being copied. If there isnt enough free space, the copy attempt will fail and an error message is generated. Only image files, the boot.cfg file, and the certs.pem file should be kept in the working directory.
This command will not work if the switch is running from the certified directory. To view where the
switch is running from, see the show running-directory command.
-> copy working certified -> copy working certified flash-synchro

page 1-10

copy working certified Copies the running primary RAM version of the CMM software to the working primary flash. Or copy the startup primary flash version of the CMM software to the working primary flash. Copies the startup primary flash version of the CMM software to the startup secondary flash version of the CMM software.

page 1-11

Copies the certified directory version of the primary CMM software to the certified directory of the secondary CMM. [configure] copy flash-synchro
This command is used to synchronize the certified directories of the primary and secondary CMMs.
The two CMMs must be in synchronization if a fail over occurs, otherwise switch performance is lost.
If the switch is part of an OmniSwitch 6800 Series stack or an OmniSwitch 6850 Series stack, all
switches in the stack are updated with the primary CMM files.
-> copy flash-synchro -> configure copy flash-synchro
copy working certified Copies the running primary RAM version of the CMM software to the working primary flash. Or copies the startup primary flash version of the CMM software to the working primary flash. Copies the working primary flash version of the CMM software to certified primary flash. Or copies the working primary flash version of the CMM software to startup secondary flash.

page 1-12

takeover
The current secondary CMM assumes the role of primary CMM. takeover [with-fabric]
with-fabric Performs a complete CMM reload.
This command causes the secondary CMM to take over the functions of the primary CMM. After this
command, the old primary CMM is the new secondary CMM.
Before issuing the takeover command, be sure that the secondary CMM has all software (i.e., image
and configuration files) required to continue CMM operations.
For information on synchronizing the primary and secondary CMM software before issuing the
takeover command, see the copy flash-synchro command.
When the CMM modules switch primary and secondary roles, the console session to the new primary

Displays current inline power status and related statistics for all PoE ports in a specified slot. show lanpower slot
slot The slot for which current inline power status and related statistics are to be displayed.
-> show lanpower 1 Port Maximum(mW) Actual Used(mW) Status Priority On/Off ----+-----------+---------------+-----------+---------+-----0 Undefined Low OFF 0 Undefined Low OFF 0 Undefined Low OFF 0 Undefined Low OFF 0 Undefined Low OFF 0 Undefined Low OFF 0 Undefined Low OFF 0 Undefined Low OFF 0 Undefined Low OFF 0 Undefined Low OFF 0 Undefined Low OFF 0 Undefined Low OFF 0 Undefined Low OFF 0 Undefined Low OFF 0 Undefined Low OFF 0 Undefined Low OFF 0 Undefined Low OFF 0 Undefined Low OFF 0 Undefined Low OFF 0 Undefined Low OFF 0 Undefined Low OFF 0 Undefined Low OFF 0 Undefined Low OFF 0 Undefined Low OFF
(Output continued on next page)

page 4-18

18000 18000
Undefined Undefined Undefined Undefined Undefined Undefined Undefined Undefined Undefined Undefined Undefined Undefined Undefined Undefined Undefined Undefined Undefined Undefined Undefined Undefined Undefined Undefined Undefined Undefined
Low Low Low Low Low Low Low Low Low Low Low Low Low Low Low Low Low Low Low Low Low Low Low Low
OFF OFF OFF OFF OFF OFF OFF OFF OFF OFF OFF OFF OFF OFF OFF OFF OFF OFF OFF OFF OFF OFF OFF OFF
Slot 1 Max Watts Watts Total Power Budget Remaining 380 Watts Total Power Budget Available 1 Power Supplies Available
output definitions Port Maximum (mW) A PoE port for which current status and related statistics are being displayed. The current maximum amount of power allocated to the corresponding PoE port, in milliwatts. The default value is 15400. To change this setting, use the lanpower power command. The actual amount of power being used by an attached device (if applicable), in milliwatts. If no device is attached to the corresponding port, this row displays a value of 0. Displays the current operational status. Options include Powered On, Powered Off, and Undefined.

Actual Used (mW)

Status

page 4-19

output definitions (continued) Priority The current priority level for the corresponding PoE port. Options include Critical, High, and Low. Critical should be reserved for ports that have mission-critical devices attached, and therefore require top (i.e., critical) priority. In the event of a power management issue, inline power to critical ports is maintained as long as possible. High indicates ports that have important, but not mission-critical, devices attached. If other ports in the chassis have been configured as critical, inline power to high-priority ports is given second priority. Low priority is for ports that have low-priority devices attached. In the event of a power management issue, inline power to low-priority ports is interrupted first (i.e., before critical and high-priority ports). The default value is Low. Priority levels can be changed using the lanpower priority command. On/Off Displays whether a port has been manually turned on or off by the user. ON indicates that the port has been turned on by the user via the lanpower start command. OFF indicates that the port has been turned off by the user via the lanpower stop command. The maximum watts allocated to the corresponding slot. The maximum watts value for a slot can be changed using the lanpower maxpower command. The amount of power budget remaining that can be allocated for PoE modules. If the total power budget remaining is exceeded, a power error will occur and the switchs chassis management software will begin shutting down power to PoE ports according to their priority levels.

bridge mode bridge cist priority bridge msti priority bridge 1x1 protocol Selects the Spanning Tree operating mode (flat or 1x1) for the switch. Explicit command for changing the Spanning Tree priority for the CIST instance when the switch is operating in either the flat or 1x1 mode. Explicit command for changing the Spanning Tree priority for an MSTI when the switch is operating in either the flat or 1x1 mode. Explicit command for changing the Spanning Tree priority for a VLAN instance when the switch is operating in either the flat or 1x1 mode.
vStpInsTable vStpInsNumber vStpInsMode vStpInsPriority vStpInsBridgeAddress

page 16-22

bridge cist priority
Configures the Spanning Tree priority value for the flat mode Common and Internal Spanning Tree (CIST) instance. Bridge priority is used to determine which bridge the Spanning Tree algorithm designates as the root bridge. bridge cist priority priority
priority A bridge priority value within the range of 065535. Do not use commas in the value. If MSTP is the active protocol on the switch, then a bridge priority value that is a multiple of 4096 is required.
By default, the bridge priority value is set to 32768.
The lower the bridge priority number, the higher the priority that is associated with the bridge. This command is an explicit Spanning Tree command that only applies to the CIST instance regard-
less of which operating mode (flat or 1x1) or protocol is active on the switch.
If the switch is running in 1x1 mode when this command is used, the specified priority value is not
active for the CIST instance until the operating mode for the switch is changed to the flat mode.
In regards to the priority for a Multiple Spanning Tree Instance (MSTI), only the four most significant

bits are used.

-> bridge mode flat -> bridge cist priority 16384 -> bridge cist priority 53800 ERROR: Valid bridge priority values are multiples of 4096: 0, 4096, 8192, 12288, 16384. 61440 -> bridge mode 1x1 -> bridge cist priority 16384 -> bridge cist priority 12288

page 16-23

bridge mode bridge priority bridge msti priority bridge 1x1 protocol Selects the Spanning Tree operating mode (flat or 1x1) for the switch. Implicit command for changing the Spanning Tree priority for the flat mode CIST instance or a 1x1 mode VLAN instance. Explicit command for changing the Spanning Tree priority for an MSTI when the switch is operating in either the flat or 1x1 mode. Explicit command for changing the Spanning Tree priority for a VLAN instance when the switch is operating in either the flat or 1x1 mode.

