HPE FlexFabric 12900, Command Reference Manual

Page 1: ...HPE FlexFabric 12900 Switch Series High Availability Command Reference Part number 5998 4355R Software version R1003 and later Document version 6W102 20161028 ...

Page 2: ...nd 12 212 Commercial Computer Software Computer Software Documentation and Technical Data for Commercial Items are licensed to the U S Government under vendor s standard commercial license Links to third party websites take you outside the Hewlett Packard Enterprise website Hewlett Packard Enterprise has no control over and is not responsible for information outside the Hewlett Packard Enterprise ...

Page 3: ...lobal errored frame seconds window 20 oam global errored symbol period threshold 21 oam global errored symbol period window 22 oam global timer hello 22 oam global timer keepalive 23 oam mode 24 oam remote failure action 25 oam timer hello 25 oam timer keepalive 26 reset oam 27 CFD commands 28 cfd cc enable 28 cfd cc interval 28 cfd enable 29 cfd linktrace 30 cfd linktrace auto detection 31 cfd lo...

Page 4: ...istics 78 vrrp ipv6 dscp 78 vrrp ipv6 vrid preempt mode 79 vrrp ipv6 vrid priority 80 vrrp ipv6 vrid shutdown 81 vrrp ipv6 vrid timer advertise 81 vrrp ipv6 vrid track 82 vrrp ipv6 vrid 83 BFD commands 85 bfd authentication mode 85 bfd demand enable 85 bfd detect multiplier 86 bfd echo enable 87 bfd echo source ip 88 bfd echo source ipv6 88 bfd min echo receive interval 89 bfd min receive interval...

Page 5: ... Conventions 107 Network topology icons 108 Support and other resources 109 Accessing Hewlett Packard Enterprise Support 109 Accessing updates 109 Websites 110 Customer self repair 110 Remote support 110 Documentation feedback 110 Index 112 ...

Page 6: ...nterface interface type interface number Specifies a port by its type and number Usage guidelines If you do not specify the interface keyword this command displays information about all the Ethernet OAM connections Examples Display information about the Ethernet OAM connection established on all local ports Sysname display oam local Ten GigabitEthernet1 0 1 Enable status Enable Loopback status No ...

Page 7: ...hernet OAM mode PDU The way in which the local end processes Ethernet OAMPDUs RX_INFO The port only receives Information OAMPDUs and does not send any Ethernet OAMPDUs LF_INFO The port only sends the Information OAMPDUs without Information TLV triplets and with their link error flag bits being set INFO The port sends and receives only Information OAMPDUs ANY The port sends and receives Ethernet OA...

Page 8: ...ication Number of the Event notification OAMPDUs sent and received OAMUniqueEventNotification Number of the unduplicated Event notification OAMPDUs sent or received uniquely OAMDuplicateEventNotificatio n Number of the duplicate Event notification OAMPDUs sent or received Display the Ethernet OAM information about all remote ports Sysname display oam remote Ten GigabitEthernet1 0 1 OAM mode Active...

Page 9: ...opback Indicates whether Ethernet OAM remote loopback is supported Link events Indicates whether Ethernet OAM link error events are supported MIB retrieval Indicates whether MIB variable retrieval is supported Flags Values of the peer Ethernet OAM flag fields in OAM packets Link fault Indicates whether an Ethernet OAM link error is present Dying gasp Indicates whether a fatal error is present Crit...

Page 10: ...t OAM configuration globally and on ports that do not use the default configuration Examples Display Ethernet OAM configuration globally and on ports that do not use the default configuration Sysname display oam configuration Global OAM timers Hello timer 1000 milliseconds Keepalive timer 5000 milliseconds Link monitoring Errored symbol period Window 100 x 1000000 symbols Threshold 1 error symbols...

Page 11: ...ction timeout timer Link monitoring Link event detection window and threshold Errored symbol period Errored symbol event Errored frame Errored frame event Errored frame period Errored frame period event Errored frame seconds Errored frame seconds event Window Detection window configured for link events Threshold Triggering threshold configured for link events display oam critical event Use display...

Page 12: ...Link fault Indicates whether a link fault is present Dying Gasp Indicates whether a fatal fault is present Critical Event Indicates whether a critical fault is present display oam link event Use display oam link event to display the statistics on Ethernet OAM link error events occurred on a local port or a peer port Ethernet OAM link error events include errored symbol events errored frame events ...

Page 13: ...error frames Event running total 5 events OAM local errored frame seconds summary event Event time stamp 50022 x 100 milliseconds Errored frame seconds window 600 x 100 milliseconds Errored frame seconds threshold 1 error seconds Errored frame seconds 1 error seconds Error running total 1 error seconds Event running total 1 events Display Ethernet OAM link event statistics of the remote ends of al...

Page 14: ...cent errored symbol event Error running total Total number of errored symbols Event running total Total number of errored symbol events that have occurred OAM local remote errored frame event Information about local remote end errored frame events Event time stamp Time when an errored frame event occurred Errored frame window Errored frame detection interval Errored frame threshold Errored thresho...

Page 15: ...conds events that have occurred Related commands reset oam oam enable Use oam enable to enable Ethernet OAM Use undo oam enable to disable Ethernet OAM Syntax oam enable undo oam enable Default Ethernet OAM is disabled Views Layer 2 Ethernet port view Layer 3 Ethernet port view Predefined user roles network admin mdc admin Examples Enable OAM on Ten GigabitEthernet 1 0 1 Sysname system view Sysnam...

