Reference Manual

ManualsBrandsCANOGA PERKINS ManualsComputer Hardware9171 Command

CanogaOS Command Reference

Model 9170

Model 9171

Summary of content (782 pages)

PAGE 1
CanogaOS Command Reference Model 9170 Model 9171
PAGE 2
PAGE 3
NOTICE Canoga Perkins has prepared this manual for use by customers and Canoga Perkins personnel as a guide for the proper installation, operation and/or maintenance of Canoga Perkins equipment. The drawings, specifications and information contained in this document are the property of Canoga Perkins and any unauthorized use or disclosure of such drawings, specifications and information is prohibited.
PAGE 4
PAGE 5
CanogaOS Command Reference Table of Content TABLE OF CONTENT ...................................................................................................................................... 3 1 2 3 4 i PREFACE ............................................................................................................................................... 1-1 1.1 AUDIENCE .................................................................................................................................
PAGE 6
CanogaOS Command Reference 5 6 ii 4.12 INTERFACE ........................................................................................................................................ 4-8 4.13 JUMBOFRAME 4.14 MANAGEMENT IP ADDRESS .................................................................................................................. 4-9 4.15 SHUTDOWN .......................................................................................................................................
PAGE 7
CanogaOS Command Reference 7 5 6.8 SHOW INTERFACE SWITCHPORT .......................................................................................................... 6-5 6.9 VLAN CLASSIFIER ACTIVATE 6.10 VLAN CLASSIFIER GROUP .................................................................................................................... 6-6 6.11 VLAN CLASSIFIER RULE ....................................................................................................................... 6-7 6.
PAGE 8
CanogaOS Command Reference 8 9 6 7.31 REVISION ......................................................................................................................................... 7-20 7.32 CLEAR SPANNING-TREE DETECTED PROTOCOLS ................................................................................. 7-20 7.33 CLEAR SPANNING-TREE DISABLED-PORT ............................................................................................ 7-21 7.34 SHOW SPANNING-TREE ...................
PAGE 9
CanogaOS Command Reference 9.16 SHOW L2PROTOCOL-TUNNEL .............................................................................................................. 9-8 9.17 VLAN DOT1Q TAG NATIVE .................................................................................................................... 9-8 9.18 SHOW DOT1Q ETHERTYPE .................................................................................................................. 9-9 10 ETHERNET CFM COMMANDS ..................
PAGE 10
CanogaOS Command Reference 12 IP ADDRESSING COMMANDS ........................................................................................................... 12-1 12.1 IP ADDRESS ..................................................................................................................................... 12-1 12.2 IP ICMP ERROR-INTERVAL ................................................................................................................. 12-2 12.3 ROUTER-ID (GLOBAL)................
PAGE 11
CanogaOS Command Reference 15.7 AUTO-COST ..................................................................................................................................... 15-7 15.8 CLEAR IP OSPF ................................................................................................................................. 15-8 15.9 COMPATIBLE RFC1583 ..................................................................................................................... 15-9 15.
PAGE 12
CanogaOS Command Reference 16.10 BGP CONFEDERATION IDENTIFIER .................................................................................................. 16-7 16.11 BGP CONFEDERATION PEERS ........................................................................................................ 16-8 16.12 BGP DAMPENING 16.13 BGP DEFAULT IPV4-UNICAST 16.14 BGP DEFAULT LOCAL-PREFERENCE 16.15 BGP DETERMINISTIC MED .................................................................................
PAGE 13
CanogaOS Command Reference 16.56 NEIGHBOR NEXT-HOP-SELF ......................................................................................................... 16-37 16.57 NEIGHBOR OVERRIDE-CAPABILITY................................................................................................ 16-37 16.58 NEIGHBOR PASSIVE .................................................................................................................... 16-38 16.59 NEIGHBOR PEER-GROUP (ADDING A NEIGHBOR) 16.
PAGE 14
CanogaOS Command Reference 16.102 UNDEBUG BGP............................................................................................................................ 16-66 17 VRRP COMMANDS.............................................................................................................................. 17-1 17.1 ADVERTISEMENT-INTERVAL ............................................................................................................... 17-1 17.2 AUTHENTICATION MODE .............
PAGE 15
CanogaOS Command Reference 19.15 SET AS-PATH .............................................................................................................................. 19-15 19.16 SET ATOMIC-AGGREGATE ............................................................................................................ 19-16 19.17 SET COMM-LIST DELETE .............................................................................................................. 19-17 19.18 SET COMMUNITY .....................
PAGE 16
CanogaOS Command Reference 21.18 SHOW IP MROUTE-RPF ................................................................................................................ 21-12 21.19 SHOW IP MVIF ............................................................................................................................. 21-12 22 IGMP SNOOPING COMMANDS.......................................................................................................... 22-1 22.1 IP IGMP SNOOPING ........................
PAGE 17
CanogaOS Command Reference 24.16 IP PIM RP-CANDIDATE ................................................................................................................. 24-10 24.17 IP PIM RP-REGISTER-KAT............................................................................................................. 24-10 24.18 IP PIM SPT-SWITCH-THRESHOLD INFINITY ..................................................................................... 24-11 24.19 IP PIM CISCO-REGISTER-CHECKSUM 24.
PAGE 18
CanogaOS Command Reference 25.31 RELATED COMMANDSROUTER-ID ................................................................................................ 25-27 25.32 SHOW DEBUGGING LDP ............................................................................................................... 25-27 25.33 SHOW LDP 25.34 SHOW LDP ADJACENCY ............................................................................................................... 25-29 25.35 SHOW LDP ADVERTISE-LABELS ........
PAGE 19
CanogaOS Command Reference 27.1 ADDRESS-FAMILY IPV4 VRF ............................................................................................................... 27-1 27.2 ADDRESS-FAMILY VPNV4 .................................................................................................................. 27-1 27.3 DEBUG BGP MPLS ............................................................................................................................. 27-2 27.4 EXIT-ADDRESS-FAMILY 27.
PAGE 20
CanogaOS Command Reference 28.27 SET TAG..................................................................................................................................... 28-26 28.28 SET VPNV4 NEXT-HOP ................................................................................................................. 28-27 28.29 SET WEIGHT ............................................................................................................................... 28-28 28.30 SHOW ROUTE-MAP .......
PAGE 21
CanogaOS Command Reference 31.15 TRUST OUTER ............................................................................................................................ 31-11 31.16 TRUST PORT 31.17 TRUST COS ................................................................................................................................ 31-12 31.18 REPLACE COS ............................................................................................................................ 31-13 31.
PAGE 22
CanogaOS Command Reference 32.6 QUEUE <0-3> THRESHOLD ............................................................................................................... 32-4 32.7 QOS NET-EGRESS 32.8 DESCRIPTION ................................................................................................................................... 32-6 32.9 TOTAL-RATE ............................................................................................................................ 32-5 ...........
PAGE 23
CanogaOS Command Reference 33.29 IP ACCESS-GROUP ...................................................................................................................... 33-21 33.30 SHOW ACCESS-LIST IP ................................................................................................................ 33-22 33.31 TIME-RANGE............................................................................................................................... 33-22 33.32 ABSOLUTE 33.33 PERIODIC ....
PAGE 24
CanogaOS Command Reference 37.8 DOT1X TIMEOUT ............................................................................................................................... 37-5 37.9 RADIUS DEADTIME ............................................................................................................................ 37-6 37.10 RADIUS-SERVER HOST .................................................................................................................. 37-7 37.11 RADIUS RETRANSMIT ......
PAGE 25
CanogaOS Command Reference 40.2 IP SSH SERVER................................................................................................................................. 40-1 40.3 IP SSH SERVER AUTHENTICATION-RETRIES......................................................................................... 40-2 40.4 IP SSH SERVER AUTHENTICATION-TIMEOUT ........................................................................................ 40-3 40.5 IP SSH SERVER AUTHENTICATION-TYPE...............
PAGE 26
CanogaOS Command Reference 40.48 SHOW FILE SYSTEM .................................................................................................................... 40-36 40.49 DEBUG ARP ................................................................................................................................ 40-37 40.50 DEBUG DHCP RELAY ................................................................................................................... 40-38 40.51 DEBUG DHCP SNOOPING ..........
PAGE 27
CanogaOS Command Reference 41 MIRROR COMMANDS ......................................................................................................................... 41-1 41.1 MONITOR SESSION DESTINATION INTERFACE ...................................................................................... 41-1 41.2 MONITOR SESSION SOURCE INTERFACE ............................................................................................. 41-1 41.3 MONITOR SESSION SOURCE VLAN .............................
PAGE 28
CanogaOS Command Reference 44.17 SHOW SNMP-SERVER CONTEXT ................................................................................................... 44-12 44.18 SHOW SNMP-SERVER ENGINEID .................................................................................................. 44-13 44.19 SHOW SNMP-SERVER GROUP ...................................................................................................... 44-13 44.20 SHOW SNMP-SERVER NOTIFY ....................................
PAGE 29
CanogaOS Command Reference 1 Preface 1.1 Audience This guide is for the networking professional using the CanogaOS command-line interface (CLI) to manage the 9170/9171 Switch, hereafter referred to as the switch or the multilayer switch. Before using this guide, you should have experience working with the CanogaOS and the switch software features.
PAGE 30
CanogaOS Command Reference 噝 Nonprinting characters, such as passwords or tabs, are in angle brackets (< >). Notes, cautions, and warnings use these conventions and symbols: Note Means reader take note. Notes contain helpful suggestions or references to materials not contained in this manual. Caution Means reader be careful. In this situation, you might do something that could result in equipment damage or loss of data. Timesaver Means the following will help you solve a problem.
PAGE 31
CanogaOS Command Reference Definitions of Service Request Severity To ensure that all service requests are reported in a standard format, Cisco has established severity definitions. Severity 1 (S1)—Your network is “down,” or there is a critical impact to your business operations. You and Canoga Perkins will commit all necessary resources around the clock to resolve the situation.
PAGE 32
CanogaOS Command Reference 2 Using the Command-Line Interface The 9170/9171 Switches are supported by CanogaOS software. This chapter describes how to use the switch command-line interface (CLI) to configure software features. Type of Memory The switch flash memory stores the CanogaOS software image, the startup configuration file, and helper files. Platforms This CanogaOS release runs on a variety of switches and modules. For a complete list, see the release notes for this switch. 2.
PAGE 33
CanogaOS Command Reference This example shows you how to access global configuration mode: Switch# configure terminal Enter configuration commands, one per line. End with CNTL/Z. The supported commands can vary depending on the version of software in use. To view a comprehensive list of commands, enter a question mark (?) at the prompt: Switch(config)# ? To exit global configuration command mode and to return to privileged EXEC mode, enter the end or exit command, or press Ctrl-Z. 2.
PAGE 34
CanogaOS Command Reference Switch(config)# vlan database Switch(config-vlan)# The supported commands can vary depending on the version of software in use. To view a comprehensive list of commands, enter a question mark (?) at the prompt: Switch(config-vlan)# ? To return to privileged EXEC mode, enter the abort VLAN configuration command to abandon the proposed database. Otherwise, enter exit to implement the proposed new VLAN database and to return to privileged EXEC mode.
PAGE 35
CanogaOS Command Reference 3 General Commands 3.1 configure terminal To enter global configuration mode, use the configure terminal command in privileged EXEC mode. Command Syntax configure terminal Command Mode Privileged EXEC Usage Use this command to enter global configuration mode. Note that commands in this mode are written to the running configuration file as soon as you enter them (using the Enter key/Carriage Return).
PAGE 36
CanogaOS Command Reference Examples In the following example, the user enters privileged EXEC mode using the enable command, then exits back to user EXEC mode using the disable command. Note that the prompt for user EXEC mode is >, and the prompt for privileged EXEC mode is #. Switch> enable Password: Switch# disable Switch> Related Commands enable 3.3 enable To enter privileged EXEC mod, use the enable command in user EXEC or privileged EXEC mode.
PAGE 37
CanogaOS Command Reference 3.4 end To end the current configuration session and return to privileged EXEC mode, use the end command in global configuration mode. Command Syntax end Command Mode Global configuration Usage This command will bring you back to privileged EXEC mode regardless of what configuration mode or configuration submode you are in. Note This global configuration command can be used in any configuration mode.
PAGE 38
CanogaOS Command Reference command mode in the CLI mode hierarchy. For example, use the exit command in global configuration mode to return to privileged EXEC mode. Use the exit command in interface, line, or router configuration mode to return to global configuration mode. At the highest level, EXEC mode, the exit command will exit the EXEC mode and disconnect from the switch interface (see the description of the exit (EXEC) command for details).
PAGE 39
CanogaOS Command Reference 3.7 hostname To specify or modify the host name for the network server, use the hostname command in global configuration mode. To restore the configuration to the default, use no form of this command. Command Syntax hostname name no hostname name New host name for the network server. Default The default host name is Switch. Command Mode Global configuration Usage The host name is used in prompts and default configuration filenames.
PAGE 40
CanogaOS Command Reference Examples In the following example, the quit command is used to move from global configuration mode to privileged EXEC mode, the disable command is used to move from privileged EXEC mode to user EXEC mode, and the quit command is used to log off (exit the active session): Switch(config)# quit Switch# disable Switch> quit Related Commands exit 3.
PAGE 41
CanogaOS Command Reference 3.10 service terminal-length To set the number of lines on the current terminal screen for all sessions, use the service terminal-length command in global configuration mode. To restore the configuration to the default, use the no form of this command. Command Syntax service terminal-length screen-length no service terminal-length screen-length Number of lines on the screen. The value is a number from 0 to 512. A value of zero disables pausing between screens of output.
PAGE 42
CanogaOS Command Reference none The lowest strength, no detection of password strength is performed. Default The default password strength is none. Command Mode Global configuration Usage When the password strength is set to normal, or strong, the password which does not meet he requirement will be denied. Examples In the following example, the cipher detect command set the strength to strong.
PAGE 43
CanogaOS Command Reference You will not ordinarily enter an encryption type. Typically you enter an encryption type only if you copy and paste into this command a password that has already been encrypted by a switch.
PAGE 44
CanogaOS Command Reference Default No encryption Command Mode Global configuration Usage The actual encryption process occurs when the current configuration is written or when a password is configured. Password encryption is applied to all passwords, including username passwords, authentication key passwords, the privileged command password, console and virtual terminal line access passwords.
PAGE 45
CanogaOS Command Reference 4 Interface Commands 4.1 line console Use this command to enter line configuration mode and configure the console port. Command Syntax line console line-number Command Mode Global configuration Usage This command is used to enter line configuration mode and configure the console port.
PAGE 46
CanogaOS Command Reference Switch(config-line)# This example shows how to exit vty line configuration mode Switch(config-line)# exit Switch(config)# Related Commands exit 4.3 exec-timeout To set the interval that the EXEC command interpreter waits until user input is detected, use the exec-timeout command in line configuration mode. To remove the timeout definition, use the no form of this command.
PAGE 47
CanogaOS Command Reference Command Syntax exit Command Mode All configuration modes Usage The exit command is used to exit from the current command mode to the next highest command mode in the CLI mode hierarchy. For example, use the exit command in global configuration mode to return to privileged EXEC mode. Use the exit command in interface, line, or router configuration mode to return to global configuration mode.
PAGE 48
CanogaOS Command Reference The following example removes the password: Switch(config-line)# no line-password Related Commands service password-encryption 4.6 login Use this command to enable the password checking for login. To disable the password checking, use the no form of this command. Command Syntax (no) login [local | authentication {default | list-name}] local: using local user database to authenticate; authentication : Apply the authentication list to a line or set of lines.
PAGE 49
CanogaOS Command Reference Command Mode Line configuration Default 15 Usage None Examples The following example assigns default privilege level to 1. Switch(config-line)# privilege level 1 The following example returns the privilege level to default value. Switch(config-line)# no privilege level Related Commands None 4.8 bandwidth Use this command to set the bandwidth of the port. To return the bandwidth to default value, use the no form of this command.
PAGE 50
CanogaOS Command Reference 4.9 clear counters Use this command to clear the counters on the interface Command Syntax clear counters [interface] The clear counters command clears all current interface counters from the interface unless you specify optional arguments that clear only a specific interface type from a specific interface number. interface: the interface name Command Mode Privileged Exec mode Usage None Examples The following example clears the counters on all interfaces.
PAGE 51
CanogaOS Command Reference The following example sets the description on the interface. Switch(config-if)# description the type of interface is Ethernet The following example removes the description on the interface. Switch(config-if)# no description Related Commands None 4.11 duplex Use the duplex interface configuration command to specify the duplex mode of operation for a port. Use the no form of this command to return the port to its default value.
PAGE 52
CanogaOS Command Reference 4.12 interface Use this command to enter interface mode. Command Syntax interface interface interface: the name of port, i.e. eth-0-1, agg1, vlan1 Command Mode Global configuration Usage The interface name can be either a port name (i.e. eth-0-1) or link-agg name (i.e. agg1) or vlan name (i.e. vlan2). Examples The following example enters the interface mode for eth-0-1.
PAGE 53
CanogaOS Command Reference Jumboframe is disabled by default. The max frame which can be transmitted is 1534 bytes. When enable jumboframe, the max frame can be 9216 bytes. Examples The following example enables the jumboframe. Switch(config)# jumboframe enable The following example disables the jumboframe. Switch(config)# no jumboframe enable Related Commands None 4.14 management ip address Use this command to set the management ip address on the Switch.
PAGE 54
CanogaOS Command Reference Command Syntax shutdown no shutdown Command Mode Interface configuration Usage None Examples The following example shows how to disable a port. Switch(config-if)# shutdown The following example shows how to enable a port. Switch(config-if)# no shutdown Related Commands None 4.16 speed Use the speed interface configuration command to specify the speed of a 10/100 Mb/s or 10/100/1000 Mb/s port. Use the no or default form of this command to return the port to its default value.
PAGE 55
CanogaOS Command Reference This example shows how to set the speed on a port to 1000 Mb/s: Switch(config-if)# speed 1000 This example shows how to return the speed on a port to default value: Switch(config-if)# no speed Related Commands bandwidth duplex 4.17 switchport Use this command to configure a port to a bridge (layer 2) or routing (layer 3) mode. Use the no form of this command to reset the mode to the appropriate default for the device.
PAGE 56
CanogaOS Command Reference Command Mode EXEC Usage None Examples This example shows how to display the management ip address. Switch# show management ip address Management IP address is: 192.168.100.101/24 broadcast 192.168.100.255 Related Commands Management ip address 4.19 show transceiver Use this command to show the transceiver information.
PAGE 57
CanogaOS Command Reference The threshold values are calibrated. ------------------------------------------------------------------------------------------------------------High Alarm High Warn Low Warn Low Alarm Temperature Threshold Threshold Threshold Threshold Port (Celsius) (Celsius) (Celsius) (Celsius) (Celsius) --------------------------------------- -------------- -------------- --------------eth-0-21 36.25 85.00 80.00 -10.00 -15.
PAGE 58
CanogaOS Command Reference To remove the port from the static-channel-group, use the no form of this command. Command Syntax static-channel-group <1-255> no static-channel-group <1-255>: the number of the channel group Command Mode Interface configuration Usage The speed, duplex and bandwidth on the port should be the same with the static channel group that it will be aggregated with. The port should be neither mirror source port nor mirror destination port.
PAGE 59
CanogaOS Command Reference Interface current state: Administratively DOWN Hardware is Ethernet, address is bc3e.60b2.1601 (bia bc3e.60b2.
PAGE 60
CanogaOS Command Reference ----------------------------------------------------------------------------eth-0-1 down a-full a-1000 ACCESS 1000BASE_T eth-0-2 down a-full a-1000 ACCESS 1000BASE_T eth-0-3 admin down auto auto ACCESS 1000BASE_T eth-0-4 admin down auto auto ACCESS 1000BASE_T eth-0-5 up a-full a-1000 routed 1000BASE_T eth-0-6 up a-full a-100 ACCESS eth-0-7 admin down auto auto eth-0-8 admin down auto eth-0-9 down a-full a-1000 ACCESS 1000BASE_T eth-0-10 down
PAGE 61
CanogaOS Command Reference agg1(SU) Static agg10(SD) LACP eth-0-1(B) eth-0-1(D) eth-0-2(D) eth-0-6(D) eth-0-7(D) eth-0-8(D) eth-0-9(D) eth-0-10(D) Related Commands None 4.24 clear port-security address-table static Use this command to clear static port-security mac address table.
PAGE 62
CanogaOS Command Reference Defaults disabled Usage When disable port-security, all the port-security mac address learned dynamically will be cleared. The static port-security mac address will be disabled but not be cleared. Examples This example shows how to enable port security on an interface. Switch(config-if)# switchport port-security This example shows how to disable port security on an interface. Switch(config-if)# no switchport port-security Related Commands show port-security interface 4.
PAGE 63
CanogaOS Command Reference Examples This example sets the maximum number of secure MAC addresses on a port. Switch(config-if)# switchport port-security maximum 1024 This example returns the maximum number of secure MAC addresses on a port to default value. Switch(config-if)# no switchport port-security maximum Related Commands switchport port-security violation show port-security maximum mac-num interface IFNAME 4.
PAGE 64
CanogaOS Command Reference 4.28 show port-security address-table Use this command to show port-security mac address-table. Command Syntax show port-security address-table Command Mode EXEC Usage None Examples This example shows port-security mac address-table on the Switch. Switch# show port-security address-table Secure Mac Address Table ---------------------------------------------------------------------Vlan ---- Mac Address ----------- Type ------- Ports ------- 1 0001.00ce.
PAGE 65
CanogaOS Command Reference switchport port-security maximum show port-security maximum mac-num interface interface 4.30 show port-security interface Use this command to show the port-security information on a interface. Command Syntax show port-security interface interface Command Mode EXEC Usage None Examples This example shows the port-security information on interface eth-0-1.
PAGE 66
CanogaOS Command Reference Switch# show port-security maximum mac-num interface eth-0-1 Maximum MAC Addresses : 1024 Related Commands switchport port-security maximum show port-security current mac-num interface interface 4.32 storm-control Use the storm-control interface configuration command to enable broadcast, multicast, or unicast storm control and to set threshold levels on an interface. Use the no form of this command to return to the default setting.
PAGE 67
CanogaOS Command Reference Command Syntax show storm-control [interface] Command Mode EXEC Usage None Examples This example shows storm-control configurations.
PAGE 68
CanogaOS Command Reference 5 LACP Commands 5.1 channel-group Use the this command to assign a port to a channel group. Use the no form of this command to remove a port from a channel group.
PAGE 69
CanogaOS Command Reference None Examples This example shows how to configure the port priority 100 for the Link Aggregation Control Protocol (LACP): Switch(config-if)# lacp port-priority 100 This example shows how to return to the default setting: Switch(config-if)# no lacp port-priority Related Commands None 5.3 lacp timeout Use this command to configure the port timeout for the Link Aggregation Control Protocol (LACP). Use the no form of this command to return to the default setting.
PAGE 70
CanogaOS Command Reference Command Syntax lacp system-priority priority priority: <1-65535> Command Mode Global configuration Defaults 32768 Usage None Examples This example shows how to configure the system priority 100 for the Link Aggregation Control Protocol (LACP): Switch(config)# lacp system-priority 100 This example shows how to return to the default setting: Switch(config)# no lacp system-priority Related Commands None 5.
PAGE 71
CanogaOS Command Reference 5 /D\HU 6 /D\HU + VWDQGE\ Z ZDLW 8 LQ XVH $JJUHJDWRU 1DPH 3URWRFRO 3RUWV DJJ 68 /$&3 HWK % HWK % DJJ 68 /$&3 HWK % HWK % This example shows how to display a summary of a specified channel group: 6ZLWFK VKRZ FKDQQHO JURXS VXPPDU\ )ODJV V VXVSHQG , VWD
PAGE 72
CanogaOS Command Reference &KDQQHO JURXS OLVWLQJ *URXS *URXS VWDWH / 3RUWV 0D[SRUWV 1XPEHU RI SRUWV LQ EXQGOH 0D[ &KDQQHO JURXSV 6WDQGE\ SRUW 18// 3URWRFRO /$&3 3RUWV LQ WKH JURXS 3RUW HWK 3RUW VWDWH 8S ,Q %QGO &KDQQHO QXPEHU 3URWRFRO /$&3 &KDQQHO JRUXS DJJ 3RUW LQGH[
PAGE 73
CanogaOS Command Reference /$&3 SRUW $GPLQ 2SHU 3RUW 3RUW 3RUW )ODJV 6WDWH 3ULRULW\ .H\ .H\ 1XPEHU 6WDWH HWK )$ EQGO [ E [ I 3DUWQHU V LQIRUPDWLRQ /$&3 SRUW $GPLQ 2SHU 3RUW 3RUW 3RUW )ODJV 3ULRULW\ 'HY ,' NH\ .
PAGE 74
CanogaOS Command Reference 3RUW VWDWH 8S ,Q %QGO &KDQQHO QXPEHU 3URWRFRO /$&3 &KDQQHO JRUXS DJJ 3RUW LQGH[ 0RGH $FWLYH )ODJV 6 'HYLFH LV VHQGLQJ 6ORZ /$&3'8V ) 'HYLFH LV VHQGLQJ IDVW /$&3'8V $ 'HYLFH LV LQ DFWLYH PRGH 3 'HYLFH LV LQ SDVVLYH PRGH /RFDO LQIRUPDWLRQ /$&3 SRUW $GPLQ 2SHU 3RUW 3RUW 3RUW )ODJV 6WDWH 3ULRULW\ .H\ .
PAGE 75
CanogaOS Command Reference /$&3 SRUW $GPLQ 2SHU 3RUW 3RUW 3RUW )ODJV 3ULRULW\ 'HY ,' NH\ .
PAGE 76
CanogaOS Command Reference Examples This example shows how to display internal information of all of the channel groups: 6ZLWFK VKRZ ODFS LQWHUQDO )ODJV 6 'HYLFH LV UHTXHVWLQJ 6ORZ /$&3'8V ) 'HYLFH LV UHTXHVWLQJ )DVW /$&3'8V $ 'HYLFH LV LQ $FWLYH PRGH 3 'HYLFH LV LQ 3DVVLYH PRGH &KDQQHO JURXS /$&3 SRUW $GPLQ 2SHU 3RUW 3RUW 3RUW )ODJV 6WDWH 3ULRULW\ NH\ .
PAGE 77
CanogaOS Command Reference EXEC Usage None Examples This example shows how to display detailed internal information of all of the channel groups: 6ZLWFK VKRZ ODFS LQWHUQDO GHWDLO )ODJV 6 'HYLFH LV UHTXHVWLQJ 6ORZ /$&3'8V ) 'HYLFH LV UHTXHVWLQJ )DVW /$&3'8V $ 'HYLFH LV LQ $FWLYH PRGH 3 'HYLFH LV LQ 3DVVLYH PRGH &KDQQHO JURXS QHLJKERUV $FWRU V LQIRUPDWLRQ $FWRU $FWRU $FWRU 3RUW 6\VWHP ,' 3RUW 1XPEHU )ODJV HW
PAGE 78
CanogaOS Command Reference &KDQQHO JURXS QHLJKERUV $FWRU V LQIRUPDWLRQ $FWRU $FWRU $FWRU 3RUW 6\VWHP ,' 3RUW 1XPEHU )ODJV HWK FD F H G D [ )$ /$&3 $FWRU $FWRU $FWRU 3RUW 3ULRULW\ 2SHU .
PAGE 79
CanogaOS Command Reference /$&3 $FWRU $FWRU $FWRU 3RUW 3ULRULW\ 2SHU .
PAGE 80
CanogaOS Command Reference Examples This example shows how to display neighbor information of all of the channel groups: 6ZLWFK VKRZ ODFS QHLJKERU )ODJV 6 'HYLFH LV UHTXHVWLQJ 6ORZ /$&3'8V ) 'HYLFH LV UHTXHVWLQJ )DVW /$&3'8V $ 'HYLFH LV LQ $FWLYH PRGH 3 'HYLFH LV LQ 3DVVLYH PRGH &KDQQHO JURXS QHLJKERUV 3DUWQHU V LQIRUPDWLRQ /$&3 SRUW $GPLQ 2SHU 3RUW 3RUW 3RUW )ODJV 3ULRULW\ 'HY ,' NH\ .
PAGE 81
CanogaOS Command Reference 5.10 show lacp neighbor detail Use this command to display detailed neighbor information of all of the channel groups, or a specified channel group.
PAGE 82
CanogaOS Command Reference /$&3 3DUWQHU 3DUWQHU 3DUWQHU 3RUW 3ULRULW\ 2SHU .
PAGE 83
CanogaOS Command Reference 6ZLWFK VKRZ ODFS QHLJKERU GHWDLO )ODJV 6 'HYLFH LV UHTXHVWLQJ 6ORZ /$&3'8V ) 'HYLFH LV UHTXHVWLQJ )DVW /$&3'8V $ 'HYLFH LV LQ $FWLYH PRGH 3 'HYLFH LV LQ 3DVVLYH PRGH &KDQQHO JURXS QHLJKERUV 3DUWQHU V LQIRUPDWLRQ 3DUWQHU 3DUWQHU 3DUWQHU 3RUW 6\VWHP ,' 3RUW 1XPEHU )ODJV HWK FD F H G D [ )$ /$&3 3DUWQHU 3DUWQHU 3DUWQHU
PAGE 84
CanogaOS Command Reference show channel-group port [ifname] show channel-group channel-group-number port ifname: interface name channel-group-number: <1-255> Command Mode EXEC Usage None Examples This example shows how to display details of the LACP port of all of the channel group: 6ZLWFK VKRZ FKDQQHO JURXS SRUW &KDQQHO JURXS OLVWLQJ *URXS 3RUWV LQ WKH JURXS 3RUW HWK
PAGE 85
CanogaOS Command Reference 3RUW HWK 3RUW VWDWH 8S ,Q %QGO &KDQQHO QXPEHU 3URWRFRO /$&3 &KDQQHO JRUXS DJJ 3RUW LQGH[ 0RGH $FWLYH )ODJV 6 'HYLFH LV VHQGLQJ 6ORZ /$&3'8V ) 'HYLFH LV VHQGLQJ IDVW /$&3'8V $ 'HYLFH LV LQ DFWLYH PRGH 3 'HYLFH LV LQ SDVVLYH PRGH /RFDO LQIRUPDWLRQ /$&3 SRUW $GPLQ 2SHU 3RUW 3RUW 3RUW )ODJV 6WDWH 3ULRULW\ .
PAGE 86
CanogaOS Command Reference HWK )$ FD F H G D [ [ I 3RUW HWK 3RUW VWDWH 8S ,Q %QGO &KDQQHO QXPEHU 3URWRFRO /$&3 &KDQQHO JRUXS DJJ 3RUW LQGH[ 0RGH $FWLYH )ODJV 6 'HYLFH LV VHQGLQJ 6ORZ /$&3'8V ) 'HYLFH LV VHQGLQJ IDVW /$&3'8V $ 'HYLFH LV LQ DFWLYH PRGH 3 'HYLFH LV LQ SDVVLYH PRGH /RFDO LQIRUPDWLRQ /$&3 SRUW
PAGE 87
CanogaOS Command Reference 3DUWQHU V LQIRUPDWLRQ /$&3 SRUW $GPLQ 2SHU 3RUW 3RUW 3RUW )ODJV 3ULRULW\ 'HY ,' NH\ .
PAGE 88
CanogaOS Command Reference 3DUWQHU V LQIRUPDWLRQ /$&3 SRUW $GPLQ 2SHU 3RUW 3RUW 3RUW )ODJV 3ULRULW\ 'HY ,' NH\ .H\ 1XPEHU 6WDWH HWK )$ F I [ [ I Related Commands None 5.
PAGE 89
CanogaOS Command Reference This example shows how to display the packet traffic on a specified channel group : 6ZLWFK VKRZ ODFS FRXQWHUV 7UDIILF VWDWLVWLFV 3RUW /$&3'8V 3FNW HUU 6HQW 5HFY 6HQW 5HFY &KDQQHO JURXS DJJ HWK HWK Related Commands None 5.
PAGE 90
CanogaOS Command Reference Usage None Examples This example shows how to clear all counters of all of the channel groups: Switch# clear lacp counters This example shows how to clear a specified channel group: Switch#clear lacp 10 counters Related Commands None 5-23
PAGE 91
CanogaOS Command Reference 6 VLAN Commands 6.1 vlan database Use this command to enter vlan configure mode Command Syntax vlan database Command Mode Global configuration Usage When you try to create or remove vlan, you must use this command to enter vlan configure mode first. To exit vlan configure mode, use exit command.
PAGE 92
CanogaOS Command Reference This example shows how to enable dscp on vlan 1: Switch(config-vlan)# vlan 1 replace dscp This example shows how to disable dscp on vlan 1: Switch(config-vlan)# vlan 1 replace dscp Related Commands None 6.3 vlan <1-4094> Use the vlan VLAN configuration command to configure VLAN characteristics for a VLAN in the VLAN database. You access VLAN configuration mode by entering the vlan database privileged EXEC command. Use the no form of this command to delete a VLAN.
PAGE 93
CanogaOS Command Reference Command Syntax vlan VLAN_LIST no vlan VLAN_LIST VLAN_LIST: vlan list connected with ‘-’ and ‘,’, for example, “1-10,15,20,30-40” Command Mode VLAN configuration Usage The vlan list should be connected with ‘-’ and ‘,’, the value should be in the range of <1-4094> and should be ascending order. Vlan 1 is the default vlan and all ports have been added to it by default. Default VLAN 1 can not be removed. Examples This example shows how to add vlans of “100,200,300-400”.
PAGE 94
CanogaOS Command Reference show vlan all 6.6 show vlan all Use this command to show the information on all the vlan. Command Syntax show vlan all Command Mode EXEC Usage None Examples This example shows how to display the information on vlan all: Switch# show vlan all Related Commands show vlan vlan 6.7 show vlan brief Use this command to show the brief information on vlan.
PAGE 95
CanogaOS Command Reference 6.8 show interface switchport Use this command to show the vlan configurations on all bridge ports or a bridge port. Command Syntax show interface switchport {interface IFNAME|} Command Mode EXEC Usage None Examples This example shows how to display the vlan configurations on all bridge ports or a bridge port: Switch# show interface switchport interface eth-0-1 Related Commands switchport mode access switchport mode trunk 6.
PAGE 96
CanogaOS Command Reference This example shows how to apply vlan classifier group 1 to the interface: Switch(config-if)# vlan classifier activate 1 based ip This example shows how to remove the vlan classifier group 1 from the interface: Switch(config-if)# no vlan classifier activate Related Commands vlan classifier group vlan classifier rule 6.10 vlan classifier group Use this command to add or delete rule to vlan classifier group. To remove the group, use the no form of this command.
PAGE 97
CanogaOS Command Reference 6.11 vlan classifier rule Use this command to create vlan classifier rule. To remove the vlan classifier rule, use the no form of this command.
PAGE 98
CanogaOS Command Reference Usage None Examples This example shows how to display information about vlan classifier group 1: Switch# show vlan classifier group 1 Related Commands show vlan classifier interface show vlan classifier rule 6.13 show vlan classifier interface Use this command to show the information about vlan classifier group on interface.
PAGE 99
CanogaOS Command Reference EXEC Usage None Examples This example shows how to display information about all the vlan classifier rules: Switch# show vlan classifier rule This example shows how to display information about the vlan classifier rule1: Switch# show vlan classifier rule 1 Related Commands show vlan classifier group show vlan classifier interface 6.15 switchport access allowed Use this command to allow or not allow the traffic from the specific vlan to pass the access port.
PAGE 100
CanogaOS Command Reference 6.16 switchport access vlan Use this command to set the access port to a specified vlan. To set the access port to default vlan 1, use no form of this command. Command Syntax switchport access vlan vlan no switchport access vlan vlan: <2-4094> Command Mode Interface configuration Usage All the ports are add to vlan 1 by default. The port should be an access port by switchport mode access command before add to vlan by this command.
PAGE 101
CanogaOS Command Reference This example shows how to set the switchport mode to access. Switch(config-if)# switchport mode access Related Commands switchport mode trunk 6.18 switchport mode trunk Use this command to set the switchport mode to trunk. Command Syntax switchport mode trunk Command Mode Interface configuration Usage The trunk mode is usually used to connect the port with other switch. The trunk mode is usually used to connect the port with host device.
PAGE 102
CanogaOS Command Reference Usage The trunk port ingress-filter configuration should only be allowed on a trunk port. When the ingress-filter is disabled, this port will not check the vlan ID of received ingress packets. Examples This example shows how to set the trunk port ingress-filter to disable. Switch(config-if)# switchport mode trunk ingress-filter disable Related Commands switchport mode trunk 6.
PAGE 103
CanogaOS Command Reference 6.21 switchport trunk native Use this command to set the native vlan for sending and receiving untagged traffic. To return the native vlan to default value, use the no form of this command. Command Syntax switchport trunk native vlan vlan no switchport trunk native vlan vlan: <2-4094> an existing vlan id Command Mode Interface configuration Defaults 1 Usage None Examples This example shows how to set the native vlan to vlan 10 on the interface.
