H3C WA Series, Layer 2 Command Reference

Page 1: ...H3C WA Series Access Points Layer 2 Command Reference Hangzhou H3C Technologies Co Ltd http www h3c com Document version 6W104 20130802...

Page 2: ...gine SecPath SecCenter SecBlade Comware ITCMM and HUASAN are trademarks of Hangzhou H3C Technologies Co Ltd All other trademarks that may be mentioned in this manual are the property of their respecti...

Page 3: ...ccess points documentation set Obtaining documentation Technical support Documentation feedback Audience This documentation is intended for Network planners Field technical support and servicing engin...

Page 4: ...onal injury CAUTION An alert that calls attention to important information that if not understood or followed can result in data loss data corruption or damage to hardware or software IMPORTANT An ale...

Page 5: ...lity matrix version upgrade information technical support information and software upgrading Obtaining documentation You can access the most up to date H3C product documentation on the World Wide Web...

Page 6: ...ck and null interface configuration commands 22 default 22 description 22 display interface loopback 23 display interface null 26 interface loopback 27 interface null 28 reset counters interface loopb...

Page 7: ...gion configuration 69 stp root primary 70 stp root secondary 71 stp root protection 71 stp tc protection 72 stp tc protection threshold 72 stp timer forward delay 73 stp timer hello 74 stp timer max a...

Page 8: ...ption 104 ip address ppp negotiate 105 link protocol ppp 105 mtu 106 ppp account statistics enable 106 ppp authentication mode 107 ppp chap password 108 ppp chap user 109 ppp ipcp remote address force...

Page 9: ...efault to restore the default settings for an Ethernet interface Examples Restore the default settings for interface GigabitEthernet 1 0 1 Sysname system view Sysname interface gigabitethernet 1 0 1 S...

Page 10: ...e default description of an interface is the interface name plus Interface For example GigabitEthernet1 0 1 Interface Related commands display interface Examples Change the description of interface Gi...

Page 11: ...ace gigabitethernet 1 0 1 GigabitEthernet1 0 1 current state UP IP Packet Frame Type PKTFMT_ETHNT_2 Hardware Address 0026 3e08 1140 Description GigabitEthernet1 0 1 Interface Loopback is not set Media...

Page 12: ...nsmission capability When the threshold is exceeded the interface drops unknown unicast packets Multicast MAX ratio Multicast suppression threshold as a percentage of the interface transmission capabi...

Page 13: ...es larger than the maximum frame length supported on the interface For an Ethernet interface that does not permit jumbo frames giants refer to frames larger than 1536 bytes without VLAN tags or 1540 b...

Page 14: ...Guides ignored Number of inbound frames dropped because the receive buffer of the port ran low parity errors Total number of frames with parity errors Output total 1116 packets 76088 bytes 975 unicast...

Page 15: ...vely The interface is physically down because it was shut down with the shutdown command To restore its physical state use the undo shutdown command DOWN Loopback detection protected The interface is...

Page 16: ...ace Link Speed Duplex Type PVID Description GE1 0 1 UP 100M a F a A 1 Display the brief information about all but Ethernet interfaces Sysname display interface brief exclude ge The brief information o...

Page 17: ...erface Interface name Link Physical link state of the interface UP The link is up DOWN The link is physically down ADM The link has been administratively shut down To recover its physical state perfor...

Page 18: ...do shutdown command Loopback detection protected The interface is shut down because a loop is detected on it duplex Syntax duplex auto full half undo duplex View Ethernet interface view Default level...

Page 19: ...its peer and send common pause frames to notify its peer of congestions By default generic flow control on an Ethernet interface is disabled With the flow control command configured an interface can...

Page 20: ...loopback to enable loopback testing on an Ethernet interface By default loopback testing is disabled on Ethernet interfaces NOTE Enable loopback testing for troubleshooting purposes such as identifyin...

Page 21: ...type is specified this command clears statistics for all interfaces If only the interface type is specified this command clears statistics for all interfaces of that type If both the interface type an...

Page 22: ...rface speed to 100 Mbps This key word is not available on Ethernet fiber ports 1000 Sets the interface speed to 1000 Mbps auto Enables the interface to negotiate a speed with its peer Description Use...