learnedPortSecurityTable lpsLoMacRange lpsHiMacRange lpsRowStatus

page 18-14

Selects the method for handling traffic that does not comply with LPS restrictions for the specified port(s). port-security slot/port[-port2] violation {restrict | shutdown}
slot/port -port2 restrict shutdown The slot number for the module and the physical port number on that module (e.g., 3/1 specifies port 1 on slot 3). The last port number in a range of ports you want to configure on the same slot (e.g, 3/1-4 specifies ports 1-4 on slot 3). Filters (blocks) unauthorized traffic but allows traffic that complies with LPS restrictions to forward on the port. The port is disabled when the port receives unauthorized traffic; no traffic is allowed on the port.
By default, the security violation mode is set to restrict when LPS is enabled on the port.
When a traffic violation occurs on an LPS port, notice is sent to the Switch Logging task. If the violation mode is set to restrict, unauthorized source MAC addresses are not learned in the LPS
table but are still recorded in the source learning MAC address table with a filtered operational status. This allows the user to view MAC addresses that were attempting unauthorized access to the LPS port.
When an LPS port is disabled (shutdown) or unauthorized traffic received on the port is filtered
(restrict) due to a security violation, use the port-security release command to restore the port to normal operation.
-> port-security 2/14 violation restrict -> port-security 4/10-15 violation shutdown

page 18-15

port-security port-security release port-security maximum port-security mac port-security mac-range port-security shutdown Enables or disables Learned Port Security (LPS) on the switch port(s). Releases a port that was shut down due to an LPS violation Specifies the maximum number of source MAC addresses that an LPS port(s) is allowed to learn. Configures a single authorized source MAC address for a port that belongs to a specified VLAN. Configures a list of authorized MAC addresses by defining a range of addresses allowed on the port. Configures the amount of time in minutes to allow source learning on all LPS ports. Also, enables or disables the conversion of dynamic MAC addresses to static MAC addresses on LPS ports.
learnedPortSecurityTable lpsViolationOption

page 18-16

port-security release
Releases a port that was shut down due to a Learned Port Security (LPS) violation. The specified port resumes normal operation without having to manually reset the port and/or the entire module. port-security slot/port release
slot/port The slot number for the module and the physical port number on that module (e.g., 3/1 specifies port 1 on slot 3). Use a hyphen to specify a range of ports on the same module (e.g. 3/1-16).
This command restores the port to the same operational state it was in before the shutdown. This

output definitions Slot/Port Operational Status Last Time Link Changed Number of Status Change Type MAC address Bandwidth Duplex Autonegotiation Long Accept Runt Accept Long Frame Size Runt Size Bytes Received Rx Unicast Frames Rx Broadcast Frames Rx M-cast Frames Rx Undersize Frames Rx Oversize Frames Interface slot and port. Interface status (up/down). The last time the configuration for this interface was changed. The total number of times that the configuration of this interface has changed. Interface type (Ethernet/Fast Ethernet/Gigabit Ethernet). Interface MAC address. Bandwidth (in megabits). Duplex mode (Half/Full/Auto). The auto negotiation settings for this interface. Long Frames status (enable/disable). Runt Frames status (enable/disable). Long Frame Size (in Bytes). Runt Frame Size (in Bytes). Number of Bytes received. Number of unicast frames received. Number of broadcast frames received. Number of multicast frames received. Number of undersized frames received. Number of r oversized frames received.

page 19-78

output definitions (continued) Rx Lost Frames Rx Error Frames Rx CRC Error Frames Rx Alignments Err Bytes Xmitted Tx Unicast Frames Tx Broadcast Frames Tx M-cast Frames Tx Undersize Frames Tx Oversize Frames Tx Lost Frames Tx Collided Frames Tx Error Frames Number of Lost Frames received. Number of error frames received. Number of CRC error frames received. Number of Alignments Error frames received. Number of Bytes transmitted. Number of unicast frames transmitted. Number of broadcast frames transmitted. Number of multicast frames r transmitted. Number of undersized frames transmitted. Number of oversized frames transmitted. Number of Lost Frames transmitted. Number of collision frames received or transmitted. Number of error frames transmitted.
show interfaces hybrid accounting Displays interface accounting information (e.g., packets received/ transmitted) for combo ports.
show interfaces hybrid counters Displays interface counter information (e.g., unicast packets received/transmitted) for combo ports. show interfaces hybrid counters Displays interface error frame information (e.g., CRC errors, transit errors errors, receive errors) for combo ports. show interfaces hybrid collisions show interfaces hybrid status show interfaces hybrid traffic Displays interface collision information (e.g., number of collisions, number of retries) for combo ports. Displays the interface line settings (e.g., speed, mode) for combo ports. Displays interface traffic statistics (input/output bytes and packets) for combo ports.

page 19-79

page 19-80
show interfaces hybrid status

alaGvrpTransparentSwitching

page 22-5

gvrp maximum vlan
Configures the maximum number of dynamic VLANs that can be created by GVRP. gvrp maximum vlan vlanlimit
vlanlimit The maximum number of VLANs to be created by GVRP. The valid range is 324094.
parameter vlanlimit default 256
This command can be used even when GVRP is not enabled on the switch. However, GVRP should be
enabled on the switch for creating dynamic VLANs.
If the VLAN limit to be set is less than the current number of dynamically learnt VLANs, then the new
configuration will take effect only after the GVRP is disabled and enabled again on the switch. If this operation is not done, the VLANs learnt earlier will be maintained.
-> gvrp maximum vlan 100

alaGvrpMaxVlanLimit

page 22-6

gvrp registration

Configures the GVRP registration mode for a specific port or an aggregate of ports. gvrp registration {normal | fixed | forbidden} {linkagg agg_num | port slot/port} no gvrp registration {linkagg agg_num | port slot/port}
normal Specifies that both registration and de-registration of VLANs are allowed. VLANs can be mapped either dynamically (through GVRP) or statically (through management application) on such a port. Specifies that only static mapping of VLANs is allowed on the port but de-registration of previously created dynamic or static VLANs is not allowed. Specifies that dynamic VLAN registration or de-registration is not allowed on the port. Any dynamic VLAN created earlier will be deregistered. The number corresponding to the aggregate group. The slot number for the module and the physical port number on that module (e.g., 3/1 specifies port 1 on slot 3).

forbidden

agg_num slot/port
parameter normal | fixed | forbidden default normal
Use the no form of this command to set the registration mode to the default value. GVRP should be enabled on the port before configuring the GVRP registration mode. The registration mode for the default VLANs of all the ports in the switch will be set to fixed. To use the agg_num parameter, the link aggregate group should be created and enabled.

show ip dos arp-poison Displays the number of attacks detected for configured ARP poison restricted-addresses.
alaDoSArpPoisonTable alaDoSArpPoisonIpAddr alaDosArpPoisonRowStatus

page 27-68

arp filter
Configures an ARP filter that will determine if ARP Request packets containing a specific IP address are processed by the switch or discarded. arp filter ip_address [mask ip_mask] [vid] [sender | target] [allow | block] no arp filter ip_address
ip_address ip_mask The IP address to use for filtering ARP packet IP addresses. An IP mask that identifies which part of the ARP packet IP address is examined for filtering (e.g. mask 255.0.0.0 filters on the first octet of the ARP packet IP address). A VLAN ID that specifies that only ARP packets for a specific VLAN are filtered. The sender IP address in the ARP packet is used for ARP filtering. The target IP address in the ARP packet is used for ARP filtering. ARP packets that meet filter criteria are processed. ARP packets that meet filter criteria are discarded.
vid sender target allow block
parameter vid ip_mask sender | target allow | block default 0 (no VLAN) 255.255.255.255 target block
Use the no form of this command to delete an ARP filter. If there are no filters configured for the switch, all ARP Request packets received are processed. Up to 200 filters are allowed on each switch. If sender or target IP address in an ARP Request packet does not match any filter criteria, the packet is

processed by the switch.

ARP filtering is generally used in conjunction with the Local Proxy ARP application; however, ARP
filtering is available for use on its own and/or with other applications.

page 27-69

-> -> -> -> -> arp filter 171.11.1.1 arp filter 172.0.0.0 mask 255.0.0.0 arp filter 198.0.0.0 mask 255.0.0.0 sender arp filter 198.172.16.1 vlan 200 allow no arp filter 171.11.1.1
clear arp filter ip interface Clears all ARP filters from the filter database. Enables or disables the Local Proxy ARP feature on an IP interface. When enabled, all traffic within the VLAN is routed. ARP requests return the MAC address of the IP router interface. Displays the ARP filter configuration.

show arp filter

alaIpArpFilterTable alaIpArpFilterIpAddr alaIpArpFilterIpMask alaIpArpFilterVlan alaIpArpFilterMode alaIpArpFilterType

page 27-70

clear arp filter
Clears the ARP filter database of all entries. clear arp-cache

By default, IP source filtering is disabled for the port.
IP source filtering applies only to ports that are associated with a VLAN that has DHCP Snooping
The DHCP Snooping binding table is used to verify client information. If a device connected to a DHCP Snooping port with IP source filtering enabled does not have a valid
IP address lease from the trusted DHCP server, then all IP traffic for that device is blocked on the port.
Disable IP source filtering for the DHCP Snooping port to allow a device to obtain a valid IP address

lease.

