HPE 5920 & 5900 Switch Series

Transcription

1 HPE 5920 & 5900 Switch Series Layer 3 IP Services Command Reference Part number: t Software version: Release 2422P01 Document version: 6W

2 Copyright 2016, 2017 Hewlett Packard Enterprise Development LP The information contained herein is subject to change without notice. The only warranties for Hewlett Packard Enterprise products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. Hewlett Packard Enterprise shall not be liable for technical or editorial errors or omissions contained herein. Confidential computer software. Valid license from Hewlett Packard Enterprise required for possession, use, or copying. Consistent with FAR and , Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor s standard commercial license. Links to third-party websites take you outside the Hewlett Packard Enterprise website. Hewlett Packard Enterprise has no control over and is not responsible for information outside the Hewlett Packard Enterprise website. Acknowledgments Intel, Itanium, Pentium, Intel Inside, and the Intel Inside logo are trademarks of Intel Corporation in the United States and other countries. Microsoft and Windows are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. Adobe and Acrobat are trademarks of Adobe Systems Incorporated. Java and Oracle are registered trademarks of Oracle and/or its affiliates. UNIX is a registered trademark of The Open Group.

3 Contents ARP commands 1 arp check enable 1 arp check log enable 1 arp max-learning-num 2 arp max-learning-number 3 arp multiport 4 arp static 5 arp timer aging 6 display arp 6 display arp ip-address 8 display arp entry-limit 9 display arp timer aging 9 display arp vpn-instance 10 reset arp 10 Gratuitous ARP commands 12 arp ip-conflict log prompt 12 arp send-gratuitous-arp 12 gratuitous-arp-learning enable 13 gratuitous-arp-sending enable 14 Proxy ARP commands 15 display local-proxy-arp 15 display proxy-arp 15 local-proxy-arp enable 16 proxy-arp enable 17 ARP snooping commands 18 arp snooping enable 18 display arp snooping 18 reset arp snooping 19 ARP fast-reply commands 21 arp fast-reply enable 21 IP addressing commands 22 display ip interface 22 display ip interface brief 24 ip address 25 ip address unnumbered 27 DHCP commands 28 Common DHCP commands 28 dhcp dscp 28 dhcp enable 28 dhcp select 29 DHCP server commands 30 address range 30 bims-server 31 bootfile-name 31 class 32 dhcp class 33 dhcp server always-broadcast 34 dhcp server apply ip-pool 35 dhcp server bootp ignore 35 dhcp server bootp reply-rfc dhcp server forbidden-ip 36 i

4 dhcp server ip-pool 37 dhcp server ping packets 38 dhcp server ping timeout 39 dhcp server relay information enable 39 display dhcp server conflict 40 display dhcp server expired 41 display dhcp server free-ip 42 display dhcp server ip-in-use 43 display dhcp server pool 44 display dhcp server statistics 46 dns-list 48 domain-name 48 expired 49 forbidden-ip 50 gateway-list 50 if-match 51 nbns-list 53 netbios-type 53 network 54 next-server 55 option 56 reset dhcp server conflict 57 reset dhcp server expired 58 reset dhcp server ip-in-use 58 reset dhcp server statistics 59 static-bind 59 tftp-server domain-name 60 tftp-server ip-address 61 voice-config 61 DHCP relay agent commands 62 dhcp relay check mac-address 62 dhcp relay check mac-address aging time 63 dhcp relay client-information record 64 dhcp relay client-information refresh 64 dhcp relay client-information refresh enable 65 dhcp relay information circuit-id 66 dhcp relay information enable 68 dhcp relay information remote-id 68 dhcp relay information strategy 69 dhcp relay release ip 70 dhcp relay server-address 71 display dhcp relay check mac-address 71 display dhcp relay client-information 72 display dhcp relay information 73 display dhcp relay server-address 74 display dhcp relay statistics 75 reset dhcp relay client-information 76 reset dhcp relay statistics 77 DHCP client commands 77 dhcp client dad enable 77 dhcp client dscp 78 dhcp client identifier 78 display dhcp client 79 ip address dhcp-alloc 81 DHCP snooping commands 82 dhcp snooping binding database filename 82 dhcp snooping binding database update interval 84 dhcp snooping binding database update now 84 dhcp snooping binding record 85 dhcp snooping check mac-address 85 dhcp snooping check request-message 86 dhcp snooping deny 87 ii

5 dhcp snooping enable 87 dhcp snooping information circuit-id 88 dhcp snooping information enable 90 dhcp snooping information remote-id 90 dhcp snooping information strategy 91 dhcp snooping log enable 92 dhcp snooping max-learning-num 93 dhcp snooping rate-limit 93 dhcp snooping trust 94 display dhcp snooping binding 95 display dhcp snooping binding database 96 display dhcp snooping information 96 display dhcp snooping packet statistics 98 display dhcp snooping trust 98 reset dhcp snooping binding 99 reset dhcp snooping packet statistics 99 BOOTP client commands 100 display bootp client 100 ip address bootp-alloc 101 DNS commands 102 display dns domain 102 display dns host 102 display dns server 104 display ipv6 dns server 105 dns domain 105 dns dscp 106 dns proxy enable 107 dns server 107 dns source-interface 108 dns spoofing 109 dns trust-interface 110 ip host 111 ipv6 dns dscp 111 ipv6 dns server 112 ipv6 dns spoofing 113 ipv6 host 114 reset dns host 115 DDNS commands 116 ddns apply policy 116 ddns dscp 117 ddns policy 117 display ddns policy 118 interval 119 method 120 password 121 ssl-client-policy 122 url 123 username 125 Basic IP forwarding commands 126 display fib 126 ip forwarding-table save 128 Load sharing commands 129 display ip load-sharing path 129 ip load-sharing local-first enable 130 ip load-sharing mode per-flow 131 ip load-sharing symmetric enable 132 iii