Page 16: ...e threshold 100 Related commands display oam configuration display oam link event oam global errored frame threshold oam errored frame window Use oam errored frame window to set the errored frame event detection window Use undo oam errored frame window to restore the default Syntax oam errored frame window window value undo oam errored frame window Default The port uses the global setting Views La...

Page 17: ...ue undo oam errored frame period threshold Default The port uses the global setting Views Layer 2 Ethernet port view Layer 3 Ethernet port view Predefined user roles network admin mdc admin Parameters threshold value Specifies the errored frame period event triggering threshold in the range of 0 to 4294967295 Usage guidelines The configuration in port view takes effect on the specified port For a ...

Page 18: ...idelines The configuration in port view takes effect on the specified port For a port the configuration in port view takes precedence Examples Set the errored frame period event detection window to 20000000 Sysname system view Sysname interface ten gigabitethernet 1 0 1 Sysname Ten GigabitEthernet1 0 1 oam errored frame period window 2000 Related commands display oam configuration display oam link...

Page 19: ...et the errored frame seconds event triggering threshold on Ten GigabitEthernet 1 0 1 to 100 Sysname system view Sysname interface ten gigabitethernet 1 0 1 Sysname Ten GigabitEthernet1 0 1 oam errored frame seconds threshold 100 Related commands display oam configuration display oam link event oam errored frame seconds window oam global errored frame seconds threshold oam errored frame seconds win...

Page 20: ...conds window 100 Related commands display oam configuration display oam link event oam errored frame seconds threshold oam errored frame seconds period oam errored symbol period threshold Use oam errored symbol period threshold to set the errored symbol event triggering threshold Use undo oam errored symbol period threshold to restore the default Syntax oam errored symbol period threshold threshol...

Page 21: ...view Predefined user roles network admin mdc admin Parameters window value Specifies the errored symbol event detection window in the range of 1 to 65535 The value of this argument must be a multiple of 1000000 Usage guidelines The configuration in port view takes effect on the specified port For a port the configuration in port view takes precedence Examples Set the errored symbol event detection...

Page 22: ...wer precedence than the configuration in port view Examples Set the errored frame event triggering threshold to 100 Sysname system view Sysname oam global errored frame threshold 100 Related commands display oam configuration display oam link event oam errored frame threshold oam global errored frame window Use oam global errored frame window to set the global errored frame event detection window ...

Page 23: ...bal errored frame period event triggering threshold Use undo oam global errored frame period threshold to restore the default Syntax oam global errored frame period threshold threshold value undo oam global errored frame period threshold Default The errored frame period event triggering threshold is 1 Views System view Predefined user roles network admin mdc admin Parameters threshold value Specif...

Page 24: ...he range of 1 to 65535 The value of this argument must be a multiple of 10000 Usage guidelines The configuration in system view takes effect on all ports but has a lower precedence than the configuration in port view Examples Set the errored frame period event detection window to 20000000 Sysname system view Sysname oam global errored frame period window 2000 Related commands display oam configura...

Page 25: ...onfiguration in port view Examples Set the errored frame seconds event triggering threshold to 100 Sysname system view Sysname oam global errored frame seconds threshold 100 Related commands display oam configuration display oam link event oam errored frame seconds threshold oam global errored frame seconds window oam global errored frame seconds window Use oam global errored frame seconds window ...

Page 26: ...on display oam link event oam errored frame seconds period oam global errored frame seconds threshold oam global errored symbol period threshold Use oam global errored symbol period threshold to set the global errored symbol event triggering threshold Use undo oam global errored symbol period threshold to restore the default Syntax oam global errored symbol period threshold threshold value undo oa...

Page 27: ...edefined user roles network admin mdc admin Parameters window value Specifies the errored symbol event detection window in the range of 1 to 65535 The value of this argument must be a multiple of 1000000 Usage guidelines The configuration in system view takes effect on all ports but has a lower precedence than the configuration in port view Examples Set the errored symbol event detection window to...

Page 28: ...onnections stable set the connection timeout timer to be at least five times the handshake packet transmission interval The configuration in system view takes effect on all ports but has a lower precedence than the configuration in port view Examples Set the Ethernet OAM handshake packet transmission interval to 600 milliseconds Sysname system view Sysname oam global timer hello 600 Related comman...

Page 29: ...connection timeout timer to 6000 milliseconds Sysname system view Sysname oam global timer keepalive 6000 Related commands display oam configuration oam timer keepalive oam mode Use oam mode to set the Ethernet OAM mode Use undo oam mode to restore the default Syntax oam mode active passive undo oam mode Default An Ethernet OAM enabled Ethernet port operates in the active Ethernet OAM mode Views L...

Page 30: ...mote end Views Layer 2 Ethernet port view Layer 2 Ethernet port view Predefined user roles network admin mdc admin Parameters connection expired Specifies a connection timeout fault critical event Specifies a critical fault dying gasp Specifies a fatal fault link fault Specifies a link fault error link down Terminates the OAM connection and sets the link state of the port to down Examples Configur...

