H3C S7500E-X Switch Series

Transcription

1 H3C S7500E-X Switch Series Comware 7 Network Management and Monitoring Command Reference New H3C Technologies Co., Ltd. Software version: S7500EX-CMW710-R7536P05 Document version: 6W

2 Copyright 2017, New H3C Technologies Co., Ltd. and its licensors All rights reserved No part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of New H3C Technologies Co., Ltd. Trademarks H3C,, H3CS, H3CIE, H3CNE, Aolynk,, H 3 Care,, IRF, NetPilot, Netflow, SecEngine, SecPath, SecCenter, SecBlade, Comware, ITCMM and HUASAN are trademarks of New H3C Technologies Co., Ltd. All other trademarks that may be mentioned in this manual are the property of their respective owners Notice The information in this document is subject to change without notice. Every effort has been made in the preparation of this document to ensure accuracy of the contents, but all statements, information, and recommendations in this document do not constitute the warranty of any kind, express or implied.

3 Preface This command reference covers the commands that help you manage and monitor your network, for example, manage system events, collect traffic statistics, sample packets, assess network performance, and test network connectivity. This preface includes the following topics about the documentation: Audience. Conventions Obtaining documentation Technical support Documentation feedback Audience This documentation is intended for: Network planners. Field technical support and servicing engineers. Network administrators working with the routers. Conventions The following information describes the conventions used in the documentation. Command conventions Convention Boldface Italic Description Bold text represents commands and keywords that you enter literally as shown. Italic text represents arguments that you replace with actual values. [ ] Square brackets enclose syntax choices (keywords or arguments) that are optional. { x y... } [ x y... ] { x y... } * [ x y... ] * &<1-n> Braces enclose a set of required syntax choices separated by vertical bars, from which you select one. Square brackets enclose a set of optional syntax choices separated by vertical bars, from which you select one or none. Asterisk marked braces enclose a set of required syntax choices separated by vertical bars, from which you select a minimum of one. Asterisk marked square brackets enclose optional syntax choices separated by vertical bars, from which you select one choice, multiple choices, or none. The argument or keyword and argument combination before the ampersand (&) sign can be entered 1 to n times. # A line that starts with a pound (#) sign is comments. GUI conventions Convention Boldface Description Window names, button names, field names, and menu items are in Boldface. For

4 Convention > Description example, the New User window opens; click OK. Multi-level menus are separated by angle brackets. For example, File > Create > Folder. Symbols Convention WARNING! CAUTION: IMPORTANT: NOTE: TIP: Description An alert that calls attention to important information that if not understood or followed can result in personal injury. An alert that calls attention to important information that if not understood or followed can result in data loss, data corruption, or damage to hardware or software. An alert that calls attention to essential information. An alert that contains additional or supplementary information. An alert that provides helpful information. Network topology icons Convention Description Represents a generic network device, such as a router, switch, or firewall. Represents a routing-capable device, such as a router or Layer 3 switch. Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supports Layer 2 forwarding and other Layer 2 features. Represents an access controller, a unified wired-wlan module, or the access controller engine on a unified wired-wlan switch. Represents an access point. T Wireless terminator unit. T Wireless terminator. Represents a mesh access point. Represents omnidirectional signals. Represents directional signals. Represents a security product, such as a firewall, UTM, multiservice security gateway, or load balancing device. Represents a security module, such as a firewall, load balancing, NetStream, SSL VPN, IPS, or ACG module.

5 provided in this document in this document might use devices that differ from your device in hardware model, configuration, or software version. It is normal that the port numbers, sample output, screenshots, and other information in the examples differ from what you have on your device. Obtaining documentation To access the most up-to-date H3C product documentation, go to the H3C website at To obtain information about installation, configuration, and maintenance, click To obtain software version information such as release notes, click Technical support Documentation feedback You can your comments about product documentation to We appreciate your comments.

6 Contents Ping, tracert, and system debugging commands 1 debugging 1 display debugging 1 ping 2 ping ipv6 5 tracert 7 tracert ipv6 9 NQA commands 12 NQA client commands 12 advantage-factor 12 codec-type 12 community read 13 data-fill 14 data-size 15 description 16 destination host 17 destination ip 17 destination ipv6 18 destination port 19 display nqa history 20 display nqa reaction counters 21 display nqa result 23 display nqa statistics 31 expect data 39 expect ip 40 expect ipv6 41 expect status 42 filename 42 frequency 43 history-record enable 44 history-record keep-time 45 history-record number 45 init-ttl 46 key 47 lsr-path 47 max-failure 48 mode 49 next-hop ip 49 next-hop ipv6 50 no-fragment enable 51 nqa 51 nqa agent enable 52 nqa schedule 52 nqa template 54 operation (FTP operation view) 54 operation (HTTP/HTTPS operation view) 55 out interface 56 password 57 probe count 58 probe packet-interval 59 probe packet-number 60 probe packet-timeout 61 probe timeout 61 raw-request 62 reaction checked-element { jitter-ds jitter-sd } 63 reaction checked-element { owd-ds owd-sd } 64 i

