XGS3 Command Guide

1-1

Command Guide

XGS3-24040 24-Port Gigabit with 4 Optional 10G slots

Layer 3 IPv6/IPv4 Managed Stackable Switch

XGS3-42000R 4-Slot Layer 3

IPv6/IPv4 Routing Chassis Switch

XGS3 Command Guide

1-2

Content

CHAPTER 1 COMMANDS FOR BASIC SWITCH CONFIGURATION ..........................1-42

1.1 COMMANDS FOR BASIC CONFIGURATION ............................................................................................ 1-421.1.1 Authentication line ................................................................................................................................. 1-421.1.2 boot img ................................................................................................................................................ 1-421.1.3 boot startup-config ................................................................................................................................ 1-431.1.4 clock set ................................................................................................................................................ 1-441.1.5 config .................................................................................................................................................... 1-451.1.6 debug ssh-server .................................................................................................................................. 1-451.1.7 enable ................................................................................................................................................... 1-451.1.8 enable password ................................................................................................................................... 1-461.1.9 end ........................................................................................................................................................ 1-461.1.10 exec-timeout ....................................................................................................................................... 1-461.1.11 exit ....................................................................................................................................................... 1-471.1.12 help ..................................................................................................................................................... 1-471.1.13 hostname ............................................................................................................................................ 1-481.1.14 ip host ................................................................................................................................................. 1-481.1.15 ipv6 host .............................................................................................................................................. 1-491.1.16 ip http server ....................................................................................................................................... 1-491.1.17 language ............................................................................................................................................. 1-501.1.18 login .................................................................................................................................................... 1-501.1.19 password ............................................................................................................................................. 1-501.1.20 reload .................................................................................................................................................. 1-511.1.21 service password-encryption ............................................................................................................... 1-511.1.22 service terminal-length ........................................................................................................................ 1-521.1.23 sysContact .......................................................................................................................................... 1-521.1.24 sysLocation ......................................................................................................................................... 1-521.1.25 set default ........................................................................................................................................... 1-531.1.26 setup ................................................................................................................................................... 1-531.1.27 show clock .......................................................................................................................................... 1-541.1.28 show temperature ............................................................................................................................... 1-541.1.29 show tech-support ............................................................................................................................... 1-541.1.30 show version ....................................................................................................................................... 1-551.1.31 username ............................................................................................................................................ 1-551.1.32 web language ...................................................................................................................................... 1-561.1.33 write .................................................................................................................................................... 1-56

1.2 COMMANDS FOR TELNET ................................................................................................................... 1-56

XGS3 Command Guide

1-3

1.2.1 authentication ip access-class .............................................................................................................. 1-561.2.2 authentication ipv6 access-class ........................................................................................................... 1-571.2.3 authentication line login ........................................................................................................................ 1-571.2.4 authentication securityip ........................................................................................................................ 1-581.2.5 authentication securityipv6 .................................................................................................................... 1-591.2.6 terminal length ...................................................................................................................................... 1-591.2.7 terminal monitor .................................................................................................................................... 1-601.2.8 telnet ..................................................................................................................................................... 1-601.2.9 telnet server enable .............................................................................................................................. 1-611.2.10 telnet-server max-connection .............................................................................................................. 1-611.2.11 ssh-server authentication-retries ......................................................................................................... 1-611.2.12 ssh-server enable ............................................................................................................................... 1-621.2.13 ssh-server host-key create rsa ............................................................................................................ 1-621.2.14 ssh-server max-connection ................................................................................................................. 1-631.2.15 ssh-server timeout .............................................................................................................................. 1-631.2.16 ssh-user .............................................................................................................................................. 1-641.2.17 show ssh-server .................................................................................................................................. 1-641.2.18 show ssh-user ..................................................................................................................................... 1-641.2.19 show telnet login ................................................................................................................................. 1-65

1.3 COMMANDS FOR CONFIGURING SWITCH IP ......................................................................................... 1-651.3.1 interface vlan ......................................................................................................................................... 1-651.3.2 interface ethernet 0 ............................................................................................................................... 1-661.3.3 ip address ............................................................................................................................................. 1-661.3.4 ipv6 address .......................................................................................................................................... 1-661.3.5 ip bootp-client enable ............................................................................................................................ 1-671.3.6 ip dhcp-client enable ............................................................................................................................. 1-67

1.4 COMMANDS FOR SNMP ..................................................................................................................... 1-681.4.1 debug snmp mib ................................................................................................................................... 1-681.4.2 debug snmp kernel ............................................................................................................................... 1-681.4.3 rmon enable .......................................................................................................................................... 1-691.4.4 show snmp ............................................................................................................................................ 1-691.4.5 show snmp engineid ............................................................................................................................. 1-711.4.6 show snmp group .................................................................................................................................. 1-721.4.7 show snmp mib ..................................................................................................................................... 1-721.4.8 show snmp status ................................................................................................................................. 1-731.4.9 show snmp user .................................................................................................................................... 1-741.4.10 show snmp view .................................................................................................................................. 1-741.4.11 snmp-server community ...................................................................................................................... 1-751.4.12 snmp-server enable ............................................................................................................................ 1-76

XGS3 Command Guide

1-4

1.4.13 snmp-server enable traps ................................................................................................................... 1-771.4.14 snmp-server engineid ......................................................................................................................... 1-771.4.15 snmp-server group .............................................................................................................................. 1-781.4.16 snmp-server host ................................................................................................................................ 1-781.4.17 snmp-server securityip ........................................................................................................................ 1-791.4.18 snmp-server securityip ........................................................................................................................ 1-801.4.19 snmp-server view ................................................................................................................................ 1-801.4.20 snmp-server user ................................................................................................................................ 1-81

