HPE VSR1000 Virtual Services Router

Transcription

1 HPE VSR1000 Virtual Services Router High Availability Command Reference Part number: Software version: VSR1000_HPE-CMW710-E0518-X64 Document version: 5W

2 Copyright 2017 Hewlett Packard Enterprise Development LP The information contained herein is subject to change without notice. The only warranties for Hewlett Packard Enterprise products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. Hewlett Packard Enterprise shall not be liable for technical or editorial errors or omissions contained herein. Confidential computer software. Valid license from Hewlett Packard Enterprise required for possession, use, or copying. Consistent with FAR and , Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor s standard commercial license. Links to third-party websites take you outside the Hewlett Packard Enterprise website. Hewlett Packard Enterprise has no control over and is not responsible for information outside the Hewlett Packard Enterprise website. Acknowledgments Intel, Itanium, Pentium, Intel Inside, and the Intel Inside logo are trademarks of Intel Corporation in the United States and other countries. Microsoft and Windows are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. Adobe and Acrobat are trademarks of Adobe Systems Incorporated. Java and Oracle are registered trademarks of Oracle and/or its affiliates. UNIX is a registered trademark of The Open Group.

3 Contents Interface backup commands 1 backup interface 1 backup threshold 2 backup timer delay 3 backup timer flow-check 4 backup track 5 display interface-backup state 5 display interface-backup statistics 7 DLDP commands 10 display dldp 10 display dldp statistics 11 dldp authentication-mode 12 dldp authentication-password 13 dldp delaydown-timer 14 dldp enable 15 dldp global enable 15 dldp interval 16 dldp unidirectional-shutdown 17 reset dldp statistics 17 Monitor Link commands 19 display monitor-link group 19 downlink up-delay 20 monitor-link disable 20 monitor-link group 21 port 21 port monitor-link group 22 VRRP commands 24 IPv4 VRRP commands 24 display vrrp 24 display vrrp statistics 30 reset vrrp statistics 34 snmp-agent trap enable vrrp 34 vrrp check-ttl enable 35 vrrp dot1q 36 vrrp dscp 36 vrrp mode 37 vrrp version 38 vrrp vrid 38 vrrp vrid authentication-mode 39 vrrp vrid preempt-mode 41 vrrp vrid priority 42 vrrp vrid shutdown 42 vrrp vrid source-interface 43 vrrp vrid timer advertise 44 vrrp vrid track 45 IPv6 VRRP commands 47 display vrrp ipv6 47 display vrrp ipv6 statistics 53 reset vrrp ipv6 statistics 56 vrrp ipv6 dot1q 57 vrrp ipv6 dscp 58 vrrp ipv6 mode 58 vrrp ipv6 vrid 59 vrrp ipv6 vrid preempt-mode 60 i

4 vrrp ipv6 vrid priority 61 vrrp ipv6 vrid shutdown 62 vrrp ipv6 vrid timer advertise 62 vrrp ipv6 vrid track 63 Reth interface commands 66 bandwidth 66 default 66 description 67 display counters interface reth 67 display counters rate interface reth 69 display interface reth 70 display reth interface 73 interface reth 74 mac-address 75 member interface 75 mtu 76 reset counters interface reth 77 shutdown 78 sub-interface rate-statistic 78 Redundancy group commands 80 bind slot 80 display redundancy group 80 hold-down-interval 82 member interface 83 node 84 node-member interface 84 preempt-delay 85 priority 86 redundancy group 86 snmp-agent trap enable rddc 87 switchover request 87 switchover reset 88 track 88 BFD commands 90 bfd authentication-mode 90 bfd demand enable 91 bfd detect-interface 91 bfd detect-multiplier 92 bfd echo enable 93 bfd echo-source-ip 94 bfd echo-source-ipv6 94 bfd init-fail timer 95 bfd min-echo-receive-interval 96 bfd min-receive-interval 96 bfd min-transmit-interval 97 bfd multi-hop authentication-mode 98 bfd multi-hop destination-port 99 bfd multi-hop detect-multiplier 99 bfd multi-hop min-receive-interval 100 bfd multi-hop min-transmit-interval 100 bfd session init-mode 101 bfd template 102 display bfd session 102 reset bfd session statistics 105 snmp-agent trap enable bfd 105 Track commands 107 delay 107 display track 108 ii

5 object 112 threshold percentage 113 threshold weight 113 track bfd 114 track interface 115 track interface physical 116 track interface protocol 117 track ip route reachability 118 track list boolean 119 track list threshold percentage 120 track list threshold weight 121 track nqa 122 Process placement commands 124 affinity location-set 124 affinity location-type 124 affinity program 125 affinity self 126 display ha service-group 127 display placement location 128 display placement policy 129 display placement program 130 display placement reoptimize 131 placement reoptimize 132 Load balancing commands 133 activate (link group view) 133 activate (server farm view) 133 bandwidth busy-protection enable (transparent DNS proxy view) 134 bandwidth busy-protection enable (virtual server view) 135 bandwidth busy-rate (link view) 135 bandwidth busy-rate (real server view) 136 bandwidth interface statistics enable 137 bandwidth weight 138 case-insensitive 139 check all-packet 139 class 140 compression level 141 connection-limit max (link view) 141 connection-limit max (real server view) 142 connection-limit max (virtual server view) 142 connection-sync enable (transparent DNS proxy view) 143 connection-sync enable (virtual server view) 144 content 144 content length-threshold 145 content maxparse-length 146 content rewrite 146 cookie 147 cookie secondary name 148 cost 149 cost weight 150 default dns-server-pool 150 default link-group 151 default server-farm 152 default-class action 152 description 153 display loadbalance action 155 display loadbalance alg 158 display loadbalance class 159 display loadbalance dns-cache 161 display loadbalance dns-listener 162 display loadbalance dns-listener statistics 163 iii

