Dell Force10 Z9000 User Manual

Addendum for Dell Networking OS 9.3(0.0)

tacacs-server key...232time

PG:1 TSA:ETS BW:50 PFC:ONPriorities:3Related Commandsdcb-map — creates a DCB map to configure PFC and ETS parameters and applies the PFC and ETS set

guaranteed buffer reduces the total available shared buffer to 7,787 KB. This shared buffer can be used for lossy and lossless traffic.The default beh

Total buffer (lossy + lossless)(in KB): 7787--Total buffer space for lossy and lossless queues PFC total buffer (in KB): 6526 --Indicates the total b

8. Create a QoS policy buffer and enter the QoS Policy Buffer Configuration mode to configure the no-drop queues, ingress buffer size, buffer limit fo

Usage InformationConfigure the maximum shared buffer available for PFC traffic. You can choose to increase or decrease the shared buffer that is curre

priorityConfigure the priority for the PFC threshold to be allocated to the buffer space parameters. This utility is supported on the S4810, S4820T, S

Usage InformationFor each priority, you can specify the shared buffer threshold limit, the ingress buffer size, buffer limit for pausing the acceptanc

buffer-size Ingress buffer sizesize Size of the ingress buffer in KB. Enter a number in the range of 0 to 7787. The default is 45 KB.pause-thresholdB

ExampleS4810-YU-MR-FTOS(conf)# qos-policy-buffer testS4810-YU-MR-FTOS (conf-qos-policy-buffer)#queue 0 pause no-drop buffer-size 128000 pause-threshol

dcb-policy dcb-buffer-threshold (Global Configuration)Assign the DCB policy to the DCB buffer threshold profile on stack ports that applies globally t

Scenarios for VLAN Membership and MAC Synchrnoization With VLT Nodes in PVLAN...265Configuring a VLT VLAN or LAG in a PVLAN...

Command ModesEXECEXEC PrivilegeCommand HistoryVersion 9.3.0.0 Introduced on the S6000 platform.Usage InformationThe following table describes the outp

• Port {id |all} queue {all} - egress queue-level snapshot for both unicast and multicast packets• Port {id |all} queue ucast {id | all} - egress queu

If you configured the maximum number of instances as 5 and attempt to view the buffer statistics tracking details for the instance ID of 6, the aforem

7 0 0 0 0 1 0 0 0 0 0 In the following example, the Headro

---------------------------------------0 0 01 0 02 0 03 0 04

MCAST 1 0MCAST 2 0MCAST 3 0MCAST 4 0MCAST 5 0MCAST 6 0MCAST 7 0MCAST

To determine the port that is congested and monitor all the unicast Queues on that port:FTOS#show hardware stack-unit 0 buffer-stats-snapshot unit 0 r

dcb pfc-total-buffer-sizeConfigure the total buffer size for PFC in kilobytes. This utility is supported on the S6000 platform.S6000Syntaxdcb pfc-tota

Command HistoryVersion 9.3.0.0 Introduced on the S6000 platform.Usage InformationThe following table describes the output fields displayed for the sho

- -- Denotes dynamic buffering is enabled in respective queuesOn interface in which PFC is not enabled: FTOS#show interface teng

set-pgid...2

This method of configuration enables you to effectively manage and administer the behavior of lossless queues.ExampleDell(conf)#dcb pfc-queues 4120Dat

7Egress Interface Selection (EIS) for HTTP and IGMP ApplicationsThe functionality to configure the egress interface selection (EIS) mechanism is suppo

Table 1. Association Between Applications and Port NumbersApplication Name Port Number Client ServerSSH 22Supported SupportedSflow-Collector 6343Suppo

• In this mode, you can run the “application” and “no application” commands• Applications can be configured/unconfigured as management applications us

• In the netstat output, the prefix “mgmt” is added to routes in the EIS table so that the user can distinguish between routes in the EIS Routing tabl

Handling of Switch-Destined Traffic• All traffic received on the management port destined to the management port IP address or received on the front e

Mapping of Management Applications and Traffic TypeThe following table summarizes the behavior of applications for various types of traffic when the m

The management port will be egress port for management applications as defined in this feature. If the management port is down or the destination is n

Behavior of Various Applications for Switch-Destined Traffic This section describes the different system behaviors that occur when when traffic is ter

• If management EIS is enabled, this default route is added to the management EIS routing table and the default routing table.ARP learn enable• When A

interface...

130

8Flex Hash and Optimized Boot-UpThis chapter describes the Flex Hash and fast-boot enhancements and contains the following sections:• Optimizing the B

condition occurs owing to hardware limitations in the S6000 platform, in which the RTAG7 hash selection bitmap overlay bits 2 and 3 need to be enabled

Parametersipv4 Denotes whether Flex Hash needs to be enabled for IPv4 packets.ipv6 Denotes whether Flex Hash needs to be enabled for IPv6 packets.prot

You can cause the system to include the fields present at the offsets that you define (from the start of the L4 header) as a part of LAG and ECMP comp

Configuring Fast Boot and LACP Fast SwitchoverTo configure the optimized booting time functionality, and quicker aggregation and convergence of member

Related Commands• show reload-type — displays the current reload mode (BMP or Normal mode).• stop bmp — stops the BMP process and prevents a loop if t

exists between the ToR and leaf switch units, and between the leaf and spine units or nodes. For example, you can enable the optimized booting method

3. Before performing the planned reload, we recommend that the IPv6 Neighbor Discovery (ND) reachable timer (amount of time that a switch can connect

image, after the kernel initialization is complete. Therefore, the forwarding plane match occurs at a later time than the stage at which the match occ

port-channel-protocol lacp...369Configuratio

BGP Graceful RestartThe fast boot functionality operates in the following manner when the system contains one or more BGP peerings configured for BGP

LACP Fast SwitchoverFor the fastboot functionality, the operation of LACP has been optimized. These LACP optimizations are applicable even when fast b

BGP as quickly as possible and then advertised to peers as soon as the peering is established. This rapidness in the transmission of routes is essenti

1. The ‘wait-while’ timer is not started in the ‘waiting’ state of the MUX state machine. The standard recommends waiting for some time for additional

At the egress interface, the VLAN ID is appended to the packet and transmitted out of the interface as a tagged packet with the dot1Q value preserved.

VLAN ID to be preserved (in the hardware or the OS application) when a VLAN ID used for encapsulation is associated with a physical/Port-channel inter

146

9InterfacesThis chapter describes the interfaces-related enhancements and contains the following sections:• Enabling the Management Address TLV on All

148

10IPv4 RoutingThis chapter describes the IPv4 routing-related enhancements and contains the following sections:• IPv4 Path MTU Discovery Overview• Con

service-class dot1p-mapping...392Z9000 S4810 S

Using the Configured Source IP Address in ICMP MessagesThis functionality to enable ICMP messages, such as ICMP unreachable or ICMP error messages, to

Traceroute works by sending packets with gradually increasing TTL value, starting with TTL value = 1. The first router receives the packet, decrements

Command ModesCONFIGURATIONCommand HistoryVersion 9.3.0.0 Introduced on the S4810, S4820T, S6000, Z9000, and MXL platforms.Usage InformationYou can ena

NOTE: When you configure the capability to enable the loopback IP address to be sent for easy debugging and diagnosis (IP addresses of the devices for

ExampleFTOS(conf)#ipv6 icmp source-interface tengigabitethernet 0/0FTOS(conf)#Configuring the Duration to Establish a TCP ConnectionThis procedure is

Usage InformationYou can configure the amount of time for which the device must wait before it attempts to establish a TCP connection. Using this capa

156

11Link Aggregation Groups (LAGs)This chapter describes the link aggregation control protocol (LACP) and link aggregation group (LAG) enhancements and

Optimizing Traffic Disruption Over LAG Interfaces On IOA Switches in VLT ModeWhen an Aggregator operates in VLT mode, the VLT LAG configurations are s

Enabling the Verification of Member Links Utilization in a LAG BundleTo examine the working efficiency of the LAG bundle interfaces, do the following1

33 Storm Control... 427Important Points to Remember.

Field DescriptionInterface Slot and port number, and the type of the member interface of the port channelLine Protocol Indicates whether the interface

Field DescriptionAlarm State Indicates whether an alarm is generated if overutilization of the port channel occurred. Possible values are Active and I

You can use this optimal, cohesive capability in your network environment to detect whether the configured applications or utilities are causing traff

alarms only when the utilization levels are high. At low utilization levels, it is possible that there are only one or two significant flows can cause

3. Specify the interval in seconds for higig link bundle monitoring.CONFIGURATION modeDell(conf)#hg-link-bundle-monitor rate-interval 10 4. Enable the

traps. Also, when the traffic is resumed to be handled in an equalized, proper manner, a notification using alarms and SNMP traps is generated.hg-link

Defaults The default hiGig stats polling interval is 15 seconds.Usage InformationThis interval cannot be configured per high-Gigabit port channel and

Field Descriptionport channel occurred. Possible values are Active and InactiveInterface Slot and port number, and the type of the member interface of

Z9000 Syntaxshow hardware stack-unit stack-unit {buffer unit {0–5} [port port-number]| cpu data-plane statistics | cpu i2c statistics | cpu party-bus

Related Commandsclear hardware system-flow — clears the statistics from selected hardware components.show interfaces stack-unit — displays information

Z-Series S4810 S4820T... 447lacp ungroup me

Viewing Buffer Utilization and Queue Statistics on High-Gigabit Ethernet Backplane PortsYou can view the buffer utilization and queue statistical coun

• show hardware stack-unit 0 buffer unit {0-5} port {1-41} queue all buffer-info—Supports backplane high-Gigabit port for switch fabric or spine units

172

12Miscellaneous SettingsThis chapter contains several, diversified behavioral-changes and enhancements that apply to this release.• Default Host Name

Parametersvalue (OPTIONAL) Enter the traffic value in kilobits per second. The default is 10 packets per second. A value of zero (0) causes a switchov

Defaults See ParametersCommand ModesCONFIGURATIONCommand HistoryVersion 9.3.(0.0)Introduced on S6000.Related Commandsshow bfd neighbors – displays the

Establishing Sessions for Static RoutesSessions are established for all neighbors that are the next hop of a static route.Figure 1. Establishing Sessi

• Disable BFD for static routes.CONFIGURATION modeno ip route bfdsource (port monitoring for 40-Gigabit Ethernet)Configure a port monitor source and d

178

13Microsoft Network Load BalancingThis functionality is supported on the S4810, S4820T, S6000, Z9000, and MXL platforms.Network Load Balancing (NLB) i

FC Flex IO Modules Overview... 477FC Flex IO Mo

With NLB, the data frame is forwarded to all the servers for them to perform load-balancing.NLB Multicast Mode ScenarioConsider a sample topology in w

• When a port is added to the VLAN, the port automatically receives traffic if the feature is enabled. Old ARP entries are not deleted or updated.• Wh

multicast-mac-addressEnter a 48-bit hexadecimal address in nn:nn:nn:nn:nn:nn format for the static MAC address to be used to switch multicast traffic.

