists c
Commands for Security Function Chapter 2 Commands for 802.1x 41-6 Examples: Permit tagged-eth2 with any source MAC addresses and a
Commands for Security Function Chapter 2 Commands for 802.1x 41-7 matching, deny to access; permit if rules are matching, permit
Commands for Security Function Chapter 2 Commands for 802.1x 41-8 Functions: Define a standard numeric MAC ACL rule, ‘no access-l
Commands for Security Function Chapter 2 Commands for 802.1x 41-9 Command Mode: Global Mode. Default: Default action is permit. Us
Commands for Security Function Chapter 2 Commands for 802.1x 41-10 41.13 ipv6 access-list Command: ipv6 access-list <num-std&g
Commands for Security Function Chapter 2 Commands for 802.1x 41-11 2003:1:2::1/48 pass through. Switch (config)#ipv6 access-list
XGS3 Command Guide 1-74 1.4.9 show snmp user Command: show snmp user Function: Display the user information commands. Command Mode: Admin and Conf
Commands for Security Function Chapter 2 Commands for 802.1x 41-12 Default: The entry of port is not bound ACL. Usage Guide: One p
Commands for Security Function Chapter 2 Commands for 802.1x 41-13 Default: No named MAC-IP access-list. Usage Guide: After assig
Commands for Security Function Chapter 2 Commands for 802.1x 41-14 Switch(Config-IP-Ext-Nacl-udpFlow)#deny igmp any any-destinatio
Commands for Security Function Chapter 2 Commands for 802.1x 41-15 Function: Create an extended nomenclature IPv6 access control r
Commands for Security Function Chapter 2 Commands for 802.1x 41-16 <smac-mask> }} {any-destination-mac|{host-destination-ma
Commands for Security Function Chapter 2 Commands for 802.1x 41-17 Notice: mask bit is consecutive means the effective bit must be
Commands for Security Function Chapter 2 Commands for 802.1x 41-18 [no]{deny|permit}{any-source-mac|{host-source-mac <host_smac
Commands for Security Function Chapter 2 Commands for 802.1x 41-19 <time-range-name>, name of time range. Command Mode: Na
Commands for Security Function Chapter 2 Commands for 802.1x 41-20 Deny any IP packets to pass access-list 100(used 1 time(s)) Nn
Commands for Security Function Chapter 2 Commands for 802.1x 41-21 Tying situation on port Ethernet1/1 the ingress acl use in fi
XGS3 Command Guide 1-75 View Name:readview 1. -Included active 1.3. Excluded active Displayed Information Explanati
Commands for Security Function Chapter 2 Commands for 802.1x 41-22 Default: None. Command Mode: Admin and Configuration Mode. Usag
Commands for Security Function Chapter 2 Commands for 802.1x 42-23 Chapter 42 Commands for 802.1x 42.1 debug dot1x detail Command:
Commands for Security Function Chapter 2 Commands for 802.1x 42-24 Command Mode: Admin Mode. Parameters: all: Enable the debug inf
Commands for Security Function Chapter 2 Commands for 802.1x 42-25 authentication user by the MAC address. Only the authentication
Commands for Security Function Chapter 2 Commands for 802.1x 42-26 42.8 dot1x ipv6 passthrough Command: dot1x ipv6 passthrough
Commands for Security Function Chapter 2 Commands for 802.1x 42-27 Attention: There can be different Guest VLAN set on differ
Commands for Security Function Chapter 2 Commands for 802.1x 42-28 Command Mode: Global Mode. Default: There is no free resource b
Commands for Security Function Chapter 2 Commands for 802.1x 42-29 Switch(Config-If-Ethernet1/3)#dot1x max-user userbased 5 42.15
Commands for Security Function Chapter 2 Commands for 802.1x 42-30 access to the limited resources when the host is not authentica
Commands for Security Function Chapter 2 Commands for 802.1x 42-31 Function: Enables periodical supplicant authentication; the “n
XGS3 Command Guide 1-76 Global Mode Usage Guide: The switch supports up to 4 community strings. It can realize the access-control for specifically com