Page 23: ...e may not be the one that actually takes effect To display the actual broadcast suppression threshold value on an Ethernet interface you can use the display interface command When the pps keyword is n...

Page 24: ...detection to display the status of the loopback detection function If loopback detection is enabled this command also displays the detection interval and ports in a loop condition Examples Display inf...

Page 25: ...ports Use undo loopback detection control enable to restore the default By default loopback detection control is disabled on trunk and hybrid ports When a hybrid or trunk port detects a loop condition...

Page 26: ...cause broadcast storms which degrade network performance You can enable loopback detection to detect loops on an interface The device performs actions to alleviate the impact of the loop condition as...

Page 27: ...time 10 multicast suppression Syntax multicast suppression ratio pps max pps undo multicast suppression View Layer 2 Ethernet interface view Default level 2 System level Parameters ratio Sets the mul...

Page 28: ...max pps undo unicast suppression View Layer 2 Ethernet interface view Default level 2 System level Parameters ratio Sets the unknown unicast suppression threshold as a percentage of the transmission...

Page 29: ...do not suppress unknown unicast traffic When unknown unicast traffic exceeds the threshold you configure the system discards unknown unicast packets until the unknown unicast traffic drops below the...

Page 30: ...settings of interface loopback 0 Sysname system view Sysname interface loopback 0 Sysname loopback0 default This command will restore the default settings Continue Y N y description Syntax description...

Page 31: ...interface name Interface for example Loopback0 interface Related commands display interface Examples Set the description for interface loopback 0 to loopback0 Sysname system view Sysname interface loo...

Page 32: ...UP spoofing Description aa The Maximum Transmit Unit is 1536 Internet protocol processing disabled Physical is Loopback Last clearing of counters Never Last 300 seconds input rate 0 bytes sec 0 bits...

Page 33: ...average number of bytes received per second bits sec indicates the average number of bits received per second Last 300 seconds output rate 0 bytes sec 0 bits sec 0 packets sec Average output rate over...

Page 34: ...this keyword this command displays information about interfaces in all states Filters command output by specifying a regular expression For more information about regular expressions see Fundamentals...

Page 35: ...ysname display interface null 0 brief The brief information of interface s under route mode Link ADM administratively down Stby standby Protocol s spoofing Interface Link Protocol Main IP Description...

Page 36: ...r Null 0 interface view Sysname system view Sysname interface null 0 Sysname NULL0 reset counters interface loopback Syntax reset counters interface loopback interface number View User view Default le...

Page 37: ...r statistics on the null interface Before collecting traffic statistics within a specific period of time on the null interface clear the existing statistics If you do not specify the null keyword this...

Page 38: ...hutdown to bring up the current loopback interface By default a loopback interface is up Examples Shut down loopback interface loopback 0 Sysname system view Sysname interface loopback 0 Sysname Loopb...

Page 39: ...ress entries of a specified MAC address in the format of H H H dynamic Displays dynamic MAC address entries Aging time is set for these entries static Displays static MAC address entries These entries...

Page 40: ...hentication For more information about MAC authentication see Security Configuration Guide 802 1X The entry generated after a user passes the 802 1X authentication For more information about 802 1X au...

Page 41: ...pe interface number begin exclude include regular expression View Any view Default level 1 Monitor level Parameters interface type interface number Specifies an interface by its type and number Filter...

Page 42: ...H H where 0s at the beginning of each H 16 bit hexadecimal digit can be omitted For example inputting f e2 1 indicates that the MAC address is 000f 00e2 0001 vlan vlan id Specifies an existing VLAN to...

Page 43: ...hem interface interface type interface number Specifies an outbound interface by its type and number Description Use mac address to add or modify a MAC address entry Use undo mac address to remove one...

Page 44: ...For example when your device is being attacked by a great deal of packets with different source MAC addresses the update of the MAC address table can be affected Because disabling MAC address learning...

Page 45: ...o mac address max mac count disable forwarding to allow the device to forward frames received on an Ethernet port with unknown source MAC addresses after the number of learned MAC addresses reaches th...

Page 46: ...300 seconds Follow these guidelines to set the aging timer appropriately A long aging interval may cause the MAC address table to retain outdated entries and fail to accommodate the latest network ch...