Once a device obtains a valid lease or if a device already has a valid lease, then only source bound traf-

fic is allowed.

-> -> -> -> ip ip ip ip helper helper helper helper dhcp-snooping dhcp-snooping dhcp-snooping dhcp-snooping port port port port 1/24 ip-source-filtering enable 2/1-10 ip-source-filtering enable 4/8 ip-source-filtering disable 3/1-5 ip-source-filtering disable

page 30-36

ip helper dhcp-snooping ip helper dhcp-snooping vlan ip helper dhcp-snooping port ip helper dhcp-snooping port traffic-suppression Globally enables or disables DHCP Snooping for the switch. Enables or disables DHCP Snooping on a per-VLAN basis. Configures the DHCP Snooping trust mode for a port. Configures the traffic suppression status for a DHCP Snooping port.
iphelperDhcpSnoopingPortTable iphelperDhcpSnoopingPortIfIndex iphelperDhcpSnoopingPortIpSourceFiltering

page 30-37

ip helper dhcp-snooping binding
Enables or disables the DHCP Snooping binding table functionality. The binding table contains the MAC address, IP address, lease time, binding type (dynamic or static), VLAN number, and the interface information that corresponds to a local untrusted port on the switch. In addition, this command is also used to configure a static entry in the binding table. ip helper dhcp-snooping port binding {[enable | disable] | [mac_address port slot/port address ip_address lease-time time vlan vlan_id]} no ip helper dhcp-snooping port binding mac_address port slot/port address ip_address lease-time time vlan vlan_id
enable disable mac_address slot/port ip_address time vlan_id Enables the creation of binding table entries. Disables the creation of binding table entries. The client MAC address. The slot and port number that received the DHCP request. The IP address that the DHCP server offered to the client. The IP address lease time assigned by the DHCP server. The VLAN identification number (14094) of the VLAN to which the client belongs.

page 32-39

show ipx type-20-propagation
Displays the current status of Type 20 packet forwarding. show ipx type-20-propagation
-> show ipx type-20-propagation VLAN ------Type 20 Packet Forwarding -----------------------Enabled Enabled
output definitions VLAN Type 20 Packet Forwarding VLAN on which Type 20 packet forwarding is enabled/disabled. Global indicates a global filter. Type 20 packet forwarding status.
ipx type-20-propagation Enables/disables Type 20 packet forwarding.

page 32-40

show ipx packet-extension
Displays the current status of the extended RIP/SAP packet feature. show ipx packet-extension
-> show ipx packet-extension VLAN ----Extended RIP/SAP Packets -----------------------Disabled Enabled
output definitions VLAN Extended RIP/SAP Packets VLAN on which packet extension is enabled/disabled. Global indicates a global filter. Packet extension status.
ipx packet-extension Enables/disables the extended RIP/SAP packets.

page 32-41

show ipx timers
Displays the current RIP and SAP timer values. show ipx timers
-> show ipx timers VLAN ------global 110 RIP Timer(secs) SAP Timer(secs) --------------- --------------45 120
output definitions VLAN RIP Timer SAP Timer VLAN on which RIP/SAP timer is set. Global indicates a global timer setting. RIP timer value, in seconds (default is 60). SAP timer value, in seconds (default is 60).
ipx timers Configures the frequency of RIP/SAP updates.

page 32-42

page 32-43

page 32-44

VRRP Commands
The Virtual Router Redundancy Protocol (VRRP) eliminates the single point of failure in a default route environment. VRRP specifies an election protocol that dynamically assigns responsibility for a virtual router to one of the VRRP/VRRP3 routers on the LAN. The VRRP/VRRP3 router, which controls the IP/ IPv6 address associated with a virtual router is called the master router, and forwards packets to that IP/ IPv6 address. If the master router becomes unavailable, the highest priority backup router will transition to the master state. The Alcatel-Lucent implementation of VRRP also supports the collective management of virtual routers on a switch. Note. VRRP3 does not support the collective management functionality. The VRRP and VRRP3 commands comply with RFC 2787 and RFC 3768, respectively. MIB information is as follows: Filename: Module: Filename: Module: Filename: Module: IETF-VRRP.MIB VRRP-MIB AlcatelIND1VRRP.MIB ALCATEL-IND1-VRRP-MIB AlcatelIND1VRRP3.MIB ALCATEL-IND1-VRRP3-MIB

page 33-1

The VRRP CLI commands are listed here: vrrp vrrp address vrrp track vrrp track-association vrrp trap vrrp delay vrrp interval vrrp priority vrrp preempt vrrp all vrrp set vrrp group vrrp group all vrrp group set vrrp group-association vrrp3 vrrp3 address vrrp3 trap vrrp3 track-association show vrrp show vrrp statistics show vrrp track show vrrp track-association show vrrp group show vrrp group-association show vrrp3 show vrrp3 statistics show vrrp3 track-association

Use the no form of the command to remove a destination UDP port from a condition; however, at least
The same condition cannot specify a destination UDP port with a service or service group. IP port protocol types cannot be mixed in the same condition; ports must be either TCP or UDP. Use this condition in combination with the IPv6 condition (policy condition ipv6) to configure IPv6
-> policy condition cond4 destination udp port 137-138 -> policy condition cond5 ipv6 destination udp port 140 -> policy condition cond4 no destination udp port

page 46-65

page 46-66
policy condition ethertype
Configures an ethertype value to use for traffic classification. policy condition condition_name ethertype etype policy condition condition_name no ethertype
condition_name etype The name of the condition. The ethertype value, in the range 153665535 or 0x6000xffff hex.
Use the no form of this command to remove an ethertype value from a condition; however, at least one
Enter a numeric or equivalent hex value for the etype.
-> policy condition cond12 ethertype 8137
policy condition qos apply show policy condition Creates a policy condition. Applies configured QoS and policy settings to the current configuration. Shows information about policy conditions configured on the switch.

page 46-67

alaQoSConditionTable alaQoSConditionName alaQoSConditionEthertype alaQoSConditionEthertypeStatus alaQoSAppliedConditionTable alaQoSAppliedConditionName alaQoSAppliedConditionEthertype alaQoSAppliedConditionEthertypeStatus

page 46-68

policy condition established
Configures an established TCP connection as a policy condition. A connection is considered established if the ack or rst flags in the TCP header of the packet are set. policy condition condition_name established policy condition condition_name no established
condition_name The name of the condition.
Use the no form of this command to remove established from a condition; however, at least one classi-
fication parameter must be associated with a condition.
When an initial TCP connection packet is received only the syn flag is set. As a result, TCP packets are
only examined if they are not the starting packet.
Typically this condition is used in combination with source ip, destination ip, source port, destina-
tion port, source TCP port, or destination TCP port conditions.
The source mac, destination mac, and ethertype conditions cannot be combined with the estab-
lished condition parameter.
Note that even though established can be used with most action parameters, it is mainly intended for

ACL use.