Page 31: ... to be at least five times the handshake packet transmission interval The configuration in port view takes effect on the specified port For a port the configuration in port view takes precedence Examples Set the Ethernet OAM handshake packet transmission interval to 600 milliseconds Sysname system view Sysname interface ten gigabitethernet 1 0 1 Sysname Ten GigabitEthernet1 0 1 oam timer hello 600...

Page 32: ...6000 milliseconds Sysname system view Sysname interface ten gigabitethernet 1 0 1 Sysname Ten GigabitEthernet1 0 1 oam timer keepalive 6000 Related commands display oam configuration oam global timer keepalive reset oam Use reset oam to clear the statistics on Ethernet OAM packets and Ethernet OAM link error events of an Ethernet port Syntax reset oam interface interface type interface number View...

Page 33: ...nfigurations in Ethernet interface view take effect only on the current interface configurations in aggregate interface view take effect on the aggregate interface and all its member ports configurations on a member port take effect only when the member port leaves the aggregation group Examples On port Ten GigabitEthernet 1 0 1 enable CCM sending on MEP 3 in service instance 5 Sysname system view...

Page 34: ...elines When setting the CCM interval use the settings described in Table 6 Table 6 CCM interval field encoding CCM interval field Transmission interval Maximum CCM lifetime 1 10 3 milliseconds 35 3 milliseconds 2 10 milliseconds 35 milliseconds 3 100 milliseconds 350 milliseconds 4 1 second 3 5 seconds 5 10 seconds 35 seconds 6 60 seconds 210 seconds 7 600 seconds 2100 seconds Examples Set the val...

Page 35: ...n MAC address in the format of H H H target map target mep id Specifies the ID of the destination MEP in the range of 1 to 8191 ttl ttl value Specifies the time to live value in the range of 1 to 255 and defaulting to 64 hw only Sets the hw only bits of the LTMs sent If this keyword is specified the MIP does not flood LTM messages that have an unknown destination MAC address Examples Identify the ...

Page 36: ...on is disabled Views System view Predefined user roles network admin mdc admin Parameters size size value Specifies the size of the buffer used to store the auto detection result in the range of 1 to 100 in terms of sending times This value defaults to 5 which means the buffer stores the results of the recent five auto detections Usage guidelines After LT messages automatic sending is enabled if t...

Page 37: ... Specifies the number of the LBMs packets sent in the range of 1 to 10 The default is 5 Examples Enable LB to check the status of the link between MEP 1101 and MEP 2001 in service instance 1 assume that the link status is normal Sysname cfd loopback service instance 1 mep 1101 target mep 2001 Loopback to 0010 fc00 6512 with the sequence number start from 1101 43404 Reply from 0010 fc00 6512 sequen...

Page 38: ...fined user roles network admin mdc admin Parameters md md name Specifies the name of an MD which is a string of 1 to 43 characters that can contain letters numbers and special characters such as tilde exclamation mark at sign number sign dollar sign percent caret ampersand asterisk brackets hyphen underscore _ plus equal sign vertical bar backslash colon semicolon quotation marks comma period and ...

Page 39: ...carried in the packet sent by the MEP comprises the MAC address 1 1 1 and integer 1 Sysname system view Sysname cfd md test_md2 level 5 md id mac 1 1 1 1 cfd mep Use cfd mep to create a MEP Use undo cfd mep to delete the specified MEP Syntax cfd mep mep id service instance instance id inbound outbound undo cfd mep mep id service instance instance id Default No MEP exists on a port Views Layer 2 Et...

Page 40: ...gured and the remote MEPs to be monitored in the same MA Use undo cfd meplist to delete existing MEP lists Syntax cfd meplist mep list service instance instance id undo cfd meplist mep list service instance instance id Default No MEP list is created Views System view Predefined user roles network admin mdc admin Parameters meplist mep list Specifies a list of MEP IDs indicating multiple MEPs in th...

Page 41: ...rent level A MIP can be created even if no MEP is configured on the interface explicit Specifies the explicit rule If no lower level MIP exists and a lower level MEP exists on an interface a MIP is created at the current level A MIP can be created only when a lower level MEP is created on the interface service instance instance id Specifies the service instance ID in the range of 1 to 32767 Exampl...

Page 42: ...utomatically assigned by the system md md name Specifies the name of an MD The md name argument is a string of 1 to 43 characters that can contain letters numbers and special characters such as tilde exclamation mark at sign number sign dollar sign percent caret ampersand asterisk brackets hyphen underscore _ plus equal sign vertical bar backslash colon semicolon quotation marks comma period and s...

Page 43: ... MEPs is displayed Usage guidelines This command displays only information about LTRs received by execution of the cfd linktrace command Examples Display the LTR information saved on all the MEPs in every service instance Sysname display cfd linktrace reply Service instance 1 MEP ID 1003 MAC Address TTL Last MAC Relay Action 0000 fc00 6505 63 0000 fc00 6504 MPDB 000f e269 a852 62 0000 fc00 6505 FD...

Page 44: ...fined user roles network admin network operator mdc admin mdc operator Parameters size size value Specifies the times of recent auto detections in the range of 1 to 100 If this option is not specified all information in the buffer is displayed Usage guidelines This command displays only information about LTRs received by execution of the cfd linktrace auto detection command Examples Display the co...