6 display loadbalance dns-proxy 163 display loadbalance dns-proxy statistics 165 display loadbalance dns-server 166 display loadbalance dns-server statistics 167 display loadbalance dns-server-pool 168 display loadbalance hot-backup statistics 171 display loadbalance isp 172 display loadbalance limit-policy 173 display loadbalance link 174 display loadbalance link-group 177 display loadbalance link out-interface statistics 180 display loadbalance link statistics 181 display loadbalance policy 182 display loadbalance proximity 183 display loadbalance reverse-zone 185 display loadbalance snat-pool 186 display parameter-profile 187 display real-server 189 display real-server statistics 192 display server-farm 194 display sticky 197 display sticky-group 200 display virtual-server 204 display virtual-server statistics 207 dns-server-pool (LB action view) 209 dns-server-pool (DNS server view) 210 exceed-mss 210 fail-action (link group view) 211 fail-action (server farm view) 212 fallback 212 fallback-action continue 213 forward all 213 header 214 header delete 215 header delete request accept-encoding 216 header exceed-length 217 header insert 217 header insert response vary 218 header maxparse-length 219 header modify per-request 219 header rewrite 220 inherit vpn-instance disable (link view) 221 inherit vpn-instance disable (real server view) 222 ip 222 ip address (transparent DNS proxy view) 223 ip address (DNS server view) 224 ip address (DNS listener view) 224 ip address (ISP view) 225 ip address (real server view) 226 ip mask 226 ip range (SNAT address pool view) 227 ipv6 227 ipv6 address (DNS listener view) 228 ipv6 address (DNS server view) 229 ipv6 address (transparent DNS proxy view) 230 ipv6 address (ISP view) 230 ipv6 address (real server view) 231 ipv6 prefix 231 ipv6 range 232 isp 232 lb-limit-policy 233 lb-policy (transparent DNS proxy view) 234 iv

7 lb-policy (virtual server view) 234 limit 235 link (DNS server view) 236 link-group (LB action view) 237 link-group (link view) 238 loadbalance action 238 loadbalance alg 239 loadbalance alg all-enable 240 loadbalance class 240 loadbalance dns-listener 241 loadbalance dns-proxy 242 loadbalance dns-server 242 loadbalance dns-server-pool 243 loadbalance isp file 243 loadbalance isp name 244 loadbalance limit-policy 245 loadbalance link 245 loadbalance link-group 246 loadbalance log enable base 246 loadbalance log enable nat 247 loadbalance policy 248 loadbalance proximity 249 loadbalance region 249 loadbalance reverse-zone 250 loadbalance schedule-test ip 250 loadbalance schedule-test ipv6 252 loadbalance snat-pool 254 match acl 254 match app-group 255 match class 256 match content 257 match cookie 257 match default probe 258 match destination 259 match destination domain-name 260 match domain-name 261 match header 261 match isp 262 match method 263 match probe 264 match radius-attribute 265 match source 265 match url 266 max-bandwidth (link view) 267 max-bandwidth (real server view) 268 max-number 269 memory-size 269 override-limit enable 270 parameter 270 parameter-profile 271 payload 272 port (DNS server view) 273 port (real server view) 273 port (transparent DNS proxy view) 274 port (virtual server view) 274 predictor (DNS server pool view) 275 predictor (link group view) 276 predictor (server farm view) 277 prefer-method 278 priority (DNS server view) 279 priority (link view) 280 priority (real server view) 280 v

8 probe (link view) 281 probe (DNS server pool view) 282 probe (DNS server view) 283 probe (link group view) 283 probe (real server view) 284 probe (server farm view) 285 proximity enable (link group view) 286 proximity enable (server farm view) 286 radius-attribute 287 rate-limit bandwidth (link view) 288 rate-limit bandwidth (real server view) 288 rate-limit bandwidth (virtual server view) 289 rate-limit connection (link view) 290 rate-limit connection (real server view) 291 rate-limit connection (virtual server view) 291 real-server 292 rebalance per-request 292 record ptr 293 redirect relocation (LB action view) 294 redirect relocation (virtual server view) 294 redirect return-code (LB action view) 295 redirect return-code (virtual server view) 296 request-version all 297 reset loadbalance connections 297 reset loadbalance dns-cache 297 reset loadbalance dns-listener statistics 298 reset loadbalance dns-proxy statistics 298 reset loadbalance dns-server statistics 299 reset loadbalance hot-backup statistics 299 reset loadbalance link statistics 300 reset loadbalance proximity 300 reset real-server statistics 301 reset virtual-server statistics 301 route-advertisement enable 302 router ip 302 router ipv6 303 rtt weight 303 rule 304 secondary-cookie delimiters 305 secondary-cookie start 305 selected-link 306 selected-server (DNS server pool view) 307 selected-server (server farm view) 307 server-connection reuse 308 server-farm (LB action view) 309 server-farm (real server view) 310 server-farm (system view) 310 service enable (DNS listener view) 311 service enable (transparent DNS proxy view) 311 service enable (virtual server view) 312 set ip tos (LB action view) 312 set ip tos (parameter profile view) 313 shutdown (link view) 313 shutdown (real server view) 314 skip current-dns-proxy 314 slow-online (link group view) 315 slow-online (server farm view) 316 slow-shutdown enable (link view) 316 slow-shutdown enable (real server view) 317 snat-pool (link group view) 318 snat-pool (server farm view) 318 snmp-agent trap enable loadbalance 319 vi

