Fabric Engine User Guide Version 8.6
>
System Access
>
System access configuration using EDM
> System access security enhancements using EDM
Published August 2022
Search this document
Print this page
Email this page
View PDF
Previous
Next
About this Document
Purpose
Conventions
Text Conventions
Documentation and Training
Help and Support
Send Feedback
New in this Document
Notice about Feature Support
Installation and Commissioning Documentation
Zero Touch Capabilities
Auto-sense
Auto-sense Port States
DHCP Port Snooping
Auto-sense Logical Flowcharts
Auto-sense Configuration using CLI
Enable Auto-sense on Port(s)
Disable Auto-sense on Port(s)
Configure the Auto-sense Wait Interval
Configure Auto-sense IS-IS Authentication
Configure Auto-sense Access Ports
Disable Auto-sense DHCP Server Detection
Configure the Auto-sense Onboarding I-SID on the Switch
Configure a Auto-sense Global Data I-SID
Configure a Auto-sense Port Data I-SID
Configure Layer 2 Trusted Auto-sense Ports
Configure EAPoL Authentication Requirements for Auto-sense Fabric Attach Clients
Configure Auto-sense Fabric Attach (FA) Authentication
Configure an I-SID for Auto-sense Fabric Attach Clients
Configure a Management I-SID for Auto-sense Fabric Attach Proxy Switches
Display Auto-sense Configuration on the Switch
Auto-sense Configuration using EDM
Enable LLDP Authentication of IP Phones
Configure Auto-sense Voice Information for IP Phones
Disable Auto-sense DHCP Server Detection
Configure Auto-sense Onboarding I-SID Globally
Configure Auto-sense Data I-SID Globally
Configure Layer 2 Trusted Auto-sense Ports
Configure Auto-sense IS-IS Authentication
Configure Auto-sense Access Ports
Configure Auto-sense for Fabric Attach
Globals Field Descriptions
Auto-sense Port Configuration using EDM
Enable Auto-sense on Port(s)
Disable Auto-sense on Port(s)
Configure an Auto-sense Data I-SID on a Port
IP Phone Support
Auto-sense Voice
IP Phone Configuration using CLI
Configure Auto-sense Voice Information for IP Phones
Enable Auto-sense LLDP Authentication of IP Phones
Configure LLDP Vendor Specific Information
View LLDP Vendor Specific Information
View LLDP Neighbor Vendor Specific Information
Enable LLDP Voice Authentication on a Specific Port
IP Phone Configuration using EDM
View Vendor Specific Call Server Information
View Vendor Specific File Server Information
Zero Touch Deployment
Configuration Considerations
Zero Touch Provisioning Plus
ZTP+ Phases of Operation
ZTP+ Considerations
Configuring ZTP+ using the CLI
View ZTP+ Status
Zero Touch Fabric Configuration
Default IS-IS Parameters
Establishing IS-IS Adjacencies
LLDP Fabric Connect TLV
Configuration Example to Create an IS-IS Adjacency between the VSP 8600 Series and VOSS Switches
Segmented Management
Migration to Segmented Management Instance
Interface Types
CLIP
OOB
VLAN
Management Applications
DHCP Client for Segmented Management Instance
DHCP Client Restrictions
DHCP Option 43
DHCP Option 43 Configuration Examples
Dynamic Change Options for Segmented Management Instance Attributes
Segmented Management Instance Configuration using the CLI
Migrate a VLAN or CLIP IP address to the Segmented Management Instance
Configure a Segmented Management Instance Using quick-config-mgmt Utility
Create a Segmented Management Instance
Delete a Segmented Management Instance
Configure the DHCP Client for a Segmented Management Instance
Configure an IP Address for a Segmented Management Instance
Configure a Segmented Management Instance Interface as Default Topology IP
Configure Static Routes for a Management Instance
Configure Fragmented ICMP Packet Filtering on a Segmented Management Instance
View Fragmented ICMP packet filtering Statistics on a Segmented Management Instance
Configure MAC-offset for a Management VLAN Instance
Change Management Instance Attributes
View Segmented Management Instance Information
View IP Address Information for a Segmented Management Instance
View Segmented Management Instance Statistics
Redistribution of CLIP Segmented Management Instance Examples
Segmented Management Instance Configuration for Fabric Engine using EDM
Migrate an IP Address to a Segmented Management Instance
Configure a Segmented Management Instance
Configure DHCP Client for a Segmented Management Instance
View IPv4 ARP Information for a Segmented Management Instance
View IPv6 ND Information for a Segmented Management Instance
Configure IPv4 Static Routes for a Management Instance
Configure IPv6 Static Routes for a Management Instance
View IPv4 Operational Routes for a Segmented Management Instance
View IPv6 Operational Routes for a Segmented Management Instance
View Topology IP for a Segmented Management Instance
Configure an IP Address for a Segmented Management Instance
Configure an IPv6 Address for a Segmented Management Instance
View Segmented Management Instance Statistics
View IP Address Statistics for a Segmented Management Instance
View IPv6 Address Statistics for a Segmented Management Instance
View IP ICMP Statistics for a Segmented Management Instance
View IPv6 ICMP Statistics for a Segmented Management Instance
View UDP Statistics for a Segmented Management Instance
View TCP Statistics for a Segmented Management Instance
View TCP Connections and UDP Endpoints Statistics for a Segmented Management Instance
Basic Administration
Fundamentals
advanced-feature-bandwidth-reservation Boot Flag
spbm-config-mode boot flag
nni-mstp boot config flag
System Connections
Boot Sequence
System logon
System flags
Secure and Nonsecure Protocols
Client and Server Support
Password encryption
Enterprise Device Manager
Enterprise Device Manager access
Default user name and password
TLS server for secure HTTPS
Basic Configuration
Connect a Terminal
Changing passwords
Configuring system identification
Configuring the CLI Banner
Configure the Date
Enable Remote Access Services
Using Telnet to Log on to the Device
Enable the Web Management Interface
Enable the Web Server RO User
Configure the TLS Protocol Version
Access the Switch Through the Web Interface
Configuring the minimum version of the TLS protocol
Saving the configuration
Backing up configuration files
Resetting the platform
Remove a Software Build
Verification
Verify Boot Configuration Flags
Verify the Software Release
Display local alarms
Display log files
Basic Administration Procedures using CLI
Restarting the platform
Resetting the platform
Shutting Down the System
Configure the Default Ping and Traceroute Context
Calculate and Verify the MD5 Checksum for a File on the Switch
Calculate and Verify the MD5 Checksum for a File on a Client Workstation
Calculating the File Checksum
Resetting system functions
Sourcing a Configuration
Using the USB Device
Save a File to an External USB Device
Back Up and Restore the Compact Flash to an External USB Device
Copy Configuration and Log Files from a USB Device to Intflash
Display the Contents of a USB File
Move a File to or from a USB Device
Delete a file from a USB Device
Back Up Configuration Files to ZIP
Backing up configuration files to a ZIP file
Restoring configuration files from a ZIP file
Basic administration procedures using EDM
Reset the Platform
Show the MTU for the System
Save the Configuration
View UBoot Version and Status
Boot parameter configuration using the CLI
Modify the Boot Sequence
Configuring the remote host logon
Changing the primary or secondary boot configuration files
Configure Boot Flags
Reserve Bandwidth for Advanced Features
Display Advanced Feature Bandwidth Reservation Ports
Display the Boot Configuration
Configure Serial Port Devices
Run-time process management using CLI
Configuring the time zone
Configure the Run-time Environment
Configuring CLI logging
Configure System Parameters
Configuring system message control
Extending system message control
Hardware status using EDM
Configure Polling Intervals
View Power Supply Parameters
View System Temperature Information
Command Line Interface
Command Line Interface Fundamentals
CLI Command Modes
Default User Names and Passwords for CLI
Documentation convention for the port variable
Command completion
default command operator
no command operator
GREP with CLI show command
Timestamp in show command outputs
Authentication for Privileged EXEC Command Mode
CLI Procedures
Logging on to the software
View the Configuration
Saving the configuration
Configure the Web Server
Using GREP CLI show command filters
Enterprise Device Manager
Enterprise Device Manager Fundamentals
Supported Browsers
Enterprise Device Manager Access
Default User Name and Password for EDM
Device Physical View
EDM Window
Navigation Pane
Menu Bar
Toolbar
Content Pane
EDM user session extension
EDM interface procedures
Connect to EDM
Configure the Web Management Interface
Using the chassis shortcut menu
Using the port shortcut menu
Using a table-based tab
Monitor Multiple Ports and Configuration Support
Open Folders and Tabs
Undocking and docking tabs
Installing EDM help files
File Management in EDM
Copy a File
Display Storage Use
Display Internal Flash File Information
Display USB File Information
Image Management
Image Upgrades
Image Naming Conventions
Firmware Update And Verification With Digital Signed Certificate
Interfaces
File Storage Options
Boot Loader Image on Universal Hardware
Before You Upgrade
Important Upgrade Note for Systems using IPv6 Static Neighbors
Saving the Configuration
Upgrade the Software
Verifying the upgrade
Commit an upgrade
Downgrade the Software
Remove a Software Build
Update the Complex Programmable Logic Device (CPLD) Image
Address Resolution Protocol
Address Resolution Protocol
Reverse Address Resolution Protocol
ARP configuration using the CLI
Enabling ARP on a port or a VLAN
Enabling ARP proxy
View ARP Information
Configuring IP ARP static entries
Clearing ARP entries
Showing ARP table information
Configuring Gratuitous ARP
ARP configuration using Enterprise Device Manager
Enabling or disabling ARP on the brouter port or a VRF instance
Enabling or disabling ARP on a VLAN or a VRF instance
Viewing and managing ARP
Creating static ARP entries
Configuring ARP proxy
Alternative Routes
Route Preference
Preferences for Static Routes
Preferences for Dynamic Routes
Alternative Route Configuration using CLI
Enable IPv4 Alternative Routes
Enable IPv6 Alternative Routes
Alternative Route Configuration using EDM
Enable IPv4 Alternative Routes Globally
Enable IPv6 Alternative Routes Globally
IPv6 Alternative Routes Configuration Example
Application Telemetry
How Application Telemetry Works
Common Elements Between sFlow and Application Telemetry
Operational Considerations and Restrictions
Configuration Overview
Host Monitoring
Application Telemetry Configuration Using CLI
Configuring the Agent IP Address
Configuring an Analytics Engine and Enabling Application Telemetry Globally
View Application Telemetry Counters
Clearing Application Telemetry Counters
Application Telemetry Configuration Using EDM
Enabling Application Telemetry Globally
Viewing Application Telemetry Counters
Clearing Application Telemetry Counters
Viewing Application Telemetry Status
Bidirectional Forwarding Detection
BFD Fundamentals
BFD Overview
BFD Operation
BFD States
BFD Configuration
BFD Considerations
BFD Configuration using CLI
Enable BFD Globally
Configure BFD on an IPv4 Interface
Configure BFD on an IPv6 Interface
Enable BFD at the BGP Application Level
Enable BFD at the OSPF Application Level
Configure BFD on an IPv4 Static Route
Configure BFD on an IPv6 Static Route
Clear BFD Session Statistics
Display BFD Global Configuration
Display BFD Configuration for an IPv4 Interface
Display BFD Configuration for an IPv6 Interface
Display BFD IPv4 Neighbor Information
Display BFD IPv6 Neighbor Information
Display BFD Statistics
BFD Configuration using EDM
Enable BFD Globally
Display BFD Sessions
Configure BFD for an IPv4 Interface on a Port
Configure BFD for an IPv6 Interface on a Port
Configure BFD for an IPv4 Interface on a VLAN
Configure BFD for an IPv6 Interface on a VLAN
Enable BFD for BGP Peers
Enable BFD for BGP Peer Groups
Enable BFD for BGPv6 Peers
Enable BFD for OSPF on an IPv4 Port Interface
Enable BFD for OSPF on an IPv4 VLAN Interface
Enable BFD for OSPF on an IPv6 Port Interface
Enable BFD for OSPF on an IPv6 VLAN Interface
Configure BFD on an IPv4 Static Route
Configure BFD on an IPv6 Static Route
Display BFD Performance Counters
BGP
BGP fundamentals
Autonomous Systems
BGP 4 Byte AS Support
Routing information consolidation
BGP Communities
BGP path attributes
BGP Route Selection
BGP and dampened routes
BGP Updates
Equal Cost Multipath
MD5 message authentication
BGP and route redistribution
BGP+
ECMP with BGP+
BGPv6
Circuitless IP
BGP Configuration Considerations and Limitations
BGP configuration using CLI
Configure BGP
Configure 4-byte AS numbers
Configure Aggregate Routes
Configure Allowed Networks
Configure BGP Peers or Peer Groups
Configure a BGP Peer or Peer Group Password
Configure Redistribution to BGP
Configure redistribution to BGP+ for VRF 0
Configure AS Path Lists
Configure Community Lists
Configure Extended Community Lists
Configure an AS Number for a Non-default VRF
BGP Verification Using CLI
Viewing BGP aggregate information
Viewing IPv6 BGP+ aggregate information
Viewing CIDR routes
View BGP Configuration
Viewing BGP confederation
Viewing flap-dampened routes
Viewing global flap-dampening configurations
Viewing imported routes
Viewing BGPv6 imported routes
View BGP Neighbors Information
Viewing BGPv6 neighbors information
Viewing BGP network configurations