PAGE 104
CanogaOS Command Reference 7 Spanning-tree Commands 7.1 spanning-tree enable Use this command to enable the Spanning Tree Protocol on a bridge. Use the no parameter to disable the SpanningTree Protocol on the bridge. Command Syntax spanning-tree enable no spanning-tree enable Command Mode Configure mode Default Usage Configure the bridge instance name before using this command. The allowable range of values is 1-10 seconds.
PAGE 105
CanogaOS Command Reference Default The default priority is 32678 (or hex 0x8000). Usage This command must be used to set the priority of the bridge. The priority values can only be set in increments of 4096. Examples Switch# configure terminal Switch(config)# spanning-tree priority 4096 Switch# configure terminal Switch(config)# no spanning-tree priority Related Commands 7.3 spanning-tree instance priority Use this command to set the default bridge priority for an MST instance to the value specified.
PAGE 106
CanogaOS Command Reference Command Syntax spanning-tree forward-time seconds no spanning-tree forward-time seconds Forwarding time delay, in seconds, for the default bridge. The range is 4 to 30. Command Mode Global configure Default The default value is 15 seconds. Usage The allowable range for the forward time is 4-30 seconds. It is not advisable to set the value below 7 seconds.
PAGE 107
CanogaOS Command Reference Usage The allowable range of values is 1-10 seconds. However, make sure that the value of the hello time is always greater than the value of the hold time (1 second by default). Examples Switch# configure terminal Switch(config)# spanning-tree hello-time 5 Switch# configure terminal Switch(config)# no spanning-tree hello-time Related Commands 7.6 spanning-tree max-age Use this command to set the maximum age for the default bridge. This value is used by all instances.
PAGE 108
CanogaOS Command Reference 7.7 spanning-tree max-hops Use this command to specify the maximum allowed hops for a BPDU in an MST region. This parameter is used by all the instances of the MST. To restore the default value, use the no parameter with this command. Command Syntax spanning-tree max-hops number no spanning-tree max-hops number Maximum hops for which the BPDU will be valid. The range is 1 to 40. Command Mode Global configuration Default The default maximum hops in an MST region are 20.
PAGE 109
CanogaOS Command Reference Usage Examples Switch# configure terminal Switch(config)# spanning-tree transmit-holdcount 5 Related Commands 7.9 spanning-tree edgeport bpdu-guard Use this command to enable the BPDU (Bridge Protocol Data Unit) Guard feature on a bridge. Use the no parameter with this command to disable the BPDU Guard feature on a bridge.
PAGE 110
CanogaOS Command Reference command to disable the BPDU filter for the bridge. Command Syntax spanning-tree edgeport bpdu-filter no spanning-tree edgeport bpdu-filter Command Mode Global configuration Default Usage The Spanning Tree Protocol sends BPDUs from all ports. Enabling the BPDU Filter feature ensures that edgeport enabled ports do not transmit or receive any BPDUs.
PAGE 111
CanogaOS Command Reference Switch(config)# spanning-tree bpdu-transparent enable Related Commands 7.12 spanning-tree port Use this command to set the port enable or disable spanning tree protocol. The default state is enabled. Command Syntax spanning-tree port {enable | disable} enable Enable spanning protocol on this port. disable Disable spanning protocol on this port. Command Mode Interface mode Default The default spanning tree state of the port is enabled.
PAGE 112
CanogaOS Command Reference The default priority is 1. Usage Examples Switch# configure terminal Switch(config)# interface eth-0-1 Switch(config-if)# spanning-tree port-priority 240 Related Commands 7.14 spanning-tree pathcost-standard Use this command to set the path cost standard associated with the default bridge-group. Use the no parameter with this command to set to default value.
PAGE 113
CanogaOS Command Reference Command Syntax spanning-tree path-cost number no spanning-tree path-cost number The cost to be assigned to the group. The range is 1 to 200000000. Command Mode Interface mode Default The default path cost value is calculated according to interface’s speed. Usage The priority values can only be set in increments of 16. Examples Switch# configure terminal Switch(config)# interface eth-0-1 Switch(config-if)# spanning-tree path-cost 123 Related Commands 7.
PAGE 114
CanogaOS Command Reference Switch(config-if)# spanning-tree link-type shared Related Commands 7.17 spanning-tree edgeport Use this command to set a port as an edge-port and to enable rapid transitions. Use the no parameter with this command to set a port to its default state (not an edge-port) and to disable rapid transitions.
PAGE 115
CanogaOS Command Reference Usage This command supersedes the bridge level configuration for the BPDU Guard feature. When the enable or disable parameter is used with this command, this configuration takes precedence over bridge configuration. However, when the default parameter is used with this command, the bridge-level BPDU Guard configuration takes effect. Use the bridge spanning-tree portfast bpdu-guard command to configure the BPDU Guard feature on a bridge.
PAGE 116
CanogaOS Command Reference Related Commands 7.20 spanning-tree guard root Use this command to enable the Root Guard feature for the port. This feature disables reception of superior BPDUs. Use the no parameter with this command to disable the root guard feature for the port. Command Syntax spanning-tree guard root no spanning-tree guard root Command Mode Interface mode Default Root guard is disabled. Usage The Root Guard feature makes sure that the port on which it is enabled is a designated port.
PAGE 117
CanogaOS Command Reference Interface mode Default Usage Examples Set the value to enforce the spanning tree protocol: Switch# configure terminal Switch(config)# interface eth-0-1 Switch(config-if)# spanning-tree force-version 1 Set the default protocol version: Switch# configure terminal Switch(config)# interface eth-0-1 Switch(config-if)# no spanning-tree force-version Related Commands 7.22 spanning-tree restricted-tcn Use this command to set the restricted TCN value of the port to TRUE.
PAGE 118
CanogaOS Command Reference 7.23 spanning-tree restricted-role Use this command to set the restricted-role value of the port to TRUE. Use the no parameter with this command to set the restricted-role value of the port to FALSE. Command Syntax spanning-tree restricted-role no spanning-tree restricted-role Command Mode Interface mode Default The default restricted-role value is FALSE.
PAGE 119
CanogaOS Command Reference The Multiple Spanning Tree Protocol uses port priority as a tiebreaker to determine which port should forward frame for a particular instance on a LAN, or which port should be the root port for an instance. A lower value implies a better priority. In the case of the same priority, the interface index will serve as the tiebreaker, with the lower-numbered interface being preferred over others. The permitted range is 0-240. The priority values can only be set in increments of 16.
PAGE 120
CanogaOS Command Reference 7.26 spanning-tree instance restricted-tcn Use this command to set the restricted TCN value for the instance to TRUE. Use the no parameter with this command to set the restricted TCN value for the instance to FALSE. Command Syntax spanning-tree instance instance-id restricted-tcn no spanning-tree instance instance-id restricted-tcn instance-id Specify the instance ID. Command Mode Interface mode Default The default restricted TCN value is FALSE.
PAGE 121
CanogaOS Command Reference Usage Examples Switch# configure terminal Switch(config)# interface eth-0-1 Switch(config-if)# spanning-tree instance 2 restricted-role Related Commands 7.28 spanning-tree mst configuration Use this command to enter mst configuration mode. Command Syntax spanning-tree mst configuraiton Command Mode Global configuration Default Usage Examples Switch# configure terminal Switch(config)# spanning-tree mst configuration Switch(config-mst)# Related Commands 7.
PAGE 122
CanogaOS Command Reference mst configuration mode Default Usage When you map VLANs to an MST instance, the mapping is incremental, and the VLANs specified in the command are added to or removed from the VLANs that were previously mapped. Examples Switch# configure terminal Switch(config)# vlan database Switch(config-vlan)# vlan 10 Switch(config-vlan)# exit Switch(config)# spanning-tree mst configuration Switch(config-mst)# instange 1 vlan 10 Related Commands 7.
PAGE 123
CanogaOS Command Reference Related Commands 7.31 revision Use this command to create an mstp revision number. Command Syntax revision number no revision number number Specify the configuration revision number. The range is 0 to 65535. Command Mode mst configuration mode Default Default value is 0.
PAGE 124
CanogaOS Command Reference Usage Examples Switch# clear spanning-tree detected protocols bridge 2 Related Commands 7.33 clear spanning-tree disabled-port Use this command to clear all spanning tree protocol disabled port. Command Syntax clear spanning-tree disabled-port Command Mode Privileged Exec mode Default Usage Examples Switch# clear spanning-tree detected protocols bridge 2 Related Commands 7.34 show spanning-tree Use this command to show the state of the spanning tree.
PAGE 125
CanogaOS Command Reference Mode - Multiple spanning tree protocol Path Cost Standard - dot1t CIST Root Path Cost 0 - CIST Root Port 0 - CIST Bridge Priority 32768 Forward Delay 15 - Hello Time 2 - Max Age 20 - Max-hops 20 Tx Hold Count 3 CIST Root Id 800034f2d317ce01 CIST Reg Root Id 800034f2d317ce01 CIST Bridge Id 800034f2d317ce01 Edgeport bpdu-filter disabled Edgeport bpdu-guard enabled Edgeport errdisable timeout enabled Edgeport errdisable timeout interval 300 sec eth-0-2: Port 2 - Id 8002 - Role Design
PAGE 126
CanogaOS Command Reference Command Mode Privileged Exec modes Default Usage The following is an output of this command displaying the spanning tree.
PAGE 127
CanogaOS Command Reference 7.36 show spanning-tree interface Use this command to show the state of the spanning tree of the specified interface. Command Syntax show spanning-tree interface interface-id [brief] Command Mode Privileged Exec modes Default Usage Examples The following is an output of this command displaying the state of the spanning tree of the interface eth-0-1.
PAGE 128
CanogaOS Command Reference eth-0-1: Edgeport bpdu-guard Default - Current edgeport bpdu-guard on eth-0-1: Edgeport bpdu-filter Default - Current edgeport bpdu-filter off eth-0-1: No root guard configured - Current root guard off eth-0-1: Configured Link Type auto - Current point-to-point Related Commands 7.37 show spanning-tree brief Use this command to show the brief state of the spanning tree.
PAGE 129
CanogaOS Command Reference eth-0-10 Designated Forwarding 20000 128.10 P2p eth-0-11 Designated Forwarding 20000 128.11 P2p eth-0-12 Designated Forwarding 20000 128.12 P2p eth-0-13 Designated Forwarding 20000 128.13 P2p eth-0-14 Designated Forwarding 20000 128.14 P2p eth-0-15 Designated Forwarding 20000 128.15 P2p eth-0-16 Designated Forwarding 20000 128.16 P2p eth-0-17 Designated Forwarding 20000 128.17 P2p Related Commands 7.
PAGE 130
CanogaOS Command Reference Privileged Exec modes Default Usage Examples The following is an output of this command displaying the mstp information. The down interface should not be show.
PAGE 131
CanogaOS Command Reference Usage Examples The following is an output of this command displaying the mstp information. The down interface should not be show.
PAGE 132
CanogaOS Command Reference Bridge up - Spanning Tree Enabled Mode - Multiple spanning tree protocol Path Cost Standard - dot1t CIST Root Path Cost 0 - CIST Root Port 0 - CIST Bridge Priority 32768 Forward Delay 15 - Hello Time 2 - Max Age 20 - Max-hops 20 Tx Hold Count 3 CIST Root Id 8000e083bce89601 CIST Reg Root Id 8000e083bce89601 CIST Bridge Id 8000e083bce89601 Edgeport bpdu-filter disabled Edgeport bpdu-guard disabled eth-0-1: Port 1 - Id 8001 - Role Disabled - State Discarding eth-0-1: Designated Exte
PAGE 133
CanogaOS Command Reference MSTI Root Path Cost 0 -MSTI Root Port 0 - MSTI Bridge Priority 32768 MSTI Root Id 800fe083bce89601 MSTI Bridge Id 800fe083bce89601 eth-0-1: Port 1 - Id 8001 - Role Disabled - State Discarding eth-0-1: Designated Internal Path Cost 0 - Designated Port Id 0 eth-0-1: Configured Internal Path Cost 20000 eth-0-1: Configured CST External Path cost 20000 eth-0-1: CST Priority 128 - MSTI Priority 128 eth-0-1: Designated Root 0000e083bce89601 eth-0-1: Designated Bridge 0000e083bce89601 eth
PAGE 134
CanogaOS Command Reference eth-0-48: Designated Bridge 0000000000000000 eth-0-48: Message Age 0 - Max Age 0 eth-0-48: Hello Time 2 - Forward Delay 15 eth-0-48: Forward Timer 0 - Msg Age Timer 0 - Hello Timer 0 eth-0-1: Port 1 - Id 8001 - Role Disabled - State Discarding eth-0-1: Designated Internal Path Cost 0 - Designated Port Id 0 eth-0-1: Configured Internal Path Cost 20000 eth-0-1: Configured CST External Path cost 20000 eth-0-1: CST Priority 128 - MSTI Priority 128 eth-0-1: Designated Root 0000e083bce8
PAGE 135
CanogaOS Command Reference CIST Bridge Id 8000be8c722f7f00 Edgeport bpdu-filter disabled Edgeport bpdu-guard disabled Instance Interface VLAN 0: 1, 4-100 1: eth-0-1 2 2: eth-0-1 3 Related Commands 7.44 show spanning-tree mst brief Use this command to show the brief mstp information.
PAGE 136
CanogaOS Command Reference Interface Role State Cost Priority.Number Type ----------------------------------------------------------------------##### MST2: Vlans: 2 Root ID Priority Bridge ID Priority 32770 (0x8002) Address e083.bce8.9601 32770 (0x8002) Address Interface e083.bce8.9601 Role State Int-Cost Priority.Number Type ----------------------------------------------------------------------eth-0-48 Disabled Discarding 20000 128.48 P2p eth-0-1 Disabled Discarding 20000 128.
PAGE 137
CanogaOS Command Reference 8 ERPS Commands 8.1 erps Use this command to create/remove erps domain instance. Command Syntax erps ERPS_ID [ERPS_NAME] no erps ERPS_ID ERPS_ID : <1-255> ERPS domain ID ERPS_NAME: ERPS domain name Command Mode Global configuration Usage ERPS_NAME is optional. If no name is provided by command, system will generate the domain name automatically. The name format follows “ERPS00ID”, where ID is domain ID provided through the command.
PAGE 138
CanogaOS Command Reference primary: primary ring sub: sub ring vlan : <2-4094> VLAN ID Command Mode Global configuration Usage None Examples This example shows how to set vlan 16 as primary control vlan for erps domain 11. Switch# configure terminal Enter configuration commands, one per line. End with CNTL/Z. Switch(config)#vlan database Switch(config-vlan)#vlan 16 Switch(config-vlan)#exit Switch(config)#erps 11 primary control vlan 16 And you can check the result by using “show erps 11” command.
PAGE 139
CanogaOS Command Reference Global configuration Usage None Examples This example shows how to set fail timer interval of erps domain 11 to 5s. Switch# configure terminal Enter configuration commands, one per line. End with CNTL/Z.
PAGE 140
CanogaOS Command Reference Enter configuration commands, one per line. End with CNTL/Z. Switch(config)#erps 11 ring 1 level sub And you can check the result by using “show erps 11” command.
PAGE 141
CanogaOS Command Reference And you can check the result by using “show erps 11” command.
PAGE 142
CanogaOS Command Reference Switch(config-if)# exit Switch(config)# erps 11 ring 1 primary interface eth-0-9 And you can check the result by using “show erps 11” command.
PAGE 143
CanogaOS Command Reference Switch(config)# erps 11 ring 1 edge-mode edge And you can check the result by using “show erps 11” command.
PAGE 144
CanogaOS Command Reference Switch#configure terminal Enter configuration commands, one per line. End with CNTL/Z. Switch(config)#interface eth-0-9 Switch(config-if)#switchport mode trunk Switch(config-if)#switchport trunk allowed vlan add 15 Switch(config-if)#exit Switch(config)#erps 11 ring 1 edge interface eth-0-9 And you can check the result by using “show erps 11” command.
PAGE 145
CanogaOS Command Reference Examples This example shows how to disable srpt functionality for ERPS domain 11 ring 1. Switch# configure terminal Enter configuration commands, one per line. End with CNTL/Z. Switch(config)#erps 11 ring 1 srpt disable And you can check the result by using “show erps 11” command.
PAGE 146
CanogaOS Command Reference Examples This example shows how to enable ERPS domain 11 ring 1. Switch# configure terminal Enter configuration commands, one per line. End with CNTL/Z. Switch(config)#erps 11 ring 1 enable And you can check the result by using “show erps 11” command.
PAGE 147
CanogaOS Command Reference This example shows how to enable erps domain 11. Switch# configure terminal Enter configuration commands, one per line. End with CNTL/Z. Switch(config)# erps 11 enable And you can check the result by using “show erps 11” command.
PAGE 148
CanogaOS Command Reference ERPS domain sub control VLAN ID: 15 ERPS domain hello timer interval: 1 second(s) ERPS domain fail timer interval: 5 second(s) ERPS ring ID: 1 ERPS ring level: sub ERPS ring 1 node mode: transit ERPS ring 1 edge node mode: edge ERPS ring 1 node state: link up ERPS ring 1 edge interface name: eth-0-9 ERPS ring 1 common interface name: eth-0-13 EPRS ring 1 SRPT is disabled Related Commands None 8.13 show erps list Use this command to show the list of erps domain(s).
PAGE 149
CanogaOS Command Reference 9 QinQ Commands 9.1 vlan mapping table Use this command to add or delete vlan mapping table Command Syntax vlan mapping table WORD no vlan mapping table WORD WORD: the name of vlan mapping table. Command Mode Global configuration Usage This example shows how to create a vlan mapping table. Examples Create vlan mapping table Map1. Switch(config)# vlan mapping table MAP1 Switch (config-vlan-mapping)# Related Commands show vlan mapping table WORD 9.
PAGE 150
CanogaOS Command Reference Usage This example shows how to add one vlan mapping entry to vlan mapping table Examples Add vlan mapping entry, raw vlan is from 10 to 20, mapped vlan is 100: Switch (config)# vlan mapping table map_table Switch (config-vlan-mapping)# raw-vlan 10-20 mapped-vlan 100 Related Commands show vlan mapping table WORD 9.3 show vlan mapping table Use this command vlan mapping table.
PAGE 151
CanogaOS Command Reference Command Mode Interface configuration Usage This command is used to configure a switchport to dot1q-tunnel port. Examples This example shows how to configure a switchport to dot1q-tunnel port. Switch (config-if)# switchport mode dot1q-tunnel Related Commands show interface switchport 9.5 switchport dot1q-tunnel type Use this command to configure dot1q-tunnel type.
PAGE 152
CanogaOS Command Reference Usage Configure dot1q-tunnel port’s native vlan. Examples Configure the eth-0-1 to dot1q-tunnel and configure this port’s native to vlan 10: Switch (config)# vlan da Switch (config-vlan)# vlan 100 Switch (config-vlan)# exit Switch (config)# interface eth-0-23 Switch (config-if)# switchport mode dot1q-tunnel Switch (config-if)# switchport dot1q-tunnel native vlan 100 Related Commands show interface switchport 9.
PAGE 153
CanogaOS Command Reference no switchport dot1q-tunnel vlan mapping table Command Mode Interface configuration Usage Apply exist vlan mapping table on dot1q-tunnel port. The type of dot1q-tunnel port should be selective. Examples Switch (config-if)# switchport dot1q-tunnel vlan mapping table mp Related Commands show vlan mapping table 9.9 switchport trunk vlan-translation Use this command to enable vlan translation on trunk port.
PAGE 154
CanogaOS Command Reference Examples Switch (config-if)# switchport trunk vlan-translation vlan mapping table vlantranstable Related Commands show vlan mapping table 9.11 dot1q ethertype Use this command to dot1q ethertype. Command Syntax dot1q ethertype VALUE VALUE: the ethertype value, could be 0x0000 ~ 0xFFFF Command Mode Interface configuration Usage Use this command to configure dot1q ethertype for switchport.
PAGE 155
CanogaOS Command Reference 9.13 l2protocol-tunnel tunnel-dmac MAC Use this command to l2protocol tunnel destination MAC address. Command Syntax l2protocol-tunnel tunnel-dmac MAC No l2protocol-tunnel tunnel-dmac MAC : BPDU tunnel’s destination MAC address, could be 0100.0CCD.CDD0-D2 or 010F.E200.0003 Command Mode Global configuration Usage Use this command to l2 protocol tunnel dmac to 010F.E200.0003. System default tunnel-dmac is 0100.0ccd.cdd0.
PAGE 156
CanogaOS Command Reference 9.15 l2protocol-discard stp Use this command to enable stp discard on port. Command Syntax l2protocol-discard stp no l2protocol-discard stp Command Mode Interface configuration Usage Use this command to enable stp discard on port. If user enable stp discard function, all BPDU packets received by this port should be discarded. Examples Switch(config-if)# l2protocol-discard stp Related Commands show l2protocol-tunnel 9.
PAGE 157
CanogaOS Command Reference Command Syntax vlan dot1q tag native no vlan dot1q tag native Command Mode Global configuration Usage Use this command to enable tagging native. By default, native vlan should untagged when packet sending out of port. Examples Switch(config)# vlan dot1q tag native Related Commands None 9.18 show dot1q ethertype Use this command to display dot1q ethertype. Command Syntax show dot1q ethertype [interface IFNAME] IFNAME: 802.
PAGE 158
CanogaOS Command Reference 10 Ethernet CFM Commands Default Ethernet CFM Configuration Ethernet CFM is globally disabled. By default, all interface ports are transparent to CFM messages (that is,they treat CFM messages as any other message). There are no MEPs or MIPs configured. Restrictions for CFM 噝 CFM is not supported and cannot be configured on routed ports, linkagg port channel or ports that belong to a linkagg port. 噝 You cannot configure CFM on VLAN interfaces.
PAGE 159
CanogaOS Command Reference 10.2 Configuring the CFM frame ethertype Use the command to configure the ethertype for CFM frames. Command Syntax ethernet cfm type TYPE no ethernet cfm type Command Mode Configure mode Default The default ethertype is 0x8902. Usage The Ethernet type of the CFM frames. The default value is 0x8902. Examples Switch#configure terminal Switch(config)# ethernet cfm type 8902 Switch#configure terminal Switch(config)# no ethernet cfm type Related Commands 10.
PAGE 160
CanogaOS Command Reference Usage The MD level. To configure the level, enter a value in the range 0 to 7. The levels define the MD as follows: 0~2 (operator levels) 3~4 (provider levels) 5~7 (customer levels) Examples Switch#configure terminal Switch(config)# ethernet cfm enable Switch#configure terminal Switch(config)# no ethernet cfm enable Related Commands 10.4 Configuring a Maintenance Association Use the command to define an MA within an MD.
PAGE 161
CanogaOS Command Reference ethernet cfm mep level LEVEL (down|up) mpid MEPID vlan VLANID no ethernet cfm mep level LEVEL (down|up) mpid MEPID vlan VLANID Command Mode Interface mode Default None Usage This command is used to Create a local MEP. Examples Related Commands ethernet cfm domain DOMAIN_NAME level LEVE service CSI_ID vlan VLAN_ID 10.
PAGE 162
CanogaOS Command Reference Switch(config)#spanning-tree max-age 12 Related Commands 10.7 Configuring a RMEP archive hold time Use this command to configure the number of minutes that data from a missing remote maintenance end point (mep) is kept before it is purged. Command Syntax ethernet cfm mep archive-hold-time minutes Command Mode Configure mode Default The default is 5 minutes. The value in the range 1 to 65535 minutes.
PAGE 163
CanogaOS Command Reference The default is disable. Usage The level ID identifies the domain to which configuration applies. 1) Enter enable to enable CFM cc for the domain level. 2) 20 Enter a maintenance level as a level number (0 to 7) or as any for all maintenance levels. 3) Enter the VLANs to apply the check to, as a VLAN-ID (1 to 4095), a range of VLAN-IDs separated by a hyphen, a series of VLAN IDs separated by commas,or any for any VLANs.
PAGE 164
CanogaOS Command Reference Command Syntax ethernet cfm mip level LEVEL no ethernet cfm mip level LEVEL Command Mode Interface mode Default No MIPs are configured. Usage 1) This command creates a MIP for every VLAN allowed on an interface, but you must first create a domain using the ethernet cfm domain command. If you do not have a domain configured at the same level, the ethernet cfm mip level command is rejected.
PAGE 165
CanogaOS Command Reference Usage 1˅This command is used to transmit a loopback message for a MAC address to a remote MP for fault verification. 2˅This command is used to transmit a loopback message to a remote MEP for fault verification. Examples Switch# loopback ethernet mpid 88 level 7 vlan 30 Switch# loopback ethernet 8908.0909.1267 level 7 vlan 30 repeat 5 timeout 5 Related Commands 10.
PAGE 166
CanogaOS Command Reference Related Commands 10.13 Configure the CFM linktrace cache Use the command to configure the CFM linktrace cache. You can set a maximum cache size or hold time.
PAGE 167
CanogaOS Command Reference Command Syntax ethernet cfm mip fdb hold-time <60-65535> Command Mode Configure mode Default The default is 60 minutes. The value in the range 60 to 65535 minutes. Usage This command is used to configure the mip ccm fdb hold time Examples Switch#configure terminal Switch(config)# ethernet cfm mip ccm-database hold-time 1000 Related Commands 10.
PAGE 168
CanogaOS Command Reference Examples Switch# ethernet cfm mep crosscheck enable level 7 vlan 10,20-30 Related Commands 10.16 Displaying related to CFM global information Use the command to display information related to global configuration. Command Syntax show ethernet cfm Command Mode Privileged Exec mode Default None Usage None Examples Switch# show ethernet cfm Related Commands 10.
PAGE 169
CanogaOS Command Reference Usage None Examples Switch# show ethernet cfm cc config Related Commands 10.18 Displaying related to Maintenance Domains Use the command to display information related to the configuration of MDs and MAs. Command Syntax show ethernet cfm domain Command Mode Privileged Exec mode Default None Usage None Examples Switch# show ethernet cfm domain Related Commands 10.19 Displaying related to CFM errors Use this command to display CFM error.
PAGE 170
CanogaOS Command Reference None Usage None Examples Switch# show ethernet cfm errors level 7 Related Commands 10.20 Displaying information related to MEPs and MIPs Use this command to display information related to configuration of MEPs,remote MEPs,and MIPs.
PAGE 171
CanogaOS Command Reference 10.21 Displaying information related to path trace cache Use this command to display CFM linktace cache information. Command Syntax show ethernet cfm traceroute-cache Command Mode Interface mode Default None Usage This command displays the CFM linktace cache. Examples Switch# show ethernet cfm traceroute-cache Related Commands 10.22 Clear Ethernet CFM information Use this command to clear errors ,clear remote MEPs,or clear linktace cache.
PAGE 172
CanogaOS Command Reference Related Commands 10-15
PAGE 173
CanogaOS Command Reference 11 Ethernet OAM Commands Default Ethernet OAM Configuration Ethernet OAM is disabled on all interfaces. When Ethernet OAM is enabled on an interface, link monitoring is automatically turned on. Remote loopback is disabled. Restrictions for Ethernet OAM For a remote failure indication, the switch does not generate Link Fault, Critical and Dying Gasp Event OAM PDUs. However, if these PDUs are received from a link partner, they are processed.
PAGE 174
CanogaOS Command Reference 11.2 ethetnet oam mode Use the command to configure Ethernet OAM mode on an interface Command Syntax ethernet oam mode active ethernet oam mode passive no ethernet oam mode Command Mode Interface mode Default The default Ethernet OAM mode for the DTE is passive. Usage This command is used to set the DTE to active mode or passive mode.
PAGE 175
CanogaOS Command Reference Usage Set the timer to emit at least one OAMPDU per second and ensure that the sublayer adheres to the maximum number of OAMPDUs per second. The minimum is 1 OAMPDU per second and the maximum is 10 OAMPDU per second Examples Switch# configure terminal Switch (config)# interface eth-0-1 Switch (config-if)# ethernet oam min-rate 1 11.4 ethernet oam max-rate Use this command to set the OAMPDU maximum number of PDUS per second.
PAGE 176
CanogaOS Command Reference Command Syntax ethernet oam link-monitor on no ethernet oam link-monitor on on Link monitoring is turned on for the interface Command Mode Interface mode Default When link monitor is supported, link monitoring is automatically turned on. Examples Switch # configure terminal Switch (config)# interface eth-0-1 Switch (config-if)# ethernet oam link-monitor on 11.6 ethernet oam link-monitor supported Use this command to configure link monitoring on an interface.
PAGE 177
CanogaOS Command Reference Command Syntax ethernet oam link-monitor frame threshold high HIGH_THRES|none low LOW_THRES window WINDOW no ethernet oam link-monitor frame threshold high|low|window none No high threshold value is set HIGH_THRES Value of the high threshold for errored frames in the range of <1-65535 LOW_THRES Value of the low threshold for errored frames in the range <0-65535> WINDOW Size of frame event window, expressed in milliseconds, in multiples of 100, in the range <100-600> s Command Mo
PAGE 178
CanogaOS Command Reference WINDOW Window for frame-seconds events, in milliseconds, in multiples of 100, in the range <100-900>. Command Mode Interface mode Default The default value for high threshold is none, meaning that no high threshold is configure. The default value for the low threshold is 1. The default value of frame event window is 1000.
PAGE 179
CanogaOS Command Reference 11.10 ethernet oam link-monitor remote-failure Use this command to define action when remote failure is detected. Use no form of the command to reset the action. .
PAGE 180
CanogaOS Command Reference Command Mode Interface mode Default The default state for the remote loopback is not supported. If a timeout is not configured, the local DTE remains in remote loopback state until the remote DTE responds or the user stops remote loopback administratively. Examples Switch# configure terminal Switch(config)# interface eth-0-1 Switch(config-if)# ethernet oam remote-loopback supported Switch(config-if)# ethernet oam remote-loopback 2 11.
PAGE 181
CanogaOS Command Reference Use this command to stop an Ethernet OAM remote loopback mechanism. Usage Use this command to stop an Ethernet OAM remote loopback mechanism. Examples Switch# configure terminal Switch# ethernet oam remote-loopback stop interface eth-0-9 11.14 ethernet oam timeout Use this command to reset the LOCAL_LOST_LINK_TIMER and start an Ethernet OAM discovery process. Use the no form of the command to reset to the default value. .
PAGE 182
CanogaOS Command Reference Usage The following sample output from this command displays ethenet oam adminstrative and operation configurations for local and remote DTE Example Switch1# show ethernet oam discovery interface eth-0-1 11.
PAGE 183
CanogaOS Command Reference 12 IP Addressing Commands 12.1 ip address To set a primary or secondary IP address for an interface, use the ip address command in interface configuration mode. To remove an IP address or disable IP processing, use the no form of this command. Command Syntax ip address {address wildcard-mask | address/prefix-length} [secondary] address IPv4 address. wildcard-mask Mask for the associated IP subnet.. prefix-length Prefix length of the address.
PAGE 184
CanogaOS Command Reference Two subnets of a single network might otherwise be separated by another network. This situation is not permitted when subnets are in use. In these instances, the first network is extended, or layered on top of the second network using secondary addresses. Examples In the following example, 10.108.1.27 is the primary address and 192.31.7.17 and 192.31.8.17 are secondary addresses for eth-0-1: Switch(config)# interface eth-0-1 Switch(config-if)# ip address 10.108.1.27 255.255.
PAGE 185
CanogaOS Command Reference mode. To let switch select the router ID automatically, use the no form of this command. Command Syntax router-id ip-address ip-address Router ID in IP address format. Default No router ID is defined. Command Mode Global configuration Usage You can configure an arbitrary value in the IP address format for each switch. However, each router ID must be unique. Examples The following example specifies a fixed router-id: Switch(config)# router-id 1.1.1.
PAGE 186
CanogaOS Command Reference 12.5 ip route To establish static routes, use the ip route command in global configuration mode. To remove static routes, use the no form of this command. Command Syntax ip route [vrf name] {prefix mask | prefix/prefix-length} ip-address [distance] vrf name VRF instance name. prefix IP route prefix for the destination. mask Prefix mask for the destination. prefix-length Prefix length for the destination.
PAGE 187
CanogaOS Command Reference prefix prefix-length IP route prefix. Prefix length for the route. protocol (Optional) The name of a routing protocol, or the keyword connected, static, or summary. If you specify a routing protocol, use one of the following keywords: bgp, ospf, and rip. Command Mode User EXEC Privileged EXEC Usage You can display all active dynamic static routes with both the show ip route and show ip route static commands after these active routes are added in the main routing table.
PAGE 188
CanogaOS Command Reference vrf name VRF instance name. protocol (Optional) The name of a routing protocol, or the keyword connected, or static. If you specify a routing protocol, use one of the following keywords: bgp, ospf, and rip. Command Mode User EXEC Privileged EXEC Usage You can display all active dynamic static routes with both the show ip route database and show ip route database static commands after these active routes are added in the Routing Information Base (RIB).
PAGE 189
CanogaOS Command Reference vrf name VRF instance name. protocol (Optional) The name of a routing protocol. If you specify a routing protocol, use one of the following keywords: bgp, ospf, and rip. Command Mode User EXEC Privileged EXEC Usage The information displayed by the show ip protocols command is useful in debugging routing operations.
PAGE 190
CanogaOS Command Reference 13 ARP Commands 13.1 arp To add a permanent entry in the Address Resolution Protocol (ARP) cache, use the arp command in global configuration mode. To remove an entry from the ARP cache, use the no form of this command. Command Syntax arp [vrf vrf-name] ip-address hardware-address no arp [vrf vrf-name] ip-address ip-address IP address in four-part dotted decimal format corresponding to the local data-link address. vrf vrf-name Virtual Routing and Forwarding (VRF) instance.
PAGE 191
CanogaOS Command Reference arp timeout seconds no arp timeout seconds Time (in seconds) that an entry remains in the ARP cache. Default 3600 seconds (1 hour) Command Mode Interface configuration Usage This command is ignored when issued on interfaces that do not use ARP. The show interface EXEC command displays the ARP timeout value.
PAGE 192
CanogaOS Command Reference Usage This command updates the dynamically learned IP address and MAC address mapping information in the ARP table to ensure the validity of those entries. If the refresh operation encounters any stale entries (dynamic ARP entries that have expired but have not yet been aged out by an internal, timer-driven process), those entries are aged out of the ARP table immediately as opposed to at the next refresh interval.
PAGE 193
CanogaOS Command Reference Internet 10.0.20.254 - 0000.5e00.0101 eth-0-10 Related Commands arp 13.5 show ip arp summary To display the total number of Address Resolution Protocol (ARP) table entries, the number of ARP table entries for each ARP entry mode, and the number of ARP table entries for each interface on the router, use the show ip arp summary command in privileged EXEC mode.
PAGE 194
CanogaOS Command Reference 14 RIP Commands 14.1 default-information originate (RIP) To generate a default route into Routing Information Protocol (RIP), use the Default-information originate command in router configuration mode. To disable this feature, use the no form of this command. Command Syntax default-information originate no default-information originate Default This command is disabled by default.
PAGE 195
CanogaOS Command Reference Default Built-in, automatic metric translations, as appropriate for each routing protocol. Command Mode Router configuration Usage The Default-metric command is used in conjunction with the redistribute router configuration command to cause the current routing protocol to use the same metric value for all redistributed routes. A default metric helps solve the problem of redistributing routes with incompatible metrics.
PAGE 196
CanogaOS Command Reference Command Mode Router configuration Usage Route Source Default Distance Connected interface 0 Static route 1 External Border Gateway Protocol (eBGP) 20 Open Shortest Path First (OSPF) 110 Routing Information Protocol (RIP) 120 Internal BGP 200 Unknown 255 An administrative distance is a rating of the trustworthiness of a routing information source, such as an individual switch or a group of switches.
PAGE 197
CanogaOS Command Reference Default No authentication is provided for RIP packets. Command Mode Interface configuration Usage If neither key chain is configured with the key-chain command nor string is configured with the authentication string command, no authentication is performed on the interface (not even the default authentication). Key chain and authentication string can not be configured on the same interface. If you want configure one, make sure the other is not configured.
PAGE 198
CanogaOS Command Reference Switch(config-if)# ip rip authentication mode md5 Related Commands ip rip authentication key-chain 14.6 ip rip receive version To specify a Routing Information Protocol (RIP) version to receive on an interface basis, use the ip rip receive version command in interface configuration mode. To follow the global version rules, use the no form of this command.
PAGE 199
CanogaOS Command Reference ip rip receive-packet no ip rip receive-packet Default This command is enabled by default. Command Mode Interface configuration Usage Use this command to enable or disable the capability of receiving RIP packets, whether the network of this interface is added into RIP or not. Examples The following example enables the reception of RIP packets: Switch(config-if)# ip rip receive-packet Related Commands ip rip receive version 14.
PAGE 200
CanogaOS Command Reference Examples The following example configures the interface to send both RIP Version 1 and Version 2 packets: Switch(config-if)# ip rip send version 1 2 Related Commands ip rip receive version 14.9 ip rip send-packet To enable the interface to send Routing Information Protocol (RIP) packets, use the ip rip send-packet command in interface configuration mode. To disable to send RIP packets, use the no form of this command.