7 reaction checked-element icpif 65 reaction checked-element mos 66 reaction checked-element packet-loss 67 reaction checked-element probe-duration 68 reaction checked-element probe-fail (for trap) 70 reaction checked-element probe-fail (for trigger) 71 reaction checked-element rtt 72 reaction trap 73 reaction trigger per-probe 74 reaction trigger probe-fail 75 reaction trigger probe-pass 76 resolve-target 77 resolve-type 77 route-option bypass-route 78 source interface (ICMP echo/udp tracert operation view) 79 source ip 80 source ipv6 81 source port 81 ssl-client-policy 82 statistics hold-time 83 statistics interval 83 statistics max-group 84 target-only 85 tos 85 ttl 86 type 87 url 88 username 89 version 90 vpn-instance 90 NQA server commands 91 display nqa server 91 nqa server enable 92 nqa server tcp-connect 93 nqa server udp-echo 94 NTP commands 96 display ntp-service ipv6 sessions 96 display ntp-service sessions 101 display ntp-service status 105 display ntp-service trace 107 ntp-service acl 109 ntp-service authentication enable 110 ntp-service authentication-keyid 110 ntp-service broadcast-client 112 ntp-service broadcast-server 113 ntp-service dscp 113 ntp-service enable 114 ntp-service inbound enable 114 ntp-service ipv6 acl 115 ntp-service ipv6 dscp 116 ntp-service ipv6 inbound enable 117 ntp-service ipv6 multicast-client 118 ntp-service ipv6 multicast-server 118 ntp-service ipv6 source 119 ntp-service ipv6 unicast-peer 120 ntp-service ipv6 unicast-server 122 ntp-service max-dynamic-sessions 123 ntp-service multicast-client 124 ntp-service multicast-server 124 ntp-service refclock-master 125 ntp-service reliable authentication-keyid 126 ii

8 ntp-service source 127 ntp-service unicast-peer 128 ntp-service unicast-server 129 SNTP commands 131 display sntp ipv6 sessions 131 display sntp sessions 131 sntp authentication enable 132 sntp authentication-keyid 133 sntp enable 134 sntp ipv6 unicast-server 135 sntp reliable authentication-keyid 136 sntp unicast-server 137 PoE commands 139 apply poe-profile 139 apply poe-profile interface 139 display poe device 140 display poe interface 141 display poe interface power 144 display poe power-usage 145 display poe pse 146 display poe pse interface 148 display poe pse interface power 149 display poe-power 150 display poe-profile 152 display poe-profile interface 153 poe enable 154 poe enable pse 155 poe legacy enable 155 poe max-power 156 poe max-power (system view) 157 poe mode 158 poe pd-description 158 poe pd-policy priority 159 poe power max-value 160 poe priority 160 poe priority (system view) 161 poe pse-policy priority 162 poe temperature-protection 163 poe update 164 poe utilization-threshold 165 poe-profile 165 SNMP commands 167 display snmp-agent community 167 display snmp-agent context 169 display snmp-agent group 169 display snmp-agent local-engineid 170 display snmp-agent mib-node 171 display snmp-agent mib-view 175 display snmp-agent remote 176 display snmp-agent statistics 177 display snmp-agent sys-info 179 display snmp-agent trap queue 180 display snmp-agent trap-list 180 display snmp-agent usm-user 181 enable snmp trap updown 183 snmp-agent 184 snmp-agent { inform trap } source 184 snmp-agent calculate-password 185 snmp-agent community 187 iii

9 snmp-agent community-map 190 snmp-agent context 190 snmp-agent group 191 snmp-agent local-engineid 193 snmp-agent log 194 snmp-agent mib-view 195 snmp-agent packet max-size 196 snmp-agent port 197 snmp-agent remote 197 snmp-agent sys-info contact 198 snmp-agent sys-info location 199 snmp-agent sys-info version 200 snmp-agent target-host 200 snmp-agent trap enable 202 snmp-agent trap if-mib link extended 203 snmp-agent trap life 204 snmp-agent trap log 205 snmp-agent trap queue-size 205 snmp-agent usm-user { v1 v2c } 206 snmp-agent usm-user v3 208 snmp-agent usm-user v3 user-role 212 RMON commands 214 display rmon alarm 214 display rmon event 215 display rmon eventlog 216 display rmon history 218 display rmon prialarm 220 display rmon statistics 221 rmon alarm 223 rmon event 225 rmon history 226 rmon prialarm 227 rmon statistics 229 NETCONF commands 231 netconf capability specific-namespace 231 netconf idle-timeout 231 netconf log 232 netconf soap domain 233 netconf soap http acl 234 netconf soap http dscp 235 netconf soap http enable 235 netconf soap https acl 236 netconf soap https dscp 237 netconf soap https enable 237 netconf ssh server enable 238 netconf ssh server port 239 xml 239 EAA commands 242 action cli 242 action reboot 243 action switchover 244 action syslog 245 commit 245 display rtm environment 246 display rtm policy 247 event cli 249 event hotplug 250 event interface 251 event process 253 iv

10 event snmp oid 254 event snmp-notification 255 event syslog 256 event track 257 rtm cli-policy 258 rtm environment 259 rtm event syslog buffer-size 261 rtm scheduler suspend 261 rtm tcl-policy 262 running-time 263 user-role 264 Process monitoring and maintenance commands 265 display exception context 265 display exception filepath 269 display kernel deadloop 270 display kernel deadloop configuration 273 display kernel exception 275 display kernel reboot 278 display kernel starvation 281 display kernel starvation configuration 284 display process 285 display process cpu 288 display process log 289 display process memory 290 display process memory heap 292 display process memory heap address 293 display process memory heap size 295 exception filepath 296 monitor kernel deadloop action 297 monitor kernel deadloop enable 298 monitor kernel deadloop exclude-thread 299 monitor kernel deadloop time 300 monitor kernel starvation enable 301 monitor kernel starvation exclude-thread 302 monitor kernel starvation time 303 monitor process 304 monitor thread 309 process core 312 reset exception context 313 reset kernel deadloop 314 reset kernel exception 314 reset kernel reboot 315 reset kernel starvation 316 Sampler commands 317 display sampler 317 sampler 318 Port mirroring commands 319 display mirroring-group 319 mirroring-group 320 mirroring-group mirroring-cpu 321 mirroring-group mirroring-port (interface view) 322 mirroring-group mirroring-port (system view) 323 mirroring-group monitor-egress 324 mirroring-group monitor-port (interface view) 325 mirroring-group monitor-port (system view) 326 mirroring-group reflector-port 327 mirroring-group remote-probe vlan 328 v