Parametersmulticast-mac-addressEnter the 48-bit hexadecimal address in nn:nn:nn:nn:nn:nn format.multicast Enter a vlan port to where L2 multicast MAC

Example (Multicast)mac-address-table static 01:00:5E:01:00:01 {multicast vlan 2 output—range Te 0/2,Te 0/3}ip vlan-floodingEnable unicast data traffic

14Quality of Service (QoS)This chapter describes the QoS enhancements and contains the following sections:• Classifying Packets Based on a Combination

rate in pps, the peak burst size must also be configured as a measure of number of packets. Similarly, if you configure the peak rate in Kbps, the pea

such cases, you can use ECN in conjunction with WRED to resolve this problem of dropping of packets under congested conditions.Using ECN, instead of e

• When WRED is configured on the global service-pool (regardless of whether ECN on global service-pool is configured), and one or more queues have WRE

To configure the weight factor for WRED and ECN capabilities, global buffer pools for multiple queues, and associating a service class with ECN markin

priority-group bandwidth pfc...507priority-group qos

You can use the service-policy input policy-name layer 2 command in Interface Configuration mode to apply an input policy map to Layer 3 physical inte

2. Configure the threshold weight of the shared buffer for the queues you want. In this example, this setting is configured for queues 5 and 7. Dell(c

To create IP VLAN and DSCP values as match criteria in a Layer 3 class map, and to associate the class map with a policy map that is linked to a servi

committed-rate Define the committed rate, which is the guaranteed or minimum confirmed rate for the packets. Specify this value as a multiple of 64 if

Command ModesCONFIGURATIONCommand HistoryVersion 9.3.0.0 Added support for committed rate and committed burst size, and for configuration of rate limi

Default By default, buffer statistics tracking is disabled.Command ModesCONFIGURATION modeCommand HistoryVersion 9.3.0.0 Introduced on the S6000 platf

number Enter a weight for the queue on the shared buffer as a number in the range of 1 to 11.Default The default threshold weight on the shared buffe

wred weightConfigure the weight factor for computation of average-queue size. This weight value applies to front-end ports. This mechanism to configur

string] || [queue3 number/string] || [queue4 number/string] || [queue5 number/string] || [queue6 number/string] || [queue7 number/string]}{backplane}P

Dell(conf) #service-class wred weight queue0 11 queue6 4 queue7 9 backplaneservice-pool wredA global buffer pool that is a shared buffer pool accessed

Notes, Cautions, and WarningsNOTE: A NOTE indicates important information that helps you make better use of your computer.CAUTION: A CAUTION indicates

Configure a DCBx Operation... 544DCBx Operatio

Usage InformationYou can configure only service pools 0 and 1 because the Dell Networking OS uses only these two service pools. The pool, service0, is

Command ModesCONFIGURATION modeCommand HistoryVersion 9.3.0.0 Introduced on the S6000 and Z9000 platformsUsage InformationYou can add or remove ECN ma

separating the starting and ending queue numbers with a hyphenbackplane Specify that the ECN marking configured for each queue applies to backplane po

buffer unit <0–5>Enter the keyword buffer. To display the total buffer statistics for the stack unit, enter the keyword total-buffer. To display

show hardware stack-unit buffer-stats-snapshot View the buffer statistics tracking resource information without polling details and historical snapsho

When the buffer-stats-snapshot is disabled, an informational message is dispayed to this effect when you attempt to view the buffer statistics trackin

---------------------------------------------------------------------------------------------------------------PG# SHARED CELLS HEADROOM CELL

Command ModesEXECEXEC PrivilegeCommand HistoryVersion 9.3.0.0 Introduced on the S6000 platform.Usage InformationThe following information is displayed

208

15Management Port Media ConverterThe capability to configure management media port converter is supported on the S6000 platform.Starting with Dell Net

M I/O Aggregator and MXL 10/40GbE Switch with the FC Flex IO module...579show fcoe-map...

Working of the Management Port Media ConverterQSFP EEPROM content is accessed to detect this special media converter and based on this identification

00:00:40: %S6000:0 %IFAGT-5-INSERT_OPTICS_QSFP: Optics QSFP inserted in slot 0 port 3On Optic Removal:00:04:41: %S6000:0 %IFAGT-5-REMOVE_OPTICS_QSFP:

Online Insertion and Removal (OIR) of the Management OpticThe following table illustrates the system operations during various system states when the

CASE NOSpeed S6k T2 Bcm 54616s S50 RemarksAN SP FD HD AN SP FD HD AN SP FD HDSpeed/Duplex change in peer side:Autoneg ON both sides, with config chang

CASE NOSpeed S6k T2 Bcm 54616s S50 RemarksAN SP FD HD AN SP FD HD AN SP FD HDan=on side, as AN fail5.d 10M HDOff 10M ON - Off 10M off Y ON 10M Off YAu

16Security for M I/O AggregatorSecurity features are supported on the M I/O Aggregator.This chapter describes several ways to provide access security

Usage InformationBy default, the Enable password is used. If you configure aaa authentication enable default, FTOS uses the methods defined for Enable

Defaults Not configured (that is, no authentication is performed).Command ModesCONFIGURATIONCommand HistoryVersion 9.3.0.0 Introduced on the M I/O Agg

Command HistoryVersion 9.3.0.0 Introduced on the M I/O Aggregator.Related Commandsline — applies an authentication method list to the designated termi

This is the bannerFTOS con0 now availablePress RETURN to get started.4d21h6m: %RPM0-P:CP %SEC-5-LOGIN_SUCCESS: Login successful for user on lineconsol

22

<cr>FTOS(conf)#banner login keyboard-interactiveEnter TEXT message. End with the character '%'.This is the banner%FTOS(conf)#endFTOS#e

debug radiusView RADIUS transactions to assist with troubleshooting.Syntaxdebug radiusTo disable debugging of RADIUS, use the no debug radius command.

password Enter a text string, up to 32 characters long, as the clear text password.Defaults No password is configured. level = 15.Command ModesCONFIGU

ip radius source-interfaceSpecify an interface’s IP address as the source IP address for RADIUS connections.Syntaxip radius source-interface interface

• For a Gigabit Ethernet interface, enter the keyword GigabitEthernet then the slot/port information.• For Loopback interfaces, enter the keyword loop

Related Commandsaaa authentication login — selects the login authentication methods.motd-bannerEnable a message of the day (MOTD) banner to appear whe

Defaults noneCommand ModesCONFIGURATIONCommand HistoryVersion 9.3.0.0 Introduced on the M I/O Aggregator.Related Commandspassword — specifies a passwo

Usage InformationTo define a password for the level to which you are assigning privilege or access, use the enable password command.privilege level (L

radius-server hostConfigure a RADIUS server host.Syntaxradius-server host {hostname | ipv4-address | ipv6-address} [auth-port port-number] [retransmit

Usage InformationTo configure any number of RADIUS server hosts for each server host that is configured, use this command. FTOS searches for the RADIU

1About this DocumentThis document describes the new functionalities and enhancements in the Dell Networking OS Release version 9.3.0.0. All of the beh

Parametersseconds Enter the number of seconds between an unsuccessful attempt and the FTOS times out. The range is from zero (0) to 1000 seconds. The

show privilegeView your access level.Syntaxshow privilegeCommand Modes• EXEC• EXEC PrivilegeCommand HistoryVersion 9.3.0.0 Introduced on the M I/O Agg

timeout seconds(OPTIONAL) Enter the keyword timeout then the number of seconds the switch waits for a reply from the TACACS+ server. The range is from

Command HistoryVersion 9.3.0.0 Introduced on the M I/O Aggregator.Usage InformationThe key configured with this command must match the key configured

You can use the MOTD banner to indicate to users of critical upcoming events such as a lab shutdown of devices or of any circuit-level maintenance or

and password credentials cannot be verified. Only the console port behaves this way, and does so to ensure that users are not locked out of the system

Enabling AAA Authentication — RADIUSTo enable authentication from the RADIUS server, and use TACACS as a backup, use the following commands.1. Enable

• Access-Reject — the RADIUS server does not authenticate the user.If an error occurs in the transmission or reception of RADIUS packets, you can view

Auto-CommandYou can configure the system through the RADIUS server to automatically execute a command when you connect to a specific line.The auto-com

• Create a method list with RADIUS and TACACS+ as authorization methods.CONFIGURATION modeaaa authorization exec {method-list-name | default} radius t

x||y Keywords and parameters separated by a double bar allows you to choose any or all of the options.Related DocumentsFor more information about the