6 Fast forwarding commands 133 display ip fast-forwarding aging-time 133 display ip fast-forwarding cache 133 display ip fast-forwarding fragcache 134 ip fast-forwarding aging-time 135 ip fast-forwarding load-sharing 136 reset ip fast-forwarding cache 136 IRDP commands 138 ip irdp 138 ip irdp address 138 ip irdp lifetime 139 ip irdp interval 140 ip irdp multicast 140 ip irdp preference 141 IP performance optimization commands 143 display icmp statistics 143 display ip statistics 143 display rawip 145 display rawip verbose 146 display tcp 148 display tcp statistics 149 display tcp verbose 151 display udp 153 display udp statistics 154 display udp verbose 154 ip forward-broadcast 157 ip icmp error-interval 158 ip icmp fragment discarding 158 ip icmp source 159 ip mtu 160 ip redirects enable 160 ip ttl-expires enable 161 ip unreachables enable 162 reset ip statistics 162 reset tcp statistics 163 reset udp statistics 163 tcp mss 164 tcp path-mtu-discovery 164 tcp syn-cookie enable 165 tcp timer fin-timeout 166 tcp timer syn-timeout 166 tcp window 167 UDP helper commands 168 display udp-helper interface 168 reset udp-helper statistics 169 udp-helper broadcast-map 169 udp-helper enable 170 udp-helper port 170 udp-helper server 171 IPv6 basics commands 173 display ipv6 fib 173 display ipv6 icmp statistics 174 display ipv6 interface 175 display ipv6 interface prefix 179 display ipv6 neighbors 180 display ipv6 neighbors count 182 display ipv6 neighbors entry-limit 182 iv

7 display ipv6 neighbors vpn-instance 183 display ipv6 pathmtu 184 display ipv6 prefix 185 display ipv6 rawip 186 display ipv6 rawip verbose 187 display ipv6 statistics 189 display ipv6 tcp 191 display ipv6 tcp verbose 192 display ipv6 udp 195 display ipv6 udp verbose 196 ipv6 address 198 ipv6 address anycast 199 ipv6 address auto 200 ipv6 address auto link-local 200 ipv6 address eui ipv6 address link-local 202 ipv6 hop-limit 203 ipv6 hoplimit-expires enable 204 ipv6 icmpv6 error-interval 204 ipv6 icmpv6 multicast-echo-reply enable 205 ipv6 icmpv6 source 206 ipv6 mtu 206 ipv6 nd autoconfig managed-address-flag 207 ipv6 nd autoconfig other-flag 208 ipv6 nd dad attempts 208 ipv6 nd ns retrans-timer 209 ipv6 nd nud reachable-time 210 ipv6 nd ra halt 211 ipv6 nd ra hop-limit unspecified 211 ipv6 nd ra interval 212 ipv6 nd ra no-advlinkmtu 212 ipv6 nd ra prefix 213 ipv6 nd ra router-lifetime 214 ipv6 nd router-preference 215 ipv6 neighbor 215 ipv6 neighbor link-local minimize 217 ipv6 neighbor stale-aging 217 ipv6 neighbors max-learning-num 218 ipv6 option drop enable 219 ipv6 pathmtu 219 ipv6 pathmtu age 220 ipv6 prefer temporary-address 221 ipv6 prefix 221 ipv6 redirects enable 222 ipv6 temporary-address 223 ipv6 unreachables enable 224 local-proxy-nd enable 224 proxy-nd enable 225 reset ipv6 neighbors 225 reset ipv6 pathmtu 226 reset ipv6 statistics 227 DHCPv6 commands 228 Common DHCPv6 commands 228 display ipv6 dhcp duid 228 ipv6 dhcp dscp 228 ipv6 dhcp select 229 DHCPv6 server commands 230 address range 230 display ipv6 dhcp pool 231 display ipv6 dhcp prefix-pool 232 display ipv6 dhcp server 233 v

8 display ipv6 dhcp server conflict 234 display ipv6 dhcp server expired 235 display ipv6 dhcp server ip-in-use 236 display ipv6 dhcp server pd-in-use 238 display ipv6 dhcp server statistics 240 dns-server 241 domain-name 242 ipv6 dhcp pool 242 ipv6 dhcp prefix-pool 243 ipv6 dhcp server 244 ipv6 dhcp server apply pool 245 ipv6 dhcp server forbidden-address 246 ipv6 dhcp server forbidden-prefix 247 network 248 option 249 prefix-pool 250 reset ipv6 dhcp server conflict 251 reset ipv6 dhcp server expired 251 reset ipv6 dhcp server ip-in-use 252 reset ipv6 dhcp server pd-in-use 252 reset ipv6 dhcp server statistics 253 sip-server 253 static-bind 254 temporary address range 255 DHCPv6 relay agent commands 256 display ipv6 dhcp relay server-address 256 display ipv6 dhcp relay statistics 257 ipv6 dhcp relay server-address 259 reset ipv6 dhcp relay statistics 260 DHCPv6 client commands 261 display ipv6 dhcp client 261 display ipv6 dhcp client statistics 263 ipv6 address dhcp-alloc 264 ipv6 dhcp client duid 265 ipv6 dhcp client dscp 265 ipv6 dhcp client pd 266 ipv6 dhcp client stateless enable 267 reset ipv6 dhcp client statistics 267 DHCPv6 snooping commands 268 display ipv6 dhcp snooping binding 268 display ipv6 dhcp snooping binding database 269 display ipv6 dhcp snooping packet statistics 270 display ipv6 dhcp snooping trust 270 ipv6 dhcp snooping binding database filename 271 ipv6 dhcp snooping binding database update interval 272 ipv6 dhcp snooping binding database update now 273 ipv6 dhcp snooping binding record 273 ipv6 dhcp snooping check request-message 274 ipv6 dhcp snooping deny 275 ipv6 dhcp snooping enable 275 ipv6 dhcp snooping log enable 276 ipv6 dhcp snooping max-learning-num 276 ipv6 dhcp snooping option interface-id enable 277 ipv6 dhcp snooping option interface-id string 278 ipv6 dhcp snooping option remote-id enable 278 ipv6 dhcp snooping option remote-id string 279 ipv6 dhcp snooping rate-limit 280 ipv6 dhcp snooping trust 281 reset ipv6 dhcp snooping binding 281 reset ipv6 dhcp snooping packet statistics 282 vi