Viewing IPv6 BGP+ network configurations
Viewing BGP peer group information
Viewing BGP redistributed routes
Viewing BGPv6 redistributed routes
View a Summary of BGP Configurations
Viewing a summary of BGPv6 configurations
Viewing BGP routes
Viewing BGPv6 routes
BGP configuration using EDM
Configure BGP
Configure 4-byte AS numbers
Viewing BGP Global Stats
Configure Aggregate Routes
Configuring Aggregate IPv6 Routes
Configure Allowed Networks
Configuring Allowed IPv6 Networks
Configure BGP Peers
Configure BGPv6 Peers
Configure Peer Groups
View IPv6 Community Attributes
Display Dampened Routes Information
Configure Redistribution to BGP
Configure Redistribution to BGPv6
View BGP+ or BGPv6 Route Summary Information
Viewing BGP Route Summary
Configure an AS Path List
Configure a Community Access List
BGP Configuration Examples
IPv6 Tunnel Configurations for BGP+
eBGP+ peership between two switches with IPv6 Tunneling
iBGP+ peership on CLIP between two switches with IPv6 Tunneling
Native IPv6 eBGP peership between two switches on VRF
iBGP over User-created VRFs Configuration Example
Chassis Operations
Chassis operations fundamentals
Entity MIB – Physical Table
Power Manager
Software Lock-up Detection
Jumbo frames
Multi-speed Ports
Auto-Negotiation
Default Auto-Negotiation Behavior
10/100/1000 Mbps Port Considerations
25 GbE Port Considerations
40 GbE Port Considerations
Auto-Negotiation Advertisements
SynOptics Network Management Protocol
Channelization
Feature Interaction with Channelization
Forward Error Correction
IEEE 802.3X Pause Frame Transmit
Auto MDIX
Chassis operations configuration using the CLI
Enabling jumbo frames
Configuring port lock
Configuring SONMP
View the Topology Message Status
Associating a port to a VRF instance
Configure Ethernet Ports with Auto-Negotiation
Configure Auto-Negotiation Advertisements
Configure IEEE 802.3X Pause Frame Transmit
Enable Channelization
Configure FEC on a Port
Configuring Serial Management Port Dropping
Enable the Locator LED
Enable or Disable the USB Port
Configure Port Speed
Configure Ports Speeds for All VIM Ports
Display Ports Speeds for All VIM Ports
View the Management Port Statistics
Displaying Detailed Statistics for Ports
Chassis operations configuration using EDM
Edit System Information
Edit Chassis Information
View Physical Entities
View Entity Aliases
Viewing Entity Child Indexes
Configure System Flags
Configure Channelization
Configure Basic Port Parameters
Configure IEEE 802.3X Pause Frame Transmit
View the Boot Configuration
Configure Boot Flags
Reserve Bandwidth for Advanced Features
Enable Jumbo Frames
Configure the Date and Time
Configure CP Limit
Edit the Management Port Parameters
Automatically Reactivating the Port of the SLPP Shutdown
Edit Serial Port Parameters
Enable Port Lock
Lock a Port
View Power Information
View Power Status
View Fan Tray Information
View USB Port Information
View Topology Status Information
View the Topology Message Status
Configure a Forced Message Control Pattern
View Fan Information
Configure Ports Speeds for All VIM Ports
Graphing Chassis Statistics
Graphing Port Statistics
Viewing Chassis System Statistics
Viewing Chassis SNMP Statistics
Viewing Chassis IP Statistics
Viewing Chassis ICMP In Statistics
Viewing Chassis ICMP Out Statistics
Viewing Chassis TCP Statistics
Viewing Chassis UDP Statistics
Viewing Port Interface Statistics
Viewing Port Ethernet Errors Statistics
Dynamic Host Configuration Protocol and User Datagram Protocol Configuration
DHCP option 82
DHCP Suboptions
Agent Operations
DHCP Relay for IPv6
DHCP Relay Network Topology and Workflow
UDP broadcast forwarding
DHCP and UDP configuration using the CLI
Configure DHCP Parameters Globally
Showing DHCP relay information
Configuring DHCP option 82
Configuring DHCP relay on a port or VLAN
Displaying DHCP-relay Statistics for Specific Ports
Displaying DHCP-relay Statistics for all Interfaces
Configuring UDP broadcast forwarding
Configuring UDP protocols
Configuring a UDP port forward entry
Configuring the UDP port forwarding list
Showing UDP forward information
IPv6 DHCP Relay Configuration using CLI
Configure a DHCP Relay Forwarding Path
Configuring DHCP Relay for an interface
View DHCP Relay Information
Viewing IPv6 DHCP Relay Statistics
DHCP and UDP configuration using Enterprise Device Manager
Configuring DHCP on a brouter port or a VRF instance
Configuring BootP/DHCP on a VLAN or VRF instance
Configure DHCP Relay
Viewing DHCP relay configuration information
Viewing DHCP Statistics for an Interface
Graphing DHCP Statistics for a Port
Viewing DHCP Statistics for a Port
Displaying DHCP-relay Statistics for Option 82
Graphing DHCP Statistics for a VLAN
Managing UDP forwarding protocols
Managing UDP forwarding
Creating the forwarding profile
Managing the broadcast interface
Viewing UDP endpoint information
IPv6 DHCP Relay Configuration using EDM
Configure a DHCP Relay Forwarding Path
Configuring DHCP Relay for an interface
Modifying DHCP Relay for a VLAN
Modifying DHCP Relay for a port
Viewing DHCP Statistics for an IPv6 Interface
Viewing IPv6 DHCP Relay Statistics for a Port
Domain Name Service
DNS fundamentals
DNS configuration using CLI
Configuring the DNS client
Querying the DNS host
DNS configuration using EDM
Configure the DNS Client
Query the DNS Host
Distributed Virtual Routing
Distributed Virtual Routing Fundamentals
DvR Domain
DvR Controller
DvR Leaf Node
Eligibility Criteria for a Leaf Node
Summary of Controller and Leaf Node Functions
DvR backbone
DvR Backbone Members
DvR operation
ARP Learning
dvr-leaf-mode boot flag
In-band management
DvR deployment scenarios
DvR deployment in a single data center
DvR deployment in a dual data center
DvR Route Redistribution
Redistribution of IPv4 Local and Static Routes
Redistribution of Routes to OSPF or BGP
Route Redistribution and IS-IS Accept Policies
DvR Deployment for Wireless Roaming in Campus Deployments
Management I-SID Assignment to DvR Leaf
DvR Restrictions
Configuration Restrictions on a DvR Controller
Configuration Limitations on a DvR Leaf
Migrate from VRRP to DvR
DvR and IPv6 VRRP Coexistence on the Same I-SID
Configuration Examples
DvR configuration using the CLI
Configuring a DvR Controller
Disabling injection of default routes on a Controller
Configuring DvR route redistribution
Clearing DvR host entries
Configuring a DvR Leaf
Configuring vIST on a DvR Leaf node pair
Configure a Management VLAN on a DvR Leaf Node
Delete a Management VLAN on a DvR Leaf Node
Moving a vIST Leaf node pair from one domain to another
Moving a vIST Controller pair from one domain to another
Configure a non-DvR BEB to Join the DvR Backbone
DvR show commands
Viewing DvR summary
Viewing members of a DvR domain
Viewing DvR interfaces
Viewing DvR host entries
Viewing DvR routes
Viewing DvR database information
Viewing DvR Backbone Entries
Viewing DvR backbone members
Viewing Layer 3 VSN information
Viewing DvR domain redistribution information
Configure a DvR Solution
DvR Configuration Using the EDM
Configure a DvR Controller or a DvR Leaf Globally
View DvR Routes
View Members of a DvR Domain
View DvR Backbone Members
View DvR Interfaces
View DvR Host Entries
Clear DvR Host Entries
View Layer 3 VSN Information
View the DvR Database
View DvR Backbone Entries on a Controller
Extensible Authentication Protocol over LAN
EAPoL
EAP terminology
EAP Configuration Considerations
Configuration Process
EAP System Requirements
EAP Dynamic VLAN Assignment
Multiple Host Multiple VLAN
Multiple Host Multiple VLAN Usage
EAP Functionality on Flex UNI Ports
EAP and Fabric Attach
MAC Move Detection on EAP Ports
Auto-sense Ports
RADIUS-Assigned VLAN or VLAN:ISID Bindings
RADIUS Port and VLAN Based Attributes
RADIUS Configuration Prerequisites for EAP
RADIUS Accounting for EAP
RADIUS Dynamic User-Based Policies
NEAP host
NEAP Hosts on EAP Enabled Ports
NEAP MAC RADIUS Authentication
NEAP client
NEAP Client Re-Authentication
MAC Move for Authenticated Non-EAP Clients
NEAP MAC Learning and Authentication
EAP and NEAP Limitations
EAP and NEAP mac-max Settings
Example Scenarios
Multiple Host Single Authentication
EAP and NEAP MAC Clients on a Port with MHSA
Guest VLAN
Guest VLAN on a MHMV Port Usage Scenario
Guest VLAN on a MHSA Port Usage Scenario
Guest I-SID
EAP and NEAP separation
EAP and NEAP VLAN names
Fail Open VLAN with Continuity Mode
Fail Open I-SID with Continuity Mode
EAP Auto-ISID-Offset
Wake On LAN
EAPoL Configuration Using CLI
Globally enabling EAP on the device
Configure EAP on an Interface
Configuring EAP on a port
Configure an EAP-enabled RADIUS Server
Configure the Switch for EAP and RADIUS
Change the Authentication Status of a Port
Deleting an EAP-enabled RADIUS server
Configuring Fail Open VLAN
Display the Current EAP-Based Security Status
Displaying the port VLAN information
Configuring the format of the RADIUS password attribute when authenticating NEAP MAC addresses using RADIUS
Enabling RADIUS authentication of NEAP hosts on EAP enabled ports
Configuring the maximum MAC clients
Configuring maximum EAP clients
Configuring maximum NEAP clients
Configuring the Guest VLAN ID
Clearing NEAP session
Configuring EAP operational mode
Enabling dynamic changes to EAP sessions on a port
Configure EAP auto-isid-offset
Configure the Guest I-SID
Configure Fail Open I-SID
Configure Wake-On-LAN
Show the EAPoL Status of the Device
Show EAPoL Authenticator Statistics
View EAPoL Session Statistics
EAP Configuration Using Enterprise Device Manager
Globally Configure EAP on the Server
Configure EAP on a Port
Show the Port Access Entity Port Table
Show EAP Authentication
View Multihost Status Information
View EAP Session Statistics
Viewing EAPoL Authenticator Statistics
View NEAP MAC Information
ExtremeCloud IQ Agent
ExtremeCloud IQ Agent Configuration Considerations
Zero Touch Deployment
DHCP Option 43 Support
Considerations
ExtremeCloud IQ Agent Configuration using CLI
Configure ExtremeCloud IQ Agent
Configure Access to ExtremeCloud IQ
Configure Proxy Parameters
Display ExtremeCloud IQ Agent Information
Display ExtremeCloud IQ Agent Status
Reinstall ExtremeCloud IQ Agent Firmware
ExtremeCloud IQ Agent Configuration using EDM
Configure ExtremeCloud IQ Agent
Fabric Configuration Work Flow
Fabric Basics and Layer 2 Services
SPBM and IS-IS Infrastructure Configuration
SPBM and IS-IS Infrastructure Fundamentals
spbm-config-mode boot flag
vxlan-gw-full-interworking-mode Boot Configuration Flag
MAC-in-MAC encapsulation
I-SID
BCBs and BEBs
VLANs without member ports
Basic SPBM network topology
E-Tree and Private VLAN topology
IS-IS
Standard TLVs
IS-IS hierarchies
IS-IS PDUs
IS-IS configuration parameters
SPBM B-VLAN
Pre-populated FIB
RPFC
SPBM Unicast FIB
SPBM Restrictions
Network Load Balancing (NLB)
SPBM Script
IS-IS external metric
SPB Ethertype
Equal Cost Multipath Pathlist with Fabric Connect
FAN Transit
Dynamic Nickname Assignment
MSTP-Fabric Connect Multi Homing
Fabric Extend
Logical IS-IS interface
IS-IS Hello Padding
Adjusting the TCP Maximum Segment Size
Types of Fabric Extend Deployments
Fabric Extend Considerations
Fabric Attach
FA Zero Touch Client Attachment
Fabric Attach Components
Fabric Attach Server
FA Proxies and FA Clients
Fabric Attach operation
FA TLVs
FA Element Discovery
FA data processing
FA Server and I-SID-to-VLAN Assignments
FA management
FA message authentication and integrity protection
Fabric Attach and Switched UNI
Fabric Attach Deployment Scenarios
Fabric Attach Considerations
Endpoint Tracking
Extreme Management Center or ExtremeCloud IQ - Site Engine Integration
Deployment Examples
Configuration Fundamentals
SPBM and IS-IS infrastructure configuration using CLI
Running the SPBM script
Remove Existing SPBM Configuration
Configuring the IS-IS port interfaces using SPBM script
Removing specific IS-IS and MLT interfaces
Configure Minimum SPBM and IS-IS Parameters
Configure Minimum SPBM and IS-IS Parameters using auto-nni Command
Configure I-SIDs for Private VLANs
Displaying global SPBM parameters
Display Global IS-IS Parameters
Displaying IS-IS areas
Configuring SMLT parameters for SPBM
Configuring optional SPBM parameters
Configuring optional IS-IS global parameters
Configuring Optional IS-IS Interface Level 1 Parameters
Display IS-IS Interface Parameters
Display the IP Unicast FIB, Unicast FIB, and Unicast Tree
Display IS-IS LSDB and Adjacencies
Display IS-IS Statistics and Counters
Suspend Duplicate System ID Detection When Replacing a Switch
Configure Dynamic Nickname Assignment
Display Dynamic Nickname Assignment
Enable MSTP-Fabric Connect Multi Homing
Determine the Root Bridge in an MSTP-Fabric Connect Multi Homing Configuration
Increase the Number of SPB Nodes per Area
Fabric Extend configuration using the CLI
Configure Fabric Extend
Configure IS-IS Hello Padding
Adjust the TCP Maximum Segment Size
Configure BFD on a Fabric Extend Tunnel
Display IS-IS Logical Interfaces
Display BFD Fabric Extend Neighbor Information
Fabric Attach Configuration using the CLI
Configure Fabric Attach Globally
Configuring Fabric Attach discovery timeout
Configuring Fabric Attach assignment timeout
Enabling Fabric Attach on an interface
Configuring FA message authentication on an interface
Configuring the FA authentication key on an interface
Configure FA Management on a Port or MLT
View Fabric Attach Global Configuration Status
Viewing Fabric Attach interface configuration
Viewing Fabric Attach Discovered Elements
Viewing Fabric Attach I-SID-to-VLAN Assignments
Viewing Fabric Attach Statistics
Display Learned LLDP Neighbors