If you want to change an optional parameter setting for a specific host, use the radius-server host command. To change the global communication settin

TACACS+FTOS supports terminal access controller access control system (TACACS+ client, including support for login authentication.Configuration Task L

First bold line: Server key purposely changed to incorrect value.Second bold line: User authenticated using the secondary method.Example of a Failed A

When configuring a TACACS+ server host, you can set different communication parameters, such as the key password.Example of Specifying a TACACS+ Serve

Command AuthorizationThe AAA command authorization feature configures FTOS to send each configuration command to a TACACS server for authorization bef

show ip sshThe following example shows using the ip ssh server version 2 command to enable SSH version 2 and the show ip ssh command to confirm the se

• ip ssh rsa-authentication: add keys for the RSA authentication.• show crypto: display the public part of the SSH host-keys.• show ip ssh client-pub-

Hostbased Authentication : disabled.RSA Authentication : disabled.Using RSA Authentication of SSHThe following procedure authenticates an SSH cl

7. Bind shosts and rhosts to host-based authentication.CONFIGURATION modeip ssh pub-key-file flash://filename or ip ssh rhostsfile flash://filenameExa

In this case, verify that host-based authentication is set to “Yes” in the file ssh_config (root permission is required to edit this file): permission

2802.1X on the MXL 10/40GbE SwitchIn Dell Networking OS Release 9.3(0.0), the MXL 10/40GbE Switch supports 802.1X port authentication. 802.1X is a met

Configure local authentication globally and configure access classes on a per-user basis.FTOS can assign different access classes to different users b

VTY MAC-SA Filter SupportFTOS supports MAC access lists which permit or deny users based on their source MAC address.With this approach, you can imple

252

17Simple Network Management Protocol (SNMP)This chapter describes the SNMP enhancements and contains the following sections:• FIPS Compatibility Suppo

SHA authentication needs to be used with the AES-CFB128 privacy algorithm only when FIPS is enabled because SHA is then the only available authenticat

host and to send packets to the host. Minimum: eight characters long.aes128 (OPTIONAL) Enter the keyword aes128 to initiate the AES128-CFB encryption

256

18StackingThis chapter describes the stacking enhancements and contains the following sections:• Configuring the Uplink Speed of Interfaces as 40 Giga

Module Type Standalone 10G modeStandalone 40G ModeStacking 10G ModeStacking 40G modeVLT 10G ModeVLT 40G Mode(HiGig) (Native)Optional module (2 40GbE)1

iom-mode Denotes the operating mode of the I/O Aggregator.stack Specify that the uplink speed of the member interfaces in a LAG bundle applies for the

26

Usage InformationThe value under the Boot-speed field in the output of the show command indicates the uplink speed that is currently effective on the

Command ModesEXEC PrivilegeCommand HistoryVersion 9.3.0.0 Introduced on the M I/O AggregatorUsage InformationYou can renumber any switch, including th

262

19Virtual Link Trunking (VLT)This chapter describes the VLT enhancements and contains the following sections:• VLT Nodes as Rendezvous Points for Mult

• You can configure a VLT LAG or port channel to be in trunk, access, or promiscuous port modes when you include the VLT LAG in a PVLAN. The VLT LAG s

Whenever a change occurs in the VLAN mode of one of the peers, this modification in setting is synchronized with the other peers and depending on the

Table 10. VLAN Membership and MAC Synchrnoization With VLT Nodes in PVLANVLT LAG Mode PVLAN Mode of VLT VLAN ICL VLAN MembershipMac SynchronizationPee

VLT LAG Mode PVLAN Mode of VLT VLAN ICL VLAN MembershipMac SynchronizationPeer1 Peer2 Peer1 Peer2Trunk Access Primary/Normal Secondary No NoConfigurin

7. Enter the port-channel number that acts as the interconnect trunk.VLT DOMAIN CONFIGURATION modepeer-link port-channel id-numberThe range is from 1

8. Map secondary VLANs to the selected primary VLAN.INTERFACE VLAN modeprivate-vlan mapping secondary-vlan vlan-listThe list of secondary VLANs can be

3ACL VLAN Groups and Content Addressable Memory (CAM)This chapter describes the ACL VLAN group and CAM enhancements, and contains the following sectio

Proxy ARP Capability on VLT Peer NodesThe proxy ARP functionality on VLT peer nodes is supported on the S4810, S4820T, Z9000, I/O Aggregator, and MXL

hardware address in the ARP response contains the VLT peer MAC address. Proxy ARP is supported for both unicast and broadcast ARP requests. Control pa

You can configure VLT nodes that function as RP as Multicast Source Discovery Protocol (MSDP) peers in different domains. However, you cannot configur

20Documentation UpdatesBecause the entire hardware and software documentation set is not being published for Release 9.3.0.0, similar to the earlier m

applied on the egress interface, which must not cause the IGMP queries to be transmitted out of the interface.• The following note applies to the Conf

• The following note applies to the Marking Egress Packets with a DEI Value section of the S4810, S4820T, S6000, Z9000, and MXL Switch Configuration G

does not occur if there is no Ethernet traffic and only FCoE traffic is present, or if DCB remains disabled on the ToR switch.• The following note app

Configuring the Commands Without a Separate User Account for the PMUX Mode of the I/O AggregatorStarting with Dell Networking OS Release 9.3.0.0, you

278

21Data Center Bridging (DCB)Data center bridging (DCB) refers to a set of IEEE Ethernet enhancements that provide data centers with a single, robust,

the ACL VLAN groups present on the system, an appropriate error message is displayed. The ACL manager application processes the following parameters w

Parameters{ets-conf | ets-reco | pfc}Enter the PFC and ETS TLVs advertised, where:• ets-conf: enables the advertisement of ETS configuration TLVs.• et

Usage InformationBy default, equal bandwidth is assigned to each port queue and each dot1p priority in a priority group. To configure bandwidth amount

dcb-inputTo apply pause or flow control for specified priorities using a configure delay time, create a DCB input policy.Syntaxdcb-input policy-nameTo

Command ModesCONFIGURATIONCommand HistoryVersion 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.Usage InformationTo associate a priority gro

A DCB input policy for PFC applied to an interface may become invalid if you reconfigure the dot1p-queue mapping. This situation occurs when the new d

Parameterspolicy-name Enter the output policy name.Defaults noneCommand ModesINTERFACECommand HistoryVersion 9.2(0.0) Introduced on the M I/O Aggregat

Usage InformationThe dcb-policy output stack-unit all command overwrites any previous dcb-policy output stack-unit stack-unit-id configurations. Simil

dcb stack-unit pfc-buffering pfc-port-count pfc-queuesConfigure the PFC buffer for all port pipes in a specified stack unit by specifying the port-pip

Parametersconfig-source | auto-downstream | auto-upstream | manualEnter the DCBX port role, where:• config-source: configures the port to serve as the

Defaults AutoCommand ModesINTERFACE PROTOCOL LLDPCommand HistoryVersion 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Prog

counters, Open Flow, ACL optimization) can be allocated virtual flow processing slices at a point in time.• The maximum number of VLANs that you can c

descriptionEnter a text description of the DCB policy (PFC input or ETS output).Syntaxdescription textTo remove the text description, use the no descr

level and in an output policy map (the service-policy output command), the QoS configuration in the output policy takes precedence.Related Commands• d

Usage InformationThis command is available at the global level only.pfc link-delayConfigure the link delay used to pause specified priority traffic.Sy

PFC on all DCB egress ports or configure the dot1p priority-queue assignment of PFC priorities to lossless queues (refer to pfc no-drop queues).To dis

dot1p Value in the Incoming FrameDescription heading6 37 3pfc priorityConfigure the CoS traffic to be stopped for the specified delay.Syntaxpfc priori

Parametersgroup-name Enter the name of the ETS priority group. The maximum is 32 characters.Defaults noneCommand ModesCONFIGURATIONCommand HistoryVers

Command HistoryVersion 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only.Version 8.3.16.1 In

• set-pgid — configures the priority-group.qos-policy-output etsTo configure the ETS bandwidth allocation and scheduling for priority traffic, create

Defaults Weighted elastic round robin (WERR) scheduling is used to queue priority traffic.Command ModesPOLICY-MAP-OUT-ETSCommand HistoryVersion 9.2(0.

show dcbDisplays the data center bridging status, the number of PFC-enabled ports, and the number of PFC-enabled queues.Syntaxshow dcb [stack-unit uni

Contents1 About this Document...23Audience...

