Brocade 6910 User Manual

Download

Page 1

53-1002651-02

07 December 2012

Brocade 6910 Ethernet Access Switch

Configuration Guide

Supporting R2.2.0.2

Page 2

Brocade, Brocade Assurance, the B-wing symbol, BigIron, DCX, Fabric OS, FastIron, MLX, NetIron, SAN Health, ServerIron, TurboIron, VCS, and VDX are registered trademarks, and AnyIO, Brocade One, CloudPlex, Effortless Networking, ICX, NET Health, OpenScript, and The Effortless Network are trademarks of Brocade Communications Systems, Inc., in the United States and/or in other countries. Other brands, products, or service names mentioned may be trademarks of their respective owners.

Notice: This document is for informational purposes only and does not set forth any warranty, expressed or implied, concerning any equipment, equipment feature, or service offered or to be offered by Brocade. Brocade reserves the right to make changes to this document at any time, without notice, and assumes no responsibility for its use. This informational document describes features that may not be currently available. Contact a Brocade sales office for information on feature and product availability. Export of technical data contained in this document may require an export license from the United States government.

The authors and Brocade Communications Systems, Inc. shall have no liability or responsibility to any person or entity with respect to any loss, cost, liability, or damages arising from the information contained in this book or the computer programs that accompany it.

The product described by this document may contain “open source” software covered by the GNU General Public License or other open source license agreements. To find out which open source software is included in Brocade products, view the licensing terms applicable to the open source software, and obtain a copy of the programming source code, please visit

http://www.brocade.com/support/oscd.

Brocade Communications Systems, Incorporated

Corporate and Latin American Headquarters Brocade Communications Systems, Inc. 130 Holger Way San Jose, CA 95134 Tel: 1-408-333-8000 Fax: 1-408-333-8101 E-mail: info@brocade.com

European Headquarters Brocade Communications Switzerland Sàrl Centre Swissair Tour B - 4èm e étage 29, Route de l'Aéroport Case Postale 105 CH-1215 Genève 15 Switzerland Tel: +41 22 799 5640 Fax: +41 22 799 5641 E-mail: emea-info@brocade.com

Asia-Pacific Headquarters Brocade Communications Systems China HK, Ltd. No. 1 Guanghua Road Chao Yang District Units 2718 and 2818 Beijing 100020, China Tel: +8610 6588 8888 Fax: +8610 6588 9999 E-mail: china-info@brocade.com

Asia-Pacific Headquarters Brocade Communications Systems Co., Ltd. (Shenzhen WFOE) Citic Plaza No. 233 Tian He Road North Unit 1308 – 13th Floor Guangzhou, China Tel: +8620 3891 2000 Fax: +8620 3891 2111 E-mail: china-info@brocade.com

Document History

Title Publication number Summary of changes Date

Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002346-02 New document November 2011

53-1002581-01 Added documentation fixes

for Brocade 6910 Ethernet Access Switch Software Release 2.0.2.10

53-1002581-01 Added support for SFTP file

tranfer, new encryption methods for SNMPv3 privacy, and configuration of LACP timeout interval

January 2012

May 2012

Page 3

Title Publication number Summary of changes Date

Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02 Added ethernet loopback,

VLAN flooding, new delaymeasure and loss measure CFM commands, DDM threshold commands

53-1002651-02 Configuring the destination

MAC address for CFM twoway delay-measure as a multicast MAC address is no longer supported

October 2012

December 2012

Brocade 6910 Ethernet Access Switch Configuration Guide iii 53-1002651-02

Page 4

iv Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 5

About This Document

Supported hardware and software . . . . . . . . . . . . . . . . . . . . . . . . . .xlix

Summary of enhancements for Brocade R2.2.0.2. . . . . . . . . . . . . . . .l

Summary of enhancements for Brocade R2.2.0.0. . . . . . . . . . . . . . . .l

Summary of enhancements for Brocade R2.1.0.4. . . . . . . . . . . . . . . li

Summary of enhancements for Brocade R2.0.2.10. . . . . . . . . . . . . . li

Summary of enhancements for Brocade R2.0.2.9. . . . . . . . . . . . . . . lii

Document conventions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . lii

Text formatting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .lii

Command syntax conventions . . . . . . . . . . . . . . . . . . . . . . . . . . liii

Notes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . liii

Trademark references. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . liii

Related publications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . liv

Getting technical help. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . liv

Document feedback . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . liv

Section II Getting Started

Chapter 1 Introduction

Key Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

Description of Software Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4

System Defaults . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8

Chapter 2 Initial Switch Configuration

Connecting to the Switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

Configuration Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .11

Required Connections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .12

Remote Connections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

Brocade 6910 Ethernet Access Switch Configuration Guide iii 53-1002651-02

Page 6

Basic Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13

Console Connection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13

Setting Passwords . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

Setting an IP Address. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

Manual Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

Dynamic Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

Downloading Configuration File Referenced by DHCP Server .19

Enabling SNMP Management Access . . . . . . . . . . . . . . . . . . . .21

Community Strings (for SNMP version 1 and 2c clients) . 21

Trap Receivers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

Configuring Access for SNMP Version 3 Clients . . . . . . . . 22

Managing System Files. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

Saving or Restoring Configuration Settings . . . . . . . . . . . . . . . .23

Section III Command Line Interface

Chapter 3 Using the Command Line Interface

Accessing the CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .27

Console Connection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

Telnet Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

Entering Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

Keywords and Arguments . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .28

Minimum Abbreviation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29

Command Completion. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .29

Getting Help on Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . .29

Showing Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29

Partial Keyword Lookup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

Negating the Effect of Commands . . . . . . . . . . . . . . . . . . . . . . . 31

Using Command History . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

Understanding Command Modes. . . . . . . . . . . . . . . . . . . . . . . . 32

Exec Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32

Configuration Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .33

Command Line Processing . . . . . . . . . . . . . . . . . . . . . . . . . . . . .34

Showing Status Information . . . . . . . . . . . . . . . . . . . . . . . . . . . .35

CLI Command Groups. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .35

Chapter 4 General Commands

prompt . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .39

reload (Global Configuration) . . . . . . . . . . . . . . . . . . . . . . . . .40

enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41

quit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .42

show history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .42

configure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .43

disable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .43

reload (Privileged Exec) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .44

show reload . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44

end . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .44

exit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .45

iv Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 7

Chapter 5 System Management Commands

Device Designation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47

hostname . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .48

Banner Information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .48

banner configure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49

banner configure company . . . . . . . . . . . . . . . . . . . . . . . . . . .50

banner configure dc-power-info . . . . . . . . . . . . . . . . . . . . . . .50

banner configure department . . . . . . . . . . . . . . . . . . . . . . . . 51

banner configure equipment-info . . . . . . . . . . . . . . . . . . . . . .52

banner configure equipment-location . . . . . . . . . . . . . . . . . .52

banner configure ip-lan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .53

banner configure lp-number . . . . . . . . . . . . . . . . . . . . . . . . . .54

banner configure manager-info . . . . . . . . . . . . . . . . . . . . . . .54

banner configure mux . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .55

banner configure note . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .56

show banner . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .56

System Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57

show access-list tcam-utilization . . . . . . . . . . . . . . . . . . . . . .57

show alarm-status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .58

show memory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .58

show process cpu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .59

show running-config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60

show startup-config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61

show system . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .62

show tech-support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63

show users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .63

show version . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .64

Frame Size. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .65

jumbo frame . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .65

File Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .65

General Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .66

boot system . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .66

copy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67

delete . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .70

dir . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .70

whichboot . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71

Automatic Code Upgrade Commands . . . . . . . . . . . . . . . . . . . . . .72

upgrade opcode auto . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .72

upgrade opcode path . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .73

upgrade opcode reload . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74

show upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74

Line. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .75

line . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75

databits . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76

exec-timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .77

parity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .78

password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .79

password-thresh . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79

Brocade 6910 Ethernet Access Switch Configuration Guide v 53-1002651-02

Page 8

silent-time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .80

speed . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81

stopbits . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81

timeout login response . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .82

disconnect . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82

show line . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .83

Event Logging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .83

logging facility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .84

logging history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .84

logging host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .85

logging on . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .86

logging trap . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .86

clear log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .87

show log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .87

show logging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .88

SMTP Alerts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .89

logging sendmail . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .90

logging sendmail host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .90

logging sendmail level . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91

logging sendmail destination- email . . . . . . . . . . . . . . . . . . .91

logging sendmail source-email . . . . . . . . . . . . . . . . . . . . . . . .92

show logging sendmail . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92

Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .93

SNTP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .93

sntp client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .93

sntp poll . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .94

sntp server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .95

show sntp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .95

Manual Configuration Commands . . . . . . . . . . . . . . . . . . . . . . . .96

clock summer-time (date) . . . . . . . . . . . . . . . . . . . . . . . . . . . .96

clock summer-time (predefined) . . . . . . . . . . . . . . . . . . . . . .97

clock summer-time (recurring) . . . . . . . . . . . . . . . . . . . . . . . .98

clock timezone . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .99

calendar set . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .100

show calendar . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .100

Time Range . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .101

time-range . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .101

absolute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .102

periodic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .103

show time-range . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .104

Chapter 6 SNMP Commands

General SNMP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . .107

snmp-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .107

snmp-server community . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107

snmp-server contact . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .108

snmp-server location . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .108

show snmp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .109

vi Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 9

SNMP Target Host Commands . . . . . . . . . . . . . . . . . . . . . . . . . .110

snmp-server enable traps . . . . . . . . . . . . . . . . . . . . . . . . . . .110

snmp-server host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .111

SNMPv3 Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .113

snmp-server engine-id . . . . . . . . . . . . . . . . . . . . . . . . . . . . .113

snmp-server group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .114

snmp-server user . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .115

snmp-server view . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .116

show snmp engine-id . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .117

show snmp group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 117

show snmp user . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .119

show snmp view . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .120

Notification Log Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . .120

nlm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .120

snmp-server notify-filter . . . . . . . . . . . . . . . . . . . . . . . . . . . .121

show nlm oper-status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .122

show snmp notify-filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . .122

Additional Trap Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . .123

memory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .123

process cpu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .123

Chapter 7 Remote Monitoring Commands

rmon alarm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .126

rmon event . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .127

rmon collection history . . . . . . . . . . . . . . . . . . . . . . . . . . . . .128

rmon collection rmon1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . .129

show rmon alarms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .129

show rmon events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .130

show rmon history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .130

show rmon statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .130

Chapter 8 Flow Sampling Commands

sflow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .133

sflow destination . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .134

sflow forwarding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .134

sflow max-datagram-size . . . . . . . . . . . . . . . . . . . . . . . . . . .135

sflow max-header-size . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .135

sflow owner . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .136

sflow polling-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .136

sflow sample . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .137

sflow source . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .137

show sflow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .138

Chapter 9 Authentication Commands

User Accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .139

enable password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .140

username . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 141

Brocade 6910 Ethernet Access Switch Configuration Guide vii 53-1002651-02

Page 10

Authentication Sequence . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .142

authentication enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .142

authentication login . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .143

RADIUS Client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .144

radius-server acct-port . . . . . . . . . . . . . . . . . . . . . . . . . . . . .144

radius-server auth-port . . . . . . . . . . . . . . . . . . . . . . . . . . . . .144

radius-server host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .145

radius-server key . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .146

radius-server retransmit . . . . . . . . . . . . . . . . . . . . . . . . . . . .146

radius-server timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .147

show radius-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 147

TACACS+ Client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .148

tacacs-server host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .148

tacacs-server key . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .149

tacacs-server port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .149

tacacs-server retransmit . . . . . . . . . . . . . . . . . . . . . . . . . . . .150

tacacs-server timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .150

show tacacs-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .151

AAA . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 151

aaa accounting dot1x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .152

aaa accounting exec . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .153

aaa accounting update . . . . . . . . . . . . . . . . . . . . . . . . . . . . .154

aaa authorization exec . . . . . . . . . . . . . . . . . . . . . . . . . . . . .154

aaa group server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .155

server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .155

accounting dot1x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .156

accounting exec . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .157

authorization exec . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .157

show accounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .158

Web Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .159

ip http port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .159

ip http server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .159

ip http secure-port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .160

ip http secure-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .160

Telnet Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .162

ip telnet max-sessions . . . . . . . . . . . . . . . . . . . . . . . . . . . . .162

ip telnet port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .163

ip telnet server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .163

show ip telnet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .163

Secure Shell . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .164

ip ssh authentication-retries . . . . . . . . . . . . . . . . . . . . . . . . .166

ip ssh server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .167

ip ssh server-key size . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .167

ip ssh timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .168

delete public-key . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .169

ip ssh crypto host-key generate . . . . . . . . . . . . . . . . . . . . . .169

ip ssh crypto zeroize . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .170

ip ssh save host-key . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .170

show ip ssh . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 171

show public-key . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 171

viii Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 11

show ssh . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .172

802.1X Port Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .172

General Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .173

dot1x default . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 173

dot1x eapol-pass- through . . . . . . . . . . . . . . . . . . . . . . . . . . 174

dot1x system-auth-control . . . . . . . . . . . . . . . . . . . . . . . . . . 174

Authenticator Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .175

dot1x intrusion-action . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .175

dot1x max-reauth-req . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .175

dot1x max-req . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 176

dot1x operation-mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 176

dot1x port-control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .177

dot1x re-authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . .177

dot1x timeout quiet-period . . . . . . . . . . . . . . . . . . . . . . . . . .178

dot1x timeout re-authperiod . . . . . . . . . . . . . . . . . . . . . . . . .179

dot1x timeout supp-timeout . . . . . . . . . . . . . . . . . . . . . . . . .179

dot1x timeout tx-period . . . . . . . . . . . . . . . . . . . . . . . . . . . . .180

dot1x re-authenticate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .180

Supplicant Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .181

dot1x identity profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .181

dot1x max-start . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .181

dot1x pae supplicant . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .182

dot1x timeout auth-period . . . . . . . . . . . . . . . . . . . . . . . . . .182

dot1x timeout held-period . . . . . . . . . . . . . . . . . . . . . . . . . .183

dot1x timeout start-period . . . . . . . . . . . . . . . . . . . . . . . . . .183

Information Display Commands . . . . . . . . . . . . . . . . . . . . . . . . .184

show dot1x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .184

Management IP Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .186

management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .187

show management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .188

Chapter 10 General Security Measures

Port Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .189

port security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .190

show port security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .191

Network Access (MAC Address Authentication) . . . . . . . . . . . . . . .193

network-access aging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .194

network-access mac-filter . . . . . . . . . . . . . . . . . . . . . . . . . . .195

mac- authentication reauth-time . . . . . . . . . . . . . . . . . . . . .195

network-access dynamic-qos . . . . . . . . . . . . . . . . . . . . . . . .196

network-access dynamic-vlan . . . . . . . . . . . . . . . . . . . . . . . .197

network-access guest-vlan . . . . . . . . . . . . . . . . . . . . . . . . . .197

network-access link-detection . . . . . . . . . . . . . . . . . . . . . . .198

network-access link-detection link-down . . . . . . . . . . . . . . .198

network-access link-detection link-up . . . . . . . . . . . . . . . . .199

network-access link-detection link-up-down . . . . . . . . . . . .200

network-access max-mac-count . . . . . . . . . . . . . . . . . . . . . .200

network-access mode mac-authentication . . . . . . . . . . . . .201

Brocade 6910 Ethernet Access Switch Configuration Guide ix 53-1002651-02

Page 12

network-access port-mac-filter . . . . . . . . . . . . . . . . . . . . . . .202

mac- authentication intrusion-action . . . . . . . . . . . . . . . . . .202

mac- authentication max-mac-count . . . . . . . . . . . . . . . . . .203

clear network-access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .203

show network-access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .204

show network-access mac-address- table . . . . . . . . . . . . . .204

show network-access mac-filter . . . . . . . . . . . . . . . . . . . . . .205

Web Authentication. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .206

web-auth login-attempts . . . . . . . . . . . . . . . . . . . . . . . . . . . .206

web-auth quiet-period . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .207

web-auth session-timeout . . . . . . . . . . . . . . . . . . . . . . . . . . .207

web-auth system-auth-control . . . . . . . . . . . . . . . . . . . . . . .208

web-auth . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .208

web-auth re-authenticate (Port) . . . . . . . . . . . . . . . . . . . . . .209

web-auth re-authenticate (IP) . . . . . . . . . . . . . . . . . . . . . . . .209

show web-auth . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .210

show web-auth interface . . . . . . . . . . . . . . . . . . . . . . . . . . . .210

show web-auth summary . . . . . . . . . . . . . . . . . . . . . . . . . . .210

DHCP Snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .211

ip dhcp snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .212

ip dhcp snooping information option . . . . . . . . . . . . . . . . . .213

ip dhcp snooping information policy . . . . . . . . . . . . . . . . . .215

ip dhcp snooping verify mac-address . . . . . . . . . . . . . . . . .215

ip dhcp snooping vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .216

ip dhcp snooping information option circuit-id . . . . . . . . . .217

ip dhcp snooping trust . . . . . . . . . . . . . . . . . . . . . . . . . . . . .218

clear ip dhcp snooping binding . . . . . . . . . . . . . . . . . . . . . .219

clear ip dhcp snooping database flash . . . . . . . . . . . . . . . .219

ip dhcp snooping database flash . . . . . . . . . . . . . . . . . . . . .219

show ip dhcp snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . . .220

show ip dhcp snooping binding . . . . . . . . . . . . . . . . . . . . . .220

IP Source Guard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .220

ip source-guard binding . . . . . . . . . . . . . . . . . . . . . . . . . . . .221

ip source-guard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .222

ip source-guard max-binding . . . . . . . . . . . . . . . . . . . . . . . .223

show ip source-guard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .224

show ip source-guard binding . . . . . . . . . . . . . . . . . . . . . . . .224

ARP Inspection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .225

ip arp inspection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .225

ip arp inspection filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .226

ip arp inspection log-buffer logs . . . . . . . . . . . . . . . . . . . . . .227

ip arp inspection validate . . . . . . . . . . . . . . . . . . . . . . . . . . .228

ip arp inspection vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .228

ip arp inspection limit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .229

ip arp inspection trust . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .230

show ip arp inspection configuration . . . . . . . . . . . . . . . . . .230

show ip arp inspection interface . . . . . . . . . . . . . . . . . . . . .231

show ip arp inspection log . . . . . . . . . . . . . . . . . . . . . . . . . .231

show ip arp inspection statistics . . . . . . . . . . . . . . . . . . . . .231

show ip arp inspection vlan . . . . . . . . . . . . . . . . . . . . . . . . .232

x Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 13

Chapter 11 Access Control Lists

IPv4 ACLs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .233

access-list ip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .234

permit, deny (Standard IP ACL) . . . . . . . . . . . . . . . . . . . . . .235

permit, deny (Extended IPv4 ACL) . . . . . . . . . . . . . . . . . . . .236

ip access-group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .238

show ip access-group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .239

show ip access-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .239

IPv6 ACLs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .240

access-list ipv6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .240

permit, deny (Standard IPv6 ACL) . . . . . . . . . . . . . . . . . . . .241

permit, deny (Extended IPv6 ACL) . . . . . . . . . . . . . . . . . . . .242

show ipv6 access-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .243

ipv6 access-group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .244

show ipv6 access-group . . . . . . . . . . . . . . . . . . . . . . . . . . . .244