Display Switched UNI (ELAN) I-SID Information
Enabling or disabling FA Zero Touch Client Attachment
Displaying FA Zero Touch Client Attachment
Configure Endpoint Tracking Using CLI
Configure Endpoint Tracking Interfaces
Configure Endpoint Tracking Globally
Configure Endpoint Tracking Visibility Mode
Display Endpoint Tracking Configuration Information
IS-IS external metric configuration using the CLI
Matching metric type for IS-IS routes
Setting metric type for IS-IS routes
Setting metric type for IS-IS routes using global redistribute command
SPBM and IS-IS infrastructure configuration using EDM
Configure Required SPBM and IS-IS Parameters
Displaying SPBM and IS-IS summary information
View the SPBM I-SID Information
View Level 1 Area Information
Configure SMLT Parameters for SPBM
Enable or Disable SPBM at the Global Level
Configuring SPBM parameters
Displaying SPBM nicknames
Configure Interface SPBM Parameters
Configuring SPBM on an interface
View the IP Unicast FIB
View the IPv6 Unicast FIB
View the Unicast FIB
View LSP Summary Information
View IS-IS Adjacencies
Configure IS-IS Global Parameters
Configuring system-level IS-IS parameters
View IS-IS System Statistics
Configure IS-IS Interfaces
Configure IS-IS Interface Level Parameters
View IS-IS Interface Counters
View IS-IS interface control packets
View Statistical Graph of IS-IS Interface Counters
View Statistical Graph of IS-IS Interface Sending Control Packet
View Statistical Graph of IS-IS Interface Receiving Control Packets
Configure an IS-IS Manual Area
Configure Dynamic Nickname Assignment
Fabric Extend Configuration using EDM
Configure Fabric Extend Tunnels
Configure Fabric Extend Logical Interfaces
Adjust the TCP Maximum Segment Size
Display the Logical Interface Next Hop
Fabric Attach configuration using the EDM
Configure Fabric Attach Globally
Configure Fabric Attach I-SID-to-VLAN Assignments
Configure Fabric Attach Interface-level Settings
Viewing Fabric Attach discovered elements
Viewing FA statistics
View Global FA Statistics Graphically
View FA Port Statistics Graphically
Inserting a Zero Touch Client
Configure FA Zero Touch Client Auto Attach
Configure Endpoint Tracking Using EDM
Configure Endpoint Tracking Interfaces
Configure Endpoint Tracking Globally
Display Binding Information
SPBM configuration examples
Basic SPBM configuration example
Ethernet and MLT configuration
IS-IS SPBM global configuration
IS-IS SPBM Interface Configuration
Verify SPBM Operations
Fabric Extend Configuration Examples
Fabric Extend over Layer 2 Pseudowire
Fabric Attach configuration examples
Configure a Fabric Attach Solution
Configure Fabric Attach in an SMLT
Layer 2 VSN configuration
Layer 2 VSN configuration fundamentals
SPBM Layer 2 VSN
Fabric Connect Service Types
Transparent Port UNI
Transparent Port UNI over vIST
Switched UNI
SPBM sample operation—L2 VSN
Layer 2 VSN configuration using the CLI
Configure SPBM Layer 2 VSN
Configure a Global I-SID Name
Displaying C-VLAN I-SID information
Configuring an SPBM Layer 2 Transparent Port UNI
View all Configured I-SIDs
View C-MACs Learned on T-UNI Ports for an I-SID
Configure an SPBM Layer 2 Switched UNI on an MLT
Configuring an SPBM Layer 2 Switched UNI on a Port
View All Configured Switched UNI I-SIDs
Display C-VLAN and Switched UNI I-SID Information
Layer 2 VSN configuration using EDM
Configuring SPBM Layer 2 VSN
Displaying the remote MAC table for a C-VLAN
Configure UNI
Associate a Port and MLT with an I-SID for Elan Transparent
Viewing the I-SID forwarding database
Associate a Port and MLT with an I-SID for Elan
Viewing the I-SID interface
Modify Global I-SID Name
Layer 2 VSN configuration examples
Layer 2 VSN Configuration Example
Verifying Layer 2 VSN operation
Layer 2 VSN Example with VLAN ID Translation
Inter-VSN Routing Configuration
Inter-VSN routing configuration fundamentals
Inter-VSN routing
Inter-VSN routing configuration using the CLI
Configure SPBM Inter-VSN Routing
Inter-VSN routing configuration using EDM
Configure BEBs for Inter-VSN Routing
Configuring BCBs for Inter-VSN Routing
Inter-VSN Routing Configuration Example
Inter-VSN Routing with SPBM Configuration Example
Verifying Inter-VSN Routing operation
SBPM Reference Architectures
Campus Architecture
Large data center architecture
Fabric Layer 3 Services
IP Shortcuts Configuration
IP Shortcuts configuration fundamentals
SPBM IP Shortcuts
SPBM IPv6 Shortcuts
IPv6 Shortcuts Dependency on IPv4 Shortcuts
Circuitless IPv6 (CLIPv6)
Migrating the GRT to IPv6 Shortcuts
IPv6 Shortcut Restrictions and Considerations
ECMP with IS-IS
ECMP within IS-IS routes
ECMP Impact on IS-IS Route Selection for Inter-VRF Routes with vIST
IS-IS IP Redistribution Policies
IS-IS Accept Policies
IS-IS Accept Policies and DvR
IS-IS Accept Policy Filters
IS-IS Accept Policies for the GRT and VRFs
IS-IS Accept Policies for Inter-VRF Route Redistribution
IS-IS Accept Policy Considerations
Route Preference
Route Metric
IP Shortcuts configuration using the CLI
Configuring SPBM IPv4 Shortcuts
Configure SPBM IPv6 Shortcuts
Configuring inter-VRF IPv4 Accept Policies on VRFs
Configuring Inter-VRF IPv6 Accept Policies on VRFs
Configuring IS-IS Accept Policies
View IS-IS Accept Policy Information
Configuring IPv6 IS-IS Accept Policies
Displaying IPv6 IS-IS Accept Policy Information
IP Shortcuts configuration using EDM
Configure SPBM IP Shortcuts
Configuring IPv4 IS-IS redistribution
Configure IPv6 IS-IS Redistribution
Applying IPv4 IS-IS accept policies globally
Configure an IPv4 IS-IS Accept Policy for a Specific Advertising BEB
Configure an IS-IS Accept Policy to Apply for a Specific I-SID
Configure an IPv4 IS-IS Accept Policy for a Specific Advertising BEB and I-SID
Configuring an I-SID list for an IPv4 IS-IS accept policy
Configure an IPv4 IS-IS Accept Policy for a Specific I-SID List
Configure an IPv4 IS-IS Accept Policy for a Specific Advertising BEB and I-SID-list
Apply IPv6 IS-IS Accept Policies Globally
Configuring an IPv6 IS-IS Accept Policy for a specific Advertising BEB
Configuring an IPv6 IS-IS Accept Policy for a specific I-SID
Configuring an IPv6 IS-IS accept policy for a specific advertising BEB and I-SID
Configuring an I-SID List for an IPv6 IS-IS Accept Policy
Configuring an IPv6 IS-IS Accept Policy for a specific I-SID List
Configuring an IPv6 IS-IS Accept Policy for a specific Advertising BEB and I-SID List
IP Shortcuts SPBM Configuration Example
Layer 3 VSN Configuration
Layer 3 VSN Configuration Fundamentals
SPBM Layer 3 VSN
Enable/disable ICMP Response on VRFs/Layer 3 VSNs
Layer 3 VSN configuration using the CLI
Configure SPBM IPv4 Layer 3 VSN
Configure SPBM IPv6 Layer 3 VSN using CLI
Display SPBM IPv6 Unicast Forwarding Information Base
Display IS-IS Link State Database Information
Layer 3 VSN configuration using EDM
Configure SPBM IPv4 Layer 3 VSN
Configuring SPBM IPv6 Layer 3 VSN using EDM
Layer 3 VSN configuration example
VRF green configuration
VRF red configuration
Verifying Layer 3 VSN operation
Internet Key Exchange
IKEv2
Restrictions
IKE Configuration using CLI
Configure an IKE Phase 1 Profile
Create an IKE Phase 1 Policy
Configuring profile to be used for IKE Phase 1 policy
Configure IKE Phase 2 Perfect Forward Secrecy
Configure the IKE Authentication Method
Configure Dead-Peer Detection Timeout
Enable the Admin State of IKE Phase 1 Policy
Display IKE Profiles
Display IKE Policies
Display IKE Security Association
Configure an IKEv2 Profile
Display IKEv2 Profiles
Configure x509 Certificate Identity
IKE Configuration using EDM
Configure Digital Certificate Subject Name
Configure IKE Phase 1 Profile
Configure IKEv2 Profile
Configure IKE Phase 1 Policy
Display IKE Phase 1 Security Association
Display IKE V2 Security Association
IP Multicast
IP multicast fundamentals
Enabling multicast on the switch
Overview of IP multicast
IP Multicast over Fabric Connect
Internet Group Management Protocol
IGMP Layer 2 Querier
IGMP Layer 2 Querier limitations
Multicast access control
Multicast stream limitation feature
Multicast Router Discovery protocol
Multicast flow distribution over MLT
Multicast virtualization
Protocol Independent Multicast-Sparse Mode
Rendezvous point router
Bootstrap router
Shared trees and shortest-path trees
Receiver Joining a Group
Receiver leaving a group
Source sending packets to a group
Required elements for PIM-SM operation
PIM-SM simplified example
PIM-SM Static Source Groups
Join and prune messages
Register and register-stop messages
PIM-SMLT
Protocol Independent Multicast-Source Specific Multicast
SSM features
PIM-SSM architecture
PIM-SSM Static Source Groups
Implementation of SSM and IGMP
Configuration limitations
PIM passive interfaces
Multicast route statistics
IP multicast network design
Multicast scalability design rules
IP multicast address range restrictions
Multicast MAC Address Mapping Considerations
Dynamic multicast configuration changes
IGMPv3 backward compatibility
TTL in IP multicast packets
Multicast MAC filtering
Guidelines for multicast access policies
Split-subnet and multicast
Protocol Independent Multicast-Sparse Mode guidelines
PIM-SM and PIM-SSM Scalability
PIM General Requirements
PIM and Shared Tree to Shortest Path Tree Switchover
PIM Traffic Delay and SMLT Peer Reboot
Circuitless IP for PIM-SM
PIM-SM and Static RP
Static RP and Auto-RP
Static RP and RP Redundancy
Unsupported Static RP Configurations
Rendezvous Point Router Considerations
Layer 3 Multicast Extended VLANS
PIM-SM Design and the BSR Hash Algorithm
Candidate RP Considerations
PIM-SM RP Selection Algorithm Inconsistency Between Platforms
PIM-SM Receivers and VLANs
PIM Network with Non-PIM Interfaces
Source Filtering
Protocol Independent Multicast-Source Specific Multicast guidelines
Multicast for Multimedia
Layer 3 switch clustering and multicast SMLT
General guidelines
Multicast triangle topology
Square and full-mesh topology multicast guidelines
SMLT and multicast traffic issues
Protocol Independent Multicast over IPv6
PIM-SM over IPv6 features
Operational note for PIM-SM over IPv6
IPv6 interface multiple addresses
IP multicast configuration and DvR
IP multicast basic configuration using CLI
Configuring IP multicast in SMLT topologies
Configure PIM-SM Globally
Enable IPv6 PIM-SM Globally
Configure Global IPv6 PIM-SM Properties
Configure PIM on a VLAN
Configuring PIM on a port
Configuring SSM globally
Configuring IPv6 SSM globally
Configuring IGMP on a VLAN
Configuring IGMP ports
Configuring IGMP on a VRF
View IP Multicast Threshold Exceeded Statistics
IP multicast basic configuration using EDM
Configuring multicast on the switch
Enable IPv4 PIM-SM Globally
Enable IPv6 PIM-SM Globally
Enabling PIM on a port
Enabling IPv6 PIM on a port
Enable SSM Globally
Enable IPv6 SSM globally
Enabling PIM on a VLAN interface
Enabling IPv6 PIM on a VLAN interface
Configuring IGMP parameters on a port
Configuring IGMP parameters on a VLAN
Multicast Listener Discovery
MLD Fundamentals
MLD versions
MLD Querier
MLD snooping
MLD snooping configuration guidelines and restrictions
Limitations
MLD Configuration Using the CLI
Configuring MLD trap generation
Configuring MLD log status
Configuring MLD version
Configuring the MLD last listener query interval
Configuring the MLD query interval
Configuring the MLD query maximum response time
Configuring the MLD robustness
Enabling MLD snooping on a VLAN
Enabling MLD ssm-snooping on a VLAN
Display MLD Snooping Configuration Status
Display MLD Snooping Tracing Information
Display MLD Interface Information
Displaying MLD system parameters
Display MLD Cache Information
Display the MLD Group Information
View IPv6 MLD Host Cache
MLD Configuration Using EDM
Configuring MLD globally
Viewing the MLD SSM global information
MLD interface configuration
Configuring an MLD interface
Configuring MLD on a port
Configuring MLD on a VLAN
Configuring MLD snooping
Viewing the MLD snoop trace information
Viewing the MLD cache information
Viewing the MLD V2 cache information
Viewing IPv6 MLD host cache
Viewing the MLD source information
Viewing the MLD sender information
Viewing the MLD group information
PIM Configuration Using the CLI
Changing the interface status to passive
Changing the interface status to active
Configuring the PIM virtual neighbor
Configuring a candidate rendezvous point
Configuring static RP
Configuring IPv6 PIM static RP
Configuring a candidate BSR on a port
Configuring a candidate BSR on a VLAN
Enabling square-SMLT globally
PIM Configuration Using EDM
Enabling static RP
Enabling IPv6 static RP
Configuring a static RP
Configuring an IPv6 static RP entry
Viewing the active RP
Viewing the IPv6 active RP
Configuring a candidate bootstrap router
Viewing current BSR information
Changing VLAN interface type
Editing PIM interface parameters
Editing IPv6 PIM interface parameters
Configuring the PIM virtual neighbor
Viewing PIM-SM neighbor parameters
Viewing IPv6 PIM-SM neighbor parameters
Viewing IPv6 Neighbor Secondary Address
Viewing RP set parameters
Configuring a candidate RP
Enabling square-SMLT globally
Viewing IPv6 RP set parameters
Viewing IPv6 Mroute interface information
Viewing IPv6 Mroute next hop information
Configuring resource usage counter for IPv6 Mroute
Viewing IPv6 multicast route information
IGMP Configuration Using the CLI
Configuring multicast stream limitation on an Ethernet port
Configuring multicast stream limitation on a VLAN
Configuring VLAN multicast stream limitation members
Configuring multicast router discovery options
Configure Explicit Host Tracking
Configuring IGMP static members