9 ssl session-id 319 ssl url rewrite 320 ssl-client-policy (LB action view) 321 ssl-client-policy (virtual server view) 321 ssl-server-policy 322 sticky-group 323 sticky-sync enable (transparent DNS proxy view) 323 sticky-sync enable (virtual server view) 324 success-criteria (DNS server pool view) 325 success-criteria (DNS server view) 325 success-criteria (LB link view) 326 success-criteria (link group view) 327 success-criteria (real server view) 328 success-criteria (server farm view) 328 tcp mss 329 tcp window-size 330 timeout (proximity view) 330 timeout (sticky group view) 331 topology region 331 transparent enable (link group view) 332 transparent enable (server farm view) 333 ttl weight 333 udp per-packet 334 virtual ip address 335 virtual ipv6 address 335 virtual-server (system view) 336 vpn-instance (DNS listener view) 337 vpn-instance (link view) 337 vpn-instance (real server view) 338 vpn-instance (transparent DNS proxy view) 339 vpn-instance (virtual server view) 339 weight (DNS server view) 340 weight (link view) 340 weight (real server view) 341 window-size 341 Document conventions and icons 343 Conventions 343 Network topology icons 344 Support and other resources 345 Accessing Hewlett Packard Enterprise Support 345 Accessing updates 345 Websites 346 Customer self repair 346 Remote support 346 Documentation feedback 346 Index 348 vii

10 Interface backup commands backup interface Use backup interface to specify a backup interface for an interface. Use undo backup interface to remove a backup interface. backup interface interface-type interface-number [ priority ] undo backup interface interface-type interface-number An interface does not have backup interfaces. Interface view interface-type interface-number: Specifies a backup interface by its type and number. priority: Assigns a priority to the backup interface. The value range is 0 to 255, and the default is 0. The greater the value, the higher the priority. Use this command on the primary interface to specify its backup interfaces. If you also configure the traffic thresholds, the primary and backup interfaces operate in load balancing mode. If you do not configure the traffic thresholds, the primary and backup interfaces operate in strict active/standby mode. Backup interface priority is used for inte rface backup to make inte rface activation or deactivation decisions when the p rimary interface fails o r is overloaded. Backup interfaces are activated in descending order of priority, with the highest-priority interface deactivated first. In contrast, they are deactivated in ascending order of priority, with the lowest-priority interface deactivated first. Once a backup interface is activated to forward traffic, only the primary interface can preempt it. A higher-priority backup interface cannot preempt a lower-priority backup interface that has taken over the primary interface. Use Table 1 when you configure primary and backup interfaces. Table 1 Restrictions on the primary and backup interfaces Item Maximum number of primary interfaces/device Restrictions 10. Backup interfaces/primary interface 3. Configuration restrictions An interface can only be the backup of one interface. A primary interface cannot be configured as a backup interface at the same time. A main interface and its subinterfaces cannot be the backup of each other. 1

11 This command and the backup track command are mutually exclusive. If you have configured the backup interface command on the primary interface, you cannot configure the backup track command on the primary or backup interface. If you have associated a backup interface with a track entry, you cannot configure the backup interface command on it or specify it as a backup interface by using the backup interface command. # Specify GigabitEthernet 1/0/2 as a backup interface of GigabitEthernet 1/0/1, with a priority of 50. [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] backup interface gigabitethernet 1/0/2 50 Related commands backup track backup threshold Use backup threshold to configure traffic thresholds on a primary interface for load sharing. Use undo backup threshold to restore the default. backup threshold upper-threshold lower-threshold undo backup threshold No traffic thresholds are configured. Interface view upper-threshold: Specifies the upper threshold as a per centage of bandwid th available on th e primary interface. The value range is 1 to 99. lower-threshold: Specifies the lower threshold as a percentage of bandwidth available on the primary interface. The value range is 1 to 99. NOTE: To set the bandwidth used for load sharing calculation in this command, use the bandwidth command on the primary interface. Before you can use this comman d on an interfac e, you must sp ecify a minimum of one backup interface for the interface. This command enables a primary interface and its backup inte rfaces to be load sha red. In load sharing mode, interface backup regularly compares the amount of traffic with the thresholds. When the amount of traffic on the primary interface exceeds the upper threshold, the backup interfaces are activated to share load in descending order of backup priority. 2

12 When the total amount of traffic on all the load-shared interfaces drops below the lower threshold, the backup interfaces are deactivated in ascending order of priority. To prevent link flapping from causing frequent interface switchovers, configure the lower threshold smaller than half of the upper threshold as a best practice. When the primary interface goes down, the active/standby mode applies. Only the highest-priority interface is activated. You can configure the traffic polling interval by using the backup timer flow-check command. NOTE: "Traffic" on an interface refers to the amount of incoming or outgoing traffic, whichever is higher. If two backup interfaces have the same priority, the one configured first has preference. # On GigabitEthernet 1/0/1, set the upper and lower traffic thresholds to 80 and 20, respectively. [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] backup threshold Related commands backup interface backup timer flow-check backup timer delay Use backup timer delay to set interface state switchover delay timers on a primary interface. Use undo backup timer delay to restore the default. backup timer delay up-delay down-delay undo backup timer delay Both up and down delay timers are 5 seconds. Interface view up-delay: Specifies the number of seconds that the primary or backup interface must wait before it can come up. The value range is 1 to seconds. down-delay: Specifies the number of seconds that the active primary or backup interface must wait before it is set to down state. The value range is 1 to seconds. Before you can use this comman d on an interfac e, you must sp ecify a minimum of one backup interface for the interface. The switchover delay mechanism prevents link flapping from causing frequent interface switchovers. When the link of the active interface fails, the interface state does not change immediately. Instead, a 3