1.5 COMMANDS FOR SWITCH UPGRADE ................................................................................................... 1-811.5.1 copy（FTP） ........................................................................................................................................ 1-811.5.2 copy（TFTP） ...................................................................................................................................... 1-831.5.3 ftp-dir ..................................................................................................................................................... 1-841.5.4 ftp-server enable ................................................................................................................................... 1-851.5.5 ftp-server timeout .................................................................................................................................. 1-851.5.6 ip ftp ...................................................................................................................................................... 1-851.5.7 show ftp ................................................................................................................................................. 1-861.5.8 show tftp ................................................................................................................................................ 1-861.5.9 tftp-server enable .................................................................................................................................. 1-871.5.10 tftp-server retransmission-number ...................................................................................................... 1-881.5.11 tftp-server transmission-timeout .......................................................................................................... 1-88

CHAPTER 2 FILE SYSTEM COMMANDS .....................................................................2-89

2.1 CD .................................................................................................................................................... 2-892.2 COPY ................................................................................................................................................ 2-892.3 DELETE ............................................................................................................................................. 2-902.4 DIR .................................................................................................................................................... 2-902.5 FORMAT ............................................................................................................................................ 2-912.6 MKDIR ............................................................................................................................................... 2-912.7 MOUNT .............................................................................................................................................. 2-922.8 PWD .................................................................................................................................................. 2-922.9 RENAME ............................................................................................................................................ 2-932.10 RMDIR ............................................................................................................................................. 2-932.11 UNMOUNT ........................................................................................................................................ 2-93

CHAPTER 3 COMMANDS FOR CLUSTER ...................................................................3-95

3.1 CLEAR CLUSTER NODES ..................................................................................................................... 3-953.2 CLUSTER AUTO-ADD ........................................................................................................................... 3-953.3 CLUSTER COMMANDER ....................................................................................................................... 3-953.4 CLUSTER IP-POOL .............................................................................................................................. 3-963.5 CLUSTER KEEPALIVE INTERVAL ........................................................................................................... 3-97

XGS3 Command Guide

1-5

3.6 CLUSTER KEEPALIVE LOSS-COUNT ...................................................................................................... 3-973.7 CLUSTER MEMBER ............................................................................................................................. 3-983.8 CLUSTER MEMBER AUTO-TO-USER ...................................................................................................... 3-993.9 CLUSTER RESET MEMBER ................................................................................................................... 3-993.10 CLUSTER RUN ................................................................................................................................ 3-1003.11 CLUSTER UPDATE MEMBER ............................................................................................................. 3-1003.12 DEBUG CLUSTER ............................................................................................................................ 3-1013.13 DEBUG CLUSTER PACKETS ............................................................................................................. 3-1013.14 SHOW CLUSTER ............................................................................................................................. 3-1023.15 SHOW CLUSTER MEMBERS ............................................................................................................. 3-1033.16 SHOW CLUSTER CANDIDATES .......................................................................................................... 3-1043.17 SHOW CLUSTER TOPOLOGY ............................................................................................................ 3-1043.18 RCOMMAND COMMANDER ............................................................................................................... 3-1063.19 RCOMMAND MEMBER ..................................................................................................................... 3-106

CHAPTER 4 COMMANDS FOR NETWORK PORT CONFIGURATION .....................4-108

4.1 COMMANDS FOR ETHERNET PORT CONFIGURATION .......................................................................... 4-1084.1.1 bandwidth ............................................................................................................................................ 4-1084.1.2 combo-forced-mode ............................................................................................................................ 4-1094.1.3 clear counters interface ........................................................................................................................ 4-1114.1.4 flow control ........................................................................................................................................... 4-1114.1.5 interface ethernet ................................................................................................................................ 4-1124.1.6 loopback .............................................................................................................................................. 4-1124.1.7 mdi ...................................................................................................................................................... 4-1134.1.8 name ................................................................................................................................................... 4-1134.1.9 negotiation .......................................................................................................................................... 4-1144.1.10 rate-suppression ............................................................................................................................... 4-1144.1.11 rate-violation ...................................................................................................................................... 4-1154.1.12 show interface ................................................................................................................................... 4-1164.1.13 shutdown ........................................................................................................................................... 4-1194.1.14 speed-duplex .................................................................................................................................... 4-120

CHAPTER 5 COMMANDS FOR PORT ISOLATION FUNCTION ................................5-122

5.1 ISOLATE-PORT GROUP ...................................................................................................................... 5-1225.2 ISOLATE-PORT GROUP SWITCHPORT INTERFACE ................................................................................ 5-1225.3 ISOLATE-PORT APPLY ....................................................................................................................... 5-1235.4 SHOW ISOLATE-PORT GROUP ............................................................................................................ 5-123

CHAPTER 6 COMMANDS FOR PORT LOOPBACK DETECTION FUNCTION .........6-125

6.1 LOOPBACK-DETECTION CONTROL ..................................................................................................... 6-125

XGS3 Command Guide

1-6

6.2 LOOPBACK-DETECTION SPECIFIED-VLAN ........................................................................................... 6-1256.3 LOOPBACK-DETECTION INTERVAL-TIME ............................................................................................. 6-1266.4 LOOPBACK-DETECTION CONTROL-RECOVERY TIMEOUT ...................................................................... 6-1276.5 SHOW LOOPBACK-DETECTION .......................................................................................................... 6-1276.6 DEBUG LOOPBACK-DETECTION ......................................................................................................... 6-128

