Dell Networking S5000 Betriebsanweisung

FTOS Command Line Reference Guide for the S5000 SwitchFTOS 9.0(1.3)

bgp router-id...

pingTest connectivity between the system and another device by sending echo requests and waiting for replies.S5000Syntaxping [host | ip-address | [cou

Outgoing interface list: TenGigabitEthernet 8/0show running-config pimDisplay the current configuration of PIM-SM snooping.S5000Syntaxshow runnin

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Related Commandsshow ipv6 pim tib – displays the IPv6 PIM tree information base (TIB)debug ipv

Command HistoryVersion 9.0(1.3) Introduced on the S5000.ipv6 pim bsr-borderInvoke IPv6 PIM debugging.S5000Syntaxdebug ipv6 pim [bsr | events | group g

ipv6 pim bsr-candidateConfigure the router as a bootstrap (BSR) candidate.S5000Syntaxipv6 pim bsr-candidate interface-type slot/port [hash-mask-length

Parameterspriority-valueEnter a number. Preference is given to larger/higher number. The range is 0 to 4294967294. The default is 1.Defaults 1Command

ipv6 pim query-intervalChange the frequency of IPv6 PIM router-query messages.S5000Syntaxipv6 pim query-interval secondsTo return to the default value

ipv6 pim register-filterConfigure the source DR so that it does not send register packets to the RP for the specified sources and groups.S5000Syntaxip

override Enter the keyword override to override the BSR updates with static RP. The override takes effect immediately during enable/disable.NOTE: This

Defaults noneCommand Modes CONFIGURATIONCommand HistoryVersion 9.0(1.3) Introduced on the S5000.ipv6 pim sparse-modeEnable IPv6 PIM sparse mode on the

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationPIM leaf routers join the shortest path tree immediately after the first pack

• N: Do not validate reply data .• Y: Do validate reply data .Default is No.outgoing-interfaceEnter the outgoing interface for ping packets to a desti

ExampleFTOS#show ipv6 pim interfaceInterface Ver/ Nbr Query DR Mode Count Intvl PrioTe 10/3 v2/S 1 30 1 Address : fe80::201:e8ff:

Parametersmapping (OPTIONAL) Enter the keyword mapping to display the multicast groups-to-RP mapping and information on how RP is learnt.group-address

NOTE: The :: notation specifies successive hexadecimal fields of zero.Command Modes• EXEC• EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on

40PIM-Source Specific Mode (PIM-SSM)FTOS supports protocol-independent multicast (PIM)-source specific mode (PIM-SSM) commands on the S5000.This chapt

ip pim ssm-rangeSpecify the SSM group range using an access list.S5000Syntaxip pim ssm-range {access_list_name}Parametersaccess_list_nameEnter the nam

Command HistoryVersion 9.0(1.3) Introduced on the S5000.IPv6 PIM CommandsThe following commands apply to IPv6 PIM-SM and PIM-SSM.• clear ipv6 pim tib•

1016

41Port MonitoringThe port monitoring feature allows you to monitor network traffic by forwarding a copy of each incoming or outgoing packet from one p

Defaults noneCommand Modes MONITOR SESSION (conf-mon-sess-session-ID)Command HistoryVersion 9.0(1.3) Introduced on the S5000.Related Commandsmonitor s

Defaults noneCommand Modes MONITOR SESSION (conf-mon-sess-session-ID)Command HistoryVersion 9.0(1.3) Introduced on the S5000.ExampleFTOS(conf-mon-sess

U A destination unreachable error PDU was received.Q Source quench (destination too busy).M Could not fragment.? Unknown packet type.& Packet life

show running-config monitor sessionDisplay the running configuration of all monitor sessions or a specific session.S5000Syntaxshow running-config moni

source (port monitoring)Configure a port monitor source.S5000Syntaxsource interface destination interface-type slot/port direction {rx | tx | both}To

1022

42Per-VLAN Spanning Tree Plus (PVST+)The Dell Networking operating software (FTOS) implementation of per-VLAN spanning tree plus (PVST+) is based on t

Defaults Disabled.Command Modes CONFIGURATION (conf-pvst)Command HistoryVersion 9.0(1.3) Introduced on the S5000.Related Commandsprotocol spanning-tre

protocol spanning-tree pvstEnter the PVST+ mode to enable PVST+ on a device.S5000Syntaxprotocol spanning-tree pvstTo disable PVST+, use the disable co

interface type slot/port(OPTIONAL) Enter the interface keyword followed by the interface type and slot/port or number information. Valid slot numbers

Name Role PortID Prio Cost Sts Cost Link-type Edge-----------------------------------------------------Te 1/0 Root 128.130 128 20000 FWD 2000

Edge port:no (default) port guard :none (default)Link type: point-to-point (auto) bpdu filter:disable (default)Bpdu guard :disable (default)Bpdus sent

shutdown-on-violation(OPTIONAL) Enter the keywords shutdown-on-violation to hardware disable an interface when a BPDU is received and the port is disa

sendSend messages to one or all terminal line users.S5000Syntaxsend [*] | [line ] | [console] | [vty]Parameters* Enter the asterisk character * to sen

When used in a PVST+ network, loop guard is performed per-port or per-port channel at a VLAN level. If no BPDUs are received on a VLAN interface, the

Related Commandsshow spanning-tree pvst – views the PVST+ configuration.tc-flush-standardEnable MAC address flushing after receiving every topology ch

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Related Commandsvlan forward-delay – changes the time interval before FTOS transitions to the

vlan hello-timeSet the time interval between generation of PVST+ 7 BPDUs.S5000Syntaxvlan vlan-range hello-time secondsTo return to the default value,

Command Modes CONFIGURATION (conf-pvst)Command HistoryVersion 9.0(1.3) Introduced on the S5000.Related Commandsvlan bridge-priority – sets the bridge-

43Quality of Service (QoS)The Dell Networking operating software (FTOS) commands for quality of service (QoS) include traffic conditioning and congest

Per-Port QoS CommandsPer-port QoS (port-based QoS) allows you to define the QoS configuration on a per-physical-port basis.dot1p-priorityAssign a valu

rate policePolice the incoming traffic rate on the selected interface.S5000Syntaxrate police [kbps] committed-rate [burst-KB] [peak [kbps] peak-rate [

rate shapeShape the traffic output on the selected interface.S5000Syntaxrate shape [kbps] rate [burst-KB]Parameterskbps Enter the keyword kbps to spec

Usage InformationTo apply dot1p-queue-mapping, use the service-class dynamic dot1p command.Related Commandsshow qos dot1p-queue-mapping – displays the

show-timezone (OPTIONAL) Enter the keyword show-timezone to include the time zone information in the timestamp.uptime (OPTIONAL) Enter the keyword upt

are automatically configured; you cannot assign the service-class dynamic command to individual interfaces in a port channel.All traffic is by default

Parametersunicast numberEnter the keyword unicast followed by the queue number. The range is 1 to 3.Defaults noneCommand Modes CONFIGURATIONCommand Hi

Related Commandsqos-policy-output – creates a QoS output policy.class-mapCreate/access a class map. Class maps differentiate traffic so that you can a

match mac vlan – configures a match criterion for a class map based on VLAN ID.service-queue – assigns a class map and QoS policy to different queues.

ParametersdescriptionEnter a description to identify the policies (80 characters maximum).Defaults noneCommand Modes CONFIGURATION (policy-map-input a

match ip dscpUse a differentiated services code point (DSCP) value as a match criteria.S5000Syntaxmatch ip dscp dscp-listTo remove a DSCP value as a m

set-ip-dscp value(OPTIONAL) Enter the keywords set-ip-dscp followed by the IP DSCP value. The matched traffic is marked with the DSCP value. The range

match mac dot1pConfigure a match criterion for a class map based on a dot1p value.S5000Syntaxmatch mac dot1p {dot1p-list}Parametersdot1p-list Enter a

policy-aggregateAllow an aggregate method of configuring per-port QoS via policy maps. An aggregate QoS policy is part of the policy map (input/output

layer2 (OPTIONAL) Enter the keyword layer2 to specify a Layer 2 Class Map. The default is Layer 3.Defaults Layer 3Command Modes CONFIGURATIONCommand H

show command-historyDisplay a buffered log of all commands entered by all users along with a time stamp.S5000Syntaxshow command-historyDefaults noneCo

qos-policy-inputCreate a QoS input policy on the router.S5000Syntaxqos-policy-input qos-policy-name [layer2]To remove an existing input QoS policy fro

Defaults noneCommand Modes CONFIGURATIONCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationUse this command to specify the name

qos-policy-input – creates a QoS output policy.rate-shapeShape traffic output as part of the designated policy.S5000Syntaxrate-shape [kbps] rate [burs

layer2 (OPTIONAL) Enter the keyword layer2 to specify a Layer 2 Class Map. The default is Layer 3.Defaults Layer 3Command Modes INTERFACECommand Histo

service-queueAssign a class map and QoS policy to different queues.S5000Syntaxservice-queue queue-id [class-map class-map-name] [qos-policy qos-policy

Parametersip-dscp value(OPTIONAL) Enter the keywords ip-dscp followed by the IP DSCP value. The range is 0 to 63.mac-dot1p valueEnter the keywords mac

show qos dot1p-queue-mappingDisplays the dot1p priority to queue mapping on the switch.S5000Syntaxshow qos dot1p-queue-mappingDefaults• dot1p Priority

Defaults noneCommand Modes• EXEC• EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Example (IPv4)FTOS#show qos policy-map detail

show qos policy-map-inputView the input QoS policy map details.S5000Syntaxshow qos policy-map-input [policy-map-name] [class class-map-name] [qos-poli

show qos policy-map-outputView the output QoS policy map details.S5000Syntaxshow qos policy-map-output [policy-map-name] [qos-policy-output qos-policy

Parameterscount Display the command tree with a usage counter for each command.no Display all of the commands that may be preceded by the keyword no,

ExampleFTOS#show qos qos-policy-inputQos-policy-input QosInput Rate-police 100 50 peak 100 50 Dscp 32FTOS#show qos qos-policy-outputView

• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.Defaults noneCommand Modes• EXEC• EX

Usage InformationThe following describes output from the show qos statistics command Example below.Field DescriptionQueue # Queue NumberQueued Bytes (

Parameterswred-profile-nameEnter the WRED profile name to view the profile details.Defaults noneCommand Modes• EXEC• EXEC PrivilegeCommand HistoryVers

An input policy map with both Trust and Class-map configuration, the Class-map rules are ignored and only the Trust rule is programmed in the CAM. In

13 1 L2ACL 400 200 Alwd(2)FTOS#trustSpecify dynamic classification (DSCP) or dot1p to trust.S5000Syntaxtrust {diffs

DSCP/CP hex Range (XXX)DSCP Definition Traditional IP PrecedenceInternal Queue IDDSCP/CP Decimal000XXX BE (Best Effort) Best Effort 0 0–15wredDesignat

wred-profileCreate a WRED profile and name the profile.S5000Syntaxwred-profile wred-profile-nameTo remove an existing WRED profile, use the no wred-pr

1068

44Private VLAN (PVLAN)FTOS supports the private VLAN (PVLAN) feature on the S5000 switch.Private VLANs extend the FTOS security suite by providing Lay

usage: 0 WORD option usage: 0ipv6 option usage: 0 ac

– A trunk port can also belong to a regular VLAN (non-private VLAN).ip local-proxy-arpEnable/disable Layer 3 communication between secondary VLANs in

Parameterscommunity Enter the keyword community to set the VLAN as a community VLAN.isolated Enter the keyword isolated to configure the VLAN as an is

Parametersvlan-listEnter the list of secondary VLANs to associate with the selected primary VLAN. The list can be in comma-delimited or hyphenated-ran

Field DescriptionInterface Displays the type of interface and associated slot and port number.Vlan Displays the VLAN ID of the designated interface.PV

primary_vlan(OPTIONAL) Enter a private VLAN ID or secondary VLAN ID to display interface details about the designated PVLAN.interface interface(OPTION

100 isolated Yes Te 2/2,4-6 200 isolated Yes Te 3/2,4-6Example (Community)FTOS# show vlan private-vlan communityPri

Command Modes• EXEC• EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationThe output of this command, shown below, d

Usage InformationThe assignment of the various PVLAN port types to port and port channel (LAG) interfaces is shown below.ExampleFTOS#confFTOS(conf)#in

1078

45Routing Information Protocol (RIP)Routing information protocol (RIP) is a distance vector routing protocol. The Dell Networking operating software (

usage: 0 <1-255> option usage: 0 ipv6 option usage:

debug ip ripExamine RIP routing information for troubleshooting.S5000Syntaxdebug ip rip [database | [events [interface-type slot/port] | packet [inter

Parametersalways (OPTIONAL) Enter the keyword always to enable the switch software to always advertise the default route.metric metric-value(OPTIONAL)

descriptionEnter a description of the RIP routing protocol.S5000Syntaxdescription {description}To remove the description, use the no description {desc

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Related Commandsdefault-metric – assigns one distance metric to all routes learned using the r

distribute-list outConfigure a filter for outgoing routing updates.S5000Syntaxdistribute-list prefix-list-name out [interface-type slot/port | bgp | c

ip poison-reverseSet the prefix of the RIP routing updates to the RIP infinity value.S5000Syntaxip poison-reverseTo disable poison reverse, use the no

ip rip send versionSet the interface to send a specific version of RIP. The version you set on the interface overrides the version command in ROUTER R

maximum-pathsSet RIP to forward packets over multiple paths.S5000Syntaxmaximum-paths numberTo return to the default values, use the no maximum-paths c

networkEnable RIP for a specified network. Use this command to enable RIP on all networks connected to the switch.S5000Syntaxnetwork ip-addressTo disa

• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed by slot/port numbers. The ports are 48, 52, 56, and 60.• For a Port Channe

Usage InformationTraffic statistics are sorted on a per-interface basis; the interface receiving the most traffic is displayed first. All CPU and port

passive-interfaceSuppress routing updates on a specified interface.S5000Syntaxpassive-interface interface-type slot/portTo delete a passive interface,

Parametersconnected Enter the keyword connected to specify that information from active routes on interfaces is redistributed.static Enter the keyword

Command Modes ROUTER RIPCommand HistoryVersion 9.0(1.3) Introduced on the S5000.redistribute ospfRedistribute routing information from an OSPF process

router ripEnter ROUTER RIP mode to configure and enable RIP.S5000Syntaxrouter ripTo disable RIP, use the no router rip command.Defaults Disabled.Comma

show ip rip databaseDisplay the routes that RIP learns. If the switch learned no RIP routes, no output is generated.S5000Syntaxshow ip rip database [i

[50/2] via 1.1.10.2, 00:00:18, Vlan 10208.250.42.0/24 auto-summaryshow running-config ripDisplay the current RIP configuration.S5000Syntaxsh

holddownEnter the number of seconds to specify a time interval during which the route is marked as unreachable but still sending RIP packets. The hold

46Remote Monitoring (RMON)FTOS supports remote monitoring (RMON) on the S5000 switch.FTOS RMON is based on IEEE standards, providing both 32-bit and 6

intervalTime, in seconds, the alarm monitors the MIB variables; this is the alarmSampleType in the RMON alarm table. The range is 5 to 3600 seconds.de

owner name(OPTIONAL) Enter the keyword owner followed by the owner name to record the owner of the RMON group of statistics.buckets number(OPTIONAL) E

neighbor route-reflector-client...

show environmentView S5000 system component status (for example, temperature or voltage).S5000Syntaxshow environment [all | fan | stack-unit unit-numb

rmon eventAdd an event in the RMON event table.S5000Syntaxrmon event number [log] [trap community] [description string] [owner name]To disable RMON on

variableThe MIB object to monitor. The variable must be in the SNMP OID format; for example, 1.3.6.1.2.1.1.3 The object type must be a 64 bit integer.

Command HistoryVersion 9.0(1.3) Introduced on the S5000.ExampleFTOS# show rmonRMON status total memory used 218840 bytes. ether statistics table: 8

5 1.3.6.1.2.1.1.36 1.3.6.1.2.1.1.37 1.3.6.1.2.1.1.38 1.3.6.1.2.1.1.39 1.3.6.1.2.1.1.310 1.3.6.1.2.1.1.311 1.3.

3 34 45 56 67 78 89 910 1011 1112 1213 1314 1415 1516 1617

alarm status: OKFTOS#Example (Brief)FTOS#show rmon hc-alarm briefindex SNMP OID----------------------------------1 1.3.6.1.2.1.1.32

9004 134791198 TenGigabitEthernet 3/1FTOS#show rmon logDisplay the contents of the RMON log table.S5000Syntaxshow rmon log [index] [brief]Parame

Parametersindex(OPTIONAL) Enter the table index number to display just that entry.brief (OPTIONAL) Enter the keyword brief to display the RMON Etherne

9002 134529054 TenGigabitEthernet 3/09003 134791198 TenGigabitEthernet 3/19004 134791198 TenGigabitEthernet 3/1FTOS#1108

47Rapid Spanning Tree Protocol (RSTP)The Dell Networking operating software (FTOS) implementation of rapid spanning tree protocol (RSTP) is based on t

Module 1 - - - - - - - -Module 2 - - - - - - - -Module 3 - - - - -

Parametersall (OPTIONAL) Enter the keyword all to debug all spanning tree operations.bpdu interface-type slot/port {in | out}(OPTIONAL) Enter the keyw

Defaults noneCommand Modes SPANNING TREE (The prompt is “config-rstp”.)Command HistoryVersion 9.0(1.3) Introduced on the S5000.Related Commandsprotoco

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Related Commandshello-time – changes the time interval between BPDUs.max-age – changes the wai

max-ageSet the time interval for the RSTP bridge to maintain configuration information before refreshing that information.S5000Syntaxmax-age secondsTo

show configView the current configuration for the mode. Only non-default values are displayed.S5000Syntaxshow configCommand Modes CONFIGURATION RSTP (

Sts Port state: root-inconsistent (INCON Root), forwarding (FWD), listening (LIS), blocking (BLK), disabled (DIS), or shut down (EDS Shut).Guard Type

128.257Designated root has priority 32768, address 0001.e801.6aa8Designated bridge has priority 32768, address 0001.e801.6aa8Designated port id is 128

shutdown-on-violation(OPTIONAL) Enter the keywords shutdown-on-violation to hardware disable an interface when a BPDU is received and the port is disa

tc-flush-standardEnable the MAC address flushing after receiving every topology change notification.S5000Syntaxtc-flush-standardTo disable, use the no

48SecurityThe commands in this chapter are available on the S5000 switch.This chapter contains various types of security commands offered in the Dell

* - Management Unit Software Protocol Configured -------------------------------------------------------------- DCBX LLDP SNMP FTOS# Ex

Parameterssystem Enter the keyword system to send accounting information of any other AAA configuration.exec Enter the keyword exec to send accounting

aaa accounting suppressPrevent the generation of accounting records of users with the user name value of NULL.S5000Syntaxaaa accounting suppress null-

show accountingDisplay the active accounting sessions for each online user.S5000Syntaxshow accountingDefaults noneCommand Modes EXECCommand HistoryVer

nameDefine a name for the list of authorization methods.default Define the default list of authorization methods.local Use the authorization parameter

ParametersnameDefine a name for the list of authorization methods.default Define the default list of authorization methods.local Use the authorization

privilege level (CONFIGURATION mode)Change the access or privilege level of one or more commands.S5000Syntaxprivilege mode {level level command | rese

privilege level (LINE mode)Change the access level for users on the terminal lines.S5000Syntaxprivilege level levelTo delete access to a terminal line

• enable - use the password defined by the enable password command in CONFIGURATION mode.• line - use the password defined by the password command in

Parametersmethod-list-nameEnter a text string (up to 16 characters long) as the name of a user-configured method list that can be applied to different

tacacs-server host – specifies a TACACS+ server host.access-classRestrict incoming connections to a particular IP address in a defined IP access contr

show processes cpuDisplay CPU usage information based on processes running in an S5000.S5000Syntaxshow processes cpu [management-unit 1-99 [details] |

Use this parameter only with a password that you copied from the show running-config file of another Dell Networking router.passwordEnter a text strin

Defaults Not configured.Command HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationOnly Dell Networking Technical Support staff use this

NOTE: The question mark (?) and the tilde (~) are not supported characters.Related Commandsshow running-config – views the current configuration.privi

passwordSpecify a password for users on terminal lines.S5000Syntaxpassword [encryption-type] passwordTo delete a password, use the no password passwor

To return to the default, use the no password-attributes [min-length number] [max-retry number] [character-restriction [upper number] [lower number] [

• interface for INTERFACE modes• line for LINE mode• route-map for ROUTE-MAP mode• router for ROUTER OSPF, ROUTER RIP, ROUTER ISIS and ROUTER BGP mode

service password-encryptionEncrypt all passwords configured in FTOS.S5000Syntaxservice password-encryptionTo store new passwords as clear text, use th

Related Commandsprivilege level (CONFIGURATION mode) – assigns access control to different command modes.show usersAllows you to view information on a

timeout login responseSpecify how long the software waits for the login input (for example, the user name and password) before timing out.S5000Syntaxt

password Enter the keyword password followed by the encryption-type or the password.secret Enter the keyword secret followed by the encryption-type or

0.02% 0.00% 0 frrp0x0000015f 46350 4635 10000 0.00% 0.02% 0.01% 0 vrrp0x0000015d 226

debug radiusView RADIUS transactions to assist with troubleshooting.S5000Syntaxdebug radiusTo disable debugging of RADIUS, use the no debug radius com

Command HistoryVersion 9.0(1.3) Introduced on the S5000.radius-server deadtimeConfigure a time interval during which non-responsive RADIUS servers to

server retransmit command. The range is zero (0) to 100. The default is 3 attempts.timeout seconds(OPTIONAL) Enter the keyword timeout followed by the

radius-server keyConfigure a key for all RADIUS communications between the switch and the RADIUS host server.S5000Syntaxradius-server key [encryption-

ParametersretriesEnter a number of attempts that FTOS tries to locate a RADIUS server. The range is zero (0) to 100. The default is 3 retries.Defaults

debug tacacs+View TACACS+ transactions to assist with troubleshooting.S5000Syntaxdebug tacacs+To disable debugging of TACACS+, use the no debug tacacs

