Extreme SLX-OS Command Reference, 20.7.1 > Commands Shu - Z

Extreme Networks, Inc. March 26, 2025

Search this documentPrint this page

Email this page

View PDF

Previous

Next

Preface
About This Document
- What's New in This Document
- Supported Hardware
Using the SLX-OS CLI
Commands A - B
Commands C - D
Commands E - F
Commands G - J
Commands K - M
Commands N - Q
Commands R - Sh
Show A through Show I
Show J through Show Z
Commands Shu - Z
Commands U - Z

Commands Shu - Z

Section contents:

shortcuts ospf
shutdown
Physically disable out-of-band access to the BMC Management Interfaces. This prevents access to the interface from outside. Only BMC Management Interface 0 is supported.
shutdown (link-oam)
Allows you to enable or disable the link-oam protocol.
shutdown (STP)
Disables Spanning Tree Protocol (STP), Rapid Spanning Tree Protocol (RSTP), Multiple Spanning Tree Protocol (MSTP), Per-VLAN Spanning Tree+ (PVST+), or Rapid PVST+ (R-PVST+) globally.
shutdown-time
Specifies a shutdown time for loopback detection (LD).
shutdown (cluster)
Isolates the MCT node by shutting down all components.
shutdown (interface)
Disables the current interface.
shutdown (LIF)
Removes a physical or port-channel interface on an edge port from participating in logical interface (LIF) data traffic without the need to shut down the interface.
shutdown-time
Specifies a shutdown time to ensure convergence when maintenance mode is enabled on a SLX-OS device.
site
Creates a remote Layer 2 extension site in a VXLAN overlay gateway context and accesses site configuration mode.
snmp trap link-status disable
Disables SNMP traps for the interface link status change.
snmp-server community
Sets the community string and associates it with the user-defined group name to restrict the access of MIB for SNMPv1 and SNMPv2c requests.
snmp-server contact
Sets the SNMP server contact string.
snmp-server context
Maps the context name in an SNMPv3 packet protocol data unit (PDU) to the name of a VPN routing and forwarding (VRF) instance.
snmp-server enable trap
Enables the SNMP traps.
snmp-server engineid local
Configures an SNMP engine ID for the SNMP agent.
snmp-server group
Creates user-defined groups for SNMPv1/v2/v3 and configures read, write, and notify permissions to access the MIB view.
snmp-server host
Configures the SNMP trap server host attributes.
snmp-server location
Sets the SNMP server location string.
snmp-server mib community-map
Maps an SNMP community string to an SNMP context.
snmp-server preserve-statistics disable
Enables and disables the preservation of SNMP MIB statistics.
snmp-server sys-descr
Sets the Management Information Base (MIB-2) object identifier (OID) system description.
snmp-server trap
Switches between standard and enterprise MIB to generate the BFD traps. When this CLI is configured, the BFD traps defined in standard MIB get generated.
snmp-server use-vrf
Configures SNMP Listening Service on a VRF. SNMP listening service over mgmt-vrf and default-vrf will be enabled by default. Also the Listening service enable/disable related CLI is applicable for SNMP Get related operations and it will not impact notification operations.
snmp-server user
Creates or changes the attributes of SNMPv3 users, and allows the SNMPv3 user to be associated with the user-defined group name.
snmp-server v3host
Specifies the host recipient for SNMPv3 trap notification.
snmp-server view
Creates a view entry with MIB object IDs to be included or excluded for user access.
soft-preemption
The soft-preemption command enables soft preemption functionality. This command must be used on both the primary and secondary paths.
soft-preemption cleanup-timer
Sets the amount of time that the point of preemption must wait to receive the path tear notification from the ingress LSR before sending a hard preemption path error.
source
Configures the source address or a source interface for a tunnel interface.
source (monitor session)
Configures the mirroring parameters.
source-interface (LDAP)
Configures the LDAP server on specific VRF with source interface.
source-interface (RADIUS)
Configures a source IP address for Remote Authentication Dial-In User Service (RADIUS) packets that originate on the device.
spanning-tree autoedge