Configuring SSM dynamic learning and range group
Changing the SSM range group
Configuring the SSM map table
Configuring multicast access control for an IGMP Ethernet port
Configuring multicast access control for a VLAN
Configuring Fast Leave Mode
Enabling fast leave mode on a port
Configuring IGMP fast leave members on a VLAN
Enable IGMP Layer 2 Querier
Enable IGMP Layer 2 Querier Address
IGMP configuration using EDM
Enabling IGMP snoop on a VLAN
Configuring IGMP interface static members
Configuring the SSM map table
Configure SSM Range and Global Parameters
Configuring multicast stream limitation on an interface
Configuring multicast stream limitation on a VLAN
Configuring multicast stream limitation on a port
Configuring multicast stream limitation members
Deleting multicast stream limitation member
Configuring the IGMP interface
Configuring IGMP sender entries
Configuring Fast Leave Mode
Configuring multicast access control for an interface
Viewing IGMP cache information
Viewing IGMPv3 cache
Viewing and editing multicast router discovery information
Viewing the IGMP router source list
Viewing IGMP snoop information
View IGMP Snoop Trace Information
View IGMP Group Information
Route management using the CLI
Configuring multicast stream limits
Configuring multicast static source groups
Configuring IP multicast software forwarding
Configuring the resource usage counter for multicast streams
Configuring prefix lists
Route management using EDM
View Multicast Route Information
View Multicast Next-Hop Information
View Multicast Interface Information
Adding new static source groups
Editing static source groups
Configuring IP multicast software forwarding
Configuring mroute stream limit
Configuring resource usage counter for multicast streams
Multicast route statistics configuration using the CLI
Enabling IP multicast route statistics
Clearing IP multicast route statistics
Monitoring IP multicast route statistics
Enabling IPv6 multicast route statistics
Clearing IPv6 multicast route statistics
Monitoring IPv6 multicast route statistics
Multicast route statistics configuration using EDM
Enabling IP multicast route statistics
Viewing IP multicast route statistics
Enabling IPv6 multicast route statistics
Viewing IPv6 multicast route statistics
IP Multicast over Fabric Connect
IP Multicast over Fabric Connect basic configuration
IP Multicast over Fabric Connect Fundamentals
IP Multicast over Fabric Connect
IP Multicast over Fabric Connect and Universal Plug and Play Filtering
How IP Multicast over Fabric Connect works
BEB as IGMP Querier
Switch Clustering at the Edge of the SPBM Network
Considerations when you connect an IP Multicast over Fabric Connect network to a PIM network
IP Multicast over Fabric Connect restrictions
SPBM Multicast FIB
Universal Plug and Play Filtering
IP Multicast over Fabric Connect Configuration using the CLI
Enabling IP Multicast over Fabric Connect globally
Display IP Multicast over Fabric Connect information
Display the Multicast FIB
Configure Universal Plug and Play (uPnP) Filtering
View uPnP Filtering information on an IGMP-enabled interface
IP Multicast over Fabric Connect configuration using the EDM
Configure IP Multicast over Fabric Connect Globally
View IP Multicast over Fabric Connect Routes
Displaying the UNI ports for IP multicast routes
Displaying the multicast FIB
IP Multicast over Fabric Connect configuration examples
IP multicast over Fabric Connect global configuration
IP Multicast over Fabric Connect Services Configuration
Layer 2 VSN Configuration Fundamentals
Layer 2 VSN IP Multicast over Fabric Connect
Layer 2 VSN Configuration using the CLI
Configuring Layer 2 VSN IP Multicast over Fabric Connect
View Layer 2 VSN IP Multicast over Fabric Connect information
View IGMP Information for Layer 2 VSN Multicast
View TLV Information for Layer 2 VSN IP Multicast over Fabric Connect
Layer 2 VSN Configuration using EDM
Viewing the IGMP interface table
Configure IP Multicast over Fabric Connect on a Layer 2 VSN
Layer 2 VSN with IP Multicast over Fabric Connect configuration example
IP Shortcuts Configuration
IP Multicast over Fabric Connect within the GRT
IP Shortcuts Configuration using the CLI
Configure IP Multicast over Fabric Connect within the GRT
Configuring the VRF timeout value
Configuring the Global Routing Table timeout value
Viewing IP Multicast over Fabric Connect within the GRT information
View IGMP Information for IP Multicast over Fabric Connect within the GRT
View TLV Information for IP Multicast over Fabric Connect within the GRT
IP Shortcuts configuration using the EDM
Configuring IP Multicast over Fabric Connect on a VLAN within the GRT
Configuring IP Multicast over Fabric Connect on a brouter port within the GRT
Configuring the Global Routing Table timeout value
IP multicast over SPBM within the GRT configuration example
Layer 3 VSN Fundamentals
Layer 3 VSN with IP Multicast over Fabric Connect
Layer 3 VSN Configuration using the CLI
Configuring Layer 3 VSN with IP Multicast over Fabric Connect
View Layer 3 VSN with IP Multicast over Fabric Connect Information
View IGMP Information for Layer 3 VSN Multicast
View TLV Information for a Layer 3 VSN with IP Multicast over Fabric Connect
Layer 3 VSN Configuration using EDM
Enable MVPN for a VRF
Configuring IP Multicast over Fabric Connect on a VLAN for Layer 3
Configuring IP Multicast over Fabric Connect on a brouter port for a Layer 3 VSN
Configuring IGMP on a VLAN interface for a Layer 3 VRF
Layer 3 VSN with IP Multicast over Fabric Connect configuration example
IPFIX
IPFIX Fundamentals
IPFIX Configuration Using CLI
Enabling IPFIX Globally
Displaying IPFIX Global Status
Configure the IPFIX Aging Interval
Configuring the IPFIX Collector
Displaying IPFIX Collector Information
Configuring an IPFIX Observation Domain
Display IPFIX Flows
IPFIX Configuration Using EDM
Enabling IPFIX Globally
Configure the IPFIX Collector
IPsec
IPsec Fundamentals
Authentication header
Encapsulating security payload
IPsec modes
Security association
Security policy
IPsec Limitations
IPsec configuration using CLI
Creating an IPsec policy
Enable an IPsec Policy
Creating an IPsec security association
Configuring an IPsec security association
Configuring an IPsec policy
Linking the IPsec security association to an IPsec policy
Enable IPsec on an Interface
Link an IPsec Policy to an Interface
Display IPsec Information on an Interface
Displaying configured IPsec policies
Displaying IPsec security association information
View IPSec Statistics
IPsec configuration using EDM
Create an IPsec Policy
Create an IPsec Security Association
Link the IPsec Security Association to an IPsec Policy
Enable IPsec on an IPv6 Interface
Enable IPsec on an IPv4 Interface
Link an IPsec Policy to an Interface
Display IPsec Interface Statistics
Graphing IPsec Interface Statistics
Display Switch Level Statistics for IPsec-Enabled Interfaces
Configure IPsec for the OSPF Virtual Link
IPsec configuration examples
IPsec configuration example
IPsec with ICMPv6 configuration example
OSPFv3 IPsec configuration example
OSPFv3 virtual link IPsec configuration example
IPsec configuration of TCP
IPv4 Routing Basics
IP routing operations fundamentals
IP addressing
Subnet Addressing
Supernet Addressing and CIDR
Loopback
Static routes
Static Route Tables
Routing Protocols
Black Hole Static Routes
VLANs and routing
Virtual Routing Between VLANs
Brouter Ports
Equal Cost Multipath
IP Source Routing
Multihoming
IPv4 ICMP Broadcast
IP routing configuration using the CLI
Enabling routing globally or on a VRF instance
Enabling routing on an IP interface
Deleting a dynamically learned route
Configuring IP route preferences
Flushing routing tables by VLAN or port
Assign an IP address to a Port
Viewing IP addresses for all router interfaces
Configure IP Routing Globally or for a VRF
Configure ECMP
Configure Static Routes
Configure a Black Hole Static Route
Configuring a default static route
Configure IPv4 Fragmented ICMP Packet Filtering
Enabling ICMP Router Discovery globally
Enabling or disabling IPv4 ICMP broadcast globally
Enabling or disabling IPv4 ICMP broadcast per VRF
View IPv4 ICMP Statistics
Configuring Router Discovery on a port or VLAN
Configure a CLIP Interface
Display BFD Configurations on the Loopback Interface
Display the IPv4 Global Configuration
Viewing TCP and UDP information
IP routing configuration using Enterprise Device Manager
Enabling routing for a router or a VRF instance
Deleting a dynamically-learned route
Configuring IP route preferences
Flushing routing tables by VLAN
Flushing routing tables by port
Assigning an IP address to a port
Assigning an IP Address to a VLAN
Viewing IP addresses for all router interfaces
Configure IP Routing Features Globally
Configure ECMP
Configure Static Routes
Deleting a static route
Configure a Default Static Route
Configure a Black Hole Static Route
Viewing IP routes
Configuring ICMP Router Discovery globally
Configure the ICMP Router Discovery Table
Configuring ICMP Router Discovery for a Port
Configure ICMP Router Discovery on a VLAN
Configure a Circuitless IPv4 Interface
Enabling OSPF on a CLIP interface
Enabling PIM on a CLIP interface
Enable BFD on a CLIP interface
Viewing TCP global information
Viewing TCP connections information
Viewing TCP listeners information
IPv6 Routing Basics
Origins of IPv6
Advantages of IPv6
Comparison of IPv4 and IPv6
IPv6 packet
IPv6 header
IPv6 extension headers
IPv6 address component summary
IPv6 address formats
Address types
Unicast addresses
Multicast addresses
Anycast
IP address prefix
Interface ID
How to write an IPv6 address
ICMPv6
Path MTU discovery
Routing
Route scaling
IPv6 Circuitless IP
Equal Cost Multipath
ECMP with static routes
Disable IPv6 ICMP multicast
Viewing IPv6 Connections
IPv6 Basic Configuration using CLI
Enable the IPv6–Mode Boot Config Flag
Configure an IPv6 Static Neighbor Address
Configure an IPv6 Interface
Assigning IPv6 addresses to a brouter port or VLAN
Configure IPv6 Route Preferences
View Global IPv6 Information
Create IPv6 Static Routes
View Routes Information
Creating an IPv6 CLIP interface
Enabling IPv6 ECMP
Configuring maximum number of ECMP paths
Enabling or disabling IPv6 ICMP multicast
Configure IPv6 Fragmented ICMP Packet Filtering
View IPv6 ICMP Statistics
Enabling Stateless Address Autoconfiguration
Configure Route Advertisement on the Management Port
Enable the Processing of Redirect Messages on the Management Port
Viewing IPv6 default routers
Configuring an IPv6 prefix list
Clear IPv6 Statistics
View IPv6 Statistics on an Interface
Viewing IPv6 Connections using CLI
View TCP and UDP Information
IPv6 Basic Configuration using EDM
Enable the IPv6–Mode Boot Config Flag
Configure IPv6 Globally
Viewing ICMP Statistics
Configure an IPv6 Interface
Viewing IPv6 Statistics for an Interface
Configuring an IPv6 brouter port interface
Configure an IPv6 VLAN Interface
Assigning IPv6 addresses to interfaces
Assigning IPv6 addresses to a brouter port interface
Assigning an IPv6 address to a VLAN
Create IPv6 Static Routes
Configuring IPv6 route preferences
View Route Information
Viewing IPv6 Default Routers
Configure a Circuitless IPv6 Interface
Configuring IPv6 Prefix List
Configuring an IPv6 Route Policy
Configuring IPv6 Route Redistribution Policies
Viewing IPv6 Connections using EDM
Viewing TCP global information
Viewing TCP connections information
Viewing TCP listeners information
Viewing UDP endpoint information
IPv6 Neighbor Discovery
Neighbor Discovery
ND messages
Neighbor discovery cache
Router discovery
Host autoconfiguration
Neighbor Discovery Configuration using CLI
Configuring an IPv6 discovery prefix
Configuring route advertisement
Configure the Neighbor Cache
View Cached Destination Information
Neighbor Discovery Configuration using EDM
Configuring an IPv6 discovery prefix
Configuring an IPv6 discovery prefix port
Configuring an IPv6 discovery prefix on a VLAN
Configuring route advertisement
Configuring route advertisement on an IPv6 interface for a brouter port
Configuring route advertisement on an IPv6 interface for a VLAN
Configuring the neighbor cache
Viewing cached destination information
IPv6-in-IPv4 Tunneling
Tunneling
Manually configured tunnels
Limitations
Tunneling Configuration using CLI
Configuring a tunnel
View Tunnel Interfaces
Modifying tunnel hop limits
Tunneling Configuration using EDM
Configuring a tunnel
Modifying tunnel hop limits
Modifying tunnel hop limits for a specific tunnel
Viewing IPv6 addresses on a tunnel
IPv6 Tunnel Configuration Example
Key Health Indicators (KHI)
Key Health Indicators Using the CLI
Display KHI Performance Information
Displaying KHI Control Processor Information
View KHI Segmented Management Instance Information
Clear KHI Information
Key Health Indicators Using EDM
Clearing KHI Statistics
Displaying KHI Port Information
View KHI Segmented Management Instance Statistics Information
Layer 2 Security
Layer 2 Security for IPv4 and IPv6 Deployments
Dynamic ARP Inspection (DAI)
First Hop Security
DHCPv6 security concerns
DHCPv6 Guard
DHCPv6 Guard Policies Configuration
RA Guard
RA Guard policies description
Capturing and verifying FHS specific packets against the configured policies
FHS limitations
Guidelines for FHS configuration
DHCP Snooping and Neighbor Discovery inspection
IP Source Guard
IPSG Limitations
Layer 2 Security Configuration Using the CLI
DHCP Snooping Configuration Using CLI
Enable or Disable DHCP Snooping globally
Enable or Disable DHCP Snooping on a VLAN
Configure Trusted and Untrusted Ports