MAC ACLs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .245

access-list mac . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .245

permit, deny (MAC ACL) . . . . . . . . . . . . . . . . . . . . . . . . . . . . .246

mac access-group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .248

show mac access-group . . . . . . . . . . . . . . . . . . . . . . . . . . . .248

show mac access-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .249

ARP ACLs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .249

access-list arp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .250

permit, deny (ARP ACL) . . . . . . . . . . . . . . . . . . . . . . . . . . . . .250

show access-list arp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .251

ACL Information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .252

clear access-list hardware counters . . . . . . . . . . . . . . . . . .252

show access-group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .252

show access-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .253

Chapter 12 Interface Commands

Interface Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .256

interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .256

alias . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .257

capabilities . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .258

description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .259

flowcontrol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .259

history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .260

media-type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .261

negotiation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .261

shutdown . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .262

speed-duplex . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .262

switchport packet-rate . . . . . . . . . . . . . . . . . . . . . . . . . . . . .263

transceiver-threshold current . . . . . . . . . . . . . . . . . . . . . . . .264

transceiver-threshold rx-power . . . . . . . . . . . . . . . . . . . . . . .265

transceiver-threshold temperature . . . . . . . . . . . . . . . . . . .266

transceiver-threshold tx-power . . . . . . . . . . . . . . . . . . . . . . .267

transceiver-threshold voltage . . . . . . . . . . . . . . . . . . . . . . . .268

clear counters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .269

Brocade 6910 Ethernet Access Switch Configuration Guide xi 53-1002651-02

Page 14

show interfaces brief . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .269

show interfaces counters . . . . . . . . . . . . . . . . . . . . . . . . . . .270

show interfaces history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 271

show interfaces status . . . . . . . . . . . . . . . . . . . . . . . . . . . . .274

show interfaces switchport . . . . . . . . . . . . . . . . . . . . . . . . . .275

show interfaces transceiver . . . . . . . . . . . . . . . . . . . . . . . . .277

Cable Diagnostics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .278

test cable-diagnostics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .278

show cable-diagnostics . . . . . . . . . . . . . . . . . . . . . . . . . . . . .279

Loopback Testing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .280

ethernet loopback . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .280

show ethernet loopback interface . . . . . . . . . . . . . . . . . . . .281

show ethernet loopback resources . . . . . . . . . . . . . . . . . . .281

Power Savings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .282

power-save . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .282

show power-save . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .283

Chapter 13 Link Aggregation Commands

Manual Configuration Commands . . . . . . . . . . . . . . . . . . . . . . .286

port channel load-balance . . . . . . . . . . . . . . . . . . . . . . . . . .286

channel-group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .287

Dynamic Configuration Commands . . . . . . . . . . . . . . . . . . . . . . .288

lacp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .288

lacp admin-key (Ethernet Interface) . . . . . . . . . . . . . . . . . . .289

lacp port-priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .290

lacp system-priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .291

lacp admin-key (Port Channel) . . . . . . . . . . . . . . . . . . . . . . .291

lacp timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .292

Trunk Status Display Commands . . . . . . . . . . . . . . . . . . . . . . . . .293

show lacp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .293

show port-channel load-balance . . . . . . . . . . . . . . . . . . . . .296

Chapter 14 Port Mirroring Commands

Local Port Mirroring Commands . . . . . . . . . . . . . . . . . . . . . . . . . . .297

port monitor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .297

show port monitor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .299

RSPAN Mirroring Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .300

rspan source . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .301

rspan destination . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .302

rspan remote vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .303

no rspan session . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .304

show rspan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .304

Chapter 15 Rate Limit Commands

rate-limit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .307

xii Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 15

Chapter 16 Automatic Traffic Control Commands

Threshold Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .311

auto-traffic-control apply-timer . . . . . . . . . . . . . . . . . . . . . . .311

auto-traffic-control release-timer . . . . . . . . . . . . . . . . . . . . .312

auto-traffic-control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .313

auto-traffic-control action . . . . . . . . . . . . . . . . . . . . . . . . . . .313

auto-traffic-control alarm-clear-threshold . . . . . . . . . . . . . .314

auto-traffic-control alarm-fire-threshold . . . . . . . . . . . . . . .315

auto-traffic-control auto-control-release . . . . . . . . . . . . . . .316

auto-traffic-control control-release . . . . . . . . . . . . . . . . . . . . 316

SNMP Trap Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 317

snmp-server enable port-traps atc broadcast-alarm-clear . 317 snmp-server enable port-traps atc broadcast-alarm-fire . . 317 snmp-server enable port-traps atc broadcast-control-apply 318 snmp-server enable port-traps atc broadcast-control-release 318 snmp-server enable port-traps atc multicast-alarm-clear .319 snmp-server enable port-traps atc multicast-alarm-fire . . . 319 snmp-server enable port-traps atc multicast-control-apply 320 snmp-server enable port-traps atc multicast-control-release 320

ATC Display Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .321

show auto-traffic-control . . . . . . . . . . . . . . . . . . . . . . . . . . . .321

show auto-traffic-control interface . . . . . . . . . . . . . . . . . . . .321

Chapter 17 Address Table Commands

mac-address-table aging-time . . . . . . . . . . . . . . . . . . . . . . .323

mac-address-table static . . . . . . . . . . . . . . . . . . . . . . . . . . .324

clear mac-address-table dynamic . . . . . . . . . . . . . . . . . . . .325

show mac-address-table . . . . . . . . . . . . . . . . . . . . . . . . . . . .325

show mac-address-table aging-time . . . . . . . . . . . . . . . . . .326

show mac-address-table count . . . . . . . . . . . . . . . . . . . . . .326

Chapter 18 Spanning Tree Commands

spanning-tree . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .330

spanning-tree cisco-prestandard . . . . . . . . . . . . . . . . . . . . .331

spanning-tree forward-time . . . . . . . . . . . . . . . . . . . . . . . . .331

spanning-tree hello-time . . . . . . . . . . . . . . . . . . . . . . . . . . . .332

spanning-tree max-age . . . . . . . . . . . . . . . . . . . . . . . . . . . . .332

spanning-tree mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .333

spanning-tree pathcost method . . . . . . . . . . . . . . . . . . . . . .334

spanning-tree priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .335

spanning-tree mst configuration . . . . . . . . . . . . . . . . . . . . .335

spanning-tree system-bpdu-flooding . . . . . . . . . . . . . . . . . .336

spanning-tree transmission-limit . . . . . . . . . . . . . . . . . . . . .336

max-hops . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .337

mst priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .337

mst vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .338

name . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .339

revision . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .339

spanning-tree bpdu-filter . . . . . . . . . . . . . . . . . . . . . . . . . . .340

Brocade 6910 Ethernet Access Switch Configuration Guide xiii 53-1002651-02

Page 16

spanning-tree bpdu-guard . . . . . . . . . . . . . . . . . . . . . . . . . . 341

spanning-tree cost . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .342

spanning-tree edge-port . . . . . . . . . . . . . . . . . . . . . . . . . . . .343

spanning-tree link-type . . . . . . . . . . . . . . . . . . . . . . . . . . . . .343

spanning-tree loopback-detection . . . . . . . . . . . . . . . . . . . .344

spanning-tree loopback-detection action . . . . . . . . . . . . . .344

spanning-tree loopback-detection release-mode . . . . . . . .345

spanning-tree loopback-detection trap . . . . . . . . . . . . . . . .346

spanning-tree mst cost . . . . . . . . . . . . . . . . . . . . . . . . . . . . .346

spanning-tree mst port-priority . . . . . . . . . . . . . . . . . . . . . . .347

spanning-tree port-bpdu-flooding . . . . . . . . . . . . . . . . . . . . .348

spanning-tree port-priority . . . . . . . . . . . . . . . . . . . . . . . . . .348

spanning-tree root-guard . . . . . . . . . . . . . . . . . . . . . . . . . . .349

spanning-tree spanning-disabled . . . . . . . . . . . . . . . . . . . . .350

spanning-tree loopback-detection release . . . . . . . . . . . . .350

spanning-tree protocol-migration . . . . . . . . . . . . . . . . . . . . .351

show spanning-tree . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .351

show spanning-tree mst configuration . . . . . . . . . . . . . . . .353

Chapter 19 ERPS Commands

erps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .356

erps domain . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .357

control-vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .357

enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .358

guard-timer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .359

holdoff-timer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .359

major-domain . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .360

meg-level . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .360

mep-monitor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .361

node-id . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .362

non-erps-dev-protect . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .362

propagate-tc . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .363

ring-port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .364

rpl owner . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .365

wtr-timer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .365

show erps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .366

Chapter 20 VLAN Commands

GVRP and Bridge Extension Commands . . . . . . . . . . . . . . . . . . . . .370

bridge-ext gvrp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .370

garp timer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 371

switchport forbidden vlan . . . . . . . . . . . . . . . . . . . . . . . . . . .372

switchport gvrp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .372

show bridge-ext . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .373

show garp timer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .373

show gvrp configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . 374

Editing VLAN Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 374

vlan database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .375

vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .375

vlan mac-learning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 376

xiv Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 17

show mac-learning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .377

Configuring VLAN Interfaces. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .377

interface vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .378

switchport acceptable-frame-types . . . . . . . . . . . . . . . . . . .378

switchport allowed vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . .379

switchport ingress-filtering . . . . . . . . . . . . . . . . . . . . . . . . .380

switchport mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .381

switchport native vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .381

vlan-trunking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .382

Displaying VLAN Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .384

show vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .384

Configuring IEEE 802.1Q Tunneling. . . . . . . . . . . . . . . . . . . . . . . . .385

dot1q-tunnel system-tunnel-control . . . . . . . . . . . . . . . . . . .386

switchport dot1q-tunnel mode . . . . . . . . . . . . . . . . . . . . . . .386

switchport dot1q-tunnel service match cvid . . . . . . . . . . . .387

switchport dot1q-tunnel tpid . . . . . . . . . . . . . . . . . . . . . . . .389

show dot1q-tunnel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .390

Configuring L2CP Tunneling . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .391

l2protocol-tunnel tunnel-dmac . . . . . . . . . . . . . . . . . . . . . . .391

switchport l2protocol-tunnel . . . . . . . . . . . . . . . . . . . . . . . .393

show l2protocol-tunnel . . . . . . . . . . . . . . . . . . . . . . . . . . . . .394

Configuring VLAN Translation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .394

switchport vlan-translation . . . . . . . . . . . . . . . . . . . . . . . . . .394

show vlan-translation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .396

Configuring Port-based Traffic Segmentation . . . . . . . . . . . . . . . . .396

traffic-segmentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .397

traffic-segmentation session . . . . . . . . . . . . . . . . . . . . . . . .398

traffic-segmentation uplink/downlink . . . . . . . . . . . . . . . . .398

traffic-segmentation uplink-to-uplink . . . . . . . . . . . . . . . . . .399

show traffic-segmentation . . . . . . . . . . . . . . . . . . . . . . . . . .400

Configuring Protocol-based VLANs. . . . . . . . . . . . . . . . . . . . . . . . . .400

protocol-vlan protocol-group (Configuring Groups) . . . . . . .401

protocol-vlan protocol-group (Configuring Interfaces) . . . . .401

show protocol-vlan protocol-group . . . . . . . . . . . . . . . . . . . .402

show interfaces protocol-vlan protocol-group . . . . . . . . . . .403

Configuring IP Subnet VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .403

subnet-vlan (Global Configuration) . . . . . . . . . . . . . . . . . . .404

subnet-vlan (Interface Configuration) . . . . . . . . . . . . . . . . .405

show interfaces subnet-vlan . . . . . . . . . . . . . . . . . . . . . . . . .405

show subnet-vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .406

Configuring MAC Based VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . .406

mac-vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .407

show mac-vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .407

Configuring Voice VLANs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .408

voice vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .408

voice vlan aging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .409

voice vlan mac-address . . . . . . . . . . . . . . . . . . . . . . . . . . . . 410

switchport voice vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .411

Brocade 6910 Ethernet Access Switch Configuration Guide xv 53-1002651-02

Page 18

switchport voice vlan priority . . . . . . . . . . . . . . . . . . . . . . . . 411

switchport voice vlan rule . . . . . . . . . . . . . . . . . . . . . . . . . . .412

switchport voice vlan security . . . . . . . . . . . . . . . . . . . . . . .413

show voice vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .413

Chapter 21 Class of Service Commands

Priority Commands (Layer 2) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .415

queue mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .416

queue weight . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 417

switchport priority default . . . . . . . . . . . . . . . . . . . . . . . . . . .418

show queue mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .419

show queue weight . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .419

Priority Commands (Layer 3 and 4) . . . . . . . . . . . . . . . . . . . . . . . . .419

qos map cos-dscp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .420

qos map dscp-mutation . . . . . . . . . . . . . . . . . . . . . . . . . . . .421

qos map phb-queue . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .423

qos map trust-mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .423

show qos map cos-dscp . . . . . . . . . . . . . . . . . . . . . . . . . . . .424

show qos map dscp-mutation . . . . . . . . . . . . . . . . . . . . . . .425

show qos map phb-queue . . . . . . . . . . . . . . . . . . . . . . . . . .426

show qos map trust-mode . . . . . . . . . . . . . . . . . . . . . . . . . .426

Chapter 22 Quality of Service Commands

class-map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .428

description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .429

match . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .429

rename . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .430

policy-map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .431

class . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .431

police flow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .432

police srtcm-color . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .434

police trtcm-color . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .436

set cos . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .438

set ip dscp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .439

set phb . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .439

service-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .440

show class-map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .441

show policy-map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .441

show policy-map interface . . . . . . . . . . . . . . . . . . . . . . . . . .442

Chapter 23 Multicast Filtering Commands

IGMP Snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .443

ip igmp snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .445

ip igmp snooping priority . . . . . . . . . . . . . . . . . . . . . . . . . . . .445

ip igmp snooping proxy-reporting . . . . . . . . . . . . . . . . . . . . .446

ip igmp snooping querier . . . . . . . . . . . . . . . . . . . . . . . . . . .446

ip igmp snooping router-alert-option-check . . . . . . . . . . . . .447

ip igmp snooping router-port-expire-time . . . . . . . . . . . . . . .448

ip igmp snooping tcn-flood . . . . . . . . . . . . . . . . . . . . . . . . . .448

xvi Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 19

ip igmp snooping tcn-query-solicit . . . . . . . . . . . . . . . . . . . .449

ip igmp snooping unregistered-data-flood . . . . . . . . . . . . . .450

ip igmp snooping unsolicited-report-interval . . . . . . . . . . . .450

ip igmp snooping version . . . . . . . . . . . . . . . . . . . . . . . . . . .451

ip igmp snooping version-exclusive . . . . . . . . . . . . . . . . . . .451

ip igmp snooping vlan general-query-suppression . . . . . . .452

ip igmp snooping vlan immediate-leave . . . . . . . . . . . . . . .452

ip igmp snooping vlan last-memb-query-count . . . . . . . . . .453

ip igmp snooping vlan last-memb-query-intvl . . . . . . . . . . .454

ip igmp snooping vlan mrd . . . . . . . . . . . . . . . . . . . . . . . . . .454

ip igmp snooping vlan proxy-address . . . . . . . . . . . . . . . . . .455

ip igmp snooping vlan query-interval . . . . . . . . . . . . . . . . .456

ip igmp snooping vlan query-resp-intvl . . . . . . . . . . . . . . . .457

ip igmp snooping vlan static . . . . . . . . . . . . . . . . . . . . . . . . .457

show ip igmp snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . . .458

show ip igmp snooping group . . . . . . . . . . . . . . . . . . . . . . .459

show ip igmp snooping mrouter . . . . . . . . . . . . . . . . . . . . . .460

show ip igmp snooping statistics . . . . . . . . . . . . . . . . . . . . .461

Static Multicast Routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .463

ip igmp snooping vlan mrouter . . . . . . . . . . . . . . . . . . . . . . .463

IGMP Filtering and Throttling . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .464

ip igmp filter (Global Configuration) . . . . . . . . . . . . . . . . . . .464

ip igmp profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .465

permit, deny . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .465

range . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .466

ip igmp filter (Interface Configuration) . . . . . . . . . . . . . . . . .466

ip igmp max-groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .467

ip igmp max-groups action . . . . . . . . . . . . . . . . . . . . . . . . . .467

show ip igmp filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .468

show ip igmp profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .469

show ip igmp throttle interface . . . . . . . . . . . . . . . . . . . . . . .469

MVR for IPv4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .470

mvr . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 471

mvr associated-profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 471

mvr domain . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .472

mvr priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .472

mvr profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .473

mvr proxy-switching . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 474

mvr robustness-value . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .475

mvr upstream-source-ip . . . . . . . . . . . . . . . . . . . . . . . . . . . .475

mvr vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 476

mvr immediate-leave . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 476

mvr type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .477

mvr vlan group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .478

show mvr . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .479

show mvr associated-profile . . . . . . . . . . . . . . . . . . . . . . . . .480

show mvr interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .480

show mvr members . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .481

show mvr profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .482

show mvr statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .483

Brocade 6910 Ethernet Access Switch Configuration Guide xvii 53-1002651-02

Page 20

MVR for IPv6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .485

mvr6 associated-profile . . . . . . . . . . . . . . . . . . . . . . . . . . . .486

mvr6 domain . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .486

mvr6 profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .487

mvr6 proxy-switching . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .488

mvr6 robustness-value . . . . . . . . . . . . . . . . . . . . . . . . . . . . .489

mvr6 upstream-source-ip . . . . . . . . . . . . . . . . . . . . . . . . . . .489

mvr6 vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .490

mvr6 immediate-leave . . . . . . . . . . . . . . . . . . . . . . . . . . . . .490

mvr6 type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .491

mvr6 vlan group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .492

show mvr6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .493

show mvr6 associated-profile . . . . . . . . . . . . . . . . . . . . . . . .494

show mvr6 interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .494

show mvr6 members . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .495

show mvr6 profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .496

show mvr6 statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .496

Chapter 24 LLDP Commands

lldp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .500

lldp holdtime-multiplier . . . . . . . . . . . . . . . . . . . . . . . . . . . . .500

lldp notification-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . .501

lldp refresh-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .502

lldp reinit-delay . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .502

lldp tx-delay . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .503

lldp admin-status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .503

lldp basic-tlv management-ip-address . . . . . . . . . . . . . . . . .504

lldp basic-tlv port-description . . . . . . . . . . . . . . . . . . . . . . . .504

lldp basic-tlv system-capabilities . . . . . . . . . . . . . . . . . . . . .505

lldp basic-tlv system-description . . . . . . . . . . . . . . . . . . . . .505

lldp basic-tlv system-name . . . . . . . . . . . . . . . . . . . . . . . . . .506

lldp dot1-tlv proto-ident . . . . . . . . . . . . . . . . . . . . . . . . . . . . .506

lldp dot1-tlv proto-vid . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .507

lldp dot1-tlv pvid . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .507

lldp dot1-tlv vlan-name . . . . . . . . . . . . . . . . . . . . . . . . . . . . .508

lldp dot3-tlv link-agg . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .508

lldp dot3-tlv mac-phy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .509

lldp dot3-tlv max-frame . . . . . . . . . . . . . . . . . . . . . . . . . . . . .509

lldp notification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .510

show lldp config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 510

show lldp info local-device . . . . . . . . . . . . . . . . . . . . . . . . . .512

show lldp info remote-device . . . . . . . . . . . . . . . . . . . . . . . .513

show lldp info statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . .514

Chapter 25 CFM Commands

Defining CFM Structures . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .521

ethernet cfm ais level . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .521

ethernet cfm ais ma . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .521

ethernet cfm ais period . . . . . . . . . . . . . . . . . . . . . . . . . . . . .522

ethernet cfm ais suppress alarm . . . . . . . . . . . . . . . . . . . . .523

xviii Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 21

ethernet cfm domain . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .524

ethernet cfm enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .525

ma index name . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .526

ma index name-format . . . . . . . . . . . . . . . . . . . . . . . . . . . . .527

ethernet cfm mep . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .528

ethernet cfm port-enable . . . . . . . . . . . . . . . . . . . . . . . . . . .529

clear ethernet cfm ais mpid . . . . . . . . . . . . . . . . . . . . . . . . .529

show ethernet cfm configuration . . . . . . . . . . . . . . . . . . . . .530

show ethernet cfm md . . . . . . . . . . . . . . . . . . . . . . . . . . . . .531

show ethernet cfm ma . . . . . . . . . . . . . . . . . . . . . . . . . . . . .532

show ethernet cfm maintenance-points local . . . . . . . . . . .532

show ethernet cfm maintenance-points local detail mep .533

show ethernet cfm maintenance-points remote detail . . . .535

Continuity Check Operations . . . . . . . . . . . . . . . . . . . . . . . . . . . .537

ethernet cfm cc ma interval . . . . . . . . . . . . . . . . . . . . . . . . .537

ethernet cfm cc enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . .538

snmp-server enable traps ethernet cfm cc . . . . . . . . . . . . .539

mep archive-hold-time . . . . . . . . . . . . . . . . . . . . . . . . . . . . .539

clear ethernet cfm maintenance-points remote . . . . . . . . .540

clear ethernet cfm errors . . . . . . . . . . . . . . . . . . . . . . . . . . .540

show ethernet cfm errors . . . . . . . . . . . . . . . . . . . . . . . . . . .541