13 down delay timer sta rts. If the link re covers before the timer expires, the in terface state does not change. If the link is still down when the timer expires, the interface state changes to down. # Specify GigabitEthernet 1/0/2 as a backup of GigabitEthernet 1/0/1, and set both up and down delay timers to 10 seconds. [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] backup interface gigabitethernet 1/0/2 [Sysname-GigabitEthernet1/0/1] backup timer delay Related commands backup interface backup timer flow-check Use backup timer flow-check to configure the traffic polling interval on a primary interface. Use undo backup timer flow-check to restore the default. backup timer flow-check interval undo backup timer flow-check The traffic polling interval is 30 seconds. Interface view interval: Specifies a traffic polling interval in the range of 30 to 600 seconds. Before you can use this comman d on an interfac e, you must sp ecify a minimum of one backup interface for the interface. This command takes effect when the primary and backup interfaces operate in load sharing mode. Interface backup compares the amount of traffic with the thresholds at this interval to determine whether to activate or deactivate a backup interface. # Set the traffic polling interval to 60 seconds on GigabitEthernet 1/0/1. [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] backup timer flow-check 60 Related commands backup interface 4

14 backup track Use backup track to associate a backup interface with a track entry. Use undo backup track to restore the default. backup track track-entry-number undo backup track An interface is not associated with a track entry. Interface view track-entry-number: Specifies a track entry ID in the range of 1 to To change the state of a backup interface response to the link state of the primary interface, use this command. For the setting to work, you must co nfigure the track entry to monitor the state of the primary link. For more information about configuring a track entry, see High Availability Configuration Guide. You can associate an interface with only one track entry. If you execute this command multiple times, the most recent configuration takes effect. You can create the associated track entry before or after the associatio n. The association takes effect after the track entry is created. To maintain performance, limit the number of associations to 64. This command and the backup interface command are mutually exclusive. If you have configured the backup interface command on the primary interface, you cannot configure the backup track command on the primary or backup interface. If you have associated a backup interface with a track entry, you cannot configure the backup interface command on it or specify it as a backup interface by using the backup interface command. # Associate GigabitEthernet 1/0/1 with track entry 1. [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] backup track 1 Related commands backup interface display interface-backup state Use display interface-backup state to display state information for primary and backup interfaces. 5

15 display interface-backup state Any view network-operator # Display state information for primary and backup interfaces. <Sysname> display interface-backup state Interface: GE1/0/1 UpDelay: 10 s DownDelay: 5 s State: UP Backup interfaces: GE1/0/2 Priority: 30 State: STANDBY GE1/0/3 Priority: 20 State: STANDBY Interface: GE1/0/5 UpDelay: 10 s DownDelay: 5 s Upper threshold: 80 Lower threshold: 20 State: DOWN Backup interfaces: GE1/0/6 Priority: 30 State: UP_DELAY GE1/0/7 Priority: 20 State: STANDBY IB Track Information: GE1/0/4 Track: 1 State: STANDBY GE1/0/8 Track: 2 State: UP Table 2 Command output Field Interface UpDelay DownDelay Upper threshold Description Name of the primary interface. The number of seconds that elapse after the primary interface goes down before the backup interface is activated. The number of seconds that elapse after the primary interface comes up before the backup interface is deactivated. The upper traffic threshold specified as a percentage of bandwidth available on the primary interface. When the traffic on the primary interface exceeds the upper threshold, the backup interfaces are activated to share load in descending order of backup priority. 6

16 Field Lower threshold State Backup interfaces Priority State IB Track Information GE1/0/4 Track State Description The lower traffic threshold specified as a percentage of bandwidth available on the primary interface. When the total amount of traffic on all the load-shared interfaces drops below the lower threshold, the backup interfaces are deactivated in ascending order of priority. State of the primary interface: UP The interface is operating correctly. DOWN The interface is down and cannot forward traffic. UP_DELAY The interface has recovered, and it is waiting to preempt the active backup interface. DOWN_DELAY The interface has failed, and it is waiting to be taken over by a backup interface. During this period, packet loss occurs on the primary interface. The interface can forward traffic only when it is in UP state. Backup interfaces assigned to the primary interface. Priority of the backup interface. State of the backup interface: UP The interface has taken over the primary interface to forward traffic. DOWN The interface is down and cannot forward traffic. UP_DELAY The backup interface is waiting to take over the primary interface. DOWN_DELAY The interface is waiting to be preempted by the primary interface that has recovered. STANDBY The interface is on standby while the primary interface is operating correctly. The interface can forward traffic only when it is in UP state. Associations of backup interfaces and track entries. Backup interface. In this sample output, GE 1/0/4 is a backup interface. Track entry ID associated with the backup interface. State of the backup interface associated with a track entry: INVALID The backup role of the interface has not taken effect, for example, because the track entry has not been created. UP The interface has taken over forwarding traffic. DOWN The backup interface is down and cannot forward traffic. STANDBY The backup interface is on standby while the primary link is operating correctly. display interface-backup statistics Use display interface-backup statistics to display traffic statistics for load-shared interfaces. display interface-backup statistics 7