Page 47: ...are activated with the active region configuration command or you enable the spanning tree feature with the stp enable command H3C recommends you to use the check region configuration command to deter...

Page 48: ...are correct Related commands instance region name revision level vlan mapping modulo and active region configuration Examples Display MST region pre configurations Sysname system view Sysname stp regi...

Page 49: ...n analyze and maintain the network topology or check whether spanning tree is working normally In STP RSTP mode follow these guidelines If you do not specify any port this command displays the spannin...

Page 50: ...ted bridge Designated port Edge port non edge port Connecting to a point to point link or not Maximum transmission rate transmit limit Status of the root guard function enabled or disabled BPDU format...

Page 51: ...igabitEthernet1 0 1 ALTE DISCARDING LOOP 0 GigabitEthernet1 0 2 DESI FORWARDING NONE Table 11 display stp brief command output description Field Description MSTID MSTI ID in the MST region Port Port n...

Page 52: ...ed Active disabled Point to point Config auto Active true Transmit Limit 10 packets hello time Protection Type None MST BPDU Format Config auto Active legacy Port Config Digest Snooping disabled Rapid...

Page 53: ...to the CIST root CIST RegRoot IRPC CIST regional root ID and internal path cost the path cost from the device to the CIST regional root Root ID RPC VLAN root ID and root path cost the path cost from t...

Page 54: ...port rapidly transits to the forwarding state or not in the MSTI Num of Vlans Mapped The number of VLANs mapped to the MSTI PortTimes Major parameters for the port Hello Hello timer MaxAge Max Age tim...

Page 55: ...expression regular expression Specifies a regular expression a case sensitive string of 1 to 256 characters Description Use display stp abnormal port to display information about ports blocked by span...

Page 56: ...gular expression Specifies a regular expression a case sensitive string of 1 to 256 characters Description Use display stp bpdu statistics to display the BPDU statistics on ports In MSTP mode follow t...

Page 57: ...37 43 01 13 2010 Instance 0 Type Count Last Updated Timeout BPDUs 0 MAX hoped BPDUs 0 TC detected 1 10 32 40 01 13 2010 TC sent 3 10 33 11 01 13 2010 TC received 0 Instance 1 Type Count Last Updated...

Page 58: ...BPDUs Expired BPDUs Max Hoped BPDUs BPDUs whose maximum hops were exceeded TC Detected TC BPDUs detected TC Sent TC BPDUs sent TC Received TC BPDUs received display stp down port Syntax display stp d...

Page 59: ...lt level 0 Visit level Parameters instance instance id Displays the historical port role calculation information of a specific MSTI The instance id argument ranges from 0 to 15 where 0 represents the...

Page 60: ...ROOT Time 2009 02 08 00 22 56 Port priority 0 00e0 fc01 6510 0 0 00e0 fc01 6510 128 2 Table 16 Command output Field Description Port Port name Role change A role change of the port Age means that the...

Page 61: ...Vlans Mapped 0 21 to 4094 1 1 to 10 2 11 to 20 Table 17 Command output Field Description Format selector Format selector defined by the spanning tree protocol The default value is 0 and the selector c...

Page 62: ...he path cost of a port Root Port Root port name displayed only if a port of the device is the root port of MSTIs display stp tc Syntax display stp instance instance id tc begin exclude include regular...

Page 63: ...ch port instance Syntax instance instance id vlan vlan list undo instance instance id vlan vlan list View MST region view Default level 2 System level Parameters instance id Specifies an MSTI ID The v...

Page 64: ...e to configure the MST region name Use undo region name to restore the default MST region name By default the MST region name of a device is its MAC address The MST region name the VLAN to instance ma...

Page 65: ...statistics on all ports Related commands display stp Examples Clear the spanning tree related statistics on ports GigabitEthernet 1 0 1 through GigabitEthernet 1 0 2 Sysname reset stp interface gigabi...

Page 66: ...iguration Sysname mst region revision level 5 stp bpdu protection Syntax stp bpdu protection undo stp bpdu protection View System view Default level 2 System level Parameters None Description Use stp...