Cross Check Operations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .542

ethernet cfm mep crosscheck start-delay . . . . . . . . . . . . . .542

snmp-server enable traps ethernet cfm crosscheck . . . . .543

mep crosscheck mpid . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .543

ethernet cfm mep crosscheck . . . . . . . . . . . . . . . . . . . . . . .544

show ethernet cfm maintenance-points remote crosscheck 545

Link Trace Operations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .545

ethernet cfm linktrace cache . . . . . . . . . . . . . . . . . . . . . . . .545

ethernet cfm linktrace cache hold-time . . . . . . . . . . . . . . . .546

ethernet cfm linktrace cache size . . . . . . . . . . . . . . . . . . . .547

ethernet cfm linktrace . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .547

clear ethernet cfm linktrace-cache . . . . . . . . . . . . . . . . . . .548

show ethernet cfm linktrace-cache . . . . . . . . . . . . . . . . . . .548

Loopback Operations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .550

ethernet cfm loopback . . . . . . . . . . . . . . . . . . . . . . . . . . . . .550

Fault Generator Operations . . . . . . . . . . . . . . . . . . . . . . . . . . . . .551

mep fault-notify alarm-time . . . . . . . . . . . . . . . . . . . . . . . . .551

mep fault-notify lowest-priority . . . . . . . . . . . . . . . . . . . . . . .551

mep fault-notify reset-time . . . . . . . . . . . . . . . . . . . . . . . . . .553

show ethernet cfm fault-notify-generator . . . . . . . . . . . . . .553

Delay Measure Operations . . . . . . . . . . . . . . . . . . . . . . . . . . . . .554

ethernet cfm delay-measure binding . . . . . . . . . . . . . . . . . .554

ethernet cfm delay-measure destination . . . . . . . . . . . . . .555

ethernet cfm delay-measure enable . . . . . . . . . . . . . . . . . .556

ethernet cfm delay-measure group . . . . . . . . . . . . . . . . . . .557

ethernet cfm delay-measure threshold . . . . . . . . . . . . . . . .558

snmp-server enable traps ethernet cfm delay-measure

threshold . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .558

ethernet cfm delay-measure one-way . . . . . . . . . . . . . . . . .559

Brocade 6910 Ethernet Access Switch Configuration Guide xix 53-1002651-02

Page 22

ethernet cfm delay-measure two-way . . . . . . . . . . . . . . . . .560

show ethernet cfm delay-measure two-way . . . . . . . . . . . .561

Loss Measure Operations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .562

ethernet cfm loss-measure dual-ended destination . . . . . .562

ethernet cfm loss-measure enable . . . . . . . . . . . . . . . . . . .563

ethernet cfm loss-measure single-ended binding . . . . . . . .564

ethernet cfm loss-measure single-ended destination . . . .565

ethernet cfm loss-measure single-ended group . . . . . . . . .566

ethernet cfm loss-measure single-ended . . . . . . . . . . . . . .567

show ethernet cfm loss-measure single-ended . . . . . . . . .568

Chapter 26 OAM Commands

efm oam . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .570

efm oam critical-link-event . . . . . . . . . . . . . . . . . . . . . . . . . .570

efm oam link-monitor frame . . . . . . . . . . . . . . . . . . . . . . . . . 571

efm oam link-monitor frame threshold . . . . . . . . . . . . . . . . 571

efm oam link-monitor frame window . . . . . . . . . . . . . . . . . .572

efm oam mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 573

clear efm oam counters . . . . . . . . . . . . . . . . . . . . . . . . . . . .573

efm oam remote-loopback . . . . . . . . . . . . . . . . . . . . . . . . . . 574

efm oam remote-loopback test . . . . . . . . . . . . . . . . . . . . . .575

show efm oam counters interface . . . . . . . . . . . . . . . . . . .576

show efm oam event-log interface . . . . . . . . . . . . . . . . . . .576

show efm oam remote-loopback interface . . . . . . . . . . . . .577

show efm oam status interface . . . . . . . . . . . . . . . . . . . . . . 577

show efm oam status remote interface . . . . . . . . . . . . . . .578

Chapter 27 Domain Name Service Commands

ip domain-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .579

ip domain-lookup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .580

ip domain-name . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .581

ip host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .582

ip name-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .582

ipv6 host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .583

clear dns cache . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .584

clear host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .584

show dns . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .585

show dns cache . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .585

show hosts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .586

Chapter 28 DHCP Commands

DHCP Client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .587

ip dhcp client class-id . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .588

ip dhcp restart client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .589

ipv6 dhcp client rapid-commit vlan . . . . . . . . . . . . . . . . . . .590

ipv6 dhcp restart client vlan . . . . . . . . . . . . . . . . . . . . . . . . .590

show ipv6 dhcp duid . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .591

show ipv6 dhcp vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .592

xx Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 23

DHCP Relay . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .592

ip dhcp relay server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .593

ip dhcp restart relay . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .593

show ip dhcp relay . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .594

Chapter 29 IP Interface Commands

IPv4 Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .595

Basic IPv4 Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .596

ip address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .596

ip default-gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .597

show ip interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .598

show ip traffic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .598

traceroute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .600

ping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .601

ARP Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .602

arp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .602

arp timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .603

ip proxy-arp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .603

clear arp-cache . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .604

show arp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .604

IPv6 Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .605

Interface Address Configuration and Utilities . . . . . . . . . . . . . . .606

ipv6 default-gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .606

ipv6 address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .607

ipv6 address autoconfig . . . . . . . . . . . . . . . . . . . . . . . . . . . .608

ipv6 address eui-64 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .609

ipv6 address link-local . . . . . . . . . . . . . . . . . . . . . . . . . . . . .611

ipv6 enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .612

ipv6 mtu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .613

show ipv6 default-gateway . . . . . . . . . . . . . . . . . . . . . . . . . .614

show ipv6 interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .614

show ipv6 mtu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .616

show ipv6 traffic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .616

clear ipv6 traffic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .621

ping6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .621

traceroute6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .622

Neighbor Discovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .623

ipv6 nd dad attempts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .623

ipv6 nd ns-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .625

ipv6 nd reachable-time . . . . . . . . . . . . . . . . . . . . . . . . . . . . .626

clear ipv6 neighbors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .626

show ipv6 neighbors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .626

Chapter 30 IP Routing Commands

ip route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .629

show ip route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .630

show ip route database . . . . . . . . . . . . . . . . . . . . . . . . . . . . .631

Brocade 6910 Ethernet Access Switch Configuration Guide xxi 53-1002651-02

Page 24

Chapter 31 Debug Commands

debug hardware dev-amtrdrv . . . . . . . . . . . . . . . . . . . . . . . .634

debug hardware dev-rm . . . . . . . . . . . . . . . . . . . . . . . . . . . .634

debug hardware dev-swdrv . . . . . . . . . . . . . . . . . . . . . . . . . .638

debug ipcfg . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .640

debug route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .641

debug igmpsnp-mvr show-forward-entry . . . . . . . . . . . . . . .643

debug igmpsnp-mvr show-group-record . . . . . . . . . . . . . . . .644

debug igmpsnp-mvr show-interface-sflags . . . . . . . . . . . . .646

debug igmpsnp-mvr show-interface-status . . . . . . . . . . . . .647

debug igmpsnp-mvr show-interface-timers . . . . . . . . . . . . .649

debug msl show-interface-info . . . . . . . . . . . . . . . . . . . . . . .650

debug msl show-mrt-info . . . . . . . . . . . . . . . . . . . . . . . . . . .650

debug erps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .651

Section III Web Configuration

Chapter 32 Using the Web Interface

Connecting to the Web Interface . . . . . . . . . . . . . . . . . . . . . . . . . . .655

Navigating the Web Browser Interface . . . . . . . . . . . . . . . . . . . . . .656

Home Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .656

Configuration Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .657

Panel Display . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .657

Main Menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .658

Chapter 33 Basic Management Tasks

Displaying System Information. . . . . . . . . . . . . . . . . . . . . . . . . . . . .675

Displaying Hardware/Software Versions . . . . . . . . . . . . . . . . . . . .676

Configuring Support for Jumbo Frames. . . . . . . . . . . . . . . . . . . . . .677

Displaying Bridge Extension Capabilities. . . . . . . . . . . . . . . . . . . . .678

Managing System Files. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .679

Copying Files via FTP/SFTP/TFTP or HTTP. . . . . . . . . . . . . . . .679

Saving the Running Configuration to a Local File . . . . . . . . . .681

Setting The Start-Up File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .682

Showing System Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .683

Automatic Operation Code Upgrade. . . . . . . . . . . . . . . . . . . . .684

Setting the System Clock . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .687

Setting the Time Manually. . . . . . . . . . . . . . . . . . . . . . . . . . . . .687

Setting the SNTP Polling Interval . . . . . . . . . . . . . . . . . . . . . . .688

Specifying SNTP Time Servers . . . . . . . . . . . . . . . . . . . . . . . . .689

Setting the Time Zone . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .690

Configuring Summer Time. . . . . . . . . . . . . . . . . . . . . . . . . . . . .691

Configuring the Console Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .693

Configuring Telnet Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .694

Displaying CPU Utilization. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .696

xxii Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 25

Displaying Memory Utilization . . . . . . . . . . . . . . . . . . . . . . . . . . . . .696

Resetting the System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .697

Chapter 34 Interface Configuration

Port Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .701

Configuring by Port List . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .701

Configuring by Port Range. . . . . . . . . . . . . . . . . . . . . . . . . . . . .703

Displaying Connection Status . . . . . . . . . . . . . . . . . . . . . . . . . .704

Configuring Local Port Mirroring . . . . . . . . . . . . . . . . . . . . . . . .705

Configuring Remote Port Mirroring. . . . . . . . . . . . . . . . . . . . . .706

Showing Port or Trunk Statistics . . . . . . . . . . . . . . . . . . . . . . . . 710

Configuring History Sampling . . . . . . . . . . . . . . . . . . . . . . . . . . 715

Displaying Transceiver Data . . . . . . . . . . . . . . . . . . . . . . . . . . .718

Configuring Transceiver Thresholds . . . . . . . . . . . . . . . . . . . . .719

Performing Cable Diagnostics. . . . . . . . . . . . . . . . . . . . . . . . . .721

Performing Loopback Testing . . . . . . . . . . . . . . . . . . . . . . . . . .722

Trunk Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .725

Configuring a Static Trunk . . . . . . . . . . . . . . . . . . . . . . . . . . . . .726

Configuring a Dynamic Trunk . . . . . . . . . . . . . . . . . . . . . . . . . .728

Displaying LACP Port Counters . . . . . . . . . . . . . . . . . . . . . . . . .733

Displaying LACP Settings and Status for the Local Side . . . . .734

Displaying LACP Settings and Status for the Remote Side . . .736

Configuring Load Balancing . . . . . . . . . . . . . . . . . . . . . . . . . . .737

Saving Power . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .739

Sampling Traffic Flows . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .740

Configuring sFlow Global Settings . . . . . . . . . . . . . . . . . . . . . . 741

Configuring sFlow Interface Settings . . . . . . . . . . . . . . . . . . . . 741

Traffic Segmentation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .743

Enabling Traffic Segmentation . . . . . . . . . . . . . . . . . . . . . . . . .743

Configuring Uplink and Downlink Ports . . . . . . . . . . . . . . . . . .744

VLAN Trunking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .746

Chapter 35 VLAN Configuration

IEEE 802.1Q VLANs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .749

Configuring VLAN Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . .752

Adding Static Members to VLANs . . . . . . . . . . . . . . . . . . . . . . .754

Configuring Dynamic VLAN Registration. . . . . . . . . . . . . . . . . .758

IEEE 802.1Q Tunneling. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .760

Enabling QinQ Tunneling on the Switch . . . . . . . . . . . . . . . . . .763

Creating CVLAN to SPVLAN Mapping Entries . . . . . . . . . . . . . .764

Adding an Interface to a QinQ Tunnel. . . . . . . . . . . . . . . . . . . .766

Protocol VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .767

Configuring Protocol VLAN Groups . . . . . . . . . . . . . . . . . . . . . .768

Mapping Protocol Groups to Interfaces . . . . . . . . . . . . . . . . . .769

Configuring IP Subnet VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .771

Creating IP Subnet VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 771

Binding an Interface to an IP Subnet VLAN . . . . . . . . . . . . . . .773

Brocade 6910 Ethernet Access Switch Configuration Guide xxiii 53-1002651-02

Page 26

Configuring MAC-based VLANs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 774

Configuring VLAN Mirroring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .775

Configuring VLAN Translation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .777

Chapter 36 Address Table Settings

Setting Static Addresses. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .779

Changing the Aging Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .781

Displaying the Dynamic Address Table . . . . . . . . . . . . . . . . . . . . . .782

Clearing the Dynamic Address Table . . . . . . . . . . . . . . . . . . . . . . . .783

Configuring MAC Address Mirroring . . . . . . . . . . . . . . . . . . . . . . . . .783

Chapter 37 Spanning Tree Algorithm

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .785

Configuring Loopback Detection . . . . . . . . . . . . . . . . . . . . . . . . . . .787

Configuring Global Settings for STA . . . . . . . . . . . . . . . . . . . . . . . . .789

Displaying Global Settings for STA . . . . . . . . . . . . . . . . . . . . . . . . . .793

Configuring Interface Settings for STA . . . . . . . . . . . . . . . . . . . . . . .794

Displaying Interface Settings for STA. . . . . . . . . . . . . . . . . . . . . . . .797

Configuring Multiple Spanning Trees . . . . . . . . . . . . . . . . . . . . . . . .799

Configuring Interface Settings for MSTP . . . . . . . . . . . . . . . . . . . . .803

Chapter 38 Congestion Control

Rate Limiting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .807

Storm Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .808

Automatic Traffic Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .810

Setting the ATC Timers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .811

Configuring ATC Thresholds and Responses . . . . . . . . . . . . . .812

Chapter 39 Class of Service

Layer 2 Queue Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .815

Setting the Default Priority for Interfaces. . . . . . . . . . . . . . . . .815

Selecting the Queue Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . .816

Mapping CoS Values to Egress Queues . . . . . . . . . . . . . . . . . .819

Layer 3/4 Priority Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .821

Setting Priority Processing to DSCP or CoS . . . . . . . . . . . . . . .821

Mapping Ingress DSCP Values to Internal DSCP Values . . . . .822

Mapping CoS Priorities to Internal DSCP Values . . . . . . . . . . .824

Chapter 40 Quality of Service

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .827

Configuring a Class Map. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .828

xxiv Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 27

Creating QoS Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .831

Attaching a Policy Map to a Port . . . . . . . . . . . . . . . . . . . . . . . . . . .839

Chapter 41 VoIP Traffic Configuration

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .841

Configuring VoIP Traffic. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .841

Configuring Telephony OUI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .843

Configuring VoIP Traffic Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .844

Chapter 42 Security Measures

AAA Authentication, Authorization and Accounting. . . . . . . . . . . . .848

Configuring Local/Remote Logon Authentication . . . . . . . . . .848

Configuring Remote Logon Authentication Servers. . . . . . . . .849

Configuring AAA Accounting . . . . . . . . . . . . . . . . . . . . . . . . . . .854

Configuring AAA Authorization. . . . . . . . . . . . . . . . . . . . . . . . . .858

Configuring User Accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .860

Web Authentication. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .862

Configuring Global Settings for Web Authentication . . . . . . . .862

Configuring Interface Settings for Web Authentication . . . . . .863

Network Access (MAC Address Authentication) . . . . . . . . . . . . . . .864

Configuring Global Settings for Network Access . . . . . . . . . . .866

Configuring Network Access for Ports . . . . . . . . . . . . . . . . . . .867

Configuring Port Link Detection . . . . . . . . . . . . . . . . . . . . . . . .869

Configuring a MAC Address Filter . . . . . . . . . . . . . . . . . . . . . . .870

Displaying Secure MAC Address Information. . . . . . . . . . . . . .871

Configuring HTTPS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .872

Configuring Global Settings for HTTPS . . . . . . . . . . . . . . . . . . .872

Replacing the Default Secure-site Certificate . . . . . . . . . . . . . 874

Configuring Secure Shell . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .875

Configuring the SSH Server. . . . . . . . . . . . . . . . . . . . . . . . . . . .877

Generating the Host Key Pair . . . . . . . . . . . . . . . . . . . . . . . . . .878

Importing User Public Keys . . . . . . . . . . . . . . . . . . . . . . . . . . . .880

Access Control Lists . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .882

Setting A Time Range . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .883

Showing TCAM Utilization . . . . . . . . . . . . . . . . . . . . . . . . . . . . .885

Setting the ACL Name and Type . . . . . . . . . . . . . . . . . . . . . . . .886

Configuring a Standard IPv4 ACL . . . . . . . . . . . . . . . . . . . . . . .887

Configuring an Extended IPv4 ACL . . . . . . . . . . . . . . . . . . . . . .889

Configuring a Standard IPv6 ACL . . . . . . . . . . . . . . . . . . . . . . .891

Configuring an Extended IPv6 ACL . . . . . . . . . . . . . . . . . . . . . .892

Configuring a MAC ACL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .894

Configuring an ARP ACL. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .896

Binding a Port to an Access Control List. . . . . . . . . . . . . . . . . .897

Configuring ACL Mirroring . . . . . . . . . . . . . . . . . . . . . . . . . . . . .898