-> policy condition cond2 source ip 192.168.5.10 established -> policy condition cond3 destination ip 10.255.11.40

using only ipv6 multicast vlan vid zapping (e.g., ipv6 multicast vlan 2 zapping).
-> -> -> -> -> -> ipv6 ipv6 ipv6 ipv6 ipv6 ipv6 multicast multicast multicast multicast multicast multicast zapping enable zapping disable zapping vlan 2 zapping enable vlan 2 zapping disable vlan 2 zapping

page 48-67

alaMld alaMldZapping alaMldVlan alaMldVlanZapping

page 48-68

ipv6 multicast proxying
Enables or disables MLD proxying on the specified VLAN or on the system if no VLAN is specified. ipv6 multicast [vlan vid] proxying [enable | disable]
vid enable disable VLAN on which to apply the configuration. Enable MLD proxying. Disable MLD proxying.
If the MLD proxying is already enabled on the system, then the VLAN configuration will override the
MLD proxying refers to processing membership information on behalf of client systems and reporting
You can also restore the MLD proxying to its default (i.e., disabled) setting on the system if no VLAN
is specified, by using only ipv6 multicast proxying (e.g., ipv6 multicast proxying).
You can also restore the MLD proxying to its default (i.e., disabled) setting on the specified VLAN, by
using only ipv6 multicast vlan vid proxying (e.g., ipv6 multicast vlan 2 proxying).
-> -> -> -> -> -> ipv6 ipv6 ipv6 ipv6 ipv6 ipv6 multicast multicast multicast multicast multicast multicast proxying enable proxying disable proxying vlan 2 proxying enable vlan 2 proxying disable vlan 2 proxying

page 48-69

alaMld alaMldProxying alaMldVlan alaMldVlanProxying

page 48-70

show ip multicast
Displays the IP Multicast Switching and Routing status and the general configuration parameters on the specified VLAN or on the system if no VLAN is specified. show ip multicast [vlan vid]
By default the status and general configuration parameters for the system.
Specify a VLAN ID to display the configuration information for an individual VLAN.
-> show ip multicast Status: Enabled Querying: Disabled Proxying Disabled Spoofing: Disabled Zapping: Disabled Querier Forwarding: Disabled Version: 2 Robustness: 2 Query Interval (seconds): 125 Query Response Interval (tenths of seconds): 100 Last Member Query Interval(tenths of seconds):10 Unsolicited Report Interval(seconds): 1 Router Timeout (seconds): 90 Source Timeout (seconds): 30

page 48-71

-> show ip multicast vlan 1 Status: Enabled Querying: Disabled Proxying Disabled Spoofing: Disabled Zapping: Disabled Querier Forwarding: Disabled Version: 2 Robustness: 2 Query Interval (seconds): 125 Query Response Interval (tenths of seconds): 100 Last Member Query Interval(tenths of seconds):10 Unsolicited Report Interval(seconds): 1 Router Timeout (seconds): 90 Source Timeout (seconds): 30

otherwise to promote the sale, use or other dealing in this Software without specific, written prior permission.
5 Due credit should be given to the OpenLDAP Project. 6 The OpenLDAP Foundation may revise this license from time to time. Each revision is distinguished
by a version number. You may use the Software under terms of this license revision or under the terms of any subsequent revision of the license. THIS SOFTWARE IS PROVIDED BY THE OPENLDAP FOUNDATION AND CONTRIBUTORS AS IS AND ANY EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OPENLDAP FOUNDATION OR ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. OpenLDAP is a trademark of the OpenLDAP Foundation. Copyright 1999-2000 The OpenLDAP Foundation, Redwood City, California, USA. All Rights Reserved. Permission to copy and distributed verbatim copies of this document is granted.

page A-26

C. Linux
Linux is written and distributed under the GNU General Public License which means that its source code is freely-distributed and available to the general public.
D. GNU GENERAL PUBLIC LICENSE: Version 2, June 1991
Copyright (C) 1989, 1991 Free Software Foundation, Inc. 675 Mass Ave, Cambridge, MA 02139, USA Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed.

Preamble

The licenses for most software are designed to take away your freedom to share and change it. By contrast, the GNU General Public License is intended to guarantee your freedom to share and change free software--to make sure the software is free for all its users. This General Public License applies to most of the Free Software Foundations software and to any other program whose authors commit to using it. (Some other Free Software Foundation software is covered by the GNU Library General Public License instead.) You can apply it to your programs, too. When we speak of free software, we are referring to freedom, not price. Our General Public Licenses are designed to make sure that you have the freedom to distribute copies of free software (and charge for this service if you wish), that you receive source code or can get it if you want it, that you can change the software or use pieces of it in new free programs; and that you know you can do these things. To protect your rights, we need to make restrictions that forbid anyone to deny you these rights or to ask you to surrender the rights. These restrictions translate to certain responsibilities for you if you distribute copies of the software, or if you modify it. For example, if you distribute copies of such a program, whether gratis or for a fee, you must give the recipients all the rights that you have. You must make sure that they, too, receive or can get the source code. And you must show them these terms so they know their rights. We protect your rights with two steps: (1) copyright the software, and (2) offer you this license which gives you legal permission to copy, distribute and/or modify the software. Also, for each authors protection and ours, we want to make certain that everyone understands that there is no warranty for this free software. If the software is modified by someone else and passed on, we want its recipients to know that what they have is not the original, so that any problems introduced by others will not reflect on the original authors reputations. Finally, any free program is threatened constantly by software patents. We wish to avoid the danger that redistributors of a free program will individually obtain patent licenses, in effect making the program proprietary. To prevent this, we have made it clear that any patent must be licensed for everyones free use or not licensed at all. The precise terms and conditions for copying, distribution and modification follow.

link-state protocol OSPF 34-1, 35-1, 36-1 loopback messages 24-27 LPS 18-1 learn-trap-threshold 18-19 max-filtering 18-8 maximum 18-6 shutdown 18-4
MAC address table duplicate MAC addresses 17-3 MAC address VLAN rule 20-16, 20-18 MAC addresses aging time 16-41, 16-43, 16-45, 17-6 dynamic link aggregation 12-17, 12-26, 12-32 learned 17-2 statically assigned 17-2, 17-3, 17-5 Maintenance Association create 24-7 modify 24-13 Maintenance End Point see MEP Maintenance Intermediate Point see MIP Management Domain display all information 24-4, 24-6, 24-34, 24-35, 24-38 display specific information 24-4, 24-6, 24-37 MEP 24-17 administrative state 24-13, 24-19 MHF value 24-5, 24-9 MLD default 48-41, 48-91 group entry 48-47, 48-94, 48-100, 48-102 last member query interval 48-51, 48-91 neighbor entry 48-43, 48-95 querier entry 48-45, 48-97 query interval 48-49, 48-91 query response interval 48-53, 48-55, 48-91 querying 48-61, 48-91 robustness variable 48-63, 48-91 router timeout 48-57, 48-91 source timeout 48-59, 48-91 spoofing 48-65, 48-91 zapping 48-67, 48-69, 48-91 mobile port properties authentication 20-29, 20-31, 20-33, 20-34, 20-35 BPDU ignore 20-28, 20-29 default VLAN membership 20-32 restore default VLAN 20-30 status 20-39 mobile ports 20-28 trusted ports 45-5 VLAN rules 20-1 modules power 2-24 reloading 2-20, 2-22 temperature 2-25
Kadvrout.img file 39-2, 39-3
LACP see dynamic link aggregation line speed 19-42 Link Trace Messages 24-29 priority value 24-23

Index-29

mulitcast routing show routing information 40-11 multicast address boundaries 40-7 multicast routing boundary 40-3 datagram ttl threshold 40-6 interface ttl 40-5, 40-6 ipv6 next-hop inforamtion 40-19
Network Interface (NI) modules reloading 2-14, 2-17, 2-18 Network Security 54-1 anomalies 54-1 group anomaly 54-4 show netsec configurations 54-16 show traffic statistics 54-10 NTP 5-1 broadcast delay 5-8 key 5-9 operation 5-6 server 5-2 server unsynchronization 5-5 synchronization 5-4
policies save option 46-6 policy condition dscp 46-90 source vlan 46-100 policy servers displaying information about SSL 47-4 port mapping 26-2 port mobility see mobile ports port status 19-100 port VLAN rule 20-26 prompt 6-11 protocol VLAN rules 20-24

priority A bridge priority value within the range of 065535. Do not use commas in the value. If MSTP is the active protocol on the switch, then a bridge priority value that is a multiple of 4096 is required.
By default, the bridge priority value is set to 32768.
The lower the bridge priority number, the higher the priority that is associated with the bridge. This command is an explicit Spanning Tree command that only applies to the CIST instance regard-
less of which operating mode (flat or 1x1) or protocol is active on the switch.
If the switch is running in 1x1 mode when this command is used, the specified priority value is not
active for the CIST instance until the operating mode for the switch is changed to the flat mode.
In regards to the priority for a Multiple Spanning Tree Instance (MSTI), only the four most significant

bits are used.