9 IPv6 fast forwarding commands 283 display ipv6 fast-forwarding aging-time 283 display ipv6 fast-forwarding cache 283 ipv6 fast-forwarding aging-time 285 ipv6 fast-forwarding load-sharing 285 reset ipv6 fast-forwarding cache 286 Tunneling commands 287 bandwidth 287 default 287 description 288 destination 288 display interface tunnel 289 interface tunnel 293 mtu 294 reset counters interface 294 service 295 shutdown 295 source 296 tunnel dfbit enable 297 tunnel discard ipv4-compatible-packet 298 tunnel tos 298 tunnel ttl 299 GRE commands 300 keepalive 300 Document conventions and icons 301 Conventions 301 Network topology icons 302 Support and other resources 303 Accessing Hewlett Packard Enterprise Support 303 Accessing updates 303 Websites 304 Customer self repair 304 Remote support 304 Documentation feedback 304 Index 306 vii

10 ARP commands arp check enable Use arp check enable to enable dynamic ARP entry check. Use undo arp check enable to disable dynamic ARP entry check. arp check enable undo arp check enable Dynamic ARP entry check is enabled. System view Dynamic ARP entry check disables a device from supporting dynamic ARP entries with multicast MAC addresses. The device cannot learn dynamic ARP entries containing multicast MAC addresses. You cannot manually add static ARP entries that contain multicast MAC addresses. When this function is disabled, ARP entries containing multicast MAC addresses are supported. The device can learn dynamic ARP entries containing multicast MAC addresses obtained from the ARP packets sourced from a unicast MAC address. You can also manually add static ARP entries containing multicast MAC addresses. # Enable dynamic ARP entry check. [Sysname] arp check enable arp check log enable Use arp check log enable to enable the ARP logging function. Use undo arp check log enable to disable the ARP logging function. arp check log enable undo arp check log enable ARP logging is disabled. System view 1

11 This function enables a device to log ARP events when ARP cannot resolve IP addresses correctly. The device can log the following ARP events: On a proxy ARP-disabled interface, the target IP address of a received ARP packet is not one of the following IP addresses: The IP address of the receiving interface. The virtual IP address of the VRRP group. The public address after NAT. The sender IP address of a received ARP reply conflicts with one of the following IP addresses: The IP address of the receiving interface. The virtual IP address of the VRRP group. The public address after NAT. The device sends ARP log messages to the information center. You can use the info-center source command to specify the log output rules for the information center. For more information about information center, see Network Management and Monitoring Configuration Guide. The device can generate a large amount of ARP logs. To conserve system resources, enable ARP logging only when you are troubleshooting or debugging ARP events. # Enable ARP logging. [Sysname] arp check log enable arp max-learning-num Use arp max-learning-num to set the maximum number of dynamic ARP entries that an interface can learn. Use undo arp max-learning-num to restore the default. arp max-learning-num number undo arp max-learning-num An interface can learn a maximum of dynamic ARP entries. Layer 2 Ethernet interface view, Layer 3 Ethernet interface view, Layer 3 Ethernet subinterface view, VLAN interface view, Layer 2 aggregate interface view, Layer 3 aggregate interface view, Layer 3 aggregate subinterface view, S-channel interface view, S-channel aggregate interface view number: Specifies the maximum number of dynamic ARP entries for an interface. The value range is 0 to

12 An interface can dynamically learn ARP entries. To prevent an interface from holding too many ARP entries, you can set the maximum number of dynamic ARP entries that the interface can learn. When the maximum number is reached, the interface stops learning ARP entries. When the number argument is set to 0, the interface is disabled from learning dynamic ARP entries. # Specify VLAN-interface 40 to learn a maximum of 500 dynamic ARP entries. [Sysname] interface vlan-interface 40 [Sysname-Vlan-interface40] arp max-learning-num 500 # Specify Ten-GigabitEthernet 1/0/1 to learn a maximum of 1000 dynamic ARP entries. [Sysname] interface Ten-GigabitEthernet 1/0/1 [Sysname-Ten-GigabitEthernet1/0/1] arp max-learning-num 1000 # Specify Layer 2 aggregate interface bridge-aggregation 1 to learn a maximum of 1000 dynamic ARP entries. [Sysname] interface bridge-aggregation 1 [Sysname-Bridge-Aggregation1] arp max-learning-num 1000 # Specify Layer 3 aggregate interface route-aggregation 1 to learn a maximum of 1000 dynamic ARP entries. [Sysname] interface route-aggregation 1 [Sysname-Route-Aggregation1] arp max-learning-num 1000 arp max-learning-number Use arp max-learning-number to set the maximum number of dynamic ARP entries that a device can learn. Use undo arp max-learning-number to restore the default. arp max-learning-number number slot slot-number undo arp max-learning-number slot slot-number A device can learn a maximum of dynamic ARP entries. System view number: Specifies the maximum number of dynamic ARP entries for a device. The value range is 0 to slot slot-number: Specifies an IRF member device by its member ID. 3