Command HistoryVersion 9.0(1.3) Introduced on the S5000.tacacs-server hostSpecify a TACACS+ host.S5000Syntaxtacacs-server host {hostname | ipv4-addres

tacacs-server keyConfigure a key for communication between a TACACS+ server and a client.S5000Syntaxtacacs-server key [encryption-type] keyTo delete a

• If 802.1X authorization is enabled and all information from the RADIUS server is valid, the port is placed in the specified VLAN after authenticatio

Related Commandsdot1x authentication (Configuration) – enables dot1x globally.dot1x auth-fail-vlanConfigure an authentication failure VLAN for users a

time(ms)0x42ada000 18821340 1882134 10000 5.00% 6.00% 4.97% 0 KP0x42bd2000 0 0 0 0.00% 0.00% 0.00% 0 debugagt0x4

dot1x auth-serverConfigure the authentication server to RADIUS.S5000Syntaxdot1x auth-server radiusDefaults noneCommand Modes CONFIGURATIONCommand Hist

Related Commandsdot1x auth-fail-vlan – configures a VLAN for authentication failures.dot1x reauthentication – enables periodic re-authentication.show

Defaults noneCommand Modes INTERFACECommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationThe authenticator performs authentication

Command Modes INTERFACECommand HistoryVersion 9.0(1.3) Introduced on the S5000.Related Commandsinterface range – configures a range of interfaces.dot1

Command HistoryVersion 9.0(1.3) Introduced on the S5000.dot1x supplicant-timeoutConfigure the amount of time after which exchanges with the supplicant

show dot1x interfaceDisplay the 802.1X information on an interface.S5000Syntaxshow dot1x interface interfaceParametersinterfaceEnter one of the follow

SSH Server and SCP CommandsFTOS supports secure shell (SSH) protocol versions 1.5 and 2.0. SSH is a protocol for secure remote login over an insecure

Related Commandsip ssh server – enables the SSH server.show crypto – displays the SSH host public keys.debug ip sshEnables collecting SSH debug inform

Usage InformationTo configure the switch as a SCP server, use the ip ssh server command.Related Commandsip ssh server – enables the SSH and SCP server

Command HistoryVersion 9.0(1.3) Introduced on the S5000.ip ssh hostbased-authenticationEnable hostbased-authentication for the SSHv2 server.S5000Synta

show processes ipc flow-controlDisplay the single window protocol queue (SWPQ) statistics.S5000Syntaxshow processes ipc flow-control [cp]Parameterscp

Parameters512-869Enter the key-size number for the server-generated RSA SSHv1 key. The range is 512 to 869. The default is 768.Defaults Key size 768Co

ParametersWORDEnter the file name for the host-based authentication.Defaults noneCommand Modes CONFIGURATIONCommand HistoryVersion 9.0(1.3) Introduced

ExampleFTOS#confFTOS(conf)# ip ssh rhostsfile flash://shostsFTOS(conf)#Usage InformationThis command specifies the rhost file to be used for host-base

ip ssh rsa-authentication (EXEC)Add keys for the RSA authentication.S5000Syntaxip ssh rsa-authentication {my-authorized-keys WORD}To delete the author

port port-number(OPTIONAL) Enter the keyword port followed by the port number of the listening port of the SSH server. The range is 1 to 65535. The de

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationThis command is useful if the remote SSH client implements Strict Host Key Ch

Related Commandsip ssh server – configures an SSH server.show ip ssh client-pub-keys – displays the client-public keys.show ip ssh client-pub-keysDisp

Command Modes EXECCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationThis command displays the contents of the flash:/ADMIN_DIR/

-m HMAC algorithmEnter one of the following HMAC algorithms to use. (For v2 clients only.):• hmac-sha1: Force ssh to use the hmac-sha1 HMAC algorithm.

clear ip dhcp snoopingClear the DHCP binding table.S5000Syntaxclear ip dhcp snooping bindingDefaults noneCommand Modes EXEC PrivilegeCommand HistoryVe

ExampleFTOS#show processes ipc flow-controlQ Statistics on CP Processor TxProcess RxProcess Cur High Time Retr Msg

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationWhen enabled, no learning takes place until you enable snooping on a VLAN. Af

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Related Commandsshow ip dhcp snooping – displays the contents of the DHCP binding table.ip dhc

ip dhcp snooping trustConfigure an interface as trusted.S5000Syntax[no] ip dhcp snooping trustDefaults UntrustedCommand Modes INTERFACECommand History

Usage InformationWhen enabled, the system begins creating entries in the binding table for the specified VLAN(s).NOTE: Learning only happens if there

1174

49Service Provider BridgingService provider bridging is composed of virtual local area network (VLAN) Stacking, Layer 2 Protocol Tunneling, and Provid

• For a 10-Gigabit Ethernet interface, enter the keyword tengigabitethernet followed by slot/port numbers. The port range is 0 to 63.• For a 40-Gigabi

Related Commandshow protocol-tunnel – displays tunneling information for all VLANs.protocol-tunnel destination-macOverwrite the BPDU destination MAC a

protocol-tunnel rate-limitEnable traffic rate limiting per box.S5000Syntaxprotocol-tunnel rate-limit rateTo reset the rate limit to the default, use t

1000 STP,PVST Te 5/7,Te 5/61001 LLDP,GVRP Te 5/7,Te 5/61002 MMRP,MVRP Te 5/7,Te 5/61003 LACP,DOT1X Te 5/7,Te 5/61004 OAM,PAUSE Te 5/7,T

ACL0 IPMGR0 0 0 0 0 0 0 10 10 RTM0 IPMGR0 0 0 0

1180

50sFlowFTOS supports sFlow commands on the S5000 switch.FTOS sFlow monitoring system includes an sFlow Agent and an sFlow Collector.• The sFlow Agent

sflow collectorConfigure a collector device to which sFlow datagrams are forwarded.S5000Syntaxsflow collector {ipv4-address | ipv6-address} agent-addr

sflow enable (Global)Enable sFlow globally.S5000Syntaxsflow enableTo disable sFlow, use the no sflow enable command.Defaults Disabled.Command Modes CO

sflow extended-switch enableEnable packing information on a switch only.S5000Syntaxsflow extended-switch enableTo disable packing information, use the

Related Commandssflow polling-interval (Interface) – sets the polling interval for an interface.sflow polling-interval (Interface)Set the sFlow pollin

Usage InformationSample-rate is the average number of packets skipped before the sample is taken. This command changes the global default sampling rat

Parametersinterface type slot/port(OPTIONAL) Enter the interface keyword followed by the interface type and slot/port or number information. Valid slo

show sflow stack-unitDisplay the sFlow information on a stack-unit.S5000Syntaxshow sflow stack—unit {unit-number}Parametersunit-number(OPTIONAL) Enter

51Simple Network Management Protocol (SNMP) and SyslogThis chapter contains commands to configure and monitor the simple network management protocol (

Parametersmanagement-unit Enter the keyword management-unit for CPU memory usage of the stack management unit.stack unit 0–11Enter the keyword stack u

show snmpDisplay the status of SNMP network elements.S5000Syntaxshow snmpCommand Modes• EXEC• EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced

ExampleFTOS#show snmp engineIDLocal SNMP engineID: 0000178B02000001E80214A8Remote Engine ID IP-addr Port80001F88043132333435 172.31.1.3

row status: activeRelated Commandssnmp-server group – configures an SNMP server group.show snmp userDisplay the information configured on each SNMP us

Example!----command run on host connected to switch:------!> snmpwalk -c public 10.10.10.130 .1.3.6.1.2.1.31 | grep -i alias | moreIF-MIB::ifAlias.

Defaults noneCommand Modes CONFIGURATIONCommand HistoryVersion 9.0(1.3) Introduced on theS5000.Usage InformationThe Example below configures a communi

snmp-server contactConfigure contact information for troubleshooting this SNMP node.S5000Syntaxsnmp-server contact textTo delete the SNMP server conta

notification-optionFor the envmon notification-type, enter one of the following optional parameters:• cam-utilization• fan• supply• temperatureFor the

• The first four octets are set to the private enterprise number.• The remaining eight octets are the MAC address of the chassis.remote ip-addressEnte

• v1v2creadg — maps to a community/security-name with ro permissions.• 1v2cwriteg — maps to a community/security-name rw permissions.1 | 2c | 3 (OPTIO

ExampleFTOS#confFTOS(conf)# snmp-server group harig 3 priv read rviewFTOS#Related Commandsshow snmp group – displays the group name, security model, v

clear ip bgp peer-group...

• In the output of this command, the memory size is equal to the size of the application processes plus the size of the system processes.Example (memo

noauth (OPTIONAL) Enter the keyword noauth to specify no authentication of a packet.priv (OPTIONAL) Enter the keyword priv to specify both authenticat

The snmp-server host command is used in conjunction with the snmp-server enable command. Use the snmp-server enable command to specify which SNMP noti

snmp-server packetsizeSet the largest SNMP packet size permitted. Wen the SNMP server is receiving a request or generating a reply, use the snmp-serve

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationFor this snmp-server trap-source command to be enabled, you must configure an

The default is 1.encrypted (OPTIONAL) Enter the keyword encrypted to specify the password appear in encrypted format (a series of digits, masking the

NOTE: The number of configurable users is limited to 16.ExampleFTOS# snmp-server user privuser v3group v3 encrypted auth md59fc53d9d908118b2804fe80e3b

Usage InformationThe oid-tree variable is a full sub-tree starting from 1.3.6 and can not specify the name of a sub-tree or a MIB. The following Examp

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Related Commandsshow logging – displays logging settings and system messages in the internal b

default logging monitorReturn to the default settings for messages logged to the terminal.S5000Syntaxdefault logging monitorDefaults level = 7 or debu

Parametersipv4-address | ipv6-addressEnter an IPv4 address (A.B.C.D) or IPv6 address (X:X:X:X::X) address.hostnameEnter the name of a host already con

0 7176192 f10appioserv 188416 0 0 139264!----------------output truncated ------------------!FTO

Related Commandsclear logging – clears the logging buffer.default logging buffered – returns the logging buffered parameters to the default setting.sh

• cron (Cron/at facility)• deamon (system deamons)• kern (kernel)• local0 (local use)• local1 (local use)• local2 (local use)• local3 (local use)• loc

logging historySpecify which messages are logged to the history table of the switch and the SNMP network management station (if configured).S5000Synta

Usage InformationWhen the number of messages reach the limit you set with the logging history size command, older messages are deleted as newer ones a

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationWhen you use the no logging on command, messages are logged only to the conso

Usage InformationSyslog messages contain the IP address of the interface used to egress the router. By configuring the logging source-interface comman

logging trapSpecify which messages are logged to the Syslog server based the message severity.S5000Syntaxlogging trap [level]To return to the default

Command Modes• EXEC• EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Example (partial)FTOS#show loggingSyslog logging: enabled

AUTHENTICATION_ENABLE_SUCCESS: Enable password authentication success on vty0 ( 10.11.51.14 )show logging driverlog stack-unitDisplay the driver log f

Related Commandslogging monitor – sets the logging parameters on the monitor/terminal.1219

PID Process ResSize Size Allocs Frees Max Current400 ndpm 5255168 630784 4848

1220

52Spanning Tree Protocol (STP)The commands in this chapter configure and monitor the IEEE 802.1d spanning tree protocol (STP) and are supported on the

Parametersstp-idEnter zero (0). The switch supports one spanning tree group with a group ID of 0.protocolEnter the keyword for the type of STP to debu

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Related Commandsprotocol spanning-tree – enters SPANNING TREE mode on the switch.disableDisabl

Related Commandsmax-age – changes the wait time before STP refreshes protocol configuration information.hello-time – changes the time interval between

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Related Commandsforward-delay – changes the wait time before STP transitions to the Forwarding

Command HistoryVersion 9.0(1.3) Introduced on the S5000.ExampleFTOS(config-stp)#show configprotocol spanning-tree 0 no disableFTOS(config-stp)#show s

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationYou must enable spanning tree group 0 prior to using this command.The followi

Port path cost 4, Port priority 8, Port Identifier 8.26 Designated root has priority 32768, address 0001.e800.0a56 Designated bridge has priority 327

Example (Guard)FTOS#show spanning-tree 0 guardInterfaceName Instance Sts Guard type--------- -------- --------- ----------Te 0/1 0 I

ifcb interface-type slot/portEnter the keyword ifcb followed by the interface type and slot/port or number information. The valid port numbers for eac

priority priorityEnter keyword priority followed by a number as the priority. The range is zero (0) to 15. The default is 8.Defaults cost = depends on

53Stacking CommandsAll commands in this chapter are specific to the Dell Networking operating software (FTOS) on the S5000 switch.The commands are alw

redundancy force-failover stack-unitForce the standby unit in the stack to become the management unit.S5000Syntaxredundancy force-failover stack-unitD

Changed interface state to down: Po 102Apr 8 10:22:44: %STKUNIT3-M:CP %IFMGR-1-DEL_PORT: Removed port: Te 4/0-3,16-47, Fo 4/48,52,60, Apr 8 10:22:44:

-- Stack-unit Failover Record --------------------------------------------------Failover Count: 0Last failover timestamp:

Interface The unit/port ID of the connected stack port on this unit.Connection The stack port to which this unit’s stack port is connected.Link Speed

0/11 4/15 1/4 0/4 1/5 0/5 1/6 0/6 1/7 0/7 1/8 2/4

stack-unit priorityConfigure the ability of an S5000 switch to become the management unit of a stack.S5000Syntaxstack-unit unit-number priority priori

• show system – displays the status of all stack members or a specific member.stack-unit renumberChange the stack-unit number of any stack unit or a s

stack-unit stack-groupConfigure the stack unit and stack group by specifying an ID when adding units to a stack to ensure the unit is assigned to the

V6RAD 0 0x00000433 0x0000c000 0x00000000 0x00000000 0Unidentified Client0 0x006e0002 0x00000000 0x00000000 0x00000000 0LLDP 0 0x007

booted: Upgrade the stack using the image with which the master switch booted up.flash: After the keyword flash:, enter the location of the source fil

FTOS#upgrade boot bootflash-image stack-unit all booted Current BootFlash information in the system:=============================================

upgrade system (stack unit)Upgrade the FTOS image on one or all stack units in an S5000 stack from the master switch.S5000Syntaxupgrade system {flash:

tftp: Copy from remote file system, IPv4 or IPv6, (tftp://hostip/filepath)FTOS#upgrade system ftp://username:[email protected]/FTOS-SH-9.0.1.3.bin!!!

1244

54Storm ControlThe Dell Networking operating software (FTOS) storm control feature allows you to limit or suppress traffic during a traffic storm (Bro

configuration. Valid slot numbers are 0-11. The valid port numbers for each interface type are listed below.• For a 10-Gigabit Ethernet interface, ent

Defaults noneCommand Modes• EXEC• EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on the S5000.ExampleFTOS#show storm-control multicast tengi

ExampleFTOS#show storm-control unknown-unicast tengigabitethernet 3/0Unknown-unicast storm control configurationInterface Direction Packets/Second--

Defaults noneCommand Modes INTERFACE (conf-if-interface-slot/port)Command HistoryVersion 9.0(1.3) Introduced on the S5000.storm-control multicast (Con

Module Type : S5000-MOD-12xFC8ETH10-U - 12-port FC SFP+ (SH)Num Ports : 12Hot Pluggable : no-- Module 1 --Status : online

Defaults noneCommand Modes INTERFACE (conf-if-interface-slot/port)Command HistoryVersion 9.0(1.3) Introduced on the S5000.storm-control unknown-unicas

Command Modes INTERFACE (conf-if-interface-slot/port)Command HistoryVersion 9.0(1.3) Introduced on the S5000.1251

1252

55System Time and DateThe commands in this chapter configure time values on the system, either using the Dell Networking operating software (FTOS), or

ExampleFTOS#calendar set 08:55:00 june 18 2006FTOS#Related Commandsclock read-calendar – sets the software clock based on the hardware clock.clock set

yearEnter a four-digit number as the year. The range is 1993 to 2035.Defaults Not configured.Command Modes EXEC PrivilegeCommand HistoryVersion 9.0(1.

end-dayEnter the number of the day. The range is 1 to 31. You can enter the name of a month to change the order of the display to time day month year.

• last: Enter this keyword to start daylight saving time in the last week of the month.start-dayEnter the name of the day that you want daylight savin

clock timezoneConfigure a timezone for the switch.S5000Syntaxclock timezone timezone-name offsetTo delete a timezone configuration, use the no clock t

debug ntpDisplay network time protocol (NTP) transactions and protocol messages for troubleshooting.S5000Syntaxdebug ntp {adjust | all | authenticatio

-- Unit 5 --Unit Type : Member UnitStatus : not present Required Type : - -- Unit 6 --Unit Type : Member UnitStatus

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationYou also must configure an authentication key for NTP traffic using the ntp a

ntp broadcast clientSet up the interface to receive NTP broadcasts from an NTP server.S5000Syntaxntp broadcast clientTo disable broadcast, use the no

• 224.0.1.1 is configured if the interface address is IPv4• ff05::101 is configured if the interface address is IPv6Defaults Not configured.Command Mo

ntp sourceSpecify an interface’s IP address to be included in the NTP packets.S5000Syntaxntp source interface-type slot/portTo delete the configuratio

Command Modes CONFIGURATIONCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationThe number parameter in the ntp trusted-key comman

Command HistoryVersion 9.0(1.3) Introduced on the S5000.ExampleFTOS#show calendar16:33:30 UTC Tue Jun 26 2001FTOS#Related Commandsshow clock – display

show ntp associationsDisplay the NTP master and peers.S5000Syntaxshow ntp associationsCommand Modes• EXEC• EXEC PrivilegeCommand HistoryVersion 9.0(1.

192.200.0.2 0.0.0.0 16 - 256 0 0.00 0.000 16000.0* master (synced), # master (unsynced), + selected, - candidateFTOS#Related Commandsshow

Related Commandsshow ntp associations – displays information on the NTP master and peer configurations.1268

56Uplink Failure Detection (UFD)Uplink failure detection (UFD) provides detection of the loss of upstream connectivity and, if used with NIC teaming,

---------------------------------------------------------- 0 0 up AC up 0 1 up AC up-- Fan Status --Unit Bay Tr

• uplink-state-group – creates an uplink-state group and enables the tracking of upstream links.debug uplink-state-groupEnable debug messages for even

Related Commandsuplink-state-group – creates an uplink-state group and enables the tracking of upstream links.downstreamAssign a port or port-channel

• uplink-state-group – creates an uplink-state group and enables the tracking of upstream links.downstream auto-recoverEnable auto-recovery so that UF

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationA user-configurable number of downstream interfaces in an uplink-state group

Parametersgroup-idDisplays the current configuration of all uplink-state groups or a specified group. The valid group-id values are 1 to 16.Defaults n

Command HistoryVersion 9.0(1.3) Introduced on the S5000.ExampleFTOS# show uplink-state-groupUplink State Group: 1 Status: Enabled, UpUplink State Grou

uplink-state-groupCreate an uplink-state group and enable the tracking of upstream links on a switch/ router.S5000Syntaxuplink-state-group group-idTo

Parametersinterface-type slot/portEnter the interface type and slot/port or number information. Valid slot numbers are 0-11. The valid port numbers fo

1278

57VLAN StackingWith the virtual local area network (VLAN)-stacking feature (also called stackable VLANs and QinQ), you can “stack” VLANs into one tunn

-- Power Supplies --Unit Bay Status Type FanStatus---------------------------------------------------------------------------- 1 0

Command HistoryVersion 9.0(1.3) Introduced on the S5000.dei honorHonor the incoming DEI value by mapping it to an FTOS drop precedence. You may enter

green | red | yellowChoose a color:• Green: High priority packets that are the least preferred to be dropped.• Yellow: Lower priority packets that are

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationYou must enable the stackable VLAN (using the vlan-stack compatible command)

Related Commandsdei honorshow interfaces dei-markDisplay the dei mark configuration.S5000Syntaxshow interfaces dei-mark [interfacetype slot/port | sta

stack-unit stack-groupConfigure stacking group specified by ID.S5000Syntax[no] stack-unit unit-number stack-group stack-group-numberParametersunit-num

vlan-stack compatibleEnable the stackable VLAN feature on a VLAN.S5000Syntaxvlan-stack compatibleTo disable the Stackable VLAN feature on a VLAN, use

Parametersc-tag-dot1p valueEnter the keyword c-tag-dot1p followed by the customer dot1p value that will be mapped to a service provider do1p value. Th

vlan-stack trunk – specifies a Layer 2 port or port channel as a trunk port to the Stackable VLAN network.vlan-stack trunkSpecify a Layer 2 port or po

no ip address vlan-stack compatible member GigabitEthernet 0/42 shutdownFTOS(conf-if-vl-100-stack)#interface vlan 20FTOS(conf-if-vl-20)#tagged gi

58Virtual Link Trunking (VLT)Virtual link trunking (VLT) is supported on the Dell Networking S5000 switch.Virtual link trunking allows physical links

Command Modes EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationWithout the page or stack-unit option, the comman

clear vlt statisticsClear the statistics on VLT operations.S5000Syntaxclear vlt statisticsCommand Modes EXECCommand HistoryVersion 9.0(1.3) Introduced

lacp ungroup member-independentEnable BMP boot for the device connected to the LACP LAG or by a VLT peer device.S5000Syntaxlacp ungroup member-indepen

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationUse the peer-down-vlan parameter to configure the VLAN from where the VLT pee

Usage InformationThe version shown in the show vlt brief output command displays the VLT version number which is different from the FTOS version numbe

show vlt counterDisplays the counter information.S5000Syntaxshow vlt counter [arp| igmp-snoop | interface | mac]Parametersarp Enter the keyword arp to

show vlt roleDisplays the VLT peer status, role of the local VLT switch, VLT system MAC address and system priority, and the MAC address and priority

ExampleFTOS_VLTpeer1#show vlt statisticsVLT Statistics----------------HeartBeat Messages Sent: 930HeartBeat Messages Received: 909ICL Hello's

Command HistoryVersion 9.0(1.3) Introduced on the S5000.ExampleFTOS_VLTpeer1#show vlt statistics igmp-snoopVLT Igmp-Snooping Statistics---------------

unit-idExplicitly configure the default unit ID of a VLT peer switch.S5000Syntaxunit-id [0 | 1]Parameters0 | 1 Configure the default unit ID of a VLT