-> bridge mode flat -> bridge cist priority 16384 -> bridge cist priority 53800 ERROR: Valid bridge priority values are multiples of 4096: 0, 4096, 8192, 12288, 16384. 61440 -> bridge mode 1x1 -> bridge cist priority 16384 -> bridge cist priority 12288

page 15-23

bridge mode bridge priority bridge msti priority bridge 1x1 protocol Selects the Spanning Tree operating mode (flat or 1x1) for the switch. Implicit command for changing the Spanning Tree priority for the flat mode CIST instance or a 1x1 mode VLAN instance. Explicit command for changing the Spanning Tree priority for an MSTI when the switch is operating in either the flat or 1x1 mode. Explicit command for changing the Spanning Tree priority for a VLAN instance when the switch is operating in either the flat or 1x1 mode.
vStpInsTable vStpInsNumber vStpInsPriority vStpInsBridgeAddress

page 15-24

bridge msti priority
Configures the bridge priority value for an Multiple Spanning Tree Instance (MSTI). Bridge priority is used to determine which bridge the Spanning Tree algorithm designates as the root bridge. bridge mist msti_id priority priority

Man. Mode

Release 5.1.6 and 5.3.1; command was introduced. Release 6.1.3; fields added.

page 15-145

show spantree ports show spantree msti ports Implicit command for displaying Spanning Tree port information for the flat mode CIST instance or a 1x1 mode VLAN instance. Explicit command for displaying Spanning Tree port information for an MSTI when the switch is operating in the 1x1 or flat Spanning Tree mode. Explicit command for displaying Spanning Tree port information for a VLAN instance when the switch is operating in the 1x1 or flat Spanning Tree mode.
vStpInsPortTable vStpInsPortNumber vStpInsPortPriority vStpInsPortState vStpInsPortEnable vStpInsPortPathCost vStpInsPortDesignatedCost vStpInsPortDesignatedBridge vStpInsPortAdminEdge vStpInsPortAutoEdge vStpInsPortRestrictedRole vStpInsPortRestrictedTcn vStpInsPortManualMode vStpInsPortRole vStpInsPrimaryPortNumber vStpInsPortAdminConnectionType vStpInsPortOperConnectionType

page 15-146

Displays Spanning Tree port information for a flat mode Multiple Spanning Tree Instance (MSTI). show spantree msti [msti_id] ports [forwarding | blocking | active | configured]
msti_id forwarding blocking active configured An existing MSTI ID number (0-4094). Displays Spanning Tree operational port parameters for ports that are forwarding for the CIST instance. Displays Spanning Tree operational port parameters for ports that are blocked for the CIST instance. Displays a list of active ports associated with the specified instance. Displays Spanning Tree administrative port parameters for the CIST instance.
parameter msti_id forwarding | blocking | active | configured default all MSTIs all ports
If an msti_id number is not specified, this command displays the Spanning Tree port operational status,
path cost, and role values for all associated MSTIs.
This is an explicit Spanning Tree command that displays Spanning Tree port information for an MSTI
regardless of which mode (1x1 or flat) is active on the switch.
not active in this mode. In addition, if MSTP is not the selected flat mode protocol, this command will fail.

page 15-147

-> show spantree msti ports Msti Port Oper Status Path Cost Role -----+-----+------------+---------+----0 1/1 FORW 200000 ROOT 0 1/2 DIS 0 DIS 0 1/3 DIS 0 DIS 0 1/4 DIS 0 DIS 0 1/5 DIS 0 DIS 0 1/6 DIS 0 DIS 0 1/7 DIS 0 DIS 0 1/8 DIS 0 DIS 0 1/9 DIS 0 DIS 0 1/10 DIS 0 DIS 0 1/11 DIS 0 DIS 0 1/12 DIS 0 DIS 0 1/13 DIS 0 DIS 0 1/14 DIS 0 DIS 0 1/15 DIS 0 DIS 0 1/16 DIS 0 DIS 0 1/17 DIS 0 DIS 0 1/18 DIS 0 DIS 0 1/19 DIS 0 DIS 0 1/20 DIS 0 DIS 0 1/21 DIS 0 DIS 0 1/22 DIS 0 DIS 0 1/23 DIS 0 DIS 0 1/24 DIS 0 DIS 0 5/1 DIS 0 DIS 0 5/2 DIS 0 DIS 1 1/1 FORW 200000 MSTR 1 1/2 DIS 0 DIS 1 1/3 DIS 0 DIS 1 1/4 DIS 0 DIS 1 1/5 DIS 0 DIS 1 1/6 DIS 0 DIS 1 1/7 DIS 0 DIS 1 1/8 DIS 0 DIS 1 1/9 DIS 0 DIS 1 1/10 DIS 0 DIS 1 1/11 DIS 0 DIS 1 1/12 DIS 0 DIS 1 1/13 DIS 0 DIS 1 1/14 DIS 0 DIS 1 1/15 DIS 0 DIS 1 1/16 DIS 0 DIS 1 1/17 DIS 0 DIS 1 1/18 DIS 0 DIS 1 1/19 DIS 0 DIS 1 1/20 DIS 0 DIS 1 1/21 DIS 0 DIS 1 1/22 DIS 0 DIS 1 1/23 DIS 0 DIS 1 1/24 DIS 0 DIS 1 5/1 DIS 0 DIS 1 5/2 DIS 0 DIS

-> show spantree 1xports configured Spanning Tree Port Admin Configuration for Vlan 1 Port Adm Man. Config Adm Adm Aut Rstr Rstr OS8800 Port Pri St. Mode Cost Cnx Edg Edg Tcn Role 10G Opt. -----+----+----+----+-------+----+----+-----+----+----+--------1/ENA No 0 AUT No Yes No No DIS 1/ENA No 0 AUT No Yes No No DIS 1/ENA No 0 AUT No Yes No No DIS 1/ENA No 0 AUT No Yes No No DIS

page 15-155

1/5 1/6 1/7 1/8 1/9 1/10 1/11 1/12
ENA ENA ENA ENA ENA ENA ENA ENA

No No No No No No No No

AUT AUT AUT AUT AUT AUT AUT AUT
Yes Yes Yes Yes Yes Yes Yes Yes
DIS DIS DIS DIS DIS DIS DIS DIS
The following show spantree 1x1 ports configured command example applies only to the OmniSwitch 6800/6850:
-> show spantree 1x1 10-13 ports configured Spanning Tree Port Admin Configuration for Vlan 10 Port Adm Man. Config Adm Adm Aut Rstr Rstr OS8800 Port Pri St. Mode Cost Cnx Edg Edg Tcn Role 10G Opt. -----+----+----+----+-------+----+----+-----+----+----+--------1/ENA No 0 AUT No Yes No No DIS Spanning Tree Port Admin Configuration for Vlan 11 Port Adm Man. Config Adm Adm Aut Rstr Rstr OS8800 Port Pri St. Mode Cost Cnx Edg Edg Tcn Role 10G Opt. -----+----+----+----+-------+----+----+-----+----+----+-------1/ENA No 0 AUT No Yes No No DIS 1/ENA No 0 AUT No Yes No No DIS Spanning Tree Port Admin Configuration for Vlan 12 Port Adm Man. Config Adm Adm Aut Rstr Rstr OS8800 Port Pri St. Mode Cost Cnx Edg Edg Tcn Role 10G Opt. -----+----+----+----+-------+----+----+----+----+----+--------1/ENA No 0 AUT No Yes No No DIS 1/ENA No 0 AUT No Yes No No DIS Spanning Tree Port Admin Configuration for Vlan 13 Port Adm Man. Config Adm Adm Aut Rstr Rstr OS8800 Port Pri St. Mode Cost Cnx Edg Edg Tcn Role 10G Opt. -----+----+----+----+-------+----+----+----+----+----+-------------1/ENA No 0 AUT No Yes No No DIS
output definitions Port The slot number for the module and the physical port number or a logical port. If the slot number is 0, then the port number refers to a link aggregate logical port number (e.g., 0/31). The Spanning Tree priority for the port (015). The lower the number, the higher the priority. Configured through the bridge 1x1 slot/port priority command. The Spanning Tree administrative status of the port: enabled or disabled. Configured through the bridge slot/port command to enable or disable Spanning Tree on a port. The manual mode setting for the port: yes indicates that the blocking or forwarding state of the port was manually set and the port does not participate in the Spanning Tree Algorithm; no indicates that the Spanning Tree Algorithm is managing the port state. Configured through the bridge slot/port mode command. The configured path cost value for this port. Configured through the bridge 1x1 slot/port path cost command.