13 A device can dynamically learn ARP entries. To prevent a device from holding too many ARP entries, you can set the maximum number of dynamic ARP entries that the device can learn. When the maximum number is reached, the device stops learning ARP entries. When the number argument is set to 0, the device is disabled from learning dynamic ARP entries. # Set the IRF member device in slot 1 to learn a maximum of 64 dynamic ARP entries. [Sysname] arp max-learning-number 64 slot 1 arp multiport Use arp multiport to configure a multiport ARP entry. Use undo arp to remove an ARP entry. arp multiport ip-address mac-address vlan-id [ vpn-instance vpn-instance-name ] undo arp ip-address [ vpn-instance-name ] No multiport ARP entries are configured. System view ip-address: Specifies an IP address for the multiport ARP entry. mac-address: Specifies a MAC address for the multiport ARP entry, in the format of H-H-H. vlan-id: Specifies a VLAN for the multiport ARP entry, in the range of 1 to vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance for the multiport ARP entry. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. The specified VPN instance must already exist. Without this option, the multiport ARP entry belongs to the public network. The specified VLAN must already exist. If the VLAN or the corresponding VLAN interface is removed, the multiport ARP entry is also removed. The specified IP address must reside on the same subnet as the VLAN interface of the specified VLAN. Otherwise, the multiport ARP entry does not take effect. To use the multiport ARP entry, you must configure a multicast or multiport unicast MAC address entry to specify multiple output interfaces. The MAC address entry must have the same MAC address and VLAN ID as the multiport ARP entry. # Configure a multiport ARP entry that comprises IP address and MAC address 00e0-fc in VLAN 10. [Sysname] arp multiport e0-fc

14 arp static display arp multiport reset arp multiport Use arp static to configure a static ARP entry. Use undo arp to remove an ARP entry. arp static ip-address mac-address [ vlan-id interface-type interface-number ] [ vpn-instance vpn-instance-name ] undo arp ip-address [ vpn-instance-name ] No static ARP entries are configured. System view ip-address: Specifies an IP address for the static ARP entry. mac-address: Specifies a MAC address for the static ARP entry, in the format of H-H-H. vlan-id: Specifies the ID of a VLAN to which the static ARP entry belongs. The value range is 1 to The VLAN and VLAN interface must already exist. interface-type interface-number: Specifies an interface by its type and number. Make sure the interface belongs to the specified VLAN. vpn-instance vpn-instance-name: Specifies an MPLS L3VPN for the static ARP entry. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. The VPN instance must already exist. To specify a static ARP entry on the public network, do not specify this option. A static ARP entry is manually configured and maintained. It does not age out and cannot be overwritten by any dynamic ARP entry. Static ARP entries can be classified into long and short static ARP entries. A short static ARP entry contains an IP-to-MAC mapping. A long static ARP entry contains an IP-to-MAC mapping, a VLAN, and an output interface. A static ARP entry is effective when the device works correctly. When the VLAN or VLAN interface is deleted, long static ARP entries in the VLAN are deleted, and resolved short static ARP entries in the VLAN become unresolved. A resolved short static ARP entry becomes unresolved upon certain events, for example, when the output interface goes down. A long static ARP entry is ineffective when the corresponding VLAN interface or output interface is down. An ineffective long static ARP entry cannot be used to forward packets. If you specify both the vlan-id and ip-address arguments, the IP address of the corresponding VLAN interface must be on the same network as the specified IP address. 5

15 If you do not specify a VPN, the undo arp command removes ARP entries only for the public network. # Configure a static ARP entry that comprises IP address , MAC address 00e0-fc , and output interface Ten-GigabitEthernet 1/0/1 in VLAN 10. [Sysname] arp static e0-fc Ten-GigabitEthernet 1/0/1 display arp reset arp arp timer aging Use arp timer aging to set the aging timer for dynamic ARP entries. Use undo arp timer aging to restore the default. arp timer aging aging-time undo arp timer aging The aging timer for dynamic ARP entries is 20 minutes. System view aging-time: Sets the aging timer for dynamic ARP entries, in the range of 1 to 1440 minutes. Each dynamic ARP entry in the ARP table has a limited lifetime, called an aging timer. The aging timer of a dynamic ARP entry is reset each time the dynamic ARP entry is updated. Dynamic ARP entries that are not updated before their aging timers expire are deleted from the ARP table. Set the aging timer for dynamic ARP entries as needed. For example, when you configure proxy ARP, set a short aging time so that invalid dynamic ARP entries can be deleted in time. # Set the aging timer for dynamic ARP entries to 10 minutes. [Sysname] arp timer aging 10 display arp timer aging display arp Use display arp to display ARP entries. 6

16 display arp [ [ all dynamic multiport static ] [ slot slot-number ] vlan vlan-id interface interface-type interface-number ] [ count verbose ] Any view network-operator all: Displays all ARP entries. dynamic: Displays dynamic ARP entries. multiport: Displays multiport ARP entries. static: Displays static ARP entries. slot slot-number: Specifies an IRF member device by its member ID. vlan vlan-id: Displays the ARP entries for the specified VLAN. The VLAN ID is in the range of 1 to interface interface-type interface-number: Displays the ARP entries for the interface specified by the argument interface-type interface-number. count: Displays the number of ARP entries. verbose: Displays detailed information about ARP entries. This command displays information about ARP entries, including the IP address, MAC address, VLAN ID, output interface, entry type, and aging timer. If you do not specify any parameters, the command displays all ARP entries. # Display all ARP entries. <Sysname> display arp all Type: S-Static D-Dynamic O-Openflow M-Multiport I-Invalid IP Address MAC Address VLAN Interface Aging Type e0-fc N/A N/A N/A S e0-fe XGE1/0/1 N/A IS d-88f7-9f7d 1 XGE1/0/2 18 D a XGE1/0/3 20 D c-299d-c N/A N/A M # Display detailed information about all ARP entries. <Sysname> display arp all verbose Type: S-Static D-Dynamic O-Openflow M-Multiport I-Invalid IP Address MAC Address VLAN Interface Aging Type Vpn Instance e0-fc N/A N/A N/A S [No Vrf] e0-fe XGE1/0/1 N/A IS [No Vrf] 7