Enables automatic edge detection.
spanning-tree bpdu-mac
Sets the MAC address of the Bridge Protocol Data Unit (BPDU).
spanning-tree cost
Changes an interface's spanning-tree port path cost.
spanning-tree edgeport
Enables the edge port on an interface to allow the interface to quickly transition to the forwarding state.
spanning-tree guard root
Enables the guard root to restrict which interface is allowed to be the spanning tree root port or the device's path-to-the-root.
spanning-tree link-type
Enables and disables the rapid transition for the Spanning Tree Protocol (STP).
spanning-tree portfast
Enables the Port Fast feature on an interface to allow the interface to quickly transition to forwarding state.
spanning-tree priority
Changes an interface's spanning-tree port priority.
spanning-tree restricted-role
Restricts the role of the port from becoming a root port.
spanning-tree restricted-tcn
Restricts the Topology Change Notification (TCN) Bridge Protocol Data Units (BPDUs) sent on the port.
spanning-tree shutdown
Enables or disables spanning tree on the interface or VLAN.
speed (Ethernet)
Sets the speed negotiation value on an Ethernet interface.
spf-interval
Changes the shortest path first (SPF) interval.
spt-threshold infinity
Configures all sources to use the shared rendezvous point (RP) tree instead of the Shortest Path Tree (SPT).
ssh
Connects to a remote server by means of the Secure Shell (SSH) protocol.
ssh client cipher
Sets the SSH client's cipher list for the SSH client.
ssh client cipher non-cbc
Sets the SSH client's cipher list to non-cbc ciphers for the SSH client.
ssh client key-exchange
Specifies the method used for generating the one-time session keys for encryption and authentication with the Secure Shell (SSH) server and Diffie-Hellman group 14.
ssh client mac
Supports MAC configurations for the SSH client.
ssh server algorithm
Configures the SSH server host key algorithm to be used for X.509v3 certificate-based SSH authentication (server authentication).
ssh server certificate
Configures the SSH server certificate profile and enters SSH server certificate profile configuration mode.
ssh server cipher
Sets the SSH server's cipher list for the SSH server.
ssh server key
Generates or zeroizes SSH crypto keys on the device. All three keys can be active simultaneously.
ssh server key-exchange
Specifies the method used for generating the one-time session keys for encryption and authentication with the Secure Shell (SSH) server and Diffie-Hellman group 14.
ssh server mac
Supports MAC configurations for the SSH server.
ssh server max-auth-tries
Configures the maximum number of times a user is allowed to try to authenticate to the SSH server.
ssh server max-idle-timeout
Configures the maximum number of seconds that the SSH session is allowed to idle before timing out.
ssh server max-login-timeout
Configures the maximum timeout interval for log in attempts in the SSH session.
ssh server rekey-interval
Configures the Secure Shell (SSH) server rekey-interval.
ssh server rekey-volume
Configures the Secure Shell (SSH) server rekey volume.
ssh server use-vrf shutdown
Disables the SSH service.
ssl-profile
Use the ssl-profile command to configure the lowest TLS version supported by the SLX software. SLX uses OpenSSL to provide transport layer security and the current version of OpenSSL supports TLS v 1.1 to TLS v 1.2. Since the SLX box can be considered as both a client as well as a server, you can apply different supported TLS versions for each of these types. This ssl-profile command enables you to select the SLX operation mode from either Client or Server and then set the lowest supported TLS version.
ssm-enable
Enables Source Specific Multicast (SSM) mode for IPv4 PIM.
start (CFM)
Defines the start time for a delay measurement receiver session.
start (Y1731)
Configure the start time.
start-shell
Accesses the SLXVM Linux shell from the SLX-OS CLI.
static-network
Configures a static BGP4 network, creating a stable network in the core.
statistics
Enables statistics on the tunnel interface.
statistics (bridge domain)
Enables ingress and egress statistics on a bridge domain.
statistics (VLAN)
Enables statistics on a VLAN.
stop (CFM)
Defines the stop time for a delay measurement receiver session.