PAGE 201
CanogaOS Command Reference ip rip split-horizen [poisoned] no ip rip split-horizen poisoned Split horizon with poisoned reverse. Default This command is enabled with poisoned reverse by default. Command Mode Interface configuration Usage In general, changing the state of the default for the ip rip split-horizon command is not recommended, unless you are certain that your application requires a change in order to properly advertise routes.
PAGE 202
CanogaOS Command Reference Examples The following example defines RIP as the routing protocol to be used on all interfaces connected to networks 10.99.0.0/16 and 192.168.7.0/24: router rip network 10.99.0.0/16 network 192.168.7.0/24 ! Related Commands router rip 14.12 neighbor (RIP) To define a neighboring switch with which to exchange routing information, use the neighbor command in router configuration mode. To remove an entry, use the no form of this command.
PAGE 203
CanogaOS Command Reference Related Commands router rip 14.13 offset-list (RIP) To add an offset to incoming and outgoing metrics to routes learned via Routing Information Protocol (RIP), use the offset-list command in router configuration mode. To remove an offset list, use the no form of this command. Command Syntax offset-list access-list-name {in | out} metric-offset [interface-id] no offset-list {in | out} [interface-id] access-list-name Named access list to be applied.
PAGE 204
CanogaOS Command Reference Command Syntax passive-interface interface-id no passive-interface interface-id interface-id The interface name. Default Routing updates are sent on the interface. Command Mode Router configuration Usage If you disable the sending of routing updates on an interface, the particular subnet will continue to be advertised to other interfaces, and updates from other switches on that interface continue to be received and processed.
PAGE 205
CanogaOS Command Reference Command Mode Router configuration Usage The metric value specified in the redistribute command supersedes the metric value specified using the Default-metric command. Examples The following example redistribute the static routes into RIP with metric 10: router rip network 10.108.0.0/16 redistribute static metric 10 ! Related Commands default-metric 14.
PAGE 206
CanogaOS Command Reference 14.17 timers basic (RIP) To adjust Routing Information Protocol (RIP) network timers, use the timers basic command in router configuration mode. To restore the default timers, use the no form of this command. Command Syntax timers basic update timeout invalid no timers basic update Rate (in seconds) at which updates are sent. This is the fundamental timing parameter of the routing protocol. The default is 30 seconds.
PAGE 207
CanogaOS Command Reference 14.18 show ip rip database To display summary address entries in the Routing Information Protocol (RIP) routing database entries if relevant are routes being summarized based upon a summary address, use the show ip rip database command in privileged EXEC mode. Command Syntax show ip rip database Command Mode Privileged EXEC Usage Summary address entries will appear in the database only if relevant child routes are being summarized.
PAGE 208
CanogaOS Command Reference Usage Examples The following is sample output from the show ip rip interface command. Switch# show ip rip interface eth-0-1 eth-0-1 is up, line protocol is up Routing Protocol: RIP Receive RIP packets Send RIP packets Passive interface: Disabled Split horizon: Enabled with Poisoned Reversed IP interface address: 1.1.1.1/24 Related Commands show ip rip database 14.
PAGE 209
CanogaOS Command Reference Related Commands ip rip receive version ip rip send version 14-16
PAGE 210
CanogaOS Command Reference 15 OSPF Commands 15.1 area authentication To enable authentication for an Open Shortest Path First (OSPF) area, use the area authentication command in router configuration mode. To remove an authentication specification of an area or a specified area from the configuration, use the no form of this command. Command Syntax area area-id authentication [message-digest] no area area-id authentication area-id Identifier of the area for which authentication is to be enabled.
PAGE 211
CanogaOS Command Reference no switchport ip address 10.56.0.201/16 ip ospf authentication-key ijklmnop ! router ospf 201 network 10.0.0.0 0.255.255.255 area 10.0.0.0 network 192.168.0.0/16 area 0 area 10.0.0.0 authentication area 0 authentication Related Commands ip ospf authentication-key 15.2 area Default-cost To specify a cost for the default summary route sent into a stub or not-so-stubby area (NSSA), use the area Default-cost command in router configuration mode.
PAGE 212
CanogaOS Command Reference ip address 10.56.0.201/16 ! router ospf 201 network 10.0.0.0/8 area 10.0.0.0 area 10.0.0.0 stub area 10.0.0.0 default-cost 20 Related Commands area authentication area stub 15.3 area filter-list To filter prefixes advertised in type 3 link-state advertisements (LSAs) between Open Shortest Path First (OSPF) areas of an Area Border Router (ABR), use the area filter-list command in router configuration mode. To change or cancel the filter, use the no form of this command.
PAGE 213
CanogaOS Command Reference been configured for this area, type 3 LSAs that correspond to the area range are sent to all other areas, only if at least one prefix in the area range matches an entry in the prefix list. If all specific prefixes are denied by the prefix list, type 3 LSAs that correspond to the area range command will not be sent to any other area. Prefixes that are not permitted by the prefix list are implicitly denied.
PAGE 214
CanogaOS Command Reference ip address 192.168.110.201/24 ! interface eth-0-2 ip address 192.168.120.201/24 ! router ospf 201 network 192.168.110.0/24 area 0 area 10.0.0.0 range 10.0.0.0/8 area 0 range 192.168.110.0 255.255.0.0 Related Commands 15.5 area stub To define an area as a stub area, use the area stub command in router configuration mode. To disable this function, use the no form of this command.
PAGE 215
CanogaOS Command Reference The following example assigns a default cost of 20 to stub network 10.0.0.0: interface eth-0-1 ip address 10.56.0.201/16 ! router ospf 201 network 10.0.0.0/8 area 10.0.0.0 area 10.0.0.0 stub area 10.0.0.0 default-cost 20 Related Commands area default-cost area authentication 15.6 area virtual-link To define an Open Shortest Path First (OSPF) virtual link, use the area virtual-link command in router configuration mode. To remove a virtual link, use the no form of this command.
PAGE 216
CanogaOS Command Reference transmission. The default value is 1 second. dead-interval seconds (Optional) Time (in seconds) that hello packets are not seen before a neighbor declares the router down. The dead interval is an unsigned integer value. The default is four times the hello interval, or 40 seconds. As with the hello interval, this value must be the same for all routers and access servers attached to a common network. Default area-id: No area ID is predefined. router-id: No router ID is predefined.
PAGE 217
CanogaOS Command Reference no auto-cost reference-bandwidth reference-bandwidth mbps Rate in Mbps (bandwidth). The range is from 1 to 4294967; the default is 100. Default 100 Mbps Command Mode Router configuration Usage The value set by the ip ospf cost command overrides the cost resulting from the auto-cost command. Examples The following example changes the cost of the cost link to 1GBps. router ospf 1 auto-cost reference-bandwidth 1000 Related Commands ip ospf cost 15.
PAGE 218
CanogaOS Command Reference 15.9 compatible rfc1583 To restore the method used to calculate summary route costs per RFC 1583, use the compatible rfc1583 command in router configuration mode. To disable RFC 1583 compatibility, use the no form of this command. Command Syntax compatible rfc1583 no compatible rfc1583 Default Not compatible with RFC 1583.
PAGE 219
CanogaOS Command Reference configuration command, the default metric value is 10. The value used is specific to the protocol. metric-type type-value (Optional) External link type associated with the default route advertised into the OSPF routing domain. It can be one of the following values: 1—Type 1 external route 2—Type 2 external route The default is type 2 external route. Default This command is disabled by default.
PAGE 220
CanogaOS Command Reference Built-in, automatic metric translations, as appropriate for each routing protocol. The metric of redistributed connected and static routes is set to 0. Command Mode Router configuration Usage The Default-metric command is used in conjunction with the redistribute router configuration command to cause the current routing protocol to use the same metric value for all redistributed routes. A default metric helps solve the problem of redistributing routes with incompatible metrics.
PAGE 221
CanogaOS Command Reference dist2: 110 dist3: 110 Command Mode Router configuration Usage You may specify one of the keywords or use distance only to apply to all types of routes. The distance command allows you to set a distance for an entire group of routes, rather than a specific route that passes an access list.
PAGE 222
CanogaOS Command Reference Examples In the following example, OSPF process 1 is configured to accept two networks, network 20.0.0.0 and network 10.108.0.0: ip access-list acl1 permit any 20.0.0.0 0.0.255.255 any permit any 10.108.0.0 0.0.255.255 any deny any any any router ospf 1 network 10.108.0.0/16 area 1 distribute-list acl1 in Related Commands ip access-list 15.
PAGE 223
CanogaOS Command Reference Switch(config-if)# ip ospf authentication message-digest Related Commands area authentication ip ospf authentication-key ip ospf message-digest-key 15.15 ip ospf authentication-key To assign a password to be used by neighboring routers that are using the Open Shortest Path First (OSPF) simple password authentication, use the ip ospf authentication-key command in interface configuration mode. To remove a previously assigned OSPF password, use the no form of this command.
PAGE 224
CanogaOS Command Reference 15.16 ip ospf cost To explicitly specify the cost of sending a packet on an interface, use the ip ospf cost command in interface configuration mode. To reset the path cost to the default value, use the no form of this command. Command Syntax ip ospf cost interface-cost no ip ospf cost interface-cost Unsigned integer value expressed as the link-state metric. It can be a value in the range from 1 to 65535. Default No default cost is predefined.
PAGE 225
CanogaOS Command Reference Command Mode Interface configuration Usage Examples The following example prevents flooding of OSPF LSAs to broadcast, nonbroadcast, or point-to-point networks reachable through the interface eth-0-1: interface eth-0-1 ip ospf database-filter all out Related Commands 15.
PAGE 226
CanogaOS Command Reference ip ospf dead-interval 20 Related Commands ip ospf hello-interval show ip ospf interface 15.19 ip ospf disable all To disable al the OSPF functionality on an interface, use the ip ospf disable all command in interface configuration mode. To restore the OSPF functionality, use the no form of this command. Command Syntax ip ospf disable all no ip ospf disable all Default OSPF functionality is enabled.
PAGE 227
CanogaOS Command Reference Default 10 seconds (Ethernet) 30 seconds (nonbroadcast) Command Mode Interface configuration Usage This value is advertised in the hello packets. The smaller the hello interval, the faster topological changes will be detected, but more routing traffic will ensue. This value must be the same for all routers and access servers on a specific network.
PAGE 228
CanogaOS Command Reference interface eth-0-11 ip ospf message-digest-key 100 md5 OLD You change the configuration to the following: interface eth-0-1 ip ospf message-digest-key 101 md5 NEW The system assumes its neighbors do not have the new key yet, so it begins a rollover process. It sends multiple copies of the same packet, each authenticated by different keys.
PAGE 229
CanogaOS Command Reference Command Mode Interface configuration Usage Examples The following example sets a new mtu value when sending OSPF DD packets: interface eth-0-1 ip ospf mtu 1280 Related Commands ip ospf mtu-ignore 15.23 ip ospf mtu-ignore To disable Open Shortest Path First (OSPF) maximum transmission unit (MTU) mismatch detection on receiving Database Descriptor (DBD) packets, use the ip ospf mtu-ignore command in interface configuration mode.
PAGE 230
CanogaOS Command Reference 15.24 ip ospf network To configure the Open Shortest Path First (OSPF) network type to a type other than the default for a given medium, use the ip ospf network command in interface configuration mode. To return to the default value, use the no form of this command. Command Syntax ip ospf network {broadcast | non-broadcast | point-to-multipoint [non-broadcast] | point-to-point} no ip ospf network broadcast Sets the network type to broadcast.
PAGE 231
CanogaOS Command Reference no switchport ip address 192.168.77.17/24 ip ospf network non-broadcast Related Commands neighbor (OSPF) 15.25 ip ospf priority To set the router priority, which helps determine the designated router for this network, use the ip ospf priority command in interface configuration mode. To return to the default value, use the no form of this command.
PAGE 232
CanogaOS Command Reference 15.26 ip ospf retransmit-interval To specify the time between link-state advertisement (LSA) retransmissions for adjacencies belonging to the interface, use the ip ospf retransmit-interval command in interface configuration mode. To return to the default value, use the no form of this command. Command Syntax ip ospf retransmit-interval seconds no ip ospf retransmit-interval seconds Time (in seconds) between retransmissions.
PAGE 233
CanogaOS Command Reference Default 1 second Command Mode Interface configuration Usage Link-state advertisements (LSAs) in the update packet must have their ages incremented by the amount specified in the seconds argument before transmission. The value assigned should take into account the transmission and propagation delays for the interface. If the delay is not added before transmission over a link, the time in which the LSA propagates over the link is not considered.
PAGE 234
CanogaOS Command Reference the number argument are the only options that are applicable. This keyword does not apply to nonbroadcast multiaccess (NBMA) networks. Default No configuration is specified. Command Mode Router configuration Usage One neighbor entry must be included in the switch configuration for each known nonbroadcast network neighbor. The neighbor address must be on the primary address of the interface.
PAGE 235
CanogaOS Command Reference Default This command is disabled by default. Command Mode Router configuration Usage The ip-address and wildcard-mask arguments together allow you to define one or multiple interfaces to be associated with a specific OSPF area using a single command. Using the wildcard-mask argument allows you to define one or multiple interfaces to be associated with a specific OSPF area using a single command.
PAGE 236
CanogaOS Command Reference Router configuration Usage If you disable the sending of routing updates on an interface, the particular subnet will continue to be advertised to other interfaces, and updates from other switches on that interface continue to be received and processed. Examples The following example sets the interface eth-0-1 as passive: router ospf 200 network 10.108.0.0/16 area 0 passive-interface eth-0-1 ! Related Commands router ospf 15.
PAGE 237
CanogaOS Command Reference Router configuration Usage The metric value specified in the redistribute command supersedes the metric value specified using the Default-metric command. Examples The following example redistribute the static routes into OSPF with metric 10: router ospf 119 network 10.108.0.0/16 redistribute static metric 10 ! Related Commands default-metric 15.32 router-id (OSPF) To use a fixed router ID, use the router-id command in router configuration mode.
PAGE 238
CanogaOS Command Reference Related Commands clear ip ospf router ospf 15.33 router ospf To configure an Open Shortest Path First (OSPF) routing process, use the router ospf command in global configuration mode. To terminate an OSPF routing process, use the no form of this command. Command Syntax router ospf [process-id [vrf vpn-name]] no router ospf [process-id] process-id Internally used identification parameter for an OSPF routing process. It is locally assigned and can be any positive integer.
PAGE 239
CanogaOS Command Reference summary-address prefix/prefix-length [not-advertise] no summary-address prefix/prefix-length [not-advertise] prefix IP route prefix for the destination. prefix-length Prefix length for the network. not-advertise (Optional) Suppress routes that match the specified prefix/mask pair. This keyword applies to OSPF only. Default This command is disabled by default. Command Mode Router configuration Usage Routes learned from other routing protocols can be summarized.
PAGE 240
CanogaOS Command Reference Examples The following is sample output from the show ip ospf command when entered without a specific OSPF process ID: Switch# show ip ospf Routing Process "ospf 0" with ID 10.0.0.
PAGE 241
CanogaOS Command Reference 15.36 show ip ospf border-routers To display the internal Open Shortest Path First (OSPF) routing table entries to an Area Border Router (ABR) and Autonomous System Boundary Router (ASBR), use the show ip ospf border-routers command in privileged EXEC mode.
PAGE 242
CanogaOS Command Reference show ip ospf [process-id] database [router] [adv-router [ip-address]] show ip ospf [process-id] database [router] [self-originate] [link-state-id] show ip ospf [process-id] database [self-originate] [link-state-id] show ip ospf [process-id] database [summary] [link-state-id] show ip ospf [process-id] database [summary] [link-state-id] [adv-router [ip-address]] show ip ospf [process-id] database [summary] [link-state-id] [self-originate] [link-state-id] process-id (Optional) Inter
PAGE 243
CanogaOS Command Reference 15.38 show ip ospf interface To display Open Shortest Path First (OSPF)-related interface information, use the show ip ospf interface command in EXEC mode. Command Syntax show ip ospf interface [interface-name] interface-name (Optional) Interface name. If the interface-name argument is included, only information for the specified interface is included.
PAGE 244
CanogaOS Command Reference neighbor-id (Optional) Neighbor ID. detail (Optional) Displays all neighbors given in detail (lists all neighbors). Command Mode Privileged EXEC Usage Examples The following is sample output from the show ip ospf neighbor command showing a single line of summary information for each neighbor: Switch# show ip ospf neighbor Neighbor ID Pri State 10.199.199.137 Dead Time Address 1 FULL/DR 0:00:31 Interface 192.168.80.37 eth-0-1 172.16.48.1 1 FULL/DROTHER 0:00:33 172.
PAGE 245
CanogaOS Command Reference Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5 Hello due in inactive Adjacency state Down Related Commands 15.41 timers spf To turn on Open Shortest Path First (OSPF) shortest path first (SPF) throttling, use the timers spf command in router configuration mode. To turn off SPF throttling, use the no form of this command. Command Syntax timers spf spf-start spf-hold no timers spf spf-start Indicates the initial SPF schedule delay in seconds.
PAGE 246
CanogaOS Command Reference 16 BGP Commands 16.1 address-family Use this command to enter the IPv4, IPv6 or VPNv4 address-family command mode. Command Syntax address-family ipv4 (multicast|unicast|vrf) address-family ipv6 (unicast) address-family vpnv4 (unicast) vpnv4 Configures sessions for VPN-IPv4 prefixes. This parameter takes an IPv4 style address: A.B.C.D. ipv6 Configures sessions for VPN-IPv6 prefixes. This parameter takes an IPv6 style address: X:X::X:X. multicast Specifies multicast prefixes.
PAGE 247
CanogaOS Command Reference 16.2 aggregate-address Use this command to configure BGP aggregate entries. Use the no parameter with this command to disable this function. Command Syntax (no) aggregate-address IPADDRESS {summary-only|as-set} IPADDRESS = A.B.C.D/M Specifies the aggregate prefix. summary-only Filters more specific routes from updates. as-set Generates AS set path information Default Disabled Command Mode Router mode Usage Aggregates are used to minimize the size of routing tables.
PAGE 248
CanogaOS Command Reference Command Mode Router mode Usage Multi Exit Discriminator (MED) is used in best path selection by BGP. MED is compared after BGP attributes weight, local preference, AS-path and origin have been compared and are equal. MED comparison is done only among paths from the same autonomous system (AS). Use bgp always-comparemed command to allow comparison of MEDs from different ASs. The MED parameter is used to select the best path. A path with lower MED is preferred.
PAGE 249
CanogaOS Command Reference Use the no parameter with this command to revert the selection and ignore AS confederation path length in the BGP best path selection. Command Syntax (no) bgp bestpath compare-confed-aspath Default BGP receives routes with identical eBGP paths from eBGP peers and selects the first route received as the best path. Command Mode Router mode Usage This command specifies that the AS confederation path length must be used, when available, in the BGP best path decision process.
PAGE 250
CanogaOS Command Reference address on the router, with preference given to loopback addresses. Router-id can be manually set by using the bgp router-id command. Examples Switch# configure terminal Switch(config) router bgp 100 Switch(config-router) bgp bestpath compare-routerid Related Commands show ip bgp, show ip bgp neighbors 16.7 bgp bestpath med Use this command to specify Multi Exit Discriminator (MED) attribute comparison.
PAGE 251
CanogaOS Command Reference Related Commands bgp-always-compare-med, bgp bestpath as-path ignore, bgp deterministic-med 16.8 bgp client-to-client reflection Use this command to restore route reflection from a BGP route reflector to clients. Use the no parameter with this command to turn off client-to-client reflection.
PAGE 252
CanogaOS Command Reference A.B.C.D Route Reflector Cluster-id in IP address format <1-4294967295> Route Reflector cluster-id as a 32 bit quantity Command Mode Router mode Usage A cluster includes route reflectors and its clients. Usually, each cluster is identified by the router ID of its single route reflector but to increase redundancy sometimes a cluster may have more than one route reflector. All router reflectors in such a cluster are then identified by a cluster ID.
PAGE 253
CanogaOS Command Reference 16.11 bgp confederation peers Use this command to configure the Autonomous Systems (AS) that belong to the confederation. Use the no parameter with this command to remove an autonomous system from the confederation. Command Syntax (no) bgp confederation peers .ASN ASN <1-65535> AS numbers of eBGP peers that are under same confederation but in a different sub-AS Command Mode Router mode Usage A confederation allows an AS to be divided into several ASs.
PAGE 254
CanogaOS Command Reference the route is suppressed. The default suppress limit is 2000. MAXSUPPRESS <1-255> Specifies the max-suppress-time. Maximum time that a dampened route is suppressed. The default max-suppress value is 4 times the half-life time (60 minutes). UNREACHTIME <1-45> Specifies the un-reachability half-life time for penalty, in minutes. ROUTEMAP = route-map WORD Route-map to specify criteria for dampening. WORD Specify the name of the route-map.
PAGE 255
CanogaOS Command Reference Switch(config) router bgp 100 Switch(config-router) bgp default ipv4-unicast 16.14 bgp default local-preference Use this command to change the default local preference value. Use the no parameter with this command to revert to the default setting. Command Syntax (no) bgp default local-preference PREF_VALUE PREF_VALUE = <0-4294967295> Configure default local preference value. The default local preference value is 100.
PAGE 256
CanogaOS Command Reference Router mode Usage Multi Exit Discriminator (MED) is used in best path selection by BGP. MED is compared after BGP attributes weight, local preference, AS-path and origin have been compared and are equal. Enable bgp deterministic med command on all routers in the local AS, for a correct comparison result. After enabling this command, all paths for the same prefix are grouped together and arranged according to their MED value. Based on this comparison, the best path is then chosen.
PAGE 257
CanogaOS Command Reference 16.17 bgp fast-external-failover Use this command to reset a BGP session immediately, if the interface used for BGP connection goes down. Use the no parameter with this command to disable this feature. Command Syntax (no) bgp fast-external-failover Default Enabled Command Mode Router mode Example Switch# configure terminal Switch(config)# router bgp 100 Switch(config-router)# bgp fast-external-failover 16.
PAGE 258
CanogaOS Command Reference • Neighbor deleted • Member added to peer group • Administrative shutdown • Remote AS changed • RR client configuration modification • Soft reconfiguration modification Example Switch# configure terminal Switch(config)# router bgp 100 Switch(config-router)# bgp log-neighbor-changes 16.19 bgp router-id Use this command to configure the router identifier. Use the no parameter with this command to disable this function Command Syntax (no) bgp router-id ROUTERID ROUTERID = A.B.C.
PAGE 259
CanogaOS Command Reference TIME= <0-60> Scanning interval in seconds. The default scanning interval is 60 seconds. Command Mode Router mode Usage Use this command to configure scanning intervals of BGP routers. This interval is the period after which router checks the validity of the routes in its database. To disable BGP scanning, set the scan time interval to 0 seconds. Examples Switch# configure terminal Switch(config) router bgp 100 Switch(config-router) bgp scan-time 10 16.
PAGE 260
CanogaOS Command Reference clear bgp ipv6 (A.B.C.D|X:X::X:X) (IN|out|SOFT) A.B.C.D Specifies the IPv4 address of the BGP route to be cleared. X:X::X:X Specifies the IPv6 address of the BGP route to be cleared. IN = in (prefix-filter) in = Indicates that incoming advertised routes will be cleared. prefix-filters = Pushes out prefix-list ORF and does inbound soft reconfiguration.
PAGE 261
CanogaOS Command Reference Command Syntax clear bgp external (IN|out|SOFT) clear bgp ipv6 external (IN|out|SOFT) external = clears all external peers IN = in (prefix-filter) in = Indicates that incoming advertised routes will be cleared. prefix-filters = Pushes out prefix-list ORF and does inbound soft reconfiguration.
PAGE 262
CanogaOS Command Reference Command Syntax clear ip bgp * (IN|out|SOFT|) clear ip bgp * ipv4 PREFIX ROUTES clear ip bgp * vpnv4 unicast ROUTES clear ip bgp * vrf * = clears all bgp peers ipv4 = clears all IPv4 address family peers vpnv4 = clears all VPNv4 address family peers ROUTES = IN|out|soft IN = in (prefix-filter) in = Indicates that incoming advertised routes will be cleared prefix-filter = Pushes out prefix-list ORF and does inbound soft reconfiguration out = Indicates that outgoing advertised routes
PAGE 263
CanogaOS Command Reference out = Indicates that outgoing advertised routes will be cleared. SOFT = soft (in|out) Indicates that both incoming and outgoing routes will be cleared PREFIX = unicast|multicast unicast = address family modifier multicast = address family modifier Command Mode Privileged Exec mode Examples Switch# clear ip bgp 10.10.0.12 soft Switch# clear ip bgp 10.10.0.10 vpnv4 unicast out Switch# clear ip bgp 3ffe::8 16.
PAGE 264
CanogaOS Command Reference clear ip bgp ipv4 PREFIX flap-statistics (A.B.C.D|A.B.C.D/M) A.B.C.D Specifies the IPv4 address for which BGP dampening is to be cleared. A.B.C.D/M Specifies the IPv4 address with mask for which BGP dampening is to be cleared. ipv4 = clears all IPv4 address family peers PREFIX = unicast|multicast unicast = address family modifier multicast = address family modifier Command Mode Privileged Exec mode Examples Switch# clear ip bgp flap-statistics 10.10.0.
PAGE 265
CanogaOS Command Reference 16.31 clear ip bgp external Use this command to reset a BGP connection for all external peers.
PAGE 266
CanogaOS Command Reference unicast = address family modifier multicast = address family modifier Command Mode Privileged Exec mode Examples Switch# clear ip bgp peer-group Peer1 out Switch# clear ip bgp peer-group mypeer ipv4 unicast in prefix-filter 16.33 clear ip bgp vrf Use this command to reset the specified VPN Routing /Forwarding Instance for BGP connections. Command Syntax clear ip bgp (A.B.C.D)|*) vrf WORD (out|in|SOFT) WORD Specifies the name of the VRF A.B.C.
PAGE 267
CanogaOS Command Reference debug bgp (all|dampening|events|filters|fsm|keepalives|mpls|nsm|UPDATES) no debug all bgp no debug bgp (all|dampening|events|filters|fsm|keepalives|mpls|nsm|UPDATES) all Used with the no form exclusively; turns off all debugging for BGP dampening Specifies debugging for BGP dampening. events Specifies debugging for BGP events. filters Specifies debugging for BGP filters. fsm Specifies debugging for BGP Finite State Machine (FSM).
PAGE 268
CanogaOS Command Reference Command Mode Router mode Usage Use this command to set the administrative distance for BGP. This distance is a rating of trustworthiness of a router. The higher the distance the lower the trust rating. The administrative distance can be set for external, internal and local routes. External paths are routes learned from a neighbor out of the AS. The internal routes are routes learned from another router within the same AS.
PAGE 269
CanogaOS Command Reference 16.37 ip as-path access-list Use this command to define a BGP Autonomous System (AS) path access list. Use the no parameter with this command to disable use of the access list. Command Syntax (no) ip as-path access-list LISTNAME (deny|permit) .LINE LISTNAME Specifies the name of the access list. deny (Optional) Denies access to matching conditions. permit (Optional) Permits access to matching conditions. .LINE Specifies a regular expression to match the BGP AS paths.
PAGE 270
CanogaOS Command Reference no-export Specifies routes not to be advertised outside of Autonomous System boundary. Command Mode Configure mode Usage Use the community-lists to specify BGP community attributes. The community attribute is used for implementing policy routing. It is an optional, transitive attribute and facilitates transfer of local policies through different autonomous systems. It includes community values that are 32 bits long.
PAGE 271
CanogaOS Command Reference community attributes in a specified format and not with regular expressions. The expanded community-list defines the communities attributes with regular expressions. Examples Switch# configure terminal Switch(config)# ip community-list 125 permit 6789906 Switch(config)# ip community-list expanded CLIST permit .* Related Commands ip community-list, ip community-list standard 16.40 ip community-list standard Use this command to add a standard community-list entry.
PAGE 272
CanogaOS Command Reference community-list is compiled into binary format and is directly compared with the BGP communities attribute in the BGP updates. The comparison is faster than the expanded community-list. Any community value that does not match the standard community value is automatically treated as expanded.
PAGE 273
CanogaOS Command Reference 16.42 ip extcommunity-list standard Use this command to create and delete a standard extended community list. Use the no parameter with this command to delete the extended community-list entry. Command Syntax (no) ip extcommunity-list STANDARD deny|permit .
PAGE 274
CanogaOS Command Reference Switch# configure terminal Switch(config)# router bgp 100 Switch(config-router)# mpls-resolution 16.44 neighbor activate Use this command to enable the exchange of the specified AF routes with a neighboring router. Use the no parameter with this command to disable exchange of information with a neighbor. Command Syntax (no) neighbor NEIGHBORID activate NEIGHBORID = A.B.C.D|X:X::X:X|TAG A.B.C.D Specifies the address of the BGP neighbor in IPv4 format.
PAGE 275
CanogaOS Command Reference NEIGHBORID = A.B.C.D|X:X::X:X|TAG A.B.C.D Specifies the address of the BGP neighbor in IPv4 format. X:X::X:X Specifies the address of the BGP neighbor in IPv6 format. TAG Name of an existing peer-group. For information on how to create peer groups, refer to the neighbor peer-group and neighbor remote-as commands. When this parameter is used with a command, the command applies on all peers in the specified group. .
PAGE 276
CanogaOS Command Reference Switch(config-router)# neighbor 10.10.0.75 attribute-unchanged as-path med 16.47 neighbor capability dynamic Use this command to enable the dynamic capability for a specific peer. Use the no parameter with this command to disable the dynamic capability. Command Syntax (no) neighbor NEIGHBORID capability dynamic NEIGHBORID = A.B.C.D|X:X::X:X|TAG A.B.C.D Specifies the address of the BGP neighbor in IPv4 format. X:X::X:X Specifies the address of the BGP neighbor in IPv6 format.
PAGE 277
CanogaOS Command Reference neighbor peer-group and neighbor remote-as commands. When this parameter is used with a command, the command applies on all peers in the specified group. orf Advertises ORF capability to its neighbors Both Indicates that the local router can send ORF entries to its peer as well as receive ORF entries from its peer.
PAGE 278
CanogaOS Command Reference 16.50 neighbor default-originate Use this command to allow a BGP local router to send the default route 0.0.0.0 to a neighbor for use as a default route. Use the no parameter with this command to send no route as a default. Command Syntax (no) neighbor NEIGHBORID default-originate (ROUTEMAP) NEIGHBORID = A.B.C.D|X:X::X:X|TAG A.B.C.D Specifies the address of the BGP neighbor in IPv4 format. X:X::X:X Specifies the address of the BGP neighbor in IPv6 format.
PAGE 279
CanogaOS Command Reference Command Mode Router mode and Address Family ipv4 vrf mode (if BGP/VPN is supported) Examples Switch# configure terminal Switch(config)# router bgp 10 Switch(config-router)# neighbor 1.2.3.4 description Backup router for sales. 16.52 neighbor distribute-list Use this command to filter route update from a particular BGP neighbor. Use the no parameter with this command to remove an entry. Command Syntax (no) neighbor NEIGHBORID distribute-list ACCESSLISTID in|out NEIGHBORID = A.B.
PAGE 280
CanogaOS Command Reference 16.53 neighbor ebgp-multihop Use this command to accept and attempt BGP connections to external peers on indirectly connected networks. Use the no parameter with this command to return to the default. Command Syntax (no) neighbor NEIGHBORID ebgp-multihop (COUNT) NEIGHBORID = A.B.C.D|X:X::X:X|TAG A.B.C.D Specifies the address of the BGP neighbor in IPv4 format. X:X::X:X Specifies the address of the BGP neighbor in IPv6 format. TAG Name of an existing peer-group.
PAGE 281
CanogaOS Command Reference out Indicates that outgoing advertised routes will be filtered. Command Mode Router mode and Address Family mode Usage This command specifies an access list filter on updates based on the BGP autonomous system paths. Each filter is an access list based on regular expressions. Examples Switch# configure terminal Switch(config)# router bgp 10 Switch(config-router)# neighbor 10.10.0.34 filter-list out 16.
PAGE 282
CanogaOS Command Reference Switch(config-router)# neighbor 10.10.0.72 maximum-prefix 1244 warning-only 16.56 neighbor next-hop-self Use this command to configure the router as the next hop for a BGP-speaking neighbor or peer group. Use the no parameter with this command to disable this feature. Command Syntax (no) neighbor NEIGHBORID next-hop-self NEIGHBORID = A.B.C.D|X:X::X:X|TAG A.B.C.D Specifies the address of the BGP neighbor in IPv4 format.
PAGE 283
CanogaOS Command Reference specified group. Command Mode Router mode Examples Switch# configure terminal Switch(config)# router bgp 12 Switch(config-router)# neighbor 10.10.10.10 override-capability 16.58 neighbor passive Use this command to set a BGP neighbor as passive. Use the no parameter with this command to disable this function Command Syntax (no) neighbor NEIGHBORID passive NEIGHBORID = A.B.C.D|X:X::X:X|TAG A.B.C.D Specifies the address of the BGP neighbor in IPv4 format.
PAGE 284
CanogaOS Command Reference Command Mode Router mode Usage Use this command to Neighbors with the same update policies are grouped into peer groups. This facilitates the updates of various policies, such as, distribute and filter lists. The peer-group is then configured easily with any of the neighbor commands. Any changes made to the peer group affect all members. To create a peer-group use the neighbor peer-group create command and then use this command to add neighbors to the group.
PAGE 285
CanogaOS Command Reference 16.61 neighbor prefix-list Use this command to distribute BGP neighbor information as specified in a prefix list. Use the no parameter with this command to remove an entry. Command Syntax (no) neighbor NEIGHBORID prefix-list LISTNAME in|out NEIGHBORID = A.B.C.D|X:X::X:X|TAG A.B.C.D Specifies the address of the BGP neighbor in IPv4 format. X:X::X:X Specifies the address of the BGP neighbor in IPv6 format. TAG Name of an existing peer-group.
PAGE 286
CanogaOS Command Reference 16.62 neighbor remote-as Use this command to configure an internal or external BGP (iBGP or eBGP) TCP session with another router. Command Syntax neighbor NEIGHBORID remote-as ASNUM NEIGHBORID = A.B.C.D|X:X::X:X|TAG A.B.C.D Specifies the address of the BGP neighbor in IPv4 format. X:X::X:X Specifies the address of the BGP neighbor in IPv6 format. TAG Name of an existing peer-group.
PAGE 287
CanogaOS Command Reference Command Mode Router mode and Address Family (ipv4 unicast | ipv4 multicast | ipv6 | vpnv4 unicast) mode Usage The private AS numbers range from <64512-65535>. Private AS numbers are not advertised to the Internet. This command is used with external BGP peers only. The router removes the AS numbers only if the update includes private AS numbers. If the update includes both private and public AS numbers, the system treats it as an error.
PAGE 288
CanogaOS Command Reference 16.65 neighbor send-community Use this command to specify that a community attribute should be sent to a BGP neighbor. Use the no parameter with this command to remove the entry. Use the extended and no parameters to remove extended communities. Specifying no other parameter with no removes standard communities only. Command Syntax (no) neighbor NEIGHBORID send-community (both|extended|standard) NEIGHBORID = A.B.C.D|X:X::X:X|TAG A.B.C.
PAGE 289
CanogaOS Command Reference 16.66 neighbor shutdown Use this command to disable a neighbor. Use the no parameter with this command to re-enable the neighbor. Command Syntax (no) neighbor NEIGHBORID shutdown NEIGHBORID = A.B.C.D|X:X::X:X|TAG A.B.C.D Specifies the address of the BGP neighbor in IPv4 format. X:X::X:X Specifies the address of the BGP neighbor in IPv6 format. TAG Name of an existing peer-group.
PAGE 290
CanogaOS Command Reference Use this command to store updates for inbound soft reconfiguration. Soft-reconfiguration may be used in lieu of BGP route refresh capability. Using this command enables local storage of all the received routes and their attributes. This requires additional memory. When a soft reset (inbound) is done on this neighbor, the locally stored routes are reprocessed according to the inbound policy. The BGP neighbor connection is not affected.
PAGE 291
CanogaOS Command Reference TAG Name of an existing peer-group. For information on how to create peer groups, refer to the neighbor peer-group and neighbor remote-as commands. When this parameter is used with a command, the command applies on all peers in the specified group. KEEPALIVE= <0-65535> holdtime Frequency (in seconds) at which a router sends keepalive messages to its neighbor. The default is 60 seconds.
PAGE 292
CanogaOS Command Reference more-specific routes to a particular neighbor. Example Switch# configure terminal Switch(config)# router bgp 10 Switch(config-router) neighbor 10.10.0.73 unsuppress-map mymap Switch#configure terminal Switch(config)#router bgp 10 Switch(config-router)address-family ipv4 unicast Switch(config-router-af)neighbor 10.10.0.70 unsuppress-map mymap 16.71 neighbor update-source Use this command to allow internal BGP sessions to use any operational interface for TCP connections.