Page 45: ...rd version IEEE 802 1ag of CFD is used Hit The current device is the destination device FDB The forwarding device found the destination MAC address MPDB The destination MAC address is not found or the destination MAC address is found in the MEP or MIP database Related commands cfd linktrace auto detection display cfd md Use display cfd md to display the MD configuration information Syntax display ...

Page 46: ...bute and operating information of a MEP Syntax display cfd mep mep id service instance instance id Views Any view Predefined user roles network admin network operator mdc admin mdc operator Parameters mep mep id Specifies a MEP by its ID in the range of 1 to 8191 service instance instance id Specifies a service instance by its ID in the range of 1 to 32767 Usage guidelines The neighbor of an inwar...

Page 47: ...me 2013 03 06 13 01 34 One or more streams of cross connect CCMs is received The last received CCM Maintenance domain mdtest1 Maintenance association matest1 MEP ID 6 Sequence Number 0x63A MAC Address 0011 2233 4401 Received Time 2013 03 06 13 01 34 Some other MEPs are transmitting the RDI bit Table 12 Command output Field Description Interface Interface to which an MD belongs Maintenance domain M...

Page 48: ...received in correct sequence ReceiveOutOrderLBR Number of LBR messages received out of order Linktrace Information related to linktrace NextSeqNumber Sequence number of the next LTM to be sent SendLTR Number of LTRs sent If the MEP is inward facing the number of LTRs will not be counted ReceiveLTM Number of LTMs received No CCM received from some remote MEPs Failure to receive CCMs from some remot...

Page 49: ... service instance Syntax display cfd meplist service instance instance id Views Any view Predefined user roles network admin network operator mdc admin mdc operator Parameters service instance instance id Specifies a service instance by its ID in the range of 1 to 32767 If this option is not specified MEP lists in all service instances are displayed Examples Display the MEP list in service instanc...

Page 50: ...intenance domain index 3 Maintenance association ma_2 Maintenance association index 3 MEP ID 101 Level 1 Service instance 101 Direction Inbound Maintenance domain md_1 Maintenance domain index 2 Maintenance association ma_1 Maintenance association index 2 MEP ID 100 Level 0 Service instance 100 Direction Outbound Maintenance domain md_0 Maintenance domain index 1 Maintenance association ma_0 Maint...

Page 51: ...fc52 baa0 OK 2013 03 06 02 36 44 DOWN 60 0010 fc00 6502 OK 2013 03 06 02 36 42 DOWN Table 14 Command output Field Description MEP ID ID of the remote MED MAC Address MAC address of the remote MEP device If this field is not supported a hyphen is displayed State Running state of the remote MEP OK or FAILED Time Time when the remote MEP entered the FAILED or OK state for the last time MAC Status Sta...

Page 52: ...d_5 Maintenance domain index 5 Maintenance association ma_5 Maintenance association index 5 Level 5 VLAN 5 MIP rule NONE CCM interval 1s Direction Inbound MEP ID 730 Interface Ten GigabitEthernet1 0 1 Service instance 6 Maintenance domain Without ID Maintenance domain index 6 Maintenance association ma_6 Maintenance association index 6 Level 6 VLAN 6 MIP rule NONE CCM interval 1s Direction Outboun...

Page 53: ...CMs Direction Direction of the MEPs configured on the service instance MEP ID ID of MEPs configured on the service instance Interface Interface of the MEP configured on the service instance display cfd status Use display cfd status to display the CFD status Syntax display cfd status Views Any view Predefined user roles network admin network operator mdc admin mdc operator Examples Display the CFD ...

Page 54: ...Display global and port specific DLDP configuration Sysname display dldp DLDP global status Enabled DLDP advertisement interval 5s DLDP authentication mode Simple DLDP authentication password DLDP unidirectional shutdown mode Auto DLDP delaydown timer value 1s Number of enabled ports 2 Interface Ten GigabitEthernet1 0 1 DLDP port state Bidirectional Number of the port s neighbors 1 Neighbor MAC ad...

Page 55: ...ter unidirectional links are detected DLDP delaydown timer value Setting of the DelayDown timer in seconds Number of enabled ports Number of the DLDP enabled ports Interface Index of a DLDP enabled port DLDP port state DLDP state on a port Bidirectional Inactive Initial Unidirectional Number of the port s neighbors Current number of neighbors Maximum number ever detected Maximum number of neighbor...

Page 56: ...ved 0 Authentication failed packets received 0 Valid packets received 3 Interface Ten GigabitEthernet1 0 2 Packets sent 7 Packets received 7 Invalid packets received 3 Loopback packets received 0 Authentication failed packets received 0 Valid packets received 4 Table 17 Command output Field Description Interface Port index Packets sent Total number of DLDP packets sent Packets received Total numbe...

Page 57: ...ink are the same If you do not configure the authentication password after you configure the authentication mode the authentication mode is none no matter which authentication mode you configure Examples Configure to perform plain text authentication and set the password to abc assuming that Device A and Device B are connected by a DLDP link Configure Device A DeviceA system view DeviceA dldp auth...

Page 58: ...des and the passwords configured on the two ends of a link are the same If you do not configure the authentication password after you configure the authentication mode the authentication mode is none no matter which authentication mode you configure Examples Configure to perform plain text authentication and set the password to abc assuming that Device A and Device B are connected by a DLDP link C...