stop (Y1731)
Configure the stop time.
storm-control ingress (global)
Limits ingress traffic globally on all device Ethernet interfaces.
storm-control ingress (interface)
Limits ingress traffic on a specified interface.
subnet
Specifies the local IP address with the subnet mask of the routing device.
sub-ring
Configures a bridge as a sub-ring node for Ethernet Ring Protection (ERP) and specifies a parent ring ID.
summary-address (IS-IS)
Configures route summarization to aggregate Intermediate System-to-Intermediate System (IS-IS) route information.
summary-address (OSPFv2)
Configures route summarization for redistributed routes for an Autonomous System Boundary Router (ASBR).
summary-address (OSPFv3)
Configures route summarization for redistributed routes for an Autonomous System Boundary Router (ASBR).
summary-prefix
Configures summary prefixes to aggregate IPv6 Intermediate System-to-Intermediate System (IS-IS) route information.
support autoupload-param
Defines autoupload parameters.
suppress-arp
Enables Address Resolution Protocol (ARP) suppression on a current VLAN or bridge domain. ARP suppression can lessen ARP-related traffic within an IP Fabric.
suppress-nd
Enables Neighbor Discovery (ND) suppression on a VLAN or bridge domain. ND suppression can lessen the amount of ND control traffic within an IP Fabric.
switch-attributes
Configures the chassis or host name for the device.
switchport
Puts the interface in Layer 2 mode and sets the switching characteristics of the Layer 2 interface.
switchport access
Sets the Layer 2 interface as access.
switchport mode
Sets the mode of the Layer 2 interface.
switchport mode trunk-no-default-native
Configures a port to trunk mode without the native vlan.
switchport port-security
Enables port security on an interface port.
switchport port-security mac-address
Configures the MAC address option for port security on an interface port.
switchport port-security max
Configures the maximum number of MAC addresses used for port MAC security on an interface port.
switchport port-security shutdown-time
Configures the auto recovery time for ports that shuts down following a port security violation on an interface.
switchport port-security sticky
Enables sticky MAC learning on the port to convert the dynamically learned MAC addresses to sticky secure MAC addresses.
switchport port-security violation
Configures the violation response action for port security on an interface.
switchport trunk allowed
Adds or removes VLANs on a Layer 2 interface in trunk mode.
switchport trunk native-vlan-untagged
Configures a port to accept only untagged packets, and specifies that those packets be egress untagged. The untagged packets may be classified to an 802.1Q VLAN, a service VF, or a transport VF.
switchport trunk native-vlan-xtagged
Configures a port to accept both tagged and untagged packets, and specifies the egress tagging behavior.
switchport trunk tag native-vlan
Enables tagging on native VLAN traffic.
sync-interval
Configures the interval between Precision Time Protocol (PTP) synchronization (Sync) messages on an interface.
sysmon fe-acces-check
Configures system error monitoring.
sysmon link-crc-monitoring
Enables link CRC monitoring.
sysmon sfm-walk
Enables SFM walk.
system maintenance
Enters system maintenance mode.
system maintenance turn-off
Brings device out of maintenance mode when enable-on-reboot is used.
system-description
Sets the global system description specific to LLDP.
system-monitor tm
Accesses system monitor traffic manager (sys-mon TM) configuration mode to configure the monitoring of the traffic manager (TM) device or Virtual Output Queue (VOQ) discarded packets.
system-monitor-mail
Configures various email settings as part of system monitoring.
system-monitoring power alert state removed action raslog
Monitors the power supply component and generates RASLog when the component changes from the configured state.
system power-cycle-db-shutdown
Shuts down the chassis configuration database gracefully without restarting the device for a planned power-cycle.
system-name
Sets the global system name specific to LLDP.
table-map
Maps external entry attributes into the BGP routing table, ensuring that those attributes are preserved after being redistributed into OSPF.