17 Any view network-operator # Display traffic statistics for load-shared interfaces. <Sysname> display interface-backup statistics Interface: GigabitEthernet1/0/2 Statistics interval: 30 s Bandwidth: bps ActiveTotalIn: 102 bytes ActiveTotalOut: 108 bytes ActiveIntervalIn: 102 bytes ActiveIntervalOut: 108 bytes Active used bandwidth: 28 bps TotalIn: 102 bytes TotalOut: 108 bytes TotalIntervalIn: 102 bytes TotalIntervalOut: 108 bytes Total used bandwidth: 28 bps Table 3 Command output Field Interface Statistics interval Bandwidth PrimaryTotalIn PrimaryTotalOut PrimaryIntervalIn PrimaryIntervalOut Primary used bandwidth TotalIn TotalOut TotalIntervalIn Description Name of the primary interface. Traffic polling interval, in seconds. Expected bandwidth (in bps) of the primary interface. This bandwidth is used for load sharing computation. You can use the bandwidth command in interface view to set its value. Cumulative sum of incoming bytes on the primary interface at the most recent traffic polling. Cumulative sum of outgoing bytes on the primary interface at the most recent traffic polling. Number of incoming bytes on the primary interface for the most recent polling interval. Number of outgoing bytes on the primary interface for the most recent polling interval. The primary interface's used bandwidth that was counted in load sharing computation. Cumulative sum of incoming bytes on the load-shared primary and backup interfaces at the most recent traffic polling. Cumulative sum of outgoing bytes on the load-shared primary and backup interfaces at the most recent traffic polling. Number of incoming bytes on the load-shared primary and backup interfaces for the most recent polling interval. 8

18 Field TotalIntervalOut Total used bandwidth Description Number of outgoing bytes on the load-shared primary and backup interfaces for the most recent polling interval. Total used bandwidth (in bps) of the load-shared primary and backup interfaces for the most recent polling interval. 9

19 DLDP commands display dldp Use display dldp to display DLDP configuration. display dldp [ interface interface-type interface-number ] Any view network-operator interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify this option, the command displays global and port-specific DLDP configuration. # Display global and port-specific DLDP configuration. <Sysname> display dldp DLDP global status: Enabled DLDP advertisement interval: 5s DLDP authentication-mode: Simple DLDP authentication-password: ****** DLDP unidirectional-shutdown mode: Auto DLDP delaydown-timer value: 1s Number of enabled ports: 2 Interface GigabitEthernet1/0/1 DLDP port state: Bidirectional Number of the port s neighbors: 1 Neighbor MAC address: Neighbor port index: 79 Neighbor state: Confirmed Neighbor aged time: 13s Interface GigabitEthernet1/0/2 DLDP port state: Inactive Number of the port s neighbors: 0 (Maximum number ever detected: 1) # Display the DLDP configuration of GigabitEthernet 1/0/1. <Sysname> display dldp interface gigabitethernet 1/0/1 Interface GigabitEthernet1/0/1 DLDP port state: Bidirectional Number of the port s neighbors: 1 Neighbor MAC address: Neighbor port index: 79 10

20 Neighbor state: Confirmed Neighbor aged time: 13s Table 4 Command output Field DLDP global status DLDP advertisement interval DLDP authentication-mode DLDP authentication-password DLDP unidirectional-shutdown mode DLDP delaydown-timer value Number of enabled ports Interface DLDP port state Number of the port s neighbors Maximum number ever detected Neighbor MAC address Neighbor port index Neighbor state Neighbor aged time Description Global DLDP state (Enabled or Disabled). Interval for sending Advertisement packets (in seconds) to maintain neighbor relations. DLDP authentication mode (None, Simple, or MD5). Password for DLDP authentication: ****** The password has been configured. Not configured The authentication mode has been configured but no password is configured. Port shutdown mode (Auto or Manual) after unidirectional links are detected. Setting of the DelayDown timer, in seconds. Number of the DLDP-enabled ports. Index of a DLDP-enabled port. DLDP state on a port: Bidirectional. Inactive. Initial. Unidirectional. Current number of neighbors. Maximum number of neighbors once detected on the port. This field appears only when the current number of neighbors is different from the maximum number of neighbors once detected. MAC address of the neighbor. Neighbor port index. Neighbor state (Confirmed or Unconfirmed). Neighbor aging time. display dldp statistics Use display dldp statistics to display DLDP packet statistics. display dldp statistics [ interface interface-type interface-number ] Any view network-operator 11

21 interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify this option, the command displays DLDP packet statistics for all interfaces. # Display DLDP packet statistics for all interfaces. <Sysname> display dldp statistics Interface GigabitEthernet1/0/1 Packets sent: 6 Packets received: 5 Invalid packets received: 2 Loopback packets received: 0 Authentication-failed packets received: 0 Valid packets received: 3 Interface GigabitEthernet1/0/2 Packets sent: 7 Packets received: 7 Invalid packets received: 3 Loopback packets received: 0 Authentication-failed packets received: 0 Valid packets received: 4 Table 5 Command output Field Interface Packets sent Packets received Invalid packets received Loop packets received Authentication failed packets received Valid packets received Description Port index. Total number of DLDP packets sent. Total number of DLDP packets received. Number of the invalid packets received. Number of the loopback packets received. Number of the received packets that failed to pass the authentication. Number of the valid packets received. Related commands reset dldp statistics dldp authentication-mode Use dldp authentication-mode to configure DLDP authentication. Use undo dldp authentication-mode to restore the default. dldp authentication-mode { md5 none simple } undo dldp authentication-mode DLDP authentication mode is none. 12