3. Apply an egress IP ACL to the ACL VLAN group.CONFIGURATION (conf-acl-vl-grp) modeip access-group {group name} out implicit-permit4. Add VLAN member

Field DescriptionInterface Interface type with chassis slot and port number.Port-Role Configured the DCBX port role: auto-upstream, auto-downstream, c

Field DescriptionPeer DCBX Status: DCBX Max Version SupportedHighest DCBX version supported in Control TLVs received from the peer device.Peer DCBX St

Protocol State: In-SyncPeer DCBX Status:---------------- DCBX Operational Version is 0 DCBX Max Version Supported is 255 Sequence Number: 2 Ackn

Field DescriptionAdmin Parameters ETS configuration on local port, including priority groups, assigned dot1p priorities, and bandwidth allocation.Remo

0 0,1,2,3,4,5,6,7 100% ETS1 0% ETS2 0% ETS3 0% ETS4

Priority# Bandwidth TSA0 13% ETS1 13% ETS2 13% ETS3

Command HistoryVersion 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only.Version 8.3.16.1 In

Field DescriptionApplication Priority TLV: FCOE TLV Tx StatusStatus of FCoE advertisements in application priority TLVs from the local DCBX port: enab

Local FCOE PriorityMap is 0x8 Local ISCSI PriorityMap is 0x10 Remote FCOE PriorityMap is 0x8 Remote ISCSI PriorityMap is 0x8Dell# show interfaces

6 0 0 07 0 0 0show qos dcb-inputDisplays the PFC configuration in a DCB input poli

4. View the number of flow processor (FP) blocks that is allocated for the different VLAN services.EXEC Privilege modeDell#show cam-usage switch Linec

show qos priority-groupsDisplays the ETS priority groups configured on the switch, including the 802.1p priority classes and ID of each group.Syntaxsh

0 0,1,2,3,4,5,6,7 100% ETS1 - -2 - -3 - -4 - -5

stack unit 1 stack-port all Admin mode is On Admin is enabled, Priority list is 4-5 Local is enabled, Priority list is 4-5 Link Delay 45556 pause

22FIP SnoopingIn a converged Ethernet network, an MXL Switch can operate as an intermediate Ethernet bridge to snoop on Fibre Channel over Ethernet in

port-type port/slotEnter the port-type and slot number of the FIP packet statistics to be cleared.port-channel-numberEnter the port channel number of

Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.Usage InformationThe maximum number of FCFs supported per FIP snooping-enabled VLAN i

316

23High Availability (HA)High availability (HA) in the Dell Networking operating software (FTOS) is configuration synchronization to minimize recovery

Version 7.6.1.0 Introduced on the E-Series.Usage InformationTo provide a hitless or warm upgrade, use this command. A hitless upgrade means that a sof

Field Description• Whether the link to the second RPM is up or down.PEER RPM Status Displays the state of the second RPM, if presentRPM Redundancy Con

The following sample output displays the CAM space utilization when Layer 2 and Layer 3 ACLs are configured:Dell#show cam-usage aclLinecard|Portpipe|

-- Stack-unit Redundancy Configuration --------------------------------------------------Primary Stack-unit: mgmt-id 0Auto Data Sync:

Runtime Event Log: succeeded Jul 13 2007 21:28:53Running Config: succeeded Jul 13 2007 21:28:53FTOS#High Availability (HA)321

322

24iSCSI OptimizationInternet small computer system interface (iSCSI) optimization enables quality-of-service (QoS) treatment for iSCSI storage traffic

Command HistoryVersion 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only.Version 8.3.16.1 In

iscsi enableGlobally enable iSCSI optimization.Syntaxiscsi enableTo disable iSCSI optimization, use the no iscsi enable command.Parametersenable Enter

Command ModesINTERFACECommand HistoryVersion 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode on

• iSCSI optimization requires configuring two ingress ACL groups The ACL groups are allocated after iSCSI Optimization is configured. (refer to When t

6. (Optional) Configure the iSCSI target ports and optionally the IP addresses on which iSCSI communication is monitored.CONFIGURATION mode[no] iscsi

10. (Optional) Configures the advertised priority bitmap in iSCSI application TLVs.LLDP CONFIGURATION mode[no] iscsi priority-bits.The default is 4 (0

• To allocate the number of FP blocks for VLAN iSCSI counters , use the cam-acl-vlan vlaniscsi <0-2> command.• To allocate the number of FP bloc

330

25InterfacesThe commands in this chapter are supported by Dell Networking operating software (Dell).This chapter contains the following sections:• Bas

vrrp [vrf instance](OPTIONAL) Enter the keyword vrrp to clear the counters of all VRRP groups. To clear the counters of VRRP groups in a specified VRF

Usage InformationImportant Points to Remember:• Spaces between characters are not preserved after entering this command unless you enclose the entire

The pause:• Starts when either the packet pointer or the buffer threshold is met (whichever is met first). When the discard threshold is met, packets

off on off off off on on off

Defaults Not configured.Command ModesCONFIGURATIONCommand HistoryVersion 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Pro

ExampleDell(conf)#interface managementethernet 0/0Dell(conf-if-ma-0/0)#Related Commandsmanagement route — configures a static route that points to the

Important Points to Remember:• Bulk configuration is created if at least one interface is valid.• Non-existing interfaces are excluded from the bulk c

Example (Multiple Range)This example shows how to use commas to add SONET, VLAN, and port-channel interfaces to the range.Dell(config-if)# interface r

ip access-groupApply an egress IP ACL to the ACL VLAN group.Syntaxip access-group {group name} out implicit-permit Parametersgroup-name Enter the name

show vlan — displays the current VLAN configuration on the switch.shutdown — disables/enables the VLAN.tagged — adds a Layer 2 interface to a VLAN as

Usage InformationIf the packet includes a Layer 2 header, the difference between the link MTU and IP MTU (ip mtu command) must be enough bytes to incl

Command ModesINTERFACECommand HistoryVersion 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode on

Input Statistics:...User InformationBoth sides of the link must have auto-negotiation enabled or disabled for the link to come up.The following detail

Command HistoryVersion 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only.Version 8.3.16.1 In

V - VLT taggedName: TenGigabitEthernet 3/20802.1QTagged: HybridVlan membership:Q VlansU 20T 10Native VlanId: 20.Dell(conf)#Example (uncon

Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.Usage InformationSplitting a 40G port into 4x10G port is supported on standalone and

Defaults Not configured.Command ModesINTERFACE PORTCHANNELCommand HistoryVersion 9.2(0.0) Introduced on the M I/O Aggregator. This command is supporte

interface port-channelCreate a Port Channel interface, which is a link aggregation group (LAG) containing 16 physical interfaces on the XML switch.Syn

minimum-linksConfigure the minimum number of links in a LAG (Port Channel) that must be in “oper up” status for the LAG to be also in “oper up” status

Usage InformationWhen an ACL-VLAN-Group name or the Access List Group Name contains more than 30 characters, the name is truncated in the show acl-vla

350

26Internet Group Management Protocol (IGMP)The IGMP commands are supported by the Dell Networking operating software (FTOS) on the Z9000 S4810 S4820T

Command HistoryThis guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line R

Version 7.8.1.0 Introduced on the S-Series.Version 7.7.1.0 Introduced on the C-Series.E-Series legacy commandip igmp querier-timeoutChange the interva

ip igmp query-intervalChange the transmission frequency of IGMP general queries the Querier sends.Z9000 S4810 S4820TS6000Syntaxip igmp query-interval

To return to the default values, use the no ip igmp query-max-resp-time command.Parametersseconds Enter the number of seconds for the maximum response

Command ModesINTERFACECommand HistoryThis guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networ

• When enabled, IGMP snooping Querier does not start if there is a statically configured multicast router interface in the VLAN.• When enabled, IGMP s

NOTE: Execute the no shutdown command on the VLAN interface for IGMP Snooping to function.Related Commandsshutdown — (no shutdown) activates an interf

ip igmp snooping last-member-query-intervalThe last member query interval is the maximum response time inserted into Group-Specific queries sent in re

Dell#show cam-acl-vlanDisplay the number of flow processor (FP) blocks that is allocated for the different VLAN services.Syntaxshow cam-acl-vlanComman

Parametersinterface interfaceEnter the following keywords and slot/port or number information:• For a 100/1000 Ethernet interface, enter the keyword g

ip igmp snooping querierEnable IGMP querier processing for the VLAN interface.Z9000 S4810 S4820TS6000Syntaxip igmp snooping querierTo disable IGMP que

362

27Layer 2This chapter describes commands to configure Layer 2 features.This chapter contains the following sections:• MAC Addressing Commands• Virtual

mac-address-table staticAssociate specific MAC or hardware addresses to an interface and virtual local area networks (VLANs).Syntaxmac-address-table s

Command HistoryVersion 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only.Version 8.3.16.1 In

366

28Link Aggregation Control Protocol (LACP)This chapter contains commands for Dell Networks’s implementation of the link aggregation control protocol (

Defaults 32768Command ModesINTERFACECommand HistoryVersion 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux

Mode Functionpassive An interface is not in an active negotiating state in this mode. LACP runs on any link configured in the passive state. Ports in

VlanOpenFlow : 0VlanIscsi : 2VlanHp : 1VlanFcoe : 1VlanAclOpt : 0-- Stack unit 0 -- Cur

• Configuring the Minimum Oper Up Links in a Port Channel (optional)• Adding or Removing a Port Channel from a VLAN (optional)• Assigning an IP Addres

To view the interface’s configuration, enter INTERFACE mode for that interface and use the show config command or from EXEC Privilege mode, use the sh

Output 81.60Mbits/sec, 133658 packets/secTime since last interface status change: 04:31:57FTOS>When more than one interface is added to a Layer 2

no ip address channel-member GigabitEthernet 1/8 no shutdownFTOS(conf-if-portch)#no chann gi 1/8FTOS(conf-if-portch)#int port 5FTOS(conf-if-portch

no untagged port-channel id number• Identify which port channels are members of VLANs.EXEC Privilege modeshow vlanConfiguring VLAN Tags for Member Int

29Link Layer Discovery Protocol (LLDP)Link layer discovery protocol (LLDP) advertises connectivity and management from the local station to the adjace

Related Commandsprotocol lldp (Configuration) — enables LLDP globally.debug lldp interface — debugs LLDP.show lldp neighbors — displays the LLDP neigh

Command ModesCONFIGURATION (conf-lldp)Command HistoryVersion 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mu

Defaults noneCommand ModesEXEC PrivilegeCommand HistoryVersion 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-

Defaults noneCommand ModesEXEC PrivilegeCommand HistoryVersion 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-

show cam-usageView the amount of CAM space available, used, and remaining in each partition (including IPv4Flow and Layer 2 ACL sub-partitions).Syntax

Command HistoryVersion 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only.Version 8.3.16.1 In

Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.Configure LLDPConfiguring LLDP is a two-step process.1. Enable LLDP globally.2. Adver

multiplier LLDP multiplier configurationno Negate a command or set its defaultsshow Show LLDP configurationR1(conf-lld