tacacs-server
Configures a Terminal Access Controller Access-Control System plus (TACACS+) server.
tag-type
Configures Tag Protocol ID (TPID) for the specified interface.
tdpa
Provisions the TPM chip on the SLX devices. This command cannot be executed and will always throw an error.
telemetry client-cert
Generates the SSL certificate used by Telemetry server and client for a secure connection.
telemetry collector
Activates telemetry-collector configuration mode.
telemetry profile
Enters telemetry-profile configuration mode.
telemetry profile (MPLS)
Enters Telemetry profile configuration mode for MPLS profile configurations.
telemetry server
Enters telemetry-server configuration mode.
telnet
Establishes a Telnet session to a remote networking device.
telnet server
Configures the Telnet server on the device.
terminal
Sets terminal parameters for the current session.
test-profile
Creates a test profile.
threshold
Specifies if the measurement exceeds the configured average or max threshold value.
threshold (ETH-DM)
Configures the ETH-DM threshold.
threshold (ETH-SLM)
Configures the ETH-SLM threshold.
threshold-monitor
threshold-monitor acl
Configures monitoring the utilization of finite user configurable ACL resources like MAC ACL, IP ACL, and IPv6 ACL. The current values of ternary content-addressable memory (TCAM) occupied by these ACLs are compared against the available hardware resources in a configured hardware profile. An alarm is raised every time the consumed resources crosses the configured high threshold level indicating a high utilization and also when, the utilization, subsequently, falls below the configured low threshold limit, indicating that the utilization has reached safer levels.
The alarm for low threshold is generated only in the case that an alarm for crossing the high threshold is already generated.
threshold-monitor Cpu
Configures monitoring of CPU usage of the system and alerts the user when configured thresholds are exceeded.
threshold-monitor memory
Configures monitoring of the memory usage of the system and alerts the user when configured thresholds are exceeded.
threshold-monitor bfd-sessions
Configures monitoring of the number of BFD Session against the maximum number of supported BFD sessions and alerts the user when configured thresholds are exceeded.
threshold-monitor ecmp
Configures monitoring the utilization of the ECMP Table. The current values of number of ECMP Next Hop entries (in %) is compared with the configured profile limits and against the available hardware space. An alarm is raised when the number of entries falls below the configured low threshold or exceeds the configured high threshold.
threshold-monitor hardware-resources
Configures the maximum number of events to be generated in a configured time period for any hardware events on the device.
threshold-monitor host
Configures monitoring of the utilization of the Host Table. The current values of number of host entries (in %) (both IPv4 ARP entries and IPv6 Neighbor entries) are compared with the configured profile limits and against the available hardware space. An alarm is raised when the number of entries falls below the configured low threshold or exceeds the configured high threshold.
threshold-monitor lif
Configures monitoring of the number of LIFs against the maximum number of supported LIFs and alerts the user when configured thresholds are exceeded.
threshold-monitor mac-table
Configures monitoring of the utilization of available MAC Table resources and alerts the user when configured thresholds are exceeded.
threshold-monitor nexthop
Configures the monitoring the utilization of the Next Hop Table or the Encap Table depending on the platform. The current values of number of next hop entries (in %) is compared with the configured profile limits and against the available hardware space. An alarm is raised when the number of next hop entries falls below the configured low threshold or exceeds the configured high threshold.
threshold-monitor route
Configures monitoring the utilization of the Route Table. The current values of number of routes (in %) (both IPv4 and IPv6 routes) are compared with the configured profile limits and against the available hardware space. An alarm is raised when the number of routes falls below the configured low threshold or exceeds the configured high threshold.