Commands for Security Function Chapter 2 Commands for 802.1x 42-32 Function: Sets the interval for the supplicant to re-transmit E
Commands for Security Function Chapter 2 Commands for 802.1x 42-33 Switch(config)#dot1x web authentication enable 42.25 dot1x we
Commands for Security Function Chapter 2 Commands for 802.1x 42-34 Example: 1. Display information about dot1x global parameter
Commands for Security Function Chapter 2 Commands for 802.1x 42-35 Global 802.1x parameter information reauth-enabled Whether re-
Commands for Security Function Chapter 2 Commands for 802.1x 42-36 Authenticator State Machine Authenticator state machine status
43-1 Chapter 43 Commands for the Number Limitation Function of Port, MAC in VLAN and IP 43.1 switchport mac-address dynamic maximum Command: switchpo
43-2 Usage Guide: When configuring the max number of dynamic MAC allowed in the VLAN, if the number of dynamically learnt MAC address in the VLAN is
43-3 enable the number limitation function of dynamic NEIGHBOR on the port; “no switchport nd dynamic maximum” command is used to disable the number
43-4 43.6 ipv6 nd dynamic maximum Command: ipv6 nd dynamic maximum <value> no ipv6 nd dynamic maximum Function: Set the max number of d
43-5 Command Mode: Admin and Configuration Mode. Usage Guide: Use this command to display the number of dynamic MAC of corresponding port and VLAN. E
XGS3 Command Guide 1-77 1.4.13 snmp-server enable traps Command: snmp-server enable traps no snmp-server enable traps Function: Enable the switch
43-6 Command Mode: Admin and Configuration Mode. Usage Guide: Use this command to display the number of dynamic ND of corresponding port and VLAN. Ex
43-7 Default Settings: None Usage Guide: Display the debug information of the number of dynamic ARP on the port. Examples: Switch#debug switchpor
43-8 43.15 debug ip arp count Command: debug ip arp count no debug ip arp count Function: When the number limitation function debug of ARP in the VLA
44-1 Chapter 44 Commands for AM Configuration 44.1 am enable Command: am enable no am enable Function: Globally enable/disable AM function. Parame
44-2 Default: IP address pool is empty. Command Mode: Port Mode. Usage Guide: None. Example: Configure that interface 1/3 of the switch will forwa
44-3 Switch#show am AM is enabled Interface Ethernet1/3 am interface am ip-pool 30.10.10.1 20 Interface Ethernet1/5 am inter
45-1 Chapter 45 Commands for Security Feature 45.1 dosattack-check srcip-equal-dstip enable Command: [no] dosattack-check srcip-equal-dstip enable
45-2 are all 0 while its serial No. =0;FIN=1,URG=1,PSH=1 and the TCP serial No.=0;SYN=1 and FIN=1. This function can be used associating the “dosatt
45-3 Default: The length is 20 by default which is the shortest TCP segment Command Mode: Global Mode Usage Guide: To use this function the “dosatta
45-4 Example: Set the max net length of the ICMPv6 data packet permitted by the switch to 100. Switch(config)# dosattack-check icmp-attacking enable
XGS3 Command Guide 1-78 1.4.15 snmp-server group Command: snmp-server group <group-string> {NoauthNopriv | AuthNopriv | AuthPriv} [[read
Commands for Security Function Chapter 6 Commands for TACACS+ 46-1 Chapter 46 Commands for TACACS+ 46.1 tacacs-server authentication host
Commands for Security Function Chapter 6 Commands for TACACS+ 46-2 Example: Configure test as the TACACS+ server authentication key. Switc
Commands for Security Function Chapter 6 Commands for TACACS+ 46-3 Function: Open the debug message of the TACACS+; the “no debug tacacs-s
47-1 Chapter 47 Commands for RADIUS 47.1 aaa enable Command: aaa enable no aaa enable Function: Enables the AAA authentication function in the switc