CHAPTER 7 COMMANDS FOR ULDP ........................................................................7-128

7.1 ULDP ENABLE .................................................................................................................................. 7-1287.2 ULDP DISABLE ................................................................................................................................. 7-1297.3 ULDP HELLO-INTERVAL ..................................................................................................................... 7-1297.4 ULDP AGGRESSIVE-MODE ................................................................................................................. 7-1297.5 ULDP MANUAL-SHUTDOWN ............................................................................................................... 7-1307.6 ULDP RESET .................................................................................................................................... 7-1307.7 ULDP RECOVERY-TIME ...................................................................................................................... 7-1317.8 SHOW ULDP ..................................................................................................................................... 7-1317.9 DEBUG ULDP FSM INTERFACE ETHERNET ........................................................................................... 7-1327.10 DEBUG ULDP ERROR ...................................................................................................................... 7-1327.11 DEBUG ULDP EVENT ....................................................................................................................... 7-1337.12 DEBUG ULDP PACKET ..................................................................................................................... 7-1337.13 DEBUG ULDP INTERFACE ETHERNET ................................................................................................ 7-133

CHAPTER 8 COMMANDS FOR LLDP FUNCTION ........................................................ 8-1

8.1 LLDP ENABLE ...................................................................................................................................... 8-18.2 LLDP ENABLE (PORT) ........................................................................................................................... 8-18.3 LLDP MODE .......................................................................................................................................... 8-28.4 LLDP TX-INTERVAL ............................................................................................................................... 8-28.5 LLDP MSGTXHOLD ............................................................................................................................... 8-38.6 LLDP TRANSMIT DELAY ......................................................................................................................... 8-38.7 LLDP NOTIFICATION INTERVAL ............................................................................................................... 8-48.8 LLDP TRAP .......................................................................................................................................... 8-48.9 LLDP TRANSMIT OPTIONAL TLV .............................................................................................................. 8-58.10 LLDP NEIGHBORS MAX-NUM ................................................................................................................ 8-58.11 LLDP TOOMANYNEIGHBORS ............................................................................................................... 8-68.12 SHOW LLDP ....................................................................................................................................... 8-68.13 SHOW LLDP TRAFFIC .......................................................................................................................... 8-78.14 SHOW LLDP INTERFACE ETHERNET ...................................................................................................... 8-88.15 SHOW LLDP NEIGHBORS INTERFACE ETHERNET ................................................................................... 8-88.16 SHOW DEBUGGING LLDP ..................................................................................................................... 8-98.17 DEBUG LLDP ...................................................................................................................................... 8-98.18 DEBUG LLDP PACKETS ..................................................................................................................... 8-10

XGS3 Command Guide

1-7

8.19 CLEAR LLDP REMOTE-TABLE ............................................................................................................ 8-11

CHAPTER 9 COMMANDS FOR PORT CHANNEL .......................................................9-12

9.1 DEBUG PORT-CHANNEL ...................................................................................................................... 9-129.2 INTERFACE PORT-CHANNEL ................................................................................................................ 9-129.3 LACP PORT-PRIORITY ......................................................................................................................... 9-139.4 LACP SYSTEM-PRIORITY ..................................................................................................................... 9-139.5 LOAD-BALANCE ................................................................................................................................. 9-149.6 PORT-GROUP ..................................................................................................................................... 9-159.7 PORT-GROUP MODE ........................................................................................................................... 9-159.8 SHOW PORT-GROUP ........................................................................................................................... 9-16

CHAPTER 10 COMMANDS FOR JUMBO ...................................................................10-18

10.1 JUMBO ENABLE ............................................................................................................................. 10-18

CHAPTER 11 VLAN CONFIGURATION ...................................................................... 11-19

11.1 COMMANDS FOR VLAN CONFIGURATION ........................................................................................ 11-1911.1.1 debug gvrp ........................................................................................................................................ 11-1911.1.2 dot1q-tunnel enable ........................................................................................................................... 11-1911.1.3 dot1q-tunnel tpid ............................................................................................................................... 11-2011.1.4 gvrp ................................................................................................................................................... 11-2111.1.5 garp timer hold .................................................................................................................................. 11-2111.1.6 garp timer join ................................................................................................................................... 11-2211.1.7 garp timer leave ................................................................................................................................ 11-2211.1.8 garp timer leaveall ............................................................................................................................. 11-2311.1.9 name ................................................................................................................................................. 11-2311.1.10 private-vlan ...................................................................................................................................... 11-2411.1.11 private-vlan association ................................................................................................................... 11-2511.1.12 show dot1q-tunnel ........................................................................................................................... 11-2611.1.13 show garp ........................................................................................................................................ 11-2611.1.14 show gvrp ........................................................................................................................................ 11-2611.1.15 show vlan ........................................................................................................................................ 11-2711.1.16 show vlan-translation ....................................................................................................................... 11-2811.1.17 switchport access vlan .................................................................................................................... 11-2911.1.18 switchport hybrid allowed vlan ......................................................................................................... 11-3011.1.19 switchport hybrid native vlan ........................................................................................................... 11-3111.1.20 switchport interface ......................................................................................................................... 11-3111.1.21 switchport mode .............................................................................................................................. 11-3211.1.22 switchport trunk allowed vlan .......................................................................................................... 11-3311.1.23 switchport trunk native vlan ............................................................................................................. 11-34

XGS3 Command Guide

1-8

11.1.24 vlan .................................................................................................................................................. 11-3411.1.25 vlan-translation ................................................................................................................................ 11-3511.1.26 vlan-translation enable .................................................................................................................... 11-3611.1.27 vlan-translation miss drop ............................................................................................................... 11-3711.1.28 vlan ingress enable ......................................................................................................................... 11-38