Showing ACL Hardware Counters . . . . . . . . . . . . . . . . . . . . . . .900

Brocade 6910 Ethernet Access Switch Configuration Guide xxv 53-1002651-02

Page 28

ARP Inspection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .901

Configuring Global Settings for ARP Inspection. . . . . . . . . . . .901

Configuring VLAN Settings for ARP Inspection. . . . . . . . . . . . .903

Configuring Interface Settings for ARP Inspection. . . . . . . . . .904

Displaying ARP Inspection Statistics . . . . . . . . . . . . . . . . . . . .905

Displaying the ARP Inspection Log . . . . . . . . . . . . . . . . . . . . . .907

Filtering IP Addresses for Management Access . . . . . . . . . . . . . . .907

Configuring Port Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .909

Configuring 802.1X Port Authentication . . . . . . . . . . . . . . . . . . . . . 911

Configuring 802.1X Global Settings . . . . . . . . . . . . . . . . . . . . .912

Configuring Port Authenticator Settings for 802.1X . . . . . . . .914

Configuring Port Supplicant Settings for 802.1X. . . . . . . . . . .917

Displaying 802.1X Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . .919

IP Source Guard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .921

Configuring Ports for IP Source Guard . . . . . . . . . . . . . . . . . . .921

Configuring Static Bindings for IP Source Guard . . . . . . . . . . .923

Displaying Information for Dynamic IP Source Guard Bindings925

DHCP Snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .926

DHCP Snooping Configuration . . . . . . . . . . . . . . . . . . . . . . . . .927

DHCP Snooping VLAN Configuration . . . . . . . . . . . . . . . . . . . .929

Configuring Ports for DHCP Snooping . . . . . . . . . . . . . . . . . . .930

Displaying DHCP Snooping Binding Information . . . . . . . . . . .931

Chapter 43 Basic Administration Protocols

Configuring Event Logging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .933

System Log Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . .933

Remote Log Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . .936

Sending Simple Mail Transfer Protocol Alerts . . . . . . . . . . . . .937

Link Layer Discovery Protocol. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .938

Setting LLDP Timing Attributes . . . . . . . . . . . . . . . . . . . . . . . . .938

Configuring LLDP Interface Attributes . . . . . . . . . . . . . . . . . . .940

Displaying LLDP Local Device Information. . . . . . . . . . . . . . . .942

Displaying LLDP Remote Device Information. . . . . . . . . . . . . .944

Displaying Device Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . .950

Simple Network Management Protocol . . . . . . . . . . . . . . . . . . . . .951

Configuring Global Settings for SNMP . . . . . . . . . . . . . . . . . . .953

Setting the Local Engine ID . . . . . . . . . . . . . . . . . . . . . . . . . . . .954

Specifying a Remote Engine ID . . . . . . . . . . . . . . . . . . . . . . . . .955

Setting SNMPv3 Views . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .956

Configuring SNMPv3 Groups . . . . . . . . . . . . . . . . . . . . . . . . . .959

Setting Community Access Strings . . . . . . . . . . . . . . . . . . . . .960

Configuring Local SNMPv3 Users . . . . . . . . . . . . . . . . . . . . . .962

Configuring Remote SNMPv3 Users . . . . . . . . . . . . . . . . . . . .963

Specifying Trap Managers . . . . . . . . . . . . . . . . . . . . . . . . . . . . .965

Creating SNMP Notification Logs . . . . . . . . . . . . . . . . . . . . . . .969

Showing SNMP Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 971

xxvi Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 29

Remote Monitoring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .973

Configuring RMON Alarms. . . . . . . . . . . . . . . . . . . . . . . . . . . . .973

Configuring RMON Events . . . . . . . . . . . . . . . . . . . . . . . . . . . . .976

Configuring RMON History Samples . . . . . . . . . . . . . . . . . . . . .978

Configuring RMON Statistical Samples . . . . . . . . . . . . . . . . . .980

Ethernet Ring Protection Switching . . . . . . . . . . . . . . . . . . . . . . . . .982

ERPS Global Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . .984

ERPS Ring Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .985

Connectivity Fault Management . . . . . . . . . . . . . . . . . . . . . . . . . . .992

Configuring Global Settings for CFM. . . . . . . . . . . . . . . . . . . . .995

Configuring Interfaces for CFM . . . . . . . . . . . . . . . . . . . . . . . . .998

Configuring CFM Maintenance Domains . . . . . . . . . . . . . . . . .999

Configuring CFM Maintenance Associations . . . . . . . . . . . . 1003

Configuring Maintenance End Points . . . . . . . . . . . . . . . . . . .1007

Configuring Remote Maintenance End Points . . . . . . . . . . . 1008

Transmitting Periodic Delay-Measure Messages . . . . . . . . . . 1010

Transmitting Periodic Loss-Measure Messages . . . . . . . . . . 1014

Transmitting Link Trace Messages . . . . . . . . . . . . . . . . . . . . .1018

Transmitting Loop Back Messages. . . . . . . . . . . . . . . . . . . . 1020

Transmitting On-Demand Delay-Measure Requests . . . . . . .1021

Transmitting On-Demand Loss-Measure Requests . . . . . . . .1024

Displaying Local MEPs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1026

Displaying Details for Local MEPs. . . . . . . . . . . . . . . . . . . . . .1027

Displaying Local MIPs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1029

Displaying Remote MEPs. . . . . . . . . . . . . . . . . . . . . . . . . . . . 1030

Displaying Details for Remote MEPs. . . . . . . . . . . . . . . . . . . .1031

Displaying the Link Trace Cache . . . . . . . . . . . . . . . . . . . . . . 1033

Displaying Fault Notification Settings . . . . . . . . . . . . . . . . . . 1035

Displaying Continuity Check Errors. . . . . . . . . . . . . . . . . . . . 1036

Displaying Two-Way Delay-Measure Results . . . . . . . . . . . . .1037

Displaying Single-Ended Loss-Measure Results . . . . . . . . . 1038

OAM Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1038

Enabling OAM on Local Ports . . . . . . . . . . . . . . . . . . . . . . . . 1038

Displaying Statistics for OAM Messages . . . . . . . . . . . . . . . .1041

Displaying the OAM Event Log. . . . . . . . . . . . . . . . . . . . . . . . 1042

Displaying the Status of Remote Interfaces. . . . . . . . . . . . . 1043

Configuring a Remote Loop Back Test . . . . . . . . . . . . . . . . . 1044

Displaying Results of Remote Loop Back Testing . . . . . . . . 1046

Chapter 44 IP Configuration

Setting the Switch’s IP Address (IP Version 4) . . . . . . . . . . . . . . .1047

Setting the Switch’s IP Address (IP Version 6) . . . . . . . . . . . . . . 1050

Configuring the IPv6 Default Gateway . . . . . . . . . . . . . . . . . .1051

Configuring IPv6 Interface Settings . . . . . . . . . . . . . . . . . . . 1052

Configuring an IPv6 Address. . . . . . . . . . . . . . . . . . . . . . . . . 1055

Showing IPv6 Addresses . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1057

Showing the IPv6 Neighbor Cache . . . . . . . . . . . . . . . . . . . . 1059

Showing IPv6 Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1060

Showing the MTU for Responding Destinations. . . . . . . . . . 1066

Brocade 6910 Ethernet Access Switch Configuration Guide xxvii 53-1002651-02

Page 30

Using the Ping Function . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1066

Using the Trace Route Function . . . . . . . . . . . . . . . . . . . . . . . . . . 1068

Address Resolution Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1069

Basic ARP Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1070

Configuring Static ARP Addresses . . . . . . . . . . . . . . . . . . . . .1071

Displaying ARP Entries. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1073

Displaying ARP Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . .1074

Chapter 45 General IP Routing

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1075

Initial Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1075

IP Routing and Switching . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1076

Configuring IP Routing Interfaces . . . . . . . . . . . . . . . . . . . . . . . . .1077

Configuring Local and Remote Interfaces . . . . . . . . . . . . . . .1077

Configuring Static Routes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1078

Displaying the Routing Table . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1079

Chapter 46 IP Services

Domain Name Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1081

Configuring General DNS Service Parameters . . . . . . . . . . .1081

Configuring a List of Domain Names . . . . . . . . . . . . . . . . . . 1082

Configuring a List of Name Servers . . . . . . . . . . . . . . . . . . . 1083

Configuring Static DNS Host to Address Entries . . . . . . . . . 1084

Displaying the DNS Cache. . . . . . . . . . . . . . . . . . . . . . . . . . . 1086

Dynamic Host Configuration Protocol . . . . . . . . . . . . . . . . . . . . . .1087

Specifying A DHCP Client Identifier. . . . . . . . . . . . . . . . . . . . .1087

Configuring DHCP Relay Service. . . . . . . . . . . . . . . . . . . . . . 1088

Chapter 47 Multicast Filtering

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1091

Layer 2 IGMP (Snooping and Query) . . . . . . . . . . . . . . . . . . . . . . 1092

Configuring IGMP Snooping and Query Parameters . . . . . . 1093

Specifying Static Interfaces for a Multicast Router . . . . . . . .1097

Assigning Interfaces to Multicast Services . . . . . . . . . . . . . 1099

Setting IGMP Snooping Status per Interface . . . . . . . . . . . . .1101

Displaying Multicast Groups Discovered by IGMP Snooping 1106

Displaying IGMP Snooping Statistics . . . . . . . . . . . . . . . . . . 1106

Filtering and Throttling IGMP Groups. . . . . . . . . . . . . . . . . . . . . . 1109

Enabling IGMP Filtering and Throttling. . . . . . . . . . . . . . . . . .1110

Configuring IGMP Filter Profiles . . . . . . . . . . . . . . . . . . . . . . .1110

Configuring IGMP Filtering and Throttling for Interfaces . . . 1112

xxviii Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 31

Multicast VLAN Registration for IPv4 . . . . . . . . . . . . . . . . . . . . . . .1114

Configuring MVR Global Settings . . . . . . . . . . . . . . . . . . . . . 1115

Configuring MVR Domain Settings . . . . . . . . . . . . . . . . . . . . .1116

Configuring MVR Group Address Profiles . . . . . . . . . . . . . . . .1117

Configuring MVR Interface Status . . . . . . . . . . . . . . . . . . . . 1120

Assigning Static MVR Multicast Groups to Interfaces . . . . . 1122

Displaying MVR Receiver Groups . . . . . . . . . . . . . . . . . . . . . 1123

Displaying MVR Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . 1124

Multicast VLAN Registration for IPv6 . . . . . . . . . . . . . . . . . . . . . . 1127

Configuring MVR6 Global Settings . . . . . . . . . . . . . . . . . . . . 1128

Configuring MVR6 Domain Settings . . . . . . . . . . . . . . . . . . . 1129

Configuring MVR6 Group Address Profiles. . . . . . . . . . . . . . 1130

Configuring MVR6 Interface Status . . . . . . . . . . . . . . . . . . . 1133

Assigning Static MVR6 Multicast Groups to Interfaces . . . . 1134

Displaying MVR6 Receiver Groups . . . . . . . . . . . . . . . . . . . . 1136

Displaying MVR6 Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . .1137

Section IV Appendices

Appendix A Troubleshooting

Problems Accessing the Management Interface . . . . . . . . . . . . 1143

Using System Logs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1144

Appendix B Software Specifications

Software Features. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1145

Management Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1146

Management Information Bases . . . . . . . . . . . . . . . . . . . . . . . . . 1148

Appendix C License Information

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1151

The GNU General Public License . . . . . . . . . . . . . . . . . . . . . . . . . .1151

Appendix D Glossary and Acronyms

Command List

Index

Brocade 6910 Ethernet Access Switch Configuration Guide xxix 53-1002651-02

Page 32

xxx Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 33

Figures

Figure 1 Storm Control by Limiting the Traffic Rate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 310

Figure 2 Storm Control by Shutting Down a Port. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 311

Figure 3 Configuring VLAN Trunking. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 383

Figure 4 Mapping QinQ Service VLAN to Customer VLAN. . . . . . . . . . . . . . . . . . . . . . . . . 388

Figure 5 Configuring VLAN Translation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 395

Figure 6 Options 60, 66 and 67 Statements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 588

Figure 7 Options 55 and 124 Statements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 589

Figure 8 Home Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 656

Figure 9 Front Panel Indicators . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 657

Figure 10 System Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 676

Figure 11 General Switch Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 677

Figure 12 Configuring Support for Jumbo Frames . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 678

Figure 13 Displaying Bridge Extension Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 679

Figure 14 Copy Firmware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 681

Figure 15 Saving the Running Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 682

Figure 16 Setting Start-Up Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 683

Figure 17 Displaying System Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 683

Figure 18 Configuring Automatic Code Upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 686

Figure 19 Manually Setting the System Clock. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 688

Figure 20 Setting the Polling Interval for SNTP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 689

Figure 21 Specifying SNTP Time Servers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 689

Figure 22 Setting the Time Zone . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 690

Figure 23 Summer Time Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 692

Figure 24 Console Port Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 694

Figure 25 Telnet Connection Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 695

Figure 26 Displaying CPU Utilization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 696

Figure 27 Displaying Memory Utilization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 697

Figure 28 Restarting the Switch (Immediately) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 699

Figure 29 Restarting the Switch (In). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 699

Figure 30 Restarting the Switch (At). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 700

Figure 31 Restarting the Switch (Regularly) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 700

Figure 32 Configuring Connections by Port List. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 703

Figure 33 Configuring Connections by Port Range . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 704

Figure 34 Displaying Port Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 705

Figure 35 Configuring Local Port Mirroring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 705

Brocade 6910 Ethernet Access Switch Configuration Guide xxxi 53-1002651-02

Page 34

Figure 36 Configuring Local Port Mirroring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 706

Figure 37 Displaying Local Port Mirror Sessions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 706

Figure 38 Configuring Remote Port Mirroring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 707

Figure 39 Configuring Remote Port Mirroring (Source). . . . . . . . . . . . . . . . . . . . . . . . . . . . 709

Figure 40 Configuring Remote Port Mirroring (Intermediate). . . . . . . . . . . . . . . . . . . . . . . 710

Figure 41 Configuring Remote Port Mirroring (Destination) . . . . . . . . . . . . . . . . . . . . . . . . 710

Figure 42 Showing Port Statistics (Table) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 713

Figure 43 Showing Port Statistics (Chart) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 714

Figure 44 Configuring a History Sample. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 716

Figure 45 Showing Entries for History Sampling . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 716

Figure 46 Showing Status of Statistical History Sample. . . . . . . . . . . . . . . . . . . . . . . . . . . 717

Figure 47 Showing Current Statistics for a History Sample . . . . . . . . . . . . . . . . . . . . . . . . 717

Figure 48 Showing Ingress Statistics for a History Sample . . . . . . . . . . . . . . . . . . . . . . . . 718

Figure 49 Displaying Transceiver Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 719

Figure 50 Configuring Transceiver Thresholds . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 721

Figure 51 Performing Cable Tests . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 722

Figure 52 Performing Loopback Testing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 724

Figure 53 Showing Configured Settings for Loopback Testing. . . . . . . . . . . . . . . . . . . . . . 724

Figure 54 Showing Available Resources for Loopback Testing . . . . . . . . . . . . . . . . . . . . . 725

Figure 55 Configuring Static Trunks. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 726

Figure 56 Creating Static Trunks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 727

Figure 57 Adding Static Trunks Members . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 727

Figure 58 Configuring Connection Parameters for a Static Trunk . . . . . . . . . . . . . . . . . . . 728

Figure 59 Showing Information for Static Trunks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 728

Figure 60 Configuring Dynamic Trunks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 728

Figure 61 Configuring the LACP Aggregator Admin Key . . . . . . . . . . . . . . . . . . . . . . . . . . . 730

Figure 62 Enabling LACP on a Port. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 731

Figure 63 Configuring LACP Parameters on a Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 731

Figure 64 Showing Members of a Dynamic Trunk . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 732

Figure 65 Configuring Connection Settings for Dynamic Trunks . . . . . . . . . . . . . . . . . . . . 732

Figure 66 Displaying Connection Parameters for Dynamic Trunks . . . . . . . . . . . . . . . . . . 733

Figure 67 Displaying LACP Port Counters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 734

Figure 68 Displaying LACP Port Internal Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 736

Figure 69 Displaying LACP Port Remote Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 737

Figure 70 Configuring Load Balancing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 738

Figure 71 Enabling Power Savings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 740

Figure 72 Enabling Traffic Flow Sampling . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 741

Figure 73 Configuring Interface Settings for Traffic Flow Sampling. . . . . . . . . . . . . . . . . . 742

Figure 74 Enabling Traffic Segmentation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 743

Figure 75 Configuring Members for Traffic Segmentation . . . . . . . . . . . . . . . . . . . . . . . . . 745

Figure 76 Showing Traffic Segmentation Members . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 745

Figure 77 Configuring VLAN Trunking. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 746

xxxii Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 35

Figure 78 Configuring VLAN Trunking. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 747

Figure 79 VLAN Compliant and VLAN Non-compliant Devices . . . . . . . . . . . . . . . . . . . . . . 750

Figure 80 Using GVRP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 751

Figure 81 Creating Static VLANs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 753

Figure 82 Modifying Settings for Static VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 754

Figure 83 Showing Static VLANs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 754

Figure 84 Configuring Static Members by VLAN Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . 756

Figure 85 Configuring Static VLAN Members by Interface . . . . . . . . . . . . . . . . . . . . . . . . . 757

Figure 86 Configuring Static VLAN Members by Interface Range . . . . . . . . . . . . . . . . . . . 757

Figure 87 Configuring Global Status of GVRP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 759

Figure 88 Configuring GVRP for an Interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 759

Figure 89 Showing Dynamic VLANs Registered on the Switch. . . . . . . . . . . . . . . . . . . . . . 760

Figure 90 Showing the Members of a Dynamic VLAN. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 760

Figure 91 QinQ Operational Concept . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 761

Figure 92 Enabling QinQ Tunneling . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 764

Figure 93 Configuring CVLAN to SPVLAN Mapping Entries. . . . . . . . . . . . . . . . . . . . . . . . . 765

Figure 94 Showing CVLAN to SPVLAN Mapping Entries . . . . . . . . . . . . . . . . . . . . . . . . . . . 766

Figure 95 Adding an Interface to a QinQ Tunnel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 767

Figure 96 Configuring Protocol VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 768

Figure 97 Displaying Protocol VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 769

Figure 98 Assigning Interfaces to Protocol VLANs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 770

Figure 99 Showing the Interface to Protocol Group Mapping . . . . . . . . . . . . . . . . . . . . . . 771

Figure 100 Configuring IP Subnet VLANs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 772

Figure 101 Showing IP Subnet VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 772

Figure 102 Binding an Interface To an IP Subnet VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . 773

Figure 103 Showing the Interfaces Bound to IP Subnet VLANs . . . . . . . . . . . . . . . . . . . . . . 774

Figure 104 Configuring MAC-Based VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 775

Figure 105 Showing MAC-Based VLANs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 775

Figure 106 Configuring VLAN Mirroring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 776

Figure 107 Showing the VLANs to Mirror . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 777

Figure 108 Configuring VLAN Translation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 777

Figure 109 Configuring VLAN Translation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 778

Figure 110 Showing the Entries for VLAN Translation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 778