Use the no form of this command to delete a MAC range rule from the specified VLAN. It is only
necessary to enter the low end MAC address to identify which rule to delete; the high end MAC is not required.
ple, multicast addresses (e.g., 01:00:00:c5:09:1a) are ignored even if they fall within a specified MAC range. To allow the use of a multicast address as either the low or high end boundary MAC would cause misleading MAC range rule results.
Once a device joins a MAC range rule VLAN, then it is not eligible to join multiple VLANs even if the
device traffic matches other VLAN rules.
MAC range rules follow the same precedence as MAC address rules. MAC range rules also capture DHCP traffic, if no other DHCP rule exists that would classify the
DHCP traffic into another VLAN. Therefore, it is not necessary to combine DHCP rules with MAC range rules for the same VLAN.
-> vlan 10 mac range 00:00:39:59:0a:0c 00:00:39:59:0a:0f -> vlan 10 no mac range 00:00:39:59:0a:0c

page 19-18

vlan mac Defines a MAC address rule for an existing VLAN. Mobile ports that receive frames with a source MAC address that matches the address specified by this rule are temporarily assigned to the VLAN. Displays existing VLANs. Displays rules defined for VLANs.
vMacRangeRuleTable vMacRangeRuleLoAddr vMacRangeRuleHiAddr vMacRangeRuleVlanId vMacRangeRuleStatus

page 19-19

vlan ip
Defines an IP network address rule for an existing VLAN. If a device sends traffic that matches the IP address specified in the rule, the device and its mobile port will join the rules VLAN. Note. On an OmniSwitch 6800, IP network address rules are applied to traffic received on both mobile and fixed (non-mobile) ports. As a result, fixed port traffic that contains an IP address that is included in the IP subnet specified by the rule is dropped. However, if the IP network address rule VLAN is also the default VLAN for the fixed port, then the fixed port traffic is forwarded and not dropped. vlan vid ip ip_address [subnet_mask] vlan vid no ip ip_address [subnet_mask]
vid ip_address subnet_mask VLAN ID number (14094). IP network address (e.g., 10.0.0.0, 171.15.0.0, 196.190.254.0) Class A, B, or C subnet mask (e.g., 255.0.0.0, 255.255.0.0, or 255.255.255.0).
By default, the subnet mask is set to the default subnet mask value for the IP address class.
Use the no form of this command to delete an IP network address rule from the specified VLAN. Network address rules take precedence behind DHCP, binding, and MAC address rules. Note that on an OmniSwitch 6800 when the contents of a mobile port frame matches the values speci-

ip_address interface_name value 32-bit IP address assigned to the interface. This parameter is not supported in the 6.2.1 release. The name of the interface. Metric value. Valid range is 115.
When you configure a metric for a RIP interface, this metric cost is added to the metric of the incoming route.
-> ip rip interface 172.22.2.115 metric 2

page 29-9

ip rip interface show ip rip peer Enables/disables RIP on a specific interface. Displays active RIP neighbors (peers). An active peer is a switch that has sent a RIP packet within the last 180 seconds.
rip2IfConfTable rip2IfConfAddress rip2IfConfDefaultMetric

page 29-10

ip rip interface send-version
Configures the send option for a RIP interface. This defines the type(s) of RIP packets that the interface will send. ip rip interface {ip_address | interface_name} send-version {none | v1 | v1compatible | v2}
ip_address interface_name none v1 v1compatible v2 32-bit IP address assigned to the interface. This parameter is not supported in the 6.2.1 release. The name of the interface. RIP packets will not be sent by the interface. Only RIPv1 packets will be sent by the interface. Only RIPv2 broadcast packets (not multicast) will be sent by the interface. Only RIPv2 packets will be sent by the interface.
parameter none | v1 | v2 | v1compatible default v2
Using this command will override RIP default behavior. Other devices must be able to interpret the information provided by this command or there will not be
proper routing information exchanged between the switch and other devices on the network.
-> ip rip interface 172.22.2.115 send-version v1

page 29-11

ip rip interface recv-version Configures the receive option for a RIP interface.
rip2IfConfTable rip2IfConfAddress rip2IfConfSend

page 29-12

ip rip interface recv-version
Configures the receive option for a RIP interface. This defines the type(s) of RIP packets that the interface will accept. ip rip interface {ip_address | interface_name} recv-version {v1 | v2 | both | none}
ip_address interface_name v1 v2 both none 32-bit IP address assigned to the interface. This parameter is not supported in the 6.2.1 release. The name of the interface. Only RIPv1 packets will be received by the interface. Only RIPv2 packets will be received by the interface. Both RIPv1 and RIPv2 packets will be received by the interface. Interface ignores any RIP packets received.

show ipv6 ospf Displays the OSPFv3 status and general configuration parameters.
alaProtocolOspf3 alaOspf3MTUCheck

page 33-7

ipv6 ospf route-tag
Configures a tag value for the Autonomous System External (ASE) routes created. ipv6 ospf route-tag tag
tag The set tag value. The valid range is 02, 147, 483, 647.
-> ipv6 ospf route-tag 2
alaProtocolOspf3 alaOspf3RedistRouteTag

page 33-8

ipv6 ospf spf-timer
Configures timers for Shortest Path First (SPF) calculation. ipv6 ospf spf-timer [delay delay_seconds] [hold hold_seconds]
This command allows you to configure the time interval between SPF calculations. Use the delay timer to determine how much time to postpone an SPF calculation after the router
receives a topology change.
Use the hold timer to configure the amount of time that must elapse between consecutive SPF calcula-
There will be no delay in the SPF calculation if either the delay timer or hold timer is set to 0. The SPF
calculations will occur immediately upon the reception of a topology change and/or that back-to back SPF calculations can take place with no break in-between the two.
-> ipv6 ospf spf-timer delay 20 hold 35

page 33-9

alaProtocolOspf3 alaOspf3TimerSpfDelay alaOspf3TimerSpfHold

page 33-10

ipv6 ospf virtual-link
Creates or deletes a virtual link. A virtual link restores the backbone connectivity if the backbone is not physically contiguous. ipv6 ospf virtual-link area area_id router router_id [dead-interval seconds] [hello-interval seconds] [retrans-interval seconds] [transit-delay seconds] no ipv6 ospf virtual-link area area_id router router_id
area_id router_id dead-interval seconds A unique 32-bit value in IP address format. A unique 32-bit value, such as an IP address, that identifies a neighboring router in the Autonomous System. Sets the virtual link dead interval. If no hello packets on this link for the set number of seconds have been received, the virtual neighbor is declared dead. The valid range is 12147483647. Sets the virtual link hello interval, which is the time interval between OSPF hellos sent on this virtual link. The valid range is 165535. Sets the virtual link retransmit interval. The router waits the set number of seconds before retransmitting OSPF packets. The valid range is 03600. Sets the virtual link transit delay, which is the number of seconds to transmit OSPF packets over this link. The valid range is 03600.