Usage InformationThe VLT domain ID must be the same between the two VLT devices. If the domain ID is not the same, a syslog message is generated and V

11 Bare Metal Provisioning (BMP)...373reload type...

filename (max 20 chars) )FTOS#FTOS#show tech-support stack-unit 1 | save flash://ShowSaveStart saving show command report ...FTOS#FTOS#dirDirector

1300

59Virtual Router Redundancy Protocol (VRRP)The virtual router redundancy protocol (VRRP) is supported by the Dell Networking operating software (FTOS)

authentication-typeEnable authentication of VRRP data exchanges.S5000Syntaxauthentication-type simple [encryption-type] passwordTo delete an authentic

debug vrrpAllows you to enable debugging of VRRP.S5000Syntaxdebug vrrp [vrrp-id] | [interface-type slot/port] | [interface] | {all | packets | state |

descriptionConfigure a short text string describing the VRRP group.S5000Syntaxdescription textTo delete a VRRP group description, use the no descripti

hold-timeSpecify a delay (in seconds) before a switch becomes the MASTER virtual router. By delaying the initialization of the VRRP MASTER, the new sw

prioritySpecify a VRRP priority value for the VRRP group. This value is used by the VRRP protocol during the MASTER election process.S5000Syntaxpriori

show vrrpView the VRRP groups that are active. If no VRRP groups are active, the FTOS returns No Active VRRP group.S5000Syntaxshow vrrp [vrrp-id] [int

• Y = Preempt is enabled.• N = Preempt is not enabled.State Displays the operational state of the interface by using one of the following:• NA/IF (the

• AdvInt displays the Advertise Interval in seconds.Adv rcvd:... This line displays counters for the following:• Adv rcvd displays the number of VRRP

Build Path: /sites/sjc/work/build/buildSpaces/build12/E9-0-1/SW/SRCFTOS uptime is 5 day(s), 17 hour(s), 19 minute(s)System image file is "lnaidu-

trackMonitor an interface and lower the priority value of the VRRP group on that interface if it is disabled.S5000Syntaxtrack interface-type slot/port

To delete one or more virtual IP addresses, use the no virtual-address ip-address1 [... ip-address12] command.Parametersip-address1Enter an IP address

• When the system reloads, VRRP waits 600 seconds (10 minutes) to bring up VRRP on all interfaces that are up and configured for VRRP.• When an interf

vrrp-groupAssign a VRRP ID to an interface. You can configure up to 12 VRRP groups per interface.S5000Syntaxvrrp-group vrrp-idParametersvrrp-idEnter a

clear counters vrrp ipv6Clear the counters recorded for IPv6 VRRP groups.S5000Syntaxclear counters vrrp ipv6 [vrid ]Parametersvrid(OPTIONAL) Enter the

database Enter the keyword database to display changes related to group, prefix, and interface entries in the VRRP table.packets Enter the keyword pac

Command Modes• EXEC• EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationThe following describes output from the sh

• Interface type and slot/port or object number, description, and time since the last change in the state of the tracked object.• Cost to be subtracte

1318

60Debugging and DiagnosticsThe basic debugging and diagnostic commands are supported by the Dell Networking operating software (FTOS) on the S5000 swi

telnetConnect through Telnet to a server. The Telnet client and server in FTOS support IPv4 and IPv6 connections.You can establish a Telnet session di

perform essential path verifications. In addition, they verify the identification registers of the components on the board.level1 Enter the keyword Le

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationYou cannot enter this command on a Master or Standby unit.The system reboots

Buffer Tuning CommandsThe following sections detail the buffer tuning commands.WARNING: Altering the buffer allocations is a sensitive operation. Do n

show buffer-profile stack-unitDisplay the buffer profile that is applied to a stack-unit.S5000Syntaxshow buffer-profile stack—unit unit-numberParamete

counters Enter the keyword counters to clear the counters on the selected stack member.unit port-pipe countersEnter the keyword unit along with a port

Command Modes EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Related Commandsshow hardware stack-unit – displays the data plane

Command HistoryVersion 9.0(1.3) Introduced on the S5000.show hardware layer3Display Layer 3 ACL or QoS data for the selected stack member and stack me

Parametersstack-unit unit-number {command-option}Enter the keywords stack-unit followed by the unit number. The range is 0 to 11. Then enter one of th

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Example (Data-Plane)FTOS#show hardware stack-unit 0 cpu data-plane statisticsbc pci driver sta

Example (Drops Unit)FTOS#show hard stack-unit 0 drops unit 0User Port Ingress IngMac Total Mmu EgMac Egress Port Number Drops Drops Drop

terminal lengthConfigure the number of lines displayed on the terminal screen.S5000Syntaxterminal length screen-lengthParametersscreen-lengthEnter a n

xe24 !ena 10G FD SW No Forward RX Tag F XGMII 1550xe25 !ena 10G FD SW No Forward RX Tag F XGMII 1550xe26 up 10G FD

FTOS#Example (Buffer-Info)FTOS#show hardware stack-unit 0 buffer unit 0 port 1 buffer-info----- Buffer Stats for Unit 0 Port 1 ----- Maximum Shared L

EntryId Description #HITS-----------------------------------------------------------2048 STP BPDU Redirects 02047 LL

00000000, 0x00 action={act=Drop, param0=0(0x00), param1=0(0x00)}, action={act=CosQCpuNew, param0=7(0x07), param1=0(0x00)}, action={act=Cop

1334

61ICMP Message TypesThis chapter lists and describes the possible ICMP message type resulting from a ping. The first three columns list the possible s

Symbol Type Code Description Query Error1 redirect for host . 2 redirect for type-of-service and network . 3 redirect for type-of-service and host . 8

62SNMP TrapsThis chapter lists the traps sent by the Dell Networking operating software (FTOS). Each trap is listed by the fields Message ID, Trap Typ

Message ID Trap Type Trap Option%STKUNIT1-M:CP %SNMP-4-RMON_HC_RISING_THRESHOLD: RMON high-capacity rising threshold alarm from SNMP OID <oid>RM

Message ID Trap Type Trap Option%STKUNIT4-M:CP %CHMGR-1-PSU_FAN_STATUS: Fan 0 in PSU 1 of Unit 4 is upFANTRAY_OR_PSU_DOWN ENVMON FAN%STKUNIT4-M:CP %C

• For a Management interface, enter the keyword managementethernet followed by slot/port numbers. The port is 0.• For a Port Channel interface, enter

Message ID Trap Type Trap OptionVRRP_PROTOCOL_ERROR PROTO NONEVRRP_PROTOERR: VRRP protocol error on %SBGP4_ESTABLISHED PROTO NONE%TRAP-5-PEER_ESTABLIS

Message ID Trap Type Trap Option%DIFFSERV-5-PFC_TRAP_TYPE_OPER_STATE_CHANGE: PFC Oper state changed to rxConfigSrc for port %sPFC_TRAP_TYPE_PEER_STATE

---------------------------------------------------------------Tracing the route to 10.11.197.31, 30 hops max, 40 byte packets------------------------

writeCopy the current configuration to either the startup-configuration file or the terminal.S5000Syntaxwrite {memory | terminal}Parametersmemory Ente

5802.1ag802.1ag issupported on the S5000 switch.ccm disableDisable continuity check message (CCM).S5000Syntaxccm disableEnter no ccm disable to enable

clear ethernet cfm traceroute-cacheDelete all link trace cache entries.S5000Syntaxclear ethernet cfm traceroute-cacheDefaults noneCommand Modes ECFM D

domainCreate the maintenance domain.S5000Syntaxdomain name md-level numberParametersnameName the maintenance domain.md-level numberEnter a maintenance

show qos dcb-map...

the internal forwarding path is effectively the switch fabric and forwarding engine.• Down-MEP: monitors the forwarding path external to another bridg

mep cross-checkEnable cross-checking for a MEP.S5000Syntaxmep cross-check mep-idParametersmep-idEnter the MEP ID. The range is 1 to 8191.Defaults none

Parametersstart-delay numberEnter a start-delay in seconds. The range is 3 to 100 seconds.Defaults 3 ccmsCommand Modes ETHERNET CFMCommand HistoryVers

serviceCreate maintenance association.S5000Syntaxservice name vlan vlan-idParametersnameEnter a maintenance association name.vlan vlan-idEnter the key

MA-Name VLAN CC-Int X-CHK Status Your_MA 100 10s enabledshow ethernet cfm maintenance-points lo

expired Enter the keyword expired to view MEP entries that have expired due to connectivity failure.waiting Enter the keyword waiting to display MEP e

Parametersinterface typeEnter the keyword interface and then enter the interface type.slot/portEnter the slot and port numbers for the port.Defaults n

ExampleFTOS# show ethernet cfm statisticsDomain Name: CustomerDomain Level: 7MA Name: My_MAMPID: 300 CCMs: Transmitted: 1503 RcvdSeqErrors

traceroute cache hold-timeSet the amount of time a trace result is cached.S5000Syntaxtraceroute cache hold-time minutesParametersminutesEnter a hold-t

Parametersdomain name | levelEnter the keyword domain and then enter the domain name or level.ma-name ma-nameEnter the keyword ma-name and then enter

16 Equal Cost Multi-Path Overview (ECMP)... 433ecmp-group...

150

6802.1XAn authentication server must authenticate a client connected to an 802.1X switch port. Until the authentication, only extensible authenticatio

debug dot1xDisplay 802.1X debugging information.S5000Syntaxdebug dot1x [all | auth-pae-fsm | backend-fsm | eapol-pdu] [interface interface]Parametersa

Usage InformationIf the host responds to 802.1X with an incorrect login/password, the login fails. The switch attempts to authenticate again until the

• Enable MAC authentication bypass on the port (the dot1x mac-auth-bypass command).In MAB-only authentication mode, a port authenticates using the hos

Related Commandsdot1x authentication (Configuration)dot1x guest-vlanConfigure a guest VLAN for limited access users or for devices that are not 802.1X

dot1x host-modeEnable single-host or multi-host authentication.S5000Syntaxdot1x host-mode {single-host | multi-host | multi-auth}Parameterssingle-host

Related Commandsdot1x auth-type mab-onlydot1x max-eap-reqConfigure the maximum number of times an extensive authentication protocol (EAP) request is t

dot1x port-controlEnable port control on an interface.S5000Syntaxdot1x port-control {force-authorized | auto | force-unauthorized}Parametersforce-auth

dot1x reauthenticationEnable periodic reauthentication of the client.S5000Syntaxdot1x reauthentication [interval seconds]To disable periodic reauthent

show config...

dot1x server-timeoutConfigure the amount of time after which exchanges with the server time-out.S5000Syntaxdot1x server-timeout secondsTo return to th

Defaults 30 secondsCommand Modes INTERFACECommand HistoryVersion 9.0(1.3) Introduced on the S5000.dot1x tx-periodConfigure the intervals at which EAPO

mac-address(Optional) MAC address of an 802.1X-authenticated supplicant.Defaults noneCommand Modes• EXEC• EXEC privilegeCommand HistoryVersion 9.0(1.3

show dot1x interfaceDisplay the 802.1X configuration of an interface.S5000Syntaxshow dot1x interface type slot/port [mac-address mac-address]Parameter

Auth PAE State: InitializeBackend State: InitializeFTOS#Example (mac-address)FTOS#show dot1x interface te 2/21 mac-address 00:00:01:0

7Boot User ModeAll commands in this chapter are available in Boot User mode on the S5000.To access this mode, press any key when the following line ap

Command Modes BOOT USERCommand HistoryVersion 9.0(1.3) Introduced on the S5000.boot messages enableEnable the NetBSD boot log. By default, the NetBSD

boot write net config retriesSet the number of retries used for a network boot configuration failure.S5000Syntaxboot write net config retries numberCo

enableSet the access privilege level.S5000Syntaxenable {user | admin}Command Modes BOOT USERCommand HistoryVersion 9.0(1.3) Introduced on the S5000.he

set the management port ip address and mask interface management port config 1000m set the management port at 1000m interface management port

clear dampening...

ignore startup configIgnore the system startup configuration.S5000Syntaxignore startup configCommand Modes BOOT USERCommand HistoryVersion 9.0(1.3) In

full-duplex Set the management port to transmit in full-duplex mode.half-duplex Set the management port to transmit in half-duplex mode.Default The ma

reloadReload the S5000 switch.S5000SyntaxreloadCommand Modes BOOT USERCommand HistoryVersion 9.0(1.3) Introduced on the S5000.show boot blcDisplay the

Next ROM bootstrap set to occur from Bootflash partition A.Last ROM bootstrap occurred from Bootflash partition B.show bootflashDisplay information ab

ExampleBOOT_USER # show bootvarPRIMARY OPERATING SYSTEM BOOT PARAMETERS:========================================boot device : f

Command HistoryVersion 9.0(1.3) Introduced on the S5000.ExampleBOOT_USER # show interface management ethernetManagement ethernet IP address: 10.11.210

176

8Access Control Lists (ACL)Access control lists (ACLs) are supported on the S5000 switch.FTOS supports the following types of ACL, IP prefix list, and

Defaults Not enabled.Command Modes• CONFIGURATION-STANDARD-ACCESS-LIST• CONFIGURATION-EXTENDED-ACCESS-LIST• CONFIGURATION-MAC ACCESS LIST-STANDARD• CO

!ip access-list standard testremark 5 Permit traffic from XYZ Inc.seq 5 permit 1.1.1.0/24remark 10 Deny rest of the trafficseq 10 Deny anyFTOS(config-

show config...

access-classApply a standard ACL to a terminal line.S5000Syntaxaccess-class access-list-nameParametersaccess-list-nameEnter the name of a configured S

in Enter the keyword in to apply the ACL to incoming traffic.implicit-permit (OPTIONAL) Enter the keyword implicit-permit to change the default action

• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed by slot/port numbers. The ports are 48, 52, 56, and 60.• For a Port Channe

Usage InformationField Description“Extended IP...” Displays the name of the IP ACL.“seq 5...” Displays the filter. If the keywords count or byte were

any Enter the keyword any to specify that all routes are subject to the filter.host ip-addressEnter the keyword host and then enter the IP address to

permit – configures a permit filter.ip access-list standardCreate a standard IP access list (IP ACL) to filter based on IP address.S5000Syntaxip acces

ParameterssourceEnter the IP address in dotted decimal format of the network from which the packet was sent.mask(OPTIONAL) Enter a network mask in /pr

NOTE: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with l

resequence prefix-list ipv4Re-assign sequence numbers to entries of an existing prefix list.S5000Syntaxresequence prefix-list ipv4 {prefix-list-name S

sourceEnter a IP address in dotted decimal format of the network from which the packet was received.mask(OPTIONAL) Enter a network mask in /prefix for

ip max-frag-count...

• If sequence-number is not configured, the rules with the same order value are ordered according to their configuration order.• If sequence-number is

sourceEnter the IP address of the network or host from which the packets were sent.maskEnter a network mask in /prefix format (/x) or A.B.C.D. The mas

NOTE: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with l

operator (OPTIONAL) Enter one of the following logical operand:• eq = equal to• neq = not equal to• gt = greater than• lt = less than• range = inclusi

Usage InformationThe order option is relevant in the context of the Policy QoS feature only. For more information, refer to the Quality of Service cha

[operator port [port]] [count [byte]] [order] [monitor] [fragments]To remove this filter, you have two choices:• Use the no seq sequence-number comman

monitor (OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating th

Related Commandsdeny – assigns a filter to deny IP traffic.deny tcp – assigns a filter to deny TCP traffic.ip access-list extendedName (or select) an

• Use the no deny {ip | ip-protocol-number} {source mask | any | host ip-address} {destination mask | any | host ip-address} command.Parametersip Ente

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationThe order option is relevant in the context of the Policy QoS feature only. F

Notes, Cautions, and WarningsNOTE: A NOTE indicates important information that helps you make better use of your computer.CAUTION: A CAUTION indicates

resequence access-list...

host ip-addressEnter the keyword host and then enter the IP address to specify a host IP address.bitEnter a flag or combination of bits:• ack: acknowl

monitor (OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating th

Total Ports: 1024Related Commandsip access-list extended – creates an extended ACL.permit – assigns a permit filter for IP packets.permit udp – assign

port portEnter the application layer port number. Enter two port numbers if you are using the range logical operand. The range is 0 to 65535.destinati

ExampleAn ACL rule with a TCP port range of 4000–8000 uses eight entries in the CAM.Rule# Data Mask From To #Covered1 0000111110

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationWhen all sequence numbers have been exhausted, this feature permits re-assign

seqAssign a sequence number to a deny or permit filter in an extended IP access list while creating the filter.S5000Syntaxseq sequence-number {deny |

port port(OPTIONAL) Enter the application layer port number. Enter two port numbers if you are using the range logical operand. The range is 0 to 6553

• The seq sequence-number command is applicable only in an ACL group.• The order option works across ACL groups that have been applied on an interface

mac access-groupApply a MAC ACL to traffic entering or exiting an interface.S5000Syntaxmac access-group access-list-name {in [vlan vlan-range]}Paramet

aggregate-address...

• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed by slot/port numbers. The ports are 48, 52, 56, and 60.• For a Port Channe

ExampleFTOS#show mac accounting access-list mac-ext interface po 1Extended mac access-list mac-ext on TenGigabitEthernet 0/11 seq 5 permit host 00:00

mac-source-addressEnter a MAC address in nn:nn:nn:nn:nn:nn format.mac-source-address-mask(OPTIONAL) Specify which bits in the MAC address must match.

Defaults Not configured.Command Modes CONFIGURATIONCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationFTOS supports one ingress

byte (OPTIONAL) Enter the keyword byte to count bytes processed by the filter.monitor (OPTIONAL) Enter the keyword monitor when the rule is describing

mac-source-address-mask(OPTIONAL) Specify which bits in the MAC address must match. If no mask is specified, a mask of 00:00:00:00:00:00 is applied (i

denyConfigure a filter to drop packets that match the filter criteria.S5000Syntaxdeny {any | host mac-address | mac-source-address mac-source-address-

monitor (OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating th

FTOS(config-ext-macl)#seq 30 permit any any ev2 eq 86dd count bytesFTOS(config-ext-macl)#seq 40 permit any any count bytesFTOS(config-ext-macl)#exitFT

mac-destination-addressEnter the destination MAC address and mask in nn:nn:nn:nn:nn:nn format.mac-destination-address-maskSpecify which bits in the MA

neighbor advertisement-interval...

seqConfigure a filter with a specific sequence number.S5000Syntaxseq sequence-number {deny | permit} {any | host mac-address | mac-source-address mac-

NOTE: For more information, refer to the Flow-based Monitoring section in the Port Monitoring chapter of the FTOS Configuration Guide.Defaults Not con

Related Commandsip prefix-list — configures a prefix list.denyConfigure a filter to drop packets meeting the criteria specified.S5000Syntaxdeny ip-pre

Command Modes CONFIGURATIONCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationPrefix lists redistribute OSPF and RIP routes meet

seqAssign a sequence number to a deny or permit filter in a prefix list while configuring the filter.S5000Syntaxseq sequence-number {deny | permit} {a

show configDisplay the current PREFIX-LIST configurations.S5000Syntaxshow configCommand Modes PREFIX-LISTCommand HistoryVersion 9.0(1.3) Introduced on

seq 10 permit 0.0.0.0/0 le 32 (hit count: 132)FTOS#show ip prefix-list summaryDisplay a summary of the configured prefix lists.S5000Syntaxshow ip pr

continueConfigure a route-map to go to a route-map entry with a higher sequence number.S5000Syntaxcontinue [sequence-number]Parameterssequence-number(

descriptionAdd a description to this route map.S5000Syntaxdescription {description}ParametersdescriptionEnter a description to identify the route map

match communityConfigure a filter to match routes that have a certain COMMUNITY attribute in their BGP path.S5000Syntaxmatch community community-list-

show ip bgp ipv6 unicast inconsistent-as...7

Defaults Not configured.Command Modes ROUTE-MAPCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Related Commandsmatch ip address – redistribute

match ip next-hopConfigure a filter to match based on the next-hop IP addresses specified in an IP access list or IP prefix list.S5000Syntaxmatch ip n

Related Commandsmatch interface – redistributes routes that match the next-hop interface.match ip address – redistributes routes that match an IP addr

Parametersexternal [type-1| type-2]Enter the keyword external and then enter either type-1 or type-2 to match only on OSPF Type 1 routes or OSPF Type

match ip route-source – redistributes routes that match routes advertised by other routers.match metric – redistributes routes that match a specific m

set as-pathConfigure a filter to modify the AS path for border gateway protocol (BGP) routes.S5000Syntaxset as-path prepend as-number [... as-number]P

set tag – specify the tag assigned to redistributed routes.set comm-list deleteConfigure a filter to remove the specified community list from the BGP

Parameterscommunity-numberEnter the community number in AA:NN format where AA is the AS number (2 bytes) and NN is a value specific to that autonomous

Parametersbackbone Enter the keyword backbone to redistribute matched routes to the OSPF backbone area (area 0.0.0.0).level-1 Enter the keyword level-

Related Commandsbgp default local-preference – changes the default LOCAL_PREF attribute for all routes.set metricConfigure a filter to assign a new me

show ip bgp ipv6 unicast inconsistent-as...7

external Enter the keyword external to assign the IS-IS external metric.type-1 Enter the keyword type-1 to assign the OSPF Type 1 metric.type-2 Enter

set originConfigure a filter to manipulate the BGP ORIGIN attribute.S5000Syntaxset origin {igp | egp | incomplete}Parametersegp Enter the keyword egp

set weightConfigure a filter to add a non-RFC compliant attribute to the BGP route to assist with route selection.S5000Syntaxset weight weightParamete

show route-mapDisplay the current route map configurations.S5000Syntaxshow route-map [map-name]Parametersmap-name(OPTIONAL) Enter the name of a config

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationUse the match as-path or neighbor filter-list commands to apply the AS-PATH A

ip community-listEnter COMMUNITY-LIST mode and create an IP community-list for BGP.S5000Syntaxip community-list comm-list-nameTo delete a community-li

deny 703:112 deny 704:112 deny 705:112 deny 14551:112 deny 701:666 deny 702:666 deny 703:666 deny 704:666 deny 705:666 deny 14551:666FTOS#246

9Bidirectional Forwarding Detection (BFD)Bidirectional forwarding detection (BFD) is a detection protocol that provides fast forwarding path failure d

ROUTER ISISCommand HistoryVersion 9.0(1.3) Introduced BFD for BGP on the S5000.Usage InformationAll neighbors inherit the timer values configured with

bfd enable (Interface)Enable BFD on an interface.S5000Syntaxbfd enableDefaults BFD is enabled on all interfaces when you enable BFD from CONFIGURATION

graceful-restart t2...

peer-group-nameEnter the name of the peer group that you want to explicitly enable for BFD sessions.Defaults noneCommand Modes ROUTER BGPCommand Histo

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationWhen you explicitly disable a BGP neighbor for a BFD session with the neighbo

Defaults noneCommand Modes• EXEC• EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on the S5000.ExampleFTOS#show bfd neighbors* - Active se

10Border Gateway Protocol IPv4 (BGPv4)BGP is an external gateway protocol that transmits interdomain routing information within and between autonomous

Command HistoryVersion 9.0(1.3) Introduced on the S5000.aggregate-addressSummarize a range of prefixes to minimize the number of entries in the routin

In route maps used in the suppress-map parameter, routes meeting the deny clause are not suppress; in other words, they are allowed. The opposite is a

bgp always-compare-medAllows you to enable comparison of the MULTI_EXIT_DISC (MED) attributes in the paths from different external ASs.S5000Syntaxbgp

bgp asnotation asdotFTOS(conf)#router bgp 1FTOS(conf-router_bgp)#bgp asnotation asdot+FTOS(conf-router_bgp)#exFTOS(conf)#do show run | grep bgproute

To return to the default BGP routing process, use the no bgp bestpath as-path multipath-relax command.Defaults DisabledCommand Modes ROUTER BGPCommand

Defaults DisabledCommand Modes ROUTER BGPCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationThe MED is a 4-byte unsigned integer

show isis traffic...

