Extreme SLX-OS Command Reference, 20.7.1 > Commands K - M

Extreme Networks, Inc. March 26, 2025

Search this documentPrint this page

Email this page

View PDF

Previous

Next

Preface
About This Document
- What's New in This Document
- Supported Hardware
Using the SLX-OS CLI
Commands A - B
Commands C - D
Commands E - F
Commands G - J
Commands K - M
Commands N - Q
Commands R - Sh
Show A through Show I
Show J through Show Z
Commands Shu - Z
Commands U - Z

Commands K - M

Section contents:

ka-int-count
Configures the number of keepalive intervals after which the session is terminated when no session keepalive or other LDP protocol message is received from the LDP peer.
ka-interval
Sets the keepalive time interval at which the session keepalive message is sent when no other LDP protocol message is sent to the LDP peer.
ka-timeout
Sets the keepalive timeout after which the session is terminated when the keepalive or LDP protocol message is not received.
key
Specifies a text string to be used as a shared secret between the device and the Remote Authentication Dial-In User Service (RADIUS) server.
key (keychain)
Configures a unique key ID in a key chain and enters key configuration mode.
key-add-remove-interval
Alters the timing of the authentication key add-remove interval.
key-algorithm
Defines the hash algorithm type for a specified key.
key-rollover-interval
Alters the timing of the existing configuration changeover.
key-string
Configures a string of text to describe a key and, optionally, encrypts or decrypts the text string.
keychain
Creates a key chain and enters keychain configuration mode.
keypair
Associates the generated RSA/ECDSA/DSA key pair with a trust point for security protocol exchanges for applications.
label-withdrawal-delay
lacp auto
Link Aggregation Control Protocol (LACP) enables bundling of multiple ethernet links into a single logical bundle that provides better performance and redundancy than single links. LCAP can only be configured on port-channel interfaces. Use this command to enable auto generation of ESI for these LACP configured port-channel interfaces. The ESI is a 10-octet Hexadecimal identifier based on LACP partner system identifier and port key. The same local port-channel id should be used by the multi-homed leaf peers on links connected to the same host.
lacp default-up
Activates an Link Aggregation Control Protocol (LACP) link in the absence of PDUs.
lacp port-priority
Configures the Link Aggregation Control Protocol (LACP) port priority of a member port of a port-channel.
lacp system-id
The command is used to assign local LACP System ID. The same System ID should be used by both peers on the EVPN Multi-homing nodes.
lacp system-priority
Sets the Link Aggregation Control Protocol (LACP) system priority. The LACP priority determines which system is responsible for resolving conflicts in the choice of aggregation groups.
lacp timeout
Sets the timeout value used by the Link Aggregation Control Protocol (LACP) to exchange packets on an interface before invalidating a received data unit (DU).
lacp-pdu-forward enable
Configures the device to forward LACP PDUs received on an interface where LACP is not configured, to the VLAN on which the LACP PDUs are received.
lag hash
Configures LAG and Layer 3 ECMP hashing parameters such as where to start picking headers for key generation, the number of headers to be considered, and so forth.
ldap-server host
Configures an LDAP server to connect for external or remote authentication.
ldap-server maprole
Maps an Active Directory (AD) group to a device role.
ldp
Enables the Label Distribution Protocol (LDP) mode to configure LDP global parameters.
ldp-enable
Enables LDP on an interface.
ldp-params
Allows you to access ldp-params subconfiguration mode to configure LDP parameters on an interface.
ldp-sync
Enables Multiprotocol Label Switching (MPLS) Label Distribution Protocol-Interior Gateway Protocol (LDP-IGP) synchronization globally with Intermediate System-to-Intermediate System (IS-IS) or Open Shortest Path First (OSPF), and configures the hold-down time interval.
left-interface vlan
Configures an Ethernet Ring Protection (ERP) left interface.
license add
Adds a license key to a switch.
license eula
Enables the user to accept or decline the EULA for a SAU licensed feature.
line vty exec-timeout
Sets the recurrent CLI idle timeout period.
link-error-disable
Configures port flap dampening for the interface, including the threshold of link flapping to shut down the port and the time interval in which it remains shut down.
link-fault-signal
Configures RX and TX Link Fault Signaling (LFS) detection globally or on an interface port.
link-oam allow-loopback
Enables an interface to accept remote loopback.
link-oam enable
Enables link oam on an ethernet interface and sets the mode to active or passive.
link-oam remote-failure
Blocks the interface on receipt of a remote failure message, in addition to the syslog generation.