parameter number default 10
Use the no form of this command to restore the default value. To calculate the lowest cost to reach a destination, each configured level on each interface must have a
-> ip isis interface interface-1 level 1 metric 25 -> no ip isis interface interface-2 level 2 metric

page 34-75

vRtrIsisIfLevelTable vRtrisisIfLevelAdminMetric

page 34-76

ip isis interface level passive
Configures the interface as passive at the specified IS-IS level. ip isis interface interface_name level [1 | 2] passive no ip isis interface interface_name level [1 | 2] passive
interface_name The name of the interface. Specifies the IS-IS level as Level-1. Specifies the IS-IS level as Level-2.
By default, the interface level passive configuration is disabled.
-> ip isis interface lan-5 level 1 passive -> no ip isis interface wan-10 level 1 passive
ip isis interface passive show ip isis interface Configures the interface as passive. Displays the IS-IS interface information.
vRtrIsisIfLevelTable vRtrIsisIfLevelPassive

page 34-77

ip isis interface level priority
Configures the IS-IS router interface priority for the designated router election on a multi-access network. ip isis interface interface_name level [1 | 2] priority number no ip isis interface interface_name level [1 | 2] priority
interface_name number The name of the given IP interface. Specifies the IS-IS level as Level-1. Specifies the IS-IS level as Level-2. The priority value of this interface at this level. The valid range is 0127.
parameter number default 64
Use the no form of this command to restore the default value. The router with the highest priority is the preferred designated router. The designated router sends LSPs to this network and also to the routers that are attached to it.
-> ip isis interface vlan-isis level 1 priority 4 -> ip isis interface vlan-isis level 2 priority 4 -> no ip isis interface vlan-isis level 1 priority

page 34-78

vRtrIsisIfLevelTable vRtrIsisIfLevelISPriority

page 34-79

show ip isis interface
Displays the IS-IS interface information. show ip isis interface [interface_name] [detail]
interface_name detail The name of the interface. Indicates that the output is displayed in a detailed manner.
By default the interface information for all the interfaces is displayed.
Use the interface_name parameter with this command to view information for a specific interface.

This command allows a matching mask primitive to be placed directly in the route map. By default, no
mask primitive is specified. The default behavior can be reset by changing the value to none.
The example on the next line shows usage combined with the ip bgp policy route-map match-prefix
-> ip bgp policy route-map routemapmatch-mask 255.255.0.0 -> ip bgp policy route-map routemapmatch-prefix 17.0.0.0 match-mask 255.255.0.0
ip bgp policy route-map Creates or deletes a policy route map. ip bgp policy route-map match- Configures a matching prefix primitive in the route map. prefix
alaBgpRouteMapTable alaBgpRouteMapMatchMask

page 35-131

ip bgp policy route-map match-prefix
Configures a matching prefix primitive in the route map. ip bgp policy route-map name sequence_number match-prefix ip_address
name sequence_number ip_address The route map name. The route map sequence number. The valid range is 1255. The 32-bit IP address of the matching prefix.
This command allows a matching prefix primitive to be placed directly in the route map. By default, no
prefix primitive is specified. The default behavior can be reset by changing the value to none.
The example on the next line shows usage combined with the ip bgp policy route-map match-mask
-> ip bgp policy route-map routemapmatch-prefix 17.0.0.0 -> ip bgp policy route-map routemapmatch-prefix 17.0.0.0 match-mask 255.255.0.0
ip bgp policy route-map match- Configures a matching prefix primitive in the route map. mask ip bgp policy route-map Configures an AS path matching regular expression primitive in the route map.
alaBgpRouteMapTable alaBgpRouteMapMatchPrefix

page 35-132

ip bgp policy route-map match-regexp
Configures an AS path matching regular expression primitive in the route map. ip bgp policy route-map name sequence_number match-regexp regular_expression
name sequence_number regular_expression The route map name. The route map sequence number. The valid range is 1255. Regular expression or none. The regular expression must be enclosed by quotation marks.
parameter regular_expression default none
This command allows a regular expression matching directive to be placed directly in the route map.
By default, no matching regular expression is specified. Regular expressions are defined in ip bgp policy aspath-list on page 35-94.
When using regular expressions in the CLI, the regular expression must be enclosed by quotation

marks.

The default behavior can be reset by changing the value to none. See the OmniSwitch 6800/6850/9000 Advanced Routing Configuration Guide for more information on

parameter bps default 1

This command is only supported in the sparse mode. To disable the RP threshold feature, specify a bits per second value of 0. When the RP threshold is
disabled, the RP will never initiate a (S, G) Join message toward the source; the packets will be register-encapsulated to the RP. It will issue a (S, G) join upon when receiving the first data packet if its bits per second value is 1.
To view the current RP threshold, use the show ip pim command.
-> ip pim rp-threshold 131072
show ip pim Displays the global parameters for the specified PIM mode (sparse or dense).
alaPimsmGlobalConfig alaPimsmRPThreshold

page 36-15

ip pim crp-address
Specifies the IP address used as the source in Candidate Rendezvous Point (C-RP) advertisements. ip pim crp-address ip_address no ip pim crp-address
ip_address Specifies the 32-bit source IP address.
Use the no form of this command to remove a C-RP advertisement source address. (You can also
specify a zero (0) value for the IP address to remove a C-RP advertisement source address.)
Interface corresponding to the ip address must have PIM-SM configured. This command is only supported in the sparse mode. A PIM-DM-configured interface is not allowed

for this command.

If the IP address value is non-zero, the router is configured to be a C-RP. If the IP address value is zero,
the router is not configured to be a C-RP.
If the static RP configuration is enabled, the switch will not act as a C-RPeven if the C-RP address is

defined.

-> ip pim crp-address 0.0.0.0 -> no ip pim crp-address -> ip pim crp-address 172.2.1.21

page 36-16

ip pim rp-candidate show ip pim Adds, modifies, or deletes a multicast range for C-RP advertisements. Displays the global parameters for the specified PIM mode (sparse or dense).
alaPimsmGlobalConfig alaPimsmAdminCRPAddress

page 36-17

ip pim crp-expirytime
Configures the maximum time a PIM-SM router considers the current Candidate Rendezvous Point (CRP) active. ip pim crp-expirytime seconds
seconds Specifies the expiry time, in seconds (1300).
parameter seconds default 300
-> ip pim crp-expirytime 10
ip pim crp-holdtime ip pim crp-interval ip pim crp-priority show ip pim Configures the holdtime of the component when it is a C-RP in the local domain. Configures the interval at which a C-RP routers advertisements are sent to the bootstrap router. Configures a C-RP routers priority. Displays the global parameters for the specified PIM mode (sparse or dense).
alaPimsmGlobalConfig alaPimsmCRPExpiryTime

page 36-18

ip pim crp-holdtime
Configures the Candidate Rendezvous Point (C-RP) holdtime. The C-RP holdtime is the amount of time, in seconds, the C-RP advertisement is considered valid. This value is specified in C-RP advertisement messages if the router is configured to be a C-RP. ip pim crp-holdtime seconds

page 44-35

no policy condition condition_name
condition_name The name of the condition. Any alphanumeric string.
A policy condition and a policy action are combined to make a policy rule. See the policy rule

command on page 44-5.

Use the qos apply command to activate configuration changes. If multiple keywords are defined for a single condition, the traffic flow must match all of the parame-
ters in the condition before the rule is enforced.
Use the no form of the command to remove a condition from a policy rule. At least one parameter must be associated with a condition. If the snapshot command is entered after the policy condition command is configured, the resulting
ASCII file will include the following additional syntax for the policy condition command: from {cli | ldap | blt} This syntax indicates how the condition was created. The cli and ldap options may be changed by a user modifying the ASCII file; however, changing this setting is not recommended. The blt option indicates a built-in condition, this option is not configurable.
-> policy condition cond4 source port 3/1

page 44-36

qos apply policy action policy rule Applies configured QoS and policy settings to the current configuration. Configures a policy action. Configures a policy rule on the switch. A rule is made up of a condition (for classifying incoming traffic) and an action (to be applied to outgoing traffic). Shows information about policy conditions configured on the switch.