threshold-monitor sfp
Configures monitoring of SFP parameters.
threshold-monitor vxlan-tunnel
Configures monitoring of the number of VXLAN Tunnels against the maximum number of supported VXLAN tunnels and alerts the user when configured thresholds are exceeded.
threshold-timer (management-heartbeat)
Configures the threshold value for listening to heartbeat message from EFA. Used within the management-heartbeat context.
tie-breaking
Configures the device to choose the path with the highest available bandwidth or the lowest available bandwidth.
timeout (link-oam)
Allows you to configure timeout value, which corresponds to hold time before the Discovery process restarts.
timeout (RADIUS)
Species the wait time allowed for a Remote Authentication Dial-In User Service (RADIUS) server response.
timeout (Y1731)
Configures timeout in seconds.
timer
Sets the global MVRP join, leave and leave-all timers values on all MVRP-enabled interfaces except the interfaces configured with the mvrp timer command in interface configuration mode.
timers (BGP)
Adjusts the interval at which BGP KEEPALIVE and HOLDTIME messages are sent.
timers (OSPFv2)
Configures Link State Advertisement (LSA) pacing and Shortest Path First (SPF) throttle timers.
timers (OSPFv3)
Configures Link State Advertisement (LSA) pacing and Shortest Path First (SPF) timers.
tls min-version
The command enables configuring the lowest TLS version supported by SLX OS for the Client and Server modes of operation of the SLX device. This command is available under the respective modes under the Management Security SSL Profile mode. SLX uses OpenSSL to provide transport layer security and the current version of OpenSSL supports TLS v 1.1 to TLS v 1.3. Since the SLX box can be considered as both a client as well as a server, you can apply different supported TLS versions for each of these types. The default TLS version supported is v 1.2.
tlv-type
Enables the Port Status type-length-value (TLV) metric for the specified Maintenance End Points (MEP).
to
Configures a destination address for the bypass LSP.
topology-group
Configures the topology group.
tpvm
Provides administrative support, for users without root privileges, for Third-Party Virtual Machine (TPVM) applications.
tpvm config dns
Configures a DNS server in a Third-Party VM (TPVM).
tpvm config hostname
Configures the Hostname for a Third-Party VM (TPVM).
tpvm config ldap
Configures an LDAP server in a Third-Party VM (TPVM).
tpvm config ldap ca-cert
Imports or removes certificates for LDAP over TLS in a Third-Party VM (TPVM).
tpvm config ntp
Configures the Network Time Protocol (NTP) for a Third-Party VM (TPVM) and now gets/display IPv6 configurations with IPv4 configurations.
tpvm config timezone
Configures the Timezone for a Third-Party VM (TPVM).
tpvm config trusted-peer
Adds and removes bi-directional password-less SSH connection between the root user accounts of both the TPVM and Peer TPVM instances.
tpvm deploy
Performs TPVM and Insight Interface set up and configuration.
tpvm download
Downloads the TPVM image from the remote location, and then optionally, verifies if the file size and the version of the downloaded TPVM image is correct.
tpvm fileinfo
Displays information for the TPVM image file stored in the /tftpboot/SWD2900 directory of the SLX-OS. TPVM is installed from this image file.
tpvm (mode)
Enters into the TPVM persistence configuration mode. Only one TPVM instance can be configured at present. Currently, the tpvm-id only allowed value is TPVM, and its optional and default also.
ldap host
Configures an LDAP server in the TPVM instance.
ldap ca-cert
Imports or removes certificates for LDAP over TLS in the TPVM instance.
ntp (tpvm mode)
Configures the Network Time Protocol (NTP) server for TPVM instance. Supports IPv4 and IPv6 addresses.
tpvm dns
Configures the DNS server details for the TPVM instance. DNS configuration CLI already supports IPv4 address. It is enhanced to support IPv6 address.
hostname (tpvm mode)
Configures the Hostname for the TPVM instance.
timezone (tpvm mode)
Configures the Timezone for the TPVM instance.
trusted-peer (tpvm mode)