link-oam remote-loop-back
Starts and stops the remote loopback on peer that is connected to a local ethernet interface.
listen-limit
Sets a global limit for BGP4 or BGP4+ dynamic subnet range neighbors.
listen-range
Associates a subnet range with a BGP4 or BGP4+ peer group and sets the maximum number of BGP dynamic neighbors that can be created for this range.
lldp profile
Applies a Link Layer Discovery Protocol (LLDP) profile to an interface.
load-balance hash
For supported header types, selects the fields used for LAG and Layer 3 ECMP hashing.
load-sharing
Configures the maximum number of LDP ECMP paths.
local-as
Specifies the BGP autonomous system number (ASN) where the device resides.
local-switching
Configures the local switching mode for a bridge domain.
log (OSPFv2)
Controls the generation of OSPFv2 logs.
log (OSPFv3)
Controls the generation of OSPFv3 logs.
log adjacency
Logs changes in the status of an adjacency with another intermediate system (IS).
log invalid-lsp-packets
Logs invalid Link State PDUs (LSPs) packets.
log-dampening-debug
Logs dampening debug messages.
log-shell
Controls the remote logging of SLXVM Linux shell command activities.
logging auditlog class
Activates audit logging for various categories and classes of actions.
logging raslog console
Sets the severity levels for the RASLog console.
logging raslog console stop
Temporarily stops displaying RASLog messages on the console.
logging syslog-facility local
Configures the syslog facility.
logging syslog-server
Configures a switch to forward system messages to the specified syslog servers.
logging syslog-server-host
Configures a switch to forward system messages to a specified syslog server using its host name.
logging utility
Configures a switch to forward system messages to the configured syslog server(s) using RELP (Reliable Event Logging Protocol).
logical-interface
Configures a logical interface on a physical port or a port-channel (LAG) on an edge port, entering LIF configuration mode, and optionally binds the interface to a bridge domain (BD).
loopback phy
Implements transparent loopback on a physical interface.
loop-detection
Enables the loop detection (LD) feature at the interface level, VLAN, or bridge domain (BD) level, and enters Protocol Loop Detection configuration mode.
loop-detection shutdown-disable
Disables the shutting down of an interface (Ethernet or port-channel), a VLAN VXLAN tunnel, or a bridge domain (BD) VXLAN tunnel as a result of the loop detection (LD) protocol.
loop-detection vlan
Associates a VLAN at the interface level to support the loop detection (LD) protocol.
lsp
Accesses LSP subconfiguration mode to configure the LSP tunnel.
lsp (Telemetry)
Indicates the MPLS LSP to be used for the mpls-traffic-lsp profile.
lsp-gen-interval
Sets the minimum number of seconds the device waits between sending updated Link State PDUs (LSPs) to its Intermediate System-to-Intermediate System (IS-IS) neighbors.
lsp-interval
Sets the rate of transmission, in milliseconds, of the Link State PDUs (LSPs).
lsp-refresh-interval
Sets the maximum number of seconds a device waits between sending updated Link State PDUs (LSPs) to its Intermediate System-to-Intermediate System (IS-IS) neighbors.
lsr-id
Configures an IP address to be used as the LSR ID for the LDP identifier.
lvtep broadcast-local-bias
Enables Local Bias for LVTEP BUM traffic.
ma-name
Creates a maintenance association (MA) within a specified domain. The command changes the maintenance domain mode to the specified maintenance association mode.
mac access-group
Applies rules specified in a MAC access control list (ACL) to traffic entering or exiting an interface.
mac access-list extended
Creates a MAC extended access control list (ACL).
mac access-list standard
Creates a standard MAC access control list (ACL). Standard ACLs contain rules that permit or deny traffic based on source addresses that you specify.
mac-address withdrawal
In a VPLS context on a bridge domain (BD), removes MAC addresses that have been dynamically learned, thus providing faster convergence.
mac-address-table aging-time
Configures the aging time for dynamic MAC address entries in the MAC address table.
mac-address-table mac-move
Configures the MAC movement detection parameters
mac-address-table static
Adds static addresses to the MAC address table.
maid-format
Sets the Maintenance Association Identifier (MAID) format for a particular maintenance association (MA).
maintenance-mode (Interface)
Navigates into the interface's Maintenance sub-mode.
management-heartbeat manager (management-heartbeat)
The heartbeat-manager sub mode, under the Global Configuration mode, enables configuration of the various parameters associated with SLX devices listening for heartbeat message from EFA. Use this mode to enable heartbeat monitoring, to configure threshold time for listening to heartbeat messages, to configure actions to be performed on expiration of the configured threshold time.