Figure 111 Configuring Static MAC Addresses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 780

Figure 112 Displaying Static MAC Addresses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 780

Figure 113 Setting the Address Aging Time. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 781

Figure 114 Displaying the Dynamic MAC Address Table . . . . . . . . . . . . . . . . . . . . . . . . . . . 782

Figure 115 Clearing Entries in the Dynamic MAC Address Table. . . . . . . . . . . . . . . . . . . . . 783

Figure 116 Mirroring Packets Based on the Source MAC Address . . . . . . . . . . . . . . . . . . . 784

Figure 117 Showing the Source MAC Addresses to Mirror. . . . . . . . . . . . . . . . . . . . . . . . . . 784

Figure 118 STP Root Ports and Designated Ports. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 786

Figure 119 MSTP Region, Internal Spanning Tree, Multiple Spanning Tree . . . . . . . . . . . . 786

Brocade 6910 Ethernet Access Switch Configuration Guide xxxiii 53-1002651-02

Page 36

Figure 120 Common Internal Spanning Tree, Common Spanning Tree, Internal

Spanning Tree . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .787

Figure 121 Configuring Port Loopback Detection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 788

Figure 122 Configuring Global Settings for STA (STP). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 792

Figure 123 Configuring Global Settings for STA (RSTP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . 792

Figure 124 Configuring Global Settings for STA (MSTP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . 793

Figure 125 Displaying Global Settings for STA. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 794

Figure 126 Configuring Interface Settings for STA . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 797

Figure 127 STA Port Roles. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 798

Figure 128 Displaying Interface Settings for STA . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 799

Figure 129 Creating an MST Instance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 801

Figure 130 Displaying MST Instances . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 801

Figure 131 Modifying the Priority for an MST Instance. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 802

Figure 132 Displaying Global Settings for an MST Instance. . . . . . . . . . . . . . . . . . . . . . . . . 802

Figure 133 Adding a VLAN to an MST Instance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 803

Figure 134 Displaying Members of an MST Instance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 803

Figure 135 Configuring MSTP Interface Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 804

Figure 136 Displaying MSTP Interface Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 805

Figure 137 Configuring Rate Limits . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 808

Figure 138 Configuring Storm Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 809

Figure 139 Storm Control by Limiting the Traffic Rate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 810

Figure 140 Storm Control by Shutting Down a Port. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 811

Figure 141 Configuring ATC Timers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 812

Figure 142 Configuring ATC Interface Attributes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 814

Figure 143 Setting the Default Port Priority. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 816

Figure 144 Setting the Queue Mode (Strict) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 818

Figure 145 Setting the Queue Mode (WRR). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 818

Figure 146 Setting the Queue Mode (Strict and WRR) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 818

Figure 147 Mapping CoS Values to Egress Queues . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 820

Figure 148 Showing CoS Values to Egress Queue Mapping. . . . . . . . . . . . . . . . . . . . . . . . . 821

Figure 149 Setting the Trust Mode. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 822

Figure 150 Configuring DSCP to DSCP Internal Mapping . . . . . . . . . . . . . . . . . . . . . . . . . . . 824

Figure 151 Showing DSCP to DSCP Internal Mapping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 824

Figure 152 Configuring CoS to DSCP Internal Mapping . . . . . . . . . . . . . . . . . . . . . . . . . . . . 826

Figure 153 Showing CoS to DSCP Internal Mapping. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 826

Figure 154 Configuring a Class Map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 829

Figure 155 Showing Class Maps. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 829

Figure 156 Adding Rules to a Class Map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 830

Figure 157 Showing the Rules for a Class Map. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 830

Figure 158 Configuring a Policy Map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 837

Figure 159 Showing Policy Maps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 837

Figure 160 Adding Rules to a Policy Map. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 838

xxxiv Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 37

Figure 161 Showing the Rules for a Policy Map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 838

Figure 162 Attaching a Policy Map to a Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 839

Figure 163 Configuring a Voice VLAN. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 842

Figure 164 Configuring an OUI Telephony List. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 843

Figure 165 Showing an OUI Telephony List . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 844

Figure 166 Configuring Port Settings for a Voice VLAN. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 845

Figure 167 Configuring the Authentication Sequence . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 849

Figure 168 Authentication Server Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 850

Figure 169 Configuring Remote Authentication Server (RADIUS) . . . . . . . . . . . . . . . . . . . . 852

Figure 170 Configuring Remote Authentication Server (TACACS+) . . . . . . . . . . . . . . . . . . . 852

Figure 171 Configuring AAA Server Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 853

Figure 172 Showing AAA Server Groups. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 853

Figure 173 Configuring Global Settings for AAA Accounting . . . . . . . . . . . . . . . . . . . . . . . . . 855

Figure 174 Configuring AAA Accounting Methods . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 856

Figure 175 Showing AAA Accounting Methods . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 856

Fi g u re 176 Configuring AAA Accounting Service for 802.1X Service . . . . . . . . . . . . . . . . . . 857

Figure 177 Configuring AAA Accounting Service for Exec Service . . . . . . . . . . . . . . . . . . . . 857

Figure 178 Displaying a Summary of Applied AAA Accounting Methods . . . . . . . . . . . . . . . 857

Figure 179 Displaying Statistics for AAA Accounting Sessions. . . . . . . . . . . . . . . . . . . . . . . 858

Figure 180 Configuring AAA Authorization Methods . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 859

Figure 181 Showing AAA Authorization Methods. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 859

Figure 182 Configuring AAA Authorization Methods for Exec Service . . . . . . . . . . . . . . . . . 860

Figure 183 Displaying the Applied AAA Authorization Method . . . . . . . . . . . . . . . . . . . . . . . 860

Figure 184 Configuring User Accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 861

Figure 185 Showing User Accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 862

Figure 186 Configuring Global Settings for Web Authentication . . . . . . . . . . . . . . . . . . . . . 863

Figure 187 Configuring Interface Settings for Web Authentication . . . . . . . . . . . . . . . . . . . 864

Figure 188 Configuring Global Settings for Network Access . . . . . . . . . . . . . . . . . . . . . . . . 867

Figure 189 Configuring Interface Settings for Network Access . . . . . . . . . . . . . . . . . . . . . . 868

Figure 190 Configuring Link Detection for Network Access . . . . . . . . . . . . . . . . . . . . . . . . . 869

Figure 191 Configuring a MAC Address Filter for Network Access. . . . . . . . . . . . . . . . . . . . 870

Figure 192 Showing the MAC Address Filter Table for Network Access . . . . . . . . . . . . . . . 871

Figure 193 Showing Addresses Authenticated for Network Access. . . . . . . . . . . . . . . . . . . 872

Figure 194 Configuring HTTPS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 873

Figure 195 Downloading the Secure-Site Certificate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 875

Figure 196 Configuring the SSH Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 878

Figure 197 Generating the SSH Host Key Pair . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 879

Figure 198 Showing the SSH Host Key Pair. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 879

Figure 199 Copying the SSH User’s Public Key . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 881

Figure 200 Showing the SSH User’s Public Key . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 881

Figure 201 Setting the Name of a Time Range . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 883

Figure 202 Showing a List of Time Ranges . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 884

Brocade 6910 Ethernet Access Switch Configuration Guide xxxv 53-1002651-02

Page 38

Figure 203 Add a Rule to a Time Range. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 884

Figure 204 Showing the Rules Configured for a Time Range . . . . . . . . . . . . . . . . . . . . . . . . 885

Figure 205 Showing TCAM Utilization. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 886

Figure 206 Creating an ACL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 887

Figure 207 Showing a List of ACLs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 887

Figure 208 Configuring a Standard IPv4 ACL. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 888

Figure 209 Configuring an Extended IPv4 ACL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 890

Figure 210 Configuring a Standard IPv6 ACL. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 892

Figure 211 Configuring an Extended IPv6 ACL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 894

Figure 212 Configuring a MAC ACL. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 895

Figure 213 Configuring a ARP ACL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 897

Figure 214 Binding a Port to an ACL. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 898

Figure 215 Configuring ACL Mirroring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 899

Figure 216 Showing the VLANs to Mirror . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 899

Figure 217 Showing ACL Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 900

Figure 218 Configuring Global Settings for ARP Inspection . . . . . . . . . . . . . . . . . . . . . . . . . 903

Figure 219 Configuring VLAN Settings for ARP Inspection . . . . . . . . . . . . . . . . . . . . . . . . . . 904

Figure 220 Configuring Interface Settings for ARP Inspection . . . . . . . . . . . . . . . . . . . . . . . 905

Figure 221 Displaying Statistics for ARP Inspection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 906

Figure 222 Displaying the ARP Inspection Log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 907

Figure 223 Creating an IP Address Filter for Management Access . . . . . . . . . . . . . . . . . . . 908

Figure 224 Showing IP Addresses Authorized for Management Access . . . . . . . . . . . . . . . 909

Figure 225 Configuring Port Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 911

Figure 226 Configuring Port Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 912

Figure 227 Configuring Global Settings for 802.1X Port Authentication . . . . . . . . . . . . . . . 913

Figure 228 Configuring Interface Settings for 802.1X Port Authenticator. . . . . . . . . . . . . . 917

Figure 229 Configuring Interface Settings for 802.1X Port Supplicant . . . . . . . . . . . . . . . . 918

Figure 230 Showing Statistics for 802.1X Port Authenticator . . . . . . . . . . . . . . . . . . . . . . . 920

Figure 231 Showing Statistics for 802.1X Port Supplicant. . . . . . . . . . . . . . . . . . . . . . . . . . 921

Figure 232 Setting the Filter Type for IP Source Guard. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 923

Figure 233 Configuring Static Bindings for IP Source Guard . . . . . . . . . . . . . . . . . . . . . . . . 924

Figure 234 Displaying Static Bindings for IP Source Guard . . . . . . . . . . . . . . . . . . . . . . . . . 924

Figure 235 Showing the IP Source Guard Binding Table . . . . . . . . . . . . . . . . . . . . . . . . . . . 925

Figure 236 Configuring Global Settings for DHCP Snooping . . . . . . . . . . . . . . . . . . . . . . . . 928

Figure 237 Configuring DHCP Snooping on a VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 929

Figure 238 Configuring the Port Mode for DHCP Snooping . . . . . . . . . . . . . . . . . . . . . . . . . 930

Figure 239 Displaying the Binding Table for DHCP Snooping. . . . . . . . . . . . . . . . . . . . . . . . 931

Figure 240 Configuring Settings for System Memory Logs. . . . . . . . . . . . . . . . . . . . . . . . . . 935

Figure 241 Showing Error Messages Logged to System Memory . . . . . . . . . . . . . . . . . . . . 935

Figure 242 Configuring Settings for Remote Logging of Error Messages . . . . . . . . . . . . . . 937

Figure 243 Configuring SMTP Alert Messages. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 938

Figure 244 Configuring LLDP Timing Attributes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 940

xxxvi Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 39

Figure 245 Configuring LLDP Interface Attributes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 942

Figure 246 Displaying Local Device Information for LLDP (General) . . . . . . . . . . . . . . . . . . 944

Figure 247 Displaying Local Device Information for LLDP (Port) . . . . . . . . . . . . . . . . . . . . . 944

Figure 248 Displaying Remote Device Information for LLDP (Port) . . . . . . . . . . . . . . . . . . . 948

Figure 249 Displaying Remote Device Information for LLDP (Port Details). . . . . . . . . . . . . 949

Figure 250 Displaying LLDP Device Statistics (General). . . . . . . . . . . . . . . . . . . . . . . . . . . . 951

Figure 251 Displaying LLDP Device Statistics (Port) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 951

Figure 252 Configuring Global Settings for SNMP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 954

Figure 253 Configuring the Local Engine ID for SNMP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 955

Figure 254 Configuring a Remote Engine ID for SNMP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 956

Figure 255 Showing Remote Engine IDs for SNMP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 956

Figure 256 Creating an SNMP View . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 957

Figure 257 Showing SNMP Views. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 957

Figure 258 Adding an OID Subtree to an SNMP View . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 958

Figure 259 Showing the OID Subtree Configured for SNMP Views . . . . . . . . . . . . . . . . . . . 958

Figure 260 Creating an SNMP Group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 960

Figure 261 Showing SNMP Groups. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 960

Figure 262 Setting Community Access Strings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 961

Figure 263 Showing Community Access Strings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 961

Figure 264 Configuring Local SNMPv3 Users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 963

Figure 265 Showing Local SNMPv3 Users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 963

Figure 266 Configuring Remote SNMPv3 Users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 965

Figure 267 Showing Remote SNMPv3 Users. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 965

Figure 268 Configuring Trap Managers (SNMPv1) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 968

Figure 269 Configuring Trap Managers (SNMPv2c) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 968

Figure 270 Configuring Trap Managers (SNMPv3) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 969

Figure 271 Showing Trap Managers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 969

Figure 272 Creating SNMP Notification Logs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 971

Figure 273 Showing SNMP Notification Logs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 971

Figure 274 Showing SNMP Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 973

Figure 275 Configuring an RMON Alarm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 975

Figure 276 Showing Configured RMON Alarms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 975

Figure 277 Configuring an RMON Event . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 977

Figure 278 Showing Configured RMON Events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 977

Figure 279 Configuring an RMON History Sample. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 979

Figure 280 Showing Configured RMON History Samples . . . . . . . . . . . . . . . . . . . . . . . . . . . 979

Figure 281 Showing Collected RMON History Samples . . . . . . . . . . . . . . . . . . . . . . . . . . . . 980

Figure 282 Configuring an RMON Statistical Sample . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 981

Figure 283 Showing Configured RMON Statistical Samples. . . . . . . . . . . . . . . . . . . . . . . . . 981

Figure 284 Showing Collected RMON Statistical Samples . . . . . . . . . . . . . . . . . . . . . . . . . . 982

Figure 285 ERPS Ring Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 983

Figure 286 Setting ERPS Global Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 985

Brocade 6910 Ethernet Access Switch Configuration Guide xxxvii 53-1002651-02

Page 40

Figure 287 Creating an ERPS Ring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 989

Figure 288 Creating an ERPS Ring (Primary Ring). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 990

Figure 289 Creating an ERPS Ring (Secondary Ring) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 991

Figure 290 Showing Configured ERPS Rings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 991

Figure 291 Single CFM Maintenance Domain . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 993

Figure 292 Multiple CFM Maintenance Domains . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 993

Figure 293 Configuring Global Settings for CFM . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 998

Figure 294 Configuring Interfaces for CFM . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 999

Figure 295 Configuring Maintenance Domains. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1002

Figure 296 Showing Maintenance Domains . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1002

Figure 297 Configuring Detailed Settings for Maintenance Domains . . . . . . . . . . . . . . . . 1003

Figure 298 Creating Maintenance Associations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1005

Figure 299 Showing Maintenance Associations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1006

Figure 300 Configuring Detailed Settings for Maintenance Associations . . . . . . . . . . . . . 1006

Figure 301 Configuring Maintenance End Points . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1008

Figure 302 Showing Maintenance End Points. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1008

Figure 303 Configuring Remote Maintenance End Points . . . . . . . . . . . . . . . . . . . . . . . . . 1009

Figure 304 Showing Remote Maintenance End Points. . . . . . . . . . . . . . . . . . . . . . . . . . . . 1010

Figure 305 Configuring a Delay-Measure Attribute Group . . . . . . . . . . . . . . . . . . . . . . . . . 1012

Figure 306 Showing Delay-Measure Attribute Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1013

Figure 307 Transmitting Delay-Measure Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1013

Figure 308 Configuring a Single-Ended Loss-Measure Attribute Group . . . . . . . . . . . . . . 1016

Figure 309 Showing Single-Ended Loss-Measure Attribute Groups. . . . . . . . . . . . . . . . . . 1017

Figure 310 Transmitting Single-Ended Loss-Measure Messages . . . . . . . . . . . . . . . . . . . 1017

Figure 311 Transmitting Dual-Ended Loss-Measure Messages. . . . . . . . . . . . . . . . . . . . . 1018

Figure 312 Transmitting Link Trace Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1019

Figure 313 Transmitting Loopback Messages. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1021

Figure 314 Transmitting Two-Way Delay-Measure Messages . . . . . . . . . . . . . . . . . . . . . . 1023

Figure 315 Transmitting One-Way Delay-Measure Messages . . . . . . . . . . . . . . . . . . . . . . 1024

Figure 316 Transmitting Single-Ended Loss-Measure Messages . . . . . . . . . . . . . . . . . . . 1026

Figure 317 Showing Information on Local MEPs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1027

Figure 318 Showing Detailed Information on Local MEPs . . . . . . . . . . . . . . . . . . . . . . . . . 1029

Figure 319 Showing Information on Local MIPs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1030

Figure 320 Showing Information on Remote MEPs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1031

Figure 321 Showing Detailed Information on Remote MEPs . . . . . . . . . . . . . . . . . . . . . . . 1033

Figure 322 Showing the Link Trace Cache. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1034

Figure 323 Showing Settings for the Fault Notification Generator . . . . . . . . . . . . . . . . . . 1035

Figure 324 Showing Continuity Check Errors. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1037

Figure 325 Showing Two-Way Delay-Measure Results . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1037

Figure 326 Showing Single-Ended Loss-Measure Results . . . . . . . . . . . . . . . . . . . . . . . . . 1038

Figure 327 Enabling OAM for Local Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1040

Figure 328 Displaying Statistics for OAM Messages. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1041

xxxviii Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 41

Figure 329 Displaying the OAM Event Log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1042

Figure 330 Displaying Status of Remote Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1043

Figure 331 Running a Remote Loop Back Test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1045

Figure 332 Displaying the Results of Remote Loop Back Testing . . . . . . . . . . . . . . . . . . . 1046

Figure 333 Configuring a Static IPv4 Address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1049

Figure 334 Configuring a Dynamic IPv4 Address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1049

Figure 335 Showing the IPv4 Address Configured for an Interface . . . . . . . . . . . . . . . . . . 1050

Figure 336 Configuring the IPv6 Default Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1051

Figure 337 Configuring General Settings for an IPv6 Interface . . . . . . . . . . . . . . . . . . . . . 1055

Figure 338 Configuring an IPv6 Address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1057

Figure 339 Showing Configured IPv6 Addresses. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1058

Figure 340 Showing IPv6 Neighbors. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1060

Figure 341 Showing IPv6 Statistics (IPv6) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1064

Figure 342 Showing IPv6 Statistics (ICMPv6) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1065

Figure 343 Showing IPv6 Statistics (UDP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1065

Figure 344 Showing Reported MTU Values . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1066

Figure 345 Pinging a Network Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1068

Figure 346 Tracing the Route to a Network Device. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1069

Figure 347 Proxy ARP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1070

Figure 348 Configuring General Settings for ARP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1071

Figure 349 Configuring Static ARP Entries. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1072

Figure 350 Displaying Static ARP Entries. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1073

Figure 351 Displaying ARP Entries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1073

Figure 352 Displaying Local ARP Entries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1074

Figure 353 Displaying ARP Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1074

Figure 354 Virtual Interfaces and Layer 3 Routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1076

Figure 355 Configuring Static Routes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1079

Figure 356 Displaying Static Routes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1079

Figure 357 Displaying the Routing Table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1080

Figure 358 Configuring General Settings for DNS. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1082

Figure 359 Configuring a List of Domain Names for DNS. . . . . . . . . . . . . . . . . . . . . . . . . . 1083