11 Flow mirroring commands 330 mirror-to cpu 330 mirror-to interface 330 NetStream commands 332 display ip netstream cache 332 display ip netstream export 337 display ip netstream template 339 enable 341 ip netstream 342 ip netstream aggregation 342 ip netstream aggregation advanced 344 ip netstream export host 345 ip netstream export rate 346 ip netstream export source 346 ip netstream export template refresh-rate 347 ip netstream export version 348 ip netstream filter 349 ip netstream sampler 350 ip netstream timeout active 350 ip netstream timeout inactive 351 reset ip netstream statistics 352 IPv6 NetStream commands 353 display ipv6 netstream cache 353 display ipv6 netstream export 357 display ipv6 netstream template 358 enable 361 ipv6 netstream 361 ipv6 netstream aggregation 362 ipv6 netstream aggregation advanced 363 ipv6 netstream export host 364 ipv6 netstream export rate 365 ipv6 netstream export source 365 ipv6 netstream export template refresh-rate 366 ipv6 netstream export version 367 ipv6 netstream timeout active 368 ipv6 netstream timeout inactive 369 reset ipv6 netstream statistics 369 sflow commands 371 display sflow 371 sflow agent 372 sflow collector 373 sflow counter collector 374 sflow counter interval 374 sflow flow collector 375 sflow flow max-header 376 sflow sampling-mode 376 sflow sampling-rate 377 sflow source 378 Information center commands 379 diagnostic-logfile save 379 display diagnostic-logfile summary 379 display info-center 380 display logbuffer 381 display logbuffer summary 383 display logfile summary 384 display security-logfile summary 384 enable log updown 385 vi

12 info-center diagnostic-logfile directory 386 info-center diagnostic-logfile enable 386 info-center diagnostic-logfile frequency 387 info-center diagnostic-logfile quota 387 info-center enable 388 info-center format 388 info-center logbuffer 389 info-center logbuffer size 390 info-center logfile directory 390 info-center logfile enable 391 info-center logfile frequency 392 info-center logfile overwrite-protection 392 info-center logfile size-quota 393 info-center logging suppress duplicates 393 info-center logging suppress module 395 info-center loghost 396 info-center loghost source 397 info-center security-logfile alarm-threshold 397 info-center security-logfile directory 398 info-center security-logfile enable 399 info-center security-logfile frequency 399 info-center security-logfile size-quota 400 info-center source 400 info-center synchronous 402 info-center syslog min-age 403 info-center syslog trap buffersize 404 info-center timestamp 404 info-center timestamp loghost 405 info-center trace-logfile quota 406 logfile save 406 reset logbuffer 407 security-logfile save 407 snmp-agent trap enable syslog 408 terminal debugging 409 terminal logging level 410 terminal monitor 410 GOLD commands 412 diagnostic event-log size 412 diagnostic monitor enable 412 diagnostic monitor interval 413 diagnostic simulation 414 display diagnostic content 415 display diagnostic event-log 418 display diagnostic result 419 display diagnostic result statistics 421 display diagnostic simulation 423 reset diagnostic event-log 423 reset diagnostic result 424 Packet capture commands 425 packet-capture interface 425 packet-capture read 427 VCF fabric commands 429 border enable 429 display vcf-fabric role 429 display vcf-fabric topology 430 display vcf-fabric underlay autoconfigure 431 gateway ip 434 l2agent enable 435 l3agent enable 435 vii

13 network-type 436 neutron 436 proxy-arp enable 437 rabbit durable-queue enable 438 rabbit host 438 rabbit password 439 rabbit source-ip 440 rabbit user 441 rabbit virtual-host 441 restful user 442 vcf-fabric role 443 vcf-fabric spine-role master 443 vcf-fabric topology enable 444 vcf-fabric underlay autoconfigure 444 vcf-fabric underlay pause 445 vpn-target export-extcommunity 446 vpn-target import-extcommunity 446 vsi-mac 447 CWMP commands 449 cwmp 449 cwmp acs default password 449 cwmp acs default url 450 cwmp acs default username 451 cwmp acs password 451 cwmp acs url 452 cwmp acs username 453 cwmp cpe connect interface 454 cwmp cpe connect retry 454 cwmp cpe inform interval 455 cwmp cpe inform interval enable 456 cwmp cpe inform time 456 cwmp cpe password 457 cwmp cpe provision-code 458 cwmp cpe username 459 cwmp cpe wait timeout 459 cwmp enable 460 display cwmp configuration 461 display cwmp status 462 ssl client-policy 463 Index 465 viii

14 Ping, tracert, and system debugging commands debugging Use debugging to enable debugging for a module. Use undo debugging to disable debugging for a module or for all modules. debugging module-name [ option ] undo debugging { all module-name [ option ] } Debugging is disabled for all modules. User view module-name: Specifies a module by its name, such as arp or device. For a list of supported modules, use the debugging? command. option: Specifies the debugging option for a module. Available options vary by module. To display the debugging options supported by a module, use the debugging module-name? command. all: Specifies all modules. Output from debugging commands is memory intensive. To guarantee system performance, enable debugging only for modules that are in an exceptional condition. The system sends generated debug messages to the device information center, which then sends the messages to appropriate destinations based on the log output configuration. For more information about the information center, see Network Management and Monitoring Configuration Guide. # Enable debugging for the device management module. <Sysname> debugging dev Related commands display debugging display debugging Use display debugging to display the enabled debugging features for a module or for all modules. 1