PAGE 293
CanogaOS Command Reference 16.72 neighbor version Use this command to configure the software to accept only a particular BGP version. Use the no parameter with this command to use the default version level of a neighbor. Command Syntax (no) neighbor NEIGHBORID version VERSION NEIGHBORID = A.B.C.D|X:X::X:X|TAG A.B.C.D Specifies the address of the BGP neighbor in IPv4 format. X:X::X:X Specifies the address of the BGP neighbor in IPv6 format. TAG Name of an existing peer-group.
PAGE 294
CanogaOS Command Reference Command Mode Router mode Usage Use this command to specify a weight value to all routes learned from a neighbor. The route with the highest weight gets preference when there are other routes on the network. Unlike the local-preference attribute, the weight attribute is relevant only to the local router. The weights assigned using the set weight command overrides the weights assigned using this command.
PAGE 295
CanogaOS Command Reference natural class boundary, and hence, is perceived as a host route, that is, 1.2.3.0/32. Switch(config)#router bgp 1 Switch(config-router)#network 1.2.3.0 Switch#show run ! router bgp 1 no synchronization network 1.2.3.0 mask 255.255.255.255 16.75 network synchronization Use this command to ensure the exact same static network prefix, specified through any of the network commands, is local or has IGP reachability (in the NSM RIB) before being introduced into the BGP RIB.
PAGE 296
CanogaOS Command Reference 16.76 synchronization Use this command to enable IGP synchronization of Internal BGP (iBGP) learned routes with the Internal Gateway Protocol (IGP) system in the router configuration mode or in the address-family configuration mode. Use the no parameter with this command to disable this function. Command Syntax (no) synchronization Default IGP synchronization is disabled.
PAGE 297
CanogaOS Command Reference Command Syntax (no) router bgp ASN ASN Specifies the Autonomous System (AS) number. Command Mode Configure mode Usage The router bgp command enables a BGP routing process. Examples Switch# configure terminal Switch(config)# router bgp 12 Switch(config-router)# 16.78 show debugging bgp Use this command to display the BGP debugging option set. Command Syntax show debugging bgp Command Mode Privileged Exec mode Examples Switch# show debugging bgp 16.
PAGE 298
CanogaOS Command Reference Command Mode Privileged Exec mode and Exec mode Examples Switch# show ip bgp 10.10.1.34/24 16.80 show ip bgp attribute-info Use this command to show internal attribute hash information. Command Syntax show ip bgp attribute-info Command Mode Privileged Exec mode and Exec mode Examples This is a sample output from the show ip bgp attribute-info command displaying internal attribute information. Switch# show ip bgp attribute-info attr[1] nexthop 0.0.0.0 attr[1] nexthop 10.10.10.
PAGE 299
CanogaOS Command Reference Switch# show ip bgp cidr-only BGP table version is 0, local router ID is 10.10.10.50 Status codes: s suppressed, d damped, h history, p stale, * valid, > best, i internal Origin codes: i - IGP, e - EGP, ? - incomplete Network Next Hop Metric LocPrf Weight Path *> 3.3.3.0/24 10.10.10.10 0 11 i *> 6.6.6.0/24 0.0.0.0 32768 i Total number of prefixes 2 16.82 show ip bgp community Use this command to display routes matching the communities.
PAGE 300
CanogaOS Command Reference Command Mode Privileged Exec mode and Exec mode Examples Switch# show ip bgp community-info 16.84 show ip bgp community-list Use this command to display routes that match the community-list. Command Syntax show ip bgp community-list LISTNAME (exact-match) show ip bgp ipv4 PREFIX community-list LISTNAME (exact-match) LISTNAME Specifies the community list name. exact-match Displays only routes that have exactly the same specified communities. ipv4 Specifies the address family.
PAGE 301
CanogaOS Command Reference unicast Specifies a IPv4 unicast address family. This is the default option. multicast Specifies a IPv4 multicast address family. Command Mode Exec mode and Privileged Exec mode Examples Enable BGP dampening to maintain dampened-path information in memory.
PAGE 302
CanogaOS Command Reference show ip bgp filter-list LISTNAME show ip bgp ipv4 PREFIX filter-list LISTNAME LISTNAME Specifies the regular-expression access list name. ipv4 Specifies the address family. The type of address family determines the routing table that is displayed. PREFIX = multicast|unicast unicast Specifies a IPv4 unicast address family. This is the default option. multicast Specifies a IPv4 multicast address family.
PAGE 303
CanogaOS Command Reference show ip bgp ipv4 PREFIX neighbors (IPADDRESS (advertised-routes|RECEIVED|receivedroutes|routes)) IPADDRESS=A.B.C.D|X:X::X:X Specifies the IP address. A.B.C.D Specifies an IPv4 address. X:X::X:X Specifies an IPv6 address advertised-routes Displays the routes advertised to a BGP neighbor. RECEIVED = received prefix-filter Displays all received routes, both accepted and rejected. prefix-filter Displays the prefix-list filter.
PAGE 304
CanogaOS Command Reference Local host: 192.10.23.80, Local port: 33837 Foreign host: 192.10.23.67, Foreign port: 179 Nexthop: 192.10.23.80 Nexthop global: 1111::80 Nexthop local: fe80::203:47ff:fe97:bb79 BGP connection: non shared network 16.89 show ip bgp paths Use this command to display BGP path information. Command Syntax show ip bgp paths show ip bgp ipv4 PREFIX paths ipv4 Specifies the address family. The type of address family determines the routing table that is displayed.
PAGE 305
CanogaOS Command Reference Examples Switch# show ip bgp prefix-list mylist 16.91 show ip bgp quote-regexp Use this command to display routes matching the AS path regular expression in quotes. Command Syntax show ip bgp quote-regexp WORD show ip bgp ipv4 PREFIX regexp WORD WORD Specifies a regular-expression to match the BGP AS paths ipv4 Specifies the address family. The type of address family determines the routing table that is displayed.
PAGE 306
CanogaOS Command Reference Examples Switch# show ip bgp regexp myexpression 16.93 show ip bgp scan Use this command to display BGP scan status. Command Syntax show ip bgp scan Command Mode Privileged Exec mode and Exec mode Examples Switch# show ip bgp scan 16.94 show ip bgp summary Use this command to display a summary of BGP neighbor status. Command Syntax show ip bgp summary show ip bgp ipv4 PREFIX summary ipv4 Specifies the address family.
PAGE 307
CanogaOS Command Reference 10.10.14.51 4 100 93 120 0 0 0 00:42:16 0 Total number of neighbors 2 16.95 show ip bgp view Use this command to view the neighbors of the given instance. Command Syntax show ip bgp view WORD (A.B.C.D(/M)) WORD the name of the instance to display data for. A.B.C.D IPv4 or IPv6 address /M The mask Command Mode Privileged Exec mode and Exec mode Examples Switch# show ip bgp view I2 BGP table version is 0, local router ID is 10.10.10.
PAGE 308
CanogaOS Command Reference Command Mode Privileged Exec mode and Exec mode Examples Switch# show ip bgp view I2 neighbors BGP neighbor is 10.10.10.52, remote AS 10, local AS 10, internal link BGP version 4, remote router ID 10.10.10.
PAGE 309
CanogaOS Command Reference Command Mode Privileged Exec mode and Exec mode Examples The following example shows the summary data of instance named I2. Switch# show ip bgp view I2 summary BGP router identifier 10.10.10.50, local AS number 10 1 BGP AS-PATH entries 0 BGP community entries Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd 10.10.10.52 4 10 1 2 0 0 0 00:00:07 5 Total number of neighbors 1 Related Commands show ip bgp neighbors 16.
PAGE 310
CanogaOS Command Reference * i 10.10.14.0/24 10.10.0.1 141 0 65000 ? *> 10.10.14.0/24 10.10.14.50 0 0 65000 ? * i 10.10.15.0/24 10.10.0.1 141 0 65000 ? *> 10.10.15.0/24 10.10.14.50 0 0 65000 ? 16.99 show ip extcommunity-list Use this command to display a configured extcommunity-list. Command Syntax show ip extcommunity-list (<1-199>|WORD) <1-199> Extcommunity-list number WORD Extcommunity-list name Command Mode Exec mode and Privileged Exec mode Examples Switch# show ip extcommunity-list 33 16.
PAGE 311
CanogaOS Command Reference Interface Send Recv Key-chain eth0 2 2 Routing for Networks: 10.10.0.0/24 Routing Information Sources: Gateway BadPackets BadRoutes Distance Last Update Distance: (default is 120 16.101 timers Use this command sets the BGP keepalive timer and holdtime timer values. Use the no parameter with this command to reset timers to default value.
PAGE 312
CanogaOS Command Reference filters Disable debugging for BGP filters. fsm Disable debugging for BGP Finite State Machine (FSM). keepalives Disable debugging for BGP keepalives. nsm Disable debugging for NSM messages. updates Disable debugging for BGP updates.
PAGE 313
CanogaOS Command Reference 17 VRRP Commands 17.1 advertisement-interval To configure the interval between successive advertisements by the master virtual router in a Virtual Router Redundancy Protocol (VRRP) group, use the advertisement-interval command in router configuration mode. To restore the default value, use the no form of this command. Command Syntax advertisement-interval interval no advertisement-interval interval Time interval between successive advertisements by the master virtual router.
PAGE 314
CanogaOS Command Reference 17.2 authentication mode To authenticate Virtual Router Redundancy Protocol (VRRP) packets received from other routers in the group, use the authentication mode command in router configuration mode. To disable VRRP authentication, use the no form of this command. Command Syntax authentication mode {md5 | text} key-string no authentication mode text key-string Plain text authentication.
PAGE 315
CanogaOS Command Reference Command Syntax interface interface-name no interface interface-name Interface name. Default No interface is specified. Command Mode Router configuration Usage Examples The following is sample output from the interface command: router vrrp 1 interface eth-0-1 Related Commands router vrrp 17.
PAGE 316
CanogaOS Command Reference of 200 is higher than that of the current master virtual router. router vrrp 1 preempt-mode true priority 200 Related Commands router vrrp 17.5 priority (VRRP) To set the priority level of the router within a Virtual Router Redundancy Protocol (VRRP) group, use the priority command in router configuration mode. To remove the priority level of the router, use the no form of this command.
PAGE 317
CanogaOS Command Reference Command Syntax router vrrp group no router vrrp group group Group number to which the tracking applies. The group number range is from 1 to 255. Default No VRRP group is defined. Command Mode Global configuration Usage Examples The following is sample output from the router vrrp command: Switch(config)# router vrrp 1 Related Commands 17.
PAGE 318
CanogaOS Command Reference Examples The following is sample output from the track command: router vrrp 1 track interface eth-0-1 Related Commands router vrrp 17.8 virtual-ip To enable the Virtual Router Redundancy Protocol (VRRP) on an interface and identify the IP address of the virtual router, use the virtual-ip command in router configuration mode. To disable VRRP on the interface and remove the IP address of the virtual router, use the no form of this command.
PAGE 319
CanogaOS Command Reference Related Commands router vrrp 17.9 show vrrp To display a brief or detailed status of one or all configured Virtual Router Redundancy Protocol (VRRP) groups on the router, use the show vrrp command in privileged EXEC mode. Command Syntax show vrrp [group] group (Optional) Virtual router group number of the group for which information is to be displayed. Command Mode Privileged EXEC Usage If no group is specified, all groups are displayed.
PAGE 320
CanogaOS Command Reference 18 VRRP Remote Tracking Commands 18.1 IP SLA MONITOR To create an IP SLA entry and enter IP SLA monitor configuration mode, use ip sla monitor in CONFIG mode. To delete an IP SLA entry, use the no form of this command.
PAGE 321
CanogaOS Command Reference destination-ip-address Destionation ip address of sending icmp packet; destination-hostname Destionation hostname of sending icmp packet; Command Mode Ipsla mode Defaults none Examples In the following example, the type echo protocol ipIcmpEcho command is used to set icmp packet and destination ip address: Switch(config)#ip sla monitor 1 Switch(config-ipsla)# type echo protocol ipIcmpEcho 192.168.0.1 Related Commands show ip sla monitor 18.
PAGE 322
CanogaOS Command Reference show ip sla monitor 18.4 TIMEOUT Sets the amount of time an IP SLA operation waits for a response from its request packet. To turn to default value, use no form of this command. Command Syntax timeout seconds no timeout Syntax Description seconds Time range is from 1 to 4800. Frequency timeout threshold Command Mode Ipsla mode Defaults Default value is 5 seconds.
PAGE 323
CanogaOS Command Reference Frequency timeout threshold Command Mode Ipsla mode Defaults Default value is 5 seconds. Examples In the following example, the threshold command is used to set the threshold time range: Switch(config)#ip sla monitor 1 Switch(config-ipsla)# threshold 10 Related Commands show ip sla monitor 18.6 VRF To use IP SLA operations in VPNs, use vrf in ipsla mode. To remove VPN feathers from IP SLA operations, use the no form of this command.
PAGE 324
CanogaOS Command Reference 18.7 IP SLA MONITOR SCHEDULE To enable an IP SLA entry, use ip sla monitor schedule in CONFIG mode. To disable an IP SLA entry, use the no form of this command.
PAGE 325
CanogaOS Command Reference Examples In the following example, the show ip sla monitor command is used to show ip sla monitor entries: Switch#show ip sla monitor Entry 1 Type : Echo Admin state : Enable Destination address : 192.168.0.1 Frequency : 3 seconds Timeout : 2 seconds Threshold : 1seconds Running Frequency : 3 seconds Vrf : vpn1 Return code : OK Related Commands Ip sla monitor; 18.
PAGE 326
CanogaOS Command Reference Switch(config-track)# Related Commands Show track 18.10 TRACK RTR REACHABILITY Create a track object and track the state of an ip sla entry, use the track rtr reachability to command in global configuration mode. To remove a track, use the no form of this command. When the state of ip sla entry is OK or Overthreshold, track object state is up; otherwise track object state is down.
PAGE 327
CanogaOS Command Reference When the state of ip sla entry is OK , track object state is up; otherwise track object state is down.
PAGE 328
CanogaOS Command Reference Examples In the following example, the track command is used to create an track object: Switch(config)#track 1 Switch(config-track)# Related Commands Show track 18.13 DELAY UP To specify a period of time (in seconds) to delay communicating state changes of a tracked object, use delay up in track mode. To come back to default value, use the no form of this command. Command Syntax delay up seconds no delay up Syntax Description seconds Time range is from 1 to 180.
PAGE 329
CanogaOS Command Reference Command Syntax delay down seconds no delay down Syntax Description seconds Time range is from 1 to 180. Command Mode Track mode Defaults Default value is 0 seconds. Examples In the following example, the delay down command is used to configure delay when object state is turned from up to down: Switch(config)#track 1 Switch(config-track)#delay down 30 Related Commands Show track 18.15 SHOW TRACK To show TRACK entries, use show track in EXEC mode.
PAGE 330
CanogaOS Command Reference Type Interface State Delay up Delay down : Response Time Reporter(RTR) Reachability : eth-0-2 : down : 30 seconds : 30 seconds 18.16 TRACK To track an object in vrrp process, use the track to command in vrrp mode. To remove track object in vrrp process, use the no form of this command.
PAGE 331
CanogaOS Command Reference Command Mode EXEC mode Defaults none Examples In the following example, the show vrrp command is used to show track object in vrrp process: Switch#show vrrp VRID <1> State : Master Virtual IP : 172.16.10.100(Not IP owner) Interface : eth-0-2 VMAC : 0000.5e00.0101 Advt timer :1 Preempt mode : TRUE Auth type : NONE Conf pri : Unset Run pri : 90 Track Object :2 Delta pri : 10 Master router ip : 172.16.10.
PAGE 332
CanogaOS Command Reference 19 Route-map Commands 19.1 route-map To define the conditions for redistributing routes from one routing protocol into another, or to enable policy routing in bgp, use the route-map command in global configuration mode and the match and set command in route-map configuration modes. To delete an entry, use the no form of this command.
PAGE 333
CanogaOS Command Reference The permit keyword is the default.
PAGE 334
CanogaOS Command Reference not redistributed or controlled. If the match criteria are not met then the route is neither accepted nor forwarded, irrespective of permit or deny specifications. The route specified by the policies might not be the same as specified by the routing protocols. Setting policies enable packets to take different routes, depending on their length or content. Packet forwarding based on configured policies overrides packet forwarding specified in routing tables.
PAGE 335
CanogaOS Command Reference Communities are used to group and filter routes. They are designed to provide the ability to apply policies to large numbers of routes by using match and set commands. Community lists are used to identify and filter routes by their common attributes. Use the match community command to allow matching based on community lists. The values set by the match community command overrides the global values. The route that does not match at least one match clause is ignored.
PAGE 336
CanogaOS Command Reference The match interface command specifies the next-hop interface name of a route to be matched. Note: This command is valid only for RIP, OSPF. Command Syntax match interface IFNAME no match interface Syntax Description IFNAME A string that specifies the interface for matching. Command Mode Route-map mode Defaults No match interface is specified by default.
PAGE 337
CanogaOS Command Reference Note: This command is valid for BGP, OSPF and RIP only. Command Syntax match ip address ACCESSLISTID no match ip address [ ACCESSLISTID ] Syntax Description ACCESSLISTID Specify a IPv4 access-list name, up to 20 characters. Command Mode Route-map mode Defaults No match ip address is specified by default.
PAGE 338
CanogaOS Command Reference tables. Note: This command is valid for BGP, OSPF and RIP only. Command Syntax match ip address prefix-list LISTNAME no match ip address prefix-list [ LISTNAME ] Syntax Description LISTNAME Specifies the IP prefix list name. Command Mode Route-map mode Defaults No match ip address prefix-list is specified by default.
PAGE 339
CanogaOS Command Reference Packet forwarding based on configured policies overrides packet forwarding specified in routing tables. Note: This command is valid for BGP, OSPF and RIP only Command Syntax match ip next-hop ACCESSLISTID no match ip next-hop [ ACCESSLISTID ] Syntax Description ACCESSLISTID Specify a IPv4 access-list name, up to 20 characters. Command Mode Route-map mode Defaults No match ip next-hop is specified by default.
PAGE 340
CanogaOS Command Reference match ip next-hop prefix-list LISTNAME no match ip next-hop prefix-list [ LISTNAME ] Syntax Description LISTNAME A string specifying the prefix-list name. Command Mode Route-map mode Defaults No match ip next-hop prefix-list is specified by default. Examples Switch# configure terminal Switch(config)# route-map mymap permit 3 Switch(config-route-map)# match ip next-hop prefix-list list1 Related Commands match metric match interface match ip next-hop 19.
PAGE 341
CanogaOS Command Reference No match local-preference is specified by default. Examples Switch# configure terminal Switch(config)# route-map mymap permit 3 Switch(config-route-map)# match local-preference 100 Related Commands match community match as-path set as-path set community match ip next-hop 19.10 match metric Use this command to match a metric of a route. Use the no parameter with this command to disable this function. The match metric command specifies the metric to be matched.
PAGE 342
CanogaOS Command Reference Defaults No match metric is specified by default. Examples Switch# configure terminal Switch(config)# route-map myroute permit 3 Switch(config-route-map)# no match metric 888999 Related Commands match community match as-path set as-path set community match ip next-hop 19.11 match origin Use this command to match origin code. Use the no parameter with this command to disable this matching. The origin attribute defines the origin of the path information.
PAGE 343
CanogaOS Command Reference match origin { egp | igp | incomplete } no match origin Syntax Description egp learned from EGP. igp Local IGP incomplete Unknown heritage Command Mode Route-map mode Defaults No match origin is specified by default. Examples Switch# configure terminal Switch(config)# route-map myroute deny 34 Switch(config-route-map)# match origin egp Related Commands 19.12 match route-type Use this command to match specified external route type.
PAGE 344
CanogaOS Command Reference Route-map mode Defaults No match route-type is specified by default. Examples Switch# configure terminal Switch(config)# route-map mymap1 permit 10 Switch(config-route-map)# match route-type external type-1 Related Commands match tag 19.13 match tag Use this command to match the specified tag value. Use the no parameter with this command to turn off the declaration. Use the match tag command to match the specified tag value. Note: This command is valid for RIP and OSPF only.
PAGE 345
CanogaOS Command Reference match route-type external 19.14 set aggregator Use this command to set the AS number for the route map and router ID. Use the no parameter with this command to disable this function. An Autonomous System (AS) is a collection of networks under a common administration sharing a common routing strategy. It is subdivided by areas, and is assigned a unique 16-bit number. Use the set aggregator command to assign an AS number for the aggregator.
PAGE 346
CanogaOS Command Reference Switch(config-route-map)# set aggregator as 43 10.10.0.3 Related Commands 19.15 set as-path Use this command to modify an autonomous system path for a route. Use the no parameter with this command to disable this function. Use the set as-path command to specify an autonomous system path. By specifying the length of the AS-Path, the router influences the best path selection by a neighbor.
PAGE 347
CanogaOS Command Reference Switch(config-route-map)# set as-path prepend 8 24 Related Commands 19.16 set atomic-aggregate Use this command to set an atomic aggregate attribute. Use the no parameter with this command to disable this function To use the set atomic aggregate command, you must first have a match clause. Match and set commands set the conditions for redistributing routes from one routing protocol to another.
PAGE 348
CanogaOS Command Reference 19.17 set comm-list delete Use this command to delete the matched communities from the community attribute of an inbound or outbound update when applying route-map. Use the no parameter with this command to disable this feature. .Note: This command is valid for BGP only. Command Syntax set comm-list { <1-199>|<100-199>|WORD } delete no set comm-list Syntax Description <1-199> Standard community-list number.
PAGE 349
CanogaOS Command Reference the match criteria are met. If the packets do not match any of the defined criteria, they are routed through the normal routing process. Note: This command is valid for BGP only. Command Syntax set community [ AA:NN | internet | local-AS | no-advertise | no-export ] [additive] set community none no set community Syntax Description AA:NN Specifies the community number in this format. AA = The AS number. NN = The number assigned to community.
PAGE 350
CanogaOS Command Reference Switch(config-route-map)# set community 10:01 23:34 12:14 no-export Related Commands 19.19 set dampening Use this command to enable route-flap dampening and set parameters. Use the no parameter with this command to disable it. Set the unreachability half-life time to be equal to, or greater than, reachability half-life time. The suppress-limit value must be greater than or equal to the reuse limit value. Note: This command is valid for BGP only.
PAGE 351
CanogaOS Command Reference Examples Switch# configure terminal Switch(config)# route-map R1 permit 24 Switch(config-route-map)# set dampening 20 333 534 30 Related Commands 19.20 set extcommunity Use this command to set an extended community attribute. Use the no parameter with this command to disable this function To use the set extcommunity command, you must first have a match clause. Match and set commands set the conditions for redistributing routes from one routing protocol to another.
PAGE 352
CanogaOS Command Reference Examples Switch# configure terminal Switch (config)# route-map rmap1 permit 3 Switch (config-route-map)# set extcommunity rt 06:01 Switch # configure terminal Switch (config)# route-map rmap1 permit 3 Switch (config-route-map)# set extcommunity rt 0.0.0.
PAGE 353
CanogaOS Command Reference Switch(config-route-map)# set ip next-hop 10.10.0.67 Related Commands 19.22 set local-preference Use this command to set the specified local-preference value. Use the no parameter with this command to turn off the setting. Use this command to set the local-preference value of the routes Note: This command is valid for BGP only.
PAGE 354
CanogaOS Command Reference preferred path into an Autonomous System (AS). The preferred path is the one with a lower metric value. A router compares metrics for paths from neighbors in the same ASs. To compare metrics from neighbors coming from different ASs, use the bgp always-compare-med command. To use the set metric command, you must first have a match clause. Match and set commands set the conditions for redistributing routes from one routing protocol to another.
PAGE 355
CanogaOS Command Reference Note: This command is valid for OSPF only. Command Syntax set metric-type {type1 | type2} no set metric-type Syntax Description type1 Select to set external type 1 metric. type2 Select to set external type 2 metric. Command Mode Route-map mode Defaults No set metric-type is specified by default. Examples Switch# configure terminal Switch(config)# route-map rmap1 permit 3 Switch(config-route-map)# set metric-type 1 Related Commands 19.
PAGE 356
CanogaOS Command Reference Note: This command is valid for BGP only. Command Syntax set origin { egp | igp | incomplete } no set origin Syntax Description egp Specifies a remote EGP system. igp A local IGP system. incomplete Specifies a system of unknown heritage. Command Mode Route-map mode Defaults No set origin is specified by default. Examples Switch# configure terminal Switch(config)# route-map rmap1 permit 3 Switch(config-route-map)# set origin egp Related Commands 19.
PAGE 357
CanogaOS Command Reference Command Syntax set originator-id IPADDRESS no set originator-id Syntax Description IPADDRESS Specifies the IP address of originator. Command Mode Route-map mode Defaults No set originator-id is specified by default. Examples Switch# configure terminal Switch(config)# route-map rmap1 permit 3 Switch(config-route-map)# set originator-id 1.1.1.1 Related Commands 19.27 set tag Use this command to set a specified tag value.
PAGE 358
CanogaOS Command Reference Command Mode Route-map mode Defaults No set tag is specified by default. Examples Switch# configure terminal Switch(config)# route-map rmap1 permit 3 Switch(config-route-map)# set tag 6 Related Commands redistribute default-information 19.28 set vpnv4 next-hop Use this command to set a VPNv4 next-hop address. Use the no parameter with this command to disable this function To use the set vpn4-hext-hop command, you must first have a match clause.
PAGE 359
CanogaOS Command Reference Defaults No set vpnv4 next-hop is specified by default. Examples Switch# configure terminal Switch(config)# route-map rmap1 permit 3 Switch(config-route-map)# set vpnv4 next-hop 6.6.6.6 Related Commands 19.29 set weight Use this command to set weights for the routing table. Use the no parameter with this command to delete an entry. The weight value is used to assist in best path selection. It is assigned locally to a router.
PAGE 360
CanogaOS Command Reference Command Mode Route-map mode Defaults No set weight is specified by default. Examples Switch# configure terminal Switch(config)# route-map rmap1 permit 3 Switch(config-route-map)# set weight 60 Related Commands match as-path 19.30 show route-map Use this command to display user readable route-map information.
PAGE 361
CanogaOS Command Reference 20 VRF Commands VRF is routing and forwarding table associated with one or more directly connected VPN sites(CE routers to PE routers). 20.1 (no) ip vrf To configure a VPN routing and forwarding(VRF) routing table, use the ip vrf command in global configuration mode. To remove a VRF routing table, use the no form of this command.
PAGE 362
CanogaOS Command Reference 20.2 show ip vrf To show the set of defined VRFs and assocaited interfaces, use the show ip vrf command in EXEC mode. Command Syntax show ip vrf (VRF-NAME|) VRF-NAME: VPN Routing/Forwarding instance name Command Mode Privileged EXEC mode Usage This example shows how to use this command to display current vrf information.
PAGE 363
CanogaOS Command Reference Usage Executing this command on an interface removes the IP address on this interface, The IP address should be reconfigured.
PAGE 364
CanogaOS Command Reference And user can use command show ip route vrf VPN-NAME to show the result. Switch#show ip route vrf ComA database Codes: K - kernel, C - connected, S - static, R - RIP, B - BGP O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area [*] - [AD/Metric] > - selected route, * - FIB route, p - stale info S 2.2.2.
PAGE 365
CanogaOS Command Reference 20.6 show ip arp vrf Use this command to show arp entry in vrf. Command Syntax show ip arp vrf VRF-NAME NAME: VPN Routing/Forwarding instance name Command Mode Privileged EXEC mode Usage This example shows how to display all arp entry in the arp table of the vrf. Swithc#show ip arp vrf ComA Protocol Address Internet 1.1.1.1 Age (min) Hardware Addr - Interface 0000.1111.2222 Examples Switch#show ip arp vrf ComA Related Commands arp vrf : add one static arp entry in vrf.
PAGE 366
CanogaOS Command Reference Related Commands arp vrf : add one static arp entry in vrf. 20.8 ping vrf Use this command to ping address in vrf. Command Syntax ping vrf VRF-NAME WORD VRF-NAME: VPN Routing/Forwarding instance name WORD: Ping destination address or hostname Command Mode Privileged EXEC mode Usage This example shows how to vrf ping. Switch # ping vrf vpn 1.1.1.1 Examples Switch # ping vrf vpn 1.1.1.1 PING 1.1.1.1 (1.1.1.1) 56(84) bytes of data. 64 bytes from 1.1.1.
PAGE 367
CanogaOS Command Reference WORD: Trace route to destination address or hostname Command Mode Privileged EXEC mode Usage This example shows how to use vrf tracroute. Switch # traceroute vrf vpn 1.1.1.1 Examples Switch # traceroute vrf vpn 1.1.1.1 traceroute to 1.1.1.1 (1.1.1.1), 30 hops max, 38 byte packets 1 1.1.1.1 (1.1.1.1) 0.222 ms 0.169 ms 0.
PAGE 368
CanogaOS Command Reference 21 IGMP Commands 21.1 ip igmp access-group Use this command to apply an access-list to the igmp interface. To remove this setting, use the no form of this command. Command Syntax ip igmp access-group list no ip igmp access-group list: the name of the ip access-list to be applied Command Mode Interface configuration Usage None Examples This example shows how to apply the access-list acl1 to the interface vlan1.
PAGE 369
CanogaOS Command Reference Examples This example shows how to apply an access-list to configure which groups support immediately-leave on interface vlan1. Switch(config-if)#ip igmp immediate-leave group-list acl1 This example shows how to remove the access-list on the interface. Switch(config-if)#no ip igmp immediate-leave group-list Related Commands show ip igmp interface 21.3 ip igmp last-member-query-count Use this command to set the value of last member query count.
PAGE 370
CanogaOS Command Reference Command Syntax ip igmp last-member-query-interval <1000-25500> no ip igmp last-member-query-interval <1000-25500>: the last member query interval value (ms) Defaults 1000 ms Command Mode Interface configuration Usage None Examples This example shows how to set the last member query interval value to 10000ms. Switch(config-if)# ip igmp last-member-query-interval 10000 This example shows how to return the last member query interval value to default value.
PAGE 371
CanogaOS Command Reference This example shows how to set the max num of groups allowed to 1000 globally. Switch(config)#ip igmp limit 1000 This example shows how to return the max num of groups to default value. Switch(config)#no ip igmp limit Related Commands show ip igmp interface 21.6 ip igmp mroute-proxy Use this command to set the mroute-proxy port on this interface. To remove it, use the no form of this command.
PAGE 372
CanogaOS Command Reference Interface configuration Usage This command is used with command ip igmp mroute-proxy and to set the upstream interface of the igmp group. Examples This example shows how to enable igmp mroute proxy service on this interface. Switch(config-if)# ip igmp proxy-service This example shows how to disable igmp mroute proxy service. Switch(config-if)# no ip igmp proxy-service Related Commands ip igmp mroute-proxy 21.
PAGE 373
CanogaOS Command Reference 21.9 ip igmp query-interval Use this command to set the igmp query interval. To return it to default value, use the no form of this command. Command Syntax ip igmp query-interval <2-18000> no ip igmp query-interval <2-18000>: the value of igmp query interval Command Mode Interface configuration Defaults 125 seconds Usage None Examples This example shows how to set the igmp query interval to 300 seconds.
PAGE 374
CanogaOS Command Reference Usage None Examples This example shows how to set the igmp query max response time to 20 seconds. Switch(config-if)# ip igmp query-max-response-time 20 This example shows how to return the igmp query max response time to default value. Switch(config-if)# no ip igmp query-max-response-time Related Commands ip igmp querier-timeout ip igmp query-interval 21.11 ip igmp robustness-variable Use this command to set the igmp querier robustness variable value.
PAGE 375
CanogaOS Command Reference 21.12 ip igmp version Use this command to set the igmp version on interface. To return it to default value, use the no form of this command. Command Syntax ip igmp version <1-2> no ip igmp version <1-2>: the igmp version on the interface Defaults 2 Command Mode Interface configuration Usage None Examples This example shows how to set the igmp version 1 on the interface. Switch(config-if)# ip igmp version 1 This example shows how to return the igmp version to default value.
PAGE 376
CanogaOS Command Reference None Examples This example shows how to set the maximum number of the multicast routes to 512. Switch(config)# ip multicast route-limit 512 This example shows how to return the maximum number of the multicast routes to default value. Switch(config)# no ip multicast route-limit Related Commands None 21.14 ip multicast-routing Use this command to enable ip multicast routing. To disable ip multicast routing, use the no form of this command.
PAGE 377
CanogaOS Command Reference show ip igmp groups [ip_address |interface interface |detail] ip_address: the ip address of the igmp group specified interface: the name of the interface specified detail: for detail Command Mode EXEC Usage None Examples This example shows how to display the information about igmp groups. Switch# show ip igmp groups detail Related Commands ip igmp access-group ip igmp immediate-leave group-list 21.
PAGE 378
CanogaOS Command Reference Command Syntax show ip mroute [ip_address |count |route-limit |sparse |summary] ip_address: source or group ip address count: route and packet count data route-limit: max route limit value sparse: show sparse multicast routes summary: provide abbreviated display Command Mode EXEC Usage None Examples This example shows how to display the route and packet count data.
PAGE 379
CanogaOS Command Reference 21.18 show ip mroute-rpf Use this command to display rpf information for multicast source. Command Syntax show ip mroute-rpf ip_address ip_address: the source address Command Mode EXEC Usage None Examples This example shows how to display the rpf information for multicast source 10.10.10.11. Switch# show ip mroute-rpf RPF information for 1.1.1.1 failed, no route exists Related Commands None 21.
PAGE 380
CanogaOS Command Reference None 21-13
PAGE 381
CanogaOS Command Reference 22 IGMP Snooping Commands 22.1 ip igmp snooping Use this command to enable igmp snooping. To disable igmp snooping, use the no form of this command. Command Syntax ip igmp snooping no ip igmp snooping Defaults Enable Command Mode Global configuration Usage None Examples This example shows how to enable igmp snooping. Switch(config)#ip igmp snooping This example shows how to disable igmp snooping.
PAGE 382
CanogaOS Command Reference Usage This command will overwrite the configuration of immediate-leave. Examples This example shows how to enable igmp snooping fast-leave. Switch(config)#ip igmp snooping fast-leave This example shows how to disable igmp snooping fast-leave. Switch(config)#no ip igmp snooping fast-leave Related Commands ip igmp snooping 22.3 ip igmp snooping last-member-query-interval Use this command to set the last member query interval of igmp snooping.
PAGE 383
CanogaOS Command Reference 22.4 ip igmp snooping max-member-num Use this command to set the max member number of igmp snooping. To return it to default value, use the no form of this command. Command Syntax ip igmp snooping max-member-num <1-4096> no ip igmp snooping max-member-num <1-4096>: the max member number of igmp snooping Defaults 4096 Command Mode Global configuration Usage None Examples This example shows how to set the max member number of igmp snooping to 1024.
PAGE 384
CanogaOS Command Reference None Examples This example shows how to set the igmp snooping query interval to 64s. Switch(config)# ip igmp snooping query-interval 64 This example shows how to return the query-interval to default value. Switch(config)# no ip igmp snooping query interval Related Commands ip igmp snooping 22.6 ip igmp snooping query-max-response-time Use this command to set the igmp snooping query max response time. To return it to default value, use the no form of this command.
PAGE 385
CanogaOS Command Reference Command Syntax ip igmp snooping report-suppression no ip igmp snooping report-suppression Defaults Enable Command Mode Global configuration Usage None Examples This example shows how to enable the report suppression. Switch(config)# ip igmp snooping report-suppression This example shows how to disable report suppression. Switch(config)# no ip igmp snooping report-suppression Related Commands ip igmp snooping 22.
PAGE 386
CanogaOS Command Reference ip igmp snooping 22.9 ip igmp snooping discard-unknown Use this command to enable discard-unknown multicast traffic. To disable discard-unknown multicast traffic, use the no form of this command. Command Syntax ip igmp snooping discard-unknown Command Mode Global configuration Defaults Enable Usage None Examples This example shows how to enable discard-unknown multicast traffic. Switch(config)# ip igmp snooping discard-unknown Related Commands ip igmp snooping 22.
PAGE 387
CanogaOS Command Reference mrouter interface interface: the mroute interface on this vlan querier [address address]: the address of querier on this vlan querier-timeout <60-300>: igmp previous querier timeout on this vlan query-interval <2-18000>: the igmp query interval on this vlan query-max-response-time <1-25>: igmp max query response time on this vlan report-suppression: enable the igmp snooping report suppression no this vlan version <1-2>: igmp snooping version on this vlan Command Mode Global confi
PAGE 388
CanogaOS Command Reference 22.12 show ip igmp snooping global Use this command to show the global configurations of igmp snooping. Command Syntax show ip igmp snooping global Command Mode EXEC Usage None Examples This example shows how to display the global configurations of igmp snooping Switch#show ip igmp snooping global Related Commands show ip igmp snooping 22.13 show ip igmp snooping groups Use this command to show the igmp groups.