Display DHCP Snooping Global Configuration
Display DHCP Snooping Interface Information
Add Static Entries to DHCP Snooping Binding Table
Clear Entries from DHCP Snooping Binding Table
Display DHCP Snooping Binding Table Information
Dynamic ARP Inspection Configuration Using CLI
Enable or disable Dynamic ARP Inspection on a VLAN
Configuring Trusted and Untrusted Ports
Display Dynamic ARP Inspection Interface Information
FHS configuration
Enable or Disable FHS Globally
Managing the FHS IPv6 access list
Displaying FHS IPv6 access list information
Managing the FHS MAC access list
Displaying FHS MAC access list information
Displaying current FHS configuration
DHCPv6 Guard Policy Configuration
Enable or Disable DHCPv6 Guard Globally
Manage the DHCPv6 Guard Policy
Attach a DHCPv6 Guard Policy to a Port
Configure DHCPv6 Guard in dhcp-guard Mode
Display the DHCPv6 Guard Policy
RA Guard Configuration
Enable or Disable RA Guard Globally
Manage the RA Guard Policy
Configure RA Guard on an Interface
Configure RA Guard in RA Guard Mode
Display RA Guard Configuration
IPv6 Neighbor Discovery inspection configuration
Enabling ND inspection globally
Clear Neighbor Discovery Inspection Statistics
Enabling Neighbor Discovery inspection on a VLAN
Enabling Neighbor Discovery inspection on a port
Viewing Neighbor Discovery inspection status globally
Viewing Neighbor Discovery inspection status on a port
Viewing Neighbor Discovery inspection statistics on a port
IPv6 DHCP Snooping Configuration
Creating a static Security Binding Table entry
Clearing a dynamic SBT entry
Enable IPv6 DHCP Snooping on a VLAN
Viewing IPv6 DHCP snooping and ND inspection status on a VLAN
Viewing SBT entries
IP Source Guard Configuration
Enable IP Source Guard on a Port for IPv4 Addresses
Disable IP Source Guard for IPv4 Addresses
View IP Source Guard Configuration on a Port
View IPv4 Address Bindings
Enable IP Source Guard on a Port for IPv6 Addresses
Disable IP Source Guard for IPv6 Addresses
Clear IP Source Guard Overflow Counters
View IP Source Guard Configuration for IPv6 Addresses
View IPv6 Address Bindings
Layer 2 Security Configuration using EDM
Dynamic ARP Inspection Configuration Using EDM
Configure Dynamic ARP Inspection on VLANs
Configure Dynamic ARP Inspection on Ports
Configure FHS Globals
IPv6 access list configuration
Creating IPv6 access list
View IPv6 access List
Delete the IPv6 Access List
MAC access list configuration
Create MAC Access List
View a MAC Access List
Delete a MAC Access List
DHCPv6 Guard Policy Configuration
Create DHCPv6 Guard Policy
View a DHCPv6 Guard Policy
Delete a DHCPv6 Guard Policy
RA Guard Policy Configuration
Create RA Guard Policy
View RA Guard Policy
Delete an RA Guard Policy
Port Policy Mapping Configuration
Create Port to Policy Mapping
View Port Policy Mapping
Delete Port Policy Mapping
DHCP Snooping Configuration Using EDM
Enable DHCP Snooping Globally
Configure DHCP Snooping on VLANs
Configure Trusted and Untrusted Ports
DHCP binding configuration
Create DHCP Binding Table Entries
Viewing DHCP Binding Information
SBT configuration
Create an SBT Entry
View SBT Entries
Delete an SBT Entry
IP Source Guard Configuration using EDM
Enable IP Source Guard on a Port for IPv4 Addresses
View IPv4 Address Bindings
Configure IP Source Guard on a Port for IPv6 Addresses
View IPv6 Address Bindings
Layer 2 security example scenarios
FHS Deployment Scenario
Creating FHS IPv6 ACL
Creating an FHS MAC ACL
Create a DHCPv6 Guard Policy for the Router
Create an RA Guard Policy for the Router
Attach FHS policies to the Interfaces
IPv6 DHCP Snooping and ND Inspection Configuration Example
Configure IP Source Guard
Licensing
Licensing Fundamentals
Factory Default Premier Trial License
License Types
Feature Licensing for Universal Hardware
Install and Uninstall Licenses on Universal Switches
License Installation using CLI
Install a License File
Revoke a License
Extend the Factory Default Premier Trial License
Show a License File
License Installation using EDM
Install a License File
Revoke a License
View License File Information
Link Aggregation Control Protocol
Link Aggregation Overview
MultiLink Trunking with LACP
Input/output port redundancy
LACP configuration considerations
Important Information and Restrictions
LACP with Simplified vIST/SPB NNI links
vIST VLAN IP addresses
Simplified vIST and egress port-based filters
LACP configuration using CLI
Configuring global LACP parameters
Configure LACP on a Port
Configure LACP on an MLT
Configuring LACP and Private VLANs
Viewing LACP configuration information
Displaying LACP Statistics for Specific Ports
LACP configuration using EDM
Configuring global LACP parameters
Configuring LACP parameters
Configure LACP on a Port
Viewing LACP Port Statistics
Link Layer Discovery Protocol
Link Layer Discovery Protocol (802.1AB) Fundamentals
Link Layer Discovery Protocol-Media Endpoint Discovery
Link Layer Discovery Protocol configuration using CLI
Configuring global LLDP transmission parameters
Configuring LLDP status on ports
Enable CDP Mode on a Port
Configure LLDP Tx-TLVs
Enable Dot3 LLDP TLVs
Configure LLDP MED TLVs for Transmission on Ports
View Global LLDP Information
View LLDP Neighbor Information
Viewing global LLDP statistics
Viewing Port-based LLDP Statistics
LLDP-MED Configuration Using CLI
Configure LLDP-MED Network Policies on Ports
Configure LLDP-MED Civic Address Location Information
Configure LLDP-MED Coordinate Based Location Information
Configure LLDP-MED Emergency Call Service Location
Display Local LLDP-MEDLocation Information
Display LLDP-MED Local Network Policies Configuration
Link Layer Discovery Protocol configuration using EDM
Configure LLDP Global Information
View the LLDP Port Information
View LLDP Transmission Statistics
View LLDP Reception Statistics
View LLDP Local System Information
View LLDP Local Port Information
View LLDP CDP Remote Information
View LLDP Neighbor Information
LLDP-MED Configuration Using EDM
View LLDP-MED Local Policy Information
Add LLDP-MED Local Location Information
View LLDP-MED Local PoE PSE Information
View LLDP-MED Neighbor Capabilities Information
View LLDP-MED Neighbor Policy Information
View LLDP-MED Neighbor Location Information
View LLDP-MED Neighbor PoE Information
View LLDP-MED Neighbor PoE PSE Information
View LLDP-MED Neighbor PoE PD Information
View LLDP-MED Neighbor Inventory Information
Link State Change Control
Link Debounce
Link State Change Control Using CLI
Controlling Link State Changes
Displaying Link State Changes
Configure Link Debounce
Link State Change Control Using EDM
Controlling Link State Changes
Configure Link Debounce
Link-state tracking (LST)
Link-state tracking (LST) Overview
LST configuration using CLI
Configuring LST
LST configuration using EDM
Configuring LST
Logs and Traps
Logs and Traps Fundamentals
Overview of Traps and Logs
Secure Syslog
Simple Network Management Protocol
Log Message Format
Log Files
Log File Transfer
Email Notification
Log Configuration Using CLI
Configure a UNIX System Log and Syslog Host
Configuring Secure Forwarding
Installing Root Certificate for Syslog Client
Configuring Logging
Configuring the Remote Host Address for Log Transfer
Configuring System Logging
Configuring System Message Control
Extending System Message Control
Viewing Logs
Configuring CLI Logging
Configure Email Notification
Configure Certificate Authority Trustpoint for Syslog
Variable Definitions
Configure the Minimum Version of TLS for Syslog
Variable Definitions
Log Configuration Using EDM
Configure the System Log
Configure the System Log Table
Configure the Syslog Certificate Authority Common Name
Configure Email Notification
SNMP Trap Configuration Using CLI
Configuring an SNMP Host
Configuring an SNMP Notify Filter Table
Enabling SNMP Trap Logging
SNMP Trap Configuration Using EDM
Configure an SNMP Host Target Address
Configure Target Table Parameters
Configure SNMP Notify Filter Profiles
Configure SNMP Notify Filter Profile Table Parameters
Enable Authentication Traps
MACsec
MACsec Fundamentals
MACsec keys
MACsec Security Modes
Connectivity Associations and Secure Channels
MACsec 2AN and 4AN mode
MACsec components
MACsec Key Agreement Protocol
MACsec Encryption Cipher Suites
MACsec Operation
MACsec Configuration Using CLI
Configure MACsec Encryption on a Port
Configure a MACsec Cipher Suite on a Port
Configure a Connectivity Association
Update the Connectivity Association for a port
View MACsec Status
View the MACsec Connectivity Association Details
Configure Static MACsec using CLI
Enable Static MACsec on a Port
Configure the Confidentiality Offset on a Port
Configure MKA MACsec using CLI
Create an MKA Profile
Apply an MKA Profile to a Port
Configure MKA Actor Priority
Enable MKA on a Port
Configure MKA Confidentiality Offset
Configure MKA Replay Protect
Configure SCI Tagging for a MACsec Enabled Switch
Display MKA Profiles
Display MKA Participants
MACsec Configuration using EDM
Configure Connectivity Associations
Associate a Port with a Connectivity Association
Configure MKA MACsec using EDM
Configure an MKA Profile
Apply an MKA Profile to a Port
Enable MKA on a Port
Configure MKA Actor Priority
MACsec Performance
MACsec Statistics
Interoperability Behaviors
View MACsec Statistics using CLI
Viewing MACsec Statistics
Clear MACsec Statistics
View MACsec Statistics using EDM
View MACsec Interface Statistics
View Secure Channel Inbound Statistics
View Secure Channel Outbound Statistics
MultiLink Trunking and Split MultiLink Trunking
Virtual Inter-Switch Trunk (vIST)
Simplified Virtual-IST
MultiLink Trunking
Split MultiLink Trunking
SLPP Guard
MLT and SMLT Configuration Requirements
MLT and Private VLANs
MLT and SMLT link aggregation configuration using the CLI
Configure an MLT
Viewing MLT Statistics
Viewing MLT port members
Adding ports to an MLT LAG
Removing ports from an MLT LAG
Create an SMLT from an Existing MLT
Virtual interswitch trunk (vIST)
Creating a Virtual IST
Viewing vIST Statistics
Editing a virtual IST
Configuring Simplified vIST in SMLT topologies
Viewing all ports configured for SMLT
Viewing information about collision errors
Viewing information about Ethernet errors
SLPP Guard configuration
Configuring SLPP Guard
Reenabling an operationally disabled port
Viewing SLPP Guard status
MLT and SMLT Link Aggregation Configuration using EDM
Adding a multilink or LACP trunk
Adding ports to an MLT
Viewing SMLT Statistics
Viewing MLT Interface Statistics
Viewing MLT Ethernet Error Statistics
Viewing trunks
Create a Virtual IST using EDM
Editing a virtual IST
Configuring Simplified vIST in SMLT topologies
SLPP Guard configuration
Configuring SLPP Guard
Reenabling an operationally disabled port
Viewing SLPP Guard status
MLT Configuration Examples
MultiLink Trunking
MultiLink Trunking with Link Aggregation Control Protocol
MLT network topology and configuration reference
Example 1: Switch-to-switch MLT
Example 2: Switch-to-server MLT
Example 3: Client/Server MLT
Network Operating System Personalities
Change the Network Operating System Personality
Network Time Protocol
NTP fundamentals
NTP Overview
NTP system implementation model
Time distribution within a subnet
Synchronization
NTP Modes of Operation
NTP authentication
Configuring NTP Using CLI
Enable NTP Globally
Add an NTP Server
View NTP Statistics
Configure Authentication Keys
Configuring NTP Master Mode
Creating NTP Restrict Entries
Configuring NTP Using EDM
Configure NTP Globally
Add an NTPv4 Server
Configure Authentication Keys for NTPv4
Creating NTPv4 Restrict Entries
OSPF
OSPF fundamentals
OSPF overview
OSPFv3
Dijkstras algorithm
Autonomous system and areas
OSPF neighbors
Router types
OSPF Interfaces
OSPF and IP
OSPF Packets
Intra-area Link-state Advertisements
ASE routes
OSPF virtual links
OSPF ASBRs
OSPF metrics
OSPF security mechanisms
IPsec Support with OSPFv3
OSPF and route redistribution
ECMP with OSPFv3
OSPFv3 and Route Redistribution
OSPF configuration considerations
OSPF host route advertisements and nonbackbone areas
OSPF with switch clustering
OSPF Graceful Restart
Helper Mode
Open Shortest Path First guidelines
OSPF configuration using CLI
Configuring OSPF globally
Configure OSPF for a Port or VLAN
Viewing OSPF errors on a port
Configuring OSPF areas on the router
Viewing the OSPF area information
Configuring OSPF aggregate area ranges on the router
Viewing the OSPF area range information
Enabling automatic virtual links
Configuring an OSPF area virtual interface
Configuring an OSPF area on a VLAN or port
Configuring an OSPF host route
Configuring OSPF NBMA neighbors
Enabling or disabling Helper mode for OSPFv2
Apply OSPF Route Acceptance Policies
View the OSPF Configuration Information
Viewing the OSPF link-state database
Viewing the OSPF external link-state database
Configuring route redistribution to OSPF
Viewing the OSPF redistribution configuration information
Configuring interVRF route redistribution for OSPF
Forcing shortest-path calculation updates
Viewing the OSPF default cost information
Viewing the OSPF timer information
Viewing the OSPF neighbor information
Viewing the OSPF authentication information
View the OSPF Interface Statistics
View OSPF Range Statistics
Clearing IP OSPF Statistics
Showing OSPF Error Statistics on a Port
Viewing Basic OSPF Statistics for a Port
Showing Extended OSPF Statistics
Viewing the OSPF virtual link information
Viewing the VRF configurations
Viewing the VRFIDS
OSPFv3 Configuration using CLI
Configuring OSPF globally
Creating an OSPF area
Creating OSPF area ranges