17 d-88f7-9f7d 1 XGE1/0/2 18 D [No Vrf] a XGE1/0/3 20 D [No Vrf] c-299d-c N/A N/A M [No Vrf] # Display the number of all ARP entries. <Sysname> display arp all count Total number of entries : 5 Table 1 Command output Field IP Address MAC Address VLAN Interface Aging Type Vpn Instance Total number of entries Description IP address in an ARP entry. MAC address in an ARP entry. ID of the VLAN to which the ARP entry belongs. This field displays N/A in either of the following situations: The ARP entry is an unresolved short static ARP entry. The output interface of the ARP entry does not belong to the VLAN. Output interface in an ARP entry. This field displays N/A in either of the following situations: The ARP entry is an unresolved short static ARP entry. The ARP entry is a multiport ARP entry and has no output interface information. To obtain the output interface information of the multiport ARP entry, look up the MAC address table according to the MAC address in the ARP entry. Aging time for a dynamic ARP entry in minutes. N/A means unknown aging time or no aging time. ARP entry type: D Dynamic. S Static. O OpenFlow. M Multiport. I Invalid. Name of VPN instance. [No Vrf] is displayed if no VPN instance is configured for the ARP entry. Number of ARP entries. arp static reset arp display arp ip-address Use display arp ip-address to display the ARP entry for an IP address. display arp ip-address [ slot slot-number ] [ verbose ] 8

18 Any view network-operator ip-address: Displays the ARP entry for the specified IP address. slot slot-number: Specifies an IRF member device by its member ID. verbose: Displays the detailed information about the specified ARP entry. The ARP entry information includes the IP address, MAC address, VLAN ID, output interface, entry type, and aging timer. # Display the ARP entry for the IP address <Sysname> display arp Type: S-Static D-Dynamic O-Openflow M-Multiport I-Invalid IP address MAC address VLAN Interface Aging Type e0-fc N/A N/A N/A S arp static reset arp display arp entry-limit Use display arp entry-limit to display the maximum number of ARP entries that a device supports. display arp entry-limit Any view network-operator # Display the maximum number of ARP entries that the device supports. <Sysname> display arp entry-limit ARP entries: display arp timer aging Use display arp timer aging to display the aging timer of dynamic ARP entries. display arp timer aging 9

19 Any view network-operator # Display the aging timer of dynamic ARP entries. <Sysname> display arp timer aging Current ARP aging time is 10 minute(s) arp timer aging display arp vpn-instance Use display arp vpn-instance to display the ARP entries for a VPN instance. display arp vpn-instance vpn-instance-name [ count ] Any view network-operator vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. count: Displays the number of ARP entries. This command displays information about ARP entries for a VPN instance, including the IP address, MAC address, VLAN ID, output interface, entry type, and aging timer. # Display ARP entries for the VPN instance named test. <Sysname> display arp vpn-instance test Type: S-Static D-Dynamic O-Openflow M-Multiport I-Invalid IP address MAC address VLAN ID Interface Aging Type e0-fc N/A N/A N/A S arp static reset arp reset arp Use reset arp to clear ARP entries from the ARP table. 10

20 reset arp { all dynamic interface interface-type interface-number multiport slot slot-number static } User view all: Clears all ARP entries. dynamic: Clears all dynamic ARP entries. multiport: Clears all multiport ARP entries. static: Clears all static ARP entries. slot slot-number: Specifies an IRF member device by its member ID. interface interface-type interface-number: Clears the ARP entries for the interface specified by the argument interface-type interface-number. This command can separately clear static ARP entries, dynamic ARP entries, multiport ARP entries, or ARP entries on specified interfaces. When the interface interface-type interface-number option is specified, this command clears only dynamic ARP entries for the specified interface. When the slot slot-number option is specified, this command clears only dynamic ARP entries for the specified IRF member device. # Clear all static ARP entries. <Sysname> reset arp static arp static display arp 11

21 Gratuitous ARP commands arp ip-conflict log prompt Use arp ip-conflict log prompt to enable IP conflict notification without conflict confirmation. Use undo arp ip-conflict log prompt to restore the default. arp ip-conflict log prompt undo arp ip-conflict log prompt IP conflict notification is disabled. The receiving device sends a gratuitous ARP request, and it displays an error message after it receives an ARP reply about the conflict. System view # Enable IP conflict notification on the device. [Sysname] arp ip-conflict log prompt arp send-gratuitous-arp Use arp send-gratuitous-arp to enable periodic sending of gratuitous ARP packets and set the sending interval on an interface. Use undo arp send-gratuitous-arp to disable the interface from periodically sending gratuitous ARP packets. arp send-gratuitous-arp [ interval milliseconds ] undo arp send-gratuitous-arp Periodic sending of gratuitous ARP is disabled. Layer 3 Ethernet interface view, Layer 3 Ethernet subinterface view, Layer 3 aggregate interface view, Layer 3 aggregate subinterface view, VLAN interface view interval milliseconds: Sets the interval at which gratuitous ARP packets are sent, in the range of 200 to milliseconds. The default value is 2000 milliseconds. 12