Figure 360 Showing the List of Domain Names for DNS . . . . . . . . . . . . . . . . . . . . . . . . . . 1083

Figure 361 Configuring a List of Name Servers for DNS. . . . . . . . . . . . . . . . . . . . . . . . . . . 1084

Figure 362 Showing the List of Name Servers for DNS . . . . . . . . . . . . . . . . . . . . . . . . . . . 1084

Figure 363 Configuring Static Entries in the DNS Table . . . . . . . . . . . . . . . . . . . . . . . . . . . 1085

Figure 364 Showing Static Entries in the DNS Table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1085

Figure 365 Showing Entries in the DNS Cache . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1086

Figure 366 Specifying A DHCP Client Identifier . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1088

Figure 367 Layer 3 DHCP Relay Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1088

Figure 368 Configuring DHCP Relay Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1089

Figure 369 Multicast Filtering Concept . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1091

Figure 370 Configuring General Settings for IGMP Snooping. . . . . . . . . . . . . . . . . . . . . . . 1097

Brocade 6910 Ethernet Access Switch Configuration Guide xxxix 53-1002651-02

Page 42

Figure 371 Configuring a Static Interface for a Multicast Router. . . . . . . . . . . . . . . . . . . . 1098

Figure 372 Showing Static Interfaces Attached a Multicast Router . . . . . . . . . . . . . . . . . 1098

Figure 373 Showing Current Interfaces Attached a Multicast Router . . . . . . . . . . . . . . . . 1099

Figure 374 Assigning an Interface to a Multicast Service. . . . . . . . . . . . . . . . . . . . . . . . . . 1100

Figure 375 Showing Static Interfaces Assigned to a Multicast Service. . . . . . . . . . . . . . . 1100

Figure 376 Showing Current Interfaces Assigned to a Multicast Service . . . . . . . . . . . . . 1101

Figure 377 Configuring IGMP Snooping on a VLAN. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1105

Figure 378 Showing Interface Settings for IGMP Snooping . . . . . . . . . . . . . . . . . . . . . . . . 1105

Figure 379 Showing Multicast Groups Learned by IGMP Snooping. . . . . . . . . . . . . . . . . . 1106

Figure 380 Displaying IGMP Snooping Statistics – Query. . . . . . . . . . . . . . . . . . . . . . . . . . 1108

Figure 381 Displaying IGMP Snooping Statistics – VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . 1108

Figure 382 Displaying IGMP Snooping Statistics – Port . . . . . . . . . . . . . . . . . . . . . . . . . . . 1109

Figure 383 Enabling IGMP Filtering and Throttling . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1110

Figure 384 Creating an IGMP Filtering Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1111

Figure 385 Showing the IGMP Filtering Profiles Created . . . . . . . . . . . . . . . . . . . . . . . . . . 1111

Figure 386 Adding Multicast Groups to an IGMP Filtering Profile . . . . . . . . . . . . . . . . . . . 1112

Figure 387 Showing the Groups Assigned to an IGMP Filtering Profile . . . . . . . . . . . . . . . 1112

Figure 388 Configuring IGMP Filtering and Throttling Interface Settings . . . . . . . . . . . . . 1113

Figure 389 MVR Concept. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1114

Figure 390 Configuring Global Settings for MVR . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1116

Figure 391 Configuring Domain Settings for MVR. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1117

Figure 392 Configuring an MVR Group Address Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . 1118

Figure 393 Displaying MVR Group Address Profiles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1119

Figure 394 Assigning an MVR Group Address Profile to a Domain . . . . . . . . . . . . . . . . . . 1119

Figure 395 Showing the MVR Group Address Profiles Assigned to a Domain. . . . . . . . . . 1119

Figure 396 Configuring Interface Settings for MVR. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1121

Figure 397 Assigning Static MVR Groups to a Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1122

Figure 398 Showing the Static MVR Groups Assigned to a Port . . . . . . . . . . . . . . . . . . . . 1123

Figure 399 Displaying MVR Receiver Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1124

Figure 400 Displaying MVR Statistics – Query. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1125

Figure 401 Displaying MVR Statistics – VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1126

Figure 402 Displaying MVR Statistics – Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1127

Figure 403 Configuring Global Settings for MVR6. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1129

Figure 404 Configuring Domain Settings for MVR6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1130

Figure 405 Configuring an MVR6 Group Address Profile . . . . . . . . . . . . . . . . . . . . . . . . . . 1131

Figure 406 Displaying MVR6 Group Address Profiles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1132

Figure 407 Assigning an MVR6 Group Address Profile to a Domain . . . . . . . . . . . . . . . . . 1132

Figure 408 Showing the MVR6 Group Address Profiles Assigned to a Domain . . . . . . . . 1132

Figure 409 Configuring Interface Settings for MVR6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1134

Figure 410 Assigning Static MVR6 Groups to a Port. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1135

Figure 411 Showing the Static MVR6 Groups Assigned to a Port . . . . . . . . . . . . . . . . . . . 1136

Figure 412 Displaying MVR6 Receiver Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1137

xl Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 43

Figure 413 Displaying MVR6 Statistics – Query . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1138

Figure 414 Displaying MVR6 Statistics – VLAN. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1139

Figure 415 Displaying MVR6 Statistics – Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1140

Brocade 6910 Ethernet Access Switch Configuration Guide xli 53-1002651-02

Page 44

xlii Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 45

Tables

Tab l e 1 Key Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

Tab l e 2 System Defaults . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8

Tab l e 3 Options 60, 66 and 67 Statements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20

Tab l e 4 Options 55 and 124 Statements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20

Tab l e 5 General Command Modes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32

Tab l e 6 Configuration Command Modes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

Tab l e 7 Keystroke Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

Tab l e 8 Command Group Index. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

Tab l e 9 General Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

Tab l e 10 System Management Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47

Tab l e 11 Device Designation Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47

Tab l e 12 Banner Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48

Tab l e 13 System Status Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57

Tab l e 14 Frame Size Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65

Tab l e 15 Flash/File Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66

Tab l e 16 File Directory Information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71

Tab l e 17 Line Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75

Tab l e 18 Event Logging Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83

Tab l e 19 Logging Levels. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85

Tab l e 20 show logging flash/ram - display description . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89

Tab l e 21 show logging trap - display description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89

Tab l e 22 Event Logging Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89

Tab l e 23 Time Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93

Tab l e 24 Predefined Summer-Time Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97

Tab l e 25 Time Range Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 101

Tab l e 26 SNMP Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 105

Tab l e 27 show snmp engine-id - display description. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 117

Tab l e 28 show snmp group - display description. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 118

Tab l e 29 show snmp user - display description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 119

Tab l e 30 show snmp view - display description. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 120

Tab l e 31 RMON Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 125

Tab l e 32 sFlow Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133

Tab l e 33 Authentication Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 139

Tab l e 34 User Access Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 139

Tab l e 35 Default Login Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 141

Brocade 6910 Ethernet Access Switch Configuration Guide xliii 53-1002651-02

Page 46

Tab l e 36 Authentication Sequence Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 142

Tab l e 37 RADIUS Client Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 144

Tab l e 38 TACACS+ Client Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 148

Tab l e 39 AAA Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 151

Tab l e 40 Web Server Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 159

Tab l e 41 HTTPS System Support. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 161

Tab l e 42 Telnet Server Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 162

Tab l e 43 Secure Shell Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 164

Tab l e 4 4 show ssh - display description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 172

Tab l e 45 802.1X Port Authentication Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 172

Tab l e 46 Management IP Filter Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 186

Tab l e 47 General Security Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 189

Tab l e 48 Management IP Filter Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 190

Tab l e 49 show port security - display description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 192

Tab l e 50 Network Access Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 193

Tab l e 51 Dynamic QoS Profiles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 196

Tab l e 52 Web Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 206

Tab l e 53 DHCP Snooping Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 211

Tab l e 54 Option 82 information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 217

Tab l e 55 IP Source Guard Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 220

Tab l e 56 ARP Inspection Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 225

Tab l e 57 Access Control List Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 233

Tab l e 58 IPv4 ACL Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 233

Tab l e 59 IPv6 ACL Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 240

Tab l e 60 MAC ACL Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 245

Tab l e 61 ARP ACL Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 249

Tab l e 62 ACL Information Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 252

Tab l e 63 Interface Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 255

Tab l e 6 4 show interfaces switchport - display description . . . . . . . . . . . . . . . . . . . . . . . . 276

Tab l e 65 Link Aggregation Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 285

Tab l e 66 show lacp counters - display description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 293

Tab l e 67 show lacp internal - display description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 294

Tab l e 68 show lacp neighbors - display description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 295

Tab l e 69 show lacp sysid - display description. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 296

Tab l e 70 Port Mirroring Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 297

Tab l e 71 Mirror Port Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 297

Tab l e 72 RSPAN Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 300

Tab l e 73 Rate Limit Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 307

Tab l e 74 ATC Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 309

Tab l e 75 Address Table Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 323

Tab l e 76 Spanning Tree Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 329

Tab l e 77 Recommended STA Path Cost Range . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 342

xliv Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 47

Tab l e 78 Default STA Path Costs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 342

Tab l e 79 ERPS Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 355

Tab l e 80 show erps - summary display description. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 366

Tab l e 81 show erps domain - detailed display description . . . . . . . . . . . . . . . . . . . . . . . . 367

Tab l e 82 VLAN Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 369

Tab l e 83 GVRP and Bridge Extension Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 370

Tab l e 8 4 Commands for Editing VLAN Groups. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 374

Tab l e 85 Commands for Configuring VLAN Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . 377

Tab l e 86 Commands for Displaying VLAN Information . . . . . . . . . . . . . . . . . . . . . . . . . . . 384

Tab l e 87 802.1Q Tunneling Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 385

Tab l e 88 L2 Protocol Tunnel Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 391

Tab l e 89 VLAN Translation Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 394

Tab l e 90 Commands for Configuring Traffic Segmentation . . . . . . . . . . . . . . . . . . . . . . . 396

Tab l e 91 Traffic Segmentation Forwarding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 397

Tab l e 92 Protocol-based VLAN Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 400

Tab l e 93 IP Subnet VLAN Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 403

Tab l e 94 MAC Based VLAN Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 407

Tab l e 95 Voice VLAN Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 408

Tab l e 96 Priority Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 415

Tab l e 97 Priority Commands (Layer 2) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 415

Tab l e 98 Priority Commands (Layer 3 and 4). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 419

Tab l e 99 Default Mapping of CoS/CFI to Internal PHB/Drop Precedence. . . . . . . . . . . . 420

Tab l e 100 Default Mapping of DSCP Values to Internal PHB/Drop Values . . . . . . . . . . . . 422

Tab l e 101 Mapping Internal Per-hop Behavior to Hardware Queues . . . . . . . . . . . . . . . . . 423

Tab l e 102 Quality of Service Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 427

Tab l e 103 Multicast Filtering Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 443

Tab l e 104 IGMP Snooping Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 443

Tab l e 105 show ip igmp snooping statistics input - display description. . . . . . . . . . . . . . . 461

Tab l e 106 show ip igmp snooping statistics output - display description . . . . . . . . . . . . . 462

Tab l e 107 show ip igmp snooping statistics vlan query - display description . . . . . . . . . . 462

Tab l e 108 Static Multicast Interface Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 463

Tab l e 109 IGMP Filtering and Throttling Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 464

Tab l e 110 Multicast VLAN Registration for IPv4 Commands . . . . . . . . . . . . . . . . . . . . . . . 470

Tab l e 111 show mvr - display description. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 479

Tab l e 112 show mvr interface - display description. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 481

Table 113 show mvr members - display description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 482

Tab l e 114 show mvr statistics input - display description. . . . . . . . . . . . . . . . . . . . . . . . . . 484

Tab l e 115 show mvr statistics output - display description. . . . . . . . . . . . . . . . . . . . . . . . . 484

Tab l e 116 show mvr statistics query - display description . . . . . . . . . . . . . . . . . . . . . . . . . 485

Tab l e 117 Multicast VLAN Registration for IPv6 Commands . . . . . . . . . . . . . . . . . . . . . . . 485

Table 118 show mvr6 - display description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 493

Table 119 show mvr6 interface - display description . . . . . . . . . . . . . . . . . . . . . . . . . . . . 495

Brocade 6910 Ethernet Access Switch Configuration Guide xlv 53-1002651-02

Page 48

Table 120 show mvr6 members - display description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 496

Tab l e 121 show mvr6 statistics input - display description. . . . . . . . . . . . . . . . . . . . . . . . . 497

Table 122 show mvr6 statistics output - display description . . . . . . . . . . . . . . . . . . . . . . . 497

Table 123 LLDP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 499

Tab l e 124 CFM Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 517

Table 125 show ethernet cfm configuration traps - display description . . . . . . . . . . . . . . 531

Table 126 show ethernet cfm maintenance-points local detail mep - display. . . . . . . . . . 534

Tab l e 127 show ethernet cfm maintenance-points remote detail - display . . . . . . . . . . . . 536

Table 128 show ethernet cfm errors - display description . . . . . . . . . . . . . . . . . . . . . . . . . 541

Table 129 show ethernet cfm linktrace-cache - display description. . . . . . . . . . . . . . . . . . 549

Tab l e 130 Remote MEP Priority Levels. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 552

Tab l e 131 MEP Defect Descriptions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 552

Tab l e 132 show fault-notify-generator - display description . . . . . . . . . . . . . . . . . . . . . . . . 554

Tab l e 133 CCM Group Destination MAC Addresses. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 555

Tab l e 134 OAM Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 569

Tab l e 135 Address Table Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 579

Tab l e 136 show dns cache - display description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 585

Tab l e 137 show hosts - display description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 586

Tab l e 138 DHCP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 587

Tab l e 139 DHCP Client Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 587

Tab l e 140 DHCP Relay Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 592

Tab l e 141 IP Interface Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 595

Tab l e 142 IPv4 Interface Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 595

Tab l e 143 Basic IP Configuration Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 596

Tab l e 144 Address Resolution Protocol Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 602

Tab l e 145 IPv6 Configuration Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 605

Tab l e 146 show ipv6 interface - display description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 615

Tab l e 147 show ipv6 mtu - display description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 616

Tab l e 148 show ipv6 traffic - display description. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 618

Tab l e 149 show ipv6 neighbors - display description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 627

Tab l e 150 Static Routing Configuration Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 629

Tab l e 151 Debug Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 633

Tab l e 152 Web Page Configuration Buttons. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 657

Tab l e 153 Switch Main Menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 658

Tab l e 154 Predefined Summer-Time Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 691

Tab l e 155 Port Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 711

Tab l e 156 LACP Port Counters. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 733

Tab l e 157 LACP Internal Configuration Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 734

Tab l e 158 LACP Remote Device Configuration Information . . . . . . . . . . . . . . . . . . . . . . . . 736

Tab l e 159 Traffic Segmentation Forwarding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 744

Tab l e 160 Recommended STA Path Cost Range . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 795

Table 161 Default STA Path Costs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 795

xlvi Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 49

Tab l e 162 IEEE 802.1p Egress Queue Priority Mapping . . . . . . . . . . . . . . . . . . . . . . . . . . . 819

Tab l e 163 CoS Priority Levels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 819

Tab l e 164 Mapping Internal Per-hop Behavior to Hardware Queues . . . . . . . . . . . . . . . . . 819

Tab l e 165 Default Mapping of DSCP Values to Internal PHB/Drop Values . . . . . . . . . . . . 823

Tab l e 166 Default Mapping of CoS/CFI to Internal PHB/Drop Precedence. . . . . . . . . . . . 825

Tab l e 167 Dynamic QoS Profiles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 865

Tab l e 168 HTTPS System Support. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 873

Tab l e 169 ARP Inspection Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 906

Tab l e 170 ARP Inspection Log. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 907

Tab l e 171 802.1X Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 919

Tab l e 172 Logging Levels. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 934

Tab l e 173 Chassis ID Subtype . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 942

Tab l e 174 System Capabilities . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 943

Tab l e 175 Port ID Subtype . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 945

Tab l e 176 Remote Port Auto-Negotiation Advertised Capability. . . . . . . . . . . . . . . . . . . . . 946

Tab l e 177 SNMPv3 Security Models and Levels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 952

Tab l e 178 Remote MEP Priority Levels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1000

Tab l e 179 MEP Defect Descriptions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1000

Table 180 OAM Operation State . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1039

Tab l e 181 Remote Loopback Status. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1044

Table 182 Show IPv6 Neighbors - display description. . . . . . . . . . . . . . . . . . . . . . . . . . . . 1059

Table 183 Show IPv6 Statistics - display description. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1061

Table 184 Show MTU - display description. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1066

Table 185 Address Resolution Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1069

Table 186 ARP Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1074

Tab l e 187 Troubleshooting Chart . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1143

Brocade 6910 Ethernet Access Switch Configuration Guide xlvii 53-1002651-02

Page 50

xlviii Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 51

About This Document

In this chapter

•Supported hardware and software. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xlix

•Summary of enhancements for Brocade R2.2.0.2. . . . . . . . . . . . . . . . . . . . . . l

•Summary of enhancements for Brocade R2.2.0.0. . . . . . . . . . . . . . . . . . . . . . l

•Summary of enhancements for Brocade R2.1.0.4 . . . . . . . . . . . . . . . . . . . . . li

•Summary of enhancements for Brocade R2.0.2.10 . . . . . . . . . . . . . . . . . . . . li

•Summary of enhancements for Brocade R2.0.2.9. . . . . . . . . . . . . . . . . . . . . lii

•Document conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . lii

•Trademark references . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . liii

•Related publications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . liv

•Getting technical help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . liv

•Document feedback . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . liv

Supported hardware and software

This guide describes the Brocade 6910 Ethernet Access Switch 2.2.0.2 release.

The following hardware platforms are supported by the release of this guide:

• BR-6910-EAS-AC – Brocade 6910 Ethernet Access Switch, 12×1 GbE combination copper

10/100/1000 Base-T (RJ45) or 100/1000 Base-X SFP ports, redundant AC power supply

• BR-6910-EAS-DC – Brocade 6910 Ethernet Access Switch, 12×1 GbE combination copper

10/100/1000 Base-T (RJ45) or 100/1000 Base-X SFP ports, redundant DC power supply

• BR-6910-EAS-H-AC – Brocade 6910 Ethernet Access Switch, 12×1 GbE combination copper

10/100/1000 Base-T (RJ45) or 100/1000 Base-X SFP ports, redundant AC power supply, temperature hardened

• BR-6910-EAS-H-DC – Brocade 6910 Ethernet Access Switch, 12×1 GbE combination copper

10/100/1000 Base-T (RJ45) or 100/1000 Base-X SFP ports, redundant DC power supply, temperature hardened

Brocade 6910 Ethernet Access Switch Configuration Guide xlix 53-1002651-02

Page 52

Summary of enhancements for Brocade R2.2.0.2

The following table describes the changes included in R2.2.0.2.

Enhancement Description

Configuring the destination MAC address for CFM two-way delay-measure as a multicast MAC address is no longer supported

Updated description for “show ip dhcp relay” command

The target address of the MPID for CFM two-way delay-measure can no longer be configured as a multicast MAC address. See “ethernet cfm delay-measure

two-way” on page 560, and “Transmitting Periodic Delay-Measure Messages” on

page 1010.

Information for the command syntax and display output of the “show ip dhcp relay” command was corrected. See “show ip dhcp relay” on page 594.