15 display debugging [ module-name ] Any view network-operator mdc-operator module-name: Specifies a module by its name. For a list of supported modules, use the display debugging? command. If you do not specify a module name, this command displays the enabled debugging features for all modules. # Display all enabled debugging features. <Sysname> display debugging DEV debugging switch is on Related commands debugging ping Use ping to test the reachability of the destination IP address and display ping statistics. ping [ ip ] [ -a source-ip -c count -f -h ttl -i interface-type interface-number -m interval -n -p pad -q -r -s packet-size -t timeout -tos tos -v -vpn-instance vpn-instance-name ] * host Any view ip: Distinguishes between a destination host name and the ping command keywords if the name of the destination host is i, ip, ipv, ipv6, l, ls, or lsp. For example, you must use the command in the form of ping ip ip instead of ping ip if the destination host name is ip. -a source-ip: Specifies an IP address of the device as the source IP address of ICMP echo requests. If this option is not specified, the source IP address of ICMP echo requests is the primary IP address of the outbound interface. -c count: Specifies the number of ICMP echo requests that are sent to the destination. The value range is 1 to , and the default is 5. -f: Sets the "do-not-fragment" bit in the IP header. -h ttl: Specifies the TTL value of ICMP echo requests. The value range is 1 to 255, and the default is

16 -i interface-type interface-number: Specifies the source interface for ICMP echo requests. If you do not specify this option, the system uses the primary IP address of the matching route's egress interface as the source interface for ICMP echo requests. -m interval: Specifies the interval (in milliseconds) to send ICMP echo requests. The value range is 1 to 65535, and the default is n: Disables domain name resolution for the host argument. If the host argument represents the host name of the destination, and if this keyword is not specified, the device translates host into an address. -p pad: Specifies the value of the pad field in an ICMP echo request, in hexadecimal format, 1 to 8 bits. The pad argument is in the range of 0 to ffffffff. If the specified value is less than 8 bits, 0s are added in front of the value to extend it to 8 bits. For example, if pad is configured as 0x2f, then the packets are padded with 0x f to make the total length of the packet meet the requirements of the device. By default, the padded value starts from 0x01 up to 0xff, where another round starts again if necessary, such as 0x feff01. -q: Displays only the summary statistics. If this keyword is not specified, the system displays all the ping statistics. -r: Records the addresses of the hops (up to 9) the ICMP echo requests passed. If this keyword is not specified, the addresses of the hops that the ICMP echo requests passed are not recorded. -s packet-size: Specifies the length (in bytes) of ICMP echo requests (excluding the IP packet header and the ICMP packet header). The value range is 20 to 8100, and the default is 56. -t timeout: Specifies the timeout time (in milliseconds) of an ICMP echo reply. The value range is 0 to 65535, and the default is If the source does not receive an ICMP echo reply within the timeout, it considers the ICMP echo reply timed out. -tos tos: Specifies the ToS value of ICMP echo requests. The value range is 0 to 255, and the default is 0. -v: Displays non-icmp echo reply packets. If this keyword is not specified, the system does not display non-icmp echo reply packets. -vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance to which the destination belongs. The vpn-instance-name argument represents the VPN instance name, a case-sensitive string of 1 to 31 characters. If the destination is on the public network, do not specify this option. host: Specifies the IP address or host name of the destination. The host name is a case-insensitive string of 1 to 253 characters. It can contain letters, digits, and special characters such as hyphen (-), underscore (_), and dot (.). To ping a device identified by its host name, configure the DNS settings on the device first. If the DNS settings are not configured, the ping operation fails. To abort the ping operation during the execution of the command, press Ctrl+C. # Test whether the device with an IP address of is reachable. <Sysname> ping Ping ( ): 56 data bytes, press CTRL_C to break 56 bytes from : icmp_seq=0 ttl=254 time=2.137 ms 56 bytes from : icmp_seq=1 ttl=254 time=2.051 ms 56 bytes from : icmp_seq=2 ttl=254 time=1.996 ms 56 bytes from : icmp_seq=3 ttl=254 time=1.963 ms 56 bytes from : icmp_seq=4 ttl=254 time=1.991 ms --- Ping statistics for

17 5 packet(s) transmitted, 5 packet(s) received, 0.0% packet loss round-trip min/avg/max/std-dev = 1.963/2.028/2.137/0.062 ms # Test whether the device with an IP address of in VPN instance vpn1 is reachable. <Sysname> ping -vpn-instance vpn Ping ( ): 56 data bytes, press CTRL_C to break 56 bytes from : icmp_seq=0 ttl=254 time=2.137 ms 56 bytes from : icmp_seq=1 ttl=254 time=2.051 ms 56 bytes from : icmp_seq=2 ttl=254 time=1.996 ms 56 bytes from : icmp_seq=3 ttl=254 time=1.963 ms 56 bytes from : icmp_seq=4 ttl=254 time=1.991 ms --- Ping statistics for in VPN instance vpn packet(s) transmitted, 5 packet(s) received, 0.0% packet loss round-trip min/avg/max/std-dev = 1.963/2.028/2.137/0.062 ms # Test whether the device with an IP address of is reachable. Only results are displayed. <Sysname> ping -q Ping ( ): 56 data bytes, press CTRL_C to break --- Ping statistics for packet(s) transmitted, 5 packet(s) received, 0.0% packet loss round-trip min/avg/max/std-dev = 1.962/2.196/2.665/0.244 ms # Test whether the device with an IP address of is reachable. The IP addresses of the hops that the ICMP packets passed in the path are displayed. <Sysname> ping -r Ping ( ): 56 data bytes, press CTRL_C to break 56 bytes from : icmp_seq=0 ttl=254 time=4.685 ms RR: bytes from : icmp_seq=1 ttl=254 time=4.834 ms (same route) 56 bytes from : icmp_seq=2 ttl=254 time=4.770 ms (same route) 56 bytes from : icmp_seq=3 ttl=254 time=4.812 ms (same route) 56 bytes from : icmp_seq=4 ttl=254 time=4.704 ms (same route) --- Ping statistics for packet(s) transmitted, 5 packet(s) received, 0.0% packet loss round-trip min/avg/max/std-dev = 4.685/4.761/4.834/0.058 ms The output shows the following information: The destination is reachable. The route is <-> { ; } <-> Table 1 Command output Field Ping ( ): 56 data bytes, press CTRL_C to break Description Test whether the device with IP address is reachable. There are 56 bytes in each ICMP echo request. Press Ctrl+C to abort the ping operation. 4