Page 59: ...er 2 Related commands display dldp dldp enable Use dldp enable to enable DLDP on a port Use undo dldp enable to disable DLDP on a port Syntax dldp enable undo dldp enable Default DLDP is disabled on a port Views Layer 2 Ethernet interface view Layer 3 Ethernet interface view Predefined user roles network admin mdc admin Usage guidelines DLDP can take effect only after you enable it globally and on...

Page 60: ...dc admin Usage guidelines DLDP can take effect only after you enable it globally and on a port Examples Enable DLDP globally Sysname system view Sysname dldp global enable Related commands display dldp dldp enable dldp interval Use dldp interval to set the interval for sending Advertisement packets Use undo dldp interval to restore the default Syntax dldp interval time undo dldp interval Default T...

Page 61: ...utdown to restore the default Syntax dldp unidirectional shutdown auto manual undo dldp unidirectional shutdown Default The port shutdown mode is auto mode Views System view Predefined user roles network admin mdc admin Parameters auto Configures the port shutdown mode as auto mode In this mode when DLDP detects a unidirectional link it shuts down the Unidirectional port manual Configures the port...

Page 62: ... interface type interface number Clears the statistics on DLDP packets passing through a port interface type interface number represents a port by its type and number Usage guidelines If no port is specified this command clears the statistics on the DLDP packets passing through all the DLDP enabled ports Examples Clear the statistics on the DLDP packets passing through all the DLDP enabled ports S...

Page 63: ...s virtual router ID in the range of 1 to 255 verbose Displays detailed IPv4 VRRP group information If the verbose keyword is not specified this command displays brief IPv4 VRRP group information Usage guidelines If no interface or VRRP group is specified this command displays the states of all IPv4 VRRP groups If only an interface is specified this command displays the states of all IPv4 VRRP grou...

Page 64: ...ntication Simple Simple text authentication MD5 MD5 authentication Virtual IP Virtual IP address of the VRRP group Display detailed information about all IPv4 VRRP groups on the device when VRRP operates in standard mode Sysname display vrrp verbose IPv4 Virtual Router Information Running Mode Standard Total number of virtual routers 2 Interface Vlan interface2 VRID 1 Adver Timer 100 Admin Status ...

Page 65: ...mpt Mode Preemptive mode Yes No Delay Time Preemption delay time in seconds Become Master Time in milliseconds that a backup router has to wait before it becomes the master Auth Type Authentication type None No authentication Simple Simple text authentication MD5 MD5 authentication Key Authentication key which is not displayed if no authentication is required Virtual IP Virtual IP address of the V...

Page 66: ...plays statistics for all IPv4 VRRP groups If only an interface is specified this command displays statistics for all IPv4 VRRP groups on the specified interface If both an interface and an IPv4 VRRP group are specified this command displays statistics for the specified IPv4 VRRP group on the specified interface You can use the reset vrrp statistics command to clear statistics for IPv4 VRRP groups ...

Page 67: ...use of mismatching authentication types Packet Length Errors Number of packets with VRRP packet length errors Address List Errors Number of packets with virtual IP address list errors Become Master Number of times that the router elected as the master Priority Zero Pkts Rcvd Number of received advertisements with the router priority of 0 Adver Rcvd Number of received advertisements Priority Zero P...

Page 68: ... VRRP groups on all interfaces Sysname reset vrrp statistics Related commands display vrrp statistics snmp agent trap enable vrrp Use snmp agent trap enable vrrp to enable SNMP notifications for VRRP globally Use undo snmp agent trap enable vrrp to disable SNMP notifications for VRRP globally Syntax snmp agent trap enable vrrp auth failure new master undo snmp agent trap enable vrrp auth failure n...

Page 69: ...n mdc admin Usage guidelines The master in an IPv4 VRRP group periodically sends VRRP advertisements to declare its presence The VRRP advertisements are multicast in the local subnet and cannot be forwarded by routers so the TTL value is not changed When the master sends VRRP advertisements it sets the TTL value to 255 If you enable TTL check the backups drop the VRRP advertisements with TTL other...

Page 70: ... 30 vrrp version Use vrrp version to specify the version of IPv4 VRRP on an interface Use undo vrrp version to restore the default Syntax vrrp version version number undo vrrp version Default VRRPv3 is used Views Interface view Predefined user roles network admin mdc admin Parameters version number Specifies a VRRP version The version number is 2 or 3 where 2 indicates VRRPv2 described in RFC 3768...

Page 71: ... string of 1 to 8 characters if the plain keyword is specified Usage guidelines To avoid attacks from unauthorized users VRRP member routers add authentication keys in VRRP packets to authenticate one another VRRP provides the following authentication modes simple Simple text authentication The sender fills an authentication key into the VRRP packet and the receiver compares the received authentic...

Page 72: ... preemption delay Syntax vrrp vrid virtual router id preempt mode delay delay value undo vrrp vrid virtual router id preempt mode delay Default The device operates in preemptive mode and the preemption delay is 0 seconds Views Interface view Predefined user roles network admin mdc admin Parameters virtual router id Specifies an IPv4 VRRP group by its virtual router ID in the range of 1 to 255 dela...