11.2 COMMANDS FOR DYNAMIC VLAN CONFIGURATION ......................................................................... 11-3911.2.1 dynamic-vlan mac-vlan prefer ........................................................................................................... 11-3911.2.2 dynamic-vlan subnet-vlan prefer ....................................................................................................... 11-3911.2.3 mac-vlan ............................................................................................................................................ 11-4011.2.4 mac-vlan vlan .................................................................................................................................... 11-4011.2.5 protocol-vlan ...................................................................................................................................... 11-4111.2.6 show dynamic-vlan prefer ................................................................................................................. 11-4211.2.7 show mac-vlan .................................................................................................................................. 11-4211.2.8 show mac-vlan interface .................................................................................................................... 11-4311.2.9 show protocol-vlan ............................................................................................................................ 11-4311.2.10 show subnet-vlan ............................................................................................................................ 11-4411.2.11 show subnet-vlan interface .............................................................................................................. 11-4411.2.12 subnet-vlan ...................................................................................................................................... 11-4511.2.13 switchport mac-vlan enable ............................................................................................................. 11-4511.2.14 switchport subnet-vlan enable ......................................................................................................... 11-46

11.3 COMMANDS FOR VOICE VLAN CONFIGURATION ............................................................................. 11-4711.3.1 show voice-vlan ................................................................................................................................. 11-4711.3.2 switchport voice-vlan enable ............................................................................................................. 11-4811.3.3 voice-vlan .......................................................................................................................................... 11-4811.3.4 voice-vlan vlan .................................................................................................................................. 11-49

CHAPTER 12 COMMANDS FOR MAC ADDRESS TABLE CONFIGURATION .........12-50

12.1 COMMANDS FOR MAC ADDRESS TABLE CONFIGURATION ............................................................... 12-5012.1.1 mac-address-table aging-time ........................................................................................................... 12-5012.1.2 mac-address-table static|blackhole ................................................................................................... 12-5012.1.3 show mac-address-table ................................................................................................................... 12-51

12.2 COMMANDS FOR MAC ADDRESS BINDING CONFIGURATION .............................................................. 12-5212.2.1 clear port-security dynamic ............................................................................................................... 12-5212.2.2 show port-security ............................................................................................................................. 12-5212.2.3 show port-security address ............................................................................................................... 12-5312.2.4 show port-security interface .............................................................................................................. 12-5412.2.5 switchport port-security ..................................................................................................................... 12-5612.2.6 switchport port-security convert ........................................................................................................ 12-5612.2.7 switchport port-security lock .............................................................................................................. 12-5612.2.8 switchport port-security mac-address ............................................................................................... 12-57

XGS3 Command Guide

1-9

12.2.9 switchport port-security maximum ..................................................................................................... 12-5712.2.10 switchport port-security timeout ...................................................................................................... 12-5812.2.11 switchport port-security violation ..................................................................................................... 12-59

CHAPTER 13 OMMANDS FOR MSTP ........................................................................13-60

13.1 COMMANDS FOR MSTP ................................................................................................................. 13-6013.1.1 abort .................................................................................................................................................. 13-6013.1.2 exit .................................................................................................................................................... 13-6013.1.3 instance vlan ..................................................................................................................................... 13-6013.1.4 name ................................................................................................................................................. 13-6113.1.5 revision-level ..................................................................................................................................... 13-6213.1.6 spanning-tree .................................................................................................................................... 13-6213.1.7 spanning-tree forward-time ............................................................................................................... 13-6313.1.8 spanning-tree hello-time .................................................................................................................... 13-6413.1.9 spanning-tree link-type p2p ............................................................................................................... 13-6413.1.10 spanning-tree maxage .................................................................................................................... 13-6513.1.11 spanning-tree max-hop ................................................................................................................... 13-6513.1.12 spanning-tree mcheck ..................................................................................................................... 13-6613.1.13 spanning-tree mode ........................................................................................................................ 13-6613.1.14 spanning-tree mst configuration ...................................................................................................... 13-6713.1.15 spanning-tree mst cost .................................................................................................................... 13-6813.1.16 spanning-tree mst port-priority ........................................................................................................ 13-6913.1.17 spanning-tree mst priority ................................................................................................................ 13-7013.1.18 spanning-tree mst rootguard ........................................................................................................... 13-7113.1.19 spanning-tree portfast ..................................................................................................................... 13-7113.1.20 spanning-tree priority ...................................................................................................................... 13-7213.1.21 spanning-tree format ....................................................................................................................... 13-7313.1.22 spanning-tree digest-snooping ........................................................................................................ 13-7413.1.23 spanning-tree tcflush (Global mode) ............................................................................................... 13-7413.1.24 spanning-tree tcflush (Port mode) ................................................................................................... 13-75

13.2 COMMANDS FOR MONITOR AND DEBUG .......................................................................................... 13-7613.2.1 show spanning-tree ........................................................................................................................... 13-7613.2.2 show spanning-tree mst config ......................................................................................................... 13-7913.2.3 show mst-pending ............................................................................................................................. 13-7913.2.4 debug spanning-tree ......................................................................................................................... 13-80

CHAPTER 14 COMMANDS FOR QOS AND PBR ......................................................14-82

14.1 CLASS ........................................................................................................................................... 14-8214.2 CLASS-MAP ................................................................................................................................... 14-8214.3 MATCH .......................................................................................................................................... 14-83

XGS3 Command Guide

1-10

14.4 MLS QOS ....................................................................................................................................... 14-8414.5 MLS QOS COS ................................................................................................................................ 14-8414.6 MLS QOS AGGREGATE-POLICY ........................................................................................................ 14-8514.7 MLS QOS TRUST ............................................................................................................................. 14-86

14.7.1 mls qos dscp-mutation ...................................................................................................................... 14-8714.7.2 mls qos map ...................................................................................................................................... 14-8814.7.3 policy ................................................................................................................................................. 14-8914.7.4 policy aggregate ................................................................................................................................ 14-9114.7.5 policy-map ......................................................................................................................................... 14-91