Page 67: ...lay stp timer hello and stp timer max age Examples In MSTP mode set the network diameter of the switched network to 5 Sysname system view Sysname stp bridge diameter 5 stp compliance Syntax stp compli...

Page 68: ...ured in Ethernet interface view or WLAN mesh interface view the setting takes effect on the interface only Enable this feature both globally and on ports connected to other vendors devices to make it...

Page 69: ...d on the corresponding standard To set the path cost of an MSTP port in a specific MSTI use this command with the MSTI specified To set the path cost of an MSTP port in the CIST or an STP RSTP port us...

Page 70: ...e ports Configuration BPDUs from other devices usually cannot reach an edge port because the edge port does not connect to any other device If a port receives a configuration BPDU when the BPDU guard...

Page 71: ...ing tree feature is disabled the device stops maintaining the spanning tree status Related commands stp mode Examples In MSTP mode enable the spanning tree feature globally Sysname system view Sysname...

Page 72: ...ranging from 1 to 40 Description Use stp max hops to set the maximum hops of the MST region Use undo stp max hops to restore the default By default the maximum number of hops of an MST region is 20 T...

Page 73: ...MSTP or RSTP mode Configured in system view the setting takes effect globally Configured in Ethernet interface view or WLAN mesh interface view the setting takes effect on the interface only Related c...

Page 74: ...ement check to disable No Agreement Check on the ports By default No Agreement Check is disabled This feature takes effect only after you enable it on the root port Examples Enable No Agreement Check...

Page 75: ...t to point Syntax stp point to point auto force false force true undo stp point to point View Ethernet interface view WLAN mesh interface view Default level 2 System level Parameters auto Specifies au...

Page 76: ...iority Specifies a port priority ranging from 0 to 240 in steps of 16 for example 0 16 32 Description Use stp port priority to set the priority of the ports Use undo stp port priority to restore the d...

Page 77: ...iption Use stp priority to set the priority of the device Use undo stp priority to restore the default priority By default the device priority is 32768 To set the priority of an MSTP device in a speci...

Page 78: ...ult level 2 System level Parameters instance instance id Configures the device as the root bridge in a particular MSTI The instance id argument ranges from 0 to 15 where 0 represents the CIST Descript...

Page 79: ...root bridge in a specific MSTI use this command with the MSTI specified To set an MSTP device in the CIST or an STP RSTP device as a secondary root bridge use this command without specifying any MSTI...

Page 80: ...otection stp tc protection Syntax stp tc protection enable stp tc protection disable View System view Default level 2 System level Parameters None Description Use stp tc protection enable to enable th...

Page 81: ...01 seconds ranging from 400 to 3000 in steps of 100 as in 400 500 600 Description Use stp timer forward delay to set the forward delay timer of the device Use undo stp timer forward delay to restore t...

Page 82: ...ain spanning tree If a device fails to receive configuration BPDUs within the set period of time a new spanning tree calculation process is triggered due to timeout H3C does not recommend you to set t...

Page 83: ...ols automatically calculate optimal settings of the max age timer If the network diameter uses the default value the max age timer also uses the default value Related commands stp timer forward delay...

Page 84: ...ters limit Sets the maximum number of BPDUs the ports can send within each hello time The limit argument ranges from 1 to 255 Description Use stp transmit limit to set the maximum transmission rate of...

Page 85: ...a VLAN that has been mapped to an MSTI to a new MSTI the old mapping will be automatically removed This command maps each VLAN to the MSTI whose ID is VLAN ID 1 modulo 1 where VLAN ID 1 modulo is the...

Page 86: ...s all lines that do not match the specified regular expression include Displays all lines that match the specified regular expression regular expression Specifies a regular expression a case sensitive...

Page 87: ...interval time interval undo loopback detection interval time View System view Default level 2 System level Parameters interval Interval of performing a loopback detection in the range of 5 to 300 seco...

Page 88: ...undo forms or follow the command reference to individually restore their default settings If your restoration attempt still fails follow the error message to resolve the problem CAUTION The default co...

Page 89: ...ine Description Use description to change the description of the VLAN or VLAN interface Use undo description to restore the default For a VLAN the default description is the VLAN ID For example VLAN 0...

Page 90: ...lan interface to display information about a specified or all VLAN interfaces If you do not specify the vlan interface keyword this command displays information about all interfaces If you specify the...