18 Field 56 bytes from : icmp_seq=0 ttl=254 time=4.685 ms RR: Description Received ICMP echo replies from the device whose IP address is If no echo reply is received within the timeout period, no information is displayed. bytes Number of bytes in the ICMP echo reply. icmp_seq Packet sequence, used to determine whether a segment is lost, disordered or repeated. ttl TTL value in the ICMP echo reply. time Response time. Routers through which the ICMP echo request passed. They are displayed in inversed order, which means the router with a smaller distance to the destination is displayed first. --- Ping statistics for Statistics on data received and sent in the ping operation. --- Ping statistics for in VPN instance vpn1 --- Ping statistics for a device in a VPN instance. 5 packet(s) transmitted Number of ICMP echo requests sent. 5 packet(s) received Number of ICMP echo replies received. 0.0% packet loss Percentage of unacknowledged packets to the total packets sent. round-trip min/avg/max/std-dev = 4.685/4.761/4.834/0.058 ms Minimum/average/maximum/standard deviation response time, in milliseconds. ping ipv6 Use ping ipv6 to test the reachability of the destination IPv6 address and display IPv6 ping statistics. ping ipv6 [ -a source-ipv6 -c count -i interface-type interface-number -m interval -q -s packet-size -t timeout -tc traffic-class -v -vpn-instance vpn-instance-name ] * host Any view -a source-ipv6: Specifies an IPv6 address of the device as the source IP address of ICMP echo requests. If this option is not specified, the source IPv6 address of ICMP echo requests is the IPv6 address of the outbound interface. See RFC 3484 for information about the address selection rule. -c count: Specifies the number of ICMPv6 echo requests that are sent to the destination. The value range is 1 to , and the default is 5. -i interface-type interface-number: Specifies the source interface for ICMPv6 echo requests. This option must be specified when the destination address is a multicast address or a link local address. If you do not specify this option, the system uses the primary IP address of the matching route's egress interface as the source interface for ICMPv6 echo requests. -m interval: Specifies the interval (in milliseconds) to send an ICMPv6 echo reply. The value range is 1 to 65535, and the default is q: Displays only the summary statistics. If you do not specify this keyword, the system displays all the ping statistics. 5

19 -s packet-size: Specifies the length (in bytes) of ICMPv6 echo requests (excluding the IPv6 packet header and the ICMPv6 packet header). The value range is 20 to 8100, and the default is 56. -t timeout: Specifies the timeout time (in milliseconds) of an ICMPv6 echo reply. The value range is 0 to 65535, and the default is tc traffic-class: Specifies the traffic class value in an ICMPv6 packet. The value range is 0 to 255 and the default is 0. -v: Displays detailed information (including the dst field and the idx field) about ICMPv6 echo replies. If this keyword is not specified, the system only displays brief information (not including the dst field and the idx field) about ICMPv6 echo replies. -vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance to which the destination belongs. The vpn-instance-name argument represents the VPN instance name, a case-sensitive string of 1 to 31 characters. If the destination is on the public network, do not specify this option. host: Specifies the IPv6 address or host name of the destination. The host name is a case-insensitive string of 1 to 253 characters. It can contain letters, digits, and special characters such as hyphen (-), underscore (_), and dot (.). To ping a device identified by its host name, configure the DNS settings on the device first. If the DNS settings are not configured, the ping ipv6 operation fails. To abort the ping ipv6 operation during the execution of the command, press Ctrl+C. # Test whether the IPv6 address (2001::2) is reachable. <Sysname> ping ipv6 2001::2 Ping6(56 data bytes) 2001::1 --> 2001::2, press CTRL_C to break 56 bytes from 2001::2, icmp_seq=0 hlim=64 time= ms 56 bytes from 2001::2, icmp_seq=1 hlim=64 time= ms 56 bytes from 2001::2, icmp_seq=2 hlim=64 time= ms 56 bytes from 2001::2, icmp_seq=3 hlim=64 time=4.000 ms 56 bytes from 2001::2, icmp_seq=4 hlim=64 time= ms --- Ping6 statistics for 2001:: packet(s) transmitted, 5 packet(s) received, 0.0% packet loss round-trip min/avg/max/std-dev = 4.000/25.000/62.000/ ms # Test whether the IPv6 address (2001::2) is reachable. Only the statistics are displayed. <Sysname> ping ipv6 q 2001::2 Ping6(56 data bytes) 2001::1 --> 2001::2, press CTRL_C to break --- Ping6 statistics for 2001:: packet(s) transmitted, 5 packet(s) received, 0.0% packet loss round-trip min/avg/max/std-dev = 4.000/25.000/62.000/ ms # Test whether the IPv6 address (2001::2) is reachable. Detailed ping information is displayed. <Sysname> ping ipv6 v 2001::2 Ping6(56 data bytes) 2001::1 --> 2001::2, press CTRL_C to break 56 bytes from 2001::2, icmp_seq=0 hlim=64 dst=2001::1 idx=3 time= ms 56 bytes from 2001::2, icmp_seq=1 hlim=64 dst=2001::1 idx=3 time= ms 56 bytes from 2001::2, icmp_seq=2 hlim=64 dst=2001::1 idx=3 time= ms 56 bytes from 2001::2, icmp_seq=3 hlim=64 dst=2001::1 idx=3 time=4.000 ms 56 bytes from 2001::2, icmp_seq=4 hlim=64 dst=2001::1 idx=3 time= ms 6