Usage InformationRoute reflection to clients is not necessary if all client routers are fully meshed.Related Commandsbgp cluster-id – assigns an ID to

bgp confederation identifierConfigure an identifier for a BGP confederation.S5000Syntaxbgp confederation identifier as-numberTo delete a BGP confedera

Defaults Not configured.Command Modes ROUTER BGPCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationAll the routers in the Confed

route-map map-name(OPTIONAL) Enter the keyword route-map followed by the name of a configured route map.Only match commands in the configured route ma

bgp enforce-first-asDisable (or enable) enforce-first-as check for updates received from EBGP peers.S5000Syntaxbgp enforce-first-asTo turn off the def

bgp four-octet-as-supportEnable 4-byte support for the BGP process.S5000Syntaxbgp four-octet-as-supportTo disable fast external fallover, use the no b

Defaults as aboveCommand Modes ROUTER BGPCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationThis feature is advertised to BGP ne

Defaults Disabled (that is, paths/routes for the same destination but from different ASs do not have their MEDs compared).Command Modes ROUTER BGPComm

bgp regex-eval-optz-disableDisables the Regex Performance engine that optimizes complex regular expression with BGP.S5000Syntaxbgp regex-eval-optz-dis

bgp router-idAssign a user-given ID to a BGP router.S5000Syntaxbgp router-id ip-addressTo delete a user-assigned IP address, use the no bgp router-id

fefd...

Related Commandsclear ip bgp – activates inbound policies without resetting the BGP TCP session.capture bgp-pdu max-buffer-sizeSet the size of the BGP

Related Commandscapture bgp-pdu max-buffer-size – specifies a size for the capture buffer.show capture bgp-pdu neighbor – displays BGP packet capture

Command Modes EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Related Commandsbgp recursive-bgp-next-hop – disables next-hop res

regexp regular-expression(OPTIONAL) Enter the keyword regexp followed by regular expressions. Use one or a combination of the following:• . = (period)

Command HistoryVersion 9.0(1.3) Introduced on the S5000.debug ip bgpDisplay all information on BGP, including BGP events, keepalives, notifications, a

debug ip bgp dampeningView information on routes being dampened.S5000Syntaxdebug ip bgp ipv4 multicast dampeningTo disable debugging, use the no debug

Usage InformationEnter the no debug ip bgp command to remove all configured debug commands for BGP.debug ip bgp keepalivesDisplay information about BG

Parametersip-address(OPTIONAL) Enter the IP address of the neighbor in dotted decimal format.peer-group peer-group-name(OPTIONAL) Enter the keyword pe

debug ip bgp soft-reconfigurationEnable soft-reconfiguration debug.S5000Syntaxdebug ip bgp {ip-address | peer-group-name} soft-reconfigurationTo disab

peer-group-name(OPTIONAL) Enter the name of the peer group to disable or enable all routers within the peer group.Command Modes EXEC PrivilegeCommand

ip msdp log-adjacency-changes...

ParametersdescriptionEnter a description to identify the BGP protocol (80 characters maximum).Defaults noneCommand Modes ROUTER BGPCommand HistoryVers

max-pathsConfigure the maximum number of parallel routes (multipath support) BGP supports.S5000Syntaxmax-paths {ebgp | ibgp} numberTo return to the de

Command Modes CONFIGURATION-ROUTER-BGP-ADDRESS FAMILYCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationBy default, when you cre

neighbor advertisement-intervalSet the advertisement interval between BGP neighbors or within a BGP peer group.S5000Syntaxneighbor {ip-address | peer-

Defaults noneCommand Modes ROUTER BGPCommand HistoryVersion 9.0(1.3) Introduced on the S5000.neighbor allowas-inSet the number of times an AS number c

Parametersip-address(OPTIONAL) Enter the IP address of the neighbor in dotted decimal format.peer-group-nameEnter the name of the peer group to set th

neighbor distribute-listDistribute BGP information via an established prefix list.S5000Syntaxneighbor {ip-address | peer-group-name} distribute-list p

Parametersip-addressEnter the IP address of the neighbor in dotted decimal format.peer-group-nameEnter the name of the peer group.ttl (OPTIONAL) Enter

neighbor filter-listConfigure a BGP filter based on the AS-PATH attribute.S5000Syntaxneighbor {ip-address | peer-group-name} filter-list as-path-name

Parametersip-addressEnter the IP address of the neighbor in dotted decimal format.peer-group-nameEnter the name of the peer group to apply the filter

35 Neighbor Discovery Protocol (NDP)... 885clear ipv6 neighbors...

Defaults Not configured.Command Modes ROUTER BGPCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Related Commandsbgp four-octet-as-support – en

Related Commandsshow ip bgp summary – displays the current BGP configuration.neighbor next-hop-selfAllows you to configure the router as the next hop

You cannot use spaces in the password.Defaults Not configured.Command Modes ROUTER BGPCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage In

Usage InformationYou can assign up to 256 peers to one peer group.When you add a peer to a peer group, it inherits all the peer group’s configured par

Usage InformationWhen you create a peer group, it is disabled (Shut mode).Related Commandsneighbor peer-group (assigning peers) – assigns routers to a

neighbor remote-asCreate and specify the remote peer to the BGP neighbor.S5000Syntaxneighbor {ip-address | peer-group-name} remote-as numberTo delete

peer-group-nameEnter the name of the peer group to remove the private AS numbers.Defaults Disabled (that is, private AS number are not removed).Comman

Usage InformationWhen you apply a route map to outbound routes, only routes that match at least one section of the route map are permitted.If you iden

neighbor send-communitySend a COMMUNITY attribute to a BGP neighbor or peer group. A COMMUNITY attribute indicates that all routes with that attribute

Usage InformationPeers that are enabled within a peer group are disabled when their peer group is disabled.The neighbor shutdown command terminates al

Contents1 About this Guide... 45O

distribute-list out...

neighbor subnetEnable passive peering so that the members of the peer group are dynamic.S5000Syntaxneighbor peer-group-name subnet subnet-number maskT

Defaults• keepalive = 60 seconds• holdtime = 180 secondsCommand Modes ROUTER BGPCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage Informat

neighbor weightAssign a weight to the neighbor connection, which is used to determine the best path.S5000Syntaxneighbor {ip-address | peer-group-name}

The mask appears in command outputs in dotted decimal format (A.B.C.D).route-map map-name(OPTIONAL) Enter the keyword route-map followed by the name o

Defaults Not configured.Command Modes ROUTER BGPCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationAlthough FTOS does not genera

Usage InformationWith FTOS version 8.3.1.0 and later, you can use the redistribute command to advertise the IGP cost as the MED on redistributed route

show capture bgp-pdu neighborDisplay BGP packet capture information for an IPv4 address on the system.S5000Syntaxshow capture bgp-pdu neighbor ipv4-ad

show configView the current ROUTER BGP configuration.S5000Syntaxshow configCommand Modes ROUTER BGPCommand HistoryVersion 9.0(1.3) Introduced on the S

• EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationWhen you enable the bgp non-deterministic-med command, the sh

Related Commandsshow ip bgp community – views the BGP communities.neighbor maximum-prefix – controls the number of network prefixes received.show ip b

show ip ospf neighbor...

* I 10.10.10.1/32 192.68.16.1 0 100 0 i* I 192.68.16.1 0 100 0 i*>I 192.68.16

Command Modes• EXEC• EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationTo view the total number of COMMUNITY attr

*>i 6.5.0.0/19 205.171.0.16 100 0 209 7170 1455 i*>i 6.8.0.0/20 205.171.0.16 100 0 209 7170 1455 i*>i 6.9.0.0/2

Metric Displays the BGP route’s metric, if assigned.LocPrf Displays the BGP LOCAL_PREF attribute for the route.Weight Displays the route’s weight.Path

bestPath source: I - internal, a - aggregate, c - confed-external, r - redistributed, n - networkOrigin codes: i - IGP, e - EGP, ? - incomplete Netw

KeepExps 0RxOpens 0 : RxKeeps 0 : RxUpds 0 : RxNotifs 0 : TxUpds 0 : TxNotifs 0BadEvts 0 : SynFails 0 : RxeCodeP 0x41a1b6b8 : RxHdrCodeP 0x41a1b6d4 :

show ip bgp extcommunity-listView information on all routes with Extended Community attributes.S5000Syntaxshow ip bgp [ipv4 unicast] extcommunity-list

Usage InformationThe following describes the show ip bgp filter-list hello command shown in the Example below.Field DescriptionPath source codesLists

show ip bgp flap-statisticsView flap statistics on BGP routes.S5000Syntaxshow ip bgp [ipv4 unicast] flap-statistics [ip-address [mask]] [filter-list a

Field DescriptionNetwork Displays the network ID to which the route is flapping.From Displays the IP address of the neighbor advertising the flapping

show ip pim bsr-router...

Metric Displays the BGP route’s metric, if assigned.LocPrf Displays the BGP LOCAL_PREF attribute for the route.Weight Displays the route’s weight.Path

ip-address(OPTIONAL) Enter the IP address of the neighbor to view only BGP information exchanged with that neighbor.advertised-routes (OPTIONAL) Enter

• last read is the time (hours:minutes:seconds) the router read a message from its neighbor• hold time is the number of seconds configured between mes

ROUTE_REFRESH(2) 4_OCTECT_AS(65) ADD_PATH (69) CISCO_ROUTE_REFRESH(128)ExampleFTOS#show ip bgp neighborsBGP neighbor is 100.10.10.2, remo

*>I 223.94.249.0/24 223.100.4.249 0 100 0 ?*>I 223.94.250.0/24 223.100.4.250 0 100 0 ?*>I 223.100.0.0/16 2

Command Modes• EXEC• EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationThe following describes the show ip bgp ne

NOTE: You must enter an escape sequence (CTRL+v) prior to entering the ? regular expression.• [ ] = (brackets) a range of single-character patterns.•

show ip bgp paths as-pathView all unique AS-PATHs in the BGP database.S5000Syntaxshow ip bgp paths as-pathCommand Modes• EXEC• EXEC PrivilegeCommand H

show ip bgp paths communityView all unique COMMUNITY numbers in the BGP database.S5000Syntaxshow ip bgp paths communityCommand Modes• EXEC• EXEC Privi

13646:1154 13646:1164 13646:1184 13646:1194 13646:1204 13646:1214 13646:122413646:1234 13646:1244 13646:1254 13646:1264 13646:30000x1d65b2ac 117

show monitor session...

For address familyDisplays IPv4 Unicast as the address family.BGP neighbor Displays the name of the BGP neighbor.Number of peers Displays the number o

Related Commandsneighbor peer-group (assigning peers) – assigns a peer to a peer-group.neighbor peer-group (creating group) – creates a peer group.sho

Next Hop Displays the next hop address of the BGP router. If 0.0.0.0 is listed in this column, then non-BGP routes exist in the router’s routing table

show ip bgp summaryAllows you to view the status of all BGP connections.S5000Syntaxshow ip bgp [ipv4 unicast] summaryCommand Modes• EXEC• EXEC Privile

OutQ Displays the number of messages waiting to be sent to that neighbor. If a number appears in parentheses, the number represents the number of mess

show running-config bgpUse this feature to display the current BGP configuration.S5000Syntaxshow running-config bgpDefaults noneCommand Modes EXEC Pri

address family ipv4 multicast (MBGP)This command changes the context to subsequent address family identifier (SAFI).S5000Syntaxaddress family ipv4 mul

attribute-map map-name(OPTIONAL) Enter the keywords attribute-map followed by the name of a configured route map to modify attributes of the aggregate

route-map map-name(OPTIONAL) Enter the keyword route-map followed by the name of a configured route map.Only match commands in the configured route ma

clear ip bgp dampeningClear information on route dampening.S5000Syntaxclear ip bgp dampening ipv4 multicast network network-maskParametersdampening En

policy-map-output...

• ( ) = (parenthesis) groups a series of pattern elements to a single element.• { } = (braces) minimum and the maximum match count.• ^ = (caret) the b

Command Modes EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on the S5000.debug ip bgp updatesView information about BGP updates.S5000Syntax

Defaults• external-distance = 20• internal-distance = 200• local-distance = 200Command Modes ROUTER BGPCommand HistoryVersion 9.0(1.3) Introduced on t

Related Commandsaddress family ipv4 multicast (MBGP) – changes the context to SAFI.neighbor advertisement-intervalSet the advertisement interval betwe

Parametersip-address(OPTIONAL) Enter the IP address of the neighbor in dotted decimal format.peer-group-nameEnter the name of the peer group to set th

Related Commandsip as-path access-list – configures the IP AS-Path ACL.neighbor filter-list – assigns a AS-PATH list to a neighbor or peer group.neigh

neighbor maximum-prefixControl the number of network prefixes received.S5000Syntaxneighbor {ip-address | peer-group-name} maximum-prefix maximum [thre

Defaults Disabled.Command Modes ROUTER BGP Address Family (conf-router_bgp_af)Command HistoryVersion 9.0(1.3) Introduced on the S5000.neighbor remove-

If the Route map is not configured, the default is deny (to drop all routes).in Enter the keyword in to filter inbound routes.out Enter the keyword ou

networkSpecify the networks for the BGP process and enter them in the BGP routing table.S5000Syntaxnetwork ip-address mask [route-map map-name]To remo

ip poison-reverse...

redistributeRedistribute routes into BGP.S5000Syntaxredistribute [connected | static] [route-map map-name]To disable redistribution, use the no redist

redistribute ospfRedistribute OSPF routes into BGP.S5000Syntaxredistribute ospf process-id [[match external {1 | 2}] [match internal]] [route-map map-

network-mask(OPTIONAL) Enter the network mask (in slash prefix format) of the BGP network address.longer-prefixes (OPTIONAL) Enter the keywords longer

show ip bgp cluster-listView BGP neighbors in a specific cluster.S5000Syntaxshow ip bgp ipv4 multicast cluster-list [cluster-id]Parameterscluster-id(O

Command Modes• EXEC• EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationTo view the total number of COMMUNITY attr

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationThe following describes the show ip bgp damp command shown in the Example bel

show ip bgp flap-statisticsView flap statistics on BGP routes.S5000Syntaxshow ip bgp ipv4 multicast flap-statistics [ip-address [mask]] [filter-list a

show ip bgp inconsistent-asView routes with inconsistent originating AS numbers; that is, prefixes that are announced from the same neighbor AS but wi

Usage InformationThe following describes the show ip bgp ipv4 multicast neighbors command shown in the Example below.BGP neighbor Displays the BGP nei

Local host: Displays the peering address of the local router and the TCP port number.Foreign host: Displays the peering address of the neighbor and th

protocol spanning-tree rstp...

Notification History 'Connection Reset' Sent : 3 Recv: 0Related Commandsshow ip bgp – views the current BGP routing table.show ip bgp p

Command Modes• EXEC• EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationThe following describes the sho ip bgp ipv

peer is transitioning between states and clearing the routes received, the phrase (Purging) may appear in this column.If the neighbor is disabled, the

ASN:NNNNEnter the 2-octet AS specific extended community number in the format ASN:NNNN (2-byte AS number:4-byte community value).IPADDR:NNEnter the IP

descriptionUse this feature to designate a meaningful description to the extended community.S5000Syntaxdescription {line}To remove the description, us

match extcommunityUse this feature to match an extended community in the Route Map mode.S5000Syntaxmatch extcommunity {extended community list name}To

IPADDR:NNEnter the IP address specific extended community in the format IPADDR:NN (4-byte IPv4 Unicast Address:2-byte community value).Defaults Not co

set extcommunity rtUse this feature to set Route Origin community attributes in Route Map.S5000Syntaxset extcommunity rt {as4 ASN4:NN [non-trans] | AS

set extcommunity sooUse this feature to set extended community site-of-origin in Route Map.S5000Syntaxset extcommunity soo {as4 ASN4:NN | ASN:NNNN | I

show ip bgp ipv4 extcommunity-listUse this feature to display the IPv4 routes matching the extended community list name.S5000Syntaxshow ip bgp [ipv4 [

radius-server retransmit...

FTOS#show ip bgp paths extcommunityUse this feature to display all BGP paths having extended community attributes.S5000Syntaxshow ip bgp paths extcomm

ParameterswordEnter the name of the extended community list you want to view.Command Modes• EXEC• EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introd

372

11Bare Metal Provisioning (BMP)Bare metal provisioning (BMP) version 2.0 is supported on the S5000 switch.In a data center network, BMP automates the

Command Modes EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced for the S5000.Usage InformationFor an initial setup, the config-download parame

You can also use the show bootvar command to display the current Reload mode for BMP 2.0 with the path of the FTOS image file retrieved from a DHCP se

376

12Content Addressable Memory (CAM)Content addressable memory (CAM) commands are supported on the S5000 switch.CAM Profile CommandsThe CAM profiling fe

• L3 QoS (ipv4qos): 1• L2 QoS (l2qos): 1• L2PT (l2pt): 0• MAC ACLs (ipmacacl): 0• ECFMACL (ecfmacl): 0• VMAN QoS (vman-qos): 0• VMAN Dual QoS (vman-du

Parametersdefault Reset the egress CAM ACL entries to the default settings.l2acl number ipv4acl number ipv6acl numberAllocate space to each CAM region

clear ip dhcp snooping...

test cam-usageVerify that enough CAM space is available for the ingress IPv4 ACLs used in a QoS policy.S5000Syntaxtest cam-usage service-policy input

102| 0|Allowed 0| 1| IPv4Flow| 102| 0|AllowedFTOS#!FTOS#test cam-usage service-policy

382

13Control Plane Policing (CoPP)The CoPP commands are supported on the S5000 switch.control-plane-cpuqosEnter control-plane mode and configure the swit

Related Commandsqos-policy-input – creates a QoS input policy map.class-map – creates a QoS class map.policy-map-input – creates an input policy map.s

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationThis command applies the service-policy based on the type of protocol defined

VRRP any any _ Q7 CP _FTOS#show ipv6 protocol-queue-mappingDisplay the queue mapping for each configured IPv6

LLDP any 0x88cc Q7 CP _GVRP 01:80:c2:00:00:21 any Q7 CP _STP 01:80:c2:00:00:00

388

14Data Center Bridging (DCB)Data center bridging (DCB) refers to a set of IEEE Ethernet enhancements that provide data centers with a single, robust,

snmp-server group...

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationTo disable TLV transmission, use the no form of the command; for example, no

clear ets countersClear all ETS TLV counters on an interface.S5000Syntaxclear ets counters interface-type slot/portParametersinterface-type slot/portE

stack-unit all stack-ports allEnter the keyword stack-unit followed by all stack-ports all to clear the counters on all interfaces.Defaults noneComman

Command Modes CONFIGURATIONINTERFACECommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationA DCB map is a template used to configure

dcbx port-roleConfigure the DCBx port role the interface uses to exchange DCB information.S5000Syntaxdcbx port-role {auto-downstream | auto-upstream |

Parametersauto | cee | cin | ieee-v2.5Enter the DCBx version type used on the interface, where:• auto: configures the port to operate using the DCBx v

Defaults noneCommand Modes EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on the S5000.fcoe priority-bitsConfigure the FCoE priority adverti

Usage InformationThis command is available at the global level only.pfc mode onRe-enable or disable PFC operation in a DCB map applied to an Ethernet

Defaults No lossless queues are configured.Command Modes INTERFACECommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationThe configu

Usage InformationUse the pfc priority command to configure PFC operation on an Ethernet interface for specified CoS traffic without using a DCB map in

4 Control and Monitoring... 81asf-mode...

53 Stacking Commands... 1231redundancy disable

share latency and loss requirements. All 802.1p priorities mapped to the same queue must be in the same priority group.Repeat the priority-group bandw

dot1p6_group-numdot1p7_group-numDefaults NoneCommand Modes DCB MAPCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationPFC and ETS

ExampleFTOS# show dcb DCB Status : EnabledFTOS#show qos dcb-mapDisplay the DCB parameters configured in a specified DCB map.S5000Syntaxshow qos d

PG:0 TSA:ETS BW:50 PFC:OFFPriorities:0 1 2 4 5 6 7PG:1 TSA:ETS BW:50 PFC:ONPriorities:3Related Commandsdcb-map — creates a DCB map to configure PF

Field DescriptionDCBx Operational Status Operational status (enabled or disabled) is used to elect a configuration source and internally propogate a D

Field DescriptionPeer TLV Statistics: Acknowledgment NumberAcknowledgement number transmitted in Control TLVs received from the peer device.PFC TLV St

Local DCBx Compatibility mode is CEE Local DCBx Configured mode is CEE Peer Operating version is CEE Local DCBx TLVs Transmitted: ErPfiLocal DCBx S

Command Modes EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationTo clear ETS TLV counters, use the clear ets coun

Field DescriptionState Machine Type Type of state machine used for DCBx exchanges of ETS parameters: Feature — for legacy DCBx versions; Asymmetric —

7 0% ETSPriority# Bandwidth TSA0 13% ETS1 13% ETS2

ntp trusted-key...