22 This function takes effect only when the enabled interface is up and an IP address has been assigned to the interface. This function can send gratuitous ARP requests only for a VRRP virtual IP address, or the sending interface's primary IP address or manually configured secondary IP address. The primary IP address can be configured manually or automatically, whereas the secondary IP address must be configured manually. If you change the interval for sending gratuitous ARP packets, the configuration takes effect at the next sending interval. The frequency of sending gratuitous ARP packets might be much lower than expected when any of the following conditions exist: This function is enabled on multiple interfaces. Each interface is configured with multiple secondary IP addresses. A small sending interval is configured in the preceding cases. # Enable VLAN-interface 2 to send gratuitous ARP packets every 300 milliseconds. [Sysname] interface vlan-interface 2 [Sysname-Vlan-interface2] arp send-gratuitous-arp interval 300 gratuitous-arp-learning enable Use gratuitous-arp-learning enable to enable learning of gratuitous ARP packets. Use undo gratuitous-arp-learning enable to disable learning of gratuitous ARP packets. gratuitous-arp-learning enable undo gratuitous-arp-learning enable Learning of gratuitous ARP packets is enabled. System view The learning of gratuitous ARP packets function allows a device to maintain its ARP table by creating or updating ARP entries based on received gratuitous ARP packets. When this function is disabled, the device uses received gratuitous ARP packets to update existing ARP entries only. ARP entries are not created based on the received gratuitous ARP packets, which saves ARP table space. # Enable learning of gratuitous ARP packets. [Sysname] gratuitous-arp-learning enable 13

23 gratuitous-arp-sending enable Use gratuitous-arp-sending enable to enable sending of gratuitous ARP packets upon receiving ARP requests whose sender IP address is on a different subnet. Use undo gratuitous-arp-sending enable to restore the default. gratuitous-arp-sending enable undo gratuitous-arp-sending enable A device does not send gratuitous ARP packets when it receives ARP requests whose sender IP address is on a different subnet. System view # Disable a device from sending gratuitous ARP packets upon receiving ARP requests whose sender IP address is on a different subnet. [Sysname] undo gratuitous-arp-sending enable 14

24 Proxy ARP commands display local-proxy-arp Use display local-proxy-arp to display the local proxy ARP status. display local-proxy-arp [ interface interface-type interface-number ] Any view network-operator interface interface-type interface-number: Displays the local proxy ARP status for the specified interface. You can use this command to check whether local proxy ARP is enabled or disabled. If an interface is specified, this command displays the local proxy ARP status for the specified interface. If no interface is specified, this command displays the local proxy ARP status for all interfaces. # Display the local proxy ARP status for VLAN-interface 2. <Sysname> display local-proxy-arp interface vlan-interface 2 Interface Vlan-interface2 Local Proxy ARP status: enabled local-proxy-arp enable display proxy-arp Use display proxy-arp to display the proxy ARP status. display proxy-arp [ interface interface-type interface-number ] Any view network-operator interface interface-type interface-number: Displays the proxy ARP status for the specified interface. 15

25 You can use this command to check whether proxy ARP is enabled or disabled. If an interface is specified, this command displays proxy ARP status for the specified interface. If no interface is specified, this command displays proxy ARP status for all interfaces. # Display the proxy ARP status on VLAN-interface 1. <Sysname> display proxy-arp interface Vlan-interface 1 Interface Vlan-interface1 Proxy ARP status: disabled proxy-arp enable local-proxy-arp enable Use local-proxy-arp enable to enable local proxy ARP. Use undo local-proxy-arp enable to disable local proxy ARP. local-proxy-arp enable [ ip-range startip to endip ] undo local-proxy-arp enable Local proxy ARP is disabled. VLAN interface view, Layer 3 Ethernet interface view, Layer 3 Ethernet subinterface view, Layer 3 aggregate interface view, Layer 3 aggregate subinterface view ip-range startip to endip: Specifies the IP address range for which local proxy ARP is enabled. The start IP address must be lower than or equal to the end IP address. Proxy ARP enables a device on a network to answer ARP requests for an IP address not on that network. With proxy ARP, hosts in different broadcast domains can communicate with each other as they do on the same network. Proxy ARP includes common proxy ARP and local proxy ARP. Common proxy ARP allows communication between hosts that connect to different Layer 3 interfaces and reside in different broadcast domains. Local proxy ARP allows communication between hosts that connect to the same Layer 3 interface and reside in different broadcast domains. Only one IP address range can be specified by using the ip-range keyword on an interface. # Enable local proxy ARP on VLAN-interface 2. 16

26 [Sysname] interface vlan-interface 2 [Sysname-Vlan-interface2] local-proxy-arp enable # Enable local proxy ARP on VLAN-interface 2 for an IP address range. [Sysname] interface vlan-interface 2 [Sysname-Vlan-interface2] local-proxy-arp enable ip-range to display local-proxy-arp proxy-arp enable Use proxy-arp enable to enable proxy ARP. Use undo proxy-arp enable to disable proxy ARP. proxy-arp enable undo proxy-arp enable Proxy ARP is disabled. VLAN interface view, Layer 3 Ethernet interface view, Layer 3 Ethernet subinterface view, Layer 3 aggregate interface view, Layer 3 aggregate subinterface view Proxy ARP enables a device on a network to answer ARP requests for an IP address not on that network. With proxy ARP, hosts in different broadcast domains can communicate with each other as they do on the same network. Proxy ARP includes common proxy ARP and local proxy ARP. Common proxy ARP allows communication between hosts that connect to different Layer 3 interfaces and reside in different broadcast domains. Local proxy ARP allows communication between hosts that connect to the same Layer 3 interface and reside in different broadcast domains. # Enable proxy ARP on VLAN-interface 2. [Sysname] interface vlan-interface 2 [Sysname-Vlan-interface2] proxy-arp enable display proxy-arp 17