Enabling LLDP on Management PortsLLDP on management ports is enabled by default.To enable LLDP on management ports, use the following command.1. Enter

To advertise TLVs, use the following commands.1. Enter LLDP mode.CONFIGURATION or INTERFACE modeprotocol lldp2. Advertise one or more TLVs.PROTOCOL LL

Viewing the LLDP ConfigurationTo view the LLDP configuration, use the following command.• Display the LLDP configuration.CONFIGURATION or INTERFACE mo

Example of Viewing Details Advertised by NeighborsR1#show lldp neighbors detail=======================================================================

R1(conf-lldp)#show config!protocol lldp advertise dot1-tlv port-protocol-vlan-id port-vlan-id advertise dot3-tlv max-frame-size advertise managemen

!protocol lldp advertise dot1-tlv port-protocol-vlan-id port-vlan-id advertise dot3-tlv max-frame-size advertise management-tlv system-capabilities

30Quality of Service (QoS)The Dell Networking operating software (FTOS) commands for quality of service (QoS) include traffic conditioning and congest

Example 1: Output of the show cam-usage CommandDell#show cam-usageLinecard|Portpipe| CAM Partition | Total CAM | Used CAM |Available CAM=======

Command HistoryVersion 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only.Version 8.3.16.1 In

To return to the default setting, use the no service-class dynamic dot1p command.Defaults All dot1p traffic is mapped to Queue 0 unless you enable the

service-class dot1p-mappingConfigure a service-class criterion based on a dot1p value.Z9000 S4810 S4820TSyntaxservice-class dot1p-mapping {dot1p0 valu

Parametersnumber Enter the bandwidth-weight, as a percentage. The value must be a power of 2. The range is from 1 to 100.Defaults noneCommand ModesCON

Command HistoryVersion 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only.Version 8.3.16.1 In

descriptionAdd a description to the selected policy map or QoS policy.Syntaxdescription {description}To remove the description, use the no description

Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.Usage InformationAggregate input/output QoS policy applies to all the port ingoing/ou

qos-policy-outputCreate a QoS output policy.Syntaxqos-policy-output qos-policy-nameTo remove an existing output QoS policy, use the no qos-policy-outp

burst-KB (OPTIONAL) Enter the burst size in KB. The range is from 16 to 200000. The default is 100.peak peak-rate (OPTIONAL) Enter the keyword peak th

Related Commandsrate shape — shapes traffic output as part of the designated policy.service-policy outputApply an output policy map to the selected in

deny (for Standard MAC ACLs)...57deny (for Ex

| | OUT-L3 ACL | 1024 | 0 | 1024Example 3: Output of the show cam-usage router CommandDell#show cam-usage r

NOTE: This option is available under policy-map-input only.qos-policy qos-policy-name(OPTIONAL) Enter the keywords qos-policy then the QoS policy name

show qos policy-mapView the QoS policy map information.Syntaxshow qos policy-map {summary [interface] | detail [interface]}Parameterssummary interface

Example (Summary IPv4)Dell#sho qos policy-map summaryInterface policy-map-input policy-map-outputGi 4/1 PM1 -Gi 4/2 PM2

Command HistoryVersion 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.ExampleDell#show qos qos-policy-outputDell#show qos qos-policy-outputQ

Usage InformationThe following describes the show qos statistics command in the following example.Field (ED and EE) DescriptionQueue # Queue NumberMat

ExampleDell#show qos wred-profileWred-profile-name min-threshold max-thresholdwred_drop 0 0wred_ge_y 1024 2048wre

wred-profileCreate a WRED profile and name the profile.Syntaxwred-profile wred-profile-nameTo remove an existing WRED profile, use the no wred-profile

31reload-typeConfigure a switch to reload as a DHCP client in BMP mode with all ports configured for Layer 3 traffic or in Normal mode.Z9000 S4810 S48

retry-count numberConfigure the number of times to retry loading the FTOS image and configuration download. The retry limit is 0–6. If the retry limit

mode, enter the stop bmp command. The startup configuration is then loaded from the local flash on the switch.To toggle between Normal and BMP Auto Co

show running config acl-vlan-groupDisplay the running configuration of all or a given ACL VLAN group.Syntaxshow running config acl-vlan-group group na

410

32Simple Network Management Protocol (SNMP) and SyslogThis chapter contains commands to configure and monitor the simple network management protocol (

To disable traps, use the no snmp-server enable traps [notification-type] [notification-option] command.Parametersnotification-typeEnter the type of n

Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only.Version 9.1(0.0) Added support for

NOTE: The :: notation specifies successive hexadecimal fields of zero.traps (OPTIONAL) Enter the keyword traps to send trap notifications to the speci

• vrrp — State change in a VRRP group.• xstp — State change in MSTP (802.1s), RSTP (802.1w), and PVST+.The default is all trap types are sent to host.

snmp-server enable command and the snmp-server host command for that host must be enabled.NOTE: For v1 / v2c trap configuration, if the community-stri

Version 7.5.1.0 Introduced on the C-Series.E-Series legacy commandRelated Commandsshow logging — displays logging settings and system messages in the

Usage InformationMultiple logging servers of both IPv4 and/or IPv6 can be configured.Related Commandslogging on — enables the logging asynchronously t

E-Series legacy commandUsage InformationWhen you decrease the buffer size, all messages stored in the buffer are lost. Increasing the buffer size does

Default No default behavior or valuesCommand ModesCONFIGURATIONCommand HistoryVersion 9.3.0.0 Introduced on the S4810, S4820T, Z9000, I/O Aggregator,

Related Commandsclear logging — clears the logging buffer.default logging console — returns the logging console parameters to the default setting.show

logging source-interfaceSpecify that the IP address of an interface is the source IP address of Syslog packets sent to the Syslog server.Z9000 S4810 S

E-Series legacy commandUsage InformationSyslog messages contain the IP address of the interface used to egress the router. By configuring the logging

E-Series legacy commandExample (Partial)FTOS#show loggingSyslog logging: enabled Console logging: level debugging Monitor logging: level debuggi

show logging driverlog stack-unitDisplay the driver log for the specified stack member.S4810 S4820T Z9000Syntaxshow logging driverlog stack-unit unit#

Command HistoryThis guide is platform-specific. For command information about other platforms, refer to the relevant FTOS Command Line Reference Guide

426

33Storm ControlThe Dell Networking operating software (FTOS) storm control feature allows you to limit or suppress traffic during a traffic storm (Bro

• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/ port information.Defaults noneCommand Modes• EXEC• EXEC PrivilegeCom

wred-profile nameEnter the keyword wred-profile followed by the profile name to designate a wred-profile.packets_per_second inEnter the packets per se

Examples The following sample output shows the line-by-line style display when using the show acl-vlan-group detail option. Note that no group or acce

Command ModesCONFIGURATION (conf)Command HistoryThis guide is platform-specific. For command information about other platforms, refer to the relevant

Version 8.3.19.0Introduced on the S4820T.Version 8.3.11.1 Introduced on the Z9000.Version 8.3.7.0 Introduced on the S4810.Version 7.6.1.0 Introduced o

432

34Uplink Failure Detection (UFD)Uplink failure detection (UFD) provides detection of the loss of upstream connectivity and, if you use this with NIC t

Command HistoryThis guide is platform-specific. For command information about other platforms, refer to the relevant FTOS Command Line Reference Guide

Version 8.3.12.0Introduced on the S4810.Version 8.4.2.3 Introduced on the S-Series S50.Related Commandsclear ufd-disable — re-enables downstream inter

downstreamAssign a port or port-channel to the uplink-state group as a downstream interface.S4810 S4820TSyntaxdownstream interfaceTo delete an uplink-

You can assign an interface to only one uplink-state group. Configure each interface assigned to an uplink-state group as either an upstream or downst

downstream disable linksConfigure the number of downstream links in the uplink-state group that are disabled if one upstream link in an uplink-state g

enableEnable uplink state group tracking for a specific UFD group.S4810 S4820TSyntaxenableTo disable upstream-link tracking without deleting the uplin

44

• EXEC PrivilegeCommand HistoryThis guide is platform-specific. For command information about other platforms, refer to the relevant FTOS Command Line

Command Modes• EXEC• EXEC PrivilegeCommand HistoryThis guide is platform-specific. For command information about other platforms, refer to the relevan

Related Commands• show running-config uplink-state-group — displays the current configuration of one or more uplink-state groups.• uplink-state-group

ExampleFTOS(conf)#uplink-state-group 16FTOS(conf)#02:23:17: %RPM0-P:CP %IFMGR-5-ASTATE_UP: Changed uplink state group Admin state to up: Group 16Relat

Version 8.3.19.0Introduced on the S4820T.Version 8.3.12.0Introduced on the S4810.Version 8.4.2.3 Introduced on the S-Series S50.Usage InformationYou c

35Virtual Link Trunking (VLT)Virtual link trunking (VLT) is supported on the Z-Series S4810S4820T platform.VLT allows physical links between two chass

interval secondsEnter the keyword interval to specify the time interval to send hello messages. The range is from 1 to 5 seconds. The default is 1 sec

Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only.Version 9.2(0.2) Added multicast a

Version 8.3.19.0Introduced on the S8420T.Version 8.3.12.0Introduced on the S4810.Usage InformationTo delay the system from bringing up the VLT port fo

Usage InformationLACP on the VLT ports (on a VLT switch or access device), which are members of the virtual link trunk, is not brought up until the VL

4Access Control ListsThis chapter describes the access control list (ACL) enhancements and contains the following sections:• Logging of ACL ProcessesL

Version 9.0.0.0 Introduced on the Z9000.Version 8.3.19.0Introduced on the S4820T.Version 8.3.12.0Added support for the peer-down-vlan parameter.Versio

show vlt mismatchDisplay mismatches in VLT parameters.Z9000 S4810 S4820TS6000Syntaxshow vlt mismatchCommand ModesEXECCommand HistoryThis guide is plat