0 13% ETS1 13% ETS2 13% ETS3 13% ETS4

Table 3. Output Fields for the show interface pfc CommandField DescriptionInterface Interface type with stack-unit number and port number.Admin mode i

Field DescriptionPFC Link Delay Link delay (in quanta) used to pause specified priority traffic.Application Priority TLV: FCOE TLV Tx StatusStatus of

-------------------------------------- FCOE TLV Tx Status is disabled ISCSI TLV Tx Status is disabled Local FCOE PriorityMap is 0x8 Local ISCSI

Command Modes EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Example (Summary)FTOS#show interfaces te 0/0 pfc statisticsInterfa

5 - -6 - -7 - -8 - -Stack unit

Admin is enabled, Priority list is 4-5 Local is enabled, Priority list is 4-5 Link Delay 45556 pause quantum 0 Pause Tx pkts, 0 Pause Rx pkts416

15Dynamic Host Configuration Protocol (DHCP)Dynamic host configuration protocol (DHCP) is an application layer protocol that dynamically assigns IP ad

Usage InformationEntering <CR> after the clear ip dhcp binding command clears all the IPs from the binding table.debug ip dhcp serverDisplay FTO

disableDisable the DHCP server.S5000SyntaxdisableDHCP Server is disabled by default. Enable the system to be a DHCP server using the no disable comman

show vlt backup-link...

Defaults noneCommand Modes DHCP <POOL>Command HistoryVersion 9.0(1.3) Introduced on the S5000.excluded-addressPrevent the server from leasing an

hostFor manual (rather than automatic) configurations, assign a host to a single-address pool.S5000Syntaxhost addressParametersaddress/maskEnter the h

netbios-name-serverSpecify the NetBIOS Windows Internet Naming Service (WINS) name servers, in order of preference, that are available to Microsoft Dy

networkSpecify the range of addresses in an address pool.S5000Syntaxnetwork network /prefix-lengthParametersnetwork/ prefix-lengthSpecify a range of a

Command Modes EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on the S5000.show ip dhcp configurationDisplay the DHCP configuration.S5000Synt

show ip dhcp serverDisplay the DHCP server statistics.S5000Syntaxshow ip dhcp server statisticsDefaults noneCommand Modes EXEC PrivilegeCommand Histor

arp inspection-trustSpecify a port as trusted so that ARP frames are not validated against the binding table.S5000Syntaxarp inspection-trustDefaults D

Parametersremote-id Configure the system to enable the remote-id string in option-82.trust-downstream Configure the system to trust Option 82 when it

vlan-id vlan-idEnter the keywords vlan-id followed by the VLAN to which the host belongs. The range is 2 to 4094.ip ip-addressEnter the keyword ip fol

ip dhcp snooping database renewRenew the binding table.S5000Syntaxip dhcp snooping database renewDefaults noneCommand Modes• EXEC• EXEC PrivilegeComma

Hardware Commands...

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationYou must allocate at least one FP block to ipmacacl before you can enable IP+

Command Modes CONFIGURATIONCommand HistoryVersion 9.0(1.3) Introduced on the S5000.show ip dhcp snoopingDisplay the contents of the DHCP binding table

432

16Equal Cost Multi-Path Overview (ECMP)ECMP is supported on the S5000 switch.ecmp-groupProvides a mechanism to monitor traffic distribution on an ECMP

Usage InformationUsing CONFIGURATION mode, create an ECMP group ID. You can then assign interfaces to the ECMP group using CONFIGURATION ECMP-GROUP mo

hash-algorithm ecmpChange the hash algorithm used to distribute traffic flows across an ECMP (equal-cost multipath routing) group.S5000Syntaxhash-algo

ip ecmp-groupEnable and specify the maximum number of ecmp that the L3 CAM hold for a route, By default, when maximum paths are not configured, the CA

link-bundle-monitor enableProvides a mechanism to enable monitoring of traffic distribution on an ECMP link bundle.S5000Syntaxlink-bundle-monitor enab

438

17FCoE TransitUse FTOS commands to enable the FCoE Transit feature and configure FIP snooping on the S5000 switch on Ethernet interfaces. When you ena

44

clear fip-snooping statisticsClears the statistics on the FIP packets snooped on all VLANs, a specified VLAN, or a specified port interface.S5000Synta

Command HistoryVersion 9.0(1.3) Introduced on the S5000.feature fip-snoopingEnable the S5000 for FCoE transit and FIP snooping.S5000Syntaxfeature fip-

fip-snooping fc-mapConfigure the FC-MAP value FIP snooping uses on all VLANs.S5000Syntaxfip-snooping fc-map fc-map-valueTo remove the configured FM-MA

number of sessions are active with an ENode, additional sessions are not allowed as long as the total number is greater than the newly configured limi

---- ------- --------100 TRUE 0X0EFC00show fip-snooping enodeDisplay information on the ENodes in FIP-snooped sessions, including the ENod

show fip-snooping fcfDisplay information on the FCFs in FIP-snooped sessions, including the FCF interface and MAC address, FCF interface, VLAN ID, FC-

show fip-snooping sessionsDisplay information on FIP-snooped sessions on all VLANs or a specified VLAN, including the ENode interface and MAC address,

show fip-snooping statisticsDisplay statistics on the FIP packets snooped on all interfaces, including VLANs, physical ports, and port channels.S5000S

Field DescriptionNumber of VN Port Keep Alives Number of FIP-snooping VN port keep-alive frames received on the interface.Number of Multicast Discover

Number of VN Port Session Timeouts :0Number of Session failures due to Hardware Config :0FTOS(conf)#FTOS# show fip-snooping statistics int tengiga

1About this GuideThis book provides information about the Dell Networking operating system (FTOS) command line interface (CLI).This book also includes

show fip-snooping systemDisplay information on the status of FIP snooping on the switch (enabled or disabled), including the number of FCoE VLANs, FCF

18Force10 Resilient Ring Protocol (FRRP)Force10 Resilient Ring Protocol (FRRP) is supported on the S5000 switch.FRRP is a proprietary protocol for tha

• hello Rx and Tx counters• Topology change Rx and Tx counters• The number of state change countersExampleFTOS#clear frrpClear frrp statistics counter

member-vlanSpecify the member VLAN identification numbers.S5000Syntaxmember-vlan {vlan-range}To return to the default, use the no member-vlan [vlan-ra

protocol frrpEnter the Resilient Ring Protocol and designate a ring identification.S5000Syntaxprotocol frrp {ring-id}To exit the ring protocol, use th

Usage InformationExecuting this command without the optional ring-id command clears the statistics counters on all the available rings. FTOS requires

456

19GARP VLAN Registration (GVRP)The basic GVRP commands are supported by FTOS on S5000 switch.The generic attribute registration protocol (GARP) mechan

simply rely on GVRP for VLAN updates. But if the local bridge needs to know only how to reach a given VLAN, then GVRP provides all necessary informati

Parametersconfig Enter the keyword config to enable debugging on the GVRP configuration.event Enter the keyword event to enable debugging on the JOIN/

x|y Keywords and parameters separated by a bar require you to choose one option.x||y Keywords and parameters separated by a double bar allows you to c

garp timersSet the intervals (in milliseconds) for sending GARP messages.S5000Syntaxgarp timers {join | leave | leave-all}To return to the previous se

gvrp enableEnable GVRP on physical interfaces and LAGs.S5000Syntaxgvrp enableTo disable GVRP on the interface, use the no gvrp enable command.Defaults

GVRP. If the VLAN is removed from the port that sends GVRP advertisements to this device, the port stops being a member of the VLAN.Use the forbidden

show garp timersDisplay the GARP timer settings for sending GARP messages.S5000Syntaxshow garp timersDefaults noneCommand Modes• EXEC• EXEC PrivilegeC

Defaults noneCommand Modes• EXEC• EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationIf no ports are GVRP particip

summary Enter the keyword summary to display just a summary of the GVRP statistics.Defaults noneCommand Modes• EXEC• EXEC PrivilegeCommand HistoryVers

466

20High Availability (HA)In FTOS, High Availability (HA) is a collection of features that synchronize switch configuration to minimize recovery time in

redundancy force-failoverForce the stand by stack-unit to become the primary stack-unit.S5000Syntaxredundancy force-failover {stack-unit}Parameterssta

Parameterslacp Enter the keyword lacp to make LACP hitless.xstp Enter the keyword xstp to invoke hitless STP (all STP modes — MSTP, PVST+, RSTP, and S

2CLI BasicsThis chapter describes the command line interface (CLI) structure and command modes. The Dell Networking operating system (FTOS) commands a

Command HistoryVersion 9.0(1.3) Introduced on the S5000.show redundancyDisplay the current redundancy configuration.S5000Syntaxshow redundancyCommand

Field Description•Stack-unit Failover RecordDisplays the following information:• Stack-unit failover counter (to reset the counter, use the redundancy

Stack Unit Config: succeeded Jul 13 2012 21:28:53Start-up Config: succeeded Jul 13 2012 21:28:53Runtime Event Log: succeeded Jul 13 2012 21:28:53

21Internet Group Management Protocol (IGMP)The IGMP commands are supported on the S5000 switch.This chapter contains the following sections:• IGMP Com

• For a 10-Gigabit Ethernet interface, enter the keyword tengigabitethernet followed by slot/port numbers. The port range is 0 to 63.• For a 40-Gigabi

Defaults Disabled.Command Modes EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationIGMP commands accept only non-V

Command HistoryVersion 9.0(1.3) Introduced on the S5000.ip igmp immediate-leaveEnable IGMP immediate leave.S5000Syntaxip igmp immediate-leave [group-l

Defaults 1000 millisecondsCommand Modes INTERFACECommand HistoryVersion 9.0(1.3) Introduced on the S5000.ip igmp querier-timeoutChange the interval th

Command HistoryVersion 9.0(1.3) Introduced on the S5000.ip igmp query-max-resp-timeSet the maximum query response time advertised in general queries.S

Usage InformationMapping applies to both v1 and v2 IGMP joins; any updates to the ACL are reflected in the IGMP groups. You may not use extended acces

When another user enters CONFIGURATION mode, FTOS sends a message similar to the following:% Warning: User "admin" on line vty2 "172.16

Related Commandsshow ip igmp groups – displays IGMP group information.ip igmp versionManually set the version of the router to IGMPv2 or IGMPv3.S5000S

• For a Port Channel interface, enter the keywords port-channel followed by a number from 1 to 128.• For a VLAN interface, enter the keyword vlan foll

Example (VLT)NOTE: The asterisk (*) after the port channel number (Po 2) highlighted in the Example below indicates the port channel is VLT, that the

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationIGMP commands accept only non-VLAN interfaces—specifying VLAN does not yield

IGMP Snooping CommandsFTOS supports IGMP Snooping version 2 and 3 on the S5000 switch.Important Points to Remember for IGMP Snooping• FTOS supports ve

Defaults Disabled.Command Modes• CONFIGURATION• INTERFACE VLANCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationYou must enter

ip igmp snooping floodThis command controls the flooding behavior of unregistered multicast data packets.S5000Syntaxip igmp snooping floodDefaults Ena

ip igmp snooping mrouterStatically configure a VLAN member port as a multicast router interface.S5000Syntaxip igmp snooping mrouter interface type slo

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationThis command enables the IGMP switch to send General Queries periodically. Th

22InterfacesThe commands in this chapter are supported in FTOS on the S5000 switch.This chapter contains the following sections:• Basic Interface Comm

extcommunity-list Add a Extended community list entryftp FTP configuration commandshelper-address

• For the management interface on the stack-unit, enter the keyword ManagementEthernet followed by slot number (0-1) and port number zero (0).• For a

Defaults Without an interface specified, the command clears all interface dampening counters.Command Modes EXEC PrivilegeCommand HistoryVersion 9.0(1.

Example (Unsuccessful)FTOS#show interfaces tengigabitethernet 0/26 | grep "XFP type"Pluggable media present, XFP type is 10GBASE-CX4FTOS(con

Defaults Disabled.Command Modes INTERFACE (conf-if-)Command HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationWith each flap, FTOS pena

• Entering a text string after the description command overwrites any previous text string that you previously configured as the description.• The shu

ecmp-groupProvides a mechanism to monitor traffic distribution on a link aggregation group (LAG) bundle. A system log or simple network management pro

tx on Enter the keywords tx on to send control frames from this port to the connected device when a higher rate of traffic is received. This is the de

off on on off on on off on

• For a 10-Gigabit Ethernet interface, enter the keyword tengigabitethernet followed by slot/port numbers. The port range is 0 to 63.• For a 40-Gigabi

interface loopbackConfigure a Loopback interface.S5000Syntaxinterface loopback numberTo remove a loopback interface, use the no interface loopback num

show environment...

Key Combination ActionCNTL-K Deletes all the characters from the cursor to the end of the command line.CNTL-L Re-enters the previous command.CNTL-N Re

If your system has more than one stack-unit, use the show redundancy command to display which stack-unit is the primary unit.ExampleFTOS(conf)#interfa

interface rangeThis command permits configuration of a range of interfaces to which subsequent commands are applied (bulk configuration). Using the in

• Bulk configuration is created if at least one interface is valid.• Non-existing interfaces are excluded from the bulk configuration with a warning m

Example (Multiple Range)This example shows how to use commas to add VLAN and port-channel interfaces to the range.FTOS(config-if)# interface range gig

You can enter up to six comma-separated ranges. Separate each interface type and port range with a space, comma, and space; for example: interface ran

Example (Single Range)This example shows the macro named test that was defined earlier.FTOS(config)#interface range macro testFTOS(config-if-range-te-

keepaliveSend keepalive packets periodically to keep an interface alive when it is not transmitting data.S5000Syntaxkeepalive [seconds]To stop sending

• For a Management interface, enter the keyword managementethernet followed by slot/port numbers. The port is 0.• For a Port Channel interface, enter

Input bytes: 9069828 43 Bps 86 Output bytes: 606915800 43 Bps 86 Input packets: 54001 0 pps 1 Output pack

mtuSet the link maximum transmission unit (MTU) (frame size) for an Ethernet interface.S5000Syntaxmtu valueTo return to the default MTU value, use the

The grep command option has an ignore-case suboption that makes the search case-insensitive. For example, the commands:show run | grep Ethernetreturns

Layer 2 Overhead Link MTU and IP MTU DeltaTagged Packet with VLAN-Stack Header26 bytesportmode hybridSet a physical port or port-channel to accept bot

FTOS(conf-if-vl-20)#tagged gi 7/0FTOS(conf-if-vl-20)#ExampleFTOS(conf-if-vl-20)#do show interfaces switchportName: TenGigabitEthernet 7/0802.1QTagged:

Usage InformationThe output of the show interfaces command displays the configured rate interval, along with the collected traffic data.Related Comman

no shutdown!interface TenGigabitEthernet 0/2 no ip address portmode hybrid switchport dcb-policy input pfc3 no shutdownshow interfacesDisplay informa

Usage InformationUse the show interfaces command for details on a specific interface. Use the show interfaces stack-unit command for details on all in

Queuing strategy...States the packet queuing strategy. FIFO means first in first out.Input Statistics: Displays all the input statistics including:• N

Example (single interface)FTOS#show interfaces tengigabitethernet 0/2TenGigabitEthernet 0/2 is up, line protocol is upHardware is DellEth, address is

Output 0 errors, 0 invalid protocolTime since last interface status change: 3d21h47mRelated Commandsshow interfaces configured – displays any inte

0 CRC, 0 overrun, 0 discardedOutput Statistics: 355 packets, 40162 bytes, 0 underruns 0 64-byte pkts, 355 over 64-byte pkts, 0 over 127-byte pkts 0 o

Command HistoryVersion 9.0(1.3) Introduced on the S5000.ExampleFTOS#show interfaces dampeningInterface Supp Flaps Penalty Half-Life Reuse Suppress M

EXEC Privilege ModeThe enable command accesses EXEC Privilege mode. If an administrator has configured an “Enable” password, you are prompted to enter

Command Modes• EXEC• EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationThe following describes the show interface

ManagementEthernet 8/0 NO up not presentManagementEthernet 9/0 NO up not presentManagementEthernet 10/0 NO up not pres

2 64-byte pkts, 29705 over 64-byte pkts, 0 over 127-byte pkts 0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pkts 29707 Multicasts, 0 B

• For a Fibre Channel interface, enter the keyword FibreChannel followed by slot/port numbers. The port range is 0 to 47.• For a Loopback interface, e

Related Commandsshow interfaces – displays information on a specific physical interface or virtual interface.show interfaces switchportDisplay only vi

ExampleFTOS#show interfaces switchportName: TenGigabitEthernet 13/0802.1QTagged: HybridVlan membership:Vlan 2, Vlan 20Native VlanId: 20Name: TenGiga

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationThe following describes the show interfaces transceiver command output shown

Field DescriptionTemp Low Warning threshold Factory-defined setting. Value can differ between SFP and SFP+.Voltage Low Warning threshold Factory-defin

Field DescriptionRS state This is the reserved digital state of the pin AS(1) per SFF-8079 and RS(1) per SFF-8431.Tx Disable state If the admin status

Field DescriptionTx Bias Low Warning Flag This can be either true or false, depending on the present Tx bias current value displayed above.Tx Power Lo

Prompt Interface TypeFTOS(conf-if-po-0)#port-channel number (range 1–128)FTOS(conf-if-vl-0)#vlan followed by VLAN id number (range 1–4094)FTOS(conf-if

SFP 1 RX Power Low Warning threshold = 0.016mW===================================SFP 1 Temperature = 39.930CSFP 1 Voltage

Related Commandsinterface – configures a physical interface on the switch.show ip interface – displays Layer 3 information about the interfaces.show i

individual interfaces within the port channel. To enable a port channel, you must enter no shutdown on the port channel interface and at least one int

stack-unit portmodeSplit a single 40G port into 4-10G ports on the S5000.S5000Syntaxstack-unit unit-number port number portmode quadParametersstack-un

Parametersbackup interface Use this option to configure a redundant Layer 2 link without using Spanning Tree. The keywords backup interface configures

channel-memberAdd an interface to the Port Channel, while in INTERFACE PORTCHANNEL mode.S5000Syntaxchannel-member interface-type slot/portTo remove an

shutdown – disables/enables the port channel.groupGroup two LAGs in a supergroup (“fate-sharing group” or “failover group”).S5000Syntaxgroup group_num

Defaults Not configured.Command Modes CONFIGURATIONCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationPort Channel interfaces ar

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationIf you use this command to configure the minimum number of links in a LAG tha

Command HistoryVersion 9.0(1.3) Introduced on the S5000.ExampleFTOS(conf-if-po-1)#show config!interface Port-channel 1 no ip address shutdownFTOS(co

1. Verify that you are logged in to CONFIGURATION mode.2. Use the ip access-list standard or ip access-list extended command. Include a name for the A

LineSpeed Displays the interface’s line speed. For a port channel interface, it is the line speed of the interfaces in the port channel.Members in thi

Input 01.50Mbits/sec, 2433 packets/sec Output 00.02Mbits/sec,4 packets/secTime since last interface status change: 00:22:34FTOS#Usage InformationTh

show port-channel-flowDisplay an egress port in a given port-channel flow.S5000Syntaxshow port-channel-flow outgoing-port-channel number incoming-inte

The show port-channel-flow command returns the egress port identification in a given port-channel if a valid flow is entered. A mismatched flow error

• The existing show interface command has been modified to display the configured broadcast address.debug ip udp-helperEnable UDP debug and display th

Defaults Not configured.Command Modes INTERFACE (config-if)Command HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationWhen a UDP broadca

show ip udp-helperDisplay the configured UDP helper(s) on all interfaces.S5000Syntaxshow ip udp-helperDefaults noneCommand Modes EXECCommand HistoryVe

• 3 records FC informational messages.• 4 records all messages generated for FC operation on the switch.Default: 4.Defaults Trace level 4: All FC erro

Related Commandsinterface fibrechannel — configures a Fibre Channel interface on the switch.show interfaces fibrechannel — displays the configuration

Usage InformationUse the fcoe-map command to bind an FC port to an FC-FCOE fabric.When a Fibre Channel port operates in N mode, the principal switch i

REDIRECT-LIST ModeYou must use REDIRECT-LIST mode to configure a Redirect list on the S5000. For more information, refer to the S5000 FTOS Command Lin

Parametersslot/portFor slot, enter the stack-unit number assigned to the switch. The range of slot (stack-unit) numbers is from 0 to 11. The range of

show fc-trace-levelDisplay the currently configured FC trace level.S5000Syntaxshow fc-trace-levelParameters NoneCommand Modes• EXEC• EXEC PrivilegeCom

Command Modes• EXEC• EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationUse the show interfaces fibrechannel comma

Field DescriptionPort type, Max BB credits The FC port type is fixed at N (end node port). The maximum number of buffer-to-buffer (BB) credits availab

Field DescriptionDecodeErrors Number of decode errors.FBusy Number of Fabric port Busy (F_BSY) frames received.FReject Number of Fabric port Reject (F

Field DescriptionRate Information:Input bytes/sec, frames/sec, % of line-rateIncoming rate of FC traffic in bytes per second, frames per second, and p

show fc switchDisplay the switch configuration for Fibre Channel capability.S5000Syntaxshow fc switchParameters NoneCommand Modes• EXEC• EXEC Privileg

8G Port speed is 8 Gbps.Defaults An FC port autosenses the speed of a peer FC port.Command Modes INTERFACE FIBRE_CHANNELCommand HistoryVersion 9.0(1.3

558

23IPv4 RoutingThe basic IPv4 commands are supported by FTOS on the Dell Networking S5000 switch.arpUse address resolution protocol (ARP) to associate

To enter MULTIPLE SPANNING TREE mode:1. Verify that you are logged in to CONFIGURATION mode.2. Enter the protocol spanning-tree mstp command.You can r