Adds and removes bi-directional password-less SSH connection between the root user accounts of both the TPVM and Peer TPVM instances.
auto-boot (tpvm mode)
Enables auto-start of TPVM on next boot of SLX-OS.
disk (tpvm mode)
Adds disks to TPVM. Up to three (3) disks can be added. These disks can be added only in the order vdb, vdc, and vdd. When removing disks, they must be removed in the order vdd, vdc, and vdb (in the reverse order in which they were added). When the auto parameter is used, the name of the next disk in the order will be selected and added to the TPVM configuration.
password (tpvm mode)
Updates the password for the default TPVM user account extreme. The password can be normal text string or encrypted string.
allow-pwless (tpvm mode)
Enables password less login for SSH and SUDO accounts in TPVM.
interface management (tpvm mode)
Configures the static IPv4/IPv6 address and gateway on the TPVM's management interface (eth0).
interface insight (tpvm mode)
Configures the IP and gateway address on the insight interface of TPVM (eth1).
deploy (tpvm mode)
This configuration will deploy the TPVM instance. It performs multiple steps of installing and starting the TPVM, as well applying all TPVM instance related configuration, which is currently set in the SLX configuration database. The no deploy configuration will purge the TPVM instance, which implies stop, uninstall and delete, as well as applying all TPVM instance related configurations in the SLX config database. This is similar to no tpvm TPVM.
tpvm upgrade
Upgrades the TPVM image. This command downloads the TPVM Debian image file using SCP or SFTP or FTP servers. Any previously installed TPVM instance is upgraded, and TPVM configuration from the SLX configuration database is applied, if available. Upgrades can be full or incremental. By default, full upgrades are performed.
tpvm snapshot
Manually creates and manages TPVM snapshots. These snapshots can then be used to restore a TPVM to its previous state post any TPVM crash.
traceroute
Traces the network path of packets as they are forwarded to a destination address.
track (VRRP)
Enables VRRP tracking for a specified interface. VRRP Extended (VRRP-E) sessions can track a specified interface or a network.
traffic-engineering (LSP)
Allocating bandwidth to an LSP lets the LSRs determine how much bandwidth the LSP can consume and how much of the available bandwidth resources can be advertised.
traffic-engineering (MPLS)
When an MPLS-enabled device receives an IS-IS TE LSP, it stores the traffic engineering information in its Traffic Engineering database (TED). The device uses information in the TED when performing calculations to determine a path for an LSP. The user can configure the device to send out IS-IS TE LSPs for all of its MPLS-enabled interfaces.
transit-session-accounting
Enables traffic statistics for transit sessions.
transport
Specifies the transport protocol for network-elements telemetry streaming.
trigger
Defines event-handler triggers. When the trigger-condition occurs, a Python script is run.
trigger-function
Specifies whether the action runs only if all of the triggers occur or if one is sufficient, for an implementation of an event-handler profile when multiple triggers are defined for an event-handler action.
trigger-mode
For an implementation of an event-handler profile, specifies if recurring trigger conditions can launch an event-handler action more than once.
trustpoint sign
Configures the trustpoint to the server certificate profile that is used to sign the server certificate.
ttl
Configures the time to live (TTL) value for a tunnel interface.
tunable-optics
This command assigns channels to tunable optic interfaces (T-SFP+) for specific wavelengths.
tunneled-arp-trap enable
Enables ARP (Address Resolution Protocol) packets that come through a tunnel to be trapped to CPU.
tx-frame-count
Configures the transmission frame count.
tx-interval
Configures the transmission interval.
tx-label-silence-timer
Sets the length of the EOL transmit label silence timer for LDP-IGP synchronization.
type
Configure a profile type as ETH-DM or ETH-SLM.

9039216-00 Rev AA

Search this documentPrint this page

Email this page

View PDF

Previous

Next

© 2024 Extreme Networks.
Legal
Privacy and Cookies Policy