PAGE 389
CanogaOS Command Reference 22.14 show ip igmp snooping vlan Use this command to show the configurations of igmp snooping on vlan. Command Syntax show ip igmp snooping vlan <1-4094> <1-4094>: the vlan id Command Mode EXEC Usage None Examples This example shows how to display the configurations of igmp snooping on vlan 1. Switch#show ip igmp snooping vlan 1 Related Commands show ip igmp snooping 22.
PAGE 390
CanogaOS Command Reference 23 MVR Commands 23.1 mvr Use this command to enable or disable MVR Command Syntax mvr no mvr Command Mode Global configuration Usage This example shows how to enable MVR in the Switch. Examples Enable MVR in the Switch, before enable MVR, must disable ip multicast-routing. Switch(config)#no ip multicast-routing Switch(config)#mvr Related Commands show mvr 23.2 mvr vlan Use this command to specify the MVR source vlan.
PAGE 391
CanogaOS Command Reference Related Commands None 23.3 mvr group Use this command to configure global group for MVR Command Syntax mvr group A.B.C.D [count] no mvr group A.B.C.D [count] A.B.C.D: Multicast IP address count: Count of contiguous groups, between 1 and 1024 Command Mode Global configuration Usage This command is used to create or delete a global static group. Examples This example shows how to create global static group from 238.255.0.1 to 238.255.0.50 Switch(config)# mvr group 238.255.0.
PAGE 392
CanogaOS Command Reference Examples Create mvr source address Switch(config)# mvr source-address 192.168.11.1 Resume mvr source address as 10.0.0.1 Switch(config)# no mvr source-address Related Commands None 23.5 mvr type Use this command to configure a switch-port as source port or receiver port.
PAGE 393
CanogaOS Command Reference show mvr Command Mode Privileged EXEC Usage Show mvr information Examples Switch# show mvr MVR Running: FALSE MVR Multicast VLAN: 0 MVR Source-address: 10.0.0.1 MVR Max Multicast Groups: 1024 MVR Current multicast groups: 0 Switch # Related Commands None 23.7 show mvr interface Use this command to show mvr interface information.
PAGE 394
CanogaOS Command Reference 23.8 show mvr group Use this command to show mvr group learned from receiver port. Command Syntax show mvr groups [vlan vlan [A.B.C.D] ] vlan: show mvr groups in a specified vlan Vlan: <1-4094> vlan id A.B.C.D: multicast group address Command Mode Privileged EXEC Usage Show mvr group information learned from receiver port Examples Switch#show mvr groups VLAN 2 Interface Group-Address eth-0-1 238.255.0.1 Uptime 00:01:00 00:04:00 Related Commands None 23.
PAGE 395
CanogaOS Command Reference 239.255.0.1 239.255.0.2 239.255.0.3 239.255.0.4 239.255.0.5 239.255.0.6 239.255.0.7 239.255.0.8 239.255.0.9 239.255.0.
PAGE 396
CanogaOS Command Reference 24 PIM Commands 24.1 ip pim accept-register Use this command to apply an access-list to limit the pim register message received by rp. To remove this setting, use the no form of this command. Command Syntax ip pim accept-register list list no ip pim accept-register list list: the name of the access-list to be applied Command Mode Global configuration Usage This feature is used to prevent the unauthorized user registered to the switch.
PAGE 397
CanogaOS Command Reference None Examples This example shows how to set anycast rendezvous-point. Switch(config)#ip pim anycast-rp 10.10.10.1 10.10.10.11 This example shows how to remove the member in anycast rendezvous-point. Switch(config)#no ip pim anycast-rp 10.10.10.1 10.10.10.11 Related Commands None 24.3 ip pim bsr-candidate Use this command to configure the candidate bootstrap router (candidate BSR). To remove the configurations, use the no form of this command.
PAGE 398
CanogaOS Command Reference ip pim bsr-border no ip pim bsr-border Command Mode Interface configuration Usage None Examples This example shows how to configure the border of pim domain. Switch(config)#ip pim bsr-border This example shows how to remove the configurations of the border of pim domain. Switch(config)#no ip pim bsr-border Related Commands ip pim bsr-candidate 24.5 ip pim dr-priority Use this command to set the pim router DR priority. To unset the priority, use the no form of this command.
PAGE 399
CanogaOS Command Reference None 24.6 ip pim exclude-genid Use this command to exclude generation id option from pim hello packets on this interface. To return to the default setting, use the no form of this command. Command Syntax ip pim exclude-genid no ip pim exclude-genid Command Mode Interface configuration Usage None Examples This example shows how to exclude generation id option from pim hello packets on this interface.
PAGE 400
CanogaOS Command Reference None Examples This example shows how to set the pim hello message interval to 100s. Switch(config-if)#ip pim hello-interval 100 This example shows how to return the pim hello message interval to default value. Switch(config-if)#no ip pim hello-interval Related Commands None 24.8 ip pim ignore-rp-set-priority Use this command to ignore RP set priority value. To not ignore the priority, use the no form of this command.
PAGE 401
CanogaOS Command Reference ip pim jp-timer jp-timer no ip pim jp-timer jp-timer : <1-65535> Join/Prune timer value (second) Defaults 60 seconds Command Mode Global configuration Usage None Examples This example shows how to set the join/prune timer value to 100s. Switch(config)#ip pim jp-timer 100 This example shows how to return the join/prune timer value to default value. Switch(config)#no ip pim jp-timer Related Commands None 24.
PAGE 402
CanogaOS Command Reference 24.11 ip pim register-rate-limit Use this command to set the rate limit for pim registers. To return the rate limit to default value, use the no form of this command. Command Syntax ip pim register-rate-limit <1-65535> no ip pim register-rate-limit <1-65535>: the rate limit for pim registers send from dr to rp Command Mode Global configuration Usage There is no rate limit for pim registers by default.
PAGE 403
CanogaOS Command Reference The source address for pim register is the interface ip of dr by default. Examples This example shows how to set the source address for pim register to the ip address of interface eth-0-1. Switch(config)#ip pim register-source eth-0-1 This example shows how to return the source address for pim register to default value. Switch(config)#no ip pim register-source Related Commands ip pim register-rate-limit ip pim register-rp-reachability ip pim register-suppression 24.
PAGE 404
CanogaOS Command Reference Command Syntax ip pim register-suppression <1-65535> no ip pim register-suppression <1-65535>: register suppression time in seconds Defaults 60s Command Mode Global configuration Usage None Examples This example shows how to set the register suppression time to 100s. Switch(config)#ip pim register-suppression 100 This example shows how to return the register suppression time to default value.
PAGE 405
CanogaOS Command Reference This example shows how to set the pim rp address to 1.1.1.1. Switch(config)#ip pim rp-address 1.1.1.1 This example shows how to remove the rp address 1.1.1.1. Switch(config)#no ip pim rp-address 1.1.1.1 Related Commands ip pim rp-candidate ip pim rp-register-kat 24.16 ip pim rp-candidate Use this command to set the candidate rp. To remove the candidate rp, use the no from of this command.
PAGE 406
CanogaOS Command Reference ip pim rp-register-kat time: <1-65535> KAT time in seconds Command Mode Global configuration Usage The register message send from dr will add an entry on rp. This entry will be aged when the keepalive timer expired which can be configured by this command. Examples This example shows how to set the keepalive timer to 100s at RP from PIM registers. Switch(config)#ip pim rp-register-kat 100 This example shows how to return this timer to default value.
PAGE 407
CanogaOS Command Reference 24.19 ip pim cisco-register-checksum Use this command to calculate register checksum over whole packet (cisco compatibility). To remove this setting, use the no form of this command. Command Syntax ip pim cisco-register-checksum [group-list list] no ip pim cisco-register-checksum [group-list list] list: the name of the access-list to be applied Command Mode Global configuration Usage The register checksum defined in RFC is used by default.
PAGE 408
CanogaOS Command Reference This example shows how to enable pim sparse mode on the interface. Switch(config-if)# ip pim sparse-mode This example shows how to disable pim sparse mode on the interface. Switch(config-if)# no ip pim sparse-mode This example shows how to enable pim sparse mode passive on the interface. Switch(config-if)# ip pim sparse-mode passive Related Commands None 24.21 ip pim unicast-bsm Use this command to enable sending and receiving of unicast BSM for backward compatibility.
PAGE 409
CanogaOS Command Reference Usage None Examples This example shows how to display the information of bootstrap router. Switch#show ip pim sparse-mode bsr-routers Related Commands None 24.23 show ip pim sparse-mode interface Use this command to show the information of pim interface. Command Syntax show ip pim sparse-mode interface [detail] detail: detailed interface information Command Mode EXEC Usage None Examples This example shows how to show the information of pim interface.
PAGE 410
CanogaOS Command Reference None Examples This example shows how to display the pim local membership information. Switch#show ip pim sparse-mode local-member Related Commands None 24.25 show ip pim sparse-mode mroute Use this command to show the mroute information of pim sparse mode. Command Syntax show ip pim sparse-mode mroute [A.B.C.D [A.B.C.D]] [detail] A.B.C.
PAGE 411
CanogaOS Command Reference None Examples This example shows how to display the neighbor information of pim sparse mode. Switch# show ip pim sparse-mode neighbor Related Commands None 24.27 show ip pim sparse-mode rp mapping Use this command to show group to rp mappings. Command Syntax show ip pim sparse-mode rp mapping A.B.C.D A.B.C.D: Group address Command Mode EXEC Usage None Examples This example shows how to display group to rp mappings.
PAGE 412
CanogaOS Command Reference None Examples This example shows how to display the information of rp to be chosen based on group 224.0.0.10. Switch#show ip pim sparse-mode rp-hash 224.0.0.10 % No RP available for this group Related Commands None 24.29 show ip pim sparse-mode spt-threshold Use this command to show the rpt to spt threshold of pim sparse mode.
PAGE 413
CanogaOS Command Reference 25 LDP Commnands 25.1 advertise-labels for Use this command to specify which destinations have their labels advertised to LDP neighbors. Use the no parameter to specify which destinations do not have their labels advertised to LDP neighbors Command Syntax (no) advertise-labels for PREFIX_ACL to {PEER_ACL | any} Syntax Description PREFIX_ACL PEER_ACL any Destinations which have their advertised. LDP neighbors which receive advertisements. All LDP neighbors.
PAGE 414
CanogaOS Command Reference A.B.C.D The address of the adjacent peer. * Use to clear all adjacencies. Command Mode Privileged Exec mode Defaults This command has no default settings. Examples In the following example, the clear ldp adjacency command is used to clear an adjacency with a specified peer: Switch# clear ldp adjacency 123.123.123.33 Related Commands clear ldp session 25.2 clear ldp session Use this command to clear a session established with a specified peer (IP address A.B.C.
PAGE 415
CanogaOS Command Reference show ldp session 25.3 clear ldp statistics Use this command to clear LDP packet statistics. Command Syntax clear ldp statistics Syntax Description This command has no arguments or keywords. Command Mode Privileged Exec mode Defaults This command has no default settings. Examples In the following example, the clear ldp statistics command is used to clear LDP packet statistics: Switch# clear ldp statistics Related Commands show ldp statistics 25.
PAGE 416
CanogaOS Command Reference Defaults This command has no default settings. Examples In the following example, the clear ldp statistics advertise-labels command is used to clear LDP advertise-labels statistics: Switch# clear ldp statistics advertise-labels for prefix_acl to peer_acl Related Commands show ldp statistics advertise-labels 25.5 control-mode Use this command to set the control mode for label processing. Use the no parameter to revert to default control mode.
PAGE 417
CanogaOS Command Reference Sets control mode to ordered processing. ordered control mode to independent independent Sets processing. Command Mode Router mode Defaults Independent control mode Examples In the following example, the control-mode command is used to set the control mode for label processing: Switch# configure terminal Switch(config)# router ldp Switch(congig-router)# control-mode ordered Related Commands show ldp 25.
PAGE 418
CanogaOS Command Reference Related Commands show debugging ldp 25.7 debug ldp all Use this command to enable all LDP troubleshooting functions. Use the no parameter with this command to disable this function. Command Syntax (no) debug ldp all Syntax Description This command has no arguments or keywords. Command Mode Privileged Exec mode Defaults This command has no default settings.
PAGE 419
CanogaOS Command Reference 25.8 debug ldp dsm Use this command to write Downstream state machine specific information to the output. Note: On using a debug command, the router continues to generate an output until the no parameter is used with the command. The debug output and system error messages are written on the virtual terminal. Use the log file or log syslog command in configure mode to redirect the debugging output to a file or the syslog.
PAGE 420
CanogaOS Command Reference 25.9 debug ldp events Use this command to monitor all LDP events, such as sending packets and receiving packets. Note: On using a debug command the router continues to generate an output until the no parameter is used with the command. The debug output and system error messages are written on the virtual terminal.
PAGE 421
CanogaOS Command Reference 2002/06/18 11:30:36 LDP: SEND to socket 13 port 646 addr 224.0.0.2 2002/06/18 11:30:37 LDP: Server : TCP Connection established with 192.168.3.5 2002/06/18 11:30:37 LDP: ldp_message_initialization_recv: Initialization message received from 192.168.3.5 Related Commands debug ldp fsm debug ldp packet 25.10 debug ldp fsm Use this command to monitor the LDP finite state machine status.
PAGE 422
CanogaOS Command Reference 2002/06/18 11:40:01 LDP: FSM: State changed from NON_EXISTENT to INITIALIZED for event LDP_EVENT_TCP_established 2002/06/18 11:40:01 LDP: FSM: State changed from INITIALIZED to OPENREC for event LDP_EVENT_Recv_Init_msg 2002/06/18 11:40:01 LDP: FSM: State changed from OPENREC to OPERATIONAL for event LDP_EVENT_Recv_KeepAlive_msg 2002/06/18 11:40:01 LDP: FSM: State changed from OPERATIONAL to OPERATIONAL for event LDP_EVENT_Recv_Other_msg Related Commands debug ldp packet debug ldp
PAGE 423
CanogaOS Command Reference This command has no default settings. Examples In the following example, the debug ldp hexdump command is used to write hexdump specific information to the output: Switch# debug ldp hexdump Related Commands debug ldp fsm debug ldp packet 25.12 ebug ldp packet Use this command to monitor all sent or received packets to or from LDP peers. Note: On using a debug command, the router continues to generate an output until the no parameter is used with the command.
PAGE 424
CanogaOS Command Reference 2002/06/18 11:43:23 LDP: PDU Version: 1 2002/06/18 11:43:23 LDP: PDU Length: 22 2002/06/18 11:43:23 LDP: LDP Identifier: 10.10.0.
PAGE 425
CanogaOS Command Reference 25.13 debug ldp qos Use this command to write Quality of Service information to the output. Note: On using a debug command, the router continues to generate an output until the no parameter is used with the command. The debug output and system error messages are written on the virtual terminal. Use the log file or log syslog command in configure mode to redirect the debugging output to a file or the syslog.
PAGE 426
CanogaOS Command Reference output until the no parameter is used with the command. The debug output and system error messages are written on the virtual terminal. Use the log file or log syslog command in configure mode to redirect the debugging output to a file or the syslog. Command Syntax (no) debug ldp tsm Syntax Description This command has no arguments or keywords. Command Mode Privileged Exec mode Defaults This command has no default settings.
PAGE 427
CanogaOS Command Reference Defaults This command has no default settings. Examples In the following example, the debug ldp vc events command is used to debug Layer-2 Virtual Circuit information: Switch# debug ldp vc events Related Commands debug ldp dsm debug ldp usm 25.16 disable-ldp Use this command to disable LDP on a specified interface. Note: This command disables the transmission of Hello packets through the current interface, and clears all created sessions and adjacencies for this interface.
PAGE 428
CanogaOS Command Reference Switch (config-if)# disable-ldp Related Commands 25.17 disnable-ldp Use this command to enable LDP on a specified interface. Command Syntax enable-ldp Syntax Description This command has no arguments or keywords. Command Mode Interface mode Defaults This command has no default settings.
PAGE 429
CanogaOS Command Reference MPLS/BGP VPNs.Use the no parameter to stop sending explicit-null labels for directly connected FECs, and resume sending implicit-null labels for them. Command Syntax (no) explicit-null Syntax Description This command has no arguments or keywords. Command Mode Router mode Defaults Sends implicit-null labels.
PAGE 430
CanogaOS Command Reference Command Mode Router mode Defaults The default is 5 seconds. Examples In the following example, the hello-interval command is used to set the interval after which hello packets are sent out: Switch(config)# router ldp Switch(config-router)# hello-interval 35 Related Commands hold-time ldp hello-interval ldp hold-time 25.20 hold-time Use this command to set the global value for the hold-time after which the LSR rejects adjacencies.
PAGE 431
CanogaOS Command Reference Related Commands hello-interval ldp hello-interval ldp hold-time 25.21 keepalive-interval Use this command to set the global value for the interval after which keep-alive packets are sent out. Use the no parameter to revert to default keep-alive interval. Command Syntax (no) keepalive-interval number Syntax Description number Specifies the value of interval in seconds, the range is 10 to 21845 Command Mode Router mode Defaults The default is 10 seconds.
PAGE 432
CanogaOS Command Reference 25.22 keepalive-timeout Use this command to set the global value for the time-out after which sessions are rejected. Use the no parameter to revert to default keep-alive time-out. Command Syntax (no) keepalive-timeout number Syntax Description number Specifies the time-out value in seconds, the range is 30 to 65535 Command Mode Router mode Defaults The default is 30 seconds.
PAGE 433
CanogaOS Command Reference (no) ldp hello-interval number Syntax Description number Specifies the interval in seconds, the range is 1 to 21845 Command Mode Interface mode Defaults The default is 5 seconds.
PAGE 434
CanogaOS Command Reference Defaults The default is 15 seconds. Examples In the following example, the ldp hold-time command is used to set the hold-time value after which the LSR rejects adjacencies: Switch # configure terminal Switch (config)# interface eth-0-1 Switch (config-if)# ldp hold-time 635 Related Commands hello-interval hold-time ldp hello-interval 25.25 ldp keepalive-interval Use this command to set the interval for sending keep-alive messages to the peer in order to maintain a session.
PAGE 435
CanogaOS Command Reference session: Switch# configure terminal Switch(config)# interface eth-0-1 Switch(config-if)# ldp keepalive-interval 635 Related Commands ldp keepalive-timeout 25.26 ldp keepalive-timeout Use this command to set the keep-alive time-out value for rejecting a session with a peer. Use the no parameter to revert to the keep-alive time-out set for the main LDP process.
PAGE 436
CanogaOS Command Reference 25.27 ldp multicast-hellos Use this command to enable multicast hello exchange on a specified interface. Use the no parameter to disable multicast hello exchange. Command Syntax (no) ldp multicast-hellos Syntax Description This command has no arguments or keywords.
PAGE 437
CanogaOS Command Reference Command Mode Interface mode Defaults The default is 15 seconds. Examples In the following example, the ldp targeted-peer-hello-interval command is used to set the interval for sending unicast hello packets to targeted peers via this interface: Switch# configure terminal Switch(config)# interface eth-0-1 Switch(config-if)# ldp targeted-peer-hello-interval 635 Related Commands show ldp interface IFNAME targeted-peer-hello-interval 25.
PAGE 438
CanogaOS Command Reference Defaults The default is 45 seconds. Examples In the following example, the ldp targeted-peer-hold-time command is used to set the time-out value that is the time that the router waits before rejecting an adjacency with a targeted peer: Switch# configure terminal Switch(config)# interface eth0 Switch(config-if)# ldp targeted-peer-hold-time 635 Related Commands show ldp interface IFNAME targeted-peer-hold-time 25.
PAGE 439
CanogaOS Command Reference Switch# configure router Switch(config)# router ldp Switch(config-router)# 25.31 Related Commandsrouter-id Use this command to set the router-id to the supplied IP address; the router uses this address to generate the LDP-ID. Use the no parameter with this command to revert to using the first IP address configured on the box as the router-id for LDP-ID generation purposes. Command Syntax (no) router-id A.B.C.D Syntax description A.B.C.D The new IP address.
PAGE 440
CanogaOS Command Reference Command Syntax show debugging ldp Syntax description This command has no arguments or keywords.
PAGE 441
CanogaOS Command Reference Examples The following is a sample output from the show ldp command displaying basic LDP attributes. Switch # show ldp Router ID : 10.10.0.
PAGE 442
CanogaOS Command Reference Examples In the following example, the show ldp adjacency command is used to display all the adjacencies for the current LSR: Switch # show ldp adjacency IP Address Interface Name Holdtime LDP ID 192.168.3.5 eth1 15 10.10.0.18:0 192.168.4.5 eth2 15 10.10.0.18:0 Related Commands 25.35 show ldp advertise-labels Use this command to display the IP access list of LDP advertise-labels.
PAGE 443
CanogaOS Command Reference label information exchanged. Command Syntax show ldp downstream Syntax description This command has no arguments or keywords. Command Mode Privileged Exec mode Examples In the following example, the show ldp downstream command is used to display the status of all downstream sessions and the label information exchanged: Switch # show ldp downstream Session peer 192.168.11.50: Downstream state: Established Label: impl-null RequestID: 0 Peer: 192.168.11.
PAGE 444
CanogaOS Command Reference 25.37 show ldp fec Use the following command to display all FECs known to the current LSR. Command Syntax show ldp fec [host | prefix] Syntax description host prefix The host FEC. The prefix FEC. Command Mode Privileged Exec mode Defaults This command has no default settings.
PAGE 445
CanogaOS Command Reference Command Syntax show ldp interface [IFNAME] Syntax description IFNAME The name of the interface, the format follows below: eth-0-1, agg1, vlan1, etc. Command Mode Privileged Exec mode Defaults This command has no default settings. Examples In the following example, the show ldp interface command is used to display detailed information for a specific interface: Switch# show ldp interface eth-0-1 Status : Enabled Primary IP Address : 192.168.3.
PAGE 446
CanogaOS Command Reference This command has no arguments or keywords. Command Mode Privileged Exec mode Defaults This command has no default settings. Examples In the following example, the show ldp lsp command is used to display LDP LSP and, optionally, advertise-label information: Switch# show ldp lsp Advertisement spec: Prefix acl = pfx1; Peer acl = pfx1 Prevent the distribution of any assigned labels FEC IPV4:1.1.1.0/30 -> 0.0.0.0 Downstream state: Established Label: impl-null RequestID: 0 Peer: 50.50.
PAGE 447
CanogaOS Command Reference show ldp lsp host show ldp lsp prefix show ldp lsp cr-lsp 25.40 show ldp mpls-l2-circuit Use this command to display summarized Layer-2 Virtual Circuit information. Command Syntax show ldp mpls-l2-circuit [detail | Virtual_Circuit_ID] Syntax description Show detailed information detail Virtual_Circuit_ID Specify the MPLS Layer-2 Virtual Circuit by circuit identifier, the range is 1 to 4294967295. Command Mode Privileged Exec mode Defaults This command has no default settings.
PAGE 448
CanogaOS Command Reference Syntax description A.B.C.D The IPv4 address of the peer for which information is to be shown. Command Mode Privileged Exec mode Defaults This command has no default settings. Examples In the following example, the show ldp session command is used to display sessions established between the current LSR and other LSRs: Switch# show ldp session Peer IP Address IF Name My Role State KeepAlive 192.168.11.50 eth1 Passive OPERATIONAL 30 192.168.13.
PAGE 449
CanogaOS Command Reference 192.168.4.5 Received Labels : Fec Label Maps To IPV4:10.10.0.0/24 impl-null none IPV4:192.168.3.0/24 impl-null none IPV4:192.168.4.0/24 impl-null none IPV4:192.168.5.0/24 impl-null none Sent Labels : Fec Label Maps To IPV4:10.10.0.0/24 impl-null none IPV4:192.168.3.0/24 impl-null none IPV4:192.168.4.0/24 impl-null none Related Commands 25.42 show ldp statistics Use this command to display LDP packet statistics.
PAGE 450
CanogaOS Command Referenc Keepalive 1932 1932 Address 1 1 Address Withdraw 0 0 Label Mapping 7 7 Label Request 0 0 Label Withdraw 1 0 Label Release 0 1 Request About 0 0 In the following example, the show ldp statistics command is used to display LDP packet statistics: Switch# show ldp statistics advertise-labels Advertisement spec: Prefix acl = pfx1; Peer acl = pfx1 Deny : Label Mapping = 2 Label Request = 0 Prevent the distribution of any assigned labels Deny : Label Mapping = 9 Label Request = 3 Relate
PAGE 451
CanogaOS Command Reference Command Mode Privileged Exec mode Examples In the following example, the show ldp targeted-peers command is used to display the list of targeted peers configured on the current LSR: Switch# show ldp targeted-peers IP Address Interface 1.1.1.3 eth-0-9 Related Commands 25.44 show ldp upstream Use this command to display the status of all upstream sessions and label information exchanged.
PAGE 452
CanogaOS Command Reference Session peer 192.168.13.60: Upstream state: Established Label: impl-null RequestID: 0 Peer: 192.168.13.60 Attr: None Upstream state: Established Label: impl-null RequestID: 0 Peer: 192.168.13.60 Attr: None Upstream state: Established Label: impl-null RequestID: 0 Peer: 192.168.13.60 Attr: None Upstream state: Established Label: 16 RequestID: 0 Peer: 192.168.13.60 Attr: None Upstream state: Established Label: 17 RequestID: 0 Peer: 192.168.13.
PAGE 453
CanogaOS Command Reference This command has no default settings. Examples In the following example, the show memory ldp command is used to display memory statistics for the LDP: Switch# show memory ldp Memory type : Alloc count Alloc memory =========================================================== LDP structure : 1 116 LDP interface : 5 500 LDP Adjacencies : 2 72 LDP Sessions : 2 16608 LDP FECs : 10 480 LDP FEC element : 0 1008 LDP Request : 0 0 LDP Attr.
PAGE 454
CanogaOS Command Reference 25.46 Related Commandstargeted-peer Use this command to specify a targeted LDP peer. Command Syntax targeted-peer A.B.C.D Syntax description A.B.C.D Specifies the IPv4 address of the targeted peer. Command Mode Router mode Defaults This command has no default settings. Examples In the following example, the targeted-peer command is used to specify a targeted LDP peer: Switch# configure terminal Switch(config)# router ldp Switch(config-router)# targeted-peer 10.10.10.
PAGE 455
CanogaOS Command Reference Command Mode Router mode Defaults The default is 15 seconds. Examples In the following example, the targeted-peer-hello-interval command is used to set the interval for sending unicast hello packets to targeted peers: Switch# configure terminal Switch(config)# router ldp Switch(config-router)# targeted-peer-hello-interval 100 Related Commands show ldp targeted-peer-hello-interval 25.48 targeted-peer-hello-receipt Use this command to toggle the receipt of targeted hello packets.
PAGE 456
CanogaOS Command Reference Related Commands 25.49 targeted-peer-hold-time Use this command to set the time-out value that is the time that the router waits before rejecting an adjacency with targeted peers. Use the no parameter to revert to the default targeted-peer hold-time value. Command Syntax (no) targeted-peer-hold-time number Syntax description number Specifies the interval in seconds, the range is 3 to 65535 Command Mode Router mode Defaults The default is 45 seconds.
PAGE 457
CanogaOS Command Reference If the label-space is not specified in either form of this command, a label-space of zero is assumed. Command Syntax (no) transport-address A.B.C.D Syntax description A.B.C.D The IPv4 address to be used as the transport address. Only addresses bound to a loopback interface are valid for manual transport address configuration Command Mode Router mode Defaults By default, transport addresses are chosen for label spaces.
PAGE 458
CanogaOS Command Reference detail VPLS_ID Show detailed information Specifies the VPLS identifier, the range is 1 to 4294967295. Command Mode Privileged Exec mode Defaults This command has no default settings. Examples In the following example, the show ldp vpls command is used to display information about all VPLS instances: Switch# show ldp vpls VPLS-ID Peer Address State Type Label-Sent Label-Rcvd 1 192.168.0.80 Up vpls 16 640 1 192.168.0.90 Up vpls 18 642 2 192.168.0.80 Up vpls 19 641 2 192.168.0.
PAGE 459
CanogaOS Command Reference 26 MPLS Commands 26.1 mpls ilm-entry Use this command to configure one static ILM entry. Command Syntax mpls ilm-entry swap INLABEL A.B.C.D OUTLABEL mpls ilm-entry php INLABEL A.B.C.D mpls ilm-entry pop INLABEL Syntax Description INLABEL A.B.C.D OUTLABEL Incoming label, the range is 16 to 1048575. Nexthop ip address. Outgoing label, the range should be from 16 to 1048575, or 3(implicit null) or 0(explicit null).
PAGE 460
CanogaOS Command Reference Command Mode Configure mode Defaults This command has no default settings. Examples In the following example, the no mpls ilm-entry command is used to remove one static ILM entry: Switch# configure terminal Switch(config)# no mpls ilm-entry 100 Related Commands mpls ilm-entry 26.3 mpls ftn-entry Use this command to configure one static FTN entry. Command Syntax mpls ftn-entry {A.B.C.D M.M.M.M | A.B.C.D/M} OUTLABEL A.B.C.D Syntax Description A.B.C.D M.M.M.M A.B.C.D/M OUTLABEL A.
PAGE 461
CanogaOS Command Reference no mpls ftn-entry 26.4 no mpls ftn-entry Use this command to remove one static FTN entry. Command Syntax no mpls ftn-entry {A.B.C.D M.M.M.M | A.B.C.D/M} A.B.C.D Syntax Description A.B.C.D M.M.M.M A.B.C.D/M A.B.C.D FEC for FTN entry. FEC for FTN entry. Nexthop ip address. Command Mode Configure mode Defaults This command has no default settings.
PAGE 462
CanogaOS Command Reference Command Mode Configure mode Defaults This command has no default settings. Examples In the following example, the mpls lsp-tunneling command is used to specify one ILM to tunnel: Switch# configure terminal Switch(config)# mpls lsp-tunneling 100 300 200.200.200.0/24 Related Commands no mpls lsp-tunneling 26.6 no mpls lsp-tunneling Use this command to remove one ILM from using a tunnel.
PAGE 463
CanogaOS Command Reference Command Syntax mpls map-route { A.B.C.D/M | A.B.C.D M.M.M.M } N.N.N.N/M Syntax Description A.B.C.D/M A.B.C.D M.M.M.M N.N.N.N/M IPv4 prefix to be mapped. IPv4 prefix to be mapped. FEC for route to be mapped to. Command Mode Configure mode Defaults This command has no default settings. Examples In the following example, the mpls map-route command is used to specify one FEC mapped to a FTN entry: Switch# configure terminal Switch(config)# mpls map-route 100.100.100.0/24 200.200.
PAGE 464
CanogaOS Command Reference In the following example, the no mpls map-route command is used to remove one route map relation: Switch# configure terminal Switch(config)# no mpls map-route 100.100.100.0/24 200.200.200.
PAGE 465
CanogaOS Command Reference mpls enable-all-interfaces Use this command to enable all the L3 interfaces’ label switch function. Command Syntax mpls enable-all-interfaces Syntax Description This command has no arguments or keywords. Command Mode Configure mode Defaults Label switch function is disabled.
PAGE 466
CanogaOS Command Reference Syntax Description This command has no arguments or keywords. Command Mode Configure mode Defaults Label switch function is disabled. Examples In the following example, the mpls disable-all-interfaces command is used to disable all the L3 interfaces’ label switch function: Switch# configure terminal Switch(config)# mpls disable-all-interfaces Related Commands mpls enable-all-interfaces 26.10 label-switching Use this command to enable an interface’s label switch function.
PAGE 467
CanogaOS Command Reference This command has no arguments or keywords. Command Mode Interface mode Defaults Label switch function is disabled. Examples In the following example, the label-switching command is used to enable an interface’s label switch function: Switch# configure terminal Switch(config)# interface eth-0-1 Switch(config-if)# label-switching 26.11 Related Commandsmpls propagate-ttl Use this command to enable mpls propagate-ttl function.
PAGE 468
CanogaOS Command Reference 26.12 show mpls ftn-database Use this command to display MPLS Forwarding table for detail. Command Syntax show mpls ftn-database Syntax description This command has no arguments or settings.
PAGE 469
CanogaOS Command Reference 26.13 show mpls ftn-forwarding Use this command to display MPLS Forwarding table. Command Syntax show mpls ftn-forwarding Syntax description This command has no arguments or settings. Command Mode Privileged EXEC mode Examples In the following example, the show mpls ftn-forwarding command is used to display MPLS Forwarding table: Switch# show mpls ftn-forwarding FEC Nexthop Out-Intf 3.3.3.0/24 Out-Label 3 2.2.2.2 eth-0-9 5.5.5.0/24 1024 2.2.2.
PAGE 470
CanogaOS Command Reference 26.14 show mpls ilm-database Use this command to display MPLS Incoming Label Map table for detail. Command Syntax show mpls ilm-database Syntax description This command has no arguments or settings.
PAGE 471
CanogaOS Command Reference 26.15 show mpls ilm-forwarding Use this command to display MPLS Incoming Label Map table. Command Syntax show mpls ilm-forwarding Syntax description This command has no arguments or settings. Command Mode Privileged EXEC mode Examples In the following example, the show mpls ilm-forwarding command is used to display MPLS Incoming Label Map table: Switch# show mpls ilm-forwarding FEC 5.5.5.0/24 I/O Label 1024/3 Nexthop 3.3.3.
PAGE 472
CanogaOS Command Reference Command Syntax show mpls interface [IFNAME] Syntax description IFNAME The name of the interface, the format follows below: eth-0-1, agg1, vlan1, etc.
PAGE 473
CanogaOS Command Reference This command has no arguments or settings. Command Mode Privileged EXEC mode Examples In the following example, the show mpls lsp-tunneling command is used to display MPLS LSP-Tunneling: Switch1# show mpls lsp-tunneling Codes: > - selected ILM Code I/O Label 200/300 FEC 5.5.5.0/24 Out-Intf N/A Related Commands 26.18 show mpls mapped-routes Use this command to display mapped MPLS routes.
PAGE 474
CanogaOS Command Reference Privileged EXEC mode Examples In the following example, the show mpls mapped-routes command is used to display mapped MPLS routes: Switch# show mpls mapped-routes Mapped-route IPv4 FEC 11.11.11.0/24 5.5.5.0/24 In the following example, the show mpls ftn-forwarding command is used to display MPLS Forwarding table including mapped MPLS routes: Switch# show mpls ftn-forwarding FEC Out-Label Nexthop Out-Intf 3.3.3.0/24 3 2.2.2.2 eth-0-9 5.5.5.0/24 1026 2.2.2.
PAGE 475
CanogaOS Command Reference Command Mode Privileged EXEC mode Examples In the following example, the show mpls statistics all command is used to display all statistics information: Switch# show mpls statistics all Input : 5 packets, 610 bytes Output : 0 packets, 0 bytes In the following example, the show mpls statistics ilm command is used to display MPLS ILM statistics information: Switch# show mpls statistics ilm Label Packets Bytes 1024 0 0 1025 5 610 1026 0 0 Related Commands show mpls ftn-f
PAGE 476
CanogaOS Command Reference Minimum label configured: 16 Maximum label configured: 16383 Per label-space information: Label-space 0 is using minimum label: 16 and maximum label: 16383 Custom ingress TTL configured: none Custom egress TTL configured: none Log message detail: none Packets dropped IP:6, dropped MPLS:0 sent to IP:46392, labeled:0, switched:0 Related Commands 26.21 clear mpls statistics Use this command to clear statistics of MPLS packets.
PAGE 477
CanogaOS Command Reference 27 BGP VPN Commands 27.1 address-family ipv4 vrf Use this command to enable the exchanging of VRF routing information and switches command mode to address family-vrf mode.
PAGE 478
CanogaOS Command Reference Command Syntax address-family vpnv4 unicast unicast Address Family modifier Default Disabled Command Mode Router mode Usage Use this command to enter the address family configuration mode. The address family mode allows the configuration of routing sessions that use VPN version 4 address prefixes. Use the exit-address-family command to go back to router mode.
PAGE 479
CanogaOS Command Reference 27.4 exit-address-family Use this command to exit address-family-vrf or address-family-vpnv4 mode.fd Command Syntax exit-address-family Command Mode Address Family-vrf and Address Family-vpnv4 mode. Examples The following example shows the change in prompt after using the exit-address-family command to exit the address-family mode.
PAGE 480
CanogaOS Command Reference Switch(config-router)# address-family vpnv4 unicast Switch(config-router-af)# neighbor 10.10.20.1 activate Related Commands address-family 27.6 neighbor allowas-in Use this command to configure PE routers to allow re-advertisement of all prefixes containing duplicate Autonomous System Numbers (ASNs). Use the no parameter with this command to disable the readvertisement of a PE router's ASN.
PAGE 481
CanogaOS Command Reference neighbor NEIGHBORADDRESS as-origination-interval TIME (no) neighbor NEIGHBORADDRESS as-origination-interval NEIGHBORADDRESS neighbor IP address. Use A.B.C.D form. TIME <1-600> time in seconds Default Disabled Command Mode Router mode and Address Family mode Usage This command is used to change the minimum interval between sending AS-origination routing updates. The interval can be from 1 to 600 seconds.