14.8 PRIORITY-QUEUE OUT ..................................................................................................................... 14-9214.9 QUEUE BANDWIDTH ........................................................................................................................ 14-9314.10 SET ............................................................................................................................................. 14-9414.11 SERVICE-POLICY .......................................................................................................................... 14-9414.12 SHOW CLASS-MAP ....................................................................................................................... 14-9514.13 SHOW POLICY-MAP ....................................................................................................................... 14-9614.14 SHOW MLS QOS AGGREGATE-POLICY ............................................................................................ 14-9714.15 SHOW MLS QOS INTERFACE .......................................................................................................... 14-9714.16 SHOW MLS QOS MAPS ................................................................................................................ 14-10114.17 SHOW MLS-QOS ......................................................................................................................... 14-10114.18 WRR-QUEUE BANDWIDTH ........................................................................................................... 14-10214.19 WRR-QUEUE COS-MAP ............................................................................................................... 14-103

CHAPTER 15 COMMANDS FOR IPV6 PBR ............................................................. 15-104

15.1 CLASS ......................................................................................................................................... 15-10415.2 CLASS-MAP ................................................................................................................................. 15-10415.3 MLS QOS ..................................................................................................................................... 15-10515.4 MATCH IPV6 ACCESS-GROUP ........................................................................................................ 15-10515.5 POLICY-MAP ................................................................................................................................ 15-10615.6 SET ............................................................................................................................................. 15-10615.7 SERVICE-POLICY .......................................................................................................................... 15-107

CHAPTER 16 COMMANDS FOR FLOW-BASED REDIRECTION ................................16-1

16.1 ACCESS-GROUP REDIRECT TO INTERFACE ETHERNET ......................................................................... 16-116.2 SHOW FLOW-BASED-REDIRECT ......................................................................................................... 16-1

CHAPTER 17 COMMANDS FOR LAYER 3 FORWARDING .........................................17-3

17.1 COMMANDS FOR LAYER 3 INTERFACE ............................................................................................... 17-317.1.1 bandwidth ............................................................................................................................................ 17-317.1.2 shutdown ............................................................................................................................................. 17-317.1.3 interface vlan ....................................................................................................................................... 17-4

XGS3 Command Guide

1-11

17.1.4 interface loopback ............................................................................................................................... 17-417.2 COMMANDS FOR IPV4/V6 CONFIGURATION ........................................................................................ 17-5

17.2.1 clear ipv6 neighbor .............................................................................................................................. 17-517.2.2 debug ip packet ................................................................................................................................... 17-517.2.3 debug ipv6 packet ............................................................................................................................... 17-617.2.4 debug ipv6 icmp .................................................................................................................................. 17-717.2.5 debug ipv6 nd ..................................................................................................................................... 17-817.2.6 debug ipv6 tunnel packet .................................................................................................................... 17-917.2.7 ipv6 enable .......................................................................................................................................... 17-917.2.8 ipv6 proxy enable .............................................................................................................................. 17-1017.2.9 ip address ......................................................................................................................................... 17-1117.2.10 ipv6 address .................................................................................................................................... 17-1117.2.11 ipv6 route ........................................................................................................................................ 17-1217.2.12 ipv6 redirect .................................................................................................................................... 17-1317.2.13 ipv6 nd dad attempts ....................................................................................................................... 17-1417.2.14 ipv6 nd ns-interval ........................................................................................................................... 17-1417.2.15 ipv6 nd suppress-ra ........................................................................................................................ 17-1517.2.16 ipv6 nd ra-lifetime ............................................................................................................................ 17-1517.2.17 ipv6 nd min-ra-interval ..................................................................................................................... 17-1617.2.18 ipv6 nd max-ra-interval .................................................................................................................... 17-1617.2.19 ipv6 nd prefix ................................................................................................................................... 17-1717.2.20 ipv6 nd ra-hoplimit ........................................................................................................................... 17-1817.2.21 ipv6 nd ra-mtu ................................................................................................................................. 17-1817.2.22 ipv6 nd reachable-time .................................................................................................................... 17-1917.2.23 ipv6 nd retrans-timer ....................................................................................................................... 17-1917.2.24 ipv6 nd other-config-flag .................................................................................................................. 17-1917.2.25 ipv6 nd managed-config-flag ........................................................................................................... 17-2017.2.26 ipv6 neighbor .................................................................................................................................. 17-2017.2.27 ipv6 rthdr-type0 enable ................................................................................................................... 17-2117.2.28 interface tunnel ............................................................................................................................... 17-2117.2.29 show ip traffic .................................................................................................................................. 17-2217.2.30 show ipv6 interface ......................................................................................................................... 17-2417.2.31 show ipv6 route ............................................................................................................................... 17-2617.2.32 show ipv6 neighbors ....................................................................................................................... 17-2717.2.33 show ipv6 traffic .............................................................................................................................. 17-2917.2.34 show ipv6 enable ............................................................................................................................ 17-3017.2.35 show ipv6 redirect ........................................................................................................................... 17-3117.2.36 show ipv6 tunnel ............................................................................................................................. 17-3117.2.37 description ....................................................................................................................................... 17-32

XGS3 Command Guide

1-12

17.2.38 tunnel source .................................................................................................................................. 17-3217.2.39 tunnel destination ............................................................................................................................ 17-3317.2.40 tunnel nexthop ................................................................................................................................ 17-3417.2.41 tunnel 6to4-relay ............................................................................................................................. 17-3417.2.42 tunnel mode .................................................................................................................................... 17-35

17.3 COMMANDS FOR IP ROUTE AGGREGATION ..................................................................................... 17-3617.3.1 ip fib optimize .................................................................................................................................... 17-36