Related Commandsclear arp-cache – clears dynamic ARP entries from the ARP table.show arp – displays the ARP table.arp learn-enableEnable ARP learning

arp timeoutSet the time interval for an ARP entry to remain in the ARP cache.S5000Syntaxarp timeout minutesParameterssecondsEnter the number of minute

ip ip-address(OPTIONAL) Enter the keyword ip followed by the IP address of the ARP entry you wish to clear.no-refresh (OPTIONAL) Enter the keywords no

Command Modes• EXEC• EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationUse this command to clear Layer 3 CAM inco

Command HistoryVersion 9.0(1.3) Introduced on the S5000.debug arpView information on ARP transactions.S5000Syntaxdebug arp [interface-type slot/port]

debug ip dhcpEnable debug information for dynamic host configuration protocol (DHCP) relay transactions and display the information on the console.S50

ip helper-address hop-count disable – disables the hop-count increment for the DHCP relay agent.debug ip icmpView information on the internal control

Usage InformationUse the count option to stop packets from flooding the user terminal when debugging is turned on.debug ip packetView a log of IP pack

s= Lists the source address of the packet and the name of the interface (in parentheses) that received the packet.d= Lists the destination address of

The access-group option supports only the equal to (eq) operator in TCP ACL rules. Port operators not equal to (neq), greater than (gt), less than (lt

ROUTER BGP ModeYou must use ROUTER BGP mode to configure Border Gateway Protocol (BGP) on the S5000. For more information, refer to Border Gateway Pro

Command Modes INTERFACECommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationYou must be in INTERFACE mode before you add an IP add

resolved, the software goes through the list of names configured with the ip domain-list command to find a match.Use the following steps to enable dyn

ip domain-nameConfigure one domain name for the switch.S5000Syntaxip domain-name nameTo remove the domain name, use the no ip domain-name command.Para

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationYou can add multiple DHCP servers by entering the ip helper-address command m

ip hostAssign a name and IP address to be used by the host-to-IP address mapping table.S5000Syntaxip host name ip-addressTo remove an IP host, use the

ip mtuSet the IP MTU (frame size) of the packet transmitted by the stack-unit. If the packet must be fragmented, FTOS sets the size of the fragmented

Untagged Packet with VLAN-Stack Header22 bytesTagged Packet with VLAN-Stack Header26 bytesRelated Commandsmtu – sets the link MTU for an Ethernet inte

ip proxy-arpEnable proxy ARP on an interface.S5000Syntaxip proxy-arpTo disable proxy ARP, use the no ip proxy-arp command.Defaults Enabled.Command Mod

• For a Loopback interface, enter the keyword loopback followed by a number from 0 to 16383.• For a Null interface, enter the keywords null 0.• For a

Defaults Enabled.Command Modes CONFIGURATIONCommand HistoryVersion 9.0(1.3) Introduced on the S5000.ip unreachablesEnable the generation of internet c

58

mac {dest-mac | source-dest-mac | source-mac}Enter the keywords to distribute MAC traffic based on the following criteria:• dest-mac — Uses the destin

management routeConfigure a static route that points to the Management interface or a forwarding router.S5000Syntaxmanagement route {ipv4-address | ip

Parametersinspection (OPTIONAL) Enter the keyword inspection followed by database or statistics to view dynamic ARP inspection details.interface type

Address Displays the IP address of the ARP entry.Age(min) Displays the age (in minutes) of the ARP entry.Hardware AddressDisplays the MAC address asso

Related Commandsip local-proxy-arp – enables/disables Layer 3 communication in secondary VLANs.switchport mode private-vlan – sets PVLAN mode of the s

• If DNS is not enabled, the Name/Address lookup is static mappingName servers are...Lists the name servers, if configured.Host Displays the host name

show ip cam stack-unitDisplay CAM entries for the S5000 switch.S5000Syntaxshow ip cam stack-unit unit-number port-set pipe-number [ip-address mask [lo

Port Displays the egress interface. Use the second half of the entry to determine the interface. For example, in the entry 17cl CP, the CP is the pert

show ip fib stack-unitView all FIB entries.S5000Syntaxshow ip fib stack-unit unit-number [ip-address [mask] [longer-prefixes] | summary]Parametersstac

Port VId EC-------------BLK HOLE 0 0FTOS>Related Commandsclear ip fib stack-unit – clears the FIB entries on a specified stack-unit.show ip flowS

3File ManagementThis chapter contains command line interface (CLI) commands needed to manage the configuration files as well as other file management

The show ip flow command does not compute the egress port information when load-balance mac hashing is also configured due to insufficient information

brief (OPTIONAL) Enter the keyword brief to view a brief summary of the interfaces and whether an IP address is assigned.configured (OPTIONAL) Enter t

Interface Displays type of interface and the associated slot and port number.IP-Address Displays the IP address for the interface, if configured.Ok? I

Command Modes• EXEC• EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on the S5000.ExampleFTOS#show ip management-routeDestination Gateway

show ip protocolsView information on all routing protocols enabled and active on the switch.S5000Syntaxshow ip protocolsCommand Modes• EXEC• EXEC Priv

list prefix-list(OPTIONAL) Enter the keyword list and the name of a configured prefix list. For more information, refer to the show ip route list comm

• E2 = OSPF external type 2• i = IS-IS• L1 = IS-IS level-1• L2 = IS-IS level-2• IA = IS-IS inter-area• * = candidate default• > = non-active route•

*S 0.0.0.0/0 via 10.10.91.9, Te 1/2 1/0 3d2hFTOS>show ip route listDisplay IP routes in an IP prefix list.S5000Syntaxshow ip route

show ip route summaryView a table summarizing the IP routes in the switch.S5000Syntaxshow ip route summaryCommand Modes• EXEC• EXEC PrivilegeCommand H

show ip trafficView IP, ICMP, UDP, TCP and ARP traffic statistics.S5000Syntaxshow ip traffic Command Modes EXEC PrivilegeCommand HistoryVersion 9.0(1.

debug dot1x...

To copy the running configurationenter the keyword running-configTo copy the startup configurationenter the keyword startup-configTo copy using a Secu

...socket full The applications buffer was full and the incoming packet had to be dropped.The F10 Monitoring MIB provides access to the statistics des

show tcp statisticsView information on TCP traffic through the switch.S5000Syntaxshow tcp statisticsCommand Modes EXEC PrivilegeCommand HistoryVersion

25 control packets...Displays the number of control packets sent and the number retransmitted.11603 data packets...Displays the number of data packets

24IPv6 Access Control Lists (IPv6 ACLs)IPv6 ACLs and IPv6 Route Map commands are supported on the Dell Networking S5000 switch.This chapter contains t

Parametersdefault Use the default CAM profile settings, and set the CAM as follows:• L3 ACL (ipv4acl): 6• L2 ACL(l2acl): 5• IPv6 L3 ACL (ipv6acl): 0•

Command Modes CONFIGURATIONCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationFor the new settings to take effect, you must save

denyConfigure a filter that drops IPv6 packets that match the filter criteria.S5000Syntaxdeny {ipv6-protocol-number | icmp | ipv6 | tcp | udp}To remov

Parameterssource addressEnter the IPv6 address of the network or host from which the packets were sent in the x:x:x:x::x format followed by the prefix

Keyword ICMP Message Type Namelog Log matches against this entry.mobile-advertisement Mobile prefix advertisement.mobile-solicitation Mobile prefix so

maskEnter a network mask in /prefix format (/x).any Enter the keyword any to specify that all routes are subject to the filter.host ipv6-addressEnter

indicates that the target is the internal Flash. The source is on a secure server running SSH, so you are prompted for the user datagram protocol (UDP

monitor (OPTIONAL) Enter the keyword monitor to monitor traffic on the monitoring interface specified in the flow-based monitoring session along with

• Use the no seq sequence-number command syntax if you know the filter’s sequence number• Use the no deny udp {source address mask | any | host ipv6-a

Usage InformationMost ACL rules require one entry in the CAM. However, rules with TCP and UDP port operators (gt, lt, range) may require more than one

vlan range(OPTIONAL) Enter the keyword vlan followed by the VLAN range in a comma separated format. The range is 1 to 4094.Defaults Disabled.Command M

Parametersaccess-list-nameEnter the as the access list name as a string, up to 140 characters.Defaults All access lists contain an implicit “deny any”

permit icmpConfigure a filter to allow all or specific internet control message protocol (ICMP) messages.S5000Syntaxpermit icmp {source address mask |

Command HistoryVersion 9.0(1.3) Introduced on the S5000.permit tcpConfigure a filter to pass TCP packets that match the filter criteria.S5000Syntaxper

• 20 and 21 = FTP• 25 = SMTP• 169 = SNMPdestination addressEnter the IPv6 address of the network or host to which the packets are sent in the x:x:x:x:

Total Ports: 4001ExampleAn ACL rule with a TCP port lt 1023 takes only one entry in the CAM:Rule# Data Mask From To #Covered1 00

• gt = greater than• lt = less than• range = inclusive range of ports (you must specify two port for the port parameter.)port port(OPTIONAL) Enter the

no-confirm (OPTIONAL) Enter the keyword no-confirm to specify that FTOS does not require user input for each file prior to deletion.Command Modes EXEC

Total Ports: 1024Related Commandspermit – assigns a permit filter for IP packets.permit tcp – assigns a permit filter for TCP packets.remarkEnter a de

resequence access-listRe-assign sequence numbers to entries of an existing access-list.S5000Syntaxresequence access-list {ipv4 | ipv6 | mac} {access-l

Step-to-IncrementEnter the step to increment the sequence number. The range is 1 to 65535.Defaults noneCommand Modes• EXEC• EXEC PrivilegeCommand Hist

udp Enter the keyword udp to configure a User Datagram Protocol filter.source addressEnter the IPv6 address of the network or host from which the pack

Defaults Not configured.Command Modes ACCESS-LISTCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Related Commandsdeny – configures a filter to

FcoeAcl : 2iscsiOptAcl : 2Related Commandscam-acl – configures CAM profiles to support IPv6 ACLs.show cam-acl-egressShow informa

Command Modes ACCESS-LISTCommand HistoryVersion 9.0(1.3) Introduced on the S5000.ExampleFTOS(conf-ipv6-acl)#show config!ipv6 access-list Acl1 seq 5 p

Usage InformationField Description“Ingress IPv6...” Displays the name of the IPv6 ACL, in this Example “AclList1”.“seq 10...” Displays the filter. If

test cam-usageVerify that enough ACL CAM space is available for the IPv6 ACLs you have created.S5000Syntaxtest cam-usage service-policy inputinput-pol

unit-------------------------------------------------------------- 4| 0| IPv4Flow| 232| 0| Allowed 4| 0| IPv6Fl

Defaults flash memoryCommand Modes EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationYou must include the colon (

match ipv6 next-hopConfigure a filter which matches based on the next-hop IPv6 addresses specified in the IPv6 prefix list.S5000Syntaxmatch ipv6 next-

route-mapDesignate a IPv6 route map name and enter ROUTE-MAP mode.S5000Syntaxroute-map map-nameTo delete a route map, use the no route-map map-name co

Usage InformationThe set ipv6 next-hop command is the only way to set an IPv6 Next-Hop.show configView the current route map configuration.S5000Syntax

Set clauses: next-hop 1.1.1.1 ipv6 next-hop 3333:2222::Related Commandsroute-map – configures a route map.633

634

25IPv6 BasicsIPv6 Basic Commands are supported on the Dell Networking S5000 switch.NOTE: For information about the Dell Networking operating software

Command Modes EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on the S5000.clear ipv6 mld_hostClear the IPv6 MLD host counters and reset the

To remove the IPv6 address, use the no ipv6 address {ipv6-address prefix-length} command.Parametersipv6-address prefix-lengthEnter the IPv6 address in

Default 100 ppsCommand Modes CONFIGURATIONCommand HistoryVersion 9.0(1.3) Introduced on the S5000.ipv6 flowlabel-zeroConfigure system to set the flow

ipv6 name-serverEnter up to six IPv6 addresses of name servers. The order you enter the addresses determines the order of their use.S5000Syntaxipv6 na

logging coredumpEnable coredump.S5000Syntaxlogging coredump {stack-unit all}Parametersstack-unit all Enable coredump on all stack-units.Defaults The k

ipv6 nd prefixSpecify which IPv6 prefixes are included in Neighbor Advertisements.S5000Syntaxipv6 nd prefix {ipv6-prefix | prefix-length | default} [n

ipv6 routeEstablish a static IPv6 route.S5000Syntaxipv6 route ipv6-address prefix-length {ipv6-address | interface | interface ipv6-address} [distance

tag value(OPTIONAL) Enter the keyword tag followed by a tag value number. The range is 1 to 4294967295.permanent (OPTIONAL) Enter the keyword permanen

show ipv6 cam stack-unitDisplays the IPv6 CAM entries for the specified stack-unit.S5000Syntaxshow ipv6 cam stack-unit unit-number port-set {number} [

show ipv6 control-plane icmpDisplays the status of the icmp control-plane setting for the error eate limit setting.S5000Syntaxshow ipv6 control-plane

show ipv6 flowlabel-zeroDisplay the flow label zero setting.S5000Syntaxshow ipv6 flowlabel-zeroDefault DisabledCommand Modes EXECCommand HistoryVersio

configured (OPTIONAL) View information on all IPv6 configured interfaces.stack-unit unit-number(OPTIONAL) View information for a specific stack-unit.

ND reachable time is 31000 milliseconds ND base reachable time is 30000 milliseconds ND retransmit interval is 1000 milliseconds ND hop limit is

Reports 79962 18034Leaves ---- 0MLDv2 Queries 18000 ----MLDv1 Queries 0 ----Errors:Malformed

Field Description(undefined) Identifies the type of route:• L = Local• C = connected• S = static• R = RIP• B = BGP• IN = internal BGP• EX = external B

Defaults Crash kernel files are uploaded to flash by default.Command Modes CONFIGURATIONCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage

C 2004::/32 [0/0] Direct, Te 1/1, 00:28:49 L fe80::/10 [0/0] Direct, Nu 0, 00:29:09Example (Summary)FTOS#show ipv6 route summaryRoute S

26IPv6 Border Gateway Protocol (IPv6 BGP)IPv6 Border Gateway Protocol (IPv6 BGP) is supported on the Dell Networking S5000 switch.This chapter include

attribute-map map-name(OPTIONAL) Enter the keywords attribute-map followed by the name of a configured route map to modify attributes of the aggregate

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationAny update without a MED attribute is the least preferred route.If you enable

If you enable this command, use the capture bgp-pdu max-buffer-size * command to recompute the best path.bgp bestpath med missing-as-bestDuring path s

neighbor route-reflector-client – configures a route reflector and clients.bgp cluster-idAssign a cluster ID to a BGP cluster with more than one route

Parametersas-numberEnter the AS number. The range is 1 to 65535.Defaults Not configured.Command Modes ROUTER BGPCommand HistoryVersion 9.0(1.3) Introd

bgp dampeningEnable BGP route dampening and configure the dampening parameters.S5000Syntaxbgp dampening [half-life reuse suppress max-suppress-time] [

bgp default local-preferenceChange the default local preference value for routes exchanged between internal BGP peers.S5000Syntaxbgp default local-pre

show ip protocols – views information on routing protocols.bgp fast-external-failoverEnable the fast external failover feature, which immediately rese

ParametersurlEnter the following keywords and a filename:• For a file on the internal Flash, enter flash:// followed by the filename.• For a file on t

For more information about using the 2- or 4-Byte format, refer to the FTOS Configuration Guide.bgp graceful-restartEnable graceful restart on a BGP n

bgp log-neighbor-changesEnable logging of BGP neighbor resets.S5000Syntaxbgp log-neighbor-changesTo disable logging, use the no bgp log-neighbor-chang

bgp recursive-bgp-next-hopEnable next-hop resolution through other routes learned by BGP.S5000Syntaxbgp recursive-bgp-next-hopTo disable next-hop reso

the show bgp commands, which are filtered through regular expressions, use up CPU cycles particularly with large databases. The Regex Engine Performan

bgp soft-reconfig-backupUse this command only when route-refresh is not negotiated between peers to avoid having a peer re-send BGP updates.S5000Synta

show capture bgp-pdu neighbor – configures a route reflector and clients.capture bgp-pdu neighbor (ipv6)Enable capture of an IPv6 BGP neighbor packet.

ipv4 multicast soft [in | out](OPTIONAL) Enter the keywords ipv4 multicast soft [in | out] to set options within the specified IPv4 address family.ipv

multicast (OPTIONAL) Enter the keyword multicast to select the multicast option within the selected address family. Multicast is supported on IPv4 onl

multicast (OPTIONAL) Enter the keyword multicast to select the multicast option within the selected address family. Multicast is supported on IPv4 onl

Parametersipv6-addressEnter the IPv6 address in the x:x:x:x::x format followed by the prefix length in the /x format. The range is /0 to /128.NOTE: Th

!username admin password 7 1d28e9f33f99cf5c!stack-unit 0 provision S5000!interface TenGigabitEthernet 0/0 no ip address no shutdown...interface fortyG

Command Modes EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationIf you enter the clear ip bgp ipv6 flap-statistic

debug ip bgpAllows you to view all information on BGP, including BGP events, keepalives, notifications, and updates.S5000Syntaxdebug ip bgp [ipv6-addr

debug ip bgp eventsAllows you to view information on local BGP state changes and other BGP events.S5000Syntaxdebug ip bgp [ipv6-address | peer-group p

Command Modes EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationEntering a no debug ip bgp command removes all co

debug ip bgp keepalivesAllows you to view information about BGP keepalive messages.S5000Syntaxdebug ip bgp [ipv6-address | peer-group peer-group-name]

NOTE: The :: notation specifies successive hexadecimal fields of zeros.peer-group peer-group-name(OPTIONAL) Enter the keywords peer-group followed by

Command Modes EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationEntering a no debug ip bgp command removes all co

Defaults noneCommand Modes ROUTER BGPCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Related Commandsrouter bgp – enters ROUTER mode on the sw

maximum-pathsConfigure the maximum number of parallel routes (multipath support) BGP supports.S5000Syntaxmaximum-paths {ebgp | ibgp} numberTo return t

Defaults Disabled.Command Modes ROUTER BGPV6-ADDRESS FAMILYCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationBy default, when a

- - - network rw ftp: - - - network rw tftp: - - - network rw

neighbor allowas-inSet the number of times an AS number can occur in the AS path.S5000Syntaxneighbor {ip-address | peer-group-name} allowas-in numberT

route-map map-name(OPTIONAL) Enter the keywords route-map followed by the name of a configured route map.Defaults Not configured.Command Modes ROUTER

neighbor distribute-listDistribute BGP information using an established prefix list.S5000Syntaxneighbor {ipv6-address | peer-group-name} distribute-li

peer-group-nameEnter the name of the peer group.ttl(OPTIONAL) Enter the number of hops as the time to live (ttl) value. The range is 1 to 255. The def

neighbor filter-listConfigure a BGP filter based on the AS-PATH attribute.S5000Syntaxneighbor {ipv6-address | peer-group-name} filter-list as-path-nam

maximumEnter a number as the maximum number of prefixes allowed for this BGP router. The range is 1 to 4294967295.threshold(OPTIONAL) Enter a number t

Command Modes ROUTER BGPV6-ADDRESS FAMILYCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationIf you configure the set ipv6 next-h

A peer group must exist before you add a peer to it. If the peer group is disabled (shutdown) the peers within the group are also disabled (shutdown).