management-security
The management-security sub mode, under the Global Configuration mode, enables configuring the lowest TLS version supported by the SLX software. SLX uses OpenSSL to provide transport layer security and the current version of OpenSSL supports TLS v 1.1 to TLS v 1.2. Since the SLX box can be considered as both a client as well as a server, you can apply different supported TLS versions for each of these types. The ssl-profile command within this mode allows you to configure these values.
manual-switch vlan
Blocks a specified link manually for an Ethernet Ring Protection (ERP) instance.
map bridge-domain (overlay gateway)
Maps a bridge domain (BD) to a Virtual Network Identifier (VNI) for a VXLAN overlay gateway.
map cos to cos
Changes an incoming CoS value to another value before sending the packet out.
map dscp
Maps an ingress DSCP value to an outbound CoS, DSCP, or traffic-class value for a QoS DSCP-to-CoS, DSCP-mutation, or DSCP-to-traffic class map.
map vlan
In a VXLAN overlay gateway configuration that uses Layer 2 extension, associates VLANs with VXLAN Network Identifiers (VNIs).
map vni auto (VXLAN gateway)
Configures an automatic mapping of VLANs/bridge domains (BDs) to Virtual Network Identifiers (VNIs).
master-vlan (STP)
Selects a master VLAN for a topology group.
match (route maps)
Defines a variety of match conditions for a route map.
match access-group
Matches an ACL to a class map.
match additional-paths advertise-set
Enables filtering of additional-paths to be advertised for a route map.
match as-path
match bridge-domain
Matches a bridge domain to a class map.
match community
Matches a community access list name in a route-map instance.
match destination-port
Configures matching based on UDP or TCP destination port for a route-map sequence number.
match dscp
Configures matching based on a Differentiated Services Code Point (DSCP) value or range of values for a route-map sequence number.
match extcommunity
Matches an extended community list in a route-map instance.
match fragment-type
Configures matching based on fragmentation type for a route-map sequence number.
match ip
Configures matching based on an IPv4 source or destination prefix for a route-map sequence number.
match ip address acl
In a route-map stanza, matches IPv4 address conditions specified in an IPv4 ACL.
match ip icmp-code
Configures matching based on Internet Control Message Protocol (ICMP) code for a route-map sequence number.
match ip icmp-type
Configures matching based on Internet Control Message Protocol (ICMP) type for a route-map sequence number.
match ipv6 address
Matches IPv6 address conditions in a route map instance.
match ipv6 address acl
In a route map instance, matches IPv6 address conditions specified in an IPv6 ACL.
match large-community
Filters routes by BGP Large Community attributes, using a partial or exact match with Large Community ACLs.
match packet-length
Configures matching based on packet length for a route-map sequence number.
match port
Configures matching based on TCP or UDP source or destination port for a route-map sequence number.
match protocol
Configures protocol-based matching for a route-map sequence number.
match rpki
In a route map configuration, this command is used to indicate what actions need to be performed for the validation state being configured. When a prefix is validated with the RPKI cache, the following three states are reported, valid, invalid, and not found. Use this command to configure the matching criteria. Once you have configured the matching parameter, you must configure the various actions that need to be performed when a prefix is received and is matched with the RPKI cache on the SLX device.
match source-port
Configures matching based on UDP or TCP source port for a route-map sequence number.
match tcp-flags
Configures Transmission Control Protocol (TCP) flag-based matching for a route-map sequence number.
match vlan
Matches a VLAN to a class map.
max-age
Sets the interval time in seconds between messages that the spanning tree receives from the interface.
max-bypasses
Use the max-bypasses command to configure the maximum number of dynamic bypass LSPs that can be created in the system or on a MPLS interface.
max-bypasses-per-mp
Use the max-bypasses-per-mp command in the global mode or interface mode to configure the maximum number of dynamic bypass LSPs that can be created to a merge point.
max-lsp-lifetime
Sets the maximum number of seconds an unrefreshed Link State PDU (LSP) remains in the LSP database of a device.
max-mcache
Configures the maximum size of the multicast cache.
max-metric router-lsa
Advertises the maximum metric value in different Link State Advertisements (LSAs).
max-metric router-lsa (OSPFv3)
Advertises the maximum metric value in different Link State Advertisements (LSAs).
max-neighbor-reconnect-time