20 --- Ping6 statistics for 2001:: packet(s) transmitted, 5 packet(s) received, 0.0% packet loss round-trip min/avg/max/std-dev = 4.000/25.000/62.000/ ms Table 2 Command output Field Ping6(56 data bytes) 2001::1 --> 2001::2, press CTRL_C to break 56 bytes from 2001::2, icmp_seq=1 hlim=64 dst=2001::1 idx=3 time= ms Description An ICMPv6 echo reply with a data length of 56 bytes is sent from 2001::1 to 2001::2. Press Ctrl+C to abort the ping IPv6 operation. Received ICMPv6 echo replies from the device whose IPv6 address is 2001::2. The number of data bytes is 56. The packet sequence is 1. The hop limit value is 64. The destination address is 2001::1. Specify the -v keyword to display this field. The index for the packet inbound interface is 3. Specify the -v keyword to display this field. The response time is 62 milliseconds. --- Ping6 statistics for 2001:: Statistics on data received and sent in an IPv6 ping operation. 5 packet(s) transmitted Number of ICMPv6 echo requests sent. 5 packet(s) received Number of ICMPv6 echo replies received. 0.0% packet loss Percentage of unacknowledged packets to the total packets sent. round-trip min/avg/max/ std-dev =4.000/25.000/62.000/ ms Minimum/average/maximum/standard deviation response time, in milliseconds. tracert Use tracert to trace the path that the packets traverse from source to destination. tracert [ -a source-ip -f first-ttl -m max-ttl -p port -q packet-number -t tos -vpn-instance vpn-instance-name [ -resolve-as { global none vpn } ] -w timeout ] * host Any view -a source-ip: Specifies an IP address of the device as the source IP address of probe packets. If this option is not specified, the source IP address of probe packets is the primary IP address of the outbound interface. -f first-ttl: Specifies the TTL of the first packet sent to the destination. The value range is 1 to 255, and the default is 1. It must be no greater than the value of the max-ttl argument. -m max-ttl: Specifies the maximum number of hops allowed for a probe packet. The value range is 1 to 255, and the default is 30. It must be no smaller than the value of the first-ttl argument. 7

21 -p port: Specifies an invalid UDP port of the destination. The value range is 1 to 65535, and the default is If the destination address is an EID address at a remote LISP site, specify a port number in the range of to q packet-number: Specifies the number of probe packets to send per hop. The value range is 1 to 65535, and the default is 3. -t tos: Specifies the ToS value of probe packets. The value range is 0 to 255, and the default is 0. -vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance to which the destination belongs. The vpn-instance-name argument represents the VPN instance name, a case-sensitive string of 1 to 31 characters. If the destination is on the public network, do not specify this option. -resolve-as: Specifies a routing table for autonomous system (AS) resolution. Tracert searches the specified routing table for the AS that each hop along the path belongs to. If you do not specify this keyword, the global routing table is used. If the AS information is found, this command displays the AS number next to the address of the hop in the probe result. global: Specifies the global routing table. none: Disables AS resolution. vpn: Specifies the VPN routing table. -w timeout: Specifies the timeout time in milliseconds of the reply packet for a probe packet. The value range is 1 to 65535, and the default is host: Specifies the IP address or host name of the destination. The host name is a case-insensitive string of 1 to 253 characters. It can contain letters, digits, and special characters such as hyphen (-), underscore (_), and dot (.). After identifying network failure with the ping command, use the tracert command to locate failed nodes. If the destination address is on the public network, you do not need to specify the -resolve-as keyword to obtain the AS information. The device automatically uses the global routing table for AS resolution. If the destination address is on a private network, address information of intermediate hops might be stored in either the global routing table or the VPN routing table. To learn the AS path that the packets traverse, execute the tracert command twice, once with the -resolve-as global keywords and again with the -resolve-as vpn keywords. The output from the tracert command includes IP addresses of all the Layer 3 devices that the packets traverse from source to destination. Asterisks (* * *) are displayed if the device cannot reply with an ICMP error message. The reason might be the destination is unreachable or sending ICMP timeout/destination unreachable packets is disabled. To abort the tracert operation during the execution of the command, press Ctrl+C. # Display the path that the packets traverse from source to destination ( ). <Sysname> tracert traceroute to ( ), 30 hops at most, 40 bytes each packet, press CTRL_C to break ( ) 673 ms 425 ms 30 ms ( ) [AS 100] 580 ms 470 ms 80 ms # Display the path that the packets traverse from source to destination ( ) in VPN instance vpn1, as well as the AS information of the hops along the path. <Sysname> tracert vpn-instance vpn1 resolve-as vpn traceroute to ( ), 30 hops at most, 40 bytes each packet, press CTRL_C to break 8