To delete a passive peer-group, use the no neighbor peer-group-name peer-group passive command.Parameterspeer-group-nameEnter a text string up to 16 c

Related Commandsrouter bgp – enters the ROUTER BGP mode and configure routes in an AS.neighbor remove-private-asRemove private AS numbers from the AS-

NOTE: ftp and tftp are the only S5000 options.Defaults noneCommand Modes EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage I

Parametersipv6-addressEnter the IPv6 address in the x:x:x:x::x format.NOTE: The :: notation specifies successive hexadecimal fields of zeros.peer-grou

Command Modes ROUTER BGPV6-ADDRESS FAMILYCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationThe first time you enter this comman

Parametersipv6-addressEnter the IPv6 address in the x:x:x:x::x format.NOTE: The :: notation specifies successive hexadecimal fields of zeros.peer-grou

Usage InformationThis command enables soft-reconfiguration for the specified BGP neighbor. BGP stores all updates for inbound IPv6 unicast routes rece

Parametersipv6-addressEnter the IPv6 address in the x:x:x:x::x format.NOTE: The :: notation specifies successive hexadecimal fields of zeros.peer-grou

NOTE: The :: notation specifies successive hexadecimal fields of zeros.peer-group-nameEnter the name of the peer group to set the timers for all route

NOTE: Reset the neighbor connection (the capture bgp-pdu max-buffer-size * command) to apply the weight to the connection and recompute the best path.

route-map map-name(OPTIONAL) Enter the keywords route-map followed by the name of an established route map. Only the following ROUTE-MAP mode commands

redistributeRedistribute routes into BGP.S5000Syntaxredistribute {connected | static} [route-map map-name]To disable redistribution, use the no redist

redistribute isisRedistribute IS-IS routes into BGP.S5000Syntaxredistribute isis [level-1 | level-1-2 | level-2] [metric metric-value | metric-type {e

show default-gateway...

show running-configDisplay the current configuration and display changes from the default values.S5000Syntaxshow running-config [entity] [configured]

redistribute ospfRedistribute OSPFv3 routes into BGP.S5000Syntaxredistribute ospf process-id [[match external {1 | 2}] [match internal]] [route-map ma

router bgpEnter ROUTER BGP mode to configure and enable BGP.S5000Syntaxrouter bgp as-numberTo disable BGP, use the no router bgp as-number command.Par

show configView the current ROUTER BGP configuration.S5000Syntaxshow configCommand Modes ROUTER BGPV6-ADDRESS FAMILYExampleFTOS(conf-router_bgp)#show

longer-prefixes (OPTIONAL) Enter the keywords longer-prefixes to view all routes with a common prefix.Command Modes• EXEC• EXEC PrivilegeCommand Histo

local-AS Enter the keywords local-AS to view all routes with the COMMUNITY attribute of NO_EXPORT_SUBCONFED. All routes with the NO_EXPORT_SUBCONFED (

show ip bgp ipv6 unicast dampened-pathsView BGP routes that are dampened (non-active).S5000Syntaxshow ip bgp ipv6 unicast dampened-pathsCommand Modes•

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationTo view the total number of COMMUNITY attributes found, use the show ip bgp i

filter-list as-path-name(OPTIONAL) Enter the keywords filter-list followed by the name of a configured AS-PATH ACL.regexp regular-expressionEnter a re

show ip bgp ipv6 unicast neighborsDisplays information on IPv6 unicast routes exchanged by BGP neighbors.S5000Syntaxshow ip bgp ipv6 unicast neighbors

Usage InformationThe following describes the show ip bgp ipv6 unicast neighbors command shown in the Example below.Lines Beginning withDescriptionBGP

isisfor the current ISIS configurationlinefor the current line configurationlldpfor the current LLDP configurationload-balancefor the current port-cha

Connections establishedDisplays the number of TCP connections established and dropped between the two peers to exchange BGP information.Last reset Dis

Received 27 messages, 3 notifications, 0 in queue Sent 0 messages, 0 notifications, 0 in queue Received 8 updates, Sent 0 updates Route r

Command HistoryVersion 9.0(1.3) Introduced on the S5000.ExampleFTOS#show ip bgp peer-groupPeer-group RR-CLIENT, remote AS 18508 BGP version 4 Minimu

9000::4:2 18508 0 0 0 0 0 never Active9000::5:2 1 35 32 0 0 0 00:16:42 09000::6:2 2 35

Parametersregexp regular-expressionEnter a regular expression then use one or a combination of the following characters to match:• . = (period) any si

show ip bgp paths communityView all unique COMMUNITY numbers in the BGP database.S5000Syntaxshow ip bgp paths communityCommand Modes• EXEC• EXEC Privi

• + = (plus) the sequences in a pattern (1 or more sequences).• ? = (question mark) sequences in a pattern (either 0 or 1 sequences).NOTE: You must en

IPv6 MBGP CommandsMultiprotocol BGP (MBGP) is an enhanced BGP that enables multicast routing policy throughout the Internet and connecting multicast t

advertise-map map-name(OPTIONAL) Enter the keywords advertise-map followed by the name of a configured route map to set filters for advertising an agg

Parametershalf-life(OPTIONAL) Enter the number of minutes after which the Penalty is decreased. After the router assigns a Penalty of 1024 to a route,

rmonfor the current RMON configurationroute-mapfor the current route map configurationsflowfor the current sFlow configurationsnmpfor the current SNMP

ipv6-address prefix-lengthEnter the IPv6 address in the x:x:x:x::x format followed by the prefix length in the /x format. The range is /0 to /128.NOTE

Parametersnetwork(OPTIONAL) Enter the IPv6 network address in x:x:x:x::x format to clear flap statistics.filter-list list(OPTIONAL) Enter the keywords

debug ip bgp ipv6 unicast peer-group updatesView information about BGP peer-group updates.S5000Syntaxdebug ip bgp ipv6 unicast peer-group peer-group-n

Defaults Disabled.Command Modes EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on the S5000.distance bgpDefine an administrative distance fo

neighbor activateAllows you to enable a specified neighbor/peer group for the current address and subsequent address family identifier (AFI/SAFI).S500

NOTE: The :: notation specifies successive hexadecimal fields of zeros.peer-group-nameEnter the name of the peer group to set the advertisement interv

neighbor distribute-listDistribute BGP information using an established prefix list.S5000Syntaxneighbor {ipv6-address | peer-group-name} distribute-li

NOTE: The :: notation specifies successive hexadecimal fields of zeros.peer-group-nameEnter the name of the peer group to apply the filter to all rout

Defaults threshold = 75Command Modes ROUTER BGPV6-ADDRESS FAMILYCommand HistoryVersion 9.0(1.3) Introduced on the S5000.neighbor next-hop-selfAllows y

NOTE: The :: notation specifies successive hexadecimal fields of zeros.peer-group-nameEnter the name of the peer group to remove the private AS number

!stack-unit 0 provision S5000!interface fibrechannel 0/0shutdown!interface fibrechannel 0/1shutdown!interface TenGigabitEthernet 0/0no ip addressshutd

neighbor route-reflector-clientConfigure a neighbor as a member of a route reflector cluster.S5000Syntaxneighbor {ipv6-address | peer-group-name} rout

route-map map-name(OPTIONAL) Enter the keywords route-map followed by the name of an established route map. Only the following ROUTE-MAP mode commands

• set ipv6 next-hopIf the route map is not configured, the default is deny (to drop all routes).Defaults Not configured.Command Modes ROUTER BGPV6-ADD

Network Displays the destination network prefix of each BGP route.Next Hop Displays the next hop address of the BGP router. If 0::0/0 is listed in thi

show ip bgp ipv6 unicast cluster-listView BGP neighbors in a specific cluster.S5000Syntaxshow ip bgp ipv6 unicast cluster-list [cluster-id]Paramterscl

• EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationTo view the total number of COMMUNITY attributes found, use t

show ip bgp ipv6 unicast detailDisplay detailed BGP information.S5000Syntaxshow ip bgp ipv6 unicast detailCommand Modes• EXEC• EXEC PrivilegeCommand H

Command Modes• EXEC• EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on the S5000.show ip bgp ipv6 unicast flap-statisticsView flap statistic

Command HistoryVersion 9.0(1.3) Introduced on the S5000.ExampleFTOS#show ip bgp ipv6 unicast flap-statisticsBGP table version is 8, local router ID is

Parametersipv6-address prefix-length(OPTIONAL) Enter the IPv6 address in the x:x:x:x::x format followed by the prefix length in the /x format. The ran

running-config bytes 4419, checksum 0x8A1D926Estartup-config bytes 3002, checksum 0xAFFD4BCAFTOS#ExampleFTOS#show running-config statusrunning-config

Received messagesThis line displays the number of BGP messages received, the number of notifications (error messages), and the number of messages wait

CISCO_ROUTE_REFRESH(128) Capabilities advertised to neighbor for IPv6 Unicast : MULTIPROTO_EXT(1) ROUTE_REFRESH(2) CISCO_ROUTE_REFRESH(1

show ip bgp ipv6 unicast peer-groupAllows you to view information on the BGP peers in a peer group.S5000Syntaxshow ip bgp ipv6 unicast peer-group [pee

BGP table version Displays the BGP table version and the main routing table version.network entries Displays the number of network entries, route path

penalized pathsNeighbor AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/Pfx5ffe:10::3 1 28 0 12 0 0 00:01:01 25ffe:11::3 1

27iSCSI OptimizationInternet small computer system interface (iSCSI) optimization enables quality-of-service (QoS) treatment for iSCSI storage traffic

Defaults 10 minutesCommand Modes CONFIGURATIONCommand HistoryVersion 9.0(1.3) Introduced on the S5000.iscsi cosSet the QoS policy that is applied to t

iscsi enableGlobally enable iSCSI optimization.S5000Syntaxiscsi enableTo disable iSCSI optimization, use the no iscsi command.ParametersenableEnter th

Command HistoryVersion 9.0(1.3) Introduced on the S5000.iscsi target portConfigure the iSCSI target ports and optionally, the IP addresses on which iS

Command HistoryVersion 9.0(1.3) Introduced on the S5000.ExampleFTOS#show iscsiiSCSI is enablediSCSI session monitoring is disablediSCSI COS : dot1p is

Command HistoryVersion 9.0(1.3) Introduced on the S5000.ExampleFTOS#show startup-config! Version 9-0(1-2)! Last configuration change at Mon Jun 10 19:

Related Commands• show iscsi – displays the currently configured iSCSI settings.• show iscsi session detailed – displays detailed information about ac

• show run iscsi – shows run iscsi.show run iscsiDisplay all globally configured non-default iSCSI settings in the current FTOS session.S5000Syntaxsho

752

28Intermediate System to Intermediate System (IS-IS)The intermediate system to intermediate system (IS-IS) protocol for IPv4 and IPv6 is supported on

advertiseLeak routes between levels (distribute IP prefixes between Level 1 and Level 2 and vice versa).S5000Syntaxadvertise {level1-into-level2 | lev

encryption-type(OPTIONAL) Enter 7 to encrypt the password using DES.passwordEnter a 1 to 16-character length alphanumeric string to prevent unauthoriz

clear isisRestart the IS-IS process. All IS-IS data is cleared.S5000Syntaxclear isis [tag] {* | database | traffic}Parameterstag(Optional) Enter an al

debug isisEnable debugging for all IS-IS operations.S5000Syntaxdebug isisTo disable debugging of IS-IS, use the no debug isis command.Command Modes EX

debug isis local-updatesEnables debugging on a specific interface and provides diagnostic information to debug IS-IS local update packets.S5000Syntaxd

• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed by slot/port numbers. The ports are 48, 52, 56, and 60.• For a Port Channe

Build Path... Location of the software build files loaded on the systemFTOS uptime is... Amount of time the system has been upSystem image... Image fi

• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed by slot/port numbers. The ports are 48, 52, 56, and 60.• For a Port Channe

metric value in the default-information originate command is set to a number higher than 63, the metric value advertised in the LSPs is 63. If the met

indicates lower reliability. Routes with smaller values are given preference.) The default is 115.ip-address mask(OPTIONAL) Enter an IP address in dot

Defaults Not configured.Command Modes• ROUTER ISIS (for IPv4)• CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6)Command HistoryVersion 9.0(1.3)

Usage InformationYou can assign a name to a routing process so a prefix list IS applied to only the routes derived from the specified routing process.

Defaults No default password.Command Modes ROUTER ISISCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationThe domain password is

graceful-restart intervalSet the graceful restart grace period, the time during that all graceful restart attempts are prevented.S5000Syntaxgraceful-r

graceful-restart t2Configure the wait time for the graceful restart timer T2 that a restarting router uses as the wait time for each database to synch

Usage InformationThe running router sets the remaining time value to the current adjacency hold time. You can override this setting by implementing th

hello paddingUse to turn ON or OFF padding for LAN and point-to-point hello PDUs or to selectively turn padding ON or OFF for LAN or point-to-point he

bootflash-image Upgrade the boot image in the bootflash partition.bootselector-imageUpgrade the boot image in the bootselector partition. You are prom

Usage InformationUse this command to build name-to-systemID mapping tables through the protocol. All show commands that display systems also display t

Usage InformationUse the net command to assign a network entity title to enable IS-IS.Related Commands• net – configures an IS-IS network entity title

isis circuit-typeConfigure the adjacency type on interfaces.S5000Syntaxisis circuit-type {level-1 | level-1-2 | level-2-only}To return to the default

level-1 (OPTIONAL) Independently configures the interval of time between transmission of CSNPs for Level 1.level-2 (OPTIONAL) Independently configures

Related Commandsisis hello-multiplier – specifies the number of IS-IS hello packets a neighbor must miss before the router declares the adjacency as d

Defaults Padding of hello PDUs is enabled (ON).Command Modes INTERFACECommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationHello P

isis metricAssign a metric to an interface.S5000Syntaxisis metric default-metric [level-1 | level-2]To return to the default values, use the no isis m

isis passwordConfigure an authentication password for an interface.S5000Syntaxisis password [hmac-md5] password [level-1 | level-2]To delete a passwor

ParametersvalueThis value sets the router priority. The higher the value, the higher the priority. The range is 0 to 127. The default is 64.level-1 (O

If you are configuring only one area in your network, you do not need to run both Level 1 and Level 2 routing algorithms. You can configure the IS typ

* Warning - Upgrading boot selectors is inherently risky and should * * only be attempted when necessary. A failure at this upgrade may *

second_wait_interval seconds(OPTIONAL) Enter the wait interval, in seconds, between the first and second LSP generation. The range is 0 to 120 seconds

lsp-refresh-intervalSet the link state PDU (LSP) refresh interval. LSPs must be refreshed before they expire. When the LSPs are not refreshed after a

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationUse this command to configure the number of area addresses on router. This va

ParametersnumberEnter a number as the maximum number of parallel paths an IP routing installs in a routing table. The range is 1 to 16. The default is

multi-topologyEnables multi-topology IS-IS. It also allows enabling/disabling of old and new style TLVs for IP prefix information in the LSPs.S5000Syn

passive-interfaceSuppress routing updates on an interface. This command stops the router from sending updates on that interface.S5000Syntaxpassive-int

{external | internal}] [level-1 | level-1-2 | level-2] [route-map map-name] command.Parametersconnected Enter the keyword connected to redistribute ac

How a metric value assigned to a redistributed route is advertised depends on how on the configuration of the metric-style command. If the metric-styl

If you do not specify a map-name, all routes are redistributed. If you specify a keyword, but fail to list route map tags, no routes are imported.Defa

metric-type {external | internal}(OPTIONAL) The external link type associated with the default route advertised into a routing domain. The two options

Bootflash image upgrade for stack-unit 0 completed successfully.upgrade system (standalone unit)Upgrade the FTOS image on a standalone S5000 switch.S5

router isisAllows you to enable the IS-IS routing protocol and to specify an IP IS-IS process.S5000Syntaxrouter isis [tag]To disable IS-IS routing, us

• CONFIGURATION-ROUTER-ISIS-ADDRESS-FAMILY-IPV6 (for IPv6)Command HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationSet the overload bi

show isis databaseDisplay the IS-IS link state database.S5000Syntaxshow isis database [level-1 | level-2] [local] [detail | summary] [lspid]Parameters

LSP Seq Num This value is the sequence number for the LSP that allows other systems to determine if they have received the latest information from the

Area Address: 49.0000.0001 NLPID: 0xCC 0x8E IP Address: 10.1.1.1 IPv6 Address: 1011::1 Topology: IPv4 (0x00) IPv6 (0x8002) Metric: 10 IS OSPF

Database Sync count : 0 (level-1), 0 (level-2)FTOS#show isis hostnameDisplay IS-IS host names configured or learned on the S5000 switch.S5000Syntax

• For a VLAN interface, enter the keyword vlan followed by a VLAN id number from 1 to 4094.Command Modes• EXEC• EXEC PrivilegeCommand HistoryVersion 9

interface-type slot/port(OPTIONAL) Enter one of the following keywords followed by slot/port or number information. Valid slot numbers are 0-11. The v

49.0000.0001 IP Address(es): 25.1.1.3* MAC Address: 0000.0000.0000 Hold Time: 28 Link Local Address: fe80::201:e8ff:fe00:492c Topology: IPv4 IPv6

show isis trafficThis command allows you to display IS-IS traffic interface information.S5000Syntaxshow isis traffic [interface-type slot/port]Paramet

seq...

FTOS#upgrade system ftp:// A: Address or name of remote host []: 10.11.200.241Source file name []: /sw/Releases/FTOS-SH-9.0(1.3).bin User na

Field DescriptionLevel-1/Level-2 LSPs CSNPs (sent/ rcvd) Displays the number of CSNP LSPs sent and received.Level-1/Level-2 LSPs PSNPs (sent/ rcvd) Di

spf-intervalSpecify the minimum interval between shortest path first (SPF) calculations.S5000Syntaxspf-interval [level-l | level-2] interval seconds [

seconds). After the network calms down and there are no triggers for two times the maximum interval, fast behavior is restored (the initial wait time)

29Link Aggregation Control Protocol (LACP)This chapter contains commands for Dell Networking’s implementation of the link aggregation control protocol

To disable LACP debugging, use the no debug lacp [config | events | pdu [interface-type slot/port][in | out]] command.Parametersconfig (OPTIONAL) Ente

Defaults 1 secondCommand Modes INTERFACE (conf-if-po-number)Command HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationThis command appl

Defaults 32768Command Modes INTERFACECommand HistoryVersion 9.0(1.3) Introduced on the S5000.port-channel modeConfigure the LACP port channel mode.S50

port-channel-protocol lacpEnable LACP on any LAN port.S5000Syntaxport-channel-protocol lacpTo disable LACP on a LAN port, use the no port-channel-prot

A - Active LACP, B - Passive LACP, C - Short Timeout, D - Long TimeoutE - Aggregatable Link, F - Individual Link, G - IN_SYNC, H - OUT_OF_SYNCI - Coll

30Layer 2This chapter describes commands to configure Layer 2 features.This chapter contains the following sections:• MAC Addressing Commands• Virtual

4Control and MonitoringThis chapter contains the commands to configure and monitor the system, including Telnet, file transfer protocol (FTP), and tri

• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE followed by slot/port numbers. The ports are 48, 52, 56, and 60.• For a Port Channe

To remove a MAC address, use the no mac-address-table static mac-address output interface-type slot/port vlan vlan-id command.Parametersmac-addressEnt

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationFor information about the specific trap sent and the corresponding Syslog, re

Command Modes INTERFACECommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationThis command and its options are supported on physical

shutdown Enter the keyword shutdown to shut down the port on a learning-limit violation.Defaults noneCommand Modes INTERFACE (conf-if-interface-slot/p

mac learning-limit station-move-violationSpecify the actions for a station move violation.S5000Syntaxmac learning-limit station-move-violation {log |

Command HistoryVersion 9.0(1.3) Introduced on the S5000.show cam mac stack-unitDisplay the content addressable memory (CAM) size and the portions allo

• EXEC PrivilegeExampleFTOS#show cam mac stack-unit 0 port-set 0VlanId Mac Address Region Interface 0 5c:f9:dd:ee:ff:c2 LOCAL_DA

interface interface-type(OPTIONAL) Instead of entering the keyword interface followed by the interface type, slot and port information, as above, you

MAC Entries... Displays the number of MAC entries learnt per VLAN.Dynamic Address...Lists the number of dynamically learned MAC addresses.Static Addre

banner execConfigure a message that is displayed when your enter EXEC mode.S5000Syntaxbanner exec c line cParameterscEnter the keywords banner exec, t

show mac accounting access-listDisplay destination counters for Layer 2 traffic (available on physical interfaces only).S5000Syntaxshow mac accounting

Related Commandsshow mac accounting access-list – displays the MAC access list configurations and counters (if configured).show mac learning-limitDisp

Virtual LAN (VLAN) CommandsThe following commands configure and monitor virtual LANs (VLANs). VLANs are a virtual interface and use many of the same c

Defaults The Default VLAN is VLAN 1.Command Modes CONFIGURATIONCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationTo return VLAN

Usage InformationTo display information about a named VLAN, enter the show vlan command with the name parameter or the show interfaces description com

id vlan-id(OPTIONAL) Enter the keyword id followed by a number from 1 to 4094. Only information on the VLAN specified is displayed.name vlan-name(OPTI

NUM Status Description Q Ports* 1 Inactive 2 Active U Po1(Te 13/0) T Po20(

3 0 1800 3.3.3.2/24FTOS#Example (Name)FTOSconf)#interface vlan 222FTOS(conf-if-vl-222)#name testFTOS(conf-if-vl-222)#do show vlan

Usage InformationWhen you use the no tagged command, the interface is automatically placed in the Default VLAN as an untagged interface unless the int

Related Commandsinterface vlan – configures a VLAN.tagged – specifies which interfaces in a VLAN are tagged.untaggedAdd a Layer 2 interface to a VLAN

banner loginSet a banner to be displayed when logging on to the system.S5000Syntaxbanner login {keyboard-interactive | no keyboard-interactive} [c lin

Far-End Failure Detection (FEFD)The Dell Networking operating software (FTOS) supports far-end failure detection (FEFD) on the Ethernet interfaces of

fefdEnable far-end failure detection on an interface.S5000SyntaxfefdTo disable FEFD on an interface, use the no fefd command.Defaults Disabled.Command

fefd-globalEnable FEFD globally on the system.S5000Syntaxfefd-global [mode {normal | aggressive}]To disable FEFD globally, use the no fefd-global [mod

ParameterssecondsEnter a number as the time between FEFD control packets. The range is 3 to 300 seconds. The default is 15 seconds.Defaults 15 seconds

Parametersnormal (OPTIONAL) Enter the keyword normal to change the link state to “unknown” when a far-end failure is detected by the software on that

Related Commands• fefd – enables far-end failure detection.show fefdView FEFD status globally or on a specific interface.S5000Syntaxshow fefd [interfa

• Admin Shutdown (interface is disabled with the shutdown command).ExampleFTOS#sh fefdFEFD is globally 'ON', interval is 10 seconds, mode is

31Link Layer Discovery Protocol (LLDP)Link layer discovery protocol (LLDP) advertises connectivity and management from the local station to the adjace

vlan-name Enter the keywords vlan-name to advertise the vlan-name TLV.Defaults Disabled.Command Modes CONFIGURATION (conf-lldp) and INTERFACE (conf-if

Parameterssystem-capabilitiesEnter the keywords system-capabilities to advertise the system capabilities TLVs.system-descriptionEnter the keywords sys

banner motdSet a message of the day (MOTD) banner.S5000Syntaxbanner motd c line cParameterscEnter the keywords banner motd, then enter a character del

clear lldp neighborsClear LLDP neighbor information for all interfaces or a specific interfaces.S5000Syntaxclear lldp neighbors {interface type slot/p

all (OPTIONAL) Enter the keyword all to display information on all interfaces.events (OPTIONAL) Enter the keyword events to display major events such

helloConfigure the rate at which the LLDP control packets are sent to its peer.S5000Syntaxhello secondsTo revert to the default, use the no hello seco

multiplierSet the number of consecutive misses before LLDP declares the interface dead.S5000Syntaxmultiplier integerTo return to the default, use the

Defaults LLDP is not enabled on the interface.Command Modes INTERFACE (conf-if-interface-lldp)Command HistoryVersion 9.0(1.3) Introduced on the S5000.