Summary of enhancements for Brocade R2.2.0.0

The following table describes the features introduced in R2.2.0.0

Enhancement Description

Added exception log option to copy command

Added 3DS encryption to “snmp-server user” command

Added “sflow forwarding” command

Removed symmetric option from “capabilities” command

Added “ethernet loopback” test command

Added “vlan mac-learning” command

Added periodic two-way delay measure CFM commands

Added one-way delay measure CFM commands

Added loss-measure CFM commands

Added exception log option which allows the crash dump file exception_log.tgz to be copied to a file server. See “copy” on page 67.

Added 3DS encryption option to “snmp-server user” command. See “snmp-server

user” on page 115, “Configuring Local SNMPv3 Users” on page 962, and “Configuring Remote SNMPv3 Users” on page 963.

Added “sflow forwarding” command to enable forwarding of samples to the sFlow Collector on the specified interface. See “sflow forwarding” on page 134 and the Parameters section under “Configuring sFlow Interface Settings” on page 741.

Removed symmetric option from “capabilities” command due to chip limitation. See “capabilities” on page 258, and “Configuring by Port List” on page 701.

Added “ethernet loopback” command which loops traffic back from destination port to source port. See “ethernet loopback” on page 280 and “Performing

Loopback Testing” on page 722.

Added “vlan mac-learning” command which floods ingress traffic to all por ts in the specified VLAN when using the no form of this command. See “vlan

mac-learning” on page 376, and “Configuring VLAN Groups” on page 752.

Added periodic two-way delay measure CFM commands. See “Delay Measure

Operations” on page 554, “Transmitting Periodic Delay-Measure Messages” on

page 1010, “Transmitting On-Demand Delay-Measure Requests” on page 1021.

Added periodic and on-demand one-way delay measure CFM commands. See

“Delay Measure Operations” on page 554, “Transmitting Periodic Delay-Measure Messages” on page 1010, and “Transmitting On-Demand Delay-Measure Requests” on page 1021.

Added loss-measure dual-ended and single-ended CFM commands. See “Loss

Measure Operations” on page 562, “Transmitting Periodic Loss-Measure Messages” on page 1014, and “Transmitting On-Demand Loss-Measure Requests” on page 1024.

l Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 53

Enhancement Description

Added display of DDM thresholds

Added configuration of DDM thresholds

Added debug commands Added debug commands for reporting errors to Brocade for technical support.

Added display of DDM thresholds. See “show interfaces transceiver” on page 277 and “Configuring Transceiver Thresholds” on page 719.

Added web page for configuring DDM thresholds. See “Configuring Transceiver

Thresholds” on page 719.

See “Debug Commands” on page 633.

Summary of enhancements for Brocade R2.1.0.4

The following table describes the features introduced in R2.1.0.4.

Enhancement Description

Supports SFTP file transfer Added information about using SFTP for file transfer. See “copy” on page 67 and

“Copying Files via FTP/SFTP/TFTP or HTTP” on page 679.

Supports additional privacy encryption methods for SNMPv3

Supports configuration of LACP timeout

Added AES128, AES192 and AES256 privacy encryption methods for SNMPv3. Refer to “snmp-server user” on page 115, “Configuring Local SNMPv3 Users” on page 962, and “Configuring Remote SNMPv3 Users” on page 963.

The LACP timeout the switch waits for the next LACPDU can be configured to a long or short interval. Refer to “lacp timeout” on page 292 and “Configuring a

Dynamic Trunk” on page 728.

Summary of enhancements for Brocade R2.0.2.10

The following table describes the features introduced in R2.0.2.10.

Enhancement Description

Supports adjusting the system clock for summer time

SNMP trap manager can be configured with IPv4 or IPv6 address

IP address for a Layer 3 interface can be configured with a network prefix

Action and Shutdown Interval were added to the web page for Loopback Detection

Added configuration pages and CLI commands for adjusting the system clock for the summer time offset. See the relevant commands starting at “clock

summer-time (date)” on page 96 and “Configuring Summer Time” on page 691.

SNMP trap managers can now be configured with IPv4 or IPv6 address. Refer to

“snmp-server host” on page 111 and “Specifying Trap Managers” on page 965.

The IP address for a Layer 3 interface can be configured with a network prefix in the CLI. Refer to “ip address” on page 596

Action and Shutdown Interval were added to the web page for Loopback Detection. Refer to “Configuring Loopback Detection” on page 787.

Brocade 6910 Ethernet Access Switch Configuration Guide li 53-1002651-02

Page 54

Enhancement Description

Web page for displaying ACL statistics was re-designed

New options were added to the web configuration page for ERPS domains

Configuration fields were modified, and a button to clear the hit counter was added to the web page for displaying ACL statistics. Refer to “Showing ACL

Hardware Counters” on page 900.

Non-ERPS Device Protection and CFM Port MEP fields were added to the web configuration page for ERPS domains. Refer to “ERPS Ring Configuration” on page 985.

Summary of enhancements for Brocade R2.0.2.9

The following table describes the features introduced in R2.0.2.9.

Enhancement Description

The loader can be upgraded The loader can be upgraded using the copy command. Refer to “copy” on

page 67.

Supports VLAN Translation in Web interface

Shows SNMP Statistics in Web interface

Supports Trace Route in Web interface

Added configuration pages for VLAN Translation to the Web interface. Refer to

“Configuring VLAN Translation” on page 777.

Added display page for SNMP Statistics to the Web interface. Refer to “Showing

SNMP Statistics” on page 971.

Added Trace Route page to the Web interface. Refer to “Using the Trace Route

Function” on page 1068.

Document conventions

This section describes text formatting conventions and important notice formats used in this document.

Text formatting

The narrative-text formatting conventions that are used are as follows:

bold text Identifies command names

italic text Provides emphasis

code text Identifies CLI output

Identifies the names of user-manipulated GUI elements

Identifies keywords

Identifies text to enter at the GUI or CLI

Identifies variables

Identifies document titles

lii Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 55

Command syntax conventions

NOTE

ATTENTION

Command syntax in this manual follows these conventions:

command Commands are printed in bold.

--option, option Command options are printed in bold.

-argument, arg Arguments.

{

} Mandatory elements appear in braces.

[ ] Optional elements appear in brackets.

variable Variables are printed in italics.

... Repeat the previous element, for example “member[,member...]”

value Fixed values following arguments are printed in plain font. For example,

--show WWN

| Boolean. Elements are exclusive. Example:

Notes

The following notice statements are used in this manual.

A note provides a tip, guidance, or advice, emphasizes important information, or provides a reference to related information.

An Attention statement indicates potential damage to hardware or data.

Trademark references

This document may contain references to the trademarks of the following corporations. These trademarks are the properties of their respective companies and corporations.

These references are made for informational purposes only.

Corporation Referenced Trademarks and Products

--show -mode egress | ingress

Microsoft Corporation Internet Explorer

Mozilla Corporation Mozilla Firefox

Brocade 6910 Ethernet Access Switch Configuration Guide liii 53-1002651-02

Page 56

Related publications

NOTE

The following Brocade documents supplement the information in this guide and can be located at

http://www.brocade.com/ethernetproducts.

• Brocade 6910 Ethernet Access Switch Installation Guide

• Brocade 6910 Ethernet Access Switch MIB Reference

• Brocade 6910 Ethernet Access Switch Diagnostic Guide

For the latest edition of these documents, which contain the most up-to-date information, see Product Manuals at http://www.brocade.com/ethernetproducts.

Getting technical help

To contact Technical Support, go tohttp://www.brocade.com/services-support/index.page for the latest e-mail and telephone contact information.

Document feedback

Quality is our first concern at Brocade and we have made every effort to ensure the accuracy and completeness of this document. However, if you find an error or an omission, or you think that a topic needs further development, we want to hear from you. Forward your feedback to:

documentation@brocade.com

Provide the title and version number of the document and as much detail as possible about your comment, including the topic heading and page number and your suggestions for improvement.

liv Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 57

Section

Getting Started

This section provides an overview of the switch, and introduces some basic concepts about network switches. It also describes the basic settings required to access the management interface, and includes the following chapters:

•Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

•Initial Switch Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

Brocade 6910 Ethernet Access Switch Configuration Guide 1 53-1002651-02

Page 58

2 Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 59

In this chapter

This switch provides a broad range of features for Layer 2 switching. It includes a management agent that allows you to configure the features listed in this manual. The default configuration can be used for mosSt of the features provided by this switch. However, there are many options that you should configure to maximize the switch’s performance for your particular network environment.

This chapter includes the following topics:

Chapter

1Introduction

•Key Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

•Description of Software Features. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4

•System Defaults. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8

Key Features

TABLE 1 Key Features

Feature Description

Configuration Backup and Restore

Authentication Console, Telnet, web – user name/password, RADIUS, TACACS+

General Security Measures

Access Control Lists Supports up to 512 rules, 64 ACLs, and a maximum of 64 rules for an ACL

DHCP Client

DNS Client and Proxy service

Port Configuration Speed and duplex mode and flow control

Port Trunking Supports up to 12 trunks – static or dynamic trunking (LACP)

Using management station or FTP/SFTP/TFTP server

Port – IEEE 802.1X, MAC address filtering SNMP v1/2c - Community strings SNMP version 3 – MD5 or SHA password Tel net – S SH Web – HTTPS

AAA ARP inspection DHCP Snooping (with Option 82 relay information) IP Source Guard Private VLANs Port Authentication – IEEE 802.1X Port Security – MAC address filtering

Brocade 6910 Ethernet Access Switch Configuration Guide 3 53-1002651-02

Page 60

Description of Software Features

TABLE 1 Key Features (Continued)

Feature Description

Port Mirroring 8 sessions, one or more source ports to one analysis port

Congestion Control Rate Limiting

Address Table 16K MAC addresses in the forwarding table, 1K static MAC addresses,

IP Version 4 and 6 Supports IPv4 and IPv6 addressing and management

IEEE 802.1D Bridge Supports dynamic data switching and addresses learning

Store-and-Forward Switching

Spanning Tree Algorithm Supports standard STP, Rapid Spanning Tree Protocol (RSTP), and Multiple Spanning

Virtual LANs Up to 4093 using IEEE 802.1Q, port-based, protocol-based, private VLANs,

Traffic Prioritization Default port priority, traffic class map, queue scheduling, IP Precedence, or

Qualify of Service Supports Differentiated Services (DiffServ)

Link Layer Discovery Protocol

Multicast Filtering Supports IGMP snooping and query, and Multicast VLAN Registration

Connectivity Fault Management

ERPS Supports Ethernet Ring Protection Switching for increased availability of Ethernet rings

IP Routing Static routes

Ethernet OAM Supports OAM functions for attached CPEs (IEEE 802.3ah, ITU-T Y.1731)

Throttling for broadcast, multicast, unknown unicast storms Random Early Detection

1K L2 multicast groups

Supported to ensure wire-speed switching while eliminating bad frames

Trees (MSTP)

voice VLANs, and QinQ tunnel

Differentiated Services Code Point (DSCP)

Used to discover basic information about neighboring devices

Connectivity monitoring using continuity check messages, fault verification through loop back messages, and fault isolation by examining end-to-end connections (IEEE 802.1ag)

(G.8032)

Description of Software Features

The switch provides a wide range of advanced performance enhancing features. Flow control eliminates the loss of packets due to bottlenecks caused by port saturation. Broadcast storm suppression prevents broadcast traffic storms from engulfing the network. Untagged (port-based), tagged, and protocol-based VLANs, plus support for automatic GVRP VLAN registration provide traffic security and efficient use of network bandwidth. CoS priority queueing ensures the minimum delay for moving real-time multimedia data across the network. While multicast filtering provides support for real-time network applications.

Some of the management features are briefly described below.

Configuration

Backup and

Restore

4 Brocade 6910 Ethernet Access Switch Configuration Guide

You can save the current configuration settings to a file on the management station (using the web interface) or an FTP/SFTP/TFTP server (using the web or console interface), and later download this file to restore the switch configuration settings.

53-1002651-02

Page 61

Description of Software Features

Authentication This switch authenticates management access via the console port, Telnet, or a web browser. User

names and passwords can be configured locally or can be verified via a remote authentication server (i.e., RADIUS or TACACS+). Port-based authentication is also supported via the IEEE 802.1X protocol. This protocol uses Extensible Authentication Protocol over LANs (EAPOL) to request user credentials from the 802.1X client, and then uses the EAP between the switch and the authentication server to verify the client’s right to access the network via an authentication server (i.e., RADIUS or TACACS+ server).

Other authentication options include HTTPS for secure management access via the web, SSH for secure management access over a Telnet-equivalent connection, SNMP Version 3, IP address filtering for SNMP/Telnet/web management access. MAC address filtering and IP source guard also provide authenticated port access. While DHCP snooping is provided to prevent malicious attacks from insecure ports.

Access Control

Lists

Port

Configuration

Rate Limiting This feature controls the maximum rate for traffic transmitted or received on an interface. Rate

Port Mirroring The switch can unobtrusively mirror traffic from any port to a monitor port. You can then attach a

Port Trunking Ports can be combined into an aggregate connection. Trunks can be manually set up or

ACLs provide packet filtering for IP frames (based on address, protocol, TCP/UDP port number or TCP control code) or any frames (based on MAC address or Ethernet type). ACLs can by used to improve performance by blocking unnecessary network traffic or to implement security controls by restricting access to specific network resources or protocols.

You can manually configure the speed, duplex mode, and flow control used on specific ports, or use auto-negotiation to detect the connection settings used by the attached device. Use full-duplex mode on ports whenever possible to double the throughput of switch connections. Flow control should also be enabled to control network traffic during periods of congestion and prevent the loss of packets when port buffer thresholds are exceeded. The switch supports flow control based on the IEEE 802.3x standard (now incorporated in IEEE 802.3-2002).

limiting is configured on interfaces at the edge of a network to limit traffic into or out of the network. Packets that exceed the acceptable amount of traffic are dropped.

protocol analyzer or RMON probe to this port to perform traffic analysis and verify connection integrity.

dynamically configured using Link Aggregation Control Protocol (LACP – IEEE 802.3-2005). The additional ports dramatically increase the throughput across any connection, and provide redundancy by taking over the load if a port in the trunk should fail. The switch supports up to 12 trunks.

Storm Control Broadcast, multicast and unknown unicast storm suppression prevents traffic from overwhelming

the network.When enabled on a port, the level of broadcast traffic passing through the port is restricted. If broadcast traffic rises above a pre-defined threshold, it will be throttled until the level falls back beneath the threshold.

MAC Addresses A static address can be assigned to a specific interface on this switch. Static addresses are bound

to the assigned interface and will not be moved. When a static address is seen on another interface, the address will be ignored and will not be written to the address table. Static addresses can be used to provide network security by restricting access for a known host to a specific port.

Brocade 6910 Ethernet Access Switch Configuration Guide 5 53-1002651-02

Page 62

Description of Software Features

IP Address

Filtering

IEEE 802.1D

Bridge

Store-and-

Forward

Switching

Spanning Tree

Algorithm

Access to insecure ports can be controlled using DHCP Snooping which filters ingress traffic based on static IP addresses and addresses stored in the DHCP Snooping table. Traffic can also be restricted to specific source IP addresses or source IP/MAC address pairs based on static entries or entries stored in the DHCP Snooping table.

The switch supports IEEE 802.1D transparent bridging. The address table facilitates data switching by learning addresses, and then filtering or forwarding traffic based on this information.

The switch copies each frame into its memory before forwarding them to another port. This ensures that all frames are a standard Ethernet size and have been verified for accuracy with the cyclic redundancy check (CRC). This prevents bad frames from entering the network and wasting bandwidth.

To avoid dropping frames on congested ports, the switch provides 4 Mbits for frame buffering. This buffer can queue packets awaiting transmission on congested networks.

The switch supports these spanning tree protocols:

• Spanning Tree Protocol (STP, IEEE 802.1D) – This protocol provides loop detection. When there

are multiple physical paths between segments, this protocol will choose a single path and disable all others to ensure that only one route exists between any two stations on the network. This prevents the creation of network loops. However, if the chosen path should fail for any reason, an alternate path will be activated to maintain the connection.

• Rapid Spanning Tree Protocol (RSTP, IEEE 802.1w) – This protocol reduces the convergence

time for network topology changes to about 3 to 5 seconds, compared to 30 seconds or more for the older IEEE 802.1D STP standard. It is intended as a complete replacement for STP, but can still interoperate with switches running the older standard by automatically reconfiguring ports to STP-compliant mode if they detect STP protocol messages from attached devices.

• Multiple Spanning Tree Protocol (MSTP, IEEE 802.1s) – This protocol is a direct extension of

RSTP. It can provide an independent spanning tree for different VLANs. It simplifies network management, provides for even faster convergence than RSTP by limiting the size of each region, and prevents VLAN members from being segmented from the rest of the group (as sometimes occurs with IEEE 802.1D STP).

Connectivity

Fault

Management

Virtual LANs The switch supports up to 4093 VLANs. A Virtual LAN is a collection of network nodes that share

The switch provides connectivity fault monitoring for end-to-end connections within a designated service area by using continuity check messages which can detect faults in maintenance points, fault verification through loop back messages, and fault isolation with link trace messages.

the same collision domain regardless of their physical location or connection point in the network. The switch supports tagged VLANs based on the IEEE 802.1Q standard. Members of VLAN groups can be dynamically learned via GVRP, or ports can be manually assigned to a specific set of VLANs. This allows the switch to restrict traffic to the VLAN groups to which a user has been assigned. By segmenting your network into VLANs, you can:

• Eliminate broadcast storms which severely degrade performance in a flat network.

• Simplify network management for node changes/moves by remotely configuring VLAN

membership for any port, rather than having to manually change the network connection.

• Provide data security by restricting all traffic to the originating VLAN, except where a

connection is explicitly defined via the switch's routing service.

6 Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 63

Description of Software Features

• Use private VLANs to restrict traffic to pass only between data ports and the uplink ports,

thereby isolating adjacent ports within the same VLAN, and allowing you to limit the total number of VLANs that need to be configured.

• Use protocol VLANs to restrict traffic to specified interfaces based on protocol type.

IEEE 802.1Q

Tunneling (QinQ)

Traffic

Prioritization

Quality of

Service

This feature is designed for service providers carrying traffic for multiple customers across their networks. QinQ tunneling is used to maintain customer-specific VLAN and Layer 2 protocol configurations even when different customers use the same internal VLAN IDs. This is accomplished by inserting Service Provider VLAN (SPVLAN) tags into the customer’s frames when they enter the service provider’s network, and then stripping the tags when the frames leave the network.

This switch prioritizes each packet based on the required level of service, using eight priority queues with strict priority, Weighted Round Robin (WRR), or a combination of strict and weighted queuing. It uses IEEE 802.1p and 802.1Q tags to prioritize incoming traffic based on input from the end-station application. These functions can delay-sensitive data and best-effort data.

This switch also supports several common methods of prioritizing layer 3/4 traffic to meet application requirements. Traffic can be prioritized based on the priority bits in the IP frame’s Type of Service (ToS) octet using DSCP or IP Precedence. When these services are enabled, the priorities are mapped to a Class of Service value by the switch, and the traffic then sent to the corresponding output queue.