Parametersmac-address Enter the system MAC address for the VLT domain.Defaults Not configured.Command ModesVLT DOMAINCommand HistoryThis guide is plat

Version 9.0.0.0 Introduced on the Z9000.Version 8.3.19.0Introduced on the S4820T.Version 8.3.8.0 Introduced on the S4810.Usage InformationWhen you cre

vlt-peer-lag port-channelAssociate the port channel to the corresponding port channel in the VLT peer for the VLT connection to an attached device.Z-S

• Provides fast convergence if either the link or a device fails.• Optimized forwarding with virtual router redundancy protocol (VRRP).• Provides link

aggregation are in Active-Active Load Sharing mode. This example provides the highest form of resiliency, scaling, and load balancing in data center s

• VLT domain — This domain includes both the VLT peer devices, VLT interconnect, and all of the port channels in the VLT connected to the attached dev

• Bulk Sync happens only for Global IPv6 Neighbors; Link-local neighbor entries are not synced.• If all of the following conditions are true, MAC addr

– Port-channel link aggregation (LAG) across the ports in the VLT interconnect is required; individual ports are not supported. Dell Networking strong

The ACL application sends the ACL logging configuration information and other details, such as the action, sequence number, and the ACL parameters tha

properties to identify connectivity to a common client device and automatically generates a VLT number for port channels on VLT peers that connects to

• VLT and VRRP interoperability– In a VLT domain, VRRP interoperates with virtual link trunks that carry traffic to and from access devices (refer to

traffic assumes the role of the Primary Peer. If the original Primary Peer is restored, the VLT peer reassigned as the Primary Peer retains this role

VLT Port Delayed RestorationWith FTOS version 8.3.12.0 8.3.12.0 8.3.19.0, when a VLT node boots up, if the VLT ports have been previously saved in the

Figure 5. PIM-Sparse Mode Support on VLTOn each VLAN where the VLT peer nodes act as the first hop or last hop routers, one of the VLT peer nodes is e

To route traffic to and from the multicast source and receiver, enable PIM on the L3 side connected to the PIM router using the ip pim sparse-mode com

• L3 routing is enabled on any VLAN with an admin state of up.NOTE: If the CAM is full, do not enable peer-routing.Configuring VLT UnicastTo enable an

• When using factory default settings on a new switch deployed as a VLT node, packet loss may occur due to the requirement that all ports must be open

• Display the VLT peer status, role of the local VLT switch, VLT system MAC address and system priority, and the MAC address and priority of the local

Domain ID: 1000 Role: Secondary Role Priority: 32768 ICL Link Status:

• A timer control of 30 seconds is present in the ACL agent module, the expiry of which causes the log records that are collocted until that time are

System Role Priority: 32768Local System MAC address: 00:01:e8:8a:df:e6Local System Role Priority: 32768Example of the show running-config vlt

Executing IEEE compatible Spanning Tree ProtocolRoot ID Priority 0, Address 0001.e88a.dff8Root Bridge hello time 2, max age 20, forward delay 15Bridge

IsolatedQ: U - Untagged, T - Tagged x - Dot1x untagged, X - Dot1x tagged G - GVRP tagged, M - Vlan-stack, H - Hyperpull tagged NUM Status Descri

interface Port-channel 11no ip addressswitchportchannel-member fortyGigE 1/18,22no shutdownTroubleshooting VLTTo help troubleshoot different VLT issue

Description Behavior at Peer Up Behavior During Run TimeAction to TakeSystem MAC mismatch A syslog error message and an SNMP trap are generated.A sysl

FC Flex IO ModulesThis part provides a generic, broad-level description of the operations, capabilities, and configuration commands of the Fiber Chann

476

36Understanding and Working of the FC Flex IO ModulesThis chapter provides a generic, broad-level description of the operations and functionality of t

In a typical Fibre Channel storage network topology, separate network interface cards (NICs) and host bus adapters (HBAs) on each server (two each for

• A distance of up to 300 meters is supported at 8 Gbps for Fibre Channel traffic.• Multiple domains are supported in an NPIV proxy gateway (NPG).• Yo

deny (for Standard IP ACLs)To drop packets with a certain IP address, configure a filter.NOTE: Only the options that have been newly introduced are de

• When the Dell Networking OS sends FC frames (the initial FLOGI or FLOGO messages), or converts FLOGI to FDISC messages or processes any internally g

Installing the OpticsThe following optical ports are supported on the FC Flex IO module using one of the supported breakout cables:• 4G or 8G Fibre Ch

If FC Flex IO modules are installed, the I/O Aggregator does not perform FIP snooping because the FIP frames are terminated on the switch for NPIV ope

Installing and Configuring Flowchart for FC Flex IO ModulesUnderstanding and Working of the FC Flex IO Modules483

To see if a switch is running the latest Dell Networking OS version, use the show version command. To download a Dell Networking OS version, go to htt

Interconnectivity of FC Flex IO Modules with Cisco MDS SwitchesIn a network topology that contains Cisco MDS switches, FC Flex IO modules that are plu

Figure 6. Case 1: Deployment Scenario of Configuring FC Flex IO ModulesFigure 7. Case 2: Deployment Scenario of Configuring FC Flex IO Modules486Under

37Data Center Bridging (DCB) for FC Flex IO ModulesData center bridging (DCB) refers to a set of IEEE Ethernet enhancements that provide data centers

You must not modify the service-class dot1p mappings when any buffer-threshold-policy is configured on the system.S4810-1(conf)#service-class dot1p-ma

To remove a DCB map from an interface, enter the no dcb-map map-name command in Interface configuration mode.Related Commandsshow qos dcb-map– display

and extended MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are

Using the priority-pgid command, you assign each 802.1p priority to one priority group. A priority group consists of 802.1p priority values that are g

Command HistoryVersion 9.3.0.0 Introduced on the S4810 and S6000 platforms.Version 9.3.0.0 Introduced on the FC Flex IO module installed in the M I/O

Command ModesCONFIGURATIONCommand HistoryVersion 9.3.0.0 Introduced on the S4810 and S6000 platforms.Version 9.3.0.0 Introduced on the FC Flex IO modu

Field DescriptionTSA Transmission scheduling algorithm used by the priority group: Enhanced Transmission Selection (ETS).BW Percentage of bandwidth al

advertise dcbx-appln-tlvOn a DCBX port with a manual role, configure the application priority TLVs advertised on the interface to DCBX peers.Syntaxadv

Command HistoryVersion 9.3.0.0 Introduced on the FC Flex IO module installed in the M I/O Aggregator and MXL 10/40GbE SwitchUsage InformationYou can c

Configure DCBX operation at the INTERFACE level on a switch or globally on the switch. To verify the DCBX configuration on a port, use the show interf

Parameters{all | auto-detect-timer | config-exchng | fail | mgmt | resource | sem | tlv}Enter the type of debugging, where:• all: enables all DCBX deb

iscsi priority-bitsConfigure the iSCSI priority advertised for the iSCSI protocol in application priority TLVs.Syntaxiscsi priority-bits priority-bitm

Field DescriptionDCBX Operational StatusOperational status (enabled or disabled) used to elect a configuration source and internally propagate a DCB c

PFC Configuration Notes... 91PFC Prerequisi

Usage InformationWhen the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured

Field DescriptionPeer DCBX Status: Sequence NumberSequence number transmitted in Control TLVs received from the peer device.Peer DCBX Status: Acknowle

DCBX Max Version Supported is 255 Sequence Number: 2 Acknowledgment Number: 2 Total DCBX Frames transmitted 27 Total DCBX Frames received 6 Tot

equally distributed to nonstrict-priority groups which have no configured scheduler.Related Commands• qos-policy-output ets — creates a QoS output pol

To display the PFC and ETS settings in DCB maps, enter the show qos dcb-map command.Use the dcb-map command to create a DCB map to specify PFC and ETS

dcb-policy outputApply the output policy with the ETS configuration to an egress interface.Syntaxdcb-policy output policy-nameTo delete the output pol

Command HistoryVersion 9.3.0.0 Introduced on the FC Flex IO module installed in the M I/O Aggregator and MXL 10/40GbE SwitchUsage InformationThe dcb-p

Defaults ETS mode is on.Command ModesDCB OUTPUT POLICYCommand HistoryVersion 9.3.0.0 Introduced on the FC Flex IO module installed in the M I/O Aggreg

Related Commands• priority-list — configures the 802.1p priorities for an ETS output policy.• set-pgid — configures the priority-group.priority-group

If a priority group does not use its allocated bandwidth, the unused bandwidth is made available to other priority groups.To remove a priority-group c

priority-listConfigure the 802.1p priorities for the traffic on which you want to apply an ETS output policy.Syntaxpriority-list valueTo remove the pr

Command HistoryVersion 9.3.0.0 Added support for logging of ACLs on the S4810, S4820T, Z9000, M I/O Aggregator and MXL 10/40GbE Switch IO Module platf

Usage InformationIf an error occurs in an ETS output-policy configuration, the configuration is ignored and the scheduler and bandwidth allocation set

• bandwidth-percentage — bandwidth percentage allocated to priority traffic in port queues.set-pgidConfigure the priority-group identifier.Syntaxset-p

Field DescriptionInterface Interface type with stack-unit and port number.Max Supported TC GroupMaximum number of priority groups supported.Number of

Field DescriptionError Conf TLV pktsNumber of ETS Error Configuration TLVs received.Input Reco TLV pktsNumber of ETS Recommendation TLVs received.Outp