22 ( ) 673 ms 425 ms 30 ms ( ) 580 ms 470 ms 80 ms ( ) [AS 65535] 530 ms 472 ms 380 ms # Trace the path to destination ( ) over an MPLS network. <Sysname> tracert traceroute to ( ), 30 hops at most, 40 bytes each packet, press CTRL_C to break ( ) ms ms ms ( ) ms ms ms MPLS Label= Exp=0 TTL=1 S= ( ) ms ms ms MPLS Label= Exp=0 TTL=1 S= ( ) ms ms ms Table 3 Command output Field traceroute to ( ) hops at most bytes each packet press CTRL_C to break ( ) [AS 100] 580 ms 470 ms 80 ms MPLS Label= Exp=0 TTL=1 S=1 Description Display the route that the IP packets traverse from the current device to the device whose IP address is Maximum number of hops of the probe packets, which can be set by the -m keyword. Number of bytes of a probe packet. During the execution of the command, press Ctrl+C to abort the tracert operation. Probe result of the probe packets that contain a TTL value of 2, including the following information about the second hop: Domain name of the hop. If no domain name is configured, the IP address is displayed as the domain name. IP address of the hop. The IP address is displayed in parentheses. Number of the AS that the hop belongs to. The AS number appears only when it is found for the hop in the specified routing table. The round-trip time of the probe packets. The number of packets that can be sent in each probe can be set by using the -q keyword. ICMP timeout packets on an MPLS network, carrying MPLS label information: Label Label value that is used to identify a forwarding equivalence class (FEC). Exp Reserved, usually used for class of service (CoS). TTL TTL value. S MPLS supports multiple levels of labels. Value 1 indicates that the label is at the bottom of the label stack, and value 0 indicates that the label is in another label stack. tracert ipv6 Use tracert ipv6 to display the path that the IPv6 packets traverse from source to destination. tracert ipv6 [ -f first-hop -m max-hops -p port -q packet-number -t traffic-class -vpn-instance vpn-instance-name [ -resolve-as { global none vpn } ] -w timeout ] * host 9

23 Any view -f first-hop: Specifies the TTL value of the first packet. The value range is 1 to 255, and the default is 1. The value must be no greater than the value of the max-hops argument. -m max-hops: Specifies the maximum number of hops allowed for a packet. The value range is 1 to 255, and the default is 30. The value must be no smaller than the value of the first-hop argument. -p port: Specifies an invalid UDP port of the destination. The value range is 1 to 65535, and the default is q packet-number: Specifies the number of probe packets sent each time. The value range is 1 to 65535, and the default is 3. -t traffic-class: Specifies the traffic class value in an IPv6 probe packet. The value range is 0 to 255, and the default is 0. -vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance to which the destination belongs. The vpn-instance-name argument represents the VPN instance name, a case-sensitive string of 1 to 31 characters. If the destination is on the public network, do not specify this option. -resolve-as: Specifies a routing table for AS resolution. Tracert searches the specified routing table for the AS that each hop along the path belongs to. If you do not specify this keyword, the global routing table is used. If the AS information is found, this command displays the AS number next to the address of the hop in the probe result. global: Specifies the global routing table. none: Disables AS resolution. vpn: Specifies the VPN routing table. -w timeout: Specifies the timeout time (in milliseconds) of the reply packet of a probe packet. The value range is 1 to 65535, and the default is host: Specifies the IPv6 address or host name of the destination. The host name is a case-insensitive string of 1 to 253 characters. It can contain letters, digits, and special characters such as hyphen (-), underscore (_), and dot (.). After identifying network failure with the ping ipv6 command, you can use the tracert ipv6 command to locate failed nodes. If the destination address is on the public network, you do not need to specify the -resolve-as keyword to obtain the AS information. The device automatically uses the global routing table for AS resolution. If the destination address is on a private network, address information of intermediate hops might be stored in either the global routing table or the VPN routing table. To learn the AS path that the packets traverse, execute the tracert ipv6 command twice, once with the -resolve-as global keywords and again with the -resolve-as vpn keywords. The output from the tracert ipv6 command includes IPv6 addresses of all the Layer 3 devices that the packets traverse from source to destination. Asterisks (* * *) are displayed if the device cannot reply with an ICMP error message. The reason might be the destination is unreachable or sending ICMP timeout/destination unreachable packets is disabled. To abort the tracert operation during the execution of the command, press Ctrl+C. 10

24 # Display the path that the packets traverse from source to destination (2001:3::2). <Sysname> tracert ipv6 2001:3::2 traceroute to 2001:3::2(2001:3::2), 30 hops at most, 60 byte packets, press CTRL_C to break :1:: ms ms ms :2::2 [AS 100] ms ms ms :3::2 [AS 200] ms ms ms # Display the path that the packets traverse from source to destination (2001:3::2) in VPN instance vpn1, as well as the AS information of the hops along the path. <Sysname> tracert ipv6 vpn-instance vpn1 resolve-as vpn 2001:3::2 traceroute to 2001:3::2(2001:3::2), 30 hops at most, 60 byte packets, press CTRL_C to break :1:: ms ms ms :2:: ms ms ms :3::2 [AS 65535] ms ms ms Table 4 Command output Field traceroute to 2001:3::2 hops at most byte packets :2::2 [AS 100] ms ms ms Description Display the route that the IPv6 packets traverse from the current device to the device whose IP address is 2001:3:2. Maximum number of hops of the probe packets, which can be set by the -m keyword. Number of bytes of a probe packet. Probe result of the probe packets that contain a hoplimit value of 2, including the following information about the second hop: IPv6 address of the hop. Number of the AS the hop belongs to. The AS number appears only when it is found for the hop in the specified routing table. The round-trip time of the probe packets. The number of packets that can be sent in each probe can be set by using the -q keyword. 11