22 System view md5: Specifies the MD5 authentication mode. none: Specifies not to perform authentication. simple: Specifies the plaintext authentication mode. To enable DLDP to operate correctly, make sure the DLDP authentication modes and the passwords configured on the two ends of a link are the same. If you do not configure the authentication password after you configure the authentication mode, the authentication mode is none no matter which authentication mode you configure. # Configure to perform plaintext authentication and set the password to abc (assuming that Device A and Device B are connected by a DLDP link). Configure Device A: <DeviceA> system-view [DeviceA] dldp authentication-mode simple [DeviceA] dldp authentication-password simple abc Configure Device B: <DeviceB> system-view [DeviceB] dldp authentication-mode simple [DeviceB] dldp authentication-password simple abc Related commands display dldp dldp authentication-password dldp authentication-password Use dldp authentication-password to configure the password for DLDP authentication. Use undo dldp authentication-password to restore the default. dldp authentication-password { cipher simple } string undo dldp authentication-password No DLDP authentication password is configured. System view 13

23 cipher: Specifies a password in encrypted form. simple: Specifies a password in plainte xt form. For security purposes, the password specified in plaintext form will be stored in encrypted form. string: Specifies the password. Its plaintext form is a case-sensitive string of 1 to 16 characters. Its encrypted form is a case-sensitive string of 1 to 53 characters. To enable DLDP to operate correctly, make sure the DLDP authentication modes and the passwords configured on the two ends of a link are the same. If you do not configure the authentication password after you configure the authentication mode, the authentication mode is none no matter which authentication mode you configure. # Configure to perform plaintext authentication and set the password to abc (assuming that Device A and Device B are connected by a DLDP link). Configure Device A: <DeviceA> system-view [DeviceA] dldp authentication-mode simple [DeviceA] dldp authentication-password simple abc Configure Device B: <DeviceB> system-view [DeviceB] dldp authentication-mode simple [DeviceB] dldp authentication-password simple abc Related commands display dldp dldp authentication-mode dldp delaydown-timer Use dldp delaydown-timer to set the DelayDown timer. Use undo dldp delaydown-timer to restore the default. dldp delaydown-timer time undo dldp delaydown-timer The setting of the DelayDown timer is 1 second. System view time: Specifies the DelayDown timer in the range of 1 to 5 seconds. 14

24 The DelayDown timer configured by using this command applies to all DLDP-enabled ports. # Set the DelayDown timer to 2 seconds. [Sysname] dldp delaydown-timer 2 Related commands display dldp dldp enable Use dldp enable to enable DLDP on a port. Use undo dldp enable to disable DLDP on a port. dldp enable undo dldp enable DLDP is disabled on a port. Layer 3 Ethernet interface view DLDP can take effect only after you enable it globally and on a port. # Enable DLDP globally, and then enable DLDP on GigabitEthernet 1/0/1. [Sysname] dldp global enable [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] dldp enable Related commands display dldp dldp global enable dldp global enable Use dldp global enable to enable DLDP globally. Use undo dldp global enable to disable DLDP globally. dldp global enable undo dldp global enable 15

25 DLDP is disabled globally. System view DLDP can take effect only after you enable it globally and on a port. # Enable DLDP globally. [Sysname] dldp global enable Related commands display dldp dldp enable dldp interval Use dldp interval to set the interval for sending Advertisement packets. Use undo dldp interval to restore the default. dldp interval interval undo dldp interval The interval for sending Advertisement packets is 5 seconds. System view interval: Specifies Advertisement packets sending interval in the range of 1 to 100 seconds. This command applies to all DLDP-enabled ports. To enable DLDP to operate correctly, make sure the intervals for sending Advertisement packets configured on the two ends of a link are the same. # Set the interval for sending Advertisement packets to 20 seconds. [Sysname] dldp interval 20 16

26 Related commands display dldp dldp unidirectional-shutdown Use dldp unidirectional-shutdown to set the port shutdown mode. Use undo dldp unidirectional-shutdown to restore the default. dldp unidirectional-shutdown { auto manual } undo dldp unidirectional-shutdown The port shutdown mode is auto mode. System view auto: Configures the port shutdown mode as auto m ode. In this mode, when DLDP detects a unidirectional link, it shuts down the unidirectional port. manual: Configures the port shutdown mode as manual mode. In this mode, when DLDP detects a unidirectional link, DLDP does not shut down the involved port but you must manually shut it down. When the link state is restored to bidirectional, you must manually bring up the port. # Set the port shutdown mode to manual mode. [Sysname] dldp unidirectional-shutdown manual Related commands display dldp reset dldp statistics Use reset dldp statistics to clear DLDP packet statistics. reset dldp statistics [ interface interface-type interface-number ] User view interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify this option, the command clears DLDP packet statistics for all interfaces. 17

27 # Clear DLDP packet statistics for all interfaces. <Sysname> reset dldp statistics Related commands display dldp statistics 18

28 Monitor Link commands display monitor-link group Use display monitor-link group to display information about the specified or all monitor link groups. display monitor-link group { group-id all } Any view network-operator group-id: Specifies a monitor link group by its ID in the range of 1 to 16. all: Specifies all monitor link groups. # Display information about all monitor link groups. <Sysname> display monitor-link group all Monitor link protocol status: Disabled Monitor link group 1 information: Group status : N/A Downlink up-delay: 0(s) Last-up-time : - Last-down-time : - Member Role Status GE1/0/1 UPLINK UP GE1/0/2 DOWNLINK UP Table 6 Command output Field Monitor link protocol status Group status Downlink up-delay Last-up-time Description Whether Monitor Link is enabled: Enabled. Disabled. Monitor link group status: DOWN. UP. N/A Monitor Link is disabled globally. The monitor link group does not operate. Switchover delay of the downlink interfaces in the monitor link group, in seconds. Last time when the monitor link group came up. 19