47-2 Switch(config) #aaa-accounting update disable 47.4 debug aaa packet Command: debug aaa packet {send|receive|all} interface{ethernet <inte
47-3 Parameters: None. Command Mode: Admin Mode. Usage Guide: By enabling the debug information of AAA about connection details, users can check co
47-4 Default: No specific source IP address for RADIUS packet is configured, the IP address of the interface from which the RADIUS packets are sent
47-5 <port-number> parameter is used to specify accounting port number, which must be the same as the specified accounting port in the RADIUS
47-6 Example: Setting the RADIUS authentication server address as 2004:1:2:3::2. Switch(config)#radius-server authentication host 2004:1:2:3::2 47
47-7 Usage Guide: This command specifies the retransmission time for a packet without a RADIUS server response after the switch sends the packet to
XGS3 Command Guide 1-79 receiving the network manage station IPv4 or IPv6 address and the Trap user name and safety level; the “no” form of this comma
47-8 The recommended ratio of the interval of sending fee-counting update messages to the maximum number of the users supported by NAS The maximum n
47-9 47.19 show aaa authenticating-user Command: show aaa authenticating-user Function: Display the authenticating users. Command mode: Admin and
47-10 IP and interface number of the accounting server .Is Primary = 1 :Is primary server
48-1 Chapter 48 Commands for SSL Configuration 48.1 ip http secure-server Command: ip http secure-server no ip http secure-server Functio
48-2 Default: Not configure. Usage Guide: If this command is used to configure the secure cipher suite, specified encryption method will be used. Th
49-1 Chapter 49 Commands for IPv6 Security RA 49.1 ipv6 security-ra enable Command: ipv6 security-ra enable no ipv6 security-ra enable Function: Glo
49-2 Ethernet1/1 IPv6 Security RA State: Yes Ethernet1/3 IPv6 Security RA State: Yes 49.4 debug ipv6 security-ra Command: debug ipv6 security-ra
50-1 Chapter 50 Commands for VLAN-ACL 50.1 clear vacl statistic vlan Command: clear vacl [in | out] statistic vlan [<1-4094>] Function: This co
50-2 At present, the regular expression used does not support the following syntaxes: \s match the blank character
50-3 in | out: Filter the ingress/egress traffic. traffic-statistic: Enable the statistic of matched packets number. vlan WORD: The VLAN will be boun
XGS3 Command Guide 1-8 11.1.24 vlan ...
XGS3 Command Guide 1-80 Configure security IP address of NMS administration station Switch(config)#snmp-server securityip 1.1.1.5 Delete security IPv
50-4 Switch(config)#vacl mac access-group 700 in traffic-statistic vlan 1-5 50.6 vacl mac-ip access-group Command: vacl mac-ip access-group {<3
51-1 Chapter 51 Commands for Mirroring Configuration 51.1 monitor session source interface Command: monitor session <session> source {interface
51-2 interfaces. For flow mirror, only datagram received can be mirrored. The parameters can be rx, tx, both. The related access list should be prepa
52-1 Chapter 52 Commands for RSPAN Configuration 52.1 remote-span Command: remote-span no remote-span Function: To configure VLAN to RSPAN
52-2 Default: Not configured. Usage Guide: This command configures the reflector port for the destination of mirror data grams, and disables the MAC
Commands for Reliability Content 53-1 Chapter 53 Commands for sFlow 53.1 sflow destination Command: sflow d
Commands for Reliability Content 53-2 Command Mode: Global Mode. Default: The default value is 0. Usage Gui
Commands for Reliability Content 53-3 Parameter:<interval-value> is the value of the interval with a
Commands for Reliability Content 53-4 Counter interval is 0