5 12% ETS6 12% ETS7 12% ETSOper status is initConf TLV Tx Status i

0 Input Conf TLV Pkts, 0 Output Conf TLV Pkts, 0 Error Conf TLV Pkts0 Input Traffic Class TLV Pkts, 0 Output Traffic Class TLV Pkts, 0 Error Traffic C

show stack-unit stack-ports ets detailsDisplays the ETS configuration applied to egress traffic on stacked ports, including ETS Operational mode on ea

7 - -8 - -PFC CommandsThe following PFC commands are supported on the FC Flex IO module in

port-set Enter the port-set identification. The only valid port-set ID (port-pipe number) on an MXL Switch is 0.pfc-ports {1-56}Enter the pfc-ports. T

PFC on all DCB egress ports or configure the dot1p priority-queue assignment of PFC priorities to lossless queues (refer to pfc no-drop queues).To rem

interval minutes(OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. You can enter an int

Related Commandsdcb-input — creates a DCB input policy.dcb-policy input stack-unit stack-ports allApply the specified DCB input policy on all ports of

Command HistoryVersion 9.3.0.0 Introduced on the FC Flex IO module installed in the M I/O Aggregator and MXL 10/40GbE SwitchRelated Commands• dcb-inpu

Usage InformationBy applying a DCB input policy with PFC enabled, you enable PFC operation on ingress port traffic. To achieve complete lossless handl

dot1p Value in the Incoming FrameDescription heading6 37 3pfc priorityConfigure the CoS traffic to be stopped for the specified delay.Syntaxpfc priori

Command ModesEXEC PrivilegeCommand HistoryVersion 9.3.0.0 Introduced on the FC Flex IO module installed in the M I/O Aggregator and MXL 10/40GbE Switc

Field DescriptionWilling Status is enabledDCBX exchange (Willing bit received in PFC TLV): enabled or disable.Local is enabled DCBX operational status

Field DescriptionPFC TLV Statistics: Input TLV pktsNumber of PFC TLVs received.PFC TLV Statistics: Output TLV pktsNumber of PFC TLVs transmitted.PFC T

show interface pfc statisticsDisplays counters for the PFC frames received and transmitted (by dot1p priority class) on an interface.Syntaxshow interf

show stack-unit stack-ports pfc detailsDisplays the PFC configuration applied to ingress traffic on stacked ports, including PFC Operational mode on e

38Data Center Bridging (DCB)Data center bridging (DCB) is supported on the S4810 S4820T platform.NOTE: DCB is not supported when you use 10GBaseT port

Parameterslog (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.threshold-in msgs count(OPTIONAL) Enter the threshold-in-m

bytes that cannot recover from frame loss. To successfully transport storage traffic, data center Ethernet must provide no-drop service with lossless

• PFC supports buffering to receive data that continues to arrive on an interface while the remote system reacts to the PFC operation.• PFC uses DCB M

Table 12. ETS Traffic GroupingsTraffic Groupings DescriptionPriority group A group of 802.1p priorities used for bandwidth allocation and queue schedu

Configuring DCB Maps and its AttributesThis topic contains the following sections that describe how to configure a DCB map, apply the configured DCB m

DCB map is applied. By default, PFC is not applied on specific 802.1p priorities; ETS assigns equal bandwidth to each 802.1p priority.As a result, PFC

Step Task Command Command ModeMaximum number of loss less queues supported on an Ethernet port: 2.Separate priority values with a comma. Specify a pri

Step Task Command Command Modealready configured for PFC using the pfc priority command.Range: 0-3. Separate queue values with a comma; specify a prio

NOTE: DCB maps are supported only on physical Ethernet interfaces.When you configure PFC in a DCB map:• As soon as you apply a DCB map with PFC enable

• You cannot enable PFC and link-level flow control at the same time on an interface.ETS Configuration NotesETS provides a way to optimize bandwidth a

The following prerequisites and restrictions apply when you configure ETS bandwidth allocation or strict-priority queuing in a DCB map:• When allocati

To remove this filter, you have two choices:• Use the no seq sequence-number command if you know the filter’s sequence number.• Use the no deny arp {d

• Configuration of a peer device over a DCB link.DCBx requires the link layer discovery protocol (LLDP) to provide the path to exchange DCB parameters

For DCB to operate effectively, you can classify ingress traffic according to its dot1p priority so that it maps to different data queues. The dot1p-q

dot1p Value in the Incoming FrameEgress Queue Assignment1 02 03 14 25 36 37 3Configure Enhanced Transmission SelectionETS provides a way to optimize b

• ETS operates with legacy DCBx versions as follows:– In the CEE version, the priority group/traffic class group (TCG) ID 15 represents a non-ETS prio

6. Apply the QoS output policy with the bandwidth percentage for specified priority queues to an egress interface.INTERFACE modeservice-policy output

(besides the configuration source) receives and overwrites its configuration with internally propagated information, one of the following actions is t

configured ports, the configuration of DCBx ports in Manual mode is saved in the running configuration.On a DCBx port in a manual role, all PFC, appli

keeps the peer link up and continues to exchange DCBx packets. If a compatible peer configuration is later received, DCBx is enabled on the port.• If

configured version, including fast and slow transmit timers and message formats. If a DCBx frame with a different version is received, a syslog messag

• The CIN version of DCBx supports only PFC, ETS, and FCOE; it does not support iSCSI, backward congestion management (BCN), logical link down (LLDF),

Syntaxdeny icmp {source mask | any | host ip-address} {destination mask | any | host ip-address} [dscp] [message-type] [count [byte]] [order] [fragmen

5. On manual ports only: Configure the PFC and ETS TLVs advertised to DCBx peers.PROTOCOL LLDP mode[no] advertise DCBx-tlv {ets-conf | ets-reco | pfc}

3. Configure the DCBx version used on all interfaces not already configured to exchange DCB information.PROTOCL LLDP mode[no] DCBx version {auto | cee

7. Configure the iSCSI priority advertised for the iSCSI protocol in Application Priority TLVs.PROTOCOL LLDP mode[no] iscsi priority-bits priority-bit

Verifying the DCB ConfigurationTo display DCB configurations, use the following show commands.Table 13. Displaying DCB ConfigurationsCommand Outputsho

Example of the show dot1p-queue mapping CommandFTOS(conf)# show dot1p-queue-mappingDot1p Priority: 0 1 2 3 4 5 6 7Queue : 0 0 0 1 2 3 3 3Examp

Admin is enabled Remote is enabled Remote Willing Status is enabled Local is enabled Oper status is recommended PFC DCBx Oper statu

Fields DescriptionPFC DCBx Oper status Operational status for exchange of PFC configuration on local port: match (up) or mismatch (down).State Machine

5 0 06 0 07 0 0Example of the show interface ets summary CommandFTOS(conf-q

0 0,1,2,3,4,5,6,7 100% ETS1 0% ETS2 0% ETS3 0% ETS4 0% ETS5 0% ETS6 0% ETS7 0% ETSPriority# Bandwidth TSA0 13% ETS1 13% ETS2 13% ETS3 13% ETS4 12% ETS

4 0% ETS5 0% ETS6 0% ETS7

deny ether-type (for Extended MAC ACLs)Configure an egress filter that drops specified types of Ethernet packets on egress ACL supported line cards. (

Field DescriptionDCBx TLV from a peer can take effect on an interface.Admin Parameters ETS configuration on local port, including priority groups, ass

Link Delay 45556 pause quantum 0 Pause Tx pkts, 0 Pause Rx pktsstack unit 1 stack-port all Admin mode is On Admin is enabled, Priority li

----------Interface TenGigabitEthernet 2/12 Remote Mac Address 00:01:e8:8a:df:a0 Port Role is Manual DCBx Operational Status is Enabled Is Confi

Table 16. show interface DCBx detail Command DescriptionField DescriptionInterface Interface type with chassis slot and port number.Port-Role Configur

Field DescriptionTotal DCBx Frames received Number of DCBx frames received from remote peer port.Total DCBx Frame errors Number of DCBx frames with er

Figure 12. PFC and ETS Applied to LAN, IPC, and SAN Priority TrafficQoS Traffic Classification: The service-class dynamic dot1p command has been used

dot1p Value in the Incoming FramePriority Group Assignment4 IPC5 LAN6 LAN7 LANThe following describes the priority group-bandwidth assignment.Priority

FTOS(conf-qos-policy-out)# bandwidth-percentage 5FTOS(conf-qos-policy-out)# exitExample of Configuring a DCB Output Policy to Apply ETS (Bandwidth All

In this example, the configured ETS bandwidth allocation and scheduler behavior is as follows:Unused bandwidth usage:Normally, if there is no traffic

39Fibre Channel over Ethernet for FC Flex IO ModulesFCoE provides a converged Ethernet network that allows the combination of storage-area network (SA

applied to ingress interfaces; you cannot enable logging for ACLs that are associated with egress interfaces.deny (for Standard MAC ACLs)To drop packe

570

40NPIV Proxy Gateway for FC Flex IO ModulesThe N-port identifier virtualization (NPIV) Proxy Gateway (NPG) feature provides FCoE-FC bridging capabilit

To remove a DCB map from an interface, enter the no dcb-map map-name command in Interface configuration mode.Related Commandsshow qos dcb-map– display

Command ModesINTERFACE FIBRE_CHANNELCommand HistoryVersion 9.3.0.0 Introduced on the M I/O Aggregator and MXL 10/40GbE Switch with the FC Flex IO modu

Defaults NoneCommand ModesFCOE MAPCommand HistoryVersion 9.3.0.0 Introduced on the M I/O Aggregator and MXL 10/40GbE Switch with the FC Flex IO module

To remove a configured FCF priority from an FCoE map, enter the no fcf-priority command.Related Commandsfcoe-map — creates an FCoE map which contains

fcoe priority-bitsConfigure the FCoE priority advertised for the FCoE protocol in application priority TLVs.Syntaxfcoe priority-bits priority-bitmapTo