Creating an OSPF virtual link
Configure IPsec for the OSPF Virtual Link
Configuring OSPF default metrics
Configuring OSPF on a port or VLAN
Configuring OSPF on a tunnel
View OSPFv3 Information
Viewing OSPFv3 Default Cost Information
Adding an NBMA neighbor
Configuring link LSA suppression
Configuring Route Redistribution to OSPFv3 in GRT mode
Viewing the Status of OSPFv3 Redistribution
View OSPFv3 Statistics
Clear OSPFv3 Statistics
Disabling Helper mode for OSPFv3
OSPF configuration using EDM
Configuring OSPF globally
Enabling OSPF globally
Configuring global default metrics
Configuring an OSPF interface
Changing an OSPF non-passive interface type
Changing an OSPF passive interface type
Configuring NBMA interface neighbors
Configuring OSPF interface metrics
Viewing all OSPF-enabled interfaces
Configure OSPF on a Port
Viewing Port OSPF Statistics
Graphing OSPF Statistics for a Port
Configuring OSPF on a VLAN
Graphing OSPF Statistics for a VLAN
Viewing graphs for OSPF on a VLAN
Creating stubby or not-so-stubby OSPF areas
Configuring stub area metrics advertised by an ABR
Inserting OSPF area aggregate ranges
Enabling automatic virtual links
Configuring a manual virtual interface
Viewing virtual neighbors
Configuring host routes
Enabling ASBR status
Managing OSPF neighbors
View the Link-State Database
View the Local Link-State Database
View AS-Scope Link-State Advertisements
View Virtual Links in the Link-State Database
View the Area LSA Count
View OSPF Statistics
Configure Route Redistribution to OSPF
Forcing shortest-path calculation updates
OSPFv3 Configuration using EDM
Configuring OSPFv3 globally
Creating an OSPFv3 Area
Create OSPFv3 Area Ranges
Creating an OSPFv3 Virtual Link
Create an OSPF Interface on a Brouter Port
Create an OSPF VLAN Interface
Create an OSPF Interface on a Tunnel
Viewing the AS-scope link-state database
Viewing the area-scope LSDB
Viewing the link-scope LSDB
Adding an NBMA neighbor
Configuring Route Redistribution to OSPFv3
Modify an OSPFv3 Interface
Viewing OSPFv3 neighbors
Viewing virtual neighbors
View OSPFv3 Statistics
OSPFv3 Configuration Example
Port Performance Management
Digital Diagnostic Monitoring
Port Performance Management Using CLI
Configure DDM
View DDI Port Information
View DDI Temperature Information
View DDI Voltage Information
Port Performance Management using EDM
View DDI Information
Power over Ethernet Fundamentals
PoE Overview
PoE Detection Types
Power Usage Threshold
Port Power Limit
Port Power Priority
PoE/PoE+ Allocation Using LLDP
Fast PoE and Perpetual PoE
PoE Ports in EDM
Power over Ethernet Configuration using CLI
Disabling PoE on a port
Configure PoE Detection Type
Configuring PoE Power Usage Threshold
Configure Power Limits for Channels
Configuring Port Power Priority
Enable Fast PoE Globally
Enable Perpetual PoE Globally
Enable Fast PoE on a Port
Enable Perpetual PoE on a Port
Display Global PoE Configuration
Displaying PoE Port Status
Displaying Port Power Measurement
Power over Ethernet configuration using EDM
Configure PoE Globally
Configure PoE on Ports
Power Savings
Energy Saver
Energy Efficient Ethernet
Power Savings Configuration Using CLI
Enable Energy Saver on Ports
Create an Energy Saver Schedule
Enable Energy Saver Globally
Enable and Configure Energy Saver using Quick Configuration
Activate or Deactivate Energy Saver Manually
Energy Saver Show Commands
Display Energy Saver Global Information
Display Energy Saver Interface Information
Display Energy Saver Power Savings Information
Display Energy Saver Schedule Information
Enable Energy Efficient Ethernet (EEE)
Display Energy Efficient Ethernet (EEE) Statistics
Clear Energy Efficient Ethernet (EEE) Statistics
Power Savings Configuration Using EDM
Enable Energy Saver Globally
Configure Energy Saver Schedule
Enable Energy Saver or EEE on Ports
Enable Energy Saver or EEE on Ports
Enable Energy Saver or EEE on Ports
View Energy Savings
Display Energy Efficient Ethernet Statistics
Quality of Service
QoS fundamentals
Introduction to QoS
Traffic management
Differentiated Services (DiffServ)
Traffic traversing the switch
Classification and mapping
Service classes
Internal QoS level
Ingress mappings
Egress mappings
Port-Based Rate Limiting, Policing, and Shaping
Ingress port-rate limiter
Queuing
CPU Queues
Queue profiles
Configuration considerations
QoS support for 10 GbE interface in 1GbE mode
802.1p and 802.1Q Best Practices
Network congestion and QoS design
Layer 2 and Layer 3 trusted and untrusted ports
Broadcast and multicast traffic bandwidth limiters per ingress port
QoS and VoIP
QoS re-marking on a Transparent Port UNI
QoS and channelization
QoS examples and Best Practices
Basic DiffServ configuration using CLI
Enabling DiffServ on a port
Configuring Layer 3 trusted or untrusted ports
Configuring Layer 2 trusted or untrusted ports
Viewing the port 802.1p override status
Configuring the port QoS level
Basic DiffServ configuration using EDM
Enabling DiffServ for a port
Configuring Layer 3 trusted or untrusted ports
Configuring Layer 2 trusted or untrusted ports
Configuring the port QoS level
QoS configuration using CLI
Configuring broadcast and multicast bandwidth limiting
Viewing the port-based shaper information
Configuring the port-based shaper
Configuring a port-based policer
Configuring the ingress port-rate limiter
View the Ingress Port-Rate Limit Information
Viewing Ingress Port-rate Limit Statistics
Configuring ingress mappings
Configuring egress mappings
View Port Egress CoS Queue Statistics
Clearing port egress CoS queue statistics
View CPU Queue Statistics
Clearing CPU queue statistics
Configure an Egress QoS Queue Profile
Viewing Logical Interface CoS Queue Statistics
Clearing Logical Interface CoS Queue Statistics
QoS configuration using EDM
Configuring port-based shaping
Configure Port-Based Policing
Configuring ingress port-rate limiter
Graphing Stat Rate Limit Statistics for a Port
Modifying ingress 802.1p to QoS mappings
Modifying ingress DSCP to QoS mappings
Modifying egress QoS to 802.1p mappings
Modifying egress QoS to DSCP mappings
Viewing port egress CoS queue statistics
Clearing CPU statistics for the chassis
Viewing CPU queue statistics
Configuring an egress QoS queue profile
Editing queue profile information
Configuring Rate Limits
RADIUS
RADIUS Fundamentals
RADIUS Server Support for IPv6
How RADIUS Works
Configuration of the RADIUS Server and Client
RADIUS Authentication
Use of RADIUS to Modify User Access to CLI Commands
RADIUS Accounting
RFC 4675 RADIUS Attributes: Egress VLAN
RADIUS Server Reachability
RFC 3580 RADIUS Attributes: IEEE 802.1X Remote Authentication Dial In User Service
RFC 5176 — Dynamic Session Change
RADSec
RADIUS configuration using CLI
Configure RADIUS Attributes
Configuring RADIUS profile
Enabling RADIUS authentication
Enabling RADIUS accounting
Enabling RADIUS-SNMP accounting
Configuring RADIUS accounting interim request
Configure RADIUS Authentication and RADIUS Accounting Attributes
Add a RADIUS Server
Modify RADIUS Server Settings
View RADIUS Information
View RADIUS Server Information
Showing RADIUS Server Statistics
Configuring RADIUS server reachability
Displaying RADIUS server reachability
Showing RADIUS SNMP configurations
Displaying RADIUS dynamic server information
Configuring a RADIUS dynamic-server client
RADSec Configuration Using CLI
Create and Configure a RADIUS Secure Profile
Display RADIUS Secure Profile information
Associate a RADSec Profile with a RADIUS Server
Configure RADSec Secure Mode
Enable RADSec
Change the logging level for RADSec secure profile
Display Log Information for Secure RADIUS Instance
RADIUS configuration using Enterprise Device Manager
Enable RADIUS Authentication
Enable RADIUS Accounting
Disable RADIUS Accounting
Enable RADIUS Accounting Interim Request
Add a RADIUS Server
Showing RADIUS Server Statistics
Reauthenticate the RADIUS SNMP Server Session
Configure RADIUS SNMP
Modify a RADIUS Configuration
Delete a RADIUS Configuration
Configure RADIUS Server Reachability
Configure a RADIUS Dynamic-server Client
Displaying RADIUS CoA Disconnect Statistics
Displaying RADIUS CoA Reauthenticate Statistics
Displaying RADIUS CoA Statistics
RADSec Configuration Using EDM
Configure a RADIUS Secure Profile
RADIUS Attributes
Vendor Specific Attributes
RADIUS Vendor Specific Frame Format
FA-VLAN-ISID
FA-Client-Type
Extreme-Dynamic-MHSA
Extreme-Dynamic-ACL
Extreme-Dynamic-Config
Examples
EAP-Port-Priority
IETF Attributes
VLAN RADIUS Attributes
EGRESS-VLAN-ID
EGRESS-VLAN-NAME
RADIUS Tunnel Attributes
Representational State Transfer Configuration Protocol (RESTCONF)
Representational State Transfer Configuration Protocol (RESTCONF) Fundamentals
RESTCONF configuration using CLI
Enable the RESTCONF Server
Configure HTTPS Access to the RESTCONF Server
Modifying the RESTCONF Server Settings
Showing the RESTCONF Configuration Information
Show Conflicting Interface Name Information
Show Special Characters in VLAN or MLT Names
RESTCONF Configuration using EDM
Configuring the RESTCONF Server
Use Representational State Transfer Configuration Protocol (RESTCONF) to Configure a Switch
RESTCONF Operational Behavior Examples
RIP
RIP fundamentals
Routing Information Protocol
RIP and route redistribution
RIPng fundamentals
RIP configuration using CLI
Configuring RIP globally
Configuring RIP on an interface
Configuring route redistribution to RIP
Configuring interVRF route redistribution for RIP
Forcing a RIP Update for a Port or VLAN
Viewing the RIP redistribution configuration information
RIPng Configuration using CLI
Configuring RIPng globally
Configuring RIPng on an interface
Configuring RIPng custom values
Configuring RIPng route distribution
RIP configuration using EDM
Configuring RIP globally
Viewing RIP status
Configuring RIP interface compatibility
Configuring RIP on an interface
Configuring RIP on a port
Configuring RIP on a VLAN
Configuring route redistribution to RIP
RIPng Configuration using EDM
Configuring RIPng globally
Configuring an IPv6 RIPng interface
Configuring an IPv6 RIPng VLAN interface
Configuring an IPv6 RIPng brouter port interface
Graphing IPv6 RIPng statistics
Configuring route redistribution to RIPng
Viewing stats for RIPng interfaces
Remote Monitoring
Remote Monitoring
RMON 2
RMON2 Considerations
RMON Configuration Using CLI
Configuring RMON
Enable Remote Monitoring on an Interface
Enable RMON2 on a Segmented Management Instance Interface
View RMON Information
Displaying RMON Address Maps
View RMON Statistics
Displaying RMON Statistics for Specific Ports
View RMON Application Host Statistics
View RMON Control Tables
Displaying RMON Network Host Statistics
View RMON Protocol Distribution Statistics
Displaying RMON Status
View the RMON2 Configuration State of Management Interfaces
RMON Configuration Using EDM
Enabling RMON Globally
Enabling RMON on a Port or VLAN
Enabling RMON1 History
Disabling RMON1 History
Viewing RMON1 History Statistics
Creating an RMON1 Alarm
Viewing RMON1 Alarms
Deleting an RMON1 Alarm
Creating an RMON1 Event
Viewing RMON1 Events
Deleting an Event
Viewing the RMON Log
Enabling RMON Statistics
Viewing RMON Statistics
View the Protocol Directory
Viewing the Data Source for Protocol Distribution Statistics
Viewing Protocol Distribution Statistics
Viewing the Host Interfaces Enabled for Monitoring
Viewing Address Mappings
Viewing the Data Source for Host Statistics
Viewing Network Host Statistics
Viewing Application Host Statistics
RMON Alarm Variables
Route Filtering and IP Policies
Route Filtering and IP Policies
Accept Policies
Redistribution Filters
Announce Policies
Route Filtering Stages
Prefix list
Route Policy Definition
IP policy configuration using the CLI
Configuring prefix lists
Configure IP Route Policies
Configure a Policy to Accept External Routes from a Router
Apply OSPF Accept Policy Changes
Configure Inter-VRF Redistribution Policies
IP Policy Configuration using Enterprise Device Manager
Configuring a prefix list
Configure a Route Policy
Apply a Route Policy
Configure an OSPF Accept Policy
Configuring inbound/outbound filtering policies on a RIP interface
Deleting inbound/outbound filtering policies on a RIP interface
Routed Split MultiLink Trunking
RSMLT
IPv6 RSMLT
SMLT and RSMLT Operation in Layer 3 Environments
Router R1 Failure
Router R1 Recovery
RSMLT Network Design and Configuration
RSMLT Edge Support
RSMLT Configuration using CLI
Configure RSMLT on a VLAN
Enable RSMLT Edge Support
View RSMLT Information
RSMLT Configuration using EDM
Configuring RSMLT on a VLAN
Enabling RSMLT Edge support
View and Edit IPv4 RSMLT Local Information
Modify the IPv6 RSMLT Local Information
Modify IPv6 RSMLT Peer Information
View IPv4 RSMLT Peer Information
View IPv6 RSMLT Edge Peers
View IPv4 RSMLT Edge Support Information
Secure Shell
Secure Shell Fundamentals
Outbound Connections
SSH Version 2
User ID Logs
User Key Files
Block SNMP
SCP command
Third-Party SSH and SCP Client Software
DSA Authentication Access Level and File Name
RSA Authentication Access Level and File Name
SSH rekeying
Configure Secure Shell using CLI
Enabling the SSHv2 server
Changing the SSH server authentication mode
Configure SSH Authentication Type
Enable DSA Authentication
Generate the DSA Host Key
Generate a DSA User Key
Import DSA and RSA Private or Public Keys
Configure Encryption Type
Configure the Key-Exchange Method
Configure the Maximum Number of SSH Sessions
Enable SSH Password Authentication
Configure the SSH Connection Port
Enable RSA Authentication
Generate an RSA Host Key
Generate an RSA User Key