PAGE 482
CanogaOS Command Reference neighbor as-override command on the PE router removes the CE neighbor’s ASN from the AS_PATH attribute allowing CE routers with the same ASN to accept routes from each other. Examples Switch(config-router)# address-family ipv4 vrf VRF_A Switch(config-router-af)# neighbor 10.10.0.1 as-override Related Commands address family ipv4 vrf, neighbor remote-as 27.9 neighbor description Use this command to associate a description with a neighbor.
PAGE 483
CanogaOS Command Reference NEIGHBORADDRESS neighbor IP address. Use A.B.C.D form. ASN <1-65535> AS number of the customer’s site Command Mode Address Family-vrf mode Usage Use this command to specify a neighbor’s autonomous system number. If the specified ASN matches the ASN number specified in the router bgp global configuration, the neighbor is identified as internal, if not (ASN does not match) then external, to the local AS.
PAGE 484
CanogaOS Command Reference Switch(config-router-af)#neighbor 10.10.0.1 send-community extended 27.12 neighbor shutdown Use this command to disable a neighbor administratively. Use the no parameter with this command to re-enable a neighbor. Command Syntax (no) neighbor NEIGHBORADDRESS shutdown NEIGHBORADDRESS neighbor IP address. Use A.B.C.D form.
PAGE 485
CanogaOS Command Reference Address Family-vrf mode Usage If the customer AS is multi-homed to ISP, this command ensures that PE does not advertise the routes back to same AS. Examples Switch(config-router)# address-family ipv4 vrf VRF_A Switch(config-router-af)# neighbor 10.10.0.1 soo 100:1 Related Commands address-family ipv4 vrf, neighbor remote-as 27.14 redistribute Use this command to redistribute routes between routing domains.
PAGE 486
CanogaOS Command Reference 192.16.10.1:1) Command Mode VRF mode Usage Use the route distinguisher command to create routing and forwarding tables and to specify the default RD for a VPN. The RD is added to the customer's IPv4 prefixes, changing them into globally unique VPN-IPv4 prefixes. Examples Switch(config)# ip vrf VRF_A Switch(config-vrf)# rd 100:1 Related Commands ip vrf, route-target 27.
PAGE 487
CanogaOS Command Reference Switch(config)# ip vrf VRF_A Switch(config-vrf)# route-target both 100:10 Switch(config)# ip vrf VRF_A Switch(config-vrf)# route-target import 100:20 Related Commands ip vrf, route distinguisher 27.17 show ip bgp vpnv4 Use this command to display all VPNv4 routing data, routing data for a VRF or a route-distinguisher.
PAGE 488
CanogaOS Command Reference 27.18 show ip vrf Use this command to display the routing information of the VRF. Command Syntax show ip vrf (VRF-NAME) VRF-NAME a name used to identify a VRF. Command Mode Privileged Exec mode and Exec mode Usage This command shows VRF related information, such as interface, Route Distinguisher, Route-target, etc.
PAGE 489
CanogaOS Command Reference 28 Route-map Commands 28.1 route-map To define the conditions for redistributing routes from one routing protocol into another, or to enable policy routing in bgp, use the route-map command in global configuration mode and the match and set command in route-map configuration modes. To delete an entry, use the no form of this command.
PAGE 490
CanogaOS Command Reference Examples The following example shows how to create a route-map and enter route-map configuration mode: Switch(config)# route-map rip-to-ospf permit Switch(config-route-map)# match metric 1 Switch(config-route-map)# set metric 2 Related Commands match as-path match community match interface match ip address match local-preference match metric match origin match route-type match tag set aggregator set as-path set atomic-aggregate set comm-list set community set dampening set extcom
PAGE 491
CanogaOS Command Reference accepted nor forwarded, irrespective of permit or deny specifications. The route specified by the policies might not be the same as specified by the routing protocols. Setting policies enable packets to take different routes, depending on their length or content. Packet forwarding based on configured policies overrides packet forwarding specified in routing tables. Note: This command is valid only for BGP.
PAGE 492
CanogaOS Command Reference apply policies to large numbers of routes by using match and set commands. Community lists are used to identify and filter routes by their common attributes. Use the match community command to allow matching based on community lists. The values set by the match community command overrides the global values. The route that does not match at least one match clause is ignored. Note: This command is valid only for BGP.
PAGE 493
CanogaOS Command Reference Note: This command is valid only for RIP, OSPF. Command Syntax match interface IFNAME no match interface Syntax Description IFNAME A string that specifies the interface for matching. Command Mode Route-map mode Defaults No match interface is specified by default. Examples Switch# configure terminal Switch(config)# route-map mymap1 permit 10 Switch(config-route-map)# match interface eth-0-1 Related Commands match tag match route-type external 28.
PAGE 494
CanogaOS Command Reference Note: This command is valid for BGP, OSPF and RIP only. Command Syntax match ip address ACCESSLISTID no match ip address [ ACCESSLISTID ] Syntax Description ACCESSLISTID Specify a IPv4 access-list name, up to 20 characters. Command Mode Route-map mode Defaults No match ip address is specified by default.
PAGE 495
CanogaOS Command Reference Note: This command is valid for BGP, OSPF and RIP only. Command Syntax match ip address prefix-list LISTNAME no match ip address prefix-list [ LISTNAME ] Syntax Description LISTNAME Specifies the IP prefix list name. Command Mode Route-map mode Defaults No match ip address prefix-list is specified by default.
PAGE 496
CanogaOS Command Reference tables. Note: This command is valid for BGP, OSPF and RIP only Command Syntax match ip next-hop ACCESSLISTID no match ip next-hop [ ACCESSLISTID ] Syntax Description ACCESSLISTID Specify a IPv4 access-list name, up to 20 characters. Command Mode Route-map mode Defaults No match ip next-hop is specified by default.
PAGE 497
CanogaOS Command Reference no match ip next-hop prefix-list [ LISTNAME ] Syntax Description LISTNAME A string specifying the prefix-list name. Command Mode Route-map mode Defaults No match ip next-hop prefix-list is specified by default. Examples Switch# configure terminal Switch(config)# route-map mymap permit 3 Switch(config-route-map)# match ip next-hop prefix-list list1 Related Commands match metric match interface match ip next-hop 28.
PAGE 498
CanogaOS Command Reference Examples Switch# configure terminal Switch(config)# route-map mymap permit 3 Switch(config-route-map)# match local-preference 100 Related Commands match community match as-path set as-path set community match ip next-hop 28.10 match metric Use this command to match a metric of a route. Use the no parameter with this command to disable this function. The match metric command specifies the metric to be matched.
PAGE 499
CanogaOS Command Reference No match metric is specified by default. Examples Switch# configure terminal Switch(config)# route-map myroute permit 3 Switch(config-route-map)# no match metric 888999 Related Commands match community match as-path set as-path set community match ip next-hop 28.11 match origin Use this command to match origin code. Use the no parameter with this command to disable this matching. The origin attribute defines the origin of the path information.
PAGE 500
CanogaOS Command Reference no match origin Syntax Description egp learned from EGP. igp Local IGP incomplete Unknown heritage Command Mode Route-map mode Defaults No match origin is specified by default. Examples Switch# configure terminal Switch(config)# route-map myroute deny 34 Switch(config-route-map)# match origin egp Related Commands 28.12 match route-type Use this command to match specified external route type. Use the no parameter with this command to turn off the matching.
PAGE 501
CanogaOS Command Reference Defaults No match route-type is specified by default. Examples Switch# configure terminal Switch(config)# route-map mymap1 permit 10 Switch(config-route-map)# match route-type external type-1 Related Commands match tag 28.13 match tag Use this command to match the specified tag value. Use the no parameter with this command to turn off the declaration. Use the match tag command to match the specified tag value. Note: This command is valid for RIP and OSPF only.
PAGE 502
CanogaOS Command Reference 28.14 set aggregator Use this command to set the AS number for the route map and router ID. Use the no parameter with this command to disable this function. An Autonomous System (AS) is a collection of networks under a common administration sharing a common routing strategy. It is subdivided by areas, and is assigned a unique 16-bit number. Use the set aggregator command to assign an AS number for the aggregator.
PAGE 503
CanogaOS Command Reference Related Commands 28.15 set as-path Use this command to modify an autonomous system path for a route. Use the no parameter with this command to disable this function. Use the set as-path command to specify an autonomous system path. By specifying the length of the AS-Path, the router influences the best path selection by a neighbor. Use the prepend parameter with this command to prepend an AS path string to routes increasing the AS path length.
PAGE 504
CanogaOS Command Reference Related Commands 28.16 set atomic-aggregate Use this command to set an atomic aggregate attribute. Use the no parameter with this command to disable this function To use the set atomic aggregate command, you must first have a match clause. Match and set commands set the conditions for redistributing routes from one routing protocol to another. The match command specifies the match criteria under which redistribution is allowed for the current route-map.
PAGE 505
CanogaOS Command Reference 28.17 set comm-list delete Use this command to delete the matched communities from the community attribute of an inbound or outbound update when applying route-map. Use the no parameter with this command to disable this feature. .Note: This command is valid for BGP only. Command Syntax set comm-list { <1-199>|<100-199>|WORD } delete no set comm-list Syntax Description <1-199> Standard community-list number.
PAGE 506
CanogaOS Command Reference match command specifies the match criteria under which redistribution is allowed for the current route-map. The set command specifies the set redistribution actions to be performed, if the match criteria are met. If the packets do not match any of the defined criteria, they are routed through the normal routing process. Note: This command is valid for BGP only.
PAGE 507
CanogaOS Command Reference Switch# configure terminal Switch(config)# route-map rmap1 permit 3 Switch(config-route-map)# set community 10:01 23:34 12:14 no-export Related Commands 28.19 set dampening Use this command to enable route-flap dampening and set parameters. Use the no parameter with this command to disable it. Set the unreachability half-life time to be equal to, or greater than, reachability half-life time. The suppress-limit value must be greater than or equal to the reuse limit value.
PAGE 508
CanogaOS Command Reference Defaults Reference to the syntax description above. Examples Switch# configure terminal Switch(config)# route-map R1 permit 24 Switch(config-route-map)# set dampening 20 333 534 30 Related Commands 28.20 set extcommunity Use this command to set an extended community attribute. Use the no parameter with this command to disable this function To use the set extcommunity command, you must first have a match clause.
PAGE 509
CanogaOS Command Reference Defaults No set extcommunity is specified by default. Examples Switch# configure terminal Switch (config)# route-map rmap1 permit 3 Switch (config-route-map)# set extcommunity rt 06:01 Switch # configure terminal Switch (config)# route-map rmap1 permit 3 Switch (config-route-map)# set extcommunity rt 0.0.0.
PAGE 510
CanogaOS Command Reference Switch# configure terminal Switch(config)# route-map mymap permit 3 Switch(config-route-map)# set ip next-hop 10.10.0.67 Related Commands 28.22 set local-preference Use this command to set the specified local-preference value. Use the no parameter with this command to turn off the setting. Use this command to set the local-preference value of the routes Note: This command is valid for BGP only.
PAGE 511
CanogaOS Command Reference This command sets the metric value for a route, and influences external neighbors about the preferred path into an Autonomous System (AS). The preferred path is the one with a lower metric value. A router compares metrics for paths from neighbors in the same ASs. To compare metrics from neighbors coming from different ASs, use the bgp always-compare-med command. To use the set metric command, you must first have a match clause.
PAGE 512
CanogaOS Command Reference This command sets the type to either Type-1 or Type-2 in the AS-external-LSA when the route-map matches the condition. Note: This command is valid for OSPF only. Command Syntax set metric-type {type1 | type2} no set metric-type Syntax Description type1 Select to set external type 1 metric. type2 Select to set external type 2 metric. Command Mode Route-map mode Defaults No set metric-type is specified by default.
PAGE 513
CanogaOS Command Reference If the packets do not match any of the defined criteria, they are routed through the normal routing process. Note: This command is valid for BGP only. Command Syntax set origin { egp | igp | incomplete } no set origin Syntax Description egp Specifies a remote EGP system. igp A local IGP system. incomplete Specifies a system of unknown heritage. Command Mode Route-map mode Defaults No set origin is specified by default.
PAGE 514
CanogaOS Command Reference Note: This command is valid for BGP only. Command Syntax set originator-id IPADDRESS no set originator-id Syntax Description IPADDRESS Specifies the IP address of originator. Command Mode Route-map mode Defaults No set originator-id is specified by default. Examples Switch# configure terminal Switch(config)# route-map rmap1 permit 3 Switch(config-route-map)# set originator-id 1.1.1.1 Related Commands 28.27 set tag Use this command to set a specified tag value.
PAGE 515
CanogaOS Command Reference Syntax Description TAGVALUE <0-4294967295> Tag value for destination routing protocol. Command Mode Route-map mode Defaults No set tag is specified by default. Examples Switch# configure terminal Switch(config)# route-map rmap1 permit 3 Switch(config-route-map)# set tag 6 Related Commands redistribute default-information 28.28 set vpnv4 next-hop Use this command to set a VPNv4 next-hop address.
PAGE 516
CanogaOS Command Reference IPADDRESS Specifies the IP address of next hop. Command Mode Route-map mode Defaults No set vpnv4 next-hop is specified by default. Examples Switch# configure terminal Switch(config)# route-map rmap1 permit 3 Switch(config-route-map)# set vpnv4 next-hop 6.6.6.6 Related Commands 28.29 set weight Use this command to set weights for the routing table. Use the no parameter with this command to delete an entry. The weight value is used to assist in best path selection.
PAGE 517
CanogaOS Command Reference Syntax Description WEIGHT <0-4294967295> Specifies the weight value. Command Mode Route-map mode Defaults No set weight is specified by default. Examples Switch# configure terminal Switch(config)# route-map rmap1 permit 3 Switch(config-route-map)# set weight 60 Related Commands match as-path 28.30 show route-map Use this command to display user readable route-map information.
PAGE 518
CanogaOS Command Reference route-map 28-30
PAGE 519
CanogaOS Command Reference 29 VPLS Commands 29.1 mpls vpls-vlan Use this command to create a block of continuous vlan id which are used for vpls function. Note: This command will reserve a block of continuous vlan id, those vlan id can not used for other purpose. And the number of vlan id in this block determine the number of vpls instance. This command is used to enable vpls function. When vpls instance have been created, this block of vlan id can not be changed.
PAGE 520
CanogaOS Command Reference 29.2 no mpls vpls-vlan Use this command to release a block of continuous vlan id which used for vpls function. Note: This command will release the block of continuous vlan id. This command used disable vpls function. when no vpls instance is created, this command can succeed. Command Syntax no mpls vpls-vlan Syntax Description This command has no arguments or keywords. Command Mode Configure mode Defaults This command has no default settings.
PAGE 521
CanogaOS Command Reference Syntax Description NAME VPLS-ID Identifying string for VPLS instance. Identifying value for VPLS instance, the range should be from 1 to 4294967295. Command Mode Configure mode Defaults This command has no default settings. Examples In the following example, the mpls vpls command is used to create a VPLS instance and come into the VPLS instance mode: Switch # configure terminal Switch (config)#mpls vpls vpls1 1 Switch (config-vpls)# Related Commands 29.
PAGE 522
CanogaOS Command Reference 29.5 vpls-description Use this command to add characters describing for VPLS instance. Command Syntax vpls-description LINE Syntax Description LINE Characters describing the VPLS instance Command Mode VPLS mode Examples In the following example, the vpls-description command is used to add characters describing for VPLS instance: Switch# configure terminal Switch (config)#mpls vpls vpls1 1 Switch (config-vpls)# vpls-description this is a good vpls instance Related Commands 29.
PAGE 523
CanogaOS Command Reference vpls-description 29.7 vpls-mtu Use this command to set mtu for VPLS instance. Note: If set the MTU value for the VPLS instance, LDP will advertise this value to peers in the instance. Command Syntax vpls-mtu MTU Syntax Description MTU MTU value for the VPLS instance, the range is from 576 to 65535. Command Mode VPLS mode Defaults This command has no default settings.
PAGE 524
CanogaOS Command Reference Defaults This command has no default settings. Examples In the following example, the no vpls-mtu command is used to unset mtu for VPLS instance: Switch# configure terminal Switch (config)#mpls vpls vpls1 1 Switch (config-vpls)# no vpls-mtu Related Commands vpls-mtu 29.9 vpls-peer Use this command to add a remote PE for VPLS instance.
PAGE 525
CanogaOS Command Reference Related Commands no vpls-peer 29.10 no vpls-peer Use this command to remove a remote PE from VPLS instance. Command Syntax no vpls-peer A.B.C.D Syntax Description A.B.C.D IP address of the peer node to be removed. Command Mode VPLS mode Defaults This command has no default settings.
PAGE 526
CanogaOS Command Reference OUT-LABEL 1048575. Outgoing label, the range should be from 16 to 1048575. Command Mode Configure mode Examples In the following example, the vpls-fib-add command is used to add a static PW for a PE in a VPLS instance: Switch# configure terminal Switch (config)# vpls-fib-add vpls1 peer 100.100.100.1 101 102 Related Commands vpls-fib-delete 29.12 vpls-fib-delete Use this command to delete a static PW for a PE in a VPLS instance. Command Syntax vpls-fib-delete NAME peer A.B.C.
PAGE 527
CanogaOS Command Reference Examples In the following example, the vpls-fib-delete command is used to delete a static PW for a PE in a VPLS instance: Switch# configure terminal Switch (config)#mpls vpls vpls1 1 Switch (config)# vpls-fib-delete vpls1 peer 100.100.100.1 Related Commands vpls-fib-add 29.13 mpls-vpls Use this command to bind an interface to a VPLS instance.
PAGE 528
CanogaOS Command Reference 29.14 no mpls-vpls Use this command to unbind an interface to a VPLS instance. Command Syntax no mpls-vpls NAME [vlan VLANID] Syntax description NAME VLANID Identifying string for VPLS instance Vlan identifier, the range should be from 1 to 4094. Command Mode Interface mode Defaults This command has no default settings.
PAGE 529
CanogaOS Command Reference Examples In the following example, the clear mpls vpls command is used to remove MAC addresses that have been dynamically learned for faster convergence: Switch# clear mpls vpls vpls1 mac-addresse Related Commands 29.16 show mpls vpls Use this command to display MPLS VPLS instance information. Command Syntax show mpls vpls [NAME | detail | mesh] Syntax description NAME detail mesh Identifying string for VPLS. Show detailed VPLS information. Show MPLS VPLS Mesh information.
PAGE 530
CanogaOS Command Reference vpls2 720 0 0 0 Inactive vpls1 7000 1 0 0 Active In the following example, the show mpls vpls detail command is used to display detailed VPLS information: Switch# show mpls vpls detail Virtual Private LAN Service Instance: vpls2, ID: 720 Group ID: 0, Configured MTU: NULL Description: none AC interface : Name TYPE Vlan eth-0-6 Ethernet ALL Virtual Private LAN Service Instance: vpls1, ID: 7000 Group ID: 0, Configured MTU: NULL Description: none AC interface : Name
PAGE 531
CanogaOS Command Reference 29.17 show mac address-table vpls Use this command to display FDB learned by VPLS. Command Syntax show mac address-table vpls [address | count | interface | name | peer] Syntax description address count interface name peer Query FDB by address. Count of MAC address-table entries. Query FDB by interface. Query FDB by VPLS instance. Query FDB by peer ip address.
PAGE 532
CanogaOS Command Reference 30 MPLS OAM Commnands 30.1 ping mpls ipv4 Use this command to initiate checking MPLS host reachability and network connectivity by specifying the destination type as a Label Distribution Protocol (LDP) IPv4 address. Command Syntax ping mpls ipv4 A.B.C.D/M [destination A.B.C.D | detail | dsmap | flags | interval INT_VAL | repeat REP_VAL | reply-mode MODE | source A.B.C.D | timeout TIME_OUT | ttl TTL_VAL] Syntax Description A.B.C.
PAGE 533
CanogaOS Command Reference Command Mode Privileged EXEC mode Defaults This command has no default settings. Examples In the following example, the ping mpls ipv4 command is used to initiate checking MPLS host reachability and network connectivity by specifying the destination type as a Label Distribution Protocol (LDP) IPv4 address. Switch# ping mpls ipv4 1.1.1.1/24 destination 127.0.0.1 dsmap detail flags interval 100 repeat 100 reply-mode 1 source 1.1.1.1 timeout 100 ttl 200 Related Commands 30.
PAGE 534
CanogaOS Command Reference repeat REP_VAL reply-mode MODE timeout TIME_OUT ttl TTL_VAL 20000.Default is 2. Specifies the number of times to resend a packet. The range is from 1 to 5000. Default is 5. Specifies the reply mode for the echo request packet. z Reply with IP UDP packet (default) z Reply with IP UDP packet with router alert Specifies the timeout interval in seconds. The range is from 1 to 500. Default is 60. Specifies the TTL value to be used in the MPLS labels. The range is from 1 to 255.
PAGE 535
CanogaOS Command Reference destination A.B.C.D detail dsmap flags interval INT_VAL repeat REP_VAL reply-mode MODE timeout TIME_OUT ttl TTL_VAL request packet. Specifies a network 127/8 address to be used as the destination address in the echo request packet. Enables verbose output information, including MPLS echo reply, sender address of the packet, and return codes. Indicates that a downstream mapping (DSMAP) type length and value should be included in the LSP echo request.
PAGE 536
CanogaOS Command Reference 30.4 traceroute mpls ipv4 Use this command to initiate tracing the route traversed by specifying the destination type as a Label Distribution Protocol (LDP) IPv4 address. Command Syntax traceroute mpls ipv4 A.B.C.D/M [destination A.B.C.D | detail | dsmap | flags | interval INT_VAL | repeat REP_VAL | reply-mode MODE | source A.B.C.D | timeout TIME_OUT | ttl TTL_VAL] Syntax Description A.B.C.D/M Address prefix of the target and number of bits in the target address network mask.
PAGE 537
CanogaOS Command Reference Defaults This command has no default settings. Examples In the following example, the traceroute mpls ipv4 command is used to initiate tracing the route traversed by specifying the destination type as a Label Distribution Protocol (LDP) IPv4 address. Switch# traceroute mpls ipv4 1.1.1.1/24 destination 127.0.0.1 dsmap detail flags interval 100 repeat 100 reply-mode 1 source 1.1.1.1 timeout 100 ttl 200 Related Commands ping mpls ipv4 31.
PAGE 538
CanogaOS Command Reference reply-mode MODE timeout TIME_OUT ttl TTL_VAL Specifies the reply mode for the echo request packet. z Reply with IP UDP packet (default) z Reply with IP UDP packet with router alert Specifies the timeout interval in seconds. The range is from 1 to 500. Default is 60. Specifies the TTL value to be used in the MPLS labels. The range is from 1 to 255. Default is 255. Command Mode Privileged Exec mode Defaults This command has no default settings.
PAGE 539
CanogaOS Command Reference dsmap flags interval INT_VAL repeat REP_VAL reply-mode MODE timeout TIME_OUT ttl TTL_VAL MPLS echo reply, sender address of the packet, and return codes. Indicates that a downstream mapping (DSMAP) type length and value should be included in the LSP echo request. Received LSR must do an FEC stack validation. Optional. Default is disabled. Specifies a send interval between requests (in milliseconds). The range is from 2 to 20000.Default is 2.
PAGE 540
CanogaOS Command Reference 31 QoS Commands 31.1 qos enable Use this command to enable qos. To disable qos, use the no form of this command. Command Syntax qos enable no qos enable Defaults Disable Command Mode Global configuration Usage None Examples This example shows how to enable qos. Switch(config)# qos enable This example shows how to disable qos. Switch(config)# no qos enable Related Commands None 31.2 qos map dscp-pri-color Use this command to modify the dscp-priority-color map.
PAGE 541
CanogaOS Command Reference Global configuration Usage The default map-table: DSCP map to PRIORITY & COLOR: ------------------------------------------DSCP :0 priority: 0 color 1 1 2 2 3 3 4 4 5 5 6 6 7 7 : green green green green green green green green ------------------------------------------DSCP :8 priority: 8 color 9 9 10 10 11 11 12 12 13 13 14 14 15 15 : green green green green green green green green ------------------------------------------DSCP : 16 priority: 16 color 17 1
PAGE 542
CanogaOS Command Reference show qos map-table 31.3 qos map cos-pri-color Use this command to modify the COS-to-Priority/Color map. To return to the default value, use the no form of this command.
PAGE 543
CanogaOS Command Reference no qos map exp-pri-color (<0-7>) <0-7>: select which exp will be specified map <0-63>: priority value green: outgoing color value: green yellow: outgoing color value: yellow red: outgoing color value: red Command Mode Global configuration Usage The default map-table: EXP map to PRIORITY & COLOR: ------------------------------------------EXP :0 priority: 0 color 1 8 2 16 3 24 4 32 5 40 6 48 7 56 : green green green green green green green green Examples This example sh
PAGE 544
CanogaOS Command Reference ------------------------------------------IP-prec : 0 priority: 0 color 1 8 2 3 4 5 6 7 16 24 32 40 48 56 : green green green green green green green green Examples This example shows how to modify the ip precedence to pri/color map to map ip prec 7 to outgoing priority value 63, and to set the color value green. Switch(config)#qos map ip-prec-pri-color ip-prec 7 to 63 green This example shows how to return to the default value.
PAGE 545
CanogaOS Command Reference Switch(config)#qos map pri-color-cos 63 green to 7 This example shows how to return to the default value. Switch(config)#no qos map pri-color-cos Related Commands show qos map-table 31.7 qos map pri-color-dscp Use this command to modify the PRI_COLOR-to-DSCP map. To return to the default value, use the no form of this command.
PAGE 546
CanogaOS Command Reference 31.8 qos map pri-color-exp Use this command to modify the PRI_COLOR-to-EXP map. To return to the default value, use the no form of this command.
PAGE 547
CanogaOS Command Reference show qos map-table all {default |running} default: default configuration running: running configuration Command Mode EXEC Usage None Examples This example shows how to display the default information of qos map-table. Switch#show qos map-table all default This example shows how to display the running information of qos map-table. Switch#show qos map-table all running Related Commands show qos map-table egress show qos map-table ingress 31.
PAGE 548
CanogaOS Command Reference | none red yellow green ------------------------------------------PRIORITY: 0 | 0 0 0 0 1 |0 0 0 0 2 |0 0 0 0 3 |0 0 0 0 4 |0 0 0 0 5 |0 0 0 0 6 |0 0 0 0 ...... Related Commands show qos map-table all show qos map-table ingress 31.11 show qos map-table ingress Use this command to display the ingress information of qos map-table.
PAGE 549
CanogaOS Command Reference DSCP map to PRIORITY & COLOR: ------------------------------------------DSCP :0 priority: 0 color 1 1 2 2 3 3 4 4 5 5 6 6 7 7 : green green green green green green green green ...... Related Commands show qos map-table all show qos map-table egress 31.12 cos Use this command to configure default cos value on port. To cancel this setting, use the no form of this command.
PAGE 550
CanogaOS Command Reference Command Mode Interface configuration Usage None Examples This example shows how to configure the port trust state to dscp. Switch(config-if)# trust dscp Related Commands no trust 31.14 trust ip-prec Use this command to configure the port trust state to ip-prec to classify ingress packets with the packet IP-PREC values. Command Syntax trust ip-prec Command Mode Interface configuration Usage None Examples This example shows how to configure the port trust state to ip-prec.
PAGE 551
CanogaOS Command Reference Interface configuration Usage None Examples This example shows how to configure the port trust state to outer. Switch(config-if)# trust outer Related Commands no trust 31.16 trust port Use this command to configure the port trust state to port to classify ingress packets with the packet PORT values. Command Syntax trust port Command Mode Interface configuration Usage None Examples This example shows how to configure the port trust state to port.
PAGE 552
CanogaOS Command Reference This example shows how to configure the cos trust state to port. Switch(config-if)# trust cos Related Commands no trust 31.18 replace cos Use this command to replace the cos field in packets on egress. To remove this setting, use the no form of this command. Command Syntax replace cos no replace cos Command Mode Interface configuration Usage None Examples This example shows how to replace the cos field in packets on egress.
PAGE 553
CanogaOS Command Reference None Examples This example shows how to replace the dscp field in packets on egress. Switch(config-if)# replace dscp This example shows how to remove this setting, Switch(config-if)# no replace dscp Related Commands replace cos 31.20 queue class Use this command to map the queue to specified class. To return to default setting, use the no form of this command.
PAGE 554
CanogaOS Command Reference queue <0-7> random-detect no queue <0-7> random-detect <0-7>: queue id Command Mode Interface configuration Usage When the queue length is less than min-threshold, the packets will not be dropped. When the queue length is between min-threshold and max-threshold, the packets will be dropped randomly according to the drop-probability. The rate is (drop-probability)/256. When the queue length is more than max-threshold, all the packets will be dropped.
PAGE 555
CanogaOS Command Reference When the queue length is less than min-threshold, the packets will not be dropped. When the queue length is between min-threshold and max-threshold, the packets will be dropped randomly according to the drop-probability. The rate is (drop-probability)/256. When the queue length is more than max-threshold, all the packets will be dropped. The packet with different color will use different random-detect parameters according to drop precedence.
PAGE 556
CanogaOS Command Reference This example shows how to configure queue 1 random detect mode max-threshold to 90 (drop precedence 0), 92 (drop precedence 1) and 94 (drop precedence 2). Switch(config-if)#queue 1 random-detect max-threshold 90 92 94 This example shows how to remove this setting. Switch(config-if)#no queue 1 random-detect max-threshold Related Commands queue random-detect drop-probability queue random-detect min-threshold queue random-detect 31.
PAGE 557
CanogaOS Command Reference 31.25 queue threshold Use this command to configure the interface queue threshold. To remove this setting, use the no form of this command.
PAGE 558
CanogaOS Command Reference qb2: queue 2 bandwidth percent range qb3: queue 3 bandwidth percent range qb4: queue 4 bandwidth percent range qb5: queue 5 bandwidth percent range qb6: queue 6 bandwidth percent range qb7: queue 7 bandwidth percent range Command Mode Interface configuration Usage None Examples This example shows how to configure the queue bandwidth percent range to 10% per queue.
PAGE 559
CanogaOS Command Reference 31.28 clear qos queue statistics Use this command to clear the queue statistics on specified interface. Command Syntax clear qos statistics interface queue [queue] interface: the interface name queue: <0-7> queue id Command Mode Privileged EXEC mode Usage None Examples This example shows how to clear queue 0 statistics on interface eth-0-21. Switch# clear qos statistics eth-0-21 queue 0 Related Commands None 31.
PAGE 560
CanogaOS Command Reference Switch(config-if)# no shape Related Commands None 31.30 queue shape Use this command to configure shaping for a queue of a physical port. Command Syntax (no) queue <0-7> shape average percent <0-99> queue: Queue config shape: shape config percent: percent of interface bandwidth Command Mode Interface configuration Usage This example shows how to configure shaping for a queue.
PAGE 561
CanogaOS Command Reference cir: CIR - Commit Information Rate (kbps) cbs: commit burst size (bytes) ebs: EBS - Excess Burst Size (bytes) pir: PIR - Peak Information Rate (Kbps) pbs: PBS - peak burst size (bytes) drop-color: drop color config use-l3-length: Use l3 length for policing Command Mode Global configuration Usage This command is used to create or delete an aggregate-policer instance.Color-blind or Color-aware, SRTCM or TRTCM can be configured.
PAGE 562
CanogaOS Command Reference Switch(config)#no class-map cm1 Related Commands Show class-map (NAME|) 31.33 match access-group Use this command to configure an access-list for match criterion. Command Syntax (no)Match access-group NAME match: configure classification criteria access-group: configure access list NAME: Specify an access-list name Command Mode Class-map mode Usage Use access-list for match criterion in a class-map.
PAGE 563
CanogaOS Command Reference Use the policy-map global configuration command to create or modify a policy map that can be attached to multiple interfaces and to enter policy-map configuration mode. Use the no form of this command to delete an existing policy map and to return to global configuration mode.
PAGE 564
CanogaOS Command Reference Command Syntax (no)trust (dscp|cos|ip-prec|port|outer) trust: set trust value for the class dscp: trust dscp value in classified packets cos: trust cos value in classified packets ip-prec: trust ip precedence in classified packets port: trust port default cos value in classified packets outer: trust the outer header of tunnel to map to priority in classified packets Command Mode Config-pmap-c mode Usage This command is used to set trust value for the class.
PAGE 565
CanogaOS Command Reference 31.38 policer Use this command to police traffic matching this class-map.
PAGE 566
CanogaOS Command Reference Define a aggregated policer for classified traffic. Examples Switch(config)#policy-map pm1 Switch(config-pmap)#class cm1 Switch(config-pmap-c)#policer-aggregate agg_plc Switch(config-pmap-c)#no policer Related Commands None 31.40 port-policing Use this command to configure a port-policer for an interface matching all traffic transmitted or received in different direction.
PAGE 567
CanogaOS Command Reference None 31.41 service-policy Use this command to configure a policy for interface to match the traffic defined by class-map, do according actions.
PAGE 568
CanogaOS Command Reference None Examples Set flow policing first Switch(config)#qos policer flow-first Related Commands None 31.43 qos statistics policer Use this command enable the policer statistics. To disable it, use the no form of this command. Command Syntax qos statistics policer no qos statistics policer Command Mode Global configuration Usage None Examples This example shows how to enable the policer statistics.
PAGE 569
CanogaOS Command Reference This command is used to clear aggregate policing statistics. Examples Switch#clear qos aggregate-policer plc_agg statistics Related Commands None 31.45 qos clear flow-policer statistics Use this command to clear flow policing statistics Command Syntax clear qos policy-map PNAME statistics interface (IFNAME|) Command Mode Privileged EXEC Usage This command is used to clear flow policing statistics.
PAGE 570
CanogaOS Command Reference None 31.47 show running-config policy-map Use this command to show running-config policy-map information. Command Syntax show running-config policy-map Command Mode Privileged EXEC Usage This command is used to show running-config policy-map information. Examples Switch# show running-config policy-map policy-map p-1 class we ! Related Commands None 31.48 show policy-map Use this command to show policy-map information.
PAGE 571
CanogaOS Command Reference State: attached CLASS-MAP-NAME: cmp1 trust: cos CIR 5000 kbps, CBS 40000 bytes, EBS 50000 bytes, color aware mode, drop color is red Related Commands None 31.49 show policy-map interface Use this command to show current interface’s policy-map configuration. Command Syntax show policy-map interface NAME Command Mode Privileged EXEC Usage This command is used to show current interface’s policy-map configuration.
PAGE 572
CanogaOS Command Reference Privileged EXEC Usage This command is used to show running-config class-map information. Examples Switch# show running-config class-map class-map we ! Switch# Related Commands None 31.51 show class-map Use this command to show class-map information Command Syntax show class-map (NAME|) NAME: Specify a class name, if not specify, all class-map will be shown Command Mode Privileged EXEC Usage This command is used to show class-map information.
PAGE 573
CanogaOS Command Reference show qos aggregator-policer (NAME|) NAME: Specify a aggregator-policer name, if not specify, all aggregator-policer will be shown Command Mode Privileged EXEC Usage This command is used to show aggregator-policer information. Examples Switch# show qos aggregator-policer AGGREGATOR-POLICER-NAME: agg_plc CIR 40000 kbps, CBS 40000 bytes, PBS 40000 bytes, color aware mode, drop color is red use-l3-length Switch# Related Commands None 31.
PAGE 574
CanogaOS Command Reference Queue 1 class 0, bandwidth percent 12.5 Tail drop mode Tail drop threshold(drop prec 0 -> 3): 56 60 64 108 Queue 2 class 1, bandwidth percent 12.5 Tail drop mode Tail drop threshold(drop prec 0 -> 3): 56 60 64 108 Queue 3 class 1, bandwidth percent 12.5 Tail drop mode Tail drop threshold(drop prec 0 -> 3): 56 60 64 108 Queue 4 class 2, bandwidth percent 12.5 Tail drop mode Tail drop threshold(drop prec 0 -> 3): 56 60 64 108 Queue 5 class 2, bandwidth percent 12.
PAGE 575
CanogaOS Command Reference 31-1
PAGE 576
CanogaOS Command Reference 32 H-QoS Command 32.1 qos sap-egress Use this command to create an SAP (Service Access Point) egress policy for H-QoS. The SAP egress policy defines the SLA (Service Level Agreement) for EVCs as they leave the egress UNI. To remove the egress policy, use the no form of this command. Command Syntax qos sap-egress POLICY-NAME no qos sap-egress POLICY-NAME POLICY-NAME: The name, containing at most 40 characters, identifies an unique SAP egress policy for H-QoS.
PAGE 577
CanogaOS Command Reference Usage None Examples In the following example, the description command is used to add a description clause for the SAP egress policy. Switch(config)# qos sap-egress evc110-policy-at-egress-uni Switch(config-sap-egress)# description “used for policing evc 110” Related Commands None 32.3 total-rate Use this command to configure a group shaping rate in an SAP egress policy.