Page 73: ...The priority of a device in an IPv4 VRRP group is 100 Views Interface view Predefined user roles network admin mdc admin Parameters virtual router id Specifies an IPv4 VRRP group by its virtual router ID in the range of 1 to 255 priority value Specifies a priority value in the range of 1 to 254 A higher number indicates a higher priority Usage guidelines VRRP determines the role master or backup o...

Page 74: ...te and its configurations remain unchanged You can change its configuration and your changes take effect when you enable the VRRP group again Examples Disable IPv4 VRRP group 1 Sysname system view Sysname interface vlan interface 2 Sysname Vlan interface2 vrrp vrid 1 shutdown vrrp vrid source interface Use vrrp vrid source interface to specify the source interface for an IPv4 VRRP group This inter...

Page 75: ...nterval at which the master in an IPv4 VRRP group sends VRRP advertisements Use undo vrrp vrid timer advertise to restore the default Syntax vrrp vrid virtual router id timer advertise adver interval undo vrrp vrid virtual router id timer advertise Default The master in an IPv4 VRRP group sends VRRP advertisements at an interval of 100 centiseconds Views Interface view Predefined user roles networ...

Page 76: ...ng VRRP advertisements from the master within the specified time and trigger an unexpected master switchover To solve this problem you can use this command to configure a larger interval Examples Configure the master in IPv4 VRRP group 1 to send VRRP advertisements at an interval of 500 centiseconds Sysname system view Sysname interface vlan interface 2 Sysname Vlan interface2 vrrp vrid 1 timer ad...

Page 77: ...rp vrid track command cannot take effect on an IP address owner If you have configured the command on an IP address owner the configuration takes effect after the router changes to be a non IP address owner You can create a track entry with the track command before or after you associate it with a VRRP group For more information about configuring track entries see High Availability Configuration G...

Page 78: ...n The virtual IP addresses of an IPv4 VRRP group must be in the same subnet as one of the IP addresses of the interface where the VRRP group is configured Otherwise the hosts in the subnet cannot access external networks Examples Create IPv4 VRRP group 1 and assign virtual IP address 10 10 10 10 to the VRRP group Then assign virtual IP address 10 10 10 11 to the VRRP group Sysname system view Sysn...

Page 79: ...ber of virtual routers 1 Interface VRID State Running Adver Auth Virtual Pri Timer Type IP Vlan2 1 Master 150 100 None FE80 10 Table 21 Command output in standard mode Field Description Running Mode VRRP operating mode standard mode Total number of virtual routers Total number of VRRP groups Interface Interface where the VRRP group is configured VRID Virtual router ID VRRP group number State Statu...

Page 80: ... 2 Table 22 Command output in standard mode Field Description Running Mode VRRP operating mode standard mode Total number of virtual routers Total number of VRRP groups Interface Interface where the VRRP group is configured VRID Virtual router ID VRRP group number Adver Timer VRRP advertisement sending interval in centiseconds Admin Status Administrative status up or down State Status of the route...

Page 81: ...ue by which the priority decreases when the status of the associated track entry becomes negative Switchover Switchover mode When the status of the associated track entry becomes negative the backup immediately becomes the master display vrrp ipv6 statistics Use display vrrp ipv6 statistics to display statistics for IPv6 VRRP groups Syntax display vrrp ipv6 statistics interface interface type inte...

Page 82: ...gured VRID VRRP group number CheckSum Errors Number of packets with checksum errors Version Errors Number of packets with version errors Invalid Pkts Rcvd Number of received packets of invalid packet types Unexpected Pkts Rcvd Number of received unexpected packets Advertisement Interval Errors Number of packets with advertisement interval errors Hop Limit Errors Number of packets with hop limit er...

Page 83: ...umber Specifies an interface by its type and number vrid virtual router id Specifies an IPv6 VRRP group by its virtual router ID in the range of 1 to 255 Usage guidelines If no interface or VRRP group is specified this command clears statistics for all IPv6 VRRP groups If only an interface is specified this command clears statistics for all IPv6 VRRP groups on the specified interface If both an in...

Page 84: ...Pv6 VRRP group Use undo vrrp ipv6 vrid preempt mode delay to restore the default preemption delay Syntax vrrp ipv6 vrid virtual router id preempt mode delay delay value undo vrrp ipv6 vrid virtual router id preempt mode delay Default The router operates in preemptive mode and the preemption delay is 0 seconds Views Interface view Predefined user roles network admin mdc admin Parameters virtual rou...

Page 85: ...Use undo vrrp ipv6 vrid priority to restore the default Syntax vrrp ipv6 vrid virtual router id priority priority value undo vrrp ipv6 vrid virtual router id priority Default The priority of a router in an IPv6 VRRP group is 100 Views Interface view Predefined user roles network admin mdc admin Parameters virtual router id Specifies an IPv6 VRRP group by its virtual router ID in the range of 1 to ...

Page 86: ...After this command is configured the VRRP group stays in initialized state and its configurations remain unchanged You can change its configuration and your changes take effect when you enable the VRRP group again Examples Disable IPv6 VRRP group 1 Sysname system view Sysname interface vlan interface 2 Sysname Vlan interface2 vrrp ipv6 vrid 1 shutdown vrrp ipv6 vrid timer advertise Use vrrp ipv6 v...