Command ModesCONFIGURATIONINTERFACECommand HistoryVersion 9.3.0.0 Introduced on the M I/O Aggregator and MXL 10/40GbE Switch with the FC Flex IO modul

Command HistoryVersion 9.3.0.0 Introduced on the M I/O Aggregator and MXL 10/40GbE Switch with the FC Flex IO module.Usage InformationTo delete the FI

Example (Single Range)FTOS(conf)#interface vlan 10FTOS(conf-if-vl-3)#Related Commandsfcoe-map — creates an FCoE map which contains the parameters used

standard and extended IPv4 ACLs, standard and extended IPv6 ACLs, and standard and extended MAC ACLs. You can configure ACL logging only on ACLs that

bandwidth percentageEnter the keyword bandwidth followed by a bandwidth percentage allocated to the priority group. The range of valid values is 1 to

show fcoe-mapDisplay the Fibre Channel and FCoE configuration parameters in FCoE maps.M I/O Aggregator and MXL 10/40GbE Switch with the FC Flex IO mod

Field DescriptionFC-MAP FCoE MAC address-prefix value - The unique 24-bit MAC address prefix that identifies a fabric.FCF Priority The priority used b

Field DescriptionFLOGI to complete on peer FC port), or Removed (port has been shut down).Members M I/O Aggregator and MXL 10/40GbE Switch with the FC

Command HistoryVersion 9.3.0.0 Introduced on the M I/O Aggregator and MXL 10/40GbE Switch with the FC Flex IO module.Usage InformationUse the show npi

Usage InformationThe following table describes the show npiv devices output shown in the example below.Field DescriptionENode [number] A server CNA th

LoginMethod : FLOGISecs : 5593Status : LOGGED_INENode[1]:ENode MAC : 00:10:18:f1:94:22ENode Intf : Te 0/13FCF

require an efficient and scalable bridging feature in order to access FC storage arrays, which an NPG provides.NPIV Proxy Gateway Operation Consider a

over MXL 10/40GbE Switch and M I/O Aggregator with the FC Flex IO module ENode ports, are converted into FDISCs addressed to the upstream F ports on c

Term DescriptionFC-MAP FCoE MAC-address prefix - The unique 24-bit MAC address prefix in FCoE packets used to generate a fabric-provided MAC address (

Usage InformationWhen the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured

NOTE: In each FCoE map, the fabric ID, FC-MAP value, and FCoE VLAN must be unique. Use one FCoE map to access one SAN fabric. You cannot use the same

Step Task Command Command Mode1Create a DCB map to specify PFC and ETS settings for groups of dot1p priorities.dcb-map name CONFIGURATION2Configure th

Applying a DCB map on server-facing Ethernet ports You can apply a DCB map only on a physical Ethernet interface and can apply only one DCB map per in

The values for the FCoE VLAN, fabric ID and FC-MAP must be unique. Apply an FCoE map on downstream server-facing Ethernet ports and upstream fabric-fa

Step Task Command Command Modeslot/port | port-channel num}2Apply the FCoE/FC configuration in an FCoE map on the Ethernet port. Repeat this step to a

FTOS(config)# interface range fibrechannel 0/0 - 3 , fibrechannel 0/8 - 11Enter the keywords interface range followed by an interface type and port ra

Table 18. Displaying NPIV Proxy Gateway InformationCommand Descriptionshow interfaces status Displays the operational status of Ethernet and Fibre Ch

Ethernet ports - up (transmitting FCoE and LAN storage traffic) or down (not transmitting traffic).Fibre Channel ports - up (link is up and transmitti

Config-State Indicates whether the configured FCoE and FC parameters in the FCoE map are valid: Active (all mandatory FCoE and FC parameters are corre

Te 0/13 10:00:00:00:c9:d9:9c:cb 1003 Fc 0/0 fid_1003 FDISC LOGGED_INTable 22. show npiv devices brief Field Descrip

Enabling and Disabling Management Egress Interface Selection... 122Handling of Management Route Config

Command ModesCONFIGURATION-EXTENDED-ACCESS-LISTCommand HistoryVersion 9.3.0.0 Added support for logging of ACLs on the S4810, S4820T, Z9000, M I/O Agg

Status : LOGGED_INTable 23. show npiv devices Field DescriptionsField DescriptionENode [number] Server CNA that has successfully logged in t

Field Description10/40GbE Switch and M I/O Aggregator with the FC Flex IO module WWN name is not user-configurable.NPIV Proxy Gateway for FC Flex IO M

interval minutes(OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. You can enter an int

threshold-in msgs count(OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL logs that can be gener

Parameterslog (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.threshold-in msgs count(OPTIONAL) Enter the threshold-in-m

Syntaxpermit {source mask | any | host ip-address} {destination mask | any | host ip-address} [count [bytes]] [dscp value] [order] [fragments] [log [i

permit (for Standard MAC ACLs)To forward packets from a specific source MAC address, configure a filter.NOTE: Only the options that have been newly in

and extended MAC ACLs. You can configure ACL logging only on ACLs that are applied to ingress interfaces; you cannot enable logging for ACLs that are

standard and extended IPv4 ACLs, standard and extended IPv6 ACLs, and standard and extended MAC ACLs. You can configure ACL logging only on ACLs that

Usage InformationWhen the configured maximum threshold is exceeded, generation of logs is stopped. When the interval at which ACL logs are configured

Command ModesCONFIGURATION-EXTENDED-ACCESS-LISTCommand HistoryVersion 9.3.0.0 Added support for logging of ACLs on the S4810, S4820T, Z9000, M I/O Agg

encapsulation dot1q...1459 Inte

Defaults By default, 10 ACL logs are generated if you do not specify the threshold explicitly.The default frequency at which ACL logs are generated is

Defaults By default, 10 ACL logs are generated if you do not specify the threshold explicitly.The default frequency at which ACL logs are generated is

interval minutes(OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. You can enter an int

Parameterslog (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.threshold-in msgs count(OPTIONAL) Enter the threshold-in-m

address} [bit] [operator port [port]] [count [byte]] [log [interval minutes] [threshold-in-msgs [count]]To remove this filter, you have two choices:•

permit icmp (for IPv6 ACLs)To allow all or specific internet control message protocol (ICMP) messages, configure a filter.NOTE: Only the options that

standard and extended IPv4 ACLs, standard and extended IPv6 ACLs, and standard and extended MAC ACLs. You can configure ACL logging only on ACLs that

new interval commences from zero. If ACL logging was stopped previously because the configured threshold is exceeded, it is reenabled for this new int

Command HistoryVersion 9.3.0.0 Added support for logging of ACLs on the S4810, S4820T, Z9000, M I/O Aggregator and MXL 10/40GbE Switch IO Module platf

interval minutes(OPTIONAL) Enter the keyword interval followed by the time period in minutes at which ACL logs must be generated. You can enter an int

ip route bfd (for S6000)... 174S6000.

Parameterslog (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages.threshold-in msgs count(OPTIONAL) Enter the threshold-in-m

• Use the no deny {ipv6-protocol-number | icmp | ipv6 | tcp | udp} commandParameterslog (OPTIONAL) Enter the keyword log to enable the triggering of A

When a packet arrives at a port that is being monitored, the packet is validated against the configured ACL rules. If the packet matches an ACL rule,

The show running-config monitor session displays whether flow-based monitoring is enabled for a particular session.Example Output of the show CommandE

Enabling Flow-Based MonitoringFlow-based monitoring is supported on the S4810, S4820T, S6000, Z9000, I/O Aggregator, and MXL platforms.Flow-based moni

5Bare Metal Provisioning (BMP)This chapter describes the Bare Metal Provisioning (BMP) enhancements that apply to the S4810, S4820T, S6000, Z9000, and

Replacement of stop jump-start Command With the stop bmp CommandThe deprecated stop jump-start command is replaced by the stop bmp from BMP 3.1 onward

6Data Center Bridging (DCB)This chapter describes the DCB enhancements and contains the following sections:• Managing Hardware Buffer Statistics• Conf

Step Task Command Command Modepriority-group 2 bandwidth 20 pfc on priority-group 4 strict-priority pfc offRepeat this step to configure PFC and ETS t

Step Task Command Command ModeFTOS(config-if-te-0/0)# dcb-map SAN_A_dcb_map1 Repeat Steps 1 and 2 to apply a DCB map to more than one port.You cannot

S6000Z9000... 199service-c

Step Task Command Command Mode1 Enter INTERFACE Configuration mode. interface {tengigabitEthernet slot/port | fortygigabitEthernet slot/port}CONFIGURA

Configuring PFC and ETS in a DCB MapAn S6000 switch supports the use of a DCB map in which you configure priority-based flow control and enhanced tran

• When you apply a DCB map, an error message displays if:• Link-level flow control is already enabled on an interface. You cannot enable PFC and link-

• The configuration of bandwidth allocation and strict-queue scheduling is not supported at the same time for a priority group.• Bandwidth assignment:

• If you configure more than one priority group as strict priority, the higher numbered priority queue is given preference when scheduling data traffi

priority-pgidAssign 802.1p priority traffic to a priority group in a DCB map.S4810, S6000, and FC Flex IO Modules with MXL and I/O AggregatorSyntaxpri

• Priority group 0 contains traffic with dot1p priorities 0, 1, and 2.• Priority group 1 contains traffic with dot1p priority 3.• Priority group 2 con

priority-group bandwidth pfcConfigure the ETS bandwidth allocation and PFC mode used to manage port traffic in an 802.1p priority group.S4810, S6000,

If a priority group does not use its allocated bandwidth, the unused bandwidth is made available to other priority groups.To remove a priority-group c

show qos dcb-mapDisplay the DCB parameters configured in a specified DCB map.S4810, S6000, and FC Flex IO Modules with MXL and I/O AggregatorSyntaxsho