show policy condition

alaQoSConditionTable alaQoSConditionName alaQoSConditionSource alaQoSConditionSourceSlot alaQoSConditionSourcePort alaQoSConditionSourcePortEnd alaQoSConditionSourcePortGroup alaQoSConditionDestinationSlot alaQoSConditionDestinationPort alaQoSConditionDestinationPortEnd alaQoSConditionDestinationPortGroup alaQoSConditionSourceInterfaceType alaQoSConditionDestinationInterfaceType alaQoSConditionSourceMacAddr alaQoSConditionSourceMacMask alaQoSConditionSourceMacGroup alaQoSConditionDestinationMacAddr alaQoSConditionDestinationMacMask alaQoSConditionDestinationMacGroup alaQoSConditionSourceVlan alaQoSConditionDestinationVlan alaQoSCondition8021p alaQoSConditionSourceIpAddr alaQoSConditionSourceIpMask alaQoSConditionSourceNetworkGroup alaQoSConditionDestinationIpAddr alaQoSConditionDestinationIpMask alaQoSConditionDestinationNetworkGroup alaQoSConditionMulticastIpAddr alaQoSConditionMulticastIpMask alaQoSConditionMulticastNetworkGroup alaQoSConditionTos alaQoSConditionDscp alaQoSConditionTcpFlags alaQoSConditionIpProtocol alaQoSConditionSourceIpPort alaQoSConditionSourceIpPortEnd alaQoSConditionDestinationIpPort alaQoSConditionDestinationIpPortEnd alaQoSConditionSourceTcpPort alaQoSConditionSourceTcpPortEnd alaQoSConditionDestinationTcpPort alaQoSConditionDestinationTcpPortEnd alaQoSConditionSourceUdpPort alaQoSConditionSourceUdpPortEnd

alaipmvVlanIpAddrTable alaipmvVlanIpAddrVlanNumber alaipmvVlanIpAddrType alaipmvVlanIpAddress

page 47-16

show vlan ipmvlan port-config
Displays the sender and receiver ports for a specific IP Multicast VLAN or all the IP Multicast VLANs. show vlan ipmvlan [ipmvlan-id] port-config [slot/port | agg_num]
ipmvlan-id slot/port agg_num Specifies the IP Multicast VLAN number for which the sender and receiver ports will be displayed. The valid range is 24094. The slot number for the module and physical port number on that module (e.g., 3/1 specifies port 1 on slot 3). The Link aggregate ID number. The valid range is 031.
-> show vlan ipmvlan port-config ipmvlan port type +---------+--------+-----------+ 50 2/1 receiver 50 2/10 sender 51 2/2 receiver 51 0/2 receiver 100 2/2 receiver 101 0/1 sender -> show vlan ipmvlan 50 port-config port type +--------+-----------+ 2/1 receiver 2/10 sender -> show vlan ipmvlan 51 port-config port type +--------+-----------+ 2/2 receiver 0/2 receiver

page 47-17

-> show vlan ipmvlan 100 port-config port type +--------+-----------+ 2/2 receiver -> show vlan ipmvlan 101 port-config port type +--------+-----------+ 0/1 sender -> show vlan ipmvlan port-config 2/1 ipmvlan type +---------+------------+ 50 receiver -> show vlan ipmvlan port-config 2/2 ipmvlan type +---------+------------+ 51 receiver 100 receiver -> show vlan ipmvlan port-config 1 ipmvlan type +---------+------------+ 101 sender
output definitions ipmvlan port type The numerical IPMVLAN ID. Displays the slot number of the module and the physical port number on that module for which the IPMVLAN is configured. The type (sender or receiver) of the IPMVLAN port.
vlan ipmvlan sender-port vlan ipmvlan receiver-port Configures a port or an aggregate of ports as the sender port for the IP Multicast VLAN. Configures a port (or a range of ports) or an aggregate of ports as the receiver port for the IP Multicast VLAN.
alaipmvVlanPortTable alaipmvVlanPortIPMVlanNumber alaipmvVlanPortPortNumber alaipmvVlanPortPortType

page 47-18

show vlan ipmvlan port-binding
Displays the translation bindings of an IP Multicast VLAN on a port, an aggregate of ports, or all the ports. show vlan ipmvlan port-binding [slot/port | agg_num]

slbProbeTable slbProbeName slbProbeMethod slbProbeHttpUrl

page 48-29

ip slb probe status
Configures the expected status returned from an HTTP GET to verify the health of a server. ip slb probe probe_name {http | https} status status_value
probe_name http https status_value Specifies the name of the Server Load Balancing (SLB) probe. Specifies an HTTP probe. Specifies an HTTPS probe. Specifies the expected status returned, which can be 04294967295.
parameter status_value default 200
-> ip slb probe web_server http status 404
slbProbeTable slbProbeName slbProbeMethod slbProbePeriod slbProbeHttpStatus

page 48-30

ip slb probe send
Configures an ASCII string that is sent to a server to invoke a server response and verify the health of the server. ip slb probe probe_name {tcp | udp} send send_string
probe_name tcp udp send_string Specifies the name of the Server Load Balancing (SLB) probe. Specifies a TCP probe. Specifies a UDP probe. Specifies the ASCII string sent to a server to invoke a response.
-> ip slb probe web_server tcp send test
Release 5.1.6; command was introduced. Release 6.1.3; http and https parameters removed.
slbProbeTable slbProbeName slbProbeMethod slbProbeSend

page 48-31

ip slb probe expect
Configures an ASCII string used to compare a response from a server to verify the health of the server. ip slb probe probe_name {http | https | tcp | udp} expect expect_string
probe_name http https tcp udp expect_string Specifies the name of the Server Load Balancing (SLB) probe. Specifies an HTTP probe. Specifies an HTTPS probe. Specifies a TCP probe. Specifies a UDP probe. Specifies the ASCII string used to compare a response from a server.
-> ip slb probe web_server http expect test
slbProbeTable slbProbeName slbProbeMethod slbProbeExpect

page 48-32

show ip slb
Displays the status of Server Load Balancing on a switch. show ip slb
-> show ip slb Admin status Operational status Number of clusters : Enabled, : In Service, = 3
Output fields are described here: output definitions Admin status Operational status The current administrative status of Server Load Balancing (SLB) on this switch (Enabled or Disabled). The current operational status of Server Load Balancing (SLB) on this switch, which is either In service (at least one SLB cluster is in service) or Out of service (all SLB clusters are out of service). The total number of Server Load Balancing (SLB) clusters on this switch. A maximum of 16 SLB clusters per switch is allowed.

Probe Availability time (%)
Ping failures Last ping round trip time (milliseconds) Probe status
Release 5.1; command was introduced. Release 5.1.6; Probe and Probe status fields were added.
show ip slb servers show ip slb clusters show ip slb cluster Displays the status of all physical servers belonging to Server Load Balancing clusters on a switch. Displays detailed status and configuration information for all Server Load Balancing clusters on a switch. Displays detailed status and configuration information for a single Server Load Balancing cluster.
slbClusterTable slbClusterVIP slbServerTable slbServerClusterName slbServerIpAddress slbServerAdminStatus slbServerOperStatus slbServerMacAddress slbServerSlotNumber slbServerPortNumber OmniSwitch CLI Reference Guide June 2007 page 48-41
slbServerUpTime slbServerProbeName slbServerLastRTT slbServerPingFails slbServerProbeStatus

page 48-42

show ip slb servers
Displays the status and configurations of all physical servers in Server Load Balancing clusters. show ip slb servers
-> show ip slb servers Admin Operational % IP addr Cluster Name Status Status Avail --------------------+----------------+----------+---------------+----------128.220.40.4 Intranet Enabled In Service 98 128.220.40.5 Intranet Enabled Retrying 80 128.220.40.6 FileTransfer Enabled No answer 50 128.220.40.7 FileTransfer Disabled Disabled --128.220.40.1 WorldWideWeb Enabled In Service 100 128.220.40.2 WorldWideWeb Enabled Discovery 50 128.220.40.3 WorldWideWeb Enabled Link Down 75
Output fields are described here: output definitions IP addr Cluster Name Admin Status The IP address for this physical server. The name of the Server Load Balancing (SLB) cluster to which this physical server belongs. The current administrative status of this physical server (Enabled or Disabled).

page 48-43

output definitions (continued) Operational Status The operational state of this server. The possible states are described as follows: Disabled (this server is administratively disabled). No Answer (this server has not responded to ping requests). Link Down (there is a bad connection to this server). In Service (this server is used for SLB cluster client connections). Discovery (the SLB cluster is pinging this physical server). Retrying (the SLB cluster is making another attempt to bring up this server). The percentage of time that this physical server has been available for processing client requests. In other words, the actual ratio of up time (In Service plus Retrying) versus down time (No Answer plus Link Down). Please note that the Disabled and the initial Discovery states are not counted as down time.