17.4 COMMANDS FOR URPF ................................................................................................................. 17-3617.4.1 debug l4driver urpf ............................................................................................................................ 17-3617.4.2 ip urpf enable .................................................................................................................................... 17-3717.4.3 show urpf rule ipv4 num .................................................................................................................... 17-3817.4.4 show urpf rule ipv6 num .................................................................................................................... 17-3817.4.5 show urpf rule ipv4 ............................................................................................................................ 17-3817.4.6 show urpf rule ipv6 ............................................................................................................................ 17-3917.4.7 show urpf .......................................................................................................................................... 17-3917.4.8 urpf enable ........................................................................................................................................ 17-39

17.5 COMMANDS FOR ARP CONFIGURATION .......................................................................................... 17-4017.5.1 arp ..................................................................................................................................................... 17-4017.5.2 clear arp-cache ................................................................................................................................. 17-4117.5.3 clear arp traffic .................................................................................................................................. 17-4117.5.4 debug arp .......................................................................................................................................... 17-4117.5.5 ip proxy-arp ....................................................................................................................................... 17-4217.5.6 l3 hashselect ..................................................................................................................................... 17-4317.5.7 show arp ........................................................................................................................................... 17-4317.5.8 show arp traffic .................................................................................................................................. 17-45

CHAPTER 18 COMMANDS FOR ARP SCANNING PREVENTION ..............................18-1

18.1 ANTI-ARPSCAN ENABLE .................................................................................................................... 18-118.2 ANTI-ARPSCAN PORT-BASED THRESHOLD .......................................................................................... 18-118.3 ANTI-ARPSCAN IP-BASED THRESHOLD ............................................................................................... 18-218.4 ANTI-ARPSCAN TRUST ...................................................................................................................... 18-218.5 ANTI-ARPSCAN TRUST IP .................................................................................................................. 18-318.6 ANTI-ARPSCAN RECOVERY ENABLE ................................................................................................... 18-418.7 ANTI-ARPSCAN RECOVERY TIME ........................................................................................................ 18-418.8 ANTI-ARPSCAN LOG ENABLE ............................................................................................................. 18-518.9 ANTI-ARPSCAN TRAP ENABLE ........................................................................................................... 18-518.10 SHOW ANTI-ARPSCAN ..................................................................................................................... 18-618.11 DEBUG ANTI-ARPSCAN ................................................................................................................... 18-7

CHAPTER 19 COMMANDS FOR PREVENTING ARP, ND SPOOFING .......................19-8

XGS3 Command Guide

1-13

19.1 IP ARP-SECURITY UPDATEPROTECT ................................................................................................... 19-819.2 IPV6 ND-SECURITY UPDATEPROTECT ................................................................................................. 19-919.3 IP ARP-SECURITY LEARNPROTECT ..................................................................................................... 19-919.4 IPV6 ND-SECURITY LEARNPROTECT ................................................................................................ 19-1019.5 IP ARP-SECURITY CONVERT ............................................................................................................ 19-1019.6 IPV6 ND-SECURITY CONVERT .......................................................................................................... 19-1119.7 CLEAR IP ARP DYNAMIC .................................................................................................................. 19-1119.8 CLEAR IPV6 ND DYNAMIC ................................................................................................................ 19-11

CHAPTER 20 COMMAND FOR ARP GUARD ............................................................20-13

20.1 ARP-GUARD IP ............................................................................................................................... 20-13

CHAPTER 21 COMMAND FOR ARP LOCAL PROXY ................................................21-14

21.1 IP LOCAL PROXY-ARP ..................................................................................................................... 21-14

CHAPTER 22 COMMANDS FOR GRATUITOUS ARP CONFIGURATION .................22-15

22.1 IP GRATUITOUS-ARP ....................................................................................................................... 22-1522.2 SHOW IP GRATUITOUS-ARP ............................................................................................................. 22-15

CHAPTER 23 COMMANDS FOR ND SNOOPING ......................................................23-17

23.1 CLEAR IPV6 ND SNOOPING BINDING ................................................................................................. 23-1723.2 DEBUG IPV6 ND SNOOPING ............................................................................................................. 23-1723.3 IPV6 ND SNOOPING ENABLE (GLOBAL MODE) .................................................................................. 23-1823.4 IPV6 ND SNOOPING MAC-BINDING-LIMIT ........................................................................................... 23-1823.5 IPV6 ND SNOOPING MAX-DAD-DELAY ............................................................................................... 23-1923.6 IPV6 ND SNOOPING MAX-DAD-PREPARE-DELAY ................................................................................ 23-1923.7 IPV6 ND SNOOPING MAX-SAC-LIFETIME ............................................................................................ 23-2023.8 IPV6 ND SNOOPING POLICY ............................................................................................................. 23-2123.9 IPV6 ND SNOOPING PORT-BINDING-LIMIT .......................................................................................... 23-2123.10 IPV6 ND SNOOPING STATIC-BINDING .............................................................................................. 23-2223.11 IPV6 ND SNOOPING TRUST ............................................................................................................ 23-2323.12 IPV6 ND SNOOPING USER-CONTROL .............................................................................................. 23-2323.13 SHOW IPV6 ND SNOOPING ............................................................................................................. 23-2423.14 SHOW IPV6 ND SNOOPING MAC-BINDING ........................................................................................ 23-24

CHAPTER 24 COMMANDS FOR DHCP .....................................................................24-26

24.1 COMMANDS FOR DHCP SERVER CONFIGURATION .......................................................................... 24-2624.1.1 bootfile .............................................................................................................................................. 24-2624.1.2 clear ip dhcp binding ......................................................................................................................... 24-2624.1.3 clear ip dhcp conflict ......................................................................................................................... 24-2724.1.4 clear ip dhcp server statistics ............................................................................................................ 24-27