Commands for Reliability Content 53-5 The length of the sFlow group data sent by the e1/1 interface should
XGS3 Command Guide 1-81 Switch (config)#no snmp-server view readview 1.4.20 snmp-server user Command: snmp-server user <use-string> <grou
54-1 Chapter 54 Commands for VRRP 54.1 advertisement-interval Commands: advertisement-interval <adver_interval> no advertisement-interval Funct
54-2 debug vrrp” command disables the debug information. Default: Debugging information is disabled by default. Command mode: Admin Mode Example:
54-3 Switch(Config-Router)#enable 54.6 interface Commands: interface {IFNAME | Vlan <ID>} no interface Function: Configures the VRRP interfac
54-4 54.9 router vrrp Commands: router vrrp <vrid> no router vrrp <vrid> Function: Creates/Removes the Virtual Router. Parameters: <vr
54-5 Displayed information Explanation State Status Virtual IP Dummy IP address Interface Interface Name Priority Priority Advertisement interv
55-1 Chapter 55 Commands for IPv6 VRRPv3 Configuration 55.1 advertisement-interval Command: advertisement-interval <adver_interval> Function: C
55-2 55.3 debug ipv6 vrrp Command: debug ipv6 vrrp [all | events | packet [recv | send]] no debug ipv6 vrrp [all | events | packet [recv |
55-3 Example: Enable the VRRPv3 virtual router whose ID is 10. Switch(config)#router ipv6 vrrp 10 Switch(config-router)#enable 55.6 preempt-mode C
55-4 Usage Guide: This command is used to create or delete a VRRPv3 virtual router. The virtual router is uniquely specified by the virtual router ID
55-5 Interface name. Priority Priority. Advertisement interval The interval of VRRPv3 advertisement messages. Preempt Preempt mode. Circuit fai
XGS3 Command Guide 1-82 Download files to the FTP client. Parameter: <source-url> is the location of the source files or directories to be cop
56-1 Chapter 56 Commands for MRPP 56.1 control-vlan Command: control-vlan <vid> no control-vlan Function: Configure control VLAN ID of MR
56-2 Example: Enable debug information of MRPP protocol. Switch#debug mrpp 56.4 enable Command: enable no enable Function: Enable config
56-3 56.5 fail-timer Command: fail-timer <timer> no fail-timer Function: Configure if the primary node of MRPP ring receive Timer interva
56-4 Default: The system doesn’t enable MRPP protocol module. Usage Guide: If it needs to configure MRPP ring, it enables MRPP protocol. Executing “
56-5 The mrpp enable command must be enabled before the control-vlan command be used. If primary port, secondary port, node-mode and enable commands
56-6 56.13 show mrpp Command: show mrpp [ring-id>] Function: Display MRPP ring configuration. Parameter: <ring-id> is MRPP ring ID, the vali
Commands for Reliability Chapter 4 Commands for ULPP 57-1 Chapter 57 Commands for ULPP 57.1 clear ulpp flush counter interface
Commands for Reliability Chapter 4 Commands for ULPP 57-2 57.4 debug ulpp event Command: debug ulpp event no debug ulpp event F
Commands for Reliability Chapter 4 Commands for ULPP 57-3 Function: Show the information of the receiving/sending flush packet
Commands for Reliability Chapter 4 Commands for ULPP 57-4 57.9 flush disable mac Command: flush disable mac Function: Disable s
XGS3 Command Guide 1-83 (3) Save images in the FLASH to the FTP server of 2004:1:2:3::6 Switch#copy nos.img ftp://username:password@2004:1:2:3::6/ nos
Commands for Reliability Chapter 4 Commands for ULPP 57-5 57.12 preemption delay Command: preemption delay <integer> no p
Commands for Reliability Chapter 4 Commands for ULPP 57-6 Usage Guide: Quote the instances of MSTP to protect the VLANs. The V
Commands for Reliability Chapter 4 Commands for ULPP 57-7 Parameter: [group-id]: Show the information of the specific ULPP grou