Page 91: ...24 Primary The primary IP address of the interface is 192 168 1 54 24 This information is displayed only if the primary IP address is configured for the interface Internet Address is 6 4 4 4 24 Sub T...

Page 92: ...el 1 Monitor level Parameters all Displays all the MAC address to VLAN entries dynamic Displays dynamically configured MAC address to VLAN entries mac address mac address Displays the MAC address to V...

Page 93: ...ddress to VLAN entries that are configured dynamically MAC ADDR MAC address of a MAC address to VLAN entry MASK Mask of the MAC address of a MAC address to VLAN entry VLAN ID VLAN ID of a MAC address...

Page 94: ...view Default level 1 Monitor level Parameters hybrid Displays hybrid ports trunk Displays trunk ports Filters command output by specifying a regular expression For more information about regular expr...

Page 95: ...N information except for the reserved VLANs dynamic Displays the number of dynamic VLANs and the ID for each dynamic VLAN The dynamic VLANs are generated through GVRP or those distributed by a RADIUS...

Page 96: ...in any view or the display this command in VLAN interface view Subnet Mask Subnet mask of the primary IP address available only when an IP address is configured for the VLAN interface Tagged Ports Po...

Page 97: ...econdary IP address Description Use ip address to assign an IP address and subnet mask to a VLAN interface Use undo ip address to remove the IP address and subnet mask for a VLAN interface By default...

Page 98: ...se undo mac vlan enable to restore the default By default the MAC based VLAN feature is disabled on a port This command is available only on hybrid ports Examples Enable the MAC based VLAN feature on...

Page 99: ...device One table contains the MAC address to VLAN entries configured with the mask keyword specified A MAC address to VLAN entry of this type describes the relationship between a group of MAC addresse...

Page 100: ...e a string of 1 to 32 characters The string can include case sensitive letters digits special characters including _ and spaces Description Use name to configure a name for the VLAN Use undo name to r...

Page 101: ...specified access ports to the VLAN Use undo port to remove the specified access ports from the VLAN By default all ports are in VLAN 1 This command is only applicable on access ports By default all p...

Page 102: ...ult level 2 System level Parameters vlan id Specifies a VLAN ID ranging from 1 to 4094 Description Use port hybrid pvid to configure the PVID of the hybrid port Use undo port hybrid pvid to restore th...

Page 103: ...assign the hybrid ports to the specified VLANs Use undo port hybrid vlan to remove the hybrid ports from the specified VLANs By default a hybrid port only allows packets from VLAN 1 to pass through un...

Page 104: ...nk type to restore the default link type of a port By default any port is an access port To change the link type of a port from trunk to hybrid or vice versa you must first set the link type to access...

Page 105: ...default a trunk port allows only packets from VLAN 1 to pass through A trunk port can carry multiple VLANs If you execute the port trunk permit vlan command multiple times the trunk port carries the...

Page 106: ...lan interface Syntax reset counters interface vlan interface vlan interface id View User view Default level 2 System level Parameters vlan interface id Specifies a VLAN interface number Description Us...

Page 107: ...is independent of the state of the VLAN interface Examples Shut down VLAN interface 2 and then bring it up Sysname system view Sysname interface vlan interface 2 Sysname Vlan interface2 shutdown Sysn...

Page 108: ...100 Examples Enter VLAN 2 view Sysname system view Sysname vlan 2 Sysname vlan2 Create VLAN 4 through VLAN 100 Sysname system view Sysname vlan 4 to 100 Please wait Done...

Page 109: ...the specified regular expression and all lines that follow exclude Displays all lines that do not match the specified regular expression include Displays all lines that match the specified regular ex...

Page 110: ...tal deliver to up Number of Ethernet frames delivered to upper layer protocols L2 protocol Number of Layer 2 protocol frames delivered to the upper layer Local MAC address Number of Ethernet frames wi...

Page 111: ...103 Parameters None Description Use reset mac forwarding statistics to clear all Layer 2 forwarding statistics Examples Clear all Layer 2 forwarding statistics Sysname reset mac forwarding statistics...