PAGE 578
CanogaOS Command Reference 32.4 queue-rate Use this command to configure queue shaping rates for the three high priority queues, i.e., queue 1 queue 3, in SAP egress policy. The queue shaping rate-limits the de-queue rate for each queue of an EVC at egress UNI direction.
PAGE 579
CanogaOS Command Reference 32.5 queue-weight Use this command to configure a bandwidth allocation weight for queue 0 in SAP egress policy. To use the default weight, use the no form of this command. The default weight of queue 0 is 1. Command Syntax queue-weight WEIGHT no queue-weight WEIGHT: The weight value of queue 0 of all EVCs at egress UNI accounts for proportional bandwidth sharing. The valid weight value ranges from 1 to 100. Command Mode SAP Egress Policy Configuration Usage 1.
PAGE 580
CanogaOS Command Reference THRESH3: The drop threshold for green-colored packets. If the current queue length is greater than the threshold, all incoming green-colored packets will be dropped. Command Mode SAP Egress Policy Configuration Usage None Examples In the following example, the queue <0-3> threshold command is used to set drop threshold for queue 0. Switch(config)# qos sap-egress evc110-policy-at-egress-uni Switch(config-sap-egress)# queue 0 threshold 16 24 32 Related Commands None 32.
PAGE 581
CanogaOS Command Reference None 32.8 description Use this command to add a description for the network egress policy. To remove the description, use the no form of this command. Command Syntax description TEXT no description TEXT: The description text generally used to describe the usage of the network egress policy. The length of the text can be up to any visible 200 characters.
PAGE 582
CanogaOS Command Reference Network Egress Policy Configuration Usage 1. The total-rate should be at least be the sum rate of queue-rate of queue 1 - queue 3. 2. A network egress policy can be associated with multiple EVCs, the total-rate is not to limit the total traffic of all EVCs, but to rate-limit the maximum allowed bandwidth at egress NNI for each EVC separately.
PAGE 583
CanogaOS Command Reference 4. Queues in the same class will be served by WDRR (Weight Deficit Round Robin) scheduling algorithm. And, queues in different classes will be served by SP (Strictly Priority) scheduling algorithm. Examples In the following example, the queue-rate command is used to configure queue shaping rates for queue 1 to queue 3 of a EVC at egress NNI direction.
PAGE 584
CanogaOS Command Reference 32.12 queue <0-3> threshold Use this command to configure Tail Drop threshold for each queue in a network egress policy. Command Syntax queue <0-3> threshold THRESH1 THRESH2 THRESH3 no queue <0-3> threshold THRESH1: The drop threshold for red-colored packets. If the current queue length is greater than the threshold, all incoming red-colored packets will be dropped. THRESH2: The drop threshold for yellow-colored packets.
PAGE 585
CanogaOS Command Reference Command Mode Global configuration Usage None Examples In the following example, the ethernet evc reserved start-vlan command is used to reserve 200 VLANs with starting VLAN of 3800 for creating EVC. Switch(config)# ethernet evc reserved start-vlan 3800 number 200 Related Commands None 32.14 ethernet evc Use this command to create an EVC instance. To remove the EVC, use the no form of this command.
PAGE 586
CanogaOS Command Reference 32.15 qos-policy sap-egress Use this command to apply an SAP egress policy to a specific EVC at the egress UNI. To remove an SAP egress policy for the EVC, use the no form of this command. Command Syntax qos-policy sap-egress POLICY-NAME no qos-policy sap-egress POLICY-NAME: This field specifies which SAP egress policy is used to be associated to the EVC.
PAGE 587
CanogaOS Command Reference Examples In the following example, the qos evc net-egress command is used to associate a QoS network egress policy to an EVC and then applied it to interface eth-0-2. Switch(config)# ethernet evc evc100 Switch(config-evc)# qos-policy net-egress evc110-policy-at-egress-nni Related Commands None 32.17 show ethernet evc queue Use this command to display queue information for EVC. Statistics of each queue will be provided if queue statistic function is enabled.
PAGE 588
CanogaOS Command Reference Tail drop threshold (drop prec 0 -> 3): 56 60 64 108 60 64 108 80 96 112 80 96 112 80 96 112 80 96 112 Transmit 0 packets, 0 bytes Drop 0 packets, 0 bytes Queue 3 Tail drop mode Tail drop threshold (drop prec 0 -> 3): 56 Transmit 0 packets, 0 bytes Drop 0 packets, 0 bytes EVC: evc100 net-egress policy: evc110-policy-at-egress-nni Queue 0 Tail drop mode Tail drop threshold (drop prec 0 -> 3): 64 Transmit 0 packets, 0 bytes Drop 0 packets, 0 bytes Queue 1 Tail dr
PAGE 589
CanogaOS Command Reference sap-egress: If this argument is specified, only sap-egress queue statistics of the EVC is cleared. net-egress: If this argument is specified, only net-egress queue statistics of the EVC is cleared. [<0-3>]: To clear specific Queue for EVC. Command Mode EXEC Privileged Mode Usage None Examples In the following example, the clear qos statistics evc queue command is used to clear sap-egress queue statistics for an EVC.
PAGE 590
CanogaOS Command Reference 32.20 show ethernet evc statistics This command is used to display statistics for all EVC unless optional parameters are specified to clear statistics for only a specific EVC. Command Syntax show ethernet evc (NAME |) statistics NAME: Specify this field to show specific EVC statistics. Command Mode EXEC Privileged Mode Usage The input and output statistics are supplied in unit of both packet count and byte volume.
PAGE 591
CanogaOS Command Reference 1023: Clear statistics for packet length range between 512 and 1023 bytes. 1518: clear statistics for packet length range between 1024 and 1518 bytes. Command Mode EXEC Privileged Mode Usage The command provides a way to clear statistics for all EVC unless optional parameters are specified to clear specific statistics for an EVC. Examples In the following example, the clear ethernet evc statistics privileged EXEC command is used to clear statistics for an EVC.
PAGE 592
CanogaOS Command Reference 33 ACL Commands 33.1 arp access-list Use this command to create ARP ACL and enter ARP ACL configuration mode. Command Syntax arp access-list arp-acl arp-acl: the name of arp acl Command Mode Global configuration Usage None Examples This example shows how to create arp access-list denyrequest : Switch(config)# arp access-list denyrequest Related Commands show access-list arp 33.2 deny Use this command to reject ARP packets when match this access-list.
PAGE 593
CanogaOS Command Reference None Examples This example shows how to create a filter in ARP ACL to deny ARP response packet whose sender IP address is 10.10.25.1. Switch(config-arp-acl)#deny response ip host 10.10.25.1 mac any log This example shows how to create a filter in ARP ACL to deny ARP request packet whose sender MAC address is 001A.A02C.A1DF. Switch(config-arp-acl)#deny response ip any mac host 001A.A02C.A1DF log Related Commands no sequence-num 33.
PAGE 594
CanogaOS Command Reference Switch(config-arp-acl)#permit ip any mac any Related Commands no sequence-num 33.4 no sequence-num Use this command to remove a filter from ARP ACL. Command Syntax no sequence-num sequence-num sequence-num: the sequence number of a filter ranging in <1-2147483646> Command Mode ARP ACL configuration Usage None Examples This example shows how to remove the filter with the sequence-num 10 from ARP ACL.
PAGE 595
CanogaOS Command Reference Switch# show access-list arp Related Commands None 33.6 mac access-list Use this command to create MAC ACL and then enter MAC ACL configuration mode. Command Syntax mac access-list acl no mac access-list acl acl: the name of the MAC ACL Command Mode Global configuration Usage If the system already has a MAC ACL with the same name, this command will enter the MAC ACL configuration mode. However, if the ACL name is used by other type of ACL, an prompt message will be shown.
PAGE 596
CanogaOS Command Reference exit Command Mode MAC ACL configuration Usage None Examples This example shows how to quit the MAC ACL configuration mode. Switch(config-mac-acl)# exit Switch(config)# Related Commands mac access-list 33.8 no sequence-num Use this command to remove a filter from MAC ACL.
PAGE 597
CanogaOS Command Reference [vlan vlan] [cos value] [protocol {arp | rarp | mpls | mpls-mcast}] [type {eth2 | snap | sap}] [time-range time-range-name] [stats] <1-2147483646>: the sequence number of the filter in MAC ACL. An auto-generated sequence number will be assigned to the filter if this field is not presented.
PAGE 598
CanogaOS Command Reference [time-range time-range-name] [stats] <1-2147483646>: the sequence number of the filter in MAC ACL. An auto-generated sequence number will be assigned to the filter if this field is not presented.
PAGE 599
CanogaOS Command Reference remark: the remarks of the MAC ACL Command Mode MAC ACL configuration Usage The remarks are up to 100 characters. The exceed parts will not be stored and will be truncated. Examples This example shows how to add a remark to describe the MAC ACL. Switch(config-mac-acl)# remark remark of List for mac This example shows how to remove the remark of the MAC ACL. Switch(config-mac-acl)# no remark Related Commands None 33.
PAGE 600
CanogaOS Command Reference Related Commands mac access-list 33.13 show access-list mac Use this command to show the MAC ACL information. Command Syntax show access-list mac Command Mode Privileged EXEC Usage None Examples This example shows how to show the MAC ACL information. Switch# show access-list mac mac access-list list_mac_1 10 deny src-mac host 0000.0001.0002 20 permit src-mac any Related Commands mac access-list 33.14 clear access-list counters Use this command to clear access-list counters.
PAGE 601
CanogaOS Command Reference Switch# clear access-list counters mac_list_1 Related Commands None 33.15 ip access-list Use this command to create IP ACL and then enter IP ACL configuration mode. To remove this ACL, use the no form of this command. Command Syntax ip access-list acl no ip access-list acl acl: the name of an IP ACL Command Mode Global configuration Usage If the system already has an IP ACL with the same name, this command will enter the IP ACL configuration mode.
PAGE 602
CanogaOS Command Reference Command Syntax exit Command Mode IP ACL configuration Usage None Examples This example shows how to quit the IP ACL configuration mode. Switch(config-ip-acl)# exit Switch(config)# Related Commands ip access-list 33.17 no sequence-num Use this command to delete a filter from IP ACL.
PAGE 603
CanogaOS Command Reference 33.18 deny Use this command to discard ongoing IP packets matching the IP filter. Command Syntax [<1-2147483646>] deny {<0-255> | any } { source source-mask | any | host source } {destination destination-mask | any | host destination} [ ip-precedence precedence | dscp dscp ] [ fragments ] [ routed-packet ] [ options ] [ time-range time-range-name ] [ stats ] <1-2147483646>: the sequence number of the filter in IP ACL.
PAGE 604
CanogaOS Command Reference Related Commands deny tcp deny udp deny icmp deny igmp 33.19 deny tcp Use this command to reject TCP packets matching the IP filter.
PAGE 605
CanogaOS Command Reference Related Commands deny deny udp deny icmp deny igmp 33.20 deny udp Use this command to reject UDP packets matching the IP filter.
PAGE 606
CanogaOS Command Reference 33.21 deny icmp Use this command to reject ICMP packets matching the IP filter.
PAGE 607
CanogaOS Command Reference Usage None Examples This example shows how to create a filter in IP ACL to deny any IGMP packets. Switch(config-ip-acl)# 1 deny igmp any any This example shows how to create a filter in IP ACL to deny the IGMP packets with the source IP address 1.1.1.1, any destination IP address and the igmp-type pim. Switch(config-ip-acl)# 2 deny igmp host 1.1.1.1 any pim Related Commands deny deny tcp deny udp deny icmp 33.23 permit Use this command to permit packets matching the IP filter.
PAGE 608
CanogaOS Command Reference If IP address wildcard bits is provided, the IP address is logically-anded in bitwise with the reverse bits of the wildcard bits. For example, 10.10.10.0 0.0.0.255 means the addresses from 10.10.10.0 to 10.10.10.255 are matched. An auto-generated sequence number will be assigned to the filter if the sequence-num field is not presented. The auto-generated sequence number is incremented by 10 on the maximum existing sequence number in the IP ACL. i.e.
PAGE 609
CanogaOS Command Reference Usage The fragments will be invalid when the layer 4 information is specified (i.e. src-port). Examples This example shows how to create a filter in IP ACL to permit any TCP packets. Switch(config-ip-acl)#10 permit tcp any any This example shows how to create a filter in IP ACL to permit the TCP packets with the source IP address 1.1.1.1, and source port ranges from 0 to 100. Switch(config-ip-acl)#20 permit tcp host 1.1.1.
PAGE 610
CanogaOS Command Reference Examples This example shows how to create a filter in IP ACL to deny any UDP packets. Switch(config-ip-acl)#1 permit udp any any This example shows how to create a filter in IP ACL to deny the UDP packets with the source IP address 1.1.1.1, source port 10, and destination port less than 2000. Switch(config-ip-acl)#2 permit udp host 1.1.1.1 src-port eq 10 any dst-port lt 2000 Related Commands permit permit tcp permit icmp permit igmp 33.
PAGE 611
CanogaOS Command Reference 33.27 permit igmp Use this command to permit IGMP packets matching the IP filter.
PAGE 612
CanogaOS Command Reference Usage The remarks are up to 100 characters. The exceed parts will not be stored and will be truncated. Examples This example shows how to add a remark to describe the IP ACL. Switch(config-ip-acl)#remark remard0flist1 This example shows how to remove the remark from the IP ACL. Switch(config-ip-acl)#no remark Related Commands None 33.29 ip access-group Use this command to apply the specified IP ACL on the interface.
PAGE 613
CanogaOS Command Reference 33.30 show access-list ip Use this command to show the information of IP ACL. Command Syntax show access-list ip Command Mode Privileged EXEC Usage None Examples This example shows how to show the information of IP ACL. Switch# show access-list ip ip access-list list_ipv4_1 2 permit tcp host 1.1.1.1 any 3 deny icmp any any 12 permit tcp any any 22 redirect interface eth-0-0 any any any Related Commands ip access-list 33.31 time-range Use this command to create time range.
PAGE 614
CanogaOS Command Reference <1-2147483646> permit <1-2147483646> deny 33.32 absolute Use this command to define the absolute time and date in time range. Command Syntax absolute {start HH:MM:SS <1-31> MONTH <2000-2037>} {end HH:MM:SS <1-31> MONTH <2000-2037>} Command Mode Time range configuration Usage None Examples This example shows how to define a time range started from 11:11:00 January 1 2008 and ended by 00:00:00 May 1 2009.
PAGE 615
CanogaOS Command Reference This example shows how to define a time range started from 09:00 and ended by 17:00 everyday. Switch(config-tm-range)#periodic 09:00 daily to 17:00 Related Commands absolute 33.34 show time-range Use this command to show the information of time-range. Command Syntax show time-range [time-range] time-range-name: the name of the time range, up to 20 characters. Show all the time ranges when the name is not specified.
PAGE 616
CanogaOS Command Reference 34 ARP Inspection Commands 34.1 arp access-list To define an ARP access list or add clauses at the end of a predefined list, use the arp access-list command in global configuration mode. To remove an ARP access list, use the no form of this command. Command Syntax arp access-list name no arp access-list name name Specifies the access control list name. Default No ARP ACLs are defined.
PAGE 617
CanogaOS Command Reference Default No defined ARP ACLs are applied to any VLAN. Command Mode Global configuration Usage When an ARP access control list is applied to a VLAN for dynamic ARP inspection, the ARP packets containing only the IP-to-Ethernet MAC bindings are compared against the ACLs. All other packet types are bridged in the incoming VLAN without validation.
PAGE 618
CanogaOS Command Reference Command Syntax ip arp inspection log-buffer {entries number | logs number interval seconds} no ip arp inspection log-buffer {entries | logs} entries number Number of entries from the logging buffer; the range is from 10 to 1024. log number Number of entries to be logged in an interval; the range is from 0 to 1024. A 0 value indicates that entries should not be logged out of this buffer. interval seconds Logging rate; the range is from 0 to 86400 (1 day).
PAGE 619
CanogaOS Command Reference make the interfaces untrusted, use the no form of this command.
PAGE 620
CanogaOS Command Reference dst-mac (Optional) Checks the destination MAC address in the Ethernet header against the target MAC address in ARP body. This checking is done for ARP responses. Note When dst-mac is enabled, the packets with different MAC addresses are classified as invalid and are dropped. ip (Optional) Checks the ARP body for invalid and unexpected IP addresses. Addresses include 0.0.0.0, 255.255.255.255, and all IP multicast addresses.
PAGE 621
CanogaOS Command Reference Command Mode Global configuration Usage You must specify on which VLANs to enable DAI. DAI may not function on the configured VLANs if they have not been created or if they are private. Examples This example shows how to enable DAI on VLAN 1: Switch# configure terminal Switch(config)# ip arp inspection vlan 1 Related Commands arp access-list show ip arp inspection 34.
PAGE 622
CanogaOS Command Reference All denied or dropped packets are logged. Command Mode Global configuration Usage The acl-match and dhcp-bindings keywords merge with each other. When you set an ACL match configuration, the DHCP bindings configuration is not disabled. You can use the no form of this command to reset some of the logging criteria to their defaults. If you do not specify either option, all the logging types are reset to log on when the ARP packets are denied.
PAGE 623
CanogaOS Command Reference Command Mode Privileged EXEC Usage To display all entries in the ARP cache, use this command without any arguments or keywords.
PAGE 624
CanogaOS Command Reference Switch# Related Commands arp access-list 34-9
PAGE 625
CanogaOS Command Reference 35 IP Source Guard Commands 35.1 ip source binding Use the ip source binding global configuration command on the switch to configure static IP source bindings on the switch. Use the no form of this command to delete static bindings. Command Syntax ip source binding mac mac-address vlan vlan-id ip ip-address interface interface-id no ip source binding mac mac-address vlan vlan-id ip ip-address interface interface-id mac mac-address Specify a MAC address.
PAGE 626
CanogaOS Command Reference number Specify maximum number of bindings. The range is 0 to 30. Default Maximum number is 10. Command Mode Global configuration Usage Examples The following example shows how to specify the maximum number of bindings: Switch(config)# ip source maximal binding per-port 20 Related Commands 35.3 ip verify source Use the ip verify source interface configuration command on the switch stack or on a standalone switch to enable IP source guard on an interface.
PAGE 627
CanogaOS Command Reference 35.4 show ip source binding Use the show ip source binding privileged EXEC command to display the IP source bindings on the switch. Command Syntax show ip source binding [interface interface-id] interface interface-id Display IP source bindings for a specified interface.
PAGE 628
CanogaOS Command Reference 36 DHCP Snooping Commands 36.1 clear dhcp snooping Use the clear dhcp snooping privileged EXEC command on the switch to clear the DHCP binding database agent statistics or the DHCP snooping statistics counters. Command Syntax clear dhcp snooping {binding [ipv4 ip-address | mac mac-address | vlan vlan-id] | statistics} binding Clear the DHCP snooping binding database. ipv4 ip-address Clear the binding entry IP address. mac mac-address Clear the binding entry MAC address.
PAGE 629
CanogaOS Command Reference DHCP snooping is disabled. Command Mode Global configuration Usage For any DHCP snooping configuration to take effect, you must globally enable DHCP snooping. DHCP snooping is not active until you enable snooping on a VLAN by using the dhcp snooping vlan vlan-id global configuration command. Examples This example shows how to enable DHCP snooping: Switch(config)# dhcp snooping You can verify your settings by entering the show dhcp snooping config privileged EXEC command.
PAGE 630
CanogaOS Command Reference VLAN to which the interface belongs. Use the show dhcp snooping binding privileged EXEC command to display the configured bindings. Examples This example shows how to generate a DHCP binding configuration with an expiration time of 1000 seconds on a port in VLAN 1: Switch(config)# dhcp snooping binding mac 0001.000c.01ef vlan 1 ipv4 10.10.1.1 interface eth-0-1 expiry 1000 Related Commands dhcp snooping show dhcp snooping binding 36.
PAGE 631
CanogaOS Command Reference 36.5 dhcp snooping information option Use the dhcp snooping information option global configuration command on the switc to enable DHCP option-82 data insertion. Use the no form of this command to disable DHCP option-82 data insertion. Command Syntax dhcp snooping information option no dhcp snooping information option Default DHCP option-82 data is not inserted.
PAGE 632
CanogaOS Command Reference 36.6 dhcp snooping information option allow-untrusted Use the dhcp snooping information option allow-untrusted global configuration command on an aggregation switch to configure it to accept DHCP packets with option-82 information that are received on untrusted ports that might be connected to an edge switch. Use the no form of this command to return to the default setting.
PAGE 633
CanogaOS Command Reference 36.7 dhcp snooping trust Use the dhcp snooping trust interface configuration command on the switc to configure a port as trusted for DHCP snooping purposes. Use the no form of this command to return to the default setting. Command Syntax dhcp snooping trust no dhcp snooping trust Default DHCP snooping trust is disabled. Command Mode Interface configuration Usage Configure as trusted ports those that are connected to a DHCP server or to other switches or routers.
PAGE 634
CanogaOS Command Reference Usage In a service-provider network, when a switch receives a packet from a DHCP client on an untrusted port, it automatically verifies that the source MAC address and the DHCP client hardware address match. If the addresses match, the switch forwards the packet. If the addresses do not match, the switch drops the packet.
PAGE 635
CanogaOS Command Reference show dhcp snooping config show dhcp snooping binding 36.10 show dhcp snooping binding Use the show dhcp snooping binding privileged EXEC command to display the DHCP snooping binding database and configuration information for all interfaces on a switch. Command Syntax show dhcp snooping binding [summary] summary Display summary information of DHCP snooping bindings.
PAGE 636
CanogaOS Command Reference Examples The following is sample output from the show dhcp snooping config command: Switch# show dhcp snooping config dhcp snooping service: enabled dhcp snooping switch: enabled Verification of hwaddr field: enabled Insertion of relay agent information (option 82): enabled Relay agent information (option 82) on untrusted port: not allowed dhcp snooping vlan 1 Related Commands dhcp snooping binding 36.
PAGE 637
CanogaOS Command Reference 36.13 show dhcp snooping trusted-sources Use the show dhcp snooping trusted-sources privileged EXEC command to display DHCP all trusted interfaces.
PAGE 638
CanogaOS Command Reference 37 IEEE 802.1x Commands 37.1 dot1x initialize Use the dot1x initialize privileged EXEC command on the switch to manually return the specified IEEE 802.1x-enabled port to an unauthorized state before initiating a new authentication session on the port. Command Syntax dot1x initialize interface interface-name interface-name Specify the interface name to be initialized. Command Mode Privileged EXEC Usage Use this command to initialize the IEEE 802.
PAGE 639
CanogaOS Command Reference Usage You should change the default value of this command only to adjust for unusual circumstances such as unreliable links or specific behavioral problems with certain clients and authentication servers. Examples The following is sample output from the dot1x max-reauth-req command: Switch(config-if)# dot1x max-reauth-req 4 Related Commands show dot1x 37.
PAGE 640
CanogaOS Command Reference specific port. Examples The following is sample output from the dot1x port-control command: Switch(config-if)# dot1x port-control auto Related Commands show dot1x 37.4 dot1x protocol-version Use the dot1x max-reauth-req interface configuration command on the switch to set the version of EAPOL packets. Use the no form of this command to return to the default setting. Command Syntax dot1x protocol-version version no dot1x protocol-version version The EAPOL version.
PAGE 641
CanogaOS Command Reference dot1x quiet-period seconds no dot1x quiet-period seconds The time interval (in seconds) between the retrial of authentication. The range is 1 to 65535. Default Default is 60 seconds. Command Mode Interface configuration Usage During the quiet period, the switch does not accept or initiate any authentication requests. If you want to provide a faster response time to the user, enter a number smaller than the default.
PAGE 642
CanogaOS Command Reference Related Commands show dot1x 37.7 dot1x re-authenticae Use the dot1x re-authenticate privileged EXEC command on the switch stack to manually initiate a re-authentication of the specified IEEE 802.1x-enabled port. Command Syntax dot1x re-authenticate interface interface-name interface-name The interface to re-authenticate.
PAGE 643
CanogaOS Command Reference packets by the switch to the IEEE 802.1x client. The range is 1 to 65535. tx-period seconds Number of seconds that the switch waits for a response to an EAP-request/identity frame from the client before retransmitting the request. The range is 1 to 65535. Default These are the default settings: reauth-period is 3600 seconds. tx-period is 30 seconds. supp-timeout is 30 seconds. server-timeout is 30 seconds.
PAGE 644
CanogaOS Command Reference 5 minutes. Command Mode Global configuration Usage Use this command to cause the switch to mark as “dead” any RADIUS servers that fail to respond to authentication requests, thus avoiding the wait for the request to time out before trying the next configured server. A RADIUS server marked as “dead” is skipped by additional requests for the duration of minutes or unless there are no servers not marked “dead”.
PAGE 645
CanogaOS Command Reference overrides the global setting of the radius-server key command. If no key string is specified, the global value is used. string (Optional) Specifies the authentication and encryption key for all RADIUS communications between the router and the RADIUS server. This key must match the encryption used on the RADIUS daemon. Default No RADIUS host is specified; use global radius-server command values.
PAGE 646
CanogaOS Command Reference If the RADIUS server is only a few hops from the router, we recommend that you configure the RADIUS server retransmit rate to 5. Examples The following is sample output from the radius retransmit command: Switch(config)# radius retransmit 5 Related Commands radius-server host radius-server key 37.12 radius timeout To set the interval for which a router waits for a server host to reply, use the radius-server timeout command in global configuration mode.
PAGE 647
CanogaOS Command Reference 37.13 show dot1x Use the show dot1x user EXEC command to display IEEE 802.1x statistics, administrative status, and operational status for the switch or for the specified port. Command Syntax show dot1x [{diagnostics | session-statistics | statistics} [all | interface interface-id] diagnostics Display diagnostics of IEEE 802.1x status. session-statistics Display session statistics of IEEE 802.1x clients. statistics Display statistics of EAPOL packets.
PAGE 648
CanogaOS Command Reference 38 Radius Authenication Commands 38.1 aaa new-model Enable the authentication, authorization, accounting (AAA) access control model. Command Syntax aaa new-model aaa: Authentication, authorization, and accounting new-model: Access control commands and functions Command Mode Global configuration mode Usage This is a sample output from the command displaying how to enable aaa access control model.
PAGE 649
CanogaOS Command Reference This is a sample output from the command displaying how to disable aaa access control model. Switch(config)#no aaa new-model And you can check the result by using show aaa status command. Switch#show aaa status aaa stats: Authentication disable Examples Switch(config)#no aaa new-model Related Commands aaa new-model 38.3 aaa authentication login Set authentication, authorization, accounting (AAA) authentication at login.
PAGE 650
CanogaOS Command Reference Related Commands no aaa authentication login default 38.4 no aaa authentication login Delete authentication, authorization, accounting (AAA) authentication at login.
PAGE 651
CanogaOS Command Reference Command Mode Line configuration mode Usage This is a sample output from the command displaying how to enable authentication for logins. Switch(config-line)#login authentication default Examples Switch(config-line)# login authentication default Related Commands No login authentication 38.6 no login authentication Delete authentication, authorization, accounting (AAA) authentication for logins.
PAGE 652
CanogaOS Command Reference method-lists: Method lists defined in the AAA subsystem authentication: authentication Command Mode Privileged EXEC mode Usage This is a sample output from the command displaying how to show authentication method lists.
PAGE 653
CanogaOS Command Reference Switch# show aaa status Related Commands 38-6
PAGE 654
CanogaOS Command Reference 39 File Operation Commands 39.1 cd To change the default directory or file system, use the cd command in EXEC mode. Command Syntax cd [filesystem:] filesystem: (Optional) The directory or file systems followed by a colon. Default The initial default file system is flash:. If you do not specify a directory on a file system, the default is the root directory on that file system.
PAGE 655
CanogaOS Command Reference copy source-name destination-name source-name The location URL of the source file or directory to be copied. The source can be either local or remote, depending upon whether the file is being downloaded or uploaded. destination-name The destination URL of the copied file or directory. The destination can be either local or remote, depending upon whether the file is being downloaded or uploaded.
PAGE 656
CanogaOS Command Reference Examples The following example deletes the file named test from the flash: Switch# delete flash:/test Are you sure to delete flash:/test? [yes/no]:y Switch# Related Commands copy 39.4 dir To display a list of files on a file system, use the dir command in EXEC mode. Command Syntax dir [flash:][directory-name][file-name] flash: The flash system. directory-name The directory in flash: file-name The file name.
PAGE 657
CanogaOS Command Reference Related Commands ls 39.5 ls To display a list of files on a file system, use the ls command in EXEC mode. Command Syntax ls [flash:][directory-name][file-name] flash: The flash system directory-name The directory in flash: file-name The file name. Command Mode EXEC Default The default file system is specified by the cd command. Usage Use the show (Flash file system) command to display flash information.
PAGE 658
CanogaOS Command Reference 39.6 more To display the contents of a file, use the more command in EXEC mode. Command Syntax more [flash:/directory-name/]file-name flash: The flash system directory-name The directory in flash: file-name The file name. Command Mode EXEC Usage The system can only display a file in ASCII format. Examples The following partial sample output displays the configuration file named startup-config in flash: Switch# more flash:/startup-config.
PAGE 659
CanogaOS Command Reference Command Mode Privileged EXEC Usage This command is valid only for local file systems Examples The following example creates a directory named newdir: Switch# mkdir flash:/newdir Switch# dir Directory of flash:/ total 43 drwxr-xr-x 2 0 Jul 30 16:35 newdir 63.0M bytes total (30.4M bytes free) Related Commands rmdir dir 39.8 rename To rename a file in a Class C Flash file system, use the rename command in EXEC mode.
PAGE 660
CanogaOS Command Reference drwxr-xr-x 2 0 Jan 1 1970 log -rw-r----- 1 1020 Jul 29 19:18 startup-config.conf -rw-r--r-- 1 10270 Jul 30 10:10 syslog -rw-r--r-- 1 6886 Jul 29 23:59 test 63.0M bytes total (30.4M bytes free) Switch# rename flash:/test flash:/test1 Related Commands 39.9 rmdir To remove an existing directory in a Flash file system, use the rmdir command in Privileged EXEC mode.
PAGE 661
CanogaOS Command Reference Command Mode Privileged EXEC Usage The source-directory must be a directory. Examples The following example creates a tar file named tar1: Switch# tar create tar1 dir1 Related Commands tar table tar xtract 39.11 tar table To display files in the tar file, use the tar table command in Privileged EXEC mode. Command Syntax tar create tar-file-name tar-file-name The file name of the tar file. Command Mode Privileged EXEC Usage The tar-file-name must be a in the flash:.
PAGE 662
CanogaOS Command Reference 39.12 tar xtract To display files in the tar file, use the tar table command in Privileged EXEC mode. Command Syntax tar xtract tar-file destination-directory tar-file The file name of the tar file. destination-directory The destination directory. Command Mode Privileged EXEC Usage The destination-directory must exist in the flash:. You can use mkdir to create a new directory.
PAGE 663
CanogaOS Command Reference Examples The following shows an example to save current configuration to starup-config file: Switch# copy running-config startup-config Related Commands copy copy startup-config 39.14 copy startup-config To copy the startup configuration to a specified destination, use the copy startup-config command in Privileged EXEC mode.
PAGE 664
CanogaOS Command Reference copy startup-config {destination-name | ftp://address/destination-name | tftp://address/destination-name} destination-name Save starup configuration to a specified file. ftp://address/ Save startup configuration to a specified ftp server. tftp://address/ Save startup configuration to a specified tftp server. Command Mode Privileged EXEC Usage The exact format of the source and destination URLs varies according to the file or directory location.
PAGE 665
CanogaOS Command Reference key chain Displays key chain information. policy-map Displays policy map information. prefix-list Displays IPv4 prefix list information. router bgp Displays BGP configuration information. router ospf Displays OSPFv2 configuration information. router rip Displays RIP configuration information. router vrrp Displays VRRP configuration information. router-id Displays router ID information. switch dot1x Displays IEEE 802.1x information.
PAGE 666
CanogaOS Command Reference 39.17 show startup-config To display the contents of the currently running configuration file or the configuration for a specific class map, interface, map class, policy map, or routing protocols, use the show startup-config command in privileged EXEC mode. Command Syntax show startup-config Default The show startup-config command without any arguments or keywords displays the entire contents of the startup configuration file in flash:.
PAGE 667
CanogaOS Command Reference privileged EXEC Usage The write file command has been replaced by the copy running-config destination-name command. See the description of the copy command for more information. 39.19 write memory Command Syntax write memory Command Mode privileged EXEC Usage The write memory command has been replaced by the copy running-config startup-config command. See the description of the copy command for more information. 39.
PAGE 668
CanogaOS Command Reference Command Mode privileged EXEC Usage Use the ftp command to upload and download files from remote ftp server. Examples The following is sample output from the ftp command: Switch#ftp 1.1.1.1 Connected to 1.1.1.1. 220 FTP server {Version 5.60} ready. Name {1.1.1.1:root}: root 331 Password required for root. Password: 230 User root logged in. Remote system type is UNIX. Using binary mode to transfer files. ftp> ls 200 PORT command successful.
PAGE 669
CanogaOS Command Reference Command Mode Global configuration Usage The username must also follow the rules. They must start with a letter, and have as interior characters only letters, digits, and underline. Names must be 31 characters or fewer. Examples The following example creates an FTP username “abc”: Switch(config)# ftp username abc Related Commands ftp password ftp passive 39.23 ftp password To create the password of an FTP username, use the ftp password command in global configuration mode.
PAGE 670
CanogaOS Command Reference 39.24 ftp passive To set the FTP mode in PASSIVE mode, use the ftp passive command in global configuration mode. To restore the configuration to the default, use no form of this command. Command Syntax ftp passive no ftp passive Default FTP works in Active mode. Command Mode Global configuration Usage Examples The following example sets the ftp mode to passive: Switch(config)# ftp passive Related Commands ftp username ftp password 39.
PAGE 671
CanogaOS Command Reference ftp username: root ftp password: unencrypted, abc Switch# Related Commands ftp username ftp password ftp passive 39-18
PAGE 672
CanogaOS Command Reference 40 System Management Commands 40.1 show version To display the basic version information in a device, use the show version command in privileged EXEC mode. Command Syntax show version Command Mode Privileged EXEC Usage User can get the basic version information about the system. Examples The following is sample output from the show version command: Switch# show version CanogaOS Software, 9170, Version 2.3.1, 9170 Copyright (C) 2004-2009 Canoga Perkins, All rights reserved.
PAGE 673
CanogaOS Command Reference enable Turn on the SSH service. disable Turn off the SSH service. Default SSH service is enabled. Command Mode Global configuration Usage Examples The following example enables the SSH service on your switch: Switch(config)# ip ssh server enable Related Commands show ip ssh server status 40.
PAGE 674
CanogaOS Command Reference show ip ssh server status 40.4 ip ssh server authentication-timeout To configure Secure Shell (SSH) authentication timeout on your switch, use the ip ssh server authentication-timeout command in global configuration mode. To restore the default value, use the no form of this command. Command Syntax ip ssh server authentication-timeout seconds no ip ssh server authentication-timeout seconds The number of seconds until timeout disconnects, with a maximum of 120 seconds.
PAGE 675
CanogaOS Command Reference Default The default authentication type is all. Command Mode Global configuration Usage Examples The following examples configure SSH authentication type on your switch: Switch(config)# ip ssh server authentication-type password Related Commands show ip ssh server status 40.6 ip ssh server host-key rsa key To configure Secure Shell (SSH) host-key on your switch, use the ip ssh server host-key rsa key command in global configuration mode.
PAGE 676
CanogaOS Command Reference 40.7 ip ssh server rekey-interval To configure Secure Shell (SSH) rekey interval on your switch, use the ip ssh server rekey-interval command in global configuration mode. To restore the default value, use the no form of this command. Command Syntax ip ssh server rekey-interval minute no ip ssh server rekey-interval minute The rekey interval, with a maximum of 1440 minutes. Default The default interval is 60 minutes.
PAGE 677
CanogaOS Command Reference Usage You can use this command with the 2 keyword to ensure that your switch will not inadvertently establish a weaker SSH Version 1 connection.
PAGE 678
CanogaOS Command Reference 40.10 show ip ssh server status To display the version and configuration data for Secure Shell (SSH), use the show ip ssh server status command in Privileged EXEC mode. Command Syntax show ip ssh server status Command Mode Privileged EXEC Usage Use the show ip ssh server status command to view the version and configuration data. Examples The following example shows the current SSH configurations: Switch# show ip ssh server status SSH server enabled Version: 1.
PAGE 679
CanogaOS Command Reference Switch(config)# rsa key KEY1 Switch(config-rsa-key)# Related Commands show rsa keys 40.12 key format To specify the key format, use the key format command in RSA key configuration mode. Command Syntax key format {der | pem} der The format is der. pem The format is pem. Command Mode Rsa key configuration Default The default key format is DER. Usage Use the key format command to specify the key format.
PAGE 680
CanogaOS Command Reference Usage Use the key string end command to exit the rsa key configuration mode. Examples The following example shows exit the rsa key configuration mode : Switch(config)# rsa key KEY1 Switch(config-rsa-key)# key string end Switch(config)# Related Commands rsa key 40.14 key type To specify the key type, use the key type command in RSA key configuration mode. Command Syntax key type {public | private} public Specify key type as public key.