Commands for Reliability Chapter 4 Commands for ULPP 57-8 Example: Disable receiving the flush packets of deleting ARP. Switch(
Commands for Reliability Chapter 4 Commands for ULPP 57-9 Switch(config)# interface ethernet 1/1 Switch(config-If-Ethernet1/1)
Commands for Reliability Chapter 4 Commands for ULPP 57-10 Command mode: Port mode. Usage Guide: There are no sequence requir
Commands for Network Time Management Content 58-1 Chapter 58 Commands for ULSM 58.1 debug ulsm event Command: debug ulsm eve
Commands for Network Time Management Content 58-2 Switch(config)# ulsm group 10 58.4 ulsm group {uplink | downlink} Comman
Commands for Network Time Management Chapter 1 Commands for SNTP 59-1 Chapter 59 Commands for SNTP 59.1 debug sntp Command: debug sntp {adjust
Commands for Network Time Management Chapter 1 Commands for SNTP 59-2 Switch#config Switch(config)#sntp polltime128 59.4 sntp timezone Comma
XGS3 Command Guide 1-84 Command Mode: Admin Mode. Usage Guide: This command supports command line hints, namely if the user can enter commands
60-1 Chapter 60 Commands for NTP 60.1 ntp enable Command: ntp enable ntp disable Function: To enable/disable NTP function globally. Parame
60-2 Switch(config)#ntp broadcast server count 70 60.4 ntp timezone Command: ntp timezone <name> [{add | subtract}] [<time_difference>]
60-3 Switch(config)#ntp authenticate 60.7 ntp authentication-key Command: ntp authentication-key <key-id> md5 <value> no ntp
60-4 60.10 ntp broadcast client Command: ntp broadcast client no ntp broadcast client Function: To configure/cancel the specified port to
60-5 60.13 debug ntp authentication Command: debug ntp authentication no debug ntp authentication Function: To display NTP authentication
60-6 60.16 debug ntp sync Command: debug ntp sync no debug ntp sync Function: To enable/disable debug switch of displaying local time sync
60-7 60.19 show ntp session Command: show ntp session [<ip-address> | <ipv6-address>] Function: To display the information of all NTP ses
61-1 Chapter 61 Commands for DNSv4/v6 61.1 clear dynamic-host Command: clear dynamic-host {<ip-address> | <ipv6-address> | all} Function
61-2 Parameter: <ip-address> is the IP address, in dotted decimal notation, <ipv6-address> is the IPv6 address, <value> is the
61-3 2001::1 20 61.6 show dns domain-list Command: show dns domain-list Function: To display the suffix informati
XGS3 Command Guide 1-85 1.5.4 ftp-server enable Command: ftp-server enable no ftp-server enable Function: Start FTP server, the “no ftp-server
61-4 61.9 show dns client Command: show dns client Function: Display the DNS Client information maintained by the switch. Parameter: None. Command M
61-5 Example: To configure domain name suffix of com. Switch(config)# ip domain-list com 61.12 ip dns server Command: ip dns server no
62-1 Chapter 62 Commands for Show 62.1 clear logging Command: clear logging {sdram | nvram} Function: This command is used to clear all the informa
62-2 Parameters: <source-address> is the source IP address where the ping command is issued, with IP address in dotted decimal format. <de
62-3 Use source address option[n]: y Source IP address: 10.1.128.161 Repeat count [5]:100 Datagram size in byte [56]:1000 Timeout in mill
62-4 62.4 ping6 Command: ping6 [<dst-ipv6-address> | host <hostname> | src <src-ipv6-address> {<dst-ipv6-address > | host
62-5 Extended commands [n]: Type ^c to abort. Sending 5 56-byte ICMP Echos to fe80::2d0:59ff:feb8:3b27, using src address fe80::203:fff:fe0b:16
62-6 Extended commands[n] Extended configuration. Disabled by default. ! The network is reachable. . The network is unreachable. Success r