Page 87: ...ements After a backup receives the advertisement it records the interval in the advertisement If the backup does not receive a new VRRP advertisement from the master when the timer 3 VRRP advertisement sending interval Skew_Time expires it regards the master as failed and takes over as the master Large network traffic might disable a backup from receiving VRRP advertisements from the master within...

Page 88: ... switchover is specified the priority of the router in the VRRP group decreases by 10 when the track entry changes to negative When the track entry changes from Negative to Positive or NotReady the router automatically restores its priority IMPORTANT The vrrp ipv6 vrid track command cannot take effect on an IP address owner If you have configured the command on an IP address owner the configuratio...

Page 89: ... can assign up to 16 virtual IPv6 addresses to an IPv6 VRRP group The first virtual IPv6 address that you assign for an IPv6 VRRP group must be a link local address and it must be removed last An IPv6 VRRP group can have only one link local address as its virtual IPv6 address If you create an IPv6 VRRP group but do not assign any virtual IPv6 address for it the VRRP group stays in inactive state a...

Page 90: ...mple Specifies the simple authentication mode key id Sets the authentication key ID in the range of 1 to 255 cipher Sets a ciphertext password cipher string Ciphertext password which is a case sensitive string of 33 to 53 characters plain Sets a ciphertext password plain string Plaintext password which is a case sensitive string of 1 to 16 characters Usage guidelines Use this command to enhance BF...

Page 91: ...ntrol packets are sent until the next command is issued In asynchronous mode both endpoints periodically send BFD control packets to each other BFD considers that the session is down if it receives no BFD control packets within a specific interval Examples Enable the Demand BFD session mode on VLAN interface 11 Sysname system view Sysname interface vlan interface 11 Sysname Vlan interface11 bfd de...

Page 92: ... detection time multiplier as 6 on VLAN interface 11 Sysname system view Sysname interface vlan interface 11 Sysname Vlan interface11 bfd detect multiplier 6 bfd echo enable Use bfd echo enable to enable the echo packet mode Use undo bfd echo enable to restore the default Syntax bfd echo enable undo bfd echo enable Default The echo packet mode is disabled Views Interface view Predefined user roles...

Page 93: ...ot be on the same network segment as any local interface s IP address Otherwise a large number of ICMP redirect packets might be sent from the peer resulting in link congestion Examples Configure the source IP address of BFD echo packets as 8 8 8 8 Sysname system view Sysname bfd echo source ip 8 8 8 8 bfd echo source ipv6 Use bfd echo source ipv6 to configure the source IPv6 address of BFD echo p...

Page 94: ...o restore the default Syntax bfd min echo receive interval value undo bfd min echo receive interval Default The minimum interval for receiving BFD echo packets is 400 milliseconds Views Interface view Predefined user roles network admin mdc admin Parameters value Specifies a minimum interval for receiving BFD echo packets in milliseconds The value takes 0 or is in the range of 10 to 1000 Usage gui...

Page 95: ...he peer end takes the greater value between the minimum interval for transmitting BFD control packets on the peer end and the minimum interval for receiving BFD control packets on the local end Examples Configure the minimum interval for receiving single hop BFD control packets on VLAN interface 11 as 500 milliseconds Sysname system view Sysname interface vlan interface 11 Sysname Vlan interface11...

Page 96: ...cation mode Use bfd multi hop authentication mode to configure the authentication mode for multi hop BFD control packets Use undo bfd multi hop authentication mode to restore the default Syntax bfd multi hop authentication mode simple key id cipher cipher string plain plain string undo bfd multi hop authentication mode Default No authentication is performed Views System view Predefined user roles ...

Page 97: ...umber for multi hop BFD control packets is 4784 Views System view Predefined user roles network admin mdc admin Parameters port number Specifies the destination port number of multi hop BFD control packets 3784 or 4784 Examples Configure the destination port number for multi hop BFD control packets as 3784 Sysname system view Sysname bfd multi hop destination port 3784 bfd multi hop detect multipl...

Page 98: ...mum interval for receiving multi hop BFD control packets Use undo bfd multi hop min receive interval to restore the default Syntax bfd multi hop min receive interval value undo bfd multi hop min receive interval Default The minimum interval for receiving multi hop BFD control packets is 400 milliseconds Views System view Predefined user roles network admin mdc admin Parameters value Specifies the ...

Page 99: ...ines Use this command to make sure that the BFD packet sending rate does not exceed the device capability The actual BFD control packet transmitting interval on the local end is the greater value between the minimum interval for transmitting BFD control packets on the local end and the minimum interval for receiving BFD control packets on the peer end Examples Configure the minimum interval for tr...

Page 100: ...o display BFD session information Syntax display bfd session discriminator value verbose Views Any view Predefined user roles network admin network operator mdc admin mdc operator Parameters discriminator value Specifies a local ID in the range of 1 to 4294967295 If this option is not specified the command displays brief information about all BFD sessions verbose Displays detailed BFD session info...

Page 101: ...ype Direct Running Up for 00 00 20 Hold Time 2078ms Auth mode None Detect Mode Async Slot 1 Protocol OSPF Diag Info No Diagnostic Display detailed IPv6 BFD session information Sysname display bfd session verbose Total Session Num 1 Up Session Num 1 Init Mode Active IPv6 Session Working Under Ctrl Mode Local Discr 513 Remote Discr 513 Source IP FE80 20C 29FF FED4 7171 Destination IP FE80 20C 29FF F...