PAGE 681
CanogaOS Command Reference Command Mode Rsa key configuration Usage Use the reset command to clear all key configurations. Examples The following example shows to clear all configurations for the key KEY1: Switch(config)# rsa key KEY1 Switch(config-rsa-key)# reset Related Commands rsa key 40.16 validate To check the validation of the key strings, use the validate command in RSA key configuration mode.
PAGE 682
CanogaOS Command Reference Command Syntax KEYLINE Command Mode Rsa key configuration Usage Type any key string. Examples The following example shows to type a key string of the key KEY1: Switch(config)# rsa key KEY1 Switch(config-rsa-key)# 00302017 4A7D385B 1234EF29 335FC973 Switch(config-rsa-key)# 2DD50A37 C4F4B0FD 9DADE748 429618D5 Related Commands validate 40.18 rsa key export To export the key file to a specified destination, use the rsa key export command in global configuration mode.
PAGE 683
CanogaOS Command Reference Related Commands rsa key generate rsa key import 40.19 rsa key import To import the key file from a specified source, use the rsa key import command in global configuration mode. Command Syntax rsa key keyname import url source-file {public | private} {der | der-hex | pem | ssh1 | ssh2} keyname Specify the key name to import. source-file The destination file path and name. public Specify the key as a public key. private Specify the key as a private key.
PAGE 684
CanogaOS Command Reference Privileged EXEC Usage Use the rsa key generate command to generate a key. Examples The following example displays the detailed information of the key named “KEY1” Switch# show rsa key KEY1 RSA key information: ============================================================ Name: KEY1 Type: private Modulus: 1024 bit Usage count: 0 Private key DER code: 30820258 0201 00 028180 9B3E9726 6405BD54 692F172A 901F3879 C947366E 5703D282 AA31707F 214D38C9 Related Commands show rsa keys 40.
PAGE 685
CanogaOS Command Reference key2 public 0 1024 Related Commands show rsa key 40.22 clock set datetime To manually set the system software clock, use the formats of the clock set command in global configuration mode. Command Syntax clock set hh:mm:ss month day year hh:mm:ss Current time in hours (24-hour format), minutes, and seconds. month Current month (by number). day Current day (by date) in the month. year Current year (no abbreviation). From 2000 to 2037.
PAGE 686
CanogaOS Command Reference length of the zone argument is limited to 32 characters. add The positive time zone. minus The negative time zone. hours-offset Hours difference from UTC. minutes-offset (Optional) Minutes difference from UTC. seconds-offset (Optional) Seconds difference from UTC. Command Mode Global configuration Default UTC Usage The system internally keeps time in UTC, so this command is used only for display purposes and when the time is manually set.
PAGE 687
CanogaOS Command Reference month Month (by number). day Day in the month (by number). year Year (2000 - 2037). offset Number of minutes to add during summer time (1-1440). Command Mode Global configuration Default Summer time is disabled. Usage Use this command if you want to automatically switch to summer time (for display purposes only). Use the recurring form of the command if the local summer time rules are of this form.
PAGE 688
CanogaOS Command Reference the timing source. In general, NTP synchronization takes approximately 15 to 20 minutes. Examples The following example displays the clock information: Switch# show clock 00:18:28 Bejing Sat Aug 02 2003 The following example displays the detailed clock information: Switch# show clock detail 00:18:28 Bejing Sat Aug 02 2003 Time zone: (GMT + 08:00:00) Bejing Related Commands clock set timezone clock set datetime 40.
PAGE 689
CanogaOS Command Reference Default No ACE is created. Usage Use this command if you want to allow the system to synchronize with the specified server. The server will not synchronize to this machine. Examples The following example creates an ACE for 1.1.1.1: Switch(config)# ntp ace 1.1.1.1 version The following example removes the ACE for 1.1.1.1: Switch(config)# no ntp ace 1.1.1.1 Related Commands show ntp 40.27 ntp authentication To enable ntp authentication, use the ntp authentication enable command.
PAGE 690
CanogaOS Command Reference 40.28 ntp broadcast client To configure the system to receive Network Time Protocol (NTP) broadcast packets on a specified interface, use the ntp broadcast client command in interface configuration mode. To disable this capability, use the no form of this command. Command Syntax ntp broadcast client no ntp broadcast client Command Mode Interface configuration Default Disabled.
PAGE 691
CanogaOS Command Reference No value is defined for NTP keys. Usage Use this command to create a value for a NTP key. Examples In the following example, the value 321 is given to the NTP key 123: Switch(config)# ntp key 123 321 Related Commands show ntp 40.30 ntp interface reload To reload the NTP configuration on the interfaces, use the ntp interface reload command in global configuration mode.
PAGE 692
CanogaOS Command Reference hostname Name of the time server or peer. key (Optional) Defines the authentication key. key-id (Optional) Authentication key to use when sending packets to this peer (1 to 64000). prefer (Optional) Makes this peer the preferred peer that provides synchronization. version (Optional) Defines the Network Time Protocol (NTP) version number. number (Optional) NTP version number (1 to 3). Command Mode Global configuration Default No peers are configured.
PAGE 693
CanogaOS Command Reference This command is disabled by default. Usage Examples The following example shows configuration of a NTP source on a switch platform: Switch(config)# ntp refclock stratum 1 Related Commands show ntp 40.33 ntp server To allow the software clock to be synchronized by a Network Time Protocol (NTP) time server, use the ntp server command in global configuration mode. To disable this capability, use the no form of this command.
PAGE 694
CanogaOS Command Reference Related Commands show ntp ntp key 40.34 ntp trustedkey To authenticate the identity of a system to which Network Time Protocol (NTP) will synchronize, use the ntp trustedkey command in global configuration mode. To disable authentication of the identity of the system, use the no form of this command. Command Syntax ntp trustedkey key-number no ntp trustedkey key-number key-number Key number of authentication key to be trusted.
PAGE 695
CanogaOS Command Reference 40.35 show ntp To display the NTP configurations, use the show ntp command in privileged EXEC mode. Command Syntax show ntp Command Mode Privileged EXEC Usage Use this command to display the NTP configurations. Examples The following example shows the configuration of NTP: Switch# show ntp Current NTP configuration: ============================================================ NTP access control list: Unicast peer: 1.1.1.1 Unicast server: 2.2.2.
PAGE 696
CanogaOS Command Reference Examples The following example shows the status of NTP associations: Switch# show ntp associations Current NTP associations: remote refid st when poll reach delay offset disp ================================================================= 2.2.2.2 0.0.0.0 16 - 64 0 0.000 0.000 3992.17 * synchronized, + candidate, # selected, x falsetick, . excess, - outlyer Related Commands show ntp status 40.
PAGE 697
CanogaOS Command Reference Command Syntax show ntp status Command Mode Privileged EXEC Usage Examples The following is sample output from the show ntp status command: Switch# show ntp status Current NTP status: ============================================================ clock is unsynchronized stratum: 16 frequency: 0.000 ppm precision: 2**16 reference time: 00000000.00000000 ( 6:28:16.000 UTC Thu Feb 7 2036) root delay: 0.000 ms root dispersion: 2633.790 ms stability: 0.
PAGE 698
CanogaOS Command Reference Current NTP I/O statistics: ============================================================ time since reset: 175834 receive buffers: 10 free receive buffers: 9 used receive buffers: 0 low water refills: 1 dropped packets: 0 ignored packets: 0 received packets: 32 packets sent: 31 packets not sent: 0 interrupts handled: 32 received by int: 32 Related Commands show ntp association show ntp status 40.
PAGE 699
CanogaOS Command Reference show environment 40.41 show environment To display the environment information in a device, use the show environment command in privileged EXEC mode.
PAGE 700
CanogaOS Command Reference Command Syntax show process spu sorted Command Mode Privileged EXEC Usage Examples The following is sample output from the show processes cpu sorted command: Switch# show processes cpu sorted Cpu utilization for 1 minute: 0.27; five minutes: 0.31; fifteen minutes: 0.23 PID TIME %CPU TTY nsm 770 00:00:24 3.7 ? PETH/Rx 1 00:00:03 0.5 ? init 769 00:00:03 0.5 ? bgpd 754 00:00:03 0.5 ? ldpd 756 00:00:03 0.5 ? pimd 755 00:00:03 0.5 ? ospfd 753 00:00:03 0.
PAGE 701
CanogaOS Command Reference 39 00:00:00 0.0 ? pdflush 40 00:00:00 0.0 ? kswapd0 Related Commands show processes memory sorted 40.43 show processes memory sorted To display memory utilization information about the active processes sorted by percentage in a device, use the show processes memory sorted command in privileged EXEC mode. Command Syntax show process memory sorted [core | physical | virtual] core Size in physical pages of the core image of the process.
PAGE 702
CanogaOS Command Reference 234 tty2 1320 2428 607 bash 233 tty1 1316 2428 607 bash 684 ? 1312 4716 1179 ripngd Related Commands show processes cpu sorted 40.44 show memory To display memory utilization information about the active processes, use the show memory command in privileged EXEC mode.
PAGE 703
CanogaOS Command Reference Memory type Alloc cells Alloc bytes =================================== ============= =============== Temporary memory : 6247 241136 : 9 288 Hash index : 9 36864 Hash bucket : 48 768 Thread master : 1 768 Hash Thread : 7 448 Link list : 12 368 Link list node : 101 1616 Show : 1 512 Show page : 1 8192 Show server : 1 6 48 Route node : 285 18240 Vector : 3203 51248 Route table : Vector index : 3203 SNMP subtree : 3 : : 1
PAGE 704
CanogaOS Command Reference 40.45 show network services To display the network services in your switch, use the show network services command in privileged EXEC mode. Command Syntax show network services {all | ipv4 | ipv6} {all | raw | tcp | udp} [numeric] all Display IPv4 and IPv6 network services. ipv4 Display IPv4 network services. ipv6 Display IPv6 network services. all Display RAW, TCP, and UDP information. raw Display RAW information. tcp Display TCP information.
PAGE 705
CanogaOS Command Reference raw 0 0 *:89 *:* 7 raw 0 0 *:103 *:* 7 raw 0 0 *:58 *:* 7 Related Commands show network connections show network statistics 40.46 show network connections To display the network connections in your switch, use the show network connections command in privileged EXEC mode. Command Syntax show network connections {all | ipv4 | ipv6} {all | raw | tcp | udp} [numeric] all Display IPv4 and IPv6 network services. ipv4 Display IPv4 network services.
PAGE 706
CanogaOS Command Reference tcp 0 0 localhost:3871 localhost:705 ESTABLISHED tcp 0 0 localhost:705 ESTABLISHED tcp 0 0 localhost:3864 localhost:705 ESTABLISHED tcp 0 0 localhost:705 ESTABLISHED tcp 0 0 localhost:3865 localhost:705 ESTABLISHED tcp 0 0 localhost:705 ESTABLISHED tcp 0 0 localhost:3866 localhost:705 ESTABLISHED tcp 0 0 localhost:705 ESTABLISHED tcp 0 0 localhost:3867 localhost:705 ESTABLISHED tcp 0 0 localhost:705 ESTABLISHED tcp 0 0 localhost:3863 local
PAGE 707
CanogaOS Command Reference Icmp: 55 ICMP messages received 0 input ICMP message failed.
PAGE 708
CanogaOS Command Reference Command Syntax show file system Command Mode Privileged EXEC Usage Examples The following is sample output from the show file system command: Switch# show file system File Systems: Type Size Used Free Use% =============================================================== flash: 63.0M 34.2M 28.8M 54% Related Commands dir ls 40.49 debug arp To display information on Address Resolution Protocol (ARP) transactions, use the debug arp command in privileged EXEC mode.
PAGE 709
CanogaOS Command Reference Related Commands 40.50 debug dhcp relay To display debugging information about the Dynamic Host Configuration Protocol (DHCP) relay and to monitor the status of DHCP packets, use the debug dhcp relay command in privileged EXEC mode. To disable debugging output, use the no form of this command. Command Syntax debug dhcp relay {all | dump | error | events | packet} no debug dhcp relay {all | dump | error | events | packet} all Debug all information of DHCP relay.
PAGE 710
CanogaOS Command Reference dump Specify the output as format of Hexadecimal. error Debug error information of DHCP snooping. events Debug events of DHCP snooping. packet Decodes DHCP receptions and transmissions. Command Mode Privileged EXEC Usage Examples The following example shows a combination of DHCP snooping events and decoded receptions and transmissions:: Switch# debug dhcp snooping events Switch# debug dhcp snooping packet Related Commands debug dhcp relay 40.
PAGE 711
CanogaOS Command Reference and to learn the status of the multicast routing process, or why packets are forwarded out of particular interfaces. Examples The following is sample output from the debug ip igmp command: Switch# debug ip igmp Related Commands debug pim sparse-mode 40.53 debug stp To debug spanning-tree activities, use the debug stp command in privileged EXEC mode. To disable debugging output, use the no form of this command.
PAGE 712
CanogaOS Command Reference command. Command Syntax debug ospf [all | events | ifsm | lsa | nfsm | nsm | packet | route] no debug ospf [all | events | ifsm | lsa | nfsm | nsm | packet | route] all Enable all debugging. events OSPF events information. ifsm OSPF Interface State Machine. lsa OSPF Link State Advertisement. nfsm OSPF Neighbor State Machine. nsm OSPF NSM information. packet OSPF packets. route OSPF route information.
PAGE 713
CanogaOS Command Reference state PIM state. timer PIM timers. Command Mode Privileged EXEC Usage PIM uses Internet Group Management Protocol (IGMP) packets to communicate with switches and advertise reachability information. Use this command with the debug igmp commands to display additional multicast routing information. Examples The following is sample output from the debug pim sparse-mode command: Switch# debug pim sparse-mode Related Commands debug igmp 40.
PAGE 714
CanogaOS Command Reference Command Mode Privileged EXEC Usage Examples The following is sample output from the show debugging command. Switch# show debugging Related Commands 40.57 ping To diagnose basic network connectivity on IP networks, use the ping command in privileged EXEC mode. Command Syntax ping [ip-address | ip ip-address | ipv6 ipv6-address | vrf name ip-address] ip-address The target IP address. ipv6-address The target IPv6 address. vrf name For a specific VRF instance.
PAGE 715
CanogaOS Command Reference traceroute command in privileged EXEC mode. Command Syntax traceroute [ip-address | ip ip-address | ipv6 ipv6-address | vrf name ip-address] ip-address The target IP address. ipv6-address The target IPv6 address. vrf name For a specific VRF instance. Command Mode Privileged EXEC Usage When not specified, the protocol argument is determined by the software examining the format of the destination argument.
PAGE 716
CanogaOS Command Reference 40.60 reload To reload the operating system, use the reload command in privileged EXEC mode. Command Syntax reload Command Mode Privileged EXEC Usage The reload command halts the system. If the system is set to restart on error, it reboots itself. Use the reload command after configuration information is entered into a file and saved to the startup configuration. Examples The following example is sample dialog from the reload command. Switch# reload Building configuration...
PAGE 717
CanogaOS Command Reference Usage If you specify the month and day, the reload is scheduled to take place at the specified time and date. If you do not specify the month and day, the reload takes place at the specified time on the current day. Examples The following example is sample dialog from the schedule reboot at command. Switch(config)# schedule reboot at 12:12 2008/12/25 Related Commands schedule reboot delay 40.
PAGE 718
CanogaOS Command Reference privileged EXEC mode. Command Syntax show boot Command Mode Privileged EXEC Usage Examples The following is sample output from the show boot command. Switch# show boot The current boot image is: T024-E0001.img The next time boot image is: Internal-1.0.0.25.img Related Commands show boot images 40.64 show boot images To display all booting images available in the flash system, use the show boot images command in privileged EXEC mode.
PAGE 719
CanogaOS Command Reference show boot 40.65 clear logging buffer To clear messages from the logging buffer, use the clear logging buffer command in global configuration mode. Command Syntax clear logging buffer Command Mode Global configuration Usage Examples The following is sample output from the clear logging buffer command. Switch(config)# clear logging buffer Related Commands show logging buffer 40.
PAGE 720
CanogaOS Command Reference Logging trap is disabled Usage A trap is an unsolicited message sent to a remote network management host. Logging traps should not be confused with SNMP traps. Examples The following is sample output from the logging alarm-trap command. Switch(config)# logging alarm-trap enable Switch(config)# logging alarm-trap level high Related Commands logging buffer 40.67 logging file To enable writing logs into files, use the logging file command in global configuration mode.
PAGE 721
CanogaOS Command Reference configuration mode. To return the logging to the default level, use the no form of this command. Command Syntax logging level file {alert | critical | debug | emergency | error | information | notice | warning | severity-level} no logging level file {0 | emergency} System is unusable. {1 | alert} Immediate action needed. {2 | critical} Critical conditions. {3 | error} Error conditions. {4 | warning} Warning conditions. {5 | notice} Normal but significant conditions.
PAGE 722
CanogaOS Command Reference {3 | error} Error conditions. {4 | warning} Warning conditions. {5 | notice} Normal but significant conditions. {6 | information} Informational messages. {7 | debug} Debugging messages. Command Mode Global configuration Default Logging file level is {4 | warning} Usage Specifying a severity-level causes messages only at that level and numerically lower levels to files.
PAGE 723
CanogaOS Command Reference this time, the switch buffered these same logs. You can use the timeout keyword to set the time range, and use the fifo-size to set the buffer size. Examples The following is sample output from the logging merge command. Switch(config)# logging merge enable Related Commands logging buffer 40.71 logging operate To log the operations, use the logging operate command in global configuration mode. Command Syntax logging operate {enable | disable} enable Enable logging operations.
PAGE 724
CanogaOS Command Reference Command Syntax logging server {enable | disable} enable Enable logging server. disable Disable logging server. Command Mode Global configuration Default Logging operations is disabled Usage Examples The following is sample output from the logging server command. Switch(config)# logging server enable Related Commands logging server severity 40.
PAGE 725
CanogaOS Command Reference In the following example, messages are logged to a server at 209.165.202.169: Switch(config)# logging server address 209.165.202.169 Related Commands logging server 40.74 logging server facility To configure the syslog facility in which error messages are sent, use the logging server facility command in global configuration mode. To revert to the default of local7, use the no form of this command.
PAGE 726
CanogaOS Command Reference no logging server severity {0 | emergency} System is unusable. {1 | alert} Immediate action needed. {2 | critical} Critical conditions. {3 | error} Error conditions. {4 | warning} Warning conditions. {5 | notice} Normal but significant conditions. {6 | information} Informational messages. {7 | debug} Debugging messages.
PAGE 727
CanogaOS Command Reference 40.76 logging timestamp To configure the system to apply a time-stamp to debugging messages or system logging messages, use the logging timestamps command in global configuration mode. To restore the default timestamp format, use the no form of this command. Command Syntax logging timestamp {bsd | date | iso | none | rfc3164 | rfc3339} no logging timestamp bsd BSD style (RFC 3164). date Date command style. iso ISO style (RFC 3339). none No timestamp.
PAGE 728
CanogaOS Command Reference Usage Examples The following is sample output from the show logging command.
PAGE 729
CanogaOS Command Reference Switch# show logging buffer statistics Logging buffer statistics: ============================================================ Total processed 153 entries Total dropped 0 entries Current have 153 entries The latest message is: Aug 6 16:06:44 Switch3 IMISH-6: ready to service The oldest message is: Aug 6 13:38:38 Switch LOGGING-5: logging starting up; version=\'2.0rc4\' Related Commands show logging 40.
PAGE 730
CanogaOS Command Reference 40.80 clear line vty To clear a specified line session, use the clear line vty command in privileged EXEC mode. Command Syntax clear line vty first [last] first The first vty number, the range is 0 to 7. last The last vty number, the range is 0 to 7. Command Mode Privileged EXEC Usage You can specify only the first vty number to clear a specific vty session, or you can specify the last vty number at the same time to clear a range of vty sessions.
PAGE 731
CanogaOS Command Reference ================================================================= 1 Test_A 1 * Switch(config)# re-username Test_A newname Test_B Switch(config)# do show usernames Number User name Privilege Password Rsa Key ================================================================= 1 Test_B 1 * Related Commands show usernames 40.82 username To establish a username-based authentication system, use the username command in global configuration mode.
PAGE 732
CanogaOS Command Reference ================================================================= 1 Test_A 10 * Related Commands show usernames 40.83 show users To display current sessions login to the switch, use the show users command in privileged EXEC mode. Command Syntax show users Command Mode Privileged EXEC Usage Examples The following is sample output from the show users command.
PAGE 733
CanogaOS Command Reference Examples The following is sample output from the show usernames command. Switch# show usernames Number User name Privilege Password Rsa Key ================================================================= 1 Test_A 1 * Related Commands username 40.85 mac-address-table ageing-time Use the mac-address-table aging-time global configuration command on the switch to set the length of time that a dynamic entry remains in the MAC address table after the entry is used or updated.
PAGE 734
CanogaOS Command Reference 40.86 mac-address-table forward Use the mac-address-table forward global configuration command on the switch to add static addresses to the MAC address table. Use the no form of this command to remove static entries from the table. Command Syntax mac-address-table mac-addr forward interface-id vlan vlan-id no mac-address-table mac-addr forward interface-id vlan vlan-id mac-addr Destination MAC address (unicast or multicast) to add to the address table.
PAGE 735
CanogaOS Command Reference mac-address-table mac-addr discard no mac-address-table mac-addr discard mac-addr Destination MAC address (unicast or multicast) to add to the address table. Packets with this destination address received in the specified VLAN are forwarded to the specified interface. Command Mode Global configuration Default Unicast MAC address filtering is disabled. The switch does not drop traffic for specific source or destination MAC addresses.
PAGE 736
CanogaOS Command Reference No default is defined. Usage Examples This example shows how to remove a specific MAC address from the dynamic address table: Switch# clear mac address-table dynamic address 0008.0070.0007 You can verify that the information was deleted by entering the show mac address-table privileged EXEC command. Related Commands show mac address-table 40.
PAGE 737
CanogaOS Command Reference Command Syntax show mac address-table [dynamic | static | multicast] [address mac-addr | interface interface-id | vlan vlan-id] dynamic Display the dynamic MAC address. static Display the static MAC address. multicast Display the multicast MAC address. mac-addr Display the specified MAC address. interface-id Display all MAC addresses on the specified physical port or link aggregation port. vlan-id Display all MAC addresses for the specified VLAN. The range is 1 to 4094.
PAGE 738
CanogaOS Command Reference Dynamic Address Count : 1 (Security: 0) Static Address Count : 1 (Security: 0) Total Mac Addresses 2 (Security: 0) : Related Commands show mac address-table 40.92 show mac-filter address-table Use the show mac-filter address-table privileged EXEC command to display the number of addresses present in all VLANs.
PAGE 739
CanogaOS Command Reference 41 Mirror Commands 41.1 monitor session destination interface Use this command to set mirror destination interface. To remove this setting, use the no form of this command. Command Syntax monitor session < session > destination interface interface no monitor session < session > destination session: <1-4> mirror session number interface: Mirror destination interface Command Mode Global configuration Usage The destination interface can only be physical port such as eth-0-1.
PAGE 740
CanogaOS Command Reference tx: monitor transmitted traffic only on that interface Command Mode Global configuration Usage None Examples This example shows how to set the mirror source port to eth-0-11 in session 1. Switch(config)# monitor session 1 source interface eth-0-11 This example shows how to remove this setting. Switch(config)# no monitor session 1 source interface eth-0-11 Related Commands monitor session destination show monitor 41.
PAGE 741
CanogaOS Command Reference Related Commands monitor session destination show monitor 41.4 show monitor Use this command to show the information about monitor. Command Syntax show monitor [session ] session: mirror session number Command Mode EXEC Usage None Examples This example shows how to display the information about monitor.
PAGE 742
CanogaOS Command Reference 42 DHCP Relay Commands 42.1 dhcp relay To enable the DHCP relay service, use the dhcp relay command in global configuration mode. To disable this function, use the no form of this command. Command Syntax dhcp relay no dhcp relay Default DHCP relay is disabled. Command Mode Global configuration Usage The DHCP service must be enabled with the dhcp service command before DHCP relay service can be used.
PAGE 743
CanogaOS Command Reference Command Mode Global configuration Usage Examples The following is sample output from the dhcp-server command: Switch(config)# dhcp-server 1 1.1.1.1 2.2.2.2 3.3.3.3 Related Commands service dhcp dhcp-server (interface) 42.3 dhcp-server (interface) To add an interface into a DHCP server group, use the dhcp-server command in interface configuration mode. To remove this interface from the DHCP server group, use the no form of this command.
PAGE 744
CanogaOS Command Reference 42.4 dhcp relay information check To configure a Dynamic Host Configuration Protocol (DHCP) server to validate the relay agent information option in forwarded BOOTREPLY messages, use the dhcp relay information check command in global configuration mode. To disable an information check, use the no form of this command. Command Syntax dhcp relay information check no dhcp relay information check Default A DHCP server checks relay information. Invalid messages are dropped.
PAGE 745
CanogaOS Command Reference Command Mode Global configuration Usage This command enables a DHCP server to identify the user (for example, cable access router) sending the request and initiate appropriate action based on this information. By default, DHCP does not insert relay information. The dhcp relay information option command automatically adds the circuit identifier suboption and the remote ID suboption to the DHCP relay agent information option (also called option 82).
PAGE 746
CanogaOS Command Reference Examples The following is sample output from the dhcp relay information policy command: Switch(config)# dhcp relay information policy drop Related Commands dhcp relay information option dhcp relay information policy 42.7 dhcp relay information trust-all To configure all interfaces on a router as trusted sources of the Dynamic Host Configuration Protocol (DHCP) relay agent information option, use the dhcp relay information trust-all command in global configuration mode.
PAGE 747
CanogaOS Command Reference 42.8 dhcp relay information trusted To configure an interface as a trusted source of the Dynamic Host Configuration Protocol (DHCP) relay agent information option, use the dhcp relay information trusted command in interface configuration mode. To restore the interface to the default behavior, use the no form of the command. Command Syntax dhcp relay information trusted no dhcp relay information trusted Default All interfaces on the router are considered untrusted.
PAGE 748
CanogaOS Command Reference Command Mode Global configuration Usage Only the main DHCP service is enabled by the service dhcp command, can other DHCP services be used, such as dhcp relay, and dhcp snooping. Examples The following is sample output from the service dhcp command: Switch(config)# service dhcp enable Related Commands dhcp relay dhcp snooping 42.10 show dhcp-server To display the DHCP server groups, use the show dhcp-server command in privileged EXEC mode.
PAGE 749
CanogaOS Command Reference Related Commands dhcp-server (global) 42.11 show dhcp relay interfaces To display to which DHCP server group the interface belongs, use the show dhcp relay interfaces command in privileged EXEC mode.
PAGE 750
CanogaOS Command Reference Examples The following is sample output from the show dhcp relay information config command: Switch# show dhcp relay information config DHCP relay agent information configuration: ============================================================ no dhcp relay information option dhcp relay information check dhcp relay information policy keep Related Commands dhcp relay information option 42.
PAGE 751
CanogaOS Command Reference Command Syntax show dhcp relay statistics Command Mode Privileged EXEC Usage Examples The following is sample output from the show dhcp relay statistics command: Switch# show dhcp relay statistics DHCP relay packet statistics: ============================================================ Client relayed packets: 101 Server relayed packets: 88 Client error packets: Server error packets: 0 0 Bogus GIADDR drops: 15 Bad circuit ID packets: 0 Corrupted agent options: 0 Missing age
PAGE 752
CanogaOS Command Reference 43 DNS Commands 43.1 ip host To define static hostname-to-address mappings in the Domain Name System (DNS) hostname cache for a DNS view, use the ip host command in global configuration mode. If the hostname cache does not exist yet, it is automatically created. To remove a hostname-to-address mapping, use the no form of this command. Command Syntax ip host hostname ip-address no ip host hostname hostname Name of the host. The first character can be either a letter or a number.
PAGE 753
CanogaOS Command Reference no dns domain domain-name domain-name Default domain name used to complete unqualified hostnames. Default No default domain name is defined for the DNS view. Command Mode Global configuration Usage Examples The following example shows how to specify the default domain for DNS: Switch(config)# dns domain www.example1.com Related Commands show dns 43.
PAGE 754
CanogaOS Command Reference Switch(config)# dns server 10.10.1.1 Switch(config)# dns server 20.20.2.2 Related Commands show dns 43.4 show dns To display configuration information about a Domain Name System (DNS) view, use the show dns command in privileged EXEC mode. Command Syntax show dns {domain | server} domain Display DNS domain list. server Display DNS server list.
PAGE 755
CanogaOS Command Reference Privileged EXEC Usage Examples The following is sample output from the show ip host command: Switch# show ip host Current IP host configuration: Host Address -------------------------------------------------------------1 www.sampledomain.com Related Commands 43-4 1.1.1.
PAGE 756
CanogaOS Command Reference 44 SNMP Commands 44.1 snmp-server access To set the access security of MIB view, use the snmp-server access command in global configuration mode. To remove the access security of MIB view, use the no form of this command.
PAGE 757
CanogaOS Command Reference 44.2 snmp-server community To set up the community access string to permit access to the Simple Network Management Protocol (SNMP), use the snmp-server community command in global configuration mode. To remove the specified community string, use the no form of this command.
PAGE 758
CanogaOS Command Reference context-name Name of the SNMP context being created. Default No SNMP contexts are configured. Command Mode Global configuration Usage When you use the no snmp-server context command, all SNMP instances in that context are deleted. Examples The following is sample output from the snmp-server context command: Switch(config)# snmp-server context contextA Related Commands 44.
PAGE 759
CanogaOS Command Reference 44.5 snmp-server engineID To specify the Simple Network Management Protocol (SNMP) engine ID on the local device, use the snmp-server engineID command in global configuration mode. To remove the configured engine ID, use the no form of this command. Command Syntax snmp-server engineID engineid-string no snmp-server engineID engineid-string String of a maximum of 24 characters that identifies the engine ID.
PAGE 760
CanogaOS Command Reference Default No SNMP server groups are configured. Command Mode Global configuration Usage The SNMP engine ID is a unique string used to identify the device for administration purposes. You do not need to specify an engine ID for the device. For further details on the SNMP engine ID, see RFC 2571.
PAGE 761
CanogaOS Command Reference show snmp-server notify 44.8 snmp-server system-contact To set the system contact (sysContact) string, use the snmp-server system-contact command in global configuration mode. To remove the system contact information, use the no form of this command. Command Syntax snmp-server contact text no snmp-server contact text String that describes the system contact information. Default No system contact string is set.
PAGE 762
CanogaOS Command Reference Global configuration Usage Examples The following is an example of a system location string: Switch(config)# snmp-server system-location Sample Place Related Commands snmp-server system-contact 44.10 snmp-server trap enable To enable all Simple Network Management Protocol (SNMP) notification types that are available on your system, use the snmp-server trap enable command in global configuration mode. To disable all available SNMP notifications, use the no form of this command.
PAGE 763
CanogaOS Command Reference 44.11 snmp-server trap target-address To specify the recipient of a Simple Network Management Protocol (SNMP) notification message, use the snmp-server trap target-address command in global configuration mode. To remove the specified host from the configuration, use the no form of this command.
PAGE 764
CanogaOS Command Reference md5 (Optional) Specifies the HMAC-MD5 authentication level. sha (Optional) Specifies the HMAC-SHA authentication level. auth-password (Optional) String that enables the agent to receive packets from the host. privacy (Optional) Specifies the use of the User-based Security Model (USM) for SNMP version 3 for SNMP message level security. aes (Optional) Specifies the use of the Advanced Encryption Standard (AES) algorithm for encryption.
PAGE 765
CanogaOS Command Reference Command Mode Global configuration Usage Examples The following is sample output from the snmp-server version command: Switch(config)# snmp-server version all Related Commands show snmp-server version 44.14 snmp-server view To create or update a view entry, use the snmp-server view command in global configuration mode. To remove the specified Simple Network Management Protocol (SNMP) server view entry, use the no form of this command.
PAGE 766
CanogaOS Command Reference Related Commands show snmp-server view 44.15 show snmp-server access To display the ACL information of SNMP, use the show snmp-server access command in privileged EXEC mode. Command Syntax show snmp-server access [group-name] group-name Specify a group name.
PAGE 767
CanogaOS Command Reference Command Syntax show snmp-server community Command Mode Privileged EXEC Usage Examples The following is sample output from the show snmp-server community command: Switch# show snmp-server community Community-Access Community-String Security-name =========================================================== read-only public read-write private comm1 comm2 Related Commands 44.
PAGE 768
CanogaOS Command Reference 44.18 show snmp-server engineID To display the identification of the local Simple Network Management Protocol (SNMP) engine and all remote engines that have been configured on the router, use the show snmp-server engineID command in EXEC mode. Command Syntax show snmp-server engineID Command Mode Privileged EXEC Usage An SNMP engine is a copy of SNMP that can reside on a local or remote device.
PAGE 769
CanogaOS Command Reference a11 usm ab Related Commands 44.20 show snmp-server notify To display notification information of SNMP, use the show snmp-server notify command in privileged EXEC mode. Command Syntax show snmp-server notify Command Mode Privileged EXEC Usage Examples The following is sample output from the show snmp-server notify command: Switch# show snmp-server notify Notify-name Notify-type =========================================================== sample trap Related Commands 44.
PAGE 770
CanogaOS Command Reference Examples The following is sample output from the show snmp-server sys-info command: Switch# show snmp-server sys-info Contact: admin@sampledomain.com Location: Denvor Related Commands 44.22 show snmp-server trap-receiver To display the SNMP traps receiver, use the show snmp-server trap-receiver command in privileged EXEC mode.
PAGE 771
CanogaOS Command Reference Command Mode Privileged EXEC Usage An SNMP user must be part of an SNMP group, as configured using the snmp-server usm-user command. Examples The following is sample output from the show snmp-server usm-user command: Switch# show snmp-server usm-user user1 EnginedID: User Name: 01234567890123456789 user1 Auth Protocol: priv Protocol: Storage Type: nonvolatile Row status: active Related Commands 44.
PAGE 772
CanogaOS Command Reference 44.25 show snmp-server view To display the family name, storage type, and status of a Simple Network Management Protocol (SNMP) configuration and associated MIB, use the show snmp-server view command in privileged EXEC mode. Command Syntax show snmp-server view Command Mode Privileged EXEC Usage Use this command to display the SNMP view configuration.
PAGE 773
CanogaOS Command Reference 45 Sflow Commands 45.1 sflow enable Use this command to enable or disable sFlow globally. Command Syntax (no|)sflow enable sflow: Sampled flow enable: Enable sFlow services Command Mode Global configuration mode Usage Before any other sFlow command can be configured, sFlow services must be enabled globally. Use the no parameter with this command to remove all sFlow configurations and disable sFlow globally. Examples This example shows how to enable sFlow services globally.
PAGE 774
CanogaOS Command Reference Examples This example shows how to add a collector with IP address 10.0.0.254 and UDP port 3000. Switch (config)# sflow collector 10.0.0.254 3000 Related Commands 45.3 sflow counter interval Use this command to configure sFlow polling-interval for counter sample.
PAGE 775
CanogaOS Command Reference Interface configuration mode Usage Use this command to enable counter sampling on individual port. Use the no parameter with this command to disable counter sampling. By default, sFlow counter sampling is disabled in all ports. This command can only be configured on a port which is not a link-agg group member. The port can be either a physical port or a link-agg port.
PAGE 776
CanogaOS Command Reference Examples This example shows how to set the sFlow sampling rate to 2048 on eth-0-1. Switch# configure terminal Switch (config)# interface eth-0-1 Switch (config)# sflow sample rate 2048 % Warning: sFlow sampling requires high CPU usage, especially with a low rate. It is suggested not configure a rate less than default value 8192. Related Commands 45.6 sFlow sample enable Use this command to enable or disable packet sampling on individual port.
PAGE 777
CanogaOS Command Reference Switch (config)# sflow sample output Switch (config)# interface eth-0-2 Switch (config)# switchport Switch (config)# sflow sample output % Warning: sFlow sample on switchport would be restricted if VLAN ACL is configured Related Commands 45.7 show sflow Use this command to show the running information of sFlow. Command Syntax show sflow Command Mode Exec mode Usage Examples This example shows how to show the sflow running information.
PAGE 778
CanogaOS Command Reference Command Syntax (no)debug sflow sample (no)debug sflow counter (no)debug sflow packet (no)debug sflow (all|) sflow: Sampled flow sample: Packet sample counter: Interface counter packet: sFlow datagram all: All sFlow debugging Command Mode Exec mode Usage Use this command to turn on debugging status for sFlow.
PAGE 779
CanogaOS Command Reference Examples This example shows how to show the debugging status of sFlow.
PAGE 780
CanogaOS Command Reference Notes: 45-8
PAGE 781
PAGE 782
CANOGA PERKINS CORPORATION 20600 Prairie Street Chatsworth, California 91311-6008 USA Phone: (818) 718-6300 FAX: (818) 718-6312 Web Site: www.canoga.com Email: fiber@canoga.