Specifies the maximum time that this router must wait for a graceful restart (GR) neighbor to restore the LDP session.
max-neighbor-recovery-time
Specifies the maximum amount of time that this router waits for a graceful restart (GR) neighbor to complete its GR recovery after the LDP session has been reestablished.
maxas-limit
Imposes a limit on the number of autonomous systems in the AS-PATH attribute.
maximum-paths (BGP)
Sets the maximum number of BGP4 and BGP4+ shared paths.
maximum-paths (IS-IS)
Specifies the number of paths Intermediate System-to-Intermediate System (IS-IS) can calculate and install in the IPv4 or IPv6 forwarding table.
maximum-paths (OSPF)
Changes the maximum number of OSPF shared paths.
maximum-paths ebgp ibgp
Specifies the number of equal-cost multipath eBGP or iBGP routes or paths that are selected.
measured-boot
Measured Boot is a mechanism to ensure that the integrity of the firmware and software running on a SLX hardware platform is maintained. This is ensured by the calculating a hash of the values of each stage in the boot process and comparing these values with the values stored on a remote verification server.
measurement-interval
Configures the SLM Measurement interval for Connectivity Fault Management (CFM).
med-missing-as-worst
Configures the device to favor a route that has a Multi-Exit Discriminator (MED) over a route that does not have one.
member (cluster)
Defines the bridge-domains and vlans shared between cluster nodes and extended on the ICL.
member-bridge-domain
Configures member bridge domains for a topology group.
member-vlan (STP)
Adds member VLANs to an STP topology group.
mep
Adds local ports as Maintenance End Points (MEPs) to a specific Maintenance Association (MA).
message-interval
Configures the frequency with which PIM Join and Prune messages are sent.
message-interval
Specifies a value for an Ethernet Ring Protection (ERP) message interval.
metric
Assigns a metric to the LSP, which routing protocols can use to determine the relative preference among several LSPs towards a given destination.
metric-style wide
Enables the wide metric type for new style of TLVs with Intermediate System-to-Intermediate System (IS-IS).
metric-type
Configures the default metric type for external routes.
minimum-links
Configures the minimum bandwidth or number of links to be running to allow the port-channel to function.
mip-policy
Specifies the conditions in which Maintenance Intermediate Points (MIP) are automatically created on ports.
mode (LLDP)
Sets the LLDP mode on the device.
mode gre ip
Enables generic routing encapsulation (GRE) over a tunnel interface and specifies that the tunneling protocol is IPv4.
monitor session
Enables a port mirroring session, which sends copies of packets that enter or exit one port to another physical port or LAG interface, where the packets can be analyzed.
mpls reoptimize
Under ordinary conditions, an LSP path does not change unless the path becomes inoperable. Consequently, the router must be directed to consider configuration changes made to an LSP and to optimize the LSP path based on those changes.
mpls-interface
Configures MPLS on an interface and accesses MPLS interface sub-configuration mode to configure its parameters.
mtu (interface)
Configures the Layer 2 maximum transmission unit (MTU) size for all Ethernet interfaces and Port-channels.
mtu (PW)
Configures the maximum transmission unit (MTU) for a pseudowire (PW) profile.
mtu-enforce
Configures MTU enforcement check for a pseudowire (PW) profile.
multipath
Changes load sharing to apply to only iBGP or eBGP paths, or to support load sharing among paths from different neighboring autonomous systems.
multiplier (LLDP)
Sets the number of consecutive misses of hello messages before LLDP declares the neighbor as dead.
multiplier (UDLD)
Sets timeout multiplier for missed UDLD PDUs.
multi-topology
Enables IPv6 Intermediate System-to-Intermediate System (IS-IS) MT in an area or a domain so that the MT-enabled device runs IPv6 IS-IS in multi-SPF mode.
mvrp applicant-mode
Configures the MVRP applicant mode on the MVRP-enabled interface as normal-participant to enable the transmission of MVRP data units (MVRPDUs) or non-participant to disable the transmission of MVRPDUs; ensuring that no PDU exchange occurs on the port. The non-participant configuration is recommended on an MVRP-enabled edge port to avoid sending VLAN advertisements to the connected edge device.
mvrp enable
Enables MVRP on an Ethernet or port-channel interface.
mvrp registration-mode forbidden vlan
Configures the forbidden registration mode for a VLAN or a range of VLANs on an MVRP-enabled Ethernet or port-channel interface.
mvrp timer
Sets the MVRP join, leave, and leave-all timer values on an Ethernet or port-channel interface.

9039216-00 Rev AA

Search this documentPrint this page

Email this page

View PDF

Previous

Next

© 2024 Extreme Networks.
Legal
Privacy and Cookies Policy