XGS3 Command Guide

1-14

24.1.5 client-identifier ................................................................................................................................... 24-2824.1.6 client-name ....................................................................................................................................... 24-2824.1.7 debug ip dhcp server ........................................................................................................................ 24-2924.1.8 default-router ..................................................................................................................................... 24-2924.1.9 dns-server ......................................................................................................................................... 24-3024.1.10 domain-name .................................................................................................................................. 24-3024.1.11 hardware-address ........................................................................................................................... 24-3124.1.12 host ................................................................................................................................................. 24-3124.1.13 ip dhcp conflict logging .................................................................................................................... 24-3224.1.14 ip dhcp excluded-address ............................................................................................................... 24-3324.1.15 ip dhcp pool ..................................................................................................................................... 24-3324.1.16 ip dhcp conflict ping-detection enable ............................................................................................. 24-3424.1.17 ip dhcp ping packets ....................................................................................................................... 24-3424.1.18 ip dhcp ping timeout ........................................................................................................................ 24-3524.1.19 lease ............................................................................................................................................... 24-3524.1.20 netbios-name-server ....................................................................................................................... 24-3624.1.21 netbios-node-type ........................................................................................................................... 24-3724.1.22 network-address ............................................................................................................................. 24-3824.1.23 next-server ...................................................................................................................................... 24-3824.1.24 option .............................................................................................................................................. 24-3924.1.25 service dhcp .................................................................................................................................... 24-3924.1.26 show ip dhcp binding ...................................................................................................................... 24-4024.1.27 show ip dhcp conflict ....................................................................................................................... 24-4124.1.28 show ip dhcp server statistics ......................................................................................................... 24-41

24.2 COMMANDS FOR DHCP RELAY CONFIGURATION ............................................................................ 24-4424.2.1 ip forward-protocol udp bootps .......................................................................................................... 24-4424.2.2 ip helper-address .............................................................................................................................. 24-44

CHAPTER 25 COMMANDS FOR DHCPV6 .................................................................25-45

25.1 CLEAR IPV6 DHCP BINDING ............................................................................................................. 25-4525.2 CLEAR IPV6 DHCP SERVER STATISTICS ............................................................................................ 25-4525.3 DEBUG IPV6 DHCP CLIENT PACKET .................................................................................................. 25-4625.4 DEBUG IPV6 DHCP DETAIL ............................................................................................................... 25-4625.5 DEBUG IPV6 DHCP RELAY PACKET ................................................................................................... 25-4625.6 DEBUG IPV6 DHCP SERVER ............................................................................................................. 25-4725.7 DNS-SERVER ................................................................................................................................. 25-4725.8 DOMAIN-NAME ............................................................................................................................... 25-4825.9 EXCLUDED-ADDRESS ..................................................................................................................... 25-4825.10 IPV6 ADDRESS ............................................................................................................................. 25-4925.11 IPV6 DHCP CLIENT PD ................................................................................................................... 25-49

XGS3 Command Guide

1-15

25.12 IPV6 DHCP CLIENT PD HINT ........................................................................................................... 25-5025.13 IPV6 DHCP POOL .......................................................................................................................... 25-5125.14 IPV6 DHCP RELAY DESTINATION .................................................................................................... 25-5125.15 IPV6 DHCP SERVER ...................................................................................................................... 25-5225.16 IPV6 GENERAL-PREFIX ................................................................................................................. 25-5225.17 IPV6 LOCAL POOL ........................................................................................................................ 25-5325.18 LIFETIME ..................................................................................................................................... 25-5425.19 NETWORK-ADDRESS .................................................................................................................... 25-5425.20 PREFIX-DELEGATION .................................................................................................................... 25-5525.21 PREFIX-DELEGATION POOL ........................................................................................................... 25-5625.22 SERVICE DHCPV6 ......................................................................................................................... 25-5625.23 SHOW IPV6 DHCP ......................................................................................................................... 25-5725.24 SHOW IPV6 DHCP BINDING ............................................................................................................ 25-5725.25 SHOW IPV6 DHCP INTERFACE ........................................................................................................ 25-5825.26 SHOW IPV6 DHCP LOCAL POOL ..................................................................................................... 25-5825.27 SHOW IPV6 DHCP POOL ................................................................................................................ 25-5925.28 SHOW IPV6 DHCP STATISTICS ........................................................................................................ 25-5925.29 SHOW IPV6 GENERAL-PREFIX ....................................................................................................... 25-62

CHAPTER 26 COMMANDS FOR DHCP OPTION 82 ..................................................26-64

26.1 IP DHCP RELAY INFORMATION OPTION .............................................................................................. 26-6426.2 IP DHCP RELAY INFORMATION POLICY .............................................................................................. 26-6426.3 IP DHCP RELAY INFORMATION OPTION SUBSCRIBER-ID ...................................................................... 26-6526.4 IP DHCP SERVER RELAY INFORMATION ENABLE ................................................................................ 26-6626.5 SHOW IP DHCP RELAY INFORMATION OPTION .................................................................................... 26-6626.6 DEBUG IP DHCP RELAY PACKET ....................................................................................................... 26-67

CHAPTER 27 COMMANDS FOR DHCP SNOOPING .................................................27-68

27.1 DEBUG IP DHCP SNOOPING PACKET INTERFACE ................................................................................ 27-6827.2 DEBUG IP DHCP SNOOPING PACKET ................................................................................................. 27-6827.3 DEBUG IP DHCP SNOOPING UPDATE ................................................................................................. 27-6827.4 DEBUG IP DHCP SNOOPING EVENT ................................................................................................... 27-6927.5 DEBUG IP DHCP SNOOPING BINDING ................................................................................................ 27-6927.6 IP DHCP SNOOPING ......................................................................................................................... 27-6927.7 IP DHCP SNOOPING BINDING ........................................................................................................... 27-7027.8 IP DHCP SNOOPING BINDING USER ................................................................................................... 27-7027.9 IP DHCP SNOOPING BINDING ARP ..................................................................................................... 27-7127.10 IP DHCP SNOOPING BINDING DOT1X ............................................................................................... 27-7227.11 IP DHCP SNOOPING BINDING USER-CONTROL ................................................................................. 27-7227.12 IP DHCP SNOOPING BINDING USER-CONTROL MAX-USER ................................................................. 27-73