27 ARP snooping commands arp snooping enable Use arp snooping enable to enable ARP snooping. Use undo arp snooping enable to disable ARP snooping. arp snooping enable undo arp snooping enable ARP snooping is disabled. VLAN view # Enable ARP snooping on VLAN 2. [Sysname] vlan 2 [Sysname-vlan2] arp snooping enable display arp snooping Use display arp snooping to display ARP snooping entries. display arp snooping [ vlan vlan-id ] [ slot slot-number ] [ count ] display arp snooping ip ip-address [ slot slot-number ] Any view network-operator vlan vlan-id: Displays ARP snooping entries for a VLAN. The vlan-id argument is in the range of 1 to count: Displays the number of the current ARP snooping entries. ip ip-address: Displays the ARP snooping entry for the specified IP address. slot slot-number: Specifies an IRF member device by its member ID. If you do not specify any keywords or arguments, the command displays all ARP snooping entries. 18

28 # Display ARP snooping entries for VLAN 2. <Sysname> display arp snooping vlan 2 IP Address MAC Address VLAN ID Interface Aging Status XGE1/0/1 20 Valid XGE1/0/2 5 Invalid # Display the number of the current ARP snooping entries. <Sysname> display arp snooping count Total entries: 2 Table 2 Command output Field IP Address MAC Address VLAN ID Interface Aging Status Total entries Description IP address in an ARP snooping entry. MAC address in an ARP snooping entry. ID of the VLAN to which the ARP snooping entry belongs. Input interface in an ARP snooping entry. Aging time for an ARP snooping entry in minutes. Status of an ARP snooping entry: Valid, Invalid, Collision. Number of ARP snooping entries. reset arp snooping reset arp snooping Use reset arp snooping to remove ARP snooping entries. reset arp snooping [ ip ip-address vlan vlan-id ] User view ip ip-address: Removes the ARP entry for the specified IP address. vlan vlan-id: Removes the ARP entries for the specified VLAN. The vlan-id argument is in the range of 1 to If you do not specify any keywords or arguments, the command removes all ARP snooping entries. # Remove ARP snooping entries for VLAN 2. <Sysname> reset arp snooping vlan 2 19

29 display arp snooping 20

30 ARP fast-reply commands arp fast-reply enable Use arp fast-reply enable to enable ARP fast-reply for a VLAN. Use undo arp fast-reply enable to disable ARP fast-reply for a VLAN. arp fast-reply enable undo arp fast-reply enable ARP fast-reply is disabled on a VLAN. VLAN view # Enable ARP fast-reply for VLAN 2. [Sysname] vlan 2 [Sysname-vlan2] arp fast-reply enable 21

31 IP addressing commands The IP addresses in this chapter refer to IPv4 addresses unless otherwise specified. The term "interface" in this chapter collectively refers to Layer 3 interfaces, including VLAN interfaces and Layer 3 Ethernet interfaces. You can set an Ethernet port as a Layer 3 interface by using the port link-mode route command (see Layer 2 LAN Switching Configuration Guide). display ip interface Use display ip interface to display IP configuration and statistics for the specified Layer 3 interface or all Layer 3 interfaces. display ip interface [ interface-type interface-number ] Any view network-operator interface-type interface-number: Specifies an interface by its type and number. Use the display ip interface command to display IP configuration and statistics for the specified Layer 3 interface. The statistics include the following information: The number of unicast packets, bytes, and multicast packets the interface has sent and received. The number of TTL-invalid packets and ICMP packets the interface has received. The packet statistics helps you locate a possible attack on the network. If you do not specify an interface, the command displays information about all Layer 3 interfaces. # Display IP configuration and statistics for VLAN-interface 10. <Sysname> display ip interface vlan-interface 10 Vlan-interface10 current state : DOWN Line protocol current state : DOWN Internet Address is /8 Primary Broadcast address : The Maximum Transmit Unit : 1500 bytes input packets : 0, bytes : 0, multicasts : 0 output packets : 0, bytes : 0, multicasts : 0 TTL invalid packet number: 0 ICMP packet input number: 0 Echo reply: 0 Unreachable: 0 Source quench: 0 22

32 Routing redirect: 0 Echo request: 0 Router advert: 0 Router solicit: 0 Time exceed: 0 IP header bad: 0 Timestamp request: 0 Timestamp reply: 0 Information request: 0 Information reply: 0 Netmask request: 0 Netmask reply: 0 Unknown type: 0 Table 3 Command output Field current state Line protocol current state Internet Address Broadcast address The Maximum Transmit Unit input packets, bytes, multicasts output packets, bytes, multicasts TTL invalid packet number ICMP packet input number: Echo reply: Unreachable: Source quench: Description Current physical state of the interface: Administrative DOWN The interface is shut down with the shutdown command. DOWN The interface is administratively up but its physical state is down, which might be caused by a connection or link failure. UP Both the administrative and physical states of the interface are up. Current state of the link layer protocol: DOWN The protocol state of the interface is down. UP The protocol state of the interface is up. UP (spoofing) The protocol state of the interface pretends to be up. However, no corresponding link is present, or the corresponding link is not present permanently but is established as needed. IP address of an interface followed by: Primary A primary IP address. Sub A secondary IP address. DHCP-Allocated An IP address obtained through DHCP. BOOTP-Allocated An IP address obtained through BOOTP. Cluster A cluster IP address. Mad A MAD IP address. IRF-Member IP address of the management Ethernet port of an IRF member device. Broadcast address of the subnet attached to an interface. Maximum transmission units on the interface, in bytes. Unicast packets, bytes, and multicast packets received on an interface (statistics start at the device startup). Number of TTL-invalid packets received on the interface (statistics start at the device startup). Total number of ICMP packets received on the interface (statistics start at the device startup): Echo reply packets. Unreachable packets. Source quench packets. 23