29 Field Last-down-time Member Role Status Description Last time when the monitor link group went down. Member interfaces of the monitor link group. Interface role, which can be uplink interface or downlink interface. Member interface state, which can be up or down. downlink up-delay Use downlink up-delay to set the switchover del ay for the downlink interfa ces in a monitor lin k group. Use undo downlink up-delay to restore the default. downlink up-delay delay undo downlink up-delay The switchover delay is 0 seconds. The downlink interfaces come up as soon as an uplink interface in the monitor link group comes up. Monitor link group view delay: Sets the switchover delay in the range of 1 to 300 seconds. To avoid frequent state changes of downlink interfaces in the event that the uplink interfaces in the monitor link group flap, you can configure a switchover delay. The switchover delay is the time that the downlink interfaces wait before they come up following an uplink interface. # Set the switchover delay to 50 seconds for the downlink interfaces in monitor link group 1. [Sysname] monitor-link group 1 [Sysname-mtlk-group1] downlink up-delay 50 monitor-link disable Use monitor-link disable to disable Monitor Link globally. Use undo monitor-link disable to enable Monitor Link globally. monitor-link disable undo monitor-link disable 20

30 Monitor Link is enabled globally. System view All monitor link groups can operate only after you enable Monitor Link globally. When you disable Monitor Link globally, all monitor link groups cannot operate and the downlink interfaces brought down by the monitor link groups resume their original states. # Disable Monitor Link globally. [Sysname] monitor-link disable monitor-link group Use monitor-link group to create a monitor link group and enter its view, or enter the view of an existing monitor link group. Use undo monitor-link group to remove a monitor link group. monitor-link group group-id undo monitor-link group group-id No monitor link groups exist. System view group-id: Specifies a monitor link group ID in the range of 1 to 16. # Create monitor link group 1 and enter its view. port [Sysname] monitor-link group 1 [Sysname-mtlk-group1] Use port to assign an interface to a monitor link group. Use undo port to remove an interface from a monitor link group. 21

31 port interface-type { interface-number interface-number.subnumber } { downlink uplink } undo port interface-type interface-number No member interfaces exist in a monitor link group. Monitor link group view interface-type: Specifies an interface by its type. The following are the available interface types: Layer 3 Ethernet interface. Layer 3 Ethernet subinterface. interface-number: Specifies an interface by its number. interface-number.subnumber: Specifies a subinterface by its number. The argument subnumber is in the range of 1 to downlink: Specifies a downlink interface. uplink: Specifies an uplink interface. You can assign an interface to only one monitor link group. You can also assign an interface to a monitor lin k group by using the port monitor-link group command in interface view. To avoid impact on th e Monitor Link operation o r performance, do not p erform the following operations: If you have configured an interface as the downlink interface of a monitor link group, do not configure its subinterfaces as the uplink interfaces of any monitor link group. Because the state of subinterfaces is associated with the state of the interface, do not add them to the same monitor link group. # Configure GigabitEthernet 1/0/1 as a n uplink interface and GigabitEthernet 1/0/2 as a d ownlink interface for monitor link group 1. [Sysname] monitor-link group 1 [Sysname-mtlk-group1] port gigabitethernet 1/0/1 uplink [Sysname-mtlk-group1] port gigabitethernet 1/0/2 downlink Related commands port monitor-link group port monitor-link group Use port monitor-link group to assign the current interface to a monitor link group. Use undo port monitor-link group to remove the current interface from a monitor link group. 22

32 port monitor-link group group-id { downlink uplink } undo port monitor-link group group-id The interface is not a monitor link group member. Layer 3 Ethernet interface/subinterface view group-id: Specifies a monitor link group by its ID in the range of 1 to 16. downlink: Specifies a downlink interface. uplink: Specifies an uplink interface. You can assign an interface to only one monitor link group. You can also assign an interface to a monitor link group by using the port command in monitor link group view. To avoid impact on th e Monitor Link operation o r performance, do not p erform the following operations: If you have configured an interface as the downlink interface of a monitor link group, do not configure its subinterfaces as the uplink interfaces of any monitor link group. Because the state of subinterfaces is associated with the state of the interface, do not add the interface and its subinterfaces to the same monitor link group. # Configure GigabitEthernet 1/0/1 as a n uplink interface and GigabitEthernet 1/0/2 as a d ownlink interface for monitor link group 1. [Sysname] monitor-link group 1 [Sysname-mtlk-group1] quit [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] port monitor-link group 1 uplink [Sysname-GigabitEthernet1/0/1] quit [Sysname] interface gigabitethernet 1/0/2 [Sysname-GigabitEthernet1/0/2] port monitor-link group 1 downlink Related commands port 23

33 VRRP commands IPv4 VRRP commands display vrrp Use display vrrp to display the states of IPv4 VRRP groups. display vrrp [ interface interface-type interface-number [ vrid virtual-router-id ] ] [ verbose ] Any view network-operator interface interface-type interface-number: Specifies an interface by its type and number. vrid virtual-router-id: Specifies an IPv4 VRRP group by its virtual router ID in the range of 1 to 255. verbose: Displays detailed IPv4 VRRP group information. If you do not specify the verbose keyword, the command displays brief IPv4 VRRP group information. If no interface or VRRP group is specified, this command displays the state s of all IPv4 VRRP groups. If only an interface i s specified, this command displays the states of all IPv4 VRRP groups on the specified interface. If both an interface and an IPv4 VRRP group are specified, this command displays the states of the specified IPv4 VRRP group on the specified interface. # Display brief informatio n about all IPv4 VRRP groups on the device whe n VRRP operates in standard mode. <Sysname> display vrrp IPv4 Virtual Router Information: Running Mode : Standard Total number of virtual routers : 1 Interface VRID State Running Adver Auth Virtual Pri Timer Type IP GE1/0/1 1 Master Simple Table 7 Command output (in standard mode) Field Running Mode Total number of virtual routers Description VRRP operating mode (standard mode). Total number of VRRP groups. 24