Enable SSH Secure Mode
Configure the SSH version
Configure the SSH Authentication Timeout
Resetting the SSH
Configure X.509 V3 Authentication
Verify and Display SSH Configuration Information
Connect to a Remote Host using the SSH Client
Generate User Key Files
Manage an SSL Certificate
Disabling SFTP without disabling SSH
Enabling SSH rekey
Configuring SSH rekey data-limit
Configuring SSH rekey time-interval
Display SSH Rekey Information
Enabling or Disabling the SSH Client
Downgrading or Upgrading from Releases that Support Different Key Sizes
Secure Shell configuration using Enterprise Device Manager
Change Secure Shell Parameters
Security
Security Fundamentals
Security overview
Security Modes
hsecure Mode
CLI Passwords
Port Lock feature
Access Policies for Services
User-based policy support
Denial-of-Service Attack Prevention
Authentication for Privileged EXEC Command Mode
Configuration Considerations
Interoperability configuration
Unicast Reverse Path Forwarding (uRPF)
Digital Certificate/PKI
Certificate Order Priority
Two-Factor Authentication for SSH
Security Configuration using CLI
Enable hsecure
Change an Invalid-Length Password
Configure New Passwords
Configuring directed broadcast
Preventing certain types of DOS attacks
Configuring port lock
Unicast Reverse Path Forwarding configuration using CLI
Enable urpf-mode Boot Flag
Configuring unicast reverse path forwarding on a port
Configuring unicast reverse path forwarding on a VLAN
Viewing unicast reverse path forwarding configuration on a port
Viewing unicast reverse path forwarding configuration on a VLAN
Configuring Digital Certificates using CLI
Configure Device Subject Parameters
Configure Subject Alternative Names
Generate the Key Pair
Configure a Trustpoint CA
Install the Certificate
Generate the Certificate Signing Request
Display Configured Key Pairs
View the Certificate Details
Configure a Web Server Certificate
Configure Certificate Authority Trustpoint for Syslog
Variable Definitions
Digital certificate configuration examples
Obtain an Online CA-signed Subject Certificate
Install an Offline CA Certificate
Configuring X.509 V3 certificates for SSH Two Factor Authentication
Configure TCP Keepalive and TCP Timestamp
Enable Authentication for Privileged EXEC Command Mode using CLI
Enable MAC Move Protection on vIST
Security Configuration using EDM
Enable Port Lock
Lock a Port
Change Passwords
Configure Directed Broadcast on a VLAN
Unicast Reverse Path Forwarding configuration using EDM
Configure Reverse Path Checking on a Port
Configure Reverse Path Checking on an IPv6 Port
Configure Reverse Path Checking on a VLAN
Configure Reverse Path Checking on an IPv6 VLAN
Digital certificate configuration using EDM
Configure Device Subject Parameters
Configure Device Subject Entries Parameters
Generate the Key Pair
Configure the Certificate Authority
View the Certificate Details
View the Certificate Store
Configure TCP Keepalive and TCP Timestamp
Enable Authentication for Privileged EXEC Command Mode
sFlow
sFlow Fundamentals
sFlow Configuration Using CLI
Configuring the agent-ip and Enabling sFlow Globally
Configuring an sFlow Collector
Configuring the Packet Sampling Rate
Configuring sFlow Maximum Header Size
Configuring the Counter Sampling Interval
Viewing sFlow Statistics
Clearing sFlow Statistics
sFlow Configuration Using EDM
Enabling sFlow and Configuring the Agent IP Address
Configuring an sFlow Collector
Configure the Packet Samples and Counter Samples
Displaying sFlow Statistics
Simple Network Management Protocol (SNMP)
SNMPv3
SNMP Community Strings
SNMPv3 support for VRF
SNMPv3 Remote Engine ID Discovery
SNMP configuration using CLI
Configure SNMP settings
Creating a user
Creating a new user group
Creating a new entry for the MIB in the view table
Creating a community
Add a User to a Group
Blocking SNMP
View SNMP System Information
SNMP configuration using Enterprise Device Manager
Create a User
Create a New Group Membership
Create Access for a Group
Create Access Policies for SNMP Groups
Assign MIB View Access for an Object
Create a Community
View All Contexts for an SNMP Entity
Showing SNMP Statistics
Spanning Tree Configuration
Spanning Tree Fundamentals
BPDU Guard
Rapid Spanning Tree Protocol and Multiple Spanning Tree Protocol
Spanning Tree Configuration Using CLI
Configuring Spanning Tree
Configure BPDU Guard
Configuring Rapid Spanning Tree Protocol
Configuring Rapid Spanning Tree Protocol for a port
Configuring the Rapid Spanning Tree Protocol version
Viewing the global RSTP configuration information
Viewing RSTP statistics
Viewing the RSTP status
Viewing the RSTP Configuration Information
Viewing the RSTP Status for a Port
Viewing RSTP information for a selected port
Viewing the RSTP role
Viewing spanning tree configuration
Configuring Multiple Spanning Tree Protocol
Configuring MSTP MSTI options
Configuring Ethernet MSTP
Configuring Ethernet MSTP MSTI
Viewing MSTP configurations
Viewing MSTP status
Viewing MSTP Port Information
Viewing MSTP MSTI Information
Viewing MSTP statistics
Configuring tc-receive-alarm-threshold
Displaying the tc-receive-alarm-threshold configuration
Spanning Tree Configuration Using EDM
Configuring the Spanning Tree mode
Restarting the switch
Configure BPDU Guard
Configuring RSTP global parameters
Configuring RSTP ports
Viewing RSTP port status
Viewing RSTP Status Statistics
Viewing Port Spanning Tree Statistics
Configuring MSTP global parameters
Configuring CIST ports for MSTP
Configuring MSTI bridges for MSTP
Configuring MSTI ports for MSTP
Viewing VLAN and Spanning Tree CIST Statistics
Viewing VLAN and Spanning Tree MSTI Statistics
SPB-PIM Gateway configuration
SPB-PIM Gateway fundamentals
IP Multicast over Fabric Connect in Protocol Independent Multicast networks
SPB-PIM Gateway
SPB-PIM GW components
SPB-PIM Gateway Controller Node
SPB-PIM Gateway Node
MSDP overview
Source Active messages
Reverse Path Forwarding check
SA redistribution and filtering
MSDP and SPB-PIM GW
Full mesh group
Multicast Source Discovery Protocol configuration
Basic MSPD configuration using the CLI
Configuring the MSDP originator ID
Configuring MSDP on a VRF
Enabling MSDP globally
Creating an MSDP peer
MSDP Peer Configuration using the CLI
Configuring a peer description
Securing control messages
Configuring the MSDP peer SA limit
Limiting which packets the router sends
Configuring the MSDP peer keep alive messages
Configuring the MSDP peer connect-retry period
Clearing the peer connection
Deleting an MSDP peer
MSDP Message Control using the CLI
Filtering PIM routes
Filtering SA messages
Configuring MSDP mesh groups
Clearing the MSDP SA cache
MSDP Verification using the CLI
Displaying the peer information
Displaying the SA cache
Displaying the MSDP count
Displaying the MSDP summary
Displaying the RPF peer information
Displaying the MSDP mesh group information
Displaying the SA check information
Displaying all MSDP information
Clearing IPv4 MSDP Statistics
Basic MSDP configuration using the EDM
Configuring the MSDP originator ID
Enabling MSDP
Creating an MSDP peer
MSDP Peer Configuration using the EDM
Securing control messages
Configuring the MSDP peer SA limit
Configuring a peer description
Configuring the MSDP peer time to live threshold
Configuring the MSDP peer keepalive messages
Configuring the MSDP peer connect-retry period
Changing the MSDP peer status
Clearing the MSDP peer connection
Deleting an MSDP peer
MSDP Message Control using the EDM
Filtering PIM routes
Filtering SA messages
Configuring the MSDP mesh groups
Clearing the MSDP SA cache
MSDP Verification using the EDM
Viewing peer information
Viewing the local SA cache
Viewing the foreign SA cache
Viewing the mesh group
Controller configuration
Controller Configuration using the CLI
Enabling the Controller
Displaying the Controller admin status
Displaying the active Controller and Gateway Nodes
Configuring a static foreign source on the global router
Configuring a static foreign source on a VRF
Displaying foreign sources
Displaying Multicast over Fabric Connect sources
Controller Configuration using the EDM
Enabling the Controller
Displaying the Controller and Gateway admin status
Displaying active Controller and Gateway nodes
Configuring a static foreign source globally
Configuring a static foreign source on a VRF
Displaying foreign sources
Displaying Multicast over Fabric Connect sources
Gateway configuration
Gateway Configuration using the CLI
Enabling the Gateway
Displaying the Gateway admin status
Gateway Configuration using the EDM
Enabling the Gateway globally
Displaying foreign sources
SPB-PIM Gateway interface configuration
SPB-PIM Gateway Interface Configuration using the CLI
Enabling SPB-PIM Gateway on a VLAN
Enabling SPB-PIM Gateway on a brouter port interface
Configuring the SPB-PIM Gateway VLAN optional parameters
Configuring the SPB-PIM Gateway brouter port optional parameters
Displaying the SPB-PIM Gateway brouter port information
Displaying the SPB-PIM Gateway VLAN information
Displaying the SPB-PIM Gateway neighbor information
Displaying the SPB-PIM Gateway multicast routes
Display the IP mroute Routes
SPB-PIM Gateway Interface Configuration using the EDM
Enabling SPB-PIM Gateway on a VLAN
Enabling SPB-PIM Gateway on a Brouter port interface
Configuring SPB-PIM Gateway VLAN optional parameters
Configuring the SPB-PIM Gateway optional parameters
Displaying the SPB-PIM Gateway interface default values
Displaying the SPB-PIM Gateway brouter port information
Displaying the SPB-PIM Gateway VLAN information
Displaying the SPB-PIM Gateway neighbor information
Displaying the IP mroute routes
SPB-PIM Gateway Interface Deployment Scenarios
SPB-PIM Gateway Base Case Deployment Scenario
Source Specific Multicast
Peer Mesh Group
Multi domain
SPB domain interconnect
System Access
System access fundamentals
Logging On to the System
Managing the System using Different VRF Contexts
CLI Passwords
Access Policies for Services
Web interface passwords
Multiple CLI Users for Each Role
Enhanced Secure Mode
Password Requirements
Sensitive File Protection
System access configuration using CLI
Change the Default Username
Enabling CLI access levels
Changing passwords
Configure an Access Policy
Specifying a name for an access policy
Allowing a network access to the switch
Configuring access policies by MAC address
Creating multiple CLI users
Deleting a username
Displaying CLI usernames and roles
System access security enhancements
Display the Boot Config Flags Status
Enabling enhanced secure mode
Create Accounts for Different Access Levels
Deleting Accounts in Enhanced Secure Mode
Configuring a password for a specific user
Return the System to the Factory Defaults
Configuring the Password Complexity Rule
Configuring the password length rule
Configuring the change interval rule
Configuring the reuse rule
Configuring the maximum number of sessions
Configuring the maximum age rule
Configuring the Pre-notification and Post-notification Rule
System access configuration using EDM
Configuring CLI Access using EDM
Enable Access Levels
Change Passwords
Configure the Logon Banner
Create an Access Policy
Enable an Access Policy
Creating Multiple Users
Modify User Passwords
Disable a User Account
Delete a User Account
System access security enhancements using EDM
Enable Enhanced Secure Mode
TACACS+
TACACS+ Fundamentals
TACACS+ Operation
TACACS+ Architecture
Authentication, authorization, and accounting
TACACS+ authentication
TACACS+ authorization
TACACS+ Accounting
Privilege Level Changes at Runtime
TACACS+ and RADIUS differences
TACACS+ Feature Limitations
TACACS+ configuration using CLI
Enabling TACACS+
Add a TACACS+ Server
Configuring TACACS+ authentication
Configuring TACACS+ accounting
Configuring command authorization with TACACS+
Changing privilege levels at runtime
TACACS+ configuration using EDM
Configure TACACS+ Globally
Add a TACACS+ Server
Modify a TACACS+ Configuration
TACACS+ Configuration Examples
TACACS+ Configuration on the Switch
Identity Engines Ignition Server TACACS+ Configuration Example
Traffic Filtering
Traffic filtering fundamentals
Overview of Traffic Filtering
QoS and Filters
Access control lists
Access control entries
Operators
Attributes
Actions
Internal QoS Level and Remarking
Conflict and Precedence
Common ACE uses and configuration
Switched UNI ACL Filters
Traffic filter configuration
Ingress Bandwidth Rate Limiter
ACL and ACE configuration guidelines
ACL Filters Behavior Differences
Access control list configuration using CLI
Creating an IPv4 ACL
Create an IPv6 ACL
Associating VLANs with an ACL
Associating ports with an ACL
Associate an I-SID with an ACL
Configure Global and Default Actions for an ACL
Renaming an ACL
Disabling an ACL
Resetting an ACL to default values
Deleting an ACL
Clear ACL Statistics
Enable IPv6 Egress Filters
Display Filter Access Control List Configuration
Access control list configuration using EDM
Configuring an access control list
Viewing ACL Statistics
Clearing ACL Statistics
Enable IPv6 Egress Filters
Access Control Entry Configuration using CLI
Configure ACEs
Configure ACE actions
Configuring ARP ACEs
Configuring an Ethernet ACE
Configure an IP ACE
Configure an IPv6 ACE
Configuring a protocol ACE
Configure Ingress Policer and Port Rate Limiter
Viewing ACL and ACE configuration data
View ACE Statistics
Access Control Entry Configuration using EDM
Configure an ACE
Configure ACE Actions
Configuring ACE ARP entries
Viewing all ACE ARP entries for an ACL
Configuring an ACE Ethernet source address
Configuring an ACE Ethernet destination address