33 Field Routing redirect: Echo request: Router advert: Router solicit: Time exceed: IP header bad: Timestamp request: Timestamp reply: Information request: Information reply: Netmask request: Netmask reply: Unknown type: Description Routing redirect packets. Echo request packets. Router advertisement packets. Router solicitation packets. Time exceeded packets. IP header bad packets. Timestamp request packets. Timestamp reply packets. Information request packets. Information reply packets. Netmask request packets. Netmask reply packets. Unknown type packets. display ip interface brief ip address display ip interface brief Use display ip interface brief to display brief IP configuration information for the specified Layer 3 interface or all Layer 3 interfaces. display ip interface [ interface-type [ interface-number ] ] brief Any view network-operator interface-type: Specifies the interface type. interface-number: Specifies the interface number. Use the display ip interface brief command to display brief IP configuration information, including the state, IP address, and description of the physical and link layer protocols, for the specified Layer 3 interface or all Layer 3 interfaces. If you do not specify the interface type and interface number, the command displays the brief IP configuration information for all Layer 3 interfaces. If you specify only the interface type, the command displays the brief IP configuration information for all Layer 3 interfaces of the specified type. If you specify both the interface type and interface number, the command displays the brief IP configuration information for the specified interface. 24

34 # Display brief IP configuration information for VLAN interfaces. <Sysname> display ip interface vlan-interface brief *down: administratively down (s): spoofing (l): loopback Interface Physical Protocol IP Address Description Vlan10 down down Vlan-inte... Vlan2 down down Vlan-inte... Table 4 Command output Field *down: administratively down (s) : spoofing Interface Physical Protocol IP Address Description Description The interface is administratively shut down with the shutdown command. Spoofing attribute of the interface. It indicates that an interface might have no link present even when its link layer protocol is up or the link is established only on demand. Interface name. Physical state of the interface: *down The interface is administratively shut down with the shutdown command. down The interface is administratively up but its physical state is down (possibly because of poor connection or line failure). up Both the administrative and physical states of the interface are up. Link layer protocol state of the interface: down The protocol state of the interface is down (typically when no IP address is configured for the interface). up The protocol state of the interface is up. up(s) The protocol state of the interface is up (spoofing). IP address of the interface. If no IP address is configured, unassigned is displayed. Interface description information. A maximum of 12 characters can be displayed. If there are more than 12 characters, only the first 9 characters are displayed. display ip interface ip address ip address Use ip address to assign an IP address to the interface. Use undo ip address to remove the IP address from the interface. ip address ip-address { mask-length mask } [ irf-member member-id sub ] undo ip address [ ip-address { mask-length mask } [ irf-member member-id sub ] ] No IP address is assigned to an interface. 25

35 Interface view ip-address: Specifies the IP address of the interface, in dotted decimal notation. mask-length: Specifies the subnet mask length in the range of 1 to 31. For a loopback interface, the value range is 1 to 32. mask: Specifies the subnet mask in dotted decimal notation. irf-member member-id: Assigns an IP address to the management Ethernet port of the specified IRF member device. The member-id argument specifies an IRF member device by its member ID in the range of 1 to 10. sub: Assigns a secondary IP address to the interface. Use the command to configure a primary IP address for an interface. If the interface connects to multiple subnets, configure primary and secondary IP addresses on the interface so the subnets can communicate with each other through the interface. An interface can have only one primary IP address. A newly configured primary IP address overwrites the previous address. You cannot assign secondary IP addresses to an interface that obtains an IP address through BOOTP, DHCP, or IP unnumbered. The undo ip address command removes all IP addresses from the interface. The undo ip address ip-address { mask mask-length } command removes the primary IP address. The undo ip address ip-address { mask mask-length } sub command removes a secondary IP address. Before removing the primary IP address, remove all secondary IP addresses. The primary and secondary IP addresses you assign to the interface can be located on the same network segment, but different interfaces on your device must reside on different network segments. The IP addresses assigned to the management Ethernet ports of all IRF member devices must be in the same subnet. In an IRF fabric, only the IP address assigned to the management Ethernet port of the master takes effect. Make sure no IP address conflict exists when you assign IP addresses to the management Ethernet ports of subordinates. The system does not warn of an IP address conflict because the IP addresses assigned to the management Ethernet ports of subordinates do not take effect. After an IRF fabric split, the IP addresses assigned to the management Ethernet ports of the new masters (original subordinates) take effect. # Assign VLAN-interface 10 a primary IP address and a secondary IP address , with subnet masks both [Sysname] interface vlan-interface 10 [Sysname-Vlan-interface10] ip address [Sysname-Vlan-interface10] ip address sub display ip interface display ip interface brief 26

36 ip address unnumbered Use ip address unnumbered to configure the current interface as IP unnumbered to borrow an IP address from the specified interface. Use undo ip address unnumbered to disable IP unnumbered on the interface. ip address unnumbered interface interface-type interface-number undo ip address unnumbered The interface does not borrow IP addresses from other interfaces. Tunnel interface view interface interface-type interface-number: Specifies an interface from which the current interface can borrow an IP address. Typically, you assign an IP address to an interface either manually or through DHCP. If the IP addresses are not enough, or the interface is used only occasionally, you can configure an interface to borrow an IP address from other interfaces. This is called IP unnumbered, and the interface borrowing the IP address is called IP unnumbered interface. Multiple interfaces can use the same unnumbered IP address. If an interface has multiple manually configured IP addresses, only the primary IP address manually configured can be borrowed. You cannot enable a dynamic routing protocol on the interface that has no IP address configured. To enable the interface to communicate with other devices, you must configure a static route to the peer device on the interface. Before entering tunnel interface view, make sure the tunnel interface has been created. For information about tunnel interface, see Layer 3 IP Services Configuration Guide. # Configure the interface Tunnel 1 to borrow the IP address of VLAN-interface 100. [Sysname] interface tunnel 1 [Sysname-Tunnel1] ip address unnumbered interface vlan-interface