34 Field Interface VRID State Running Pri Adver Timer Auth Type Virtual IP Description Interface where the VRRP group is configured. Virtual router ID (VRRP group number). Status of the router in the VRRP group: Master. Backup. Initialize. Inactive. Current priority of the router. When a track entry is associated with a VRRP group on the router, the router's priority changes when the track entry's status changes. VRRP advertisement sending interval in centiseconds. Authentication type: None No authentication. Simple Simple text authentication. MD5 MD5 authentication. Virtual IP address of the VRRP group. # Display detailed information about all IPv4 VRRP groups on the device when VRRP operates in standard mode. <Sysname> display vrrp verbose IPv4 Virtual Router Information: Running Mode : Standard Total number of virtual routers : 2 Interface GigabitEthernet1/0/1 VRID : 1 Adver Timer : 100 Admin Status : Up State : Master Config Pri : 150 Running Pri : 150 Preempt Mode : Yes Delay Time : 5 Auth Type : Simple Key : ****** Virtual IP : Virtual MAC : e Master IP : VRRP Track Information: Track Object : 1 State : Positive Pri Reduced : 50 Interface GigabitEthernet1/0/1 VRID : 11 Adver Timer : 100 Admin Status : Up State : Backup Config Pri : 80 Running Pri : 80 Preempt Mode : Yes Delay Time : 0 Become Master : 2370ms left Auth Type : None Virtual IP : Virtual MAC : e00-010b Master IP :

35 Table 8 Command output (in standard mode) Field Running Mode Total number of virtual routers Interface VRID Adver Timer Admin Status State Config Pri Running Pri Preempt Mode Delay Time Become Master Auth Type Key Virtual IP Virtual MAC Master IP VRRP Track Information Track Object State Pri Reduced Switchover Description VRRP operating mode (standard mode). Total number of VRRP groups. Interface where the VRRP group is configured. Virtual router ID (VRRP group number). VRRP advertisement sending interval in centiseconds. Administrative status: Up or Down. Status of the router in the VRRP group: Master. Backup. Initialize. Inactive. Configured priority of the router, which is configured by using the vrrp vrid priority command. Current priority of the router. When a track entry is associated with a VRRP group on the router, the router's priority changes when the track entry's status changes. Preemptive mode: Yes. No. Preemption delay in centiseconds. Time (in milliseconds) that a backup router has to wait before it becomes the master. This field is displayed only when the router is a backup. Authentication type: None No authentication. Simple Simple text authentication. MD5 MD5 authentication. Authentication key, which is not displayed if no authentication is required. Virtual IP address of the VRRP group. Virtual MAC address of the VRRP group's virtual IP address, which is displayed when the router is the master. Primary IP address of the interface where the master resides. Track entry information. This field is displayed only after you configure the vrrp vrid track command. Track entry which is associated with the VRRP group. Track entry state: Negative. Positive. NotReady. Value by which the priority decreases when the status of the associated track entry changes to the Negative state. Switchover mode. When the status of the associated track entry changes to the Negative state, the backup immediately becomes the master. 26

36 # Display brief information about all IPv4 VRRP groups on the device when VRRP operates in load balancing mode. <Sysname> display vrrp IPv4 Virtual Router Information: Running Mode : Load Balance Total number of virtual routers : 1 Interface VRID State Running Address Active Pri GE1/0/1 1 Master Local VF 1 Active f-e2ff-0011 Local Table 9 Command output (in load balancing mode) Field Running Mode Total number of virtual routers Interface VRID State Running Pri Address Active Description VRRP operating mode (load balancing mode). Total number of VRRP groups. Interface where the VRRP group is configured. Virtual router ID (VRRP group number) or virtual forwarder (VF) ID. For a VRRP group, this field indicates the state of the router in the VRRP group, which is Master, Backup, Initialize, or Inactive. For a VF, this field indicates the state of the VF in the VRRP group, which is Active, Listening, or Initialize. For a VRRP group, this field indicates the running priority of the router. When a track entry is associated with a VRRP group on the router, the router's priority changes when the track entry's status changes. For a VF, this field indicates the running priority of the VF. When a track entry is associated with a VF, the priority of the VF changes if the track entry's status changes. For a VRRP group, this field indicates the virtual IP address of the VRRP group. For a VF, this field indicates the virtual MAC address of the VF. For a VRRP group, this field indicates the IP address of the interface where the master resides. If the current router is the master, this field displays local. For a VF, this field indicates the IP address of the interface where the active virtual forwarder (AVF) resides. If the current VF is the AVF, this field displays local. # Display detailed information about all IPv4 VRRP groups on the device when VRRP operates in load balancing mode. <Sysname> display vrrp verbose IPv4 Virtual Router Information: Running Mode : Load Balance Total number of virtual routers : 2 Interface GigabitEthernet1/0/1 VRID : 1 Adver Timer : 100 Admin Status : Up State : Master Config Pri : 150 Running Pri : 150 Preempt Mode : Yes Delay Time : 5 Auth Type : None 27