Page 112: ...ialer1 default This command will restore the default settings Continue Y N y description Syntax description text undo description View Dialer interface view Default level 2 System level Parameters tex...

Page 113: ...o enable IP address negotiation on the local interface so that the local interface can accept the IP address allocated by the peer end Use undo ip address ppp negotiate to disable IP address negotiati...

Page 114: ...erface view Default level 2 System level Parameters size MTU in bytes in the range of 128 to 1500 Description Use mtu to set the MTU size of the interface Use undo mtu to restore the default By defaul...

Page 115: ...fic statistics collection is disabled Examples Enable PPP traffic statistics collection on interface Dialer 1 Sysname system view Sysname interface Dialer 1 Sysname Dialer1 ppp account statistics enab...

Page 116: ...In addition you can also use the AAA authentication algorithm list if defined to authenticate users In any PPP authentication mode AAA determines whether a user can pass the authentication through a...

Page 117: ...word to cancel the configuration Related commands ppp authentication mode chap Examples Set the default password for CHAP authentication to sysname which is to be displayed in plain text Sysname syste...

Page 118: ...ault the peer is allowed to use its locally configured IP address The local end assigns an IP address to the peer only when being explicitly requested to do so When the peer has already an IP address...

Page 119: ...xed to 24 or 64 characters such as _ TT8F Y 5SQ Q MAF4 1 and VV F 7R TN C1D O IX aV KMFAM 0 0 5WWQ Q MAF4 TX _S 6 N Description Use ppp pap local user to set the local username and password for PAP au...

Page 120: ...Default level 2 System level Parameters ip address IP address to be assigned to the peer device pool pool number Specifies the number of the address pool used for assigning an IP address to the peer...

Page 121: ...ion you can configure the command for the peer again In this case the original assigned IP address can still work and the newly assigned IP address is used when the original one is released or used by...

Page 122: ...to restore the default or 10 seconds Because a slow link takes long to transmit large packets the sending and receiving of keepalives may be delayed so long that one end cannot receive keepalive packe...

Page 123: ...lters command output by specifying a regular expression For more information about regular expressions see Fundamentals Configuration Guide begin Displays the first line that matches the specified reg...

Page 124: ...InPackets 19 OutPackets 19 InBytes 816 OutBytes 816 InDrops 0 OutDrops 0 ID 2 Interface VLAN20 InPackets 18 OutPackets 18 InBytes 730 OutBytes 730 InDrops 0 OutDrops 0 Table 26 Command output Field D...

Page 125: ...to multiple dialer bundles However a dialer bundle can correspond to only one VLAN interface Each PPPoE session uniquely corresponds to a dialer bundle If a VLAN interface in a dialer bundle of a dial...

Page 126: ...set pppoe client Syntax reset pppoe client all dial bundle number number View User view Default level 2 System level Parameters all Clears all the PPPoE sessions dial bundle number number Specifies a...

Page 127: ...to remove the association By default dialer interfaces are not associated with any dialer bundle in RS DCC This command applies only to dialer interfaces In addition a dialer interface can be associat...

Page 128: ...on It enables RS DCC and can remove the C DCC configurations on the interface Performing the undo dialer user command on a dialer interface can clear all configurations on it Related commands ppp pap...

Page 129: ...rmits packets of the specified protocol acl number Specifies an ACL by its ACL number The acl number argument ranges from 2000 to 3999 An ACL number in the range of 2000 to 2999 identifies a basic ACL...

Page 130: ...a dialer interface In C DCC this equals creating a dialer circular group Use undo interface dialer to remove a dialer interface By default no dialer interface is created The dialer interface has a fi...

Page 131: ...d they use the addresses of the corresponding dialer interfaces In both C DCC and RS DCC physical interfaces use the network addresses of their associated dialer interface rather than being assigned s...

Page 132: ...lay port 86 display pppoe client session 1 15 display stp 40 display stp abnormal port 47 display stp bpdu statistics 48 display stp down port 50 display stp history 51 display stp region configuratio...

Page 133: ...rding statistics 102 reset pppoe client 1 18 reset stp 56 revision level 57 S shutdown 13 shutdown 29 shutdown 98 shutdown 1 13 speed 14 stp bpdu protection 58 stp bridge diameter 58 stp compliance 59...