Page 102: ...imum receive interval Act Tx Inter Actual transmit interval Detect Inter Actual session detection timer Rx Count Number of packets received Tx Count Number of packets sent Hold Time Holdtime Length of time before session detection timer expires Auth mode Session authentication mode only simple is supported Connect Type Connection type of the interface direct or indirect Running up for Time interva...

Page 103: ...98 Examples Clear the BFD session statistics Sysname reset bfd session statistics ...

Page 104: ... about all track entries Sysname display track all Track ID 1 State Positive notify 13 seconds later Duration 0 days 0 hours 0 minutes 7 seconds Notification delay Positive 20 Negative 30 in seconds Tracked object NQA entry admin test Reaction 10 Track ID 2 State NotReady Duration 0 days 0 hours 0 minutes 32 seconds Notification delay Positive 20 Negative 30 in seconds Tracked object BFD session m...

Page 105: ...ntry changes to Positive after a delay time of 20 seconds The Track module notifies the application modules that the status of the track entry changes to Negative after a delay time of 30 seconds Tracked object Tracked object associated with the track entry NQA entry NQA test group associated with the track entry Reaction Reaction entry associated with the track entry BFD session mode BFD session ...

Page 106: ...n modules immediately when the track entry state changes negative negative time Specifies the amount of time the Track module waits before notifying the application modules that the status of the track entry has changed to Negative The negative time argument represents the delay time in the range of 1 to 300 seconds positive positive time Specifies the amount of time the Track module waits before ...

Page 107: ...odule notifies the application modules immediately when the track entry state changes negative negative time Specifies the amount of time the Track module waits before notifying the application modules that the status of the track entry has changed to Negative The negative time argument represents the delay time in the range of 1 to 300 seconds positive positive time Specifies the amount of time t...

Page 108: ...e range of 1 to 10 delay Specifies the amount of time the Track module waits before notifying the application modules that the track entry state has changed If this keyword is not specified the Track module notifies the application modules immediately when the track entry state changes negative negative time Specifies the amount of time the Track module waits before notifying the application modul...

Page 109: ...track entry has changed to Negative The negative time argument represents the delay time in the range of 1 to 300 seconds positive positive time Specifies the amount of time the Track module waits before notifying the application modules that the state of the track entry has changed to Positive The positive time argument represents the delay time in the range of 1 to 300 seconds Usage guidelines W...

Page 110: ...wn the state of the track object is Negative To display the IPv6 protocol state of an interface use the display ipv6 interface brief command delay Specifies the amount of time the Track module waits before notifying the application modules that the track entry state has changed If this keyword is not specified the Track module notifies the application modules immediately when the track entry state...

Page 111: ...106 Related commands display track display ip interface brief Layer 3 IP Services Command Reference display ipv6 interface brief Layer 3 IP Services Command Reference ...

Page 112: ...ast one x y Asterisk marked square brackets enclose optional syntax choices separated by vertical bars from which you select one choice multiple choices or none 1 n The argument or keyword and argument combination before the ampersand sign can be entered 1 to n times A line that starts with a pound sign is comments GUI conventions Convention Description Boldface Window names button names field nam...

Page 113: ... Represents an access controller a unified wired WLAN module or the access controller engine on a unified wired WLAN switch Represents an access point Represents a wireless terminator unit Represents a wireless terminator Represents a mesh access point Represents omnidirectional signals Represents directional signals Represents a security product such as a firewall UTM multiservice security gatewa...

Page 114: ...s provide a mechanism for accessing software updates through the product interface Review your product documentation to identify the recommended software update method To download product updates go to either of the following Hewlett Packard Enterprise Support Center Get connected with updates page www hpe com support e updates Software Depot website www hpe com support softwaredepot To view and u...

Page 115: ...r self repair CSR programs allow you to repair your product If a CSR part needs to be replaced it will be shipped directly to you so that you can install it at your convenience Some parts do not qualify for CSR Your Hewlett Packard Enterprise authorized service provider will determine whether a repair can be accomplished by CSR For more information about CSR contact your local service provider or ...

Page 116: ...number edition and publication date located on the front cover of the document For online help content include the product name product version help edition and publication date located on the legal notices page ...

Page 117: ...ical event 6 display oam link event 7 display track 99 display vrrp 58 display vrrp ipv6 73 display vrrp ipv6 statistics 76 display vrrp statistics 61 dldp authentication mode 52 dldp authentication password 52 dldp delaydown timer 53 dldp enable 54 dldp global enable 55 dldp interval 55 dldp unidirectional shutdown 56 O oam enable 10 oam errored frame threshold 10 oam errored frame window 11 oam ...

Page 118: ...6 dscp 78 vrrp ipv6 vrid 83 vrrp ipv6 vrid preempt mode 79 vrrp ipv6 vrid priority 80 vrrp ipv6 vrid shutdown 81 vrrp ipv6 vrid timer advertise 81 vrrp ipv6 vrid track 82 vrrp version 65 vrrp vrid 72 vrrp vrid authentication mode 66 vrrp vrid preempt mode 67 vrrp vrid priority 68 vrrp vrid shutdown 69 vrrp vrid source interface 69 vrrp vrid timer advertise 70 vrrp vrid track 71 ...