25 NQA commands NQA client commands advantage-factor Use advantage-factor to set the advantage factor to be used for calculating Mean Opinion Scores (MOS) and Calculated Planning Impairment Factor (ICPIF) values. Use undo advantage-factor to restore the default. advantage-factor factor undo advantage-factor The advantage factor is 0. Voice operation view factor: Specifies the advantage factor in the range of 0 to 20. The evaluation of voice quality depends on users' tolerance for voice quality. For users with higher tolerance for voice quality, use the advantage-factor command to set an advantage factor. When the system calculates the ICPIF value, it subtracts the advantage factor to modify ICPIF and MOS values for voice quality evaluation. # Set the advantage factor to 10 for the voice operation. [Sysname] nqa entry admin test [Sysname-nqa-admin-test] type voice [Sysname-nqa-admin-test-voice] advantage-factor 10 codec-type Use codec-type to configure the codec type for the voice operation. Use undo codec-type to restore the default. codec-type { g711a g711u g729a } undo codec-type 12

26 The codec type for the voice operation is G.711 A-law. Voice operation view g711a: Specifies G.711 A-law codec type. g711u: Specifies G.711 µ-law codec type g729a: Specifies G.729 A-law codec type. # Set the codec type to g729a for the voice operation. [Sysname] nqa entry admin test [Sysname-nqa-admin-test] type voice [Sysname-nqa-admin-test-voice] codec-type g729a community read Use community read to specify the community name for the SNMP operation. Use undo community read to restore the default. community read { cipher simple } community-name undo community read The SNMP operation uses the community name public. SNMP operation view cipher: Specifies a community name in encrypted form. simple: Specifies a community name in plaintext form. For security purposes, the community name specified in plaintext form will be stored in encrypted form. community-name: Specifies the community name. Its plaintext form is a case-sensitive string of 1 to 32 characters. Its encrypted form is a case-sensitive string of 33 to 73 characters. You must specify the community name for the SNMP operation when both of the following conditions exist: 13

27 The SNMP operation uses the SNMPv1 or SNMPv2c agent. The SNMPv1 or SNMPv2c agent is configured with a read-only or read-write community name. The specified community name must be the same as the community name configured on the SNMP agent. The community name configuration is not required if the SNMP operation uses the SNMPv3 agent. For more information about SNMP, see "Configuring SNMP." # Specify readaccess as the community name for the SNMP operation. [Sysname] nqa entry admin test [Sysname-nqa-admin-test] type snmp [Sysname-nqa-admin-test-snmp] community read simple readaccess data-fill Use data-fill to configure the payload fill string for probe packets. Use undo data-fill to restore the default. data-fill string undo data-fill The default payload fill string is the hexadecimal string ICMP/UDP echo operation view Path jitter/udp jitter/voice operation view ICMP/TCP/UDP template view string: Specifies a case-sensitive string of 1 to 200 characters. If the payload length is smaller than the string length, only the first part of the string is filled. For example, if you configure the string as abcd and set the payload size to 3 bytes, abc is filled. If the payload length is greater than the string length, the system fills the payload with the string cyclically until the payload is full. For example, if you configure the string as abcd and the payload size as 6 bytes, abcdab is filled. How the string is filled depends on the operation type. For the ICMP echo operation, the string fills the whole payload of an ICMP echo request. For the UDP echo operation, the first five bytes of the payload of a UDP packet are for special purpose. The string fills the remaining part of payload. For the UDP jitter operation, the first 68 bytes of the payload of a UDP packet are for special purpose. The string fills the remaining part of the payload. 14

28 data-size For the voice operation, the first 16 bytes of the payload of a UDP packet are for special purpose. The string fills the remaining part of the payload. For the path jitter operation, the first four bytes of the payload of an ICMP echo request are for special purpose. The string fills the remaining part of payload. # Specify abcd as the payload fill string for ICMP echo requests. [Sysname] nqa entry admin test [Sysname-nqa-admin-test] type icmp-echo [Sysname-nqa-admin-test-icmp-echo] data-fill abcd # In TCP template view, specify abcd as the payload fill string for probe packets. [Sysname] nqa template tcp tcptplt [Sysname-nqatplt-tcp-tcptplt] data-fill abcd Use data-size to set the payload size for each probe packet. Use undo data-size to restore the default. data-size size undo data-size The default payload size of a probe packet for different operations is described in Table 5. Table 5 payload size of a probe packet Operation type Codec type size (bytes) ICMP echo N/A 100 UDP echo N/A 100 UDP jitter N/A 100 UDP tracert N/A 100 Path jitter N/A 100 Voice G.711 A-law 172 Voice G.711 µ-law 172 Voice G.729 A-law 32 ICMP/UDP echo operation view UDP tracert operation view Path jitter/udp jitter/voice operation view ICMP/UDP template view 15

29 size: Specifies the payload size. Available value ranges include: 20 to bytes for the ICMP echo, UDP echo, or UDP tracert operation. 68 to bytes for the UDP jitter or path jitter operation. 16 to bytes for the voice operation. In ICMP echo and path jitter operations, the command sets the payload size for each ICMP echo request. In UDP echo, UDP jitter, UDP tracert, and voice operations, the command sets the payload size for each UDP packet. # Set the payload size to 80 bytes for each ICMP echo request. [Sysname] nqa entry admin test [Sysname-nqa-admin-test] type icmp-echo [Sysname-nqa-admin-test-icmp-echo] data-size 80 # In ICMP template view, set the payload size to 80 bytes for each probe packet. [Sysname] nqa template icmp icmptplt [Sysname-nqatplt-icmp-icmptplt] data-size 80 description Use description to configure a description for an NQA operation, such as the operation type or purpose. Use undo description to restore the default. description text undo description No description is configured for an NQA operation. Any NQA operation view Any NQA template view text: Specifies a description, a case-sensitive string of 1 to 200 characters. # Configure the description as icmp-probe for the ICMP echo operation. 16