Te 1/21 R2 TenGigabitEthernet 2/11 00:01:e8:06:95:3eTe 1/31 R3 TenGigabitEthernet 3/11 00:01:e8:09:c2:4ashow lldp statisticsDisplay the

multiplier 3 no disableFTOS#LLDP-MED CommandsThe following are the LLDP-MED (Media Endpoint Discovery) commands.FTOS LLDP-MED commands are an exten

Defaults Unconfigured.Command Modes CONFIGURATION (conf-lldp)Command HistoryVersion 9.0(1.3) Introduced on the S5000.Related Commandsprotocol lldp (Co

advertise med location-identificationConfigure the system to advertise a location identifier.S5000Syntaxadvertise med location-identification {coordin

Defaults unconfigured.Command Modes CONFIGURATION (conf-lldp)Command HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationAdvertise the Ex

Defaults DisabledCommand Modes CONFIGURATIONCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationEnables periodic audits of the so

advertise med streaming-videoConfigure the system to advertise streaming video services for broadcast or multicast-based video. This does not include

Command Modes CONFIGURATION (conf-lldp)Command HistoryVersion 9.0(1.3) Introduced on the S5000.Related Commandsdebug lldp interface – debugs LLDP.show

To return to the default, use the no advertise med voice {vlan-id} | {priority-tagged number} command.Parametersvlan-idEnter the VLAN ID. The range is

32Multicast Source Discovery Protocol (MSDP)Multicast source discovery protocol (MSDP) connects multiple PIM Sparse-Mode (PIM-SM) domains together.MSD

To clear the MSDP rejected source-active entries, use the no ip msdp cache-rejected-sa {number} command followed by the ip msdp cache-rejected-sa {num

ip msdp log-adjacency-changesEnable logging of MSDP adjacency changes.S5000Syntaxip msdp log-adjacency-changesTo disable logging, use the no ip msdp l

ip msdp originator-idConfigure the MSDP Originator ID.S5000Syntaxip msdp originator-id {interface-type slot/port}To remove the originator-id, use the

connect-source interfaceEnter the keywords connect-source followed by one of the interfaces and slot/port or number information:• For a Gigabit Ethern

ip msdp redistributeFilter local PIM SA entries in the SA cache. SAs which are denied by the ACL will time out and not be refreshed. Until they time o

Command HistoryVersion 9.0(1.3) Introduced on the S5000.ip msdp sa-limitConfigure the upper limit of source-active (SA) entries in SA-cache.S5000Synta

clear lineReset a terminal line.S5000Syntaxclear line {line-number | console 0 | vty number}Parametersline-numberEnter a number for one of the 12 term

Defaults Not configured.Command Modes CONFIGURATIONCommand HistoryVersion 9.0(1.3) Introduced on the S5000.ip multicast-msdpEnable MSDP.S5000Syntaxip

ExampleFTOS#show ip msdp peer 100.1.1.1Peer Addr: 100.1.1.1 Local Addr: 100.1.1.2(639) Connect Source: none State: Established Up/Down Time: 00:00:0

862

33Multiple Spanning Tree Protocol (MSTP)Multiple spanning tree protocol (MSTP), as implemented by FTOS, conforms to IEEE 802.1s.MSTP is supported by t

Command HistoryVersion 9.0(1.3) Introduced on the S5000.ExampleFTOS#debug spanning-tree mstp bpdu tengigabitethernet 2/0 ?in Receive (in)out Transmit

Related Commandsspanning-tree mstp – enters MULTIPLE SPANNING TREE mode.forward-delayThe amount of time the interface waits in the Blocking State and

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Related Commandsforward-delay – the amount of time the interface waits in the Blocking State a

Defaults 20 hopsCommand Modes MULTIPLE SPANNING TREECommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationThe max-hops command is a

nameThe name you assign to the multiple spanning tree region.S5000Syntaxname region-nameTo remove the region name, use the no name command.Parametersr

Related Commandsdisable – disables multiple spanning tree.revisionThe revision number for the multiple spanning tree configuration.S5000Syntaxrevision

debug cpu-traffic-statsEnable the collection of computer processor unit (CPU) traffic statistics.S5000Syntaxdebug cpu-traffic-statsDefaults DisabledCo

MSTI 10 VLAN 101-105 max-hops 5FTOS(conf-mstp)#show spanning-tree mst configurationView the multiple spanning tree configuration.S5000Syntaxshow sp

Command Modes• EXEC• EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationYou must enable the multiple spanning tree

Interface DesignatedName PortID Prio Cost Sts Cost Bridge ID PortID----------------------------------------------

spanning-treeEnable the multiple spanning tree protocol on the interface.S5000Syntaxspanning-treeTo disable the multiple spanning tree protocol on the

Defaults• cost = depends on the interface type• priority = 128Command Modes INTERFACECommand HistoryVersion 9.0(1.3) Introduced on the S5000.spanning-

message is displayed: % Error: RootGuard is configured. Cannot configure LoopGuard.When used in an MSTP network, if root guard blocks a boundary port

876

34MulticastFTOS supports multicast commands on the S5000 switch.This chapter contains the following sections:• IPv4 Multicast Commands• IPv6 Multicast

ip mrouteAssign a static mroute.S5000Syntaxip mroute destination mask {ip-address | null 0| {{bgp| ospf} process-id | isis | rip | static} {ip-address

ip multicast-limitUse this feature to limit the number of multicast entries on the system.S5000Syntaxip multicast-limit limitParameterslimitEnter the

disableReturn to EXEC mode.S5000Syntaxdisable [level]Parameterslevel(OPTIONAL) Enter a number for a privilege level of the FTOS. Range: 0 to 15. Defau

Related Commandsip pim sparse-mode – enables IGMP and PIM on an interface.show ip mrouteView the multicast routing table.S5000Syntaxshow ip mroute [st

Outgoing interface list: TenGigabitEthernet 4/11 TenGigabitEthernet 4/13(165.87.1.7, 225.1.2.1), uptime 00:03:17 Incoming vlan: Vlan 2 Outgo

show ip rpfView reverse path forwarding.S5000Syntaxshow ip rpfCommand Modes• EXEC• EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on the S50

Defaults 400Command Modes CONFIGURATIONCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationThis features allows you to limit the

884

35Neighbor Discovery Protocol (NDP)FTOS supports Neighbor Discovery Protocol for IPv6 on the S5000 switch.NDP for IPv6 is defined in RFC 2461 as part

interface type slot/portTo remove all neighbor entries learned on a specific interface, enter the keyword interface followed by the interface type and

Related Commandsmtu – sets the maximum link MTU (frame size) for an Ethernet interface.ipv6 neighborConfigure a static entry in the IPv6 neighbor disc

show ipv6 neighborsDisplay IPv6 discovery information. Entering the command without options shows all IPv6 neighbor addresses stored on the control pr

fe80::201:e8ff:fe17:5cb0 1439 00:01:e8:17:5c:b0 STALE Po 32 - CPfe80::201:e8ff:fe17:5cb1 1439 00:01:e8:17:5c:b1 S

FTOS(conf-if-te-5/0)#FTOS(conf-if-te-5/0)#do reloadSystem configuration has been modified. Save? [yes/no]: nProceed with reload [confirm yes/no]: nFTO

890

36NPIV Proxy GatewayThe N-port identifier virtualization (NPIV) Proxy Gateway (NPG) feature provides FCoE-FC bridging capability on the S5000 switch,

descriptionIn an FCoE map, add a text description of the FCoE and FC parameters used to transmit storage traffic over an S5000 NPIV proxy gateway in a

FCoE-enabled servers and switches with the necessary parameters to log in to a SAN fabric. Use the fcoe-map command to create an FCoE map.On an S5000

Related Commandsfcoe-map — creates an FCoE map which contains the parameters used in the communication between servers and a SAN fabric.show fcoe-map—

fcf-priorityIn an FCoE map, configure the priority used by a server CNA to select an upstream FCoE forwarder (FCF).S5000Syntaxfcf—priority priorityPar

Usage InformationAn FCoE map is a template used to map FCoE and FC parameters in a converged fabric. An FCoE map is used to virtualize upstream FC por

fka-adv-periodIn an FCoE map, configure the time interval used to transmit FIP keepalive (FKA) advertisements.S5000Syntaxfka-adv-period secondsParamet

You configure the association between a dedicated VLAN, which carries FCoE traffic from server CNAs over the NPIV proxy gateway to a SAN fabric in whi

priority-pgidAssign 802.1p priority traffic to a priority group in a DCB map.S5000Syntaxpriority-pgid dot1p0_group-num dot1p1_group-num dot1p2_group-n

AS-Path Commands...

Defaults DisabledCommand Modes CONFIGURATIONCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationUse this command to enable pollin

• Priority group 4 contains traffic with dot1p priority 5, 6, and 7.To remove a priority-pgid configuration from a DCB map, enter the no priority-pgid

Repeat the priority-group bandwidth pfc command to configure PFC and ETS traffic handling for each priority group in a DCB map.You can enable PFC on a

An FCoE map is used to identify the SAN fabric to which FCoE storage traffic is sent and to virtualize S5000 FC ports so that they appear to downstrea

Related Commandsfcoe-map — creates an FCoE map which contains the parameters used in the communication between servers and a SAN fabric.show npiv devi

Field DescriptionStatus Operational status of the link between a server CNA port and a SAN fabric: Logged In - Server has logged in to the fabric and

Field DescriptionLoginMethod Method used by the server CNA to log in to the fabric; for example, FLOGI or FDISC.Secs Number of seconds that the fabric

Command Modes• EXEC• EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationUse the show interfaces fibrechannel comma

The following table describes the show qos dcb-map output shown in the example below.Field DescriptionState Complete: All mandatory DCB parameters are

908

37Open Shortest Path First (OSPFv2)Open Shortest Path First (OSPFv2) is supported on the S5000 switch. Up to 16 OSPF instances can run simultaneously

exec-bannerEnable the display of a text string when the user enters EXEC mode.S5000Syntaxexec-bannerDefaults Enabled on all lines (if configured, the

area nssaSpecify an area as a not so stubby area (NSSA).S5000Syntaxarea area-id nssa [default-information-originate] [no-redistribution] [no-summary]T

not-advertise (OPTIONAL) Enter the keywords not-advertise to set the status to DoNotAdvertise (that is, the Type 3 summary-LSA is suppressed and the c

area virtual-linkSet a virtual link and its parameters.S5000Syntaxarea area-id virtual-link router-id [[authentication-key [encryption-type] key] | [m

transmit-delay seconds(OPTIONAL) Enter the keywords transmit-delay followed by the number of seconds for the interval. The range is 1 to 8192. The def

clear ip ospfClear all OSPF routing tables.S5000Syntaxclear ip ospf process-id [process]Parametersprocess-idEnter the OSPF Process ID to clear a speci

neighbor router-id(OPTIONAL) Enter the keyword neighbor followed by the neighbor’s router-id in dotted decimal format (A.B.C.D.).Defaults noneCommand

8:14 Displays the time stamp.OSPF Displays the OSPF process ID: instance ID.v: Displays the OSPF version. FTOS supports version 2 only.t: Displays the

• T + (router can support TOS)• T - (router cannot support TOS)hi: Displays the amount of time configured for the HELLO interval.di: Displays the amou

Command Modes ROUTER OSPFCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Related Commandsredistribute – redistributes routes from other routin

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Related Commandsshow ip ospf asbr – displays the VLAN configuration.distanceDefine an administ

exitReturn to the lower command mode.S5000SyntaxexitCommand Modes• EXEC Privilege• CONFIGURATION• LINE, INTERFACE• TRACE-LIST• PROTOCOL GVRP• SPANNING

Parametersexternal dist3(OPTIONAL) Enter the keyword external followed by a number to specify a distance for external type 5 and 7 routes. The range i

• For a Port Channel interface, enter the keywords port-channel followed by a number from 1 to 128.• For a VLAN interface, enter the keyword vlan foll

fast-convergenceThis command sets the minimum LSA origination and arrival times to zero (0), allowing more rapid route computation so that convergence

to reduce flooding overhead by selectively flooding on a subset of the interfaces between two routers.When you enable flood-2328, this command configu

Command HistoryVersion 9.0(1.3) Introduced on the S5000.graceful-restart modeEnable the graceful restart mode.S5000Syntaxgraceful-restart mode [planne

Command HistoryVersion 9.0(1.3) Introduced on the S5000.ip ospf auth-change-wait-timeOSPF provides a grace period while OSPF changes its interface aut

Usage InformationAll neighboring routers in the same network must use the same password to exchange OSPF information.ip ospf costChange the cost assoc

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationBy default, the dead interval is four times the default hello-interval.Relate

keyEnter a continuous character string as the password.Defaults No MD5 authentication is configured.Command Modes INTERFACECommand HistoryVersion 9.0(

point-to-point Enter the keywords point-to-point to designate the interface as part of a point-to-point network.Defaults Not configured.Command Modes

Examplemorpheus% ftp 10.31.1.111Connected to 10.31.1.111.220 FTOS (1.0) FTP server readyName (10.31.1.111:dch): dch331 Password requiredPassword:230 U

This interval must be greater than the expected round-trip time for a packet to travel between two routers.Defaults 5 secondsCommand Modes INTERFACECo

Command Modes ROUTER OSPFCommand HistoryVersion 9.0(1.3) Introduced on the S5000.maximum-pathsEnable the software to forward packets over multiple pat

network areaDefine which interfaces run OSPF and the OSPF area for those interfaces.S5000Syntaxnetwork ip-address mask area area-idTo disable an OSPF

Parametersdefault Enter the keyword default to make all OSPF interfaces (current and future) passive.interfaceEnter the following keywords and slot/po

• If passive-interface default is specified, then save no passive-interface interface into the running configuration.No passive-interface default• Cle

v: Displays the OSPF version. FTOS supports version 2 only.t: Displays the type of packet sent:• 1 - Hello packet• 2 - database description• 3 - link

hi: Displays the amount of time configured for the HELLO interval.di: Displays the amount of time configured for the DEAD interval.dr: Displays the IP

Command HistoryVersion 9.0(1.3) Introduced on the S5000.redistribute isisRedistribute IS-IS routing information throughout the OSPF instance.S5000Synt

router-idUse this command to configure a fixed router ID.S5000Syntaxrouter-id ip-addressTo remove the fixed router ID, use the no router-id ip-address

Command Modes CONFIGURATIONCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationYou must have an IP address assigned to an interfa

ftp-server usernameCreate a user name and associated password for incoming FTP server sessions.S5000Syntaxftp-server username username password [encry

• EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationIf you delete all the network area commands for Area 0, the s

show ip ospf asbrDisplay all autonomous system boundary routers (ASBR) visible to OSPF.S5000Syntaxshow ip ospf process-id asbrParametersprocess-idEnte

database-summary(OPTIONAL) Enter the keywords database-summary to the display the number of LSA types in each area and the total number of LSAs.Comman

Related Commandsshow ip ospf database asbr-summary – displays only ASBR summary LSA information.show ip ospf database asbr-summaryDisplay information

Link State ID Displays the Link State ID.Advertising RouterIdentifies the advertising router’s ID.Checksum Displays the Fletcher checksum of the an LS

link-state-id(OPTIONAL) Specify LSA ID in dotted decimal format. The LSA ID value depends on the LSA type, and it can be one of the following:• the ne

External Route TagDisplays the 32-bit field attached to each external route. This field is not used by the OSPF protocol, but can be used for external

link-state-id(OPTIONAL) Specify LSA ID in dotted decimal format. The LSA ID value depends on the LSA type, and it can be one of the following:• the ne

Link State ID: 202.10.10.2Advertising Router: 20.20.20.8LS Seq Number: 0x80000006Checksum: 0xa35Length: 36Network Mask: /24 Attached Router: 20.20

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Related Commandsshow ip ospf database – displays OSPF database information.show ip ospf databa

Usage InformationThe hostname is used in the prompt.ip ftp passwordSpecify a password for outgoing FTP connections.S5000Syntaxip ftp password [encrypt

LS Type Displays the LSA’s type.Link State ID Displays the Link State ID.Advertising RouterIdentifies the advertising router’s ID.Checksum Displays th

Parametersprocess-idEnter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process.

Command Modes• EXEC• EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Related Commandsshow ip ospf database – displays OSPF datab

• DC or No DC is displayed depending on whether the originating router can support OSPF over demand circuits.• E or No E is displayed on whether the o

TOS 0 Metric: 1 Link connected to: a Transit Network (Link ID) Designated Router address: 192.68.142.2 (Link Data) Router Interface addr

• EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationThe following describes output for the show ip ospf process-i

Link State ID: 192.68.32.0Advertising Router: 1.1.1.10LS Seq Number: 0x80000016Checksum: 0x987cLength: 28Network Mask: /24 TOS: 0 Metric: 1LS age: 7

Command Modes• EXEC• EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationThe following describes output for the sho

Process ID 1, Router ID 192.168.253.2, Network Type BROADCAST, Cost: 1 Transmit Delay is 1 sec, State DROTHER, Priority 1 Designated Router (ID) 1

ExampleFTOS#show ip ospf 34 neighborNeighbor ID Pri State Dead Time Address Interface Area20.20.20.7 1 FULL/DR 00:00:32 182.10.10.3 Te 0/0

• For a 10-Gigabit Ethernet interface, enter the keyword tengigabitethernet followed by slot/port numbers. The port range is 0 to 63.• For a 40-Gigabi

show ip ospf statisticsDisplay OSPF statistics.S5000Syntaxshow ip ospf process-id statistics global | [interface name {neighbor router-id}]Parametersp

LSReq Number of link state request packets.LSUpd Number of link state update packets.LSAck Number of link state acknowledgement packets.TxQ-Len The tr

Unknown-Pkt Received packet is not an OSPF packet.ExampleFTOS#show ip ospf 1 statistics globalOSPF Packet Count Total Error Hello DDiscr LSReq LSUpd

TX 62 2 1 0 0 Dead-Timer 37, Transmit-Timer 0 LSU-Q-Len 0, LSU-Q-Wmark 0 LSR-Q-Len 0, LSR-Q-Wmark 1Related Command

Parametersprocess-idEnter the OSPF Process ID to show a specific process. If no Process ID is entered, command applies only to the first OSPF process.

Run as... This line states the nature of the virtual link.Transit area... This line identifies the area through which the virtual link was created, th

Defaults Not configured.Command Modes ROUTER OSPFCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationThe area range command summa

timers throttle lsa allConfigure LSA transmit intervals.S5000Syntaxtimers throttle lsa all {start-interval | hold-interval | max-interval}To return to

Defaults 1000 msecCommand Modes ROUTER OSPFCommand HistoryVersion 9.0(1.3) Introduced on the S5000.968

38Policy-based Routing (PBR)Policy-based routing (PBR) allows you to apply routing policies to specific interfaces. To enable PBR, create a redirect l

ip telnet server enableEnable the Telnet server on the switch.S5000Syntaxip telnet server enableDefaults EnabledCommand Modes CONFIGURATIONCommand His

ip redirect-groupApply a redirect list (policy-based routing) on an interface. You can apply multiple redirect lists to an interface by entering this

Parametersredirect-list-nameEnter the name of a redirect list.Defaults noneCommand Modes CONFIGURATIONCommand HistoryVersion 9.0(1.3) Introduced on th

bit(OPTIONAL) For TCP protocol type only, enter one or a combination of the following TCP flags:• ack = acknowledgement• fin = finish (no more data fr

ip-protocol-numberEnter a number from 0 to 255 for the protocol identified in the IP protocol header.protocol-typeEnter one of the following keywords

seqConfigure a filter with an assigned sequence number for the redirect list.S5000Syntaxseq sequence-number {permit | redirect {ip-address} {ip-protoc

operator(OPTIONAL) For TCP and UDP parameters only. Enter one of the following logical operand:• eq = equal to• neq = not equal to• gt = greater than•

Po 3FTOS#976

39PIM-Sparse Mode (PIM-SM)FTOS supports protocol-independent multicast (PIM) commands on the S5000 switch.This chapter contains the following sections

Parametersgroup (OPTIONAL) Enter the multicast group address in dotted decimal format (A.B.C.D).Command Modes EXEC PrivilegeCommand HistoryVersion 9.0

Parametersbsr (OPTIONAL) Enter the keyword bsr to view PIM Candidate RP/BSR activities.events (OPTIONAL) Enter the keyword group to view PIM messages

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Related Commandstelnet – telnets to another device.ip tftp source-interfaceAssign an interface

Command HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationThis command is applied to the subsequent PIM-BSR. Existing BSR advertisement

ip pim dr-priorityChange the designated router (DR) priority for the interface.S5000Syntaxip pim dr-priority priority-valueTo remove the DR priority v

Defaults as aboveCommand Modes CONFIGURATIONCommand HistoryVersion 9.0(1.3) Introduced on the S5000.Usage InformationWhen an NSF-capable router comes

ip pim ingress-interface-mapWhen the Dell Networking system is the RP, statically map potential incoming interfaces to (*,G) entries to create a lossl

ip pim query-intervalChange the frequency of PIM Router-Query messages.S5000Syntaxip pim query-interval secondsTo return to the default value, use the

ip pim rp-addressConfigure a static PIM rendezvous point (RP) address for a group or access-list.S5000Syntaxip pim rp-address address {group-address g

• For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.• For a 10-Gigabit Ethernet interface, ent

Usage InformationBecause PIM-SM snooping is used in a Layer 2 environment, PIM-SM snooping and PIM multicast routing are mutually exclusive. PIM-SM sn

ip pim sparse-mode sg-expiry-timerEnable expiry timers globally for all sources, or for a specific set of (S,G) pairs defined by an access list.S5000S

Usage InformationThis is applicable to last hop routers on the shared tree towards the rendezvous point (RP).no ip pim snooping dr-floodDisable the fl

lineEnable and configure console and virtual terminal lines to the system. This command accesses LINE mode, where you can set the access conditions fo

Command Modes• EXEC• EXEC PrivilegeCommand HistoryVersion 9.0(1.3) Introduced on the S5000.ExampleFTOS#show ip pim bsr-routerPIMv2 Bootstrap informati

Field DescriptionNbr Count Displays the number of PIM neighbors discovered over this interface.Query Intvl Displays the query interval for Router Quer

Ver Displays the PIM version number.• v2 = PIM version 2DR prio/Mode Displays the Designated Router priority and the mode.• 1 = default Designated Rou

Example (Mapping)FTOS#sh ip pim rp mappingGroup(s): 224.0.0.0/4 RP: 165.87.20.4, v2 Info source: 165.87.20.5, via bootstrap, priority 0 Uptim

DR Prio Displays the Designated Router priority value configured on the interface (ip pim dr-priority command).DR Displays the IP address of the Desig

• 1 = default Designated Router priority (use the ip pim dr-priority command)• DR = Designated Router• S = Sparse modeExampleFTOS#show ip pim snooping

uptime Displays the amount of time the entry has been in the PIM multicast route table.expires Displays the amount of time until the entry expires and

flags: j Incoming interface: Vlan 2, RPF neighbor 0.0.0.0 Outgoing interface list: TenGigabitEthernet 4/11 Upstream Port -/- TenGigabitEthe

Data path event summary: 0 no-cache messages received 0 last-hop switchover messages received 0/0 pim-assert messages sent/received

• L = local to the multicast group• P = route was pruned• R = the forwarding entry is pointing toward the RP• F = FTOS is registering this entry for a