62-7 62.6 show flash Command: show flash Function: Show the size of the files which are reserved in the system flash memory. Command Mode: Admin
62-8 Switch#show logging buffered level critical range 940 946 Example 2: Display all the information which level is warning in the log buffer zo
XGS3 Command Guide 1-86 ip ftp username <username> password [type {0 | 7}] <password> no ip ftp username <username> Function:
62-9 62.11 show startup-config Command: show startup-config Function: Display the switch parameter configurations written into the Flash memory at
62-10 Mode :Access Current interface VLAN mode. Port VID :1 Current VLAN number the interface belongs. Trunk allowed Vlan :ALL VLAN permitted by
62-11 62.14 show telnet login Command: show telnet login Function: List information of currently available telnet clients which are connected to
62-12 Example: Switch#show udp LocalAddress LocalPort ForeignAddress ForeignPort State 0.0.0.0 161 0.0.0.0 0
62-13 Parameter: <ipv4-addr> is the assigned source host IPv4 address in dot decimal format. <ip-addr> is the target host IP address in
63-1 Chapter 63 Commands for Reload Switch after Specified Time 63.1 reload after Command: reload after <HH:MM:SS> Function: Reload the swi
63-2 Example: View the configuration of command “reload after”. In the following case, the user set the switch to be rebooted in 10 hours and 1 sec
64-1 Chapter 64 Commands for Debugging and Diagnosis for Packets Received and Sent by CPU 64.1 cpu-rx-ratelimit total Command: cpu-rx-ratelimit total
64-2 Default: A different default rate is set for the different type of protocol. Usage Guide: The rate limit set by this command have an effect on
64-3 Function: Turn on the on-off of showing the information of the CPU receiving or sending packets, the “no debug driver {receive | send}” command
XGS3 Command Guide 1-87 Command: show tftp Function: Display the parameter settings for the TFTP server. Default: No display by default. Comma
XGS3 Command Guide 1-88 tftp-server timeout 1.5.10 tftp-server retransmission-number Command: tftp-server retransmission-number <number> Func
XGS3 Command Guide 2-89 Chapter 2 File System Commands 2.1 cd Command: cd <directory> Function: Change the working directory for the storage
XGS3 Command Guide 1-9 12.2.9 switchport port-security maximum ...
XGS3 Command Guide 2-90 Admin Mode. Default Settings: None. Usage Guide: 1. In this command, when the prefix of the source file URL is ftp:// or tft
XGS3 Command Guide 2-91 Display the information of the designated directory on the storage device. Parameters: <WORD> is the name of the shown
XGS3 Command Guide 2-92 Create a sub-directory in the designated directory on a certain storage device . Parameters: <directory> is the sub-di
XGS3 Command Guide 2-93 flash:/ Switch# 2.9 rename Command: ename <source-file-url> <new-filename > Function: Rename a designated f
XGS3 Command Guide 2-94 unmount <device> Function: Unmount the designated device from the file system. Parameters: <device> is the devic
XGS3 Command Guide 3-95 Chapter 3 Commands for Cluster 3.1 clear cluster nodes Command: clear cluster nodes [nodes-sn <candidate-sn-list> | mac-
XGS3 Command Guide 3-96 cluster commander [<cluster-name>] no cluster commander Function: Set the switch as a commander switch, and create a c
XGS3 Command Guide 3-97 Switch(config)#cluster ip-pool 10.254.254.10 3.5 cluster keepalive interval Command: cluster keepalive interval <second&g
XGS3 Command Guide 3-98 commander calculates the loss-count after sending each DP message by adding 1 to the loss-count of each switch and clearing th
XGS3 Command Guide 3-99 Switch(config)#cluster member mac-address 11-22-33-44-55-66 id 5 3.8 cluster member auto-to-user Command: cluster member a
Comments to this Manuals