Configuring an ACE LAN traffic type
Configuring an ACE Ethernet VLAN tag priority
Configuring an ACE Ethernet port
Configuring an ACE Ethernet VLAN ID
Viewing all ACE Ethernet entries for an ACL
Configuring an ACE IP source address
Configuring an ACE IP destination address
Configuring an ACE IP DSCP
Configuring an ACE IP protocol
Configuring ACE IP options
Configuring ACE IP fragmentation
Viewing all ACE IP entries for an ACL
Configuring an ACE IPv6 source address
Configuring an ACE IPv6 destination address
Configuring an ACE IPv6 next header
Configuring an ACE IPv6 traffic class
Viewing all ACE IPv6 entries for an ACL
Configuring an ACE source port
Configuring an ACE destination port
Configuring an ACE ICMP message type
Configuring an ACE ICMPv6 message type
Configuring an ACE TCP flag
Configure an ACE to Filter IPv4 Routed Packets
Configure an ACE to Filter IPv6 Routed Packets
Configure Ingress Policer and Port Rate Limiter
Viewing ACE Port Statistics
Viewing all ACE protocol entries for an ACL
Troubleshooting
Data Collection Required for Technical Support Cases
Data Collection for an Outage
Collecting Data Before You Restart
Collecting Data After You Restart
Data Collection for Non Outage Problems
Gathering Critical Information
Troubleshooting Planning Fundamentals
Proper Installation and Routine Maintenance
Network Configuration
Normal Behavior on the Network
Troubleshooting Fundamentals
Connectivity Problems
Routing Table Problems
Cable Connection Problems
Alarm Database
LED Indications of Problems
Connectivity Fault Management
CFM Fundamentals
Autogenerated CFM and Explicitly Configured CFM
Maintenance Domain (MD)
Maintenance Association (MA)
Maintenance Association Endpoint (MEP)
Fault Verification
LBM Message
L2 Ping
Fault Isolation
Link Trace Message
L2 Traceroute
L2 Tracetree
L2 Tracetree-fan
Maintenance Domain Intermediate Point (MIP)
Layer 2 Tracemroute
Nodal MPs
Nodal B-VLAN MIPs with SMLT
Configuration Considerations
CFM Configuration Using CLI
Autogenerated CFM
Configuring Autogenerated CFM on SPBM B-VLANs
Configuring Explicit Mode CFM
Configuring CFM MD
Configuring CFM MA
Configuring CFM MEP
Assigning a MEP/MIP Level to an SPBM B-VLAN
Assigning MEP/MIP Levels to SPBM B-VLANs Globally
Trigger a Loopback Test (LBM)
Trigger Linktrace (LTM)
Trigger a Layer 2 Ping
Trigger a Layer 2 Traceroute
Trigger a Layer 2 Tracetree
Triggering a Layer 2 Tracetree-fan
Trigger a Layer 2 Tracemroute
Using trace CFM to Diagnose Problems
Using trace SPBM to Diagnose Problems
CFM Configuration Using EDM
Autogenerated CFM
Configure Autogenerated CFM on SPBM B-VLANs
Configuring Explicit CFM
Configure CFM MD
Configure CFM MA
Configure CFM MEP
Configure CFM Nodal MEP
Configure Layer 2 Ping
Initiate a Layer 2 Traceroute
View Layer 2 Traceroute Results
Configure Layer 2 IP Ping
View Layer 2 IP Ping Results
Configure Layer 2 IP Traceroute
View Layer 2 IP Traceroute Results
Trigger a Loopback Test
Trigger Linktrace
View Linktrace Results
Configure a Layer 2 Tracetree
View Layer 2 Tracetree Results
Configure Layer 2 Trace Multicast Route on a VLAN
Configure Layer 2 Tracemroute on a VRF
View Layer 2 Trace Multicast Route Results
CFM Configuration Example
CFM Configuration Example
CFM Sample Output
Software Troubleshooting Tool Configuration
Troubleshooting Tool Fundamentals
Troubleshooting Overview
Debug Files
Digital Diagnostic Monitoring
Flight Recorder
Port Mirroring
Port Mirroring Considerations and Restrictions
General Diagnostic Tools
Fabric RSPAN (Mirror to I-SID)
Software Troubleshooting Tool Configuration Using CLI
Using CLI for Troubleshooting
Using Software Record Dumps
Use Trace to Diagnose Problems
Use Trace to Diagnose IPv6 Problems
View and Delete Debug Files
Configuring Port Mirroring
Displaying Mirror Resource Usage
Configuring Global Mirroring Actions with an ACL
Configure ACE Actions to Mirror
Clearing ARP Information for an Interface
Flush Routing, MAC, and ARP Tables for a Port
Flush Routing, MAC, and ARP Tables for a VLAN
Ping an IP Device
Run a Traceroute Test
Showing SNMP Logs
Using Trace to Examine IS-IS Control Packets
Viewing the Metric Type of IS-IS Route in TLVs – Detailed
Viewing the Metric Type of IS-IS Route in TLVs – Summarized
Configuring I-SID Monitoring
Displaying I-SID Monitoring Diagnostics
Displaying I-SID Mirroring Statistics
Clearing Fabric RSPAN (Mirror to I-SID) Statistics
Software Troubleshooting Tool Configuration Using EDM
Flush Routing Tables by VLAN
Flush Routing Tables by Port
Configure Port Mirroring
Configure ACLs for Mirroring
Configure ACEs for Mirroring
Run a Ping Test
View Ping Results
View Ping Probe History
Run a Traceroute Test
View Traceroute Results
View the Traceroute History
Configure I-SID Monitoring
View and Clear Fabric RSPAN (Mirror to I-SID) Statistics
General Troubleshooting
Hardware Troubleshooting
Using Trace to Diagnose Hardware Problems
Troubleshooting USB Viewing Problems
Software Troubleshooting
Failure to Read Failed Configuration File
No Web Management Interface Access to a Device
Configuration in EDM is not applied using CLI
Layer 1 Troubleshooting
Troubleshooting Fiber Optic Links
Reset a QSFP+ or QSFP28 Transceiver
Layer 2 and 3 Troubleshooting
Troubleshooting BPDU Guard
No Packets Received on the Port
Troubleshooting IPv6 VRRP
VRRP Transitions
Enabling Trace Messages for IPv6 VRRP Troubleshooting
Risks Associated with Enabling Trace Messages
VRRP with Higher Priority Running as Backup
Troubleshooting RSMLT
RSMLT Peers Not Up
Enabling Trace Messages for RSMLT Troubleshooting
Troubleshooting IPv6 Connectivity Loss
Troubleshooting vIST Failure
Multicast Troubleshooting
Multicast Feature Troubleshooting
Troubleshooting IGMP Layer 2 Querier
Troubleshoot IGMPv3 Backwards Compatibility
Multicast Routing Troubleshooting Using CLI
View IGMP Interface Information
View Multicast Group Trace Information for IGMP Snoop
View IGMP Group Information
Determine the Data Stream Learned with IP Multicast over Fabric Connect on the VLAN
Display the SPBM Multicast Database
Troubleshoot IP Multicast over Fabric Connect for Layer 2 VSNs
Troubleshooting IP Multicast over Fabric Connect for Layer 3 VSNs
Troubleshooting IP Multicast over Fabric Connect for IP Shortcuts
View the Hardware Resource Usage
Using PIM Debugging Commands
Determine the Protocol Configured on the Added VLAN
Multicast routing troubleshooting using EDM
View IGMP Interface Information
Determine the Data Stream Learned when IP Multicast over Fabric Connect is Configured on the VLAN
Show the SPBM Multicast Database
Troubleshooting Fabric Attach
Troubleshoot Fabric Attach using CLI
View Fabric Attach Configuration
Troubleshoot Fabric Attach using EDM
Graph LLDP Reception Statistics
Graph LLDP Transmission Statistics
Troubleshooting FA Server Rejection of I-SID-to-VLAN Assignments Using Trace
Troubleshooting FAN Transit
View FAN Transit information - Detailed
Upper Layer Troubleshooting
Troubleshooting SNMP
SNMP Trap not Received
Troubleshooting DHCP
Troubleshooting DHCP Relay
Troubleshooting Client Connection to the DHCP Server
Troubleshooting IPv6 DHCP Relay
IPv6 DHCP Relay Switch Side Troubleshooting
IPv6 DHCP Relay Server Side Troubleshooting
IPv6 DHCP Relay Client Side Troubleshooting
Enabling Trace Messages for IPv6 DHCP Relay
Troubleshooting TACACS+
Unable to Log On Using Telnet
Unable to Log On Using SSH
Unable to Log On by any Means
Administrator Unable to Obtain Accounting Information from the TACACS+ Server
Trap Server Cannot Receive Trap Packets from the Switch
Troubleshooting TACACS+ Problems
Using BGP Debugging Commands
Traps Reference
Proprietary Traps
Standard Traps
Virtual Link Aggregation Control Protocol
Virtual Link Aggregation Control Protocol
VLACP Flap Detect and Damping
VLACP Configuration using CLI
Configure VLACP on a port
View the VLACP Port Configuration
Displaying VLACP Statistics for Specific Ports
Enabling or disabling VLACP globally
Configure VLACP Flap Detect and Damping on a Port
Clear VLACP Flap Detect and Damping Statistics for a Port
VLACP Configuration using EDM
Enabling VLACP globally
Configure VLACP on a Port
VLAN Configuration
VLAN Fundamentals
Port-based VLANs
Private VLANs
Policy-based VLANs
SPBM B-VLAN
VLAN tagging and port types
VLAN router interfaces
IP routing and VLANs
VLAN implementation
VLAN configuration rules
VLAN Feature Support
Network Load Balancing
Supported NLB Topologies
NLB and Directed Broadcast Resource Limits
VLAN MAC-layer Filtering Database and MAC Security
Prevention of IP Spoofing within a VLAN
VLAN loop prevention
Spanning Tree and Protection against Isolated VLANs
IGMP Layer 2 Querier
Switched UNI Layer 3
VLAN Configuration Using CLI
Create a VLAN
Create a Private VLAN
Assign an IP Address to a VLAN
Performing a general VLAN action
Configuring static MAC addresses for a VLAN
Limit MAC Address Learning
Configuring the forwarding database timeout globally
Adding or removing ports in a VLAN
Adding or removing source MAC addresses for a VLAN
Configure NLB support
Configuring a tagged port to discard untagged frames
Configuring SLPP
Configuring SLPP packet-rx on a port
Configuring SLPP packet-tx on a VLAN
Viewing SLPP information
Viewing SLPP information for a port
Configuring spoof detection
Viewing VLAN information
View Private VLAN Information
Viewing brouter port information
Viewing VLAN port member status
Viewing VLAN source MAC addresses
Viewing VLAN forwarding database information
Viewing manual edit MAC addresses
View Port-Level MAC Security
View NLB-Mode Information
Enable DvR on a Layer 2 VSN (VLAN)
Configure a Single IP Address for All DvR Controllers on a VLAN Subnet
VLAN Configuration using EDM
Configure a VLAN on a Port
Viewing existing VLANs
Create a Port-Based VLAN
Creating a Private VLAN
Viewing Private VLAN information
Configure an IP address for a VLAN
Changing VLAN port membership
Creating a protocol-based VLAN
Configure Source MAC Addresses for a Source MAC-Based VLAN
Creating a SPBM B-VLAN
Configure Advanced VLAN Features
Configure NLB Support
Configuring a port to accept tagged or untagged frames
Configuring untagging default VLAN on a tagged port
Configuring SLPP globally
Configuring the SLPP by VLAN
Configuring the SLPP by port
Configuring the forwarding database timeout globally
Viewing VLAN forwarding database information
Viewing the Forwarding Database for a Specific VLAN
Clearing learned MAC addresses by VLAN
Clearing learned MAC addresses for all VLANs by port
Configuring static forwarding
Configure Limit Learning
VRF Lite
VRF Lite Fundamentals
VRF Lite Capability and Functionality
VRF Lite and inter-VRF route redistribution
Route Redistribution Operation
Port parameters and VRF Lite management
VRF Lite Configuration Rules
VRF Lite configuration using the CLI
Create a VRF Instance
Associating a VLAN or port with a VRF instance
Create an IP VPN Instance on a VRF
Create an IPv6 VPN Instance
Configure the Maximum Number of VRFs
Enabling IPv6 trap notifications
Displaying IPv6 max-routes information
VRF Lite configuration using Enterprise Device Manager
Configuring a VRF instance
Associating a port to a VRF instance
Configuring interVRF route redistribution policies
Viewing brouter port and VRF associations
Viewing global VRF status information
Viewing VRF instance statistics and status information
Viewing Statistics for a VRF
Select and Launch a VRF Context View
Create an IP VPN Instance on a VRF
Create an IPv6 VPN Instance on a VRF
Configure the Maximum Number of VRFs
Virtual Router Redundancy Protocol
VRRP Fundamentals
Critical IP Address
VRRP and SMLT
VRRP Fast Hello Timers
Handling of IPv4 Layer 2 Unicast Packets at VRRP Backup Master
VRRP Guidelines
VRRP for IPv6
VRRPv3
VRRPv3 guidelines
VRRP Configuration Using the CLI
Configuring VRRP on a port or a VLAN
Showing VRRP information
Showing extended VLAN VRRP
Showing VRRP interface information
Viewing IP VRRPv3 Statistics
Enable Ping to a Virtual IP Address
Configure VRRP Notification Control
Configuring VRRP version on an interface
Enabling IPv4 VRRP preempt-mode
IPv6 VRRP Configuration using CLI
Configuring the VRRP interface
View VRRP Information
Configuring VRRP notification control
Configuring additional VRRP parameters for an interface
Viewing IPv6 VRRP Statistics
Enabling IPv6 VRRP preempt-mode
VRRP configuration using EDM
Enabling VRRP global variables
Modifying VRRP parameters for an interface
Configuring VRRP on a V3 interface
Configuring VRRPv3 Checksum
Configuring Fast Advertisement Interval on a port or a VRF instance
Configuring Fast Advertisement Interval on a VLAN or a VRF instance
Viewing VRRP Statistics
Viewing VRRP Interface Statistics
Viewing IP VRRPv3 Statistics
Graphing IP VRRPv3 Statistics
IPv6 VRRP Configuration using EDM
Configure VRRP for an Interface
Configuring VRRP notification control
View IPv6 VRRP Statistics
Viewing IPv6 VRRP Statistics for an Interface
Configure IPv6 VRRP Statistics
Graphing IPv6 VRRP Statistics
Configuring additional addresses on the VRRP brouter port
Configuring additional addresses on the VRRP interface
Port Numbering and MAC Address Assignment Reference
Port Numbering
5320 Series
5420 Series
5520 Series
Interface Indexes
Port Interface Index
VLAN interface index
MLT interface index
MAC Address Assignment
Supported Standards, RFCs, and MIBs
Supported IEEE Standards
Supported RFCs
Quality of service
Network management
MIBs
Standard MIBs
Proprietary MIBs
ICMPv6 Type and Code
System access security enhancements using EDM
The section provides information to enable enhanced secure mode.