XGS3 Command Guide

1-16

27.13 IP DHCP SNOOPING TRUST ............................................................................................................ 27-7427.14 IP DHCP SNOOPING ACTION ........................................................................................................... 27-7427.15 IP DHCP SNOOPING ACTION MAXNUM ............................................................................................ 27-7527.16 IP DHCP SNOOPING LIMIT-RATE ..................................................................................................... 27-7527.17 IP DHCP SNOOPING INFORMATION ENABLE ..................................................................................... 27-7627.18 IP DHCP SNOOPING OPTION82 ENABLE .......................................................................................... 27-7727.19 ENABLE TRUSTVIEW KEY .............................................................................................................. 27-7727.20 IP USER HELPER-ADDRESS ........................................................................................................... 27-7827.21 SHOW TRUSTVIEW STATUS ............................................................................................................ 27-7927.22 SHOW IP DHCP SNOOPING ............................................................................................................. 27-80

CHAPTER 28 COMMANDS FOR DHCPV6 SNOOPING .............................................28-84

28.1 CLEAR IPV6 DHCP SNOOPING BINDING ............................................................................................. 28-8428.2 DEBUG IPV6 DHCP SNOOPING BINDING ............................................................................................ 28-8428.3 DEBUG IPV6 DHCP SNOOPING EVENT ............................................................................................... 28-8528.4 DEBUG IPV6 DHCP SNOOPING PACKET ............................................................................................. 28-8528.5 IPV6 DHCP SNOOPING ACTION ......................................................................................................... 28-8728.6 IPV6 DHCP SNOOPING ACTION MAXNUM .......................................................................................... 28-8728.7 IPV6 DHCP SNOOPING BINDING ENABLE ........................................................................................... 28-8828.8 IPV6 DHCP SNOOPING BINDING ND .................................................................................................. 28-8928.9 IPV6 DHCP SNOOPING BINDING USER ............................................................................................... 28-8928.10 IPV6 DHCP SNOOPING BINDING USER-CONTROL ............................................................................. 28-9028.11 IPV6 DHCP SNOOPING BINDING-LIMIT ............................................................................................. 28-9028.12 IPV6 DHCP SNOOPING ENABLE ...................................................................................................... 28-9128.13 IP DHCP SNOOPING TRUST ............................................................................................................ 28-9228.14 SHOW IPV6 DHCP SNOOPING ......................................................................................................... 28-9228.15 SHOW IPV6 DHCP SNOOPING BINDING ............................................................................................ 28-9428.16 SHOW IPV6 DHCP SNOOPING INTERFACE ....................................................................................... 28-94

CHAPTER 29 COMMANDS FOR ROUTING POLICY .................................................29-96

29.1 IP PREFIX-LIST DESCRIPTION ........................................................................................................... 29-9629.2 IP PREFIX-LIST SEQ ........................................................................................................................ 29-9629.3 IP PREFIX-LIST SEQUENCE-NUMBER ................................................................................................ 29-9729.4 MATCH AS-PATH ............................................................................................................................. 29-9829.5 MATCH COMMUNITY ........................................................................................................................ 29-9829.6 MATCH INTERFACE ......................................................................................................................... 29-9929.7 MATCH IP ....................................................................................................................................... 29-9929.8 MATCH IPV6 ADDRESS .................................................................................................................. 29-10029.9 MATCH IPV6 NEXT-HOP ................................................................................................................. 29-10029.10 MATCH METRIC .......................................................................................................................... 29-101

XGS3 Command Guide

1-17

29.11 MATCH ORIGIN ........................................................................................................................... 29-10229.12 MATCH ROUTE-TYPE ................................................................................................................... 29-10229.13 MATCH TAG ................................................................................................................................ 29-10329.14 ROUTE-MAP ............................................................................................................................... 29-10329.15 SET AGGREGATOR ..................................................................................................................... 29-10429.16 SET AS-PATH .............................................................................................................................. 29-10529.17 SET ATOMIC-AGGREGATE ........................................................................................................... 29-10529.18 SET COMM-LIST ......................................................................................................................... 29-10629.19 SET COMMUNITY ........................................................................................................................ 29-10629.20 SET EXTCOMMUNITY ................................................................................................................... 29-10729.21 SET IP NEXT-HOP ........................................................................................................................ 29-10729.22 SET LOCAL-PREFERENCE ........................................................................................................... 29-10829.23 SET METRIC ............................................................................................................................... 29-10829.24 SET METRIC-TYPE ...................................................................................................................... 29-10929.25 SET ORIGIN ................................................................................................................................ 29-10929.26 SET ORIGINATOR-ID .................................................................................................................... 29-11029.27 SET TAG .................................................................................................................................... 29-11029.28 SET VPNV4 NEXT-HOP ................................................................................................................ 29-11129.29 SET WEIGHT ............................................................................................................................... 29-11129.30 SHOW IP PREFIX-LIST ............................................................................................ 29-11229.31 SHOW IP PREFIX-LIST ................................................................................... 29-11329.32 SHOW ROUTE-MAP ..................................................................................................................... 29-11429.33 SHOW ROUTER-ID ...................................................................................................................... 29-115

CHAPTER 30 COMMANDS FOR STATIC ROUTE ...................