Differentiated Services (DiffServ) provides policy-based management mechanisms used for prioritizing network resources to meet the requirements of specific traffic types on a per-hop basis. Each packet is classified upon entry into the network based on access lists, IP Precedence or DSCP values, or VLAN lists. Using access lists allows you select traffic based on Layer 2, Layer 3, or Layer 4 information contained in each packet. Based on network policies, different kinds of traffic can be marked for different kinds of forwarding.

be used to provide independent priorities for

Multicast

Filtering

Link Layer

Discovery

Protocol

Brocade 6910 Ethernet Access Switch Configuration Guide 7 53-1002651-02

Specific multicast traffic can be assigned to its own VLAN to ensure that it does not interfere with normal network traffic and to guarantee real-time delivery by setting the required priority level for the designated VLAN. The switch uses IGMP Snooping and Query to manage multicast group registration. It also supports Multicast VLAN Registration (MVR) which allows common multicast traffic, such as television channels, to be transmitted across a single network-wide multicast VLAN shared by hosts residing in other standard or private VLAN groups, while preserving security and data isolation for normal traffic.

LLDP is used to discover basic information about neighboring devices within the local broadcast domain. LLDP is a Layer 2 protocol that advertises information about the sending device and collects information gathered from neighboring network nodes it discovers.

Advertised information is represented in Type Length Value (TLV) format according to the IEEE

802.1ab standard, and can include details such as device identification, capabilities and configuration settings. Media Endpoint Discovery (LLDP-MED) is an extension of LLDP intended for managing endpoint devices such as Voice over IP phones and network switches. The LLDP-MED TLVs advertise information such as network policy, power, inventory, and device location details. The LLDP and LLDP-MED information can be used by SNMP applications to simplify troubleshooting, enhance network management, and maintain an accurate network topology.

Page 64

System Defaults

Ethernet Ring

Protection

Switching

ERPS can be used to increase the availability and robustness of Ethernet rings, such as those used in Metropolitan Area Networks (MAN). ERPS provides Layer 2 loop avoidance and fast reconvergence in Layer 2 ring topologies, supporting up to 255 nodes in the ring structure. It can also function with IEEE 802.1ag to support link monitoring when non-participating devices exist within the Ethernet ring.

IP Routing The switch provides Layer 3 IP routing. To maintain a high rate of throughput, the switch forwards

all traffic passing within the same segment, and routes only traffic that passes between different subnetworks. The wire-speed routing provided by this switch lets you easily link network segments or VLANs together without having to deal with the bottlenecks or configuration hassles normally associated with conventional routers.

Static Routing – Traffic is automatically routed between any IP interfaces configured on the switch. Routing to statically configured hosts or subnet addresses is provided based on next-hop entries specified in the static routing table.

System Defaults

The switch’s system defaults are provided in the configuration file “Factory_Default_Config.cfg.” To reset the switch defaults, this file should be set as the startup configuration file.

The following table lists some of the basic system defaults.

TABLE 2 System Defaults

Function Parameter Default

Console Port Connection Baud Rate 9600 bps

Data bits 8

Stop bits 1

Parity none

Local Console Timeout 0 (disabled)

Authentication and Security Measures

Privileged Exec Level Username “admin”

Password “admin”

Normal Exec Level Username “guest”

Password “guest”

Enable Privileged Exec from Normal Exec Level

RADIUS Authentication Disabled

TACACS+ Authentication Disabled

802.1X Port Authentication Disabled

MAC Authentication Disabled

HTTPS Enabled

SSH Disabled

Port Security Disabled

IP Filtering Disabled

DHCP Snooping Disabled

Password “super”

8 Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 65

System Defaults

TABLE 2 System Defaults (Continued)

Function Parameter Default

Web Management HTTP Server Enabled

SNMP SNMP Agent Enabled

Port Configuration Admin Status Enabled

Port Trunking Static Trunks None

Congestion Control Rate Limiting Disabled

OAM Status Disabled

Address Table Aging Time 300 seconds

Spanning Tree Algorithm Status Enabled, RSTP

ERPS Status Disabled

LLDP Status Enabled

Virtual LANs Default VLAN 1

HTTP Port Number 80

HTTP Secure Server Enabled

HTTP Secure Server Port 443

Community Strings “public” (read only)

“private” (read/write)

Traps Authentication traps: enabled

Link-up-down events: enabled

SNMP V3 View: defaultview

Group: public (read only); private (read/write)

Auto-negotiation Enabled

Flow Control Disabled

LACP (all ports) Disabled

Storm Control Broadcast: Enabled

(64 kbits/sec) Multicast: Disabled Unknown Unicast: Disabled

(Defaults: RSTP standard)

Edge Ports Disabled

PVID 1

Acceptable Frame Type All

Ingress Filtering Disabled

Switchport Mode (Egress Mode) Hybrid

GVRP (global) Disabled

GVRP (port interface) Disabled

QinQ Tunneling Disabled

Brocade 6910 Ethernet Access Switch Configuration Guide 9 53-1002651-02

Page 66

System Defaults

TABLE 2 System Defaults (Continued)

Function Parameter Default

Traffic Prioritization Ingress Port Priority 0

Queue Mode WRR

Queue Weight Queue: 0 1 2 3 4 5 6 7

Weight: 1 2 4 6 8 10 12 14

Class of Service Enabled

IP Precedence Priority Disabled

IP DSCP Priority Disabled

IP Settings Management. VLAN VLAN 1

IP Address DHCP assigned

Subnet Mask 255.255.255.0

Default Gateway 0.0.0.0

DHCP Client: Enabled

DNS Proxy service: Disabled

BOOTP Disabled

Multicast Filtering IGMP Snooping (Layer 2) Snooping: Enabled

Querier: Disabled

Multicast VLAN Registration Disabled

IGMP Proxy Reporting Enabled

System Log Status Enabled

Messages Logged to RAM Levels 0-7 (all)

Messages Logged to Flash Levels 0-3

SMTP Email Alerts Event Handler Enabled (but no server defined)

SNTP Clock Synchronization Disabled

10 Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 67

In this chapter

NOTE

This chapter includes information on connecting to the switch and basic configuration procedures. It includes the following topics:

•Connecting to the Switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

•Basic Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

•Managing System Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

Connecting to the Switch

The switch includes a built-in network management agent. The agent offers a variety of management options, including SNMP, RMON and a web-based interface. A PC may also be connected directly to the switch for configuration and monitoring via a command line interface (CLI).

Chapter

2Initial Switch Configuration

An IPv4 address for this switch is obtained via DHCP by defau lt. To chan ge this a ddress , see “Setting

an IP Address” on page 14.

Configuration Options

The switch’s HTTP web agent allows you to configure switch parameters, monitor port connections, and display statistics using a standard web browser such as Internet Explorer 6.x or above, and Mozilla Firefox 3.6.2/4/5. The switch’s web management interface can be accessed from any computer attached to the network.

The CLI program can be accessed by a direct connection to the RS-232 serial console port on the switch, or remotely by a Telnet connection over the network.

The switch’s management agent also supports SNMP (Simple Network Management Protocol). This SNMP agent permits the switch to be managed from any system in the network using network management software.

The switch’s web interface, console interface, and SNMP agent allow you to perform the following management functions:

• Set user names and passwords

• Set an IP interface for a management VLAN

• Configure SNMP parameters

• Enable/disable any port

• Set the speed/duplex mode for any port

Brocade 6910 Ethernet Access Switch Configuration Guide 11 53-1002651-02

Page 68

Connecting to the Switch

NOTE

• Configure the bandwidth of any port by limiting input or output rates

• Control port access through IEEE 802.1X security or static address filtering

• Filter packets using Access Control Lists (ACLs)

• Configure up to 4093 IEEE 802.1Q VLANs

• Enable GVRP automatic VLAN registration

• Configure IGMP multicast filtering

• Upload and download system firmware or configuration files via HTTP (using the web interface)

or FTP/TFTP (using the command line or web interface)

• Configure Spanning Tree parameters

• Configure Class of Service (CoS) priority queuing

• Configure static or LACP trunks (up to 6)

• Enable port mirroring

• Set storm control on any port for excessive broadcast, multicast, or unknown unicast traffic

• Display system information and statistics

Required Connections

The switch provides an RS-232 serial port that enables a connection to a PC or terminal for monitoring and configuring the switch. A null-modem console cable is provided with the switch.

Attach a VT100-compatible terminal, or a PC running a terminal emulation program to the switch. You can use the console cable provided with this package, or use a null-modem cable that complies with the wiring assignments shown in the Installation Guide.

To connect a terminal to the console port, complete the following steps:

1. Connect the console cable to the serial port on a terminal, or a PC running terminal emulation software, and tighten the captive retaining screws on the DB-9 connector.

2. Connect the other end of the cable to the RS-232 serial port on the switch.

3. Make sure the terminal emulation software is set as follows:

• Select the appropriate serial port (COM port 1 or COM port 2).

• Set the baud rate to 9600 bps.

• Set the data format to 8 data bits, 1 stop bit, and no parity.

• Set flow control to none.

• Set the emulation mode to VT100.

• When using HyperTerminal, select Terminal keys, not Windows keys.

Once you have set up the terminal correctly, the console login screen will be displayed.

For a description of how to use the CLI, see “Using the Command Line Interface” on page 27. For a list of all the CLI commands and detailed information on using the CLI, refer to “CLI Command

Groups” on page 35.

12 Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 69

Basic Configuration

NOTE

Remote Connections

Prior to accessing the switch’s onboard agent via a network connection, you must first configure it with a valid IP address, subnet mask, and default gateway using a console connection, or DHCP protocol.

An IPv4 address for this switch is obtained via DHCP by default. To manually configure this address or enable dynamic address assignment via DHCP, see “Setting an IP Address” on page 14.

This switch supports four Telnet sessions or four SSH sessions.

After configuring the switch’s IP parameters, you can access the onboard configuration program from anywhere within the attached network. The onboard configuration program can be accessed using Telnet from any computer attached to the network. The switch can also be managed by any computer using a web browser (Internet Explorer 6.x or above, or Mozilla Firefox 3.6.2/4/5), or from a network computer using SNMP network management software.

The onboard program only provides access to basic configuration functions. To access the full range of SNMP management functions, you must use SNMP-based network management software.

The switch also includes a Craft port on the front panel which provides a secure management connection that is isolated from all other ports on the switch. This interface is not configured with an IP address by default, but may be man ually configured with an IPv4 or IPv6 address as described in the following sections. The Craft port can only be configured through the command line interface, and is specified with the name “craft” in the commands used to configure its IP address.

Basic Configuration

Console Connection

The CLI program provides two different command levels — normal access level (Normal Exec) and privileged access level (Privileged Exec). The commands available at the Normal Exec level are a limited subset of those available at the Privileged Exec level and allow you to only display information and use basic utilities. To fully configure the switch parameters, you must access the CLI at the Privileged Exec level.

Access to both CLI levels are controlled by user names and passwords. The switch has a default user name and password for each level. To log into the CLI at the Privileged Exec level using the default user name and password, perform these steps:

1. To initiate your console connection, press <Enter>. The “User Access Verification” procedure starts.

2. At the User Name prompt, enter “admin.”

3. At the Password prompt, also enter “admin.” (The password characters are not displayed on the console screen.)

4. The session is opened and the CLI displays the “Console#” prompt indicating you have access at the Privileged Exec level.

Brocade 6910 Ethernet Access Switch Configuration Guide 13 53-1002651-02

Page 70

Basic Configuration

Setting Passwords

If this is your first time to log into the CLI program, you should define new passwords for both default user names using the “username” command, record them and put them in a safe place.

Passwords can consist of up to 32 alphanumeric characters and are case sensitive. To prevent unauthorized access to the switch, set the passwords as follows:

1. Open the console interface with the default user name and password “admin” to access the Privileged Exec level.

2. Type “configure” and press <Enter>.

3. Type “username guest password 0 password,” for the Normal Exec level, where password is your new password. Press <Enter>.

4. Type “username admin password 0 password,” for the Privileged Exec level, where password is your new password. Press <Enter>.

Username: admin Password:

CLI session with the BR6910 is opened. To end the CLI session, enter [Exit].

Console#configure Console(config)#username guest password 0 [password] Console(config)#username admin password 0 [password] Console(config)#

Setting an IP Address

You must establish IP address information for the switch to obtain management access through the network. This can be done in either of the following ways:

• Manual — You have to input the information, including IP address and subnet mask. If your

management station is not in the same IP subnet as the switch, you will also need to specify the default gateway router.

• Dynamic — The switch can send IPv4 configuration requests to BOOTP or DHCP address

allocation servers on the network, or can automatically generate a unique IPv6 host address based on the local subnet address prefix received in router advertisement messages. An IPv6 link local address for use in a local network can also be dynamically generated as described in

“Obtaining an IPv6 Address” on page 18.

The current software does not support DHCP for IPv6, so an IPv6 global unicast address for use in a network containing more than one subnet can only be manually configured as described in

“Assigning an IPv6 Address” on page 15.

Manual Configuration

You can manually assign an IP address to the switch. You may also need to specify a default gateway that resides between this device and management stations that exist on another network segment. Valid IPv4 addresses consist of four decimal numbers, 0 to 255, separated by periods. Anything outside this format will not be accepted by the CLI program.

14 Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 71

Basic Configuration

NOTE

The IPv4 address for this switch is obtained via DHCP by default.

Assigning an IPv4 Address Before you can assign an IP address to the switch, you must obtain the following information from

your network administrator:

• IP address for the switch

• Network mask for this network

• Default gateway for the network

To assign an IPv4 address to the switch, complete the following steps

1. From the Global Configuration mode prompt, type “interface vlan 1” to access the interface-configuration mode. Press <Enter>.

2. Type “ip address ip-address netmask” or “ip address ip-address/prefix-length,” where “ip-address” is the switch IP address, “netmask” is the network mask for the network, and “prefix-length” indicates how many contiguous bits (from the left) of the address comprise the network portion of the address. Press <Enter>.

3. Type “exit” to return to the global configuration mode prompt. Press <Enter>.

4. To set the IP address of the default gateway for the network to which the switch belongs, type “ip default-gateway gateway,” where “gateway” is the IP address of the default gateway. Press <Enter>.

Console(config)#interface vlan 1 Console(config-if)#ip address 192.168.1.5 255.255.255.0 Console(config-if)#exit Console(config)#ip default-gateway 192.168.1.254

Assigning an IPv6 Address This section describes how to configure a “link local” address for connectivity within the local

subnet only, and also how to configure a “global unicast” address, including a network prefix for use on a multi-segment network and the host portion of the address.

An IPv6 prefix or address must be formatted according to RFC 2373 “IPv6 Addressing Architecture,” using 8 colon-separated 16-bit hexadecimal values. One double colon may be used to indicate the appropriate number of zeros required to fill the undefined fields. For detailed information on the other ways to assign IPv6 addresses, see “Setting the Switch’s IP Address (IP

Version 6)” on page 1050.

Link Local Address — All link-local addresses must be configured with a prefix in the range of FE80~FEBF. Remember that this address type makes the switch accessible over IPv6 for all devices attached to the same local subnet only. Also, if the switch detects that the address you configured conflicts with that in use by another device on the subnet, it will stop using the address in question, and automatically generate a link local address that does not conflict with any other devices on the local subnet.

To configure an IPv6 link local address for the switch, complete the following steps:

1. From the Global Configuration mode prompt, type “interface vlan 1” to access the interface-configuration mode. Press <Enter>.

Brocade 6910 Ethernet Access Switch Configuration Guide 15 53-1002651-02

Page 72

Basic Configuration

2. Type “ipv6 address” followed by up to 8 colon-separated 16-bit hexadecimal values for the ipv6-address similar to that shown in the example, followed by the “link-local” command parameter. Then press <Enter>.

Console(config)#interface vlan 1 Console(config-if)#ipv6 address FE80::260:3EFF:FE11:6700 link-local Console(config-if)#ipv6 enable Console(config-if)#end Console#show ipv6 interface VLAN 1 is up IPv6 is enabled. Link-local address: FE80::260:3EFF:FE11:6700/64 Global unicast address(es): (None) Joined group address(es): FF02::1:FF11:6700 FF02::1 IPv6 link MTU is 1500 bytes ND DAD is enabled, number of DAD attempts: 3. ND retransmit interval is 1000 milliseconds ND advertised retransmit interval is 0 milliseconds ND reachable time is 30000 milliseconds ND advertised reachable time is 0 milliseconds Console#

Address for Multi-segment Network — Before you can assign an IPv6 address to the switch that will be used to connect to a multi-segment network, you must obtain the following information from your network administrator:

• Prefix for this network

• IP address for the switch

• Default gateway for the network

For networks that encompass several different subnets, you must define the full address, including a network prefix and the host address for the switch. You can specify either the full IPv6 address, or the IPv6 address and prefix length. The prefix length for an IPv6 network is the number of bits (from the left) of the prefix that form the network address, and is expressed as a decimal number. For example, all IPv6 addresses that start with the first byte of 73 (hexadecimal) could be expressed as 73:0:0:0:0:0:0:0/8 or 73::/8.

To generate an IPv6 global unicast address for the switch, complete the following steps:

1. From the global configuration mode prompt, type “interface vlan 1” to access the interface-configuration mode. Press <Enter>.

2. From the interface prompt, type “ipv6 address ipv6-address” or “ipv6 address ipv6-address/prefix-length,” where “prefix-length” indicates the address bits used to form the network portion of the address. (The network address starts from the left of the prefix and should encompass some of the ipv6-address bits.) The remaining bits are assigned to the host interface. Press <Enter>.

3. Type “exit” to return to the global configuration mode prompt. Press <Enter>.

4. To set the IP address of the IPv6 default gateway for the network to which the switch belongs, type “ipv6 default-gateway gateway,” where “gateway” is the IPv6 address of the default gateway. Press <Enter>.

16 Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 73

Basic Configuration

Console(config)#interface vlan 1 Console(config-if)#ipv6 address 2001:DB8:2222:7272::66/64 Console(config-if)#exit Console(config)#ipv6 default-gateway 2001:DB8:2222:7272::254 Console(config)end Console#show ipv6 interface VLAN 1 is up IPv6 is enabled. Link-local address: FE80::260:3EFF:FE11:6700/64 Global unicast address(es): 2001:DB8:2222:7272::/64, subnet is 2001:DB8:2222:7272::/64 Joined group address(es): FF02::1:FF00:0 FF02::1:FF11:6700 FF02::1 IPv6 link MTU is 1500 bytes ND DAD is enabled, number of DAD attempts: 3. ND retransmit interval is 1000 milliseconds ND advertised retransmit interval is 0 milliseconds ND reachable time is 30000 milliseconds ND advertised reachable time is 0 milliseconds

Console#show ipv6 default-gateway ipv6 default gateway: 2001:DB8:2222:7272::254 Console#

Dynamic Configuration

Obtaining an IPv4 Address

If you select the “bootp” or “dhcp” option, the system will immediately start broadcasting service requests. IP will be enabled but will not function until a BOOTP or DHCP reply has been received. Requests are broadcast every few minutes using exponential backoff until IP configuration information is obtained from a BOOTP or DHCP server. BOOTP and DHCP values can include the IP address, subnet mask, and default gateway. If the DHCP/BOOTP server is slow to respond, you may need to use the “ip dhcp restart client” command to re-start broadcasting service requests.

Note that the “ip dhcp restart client” command can also be used to start broadcasting service requests for all VLANs configured to obtain address assignments through BOOTP or DHCP. It may be necessary to use this command when DHCP is configured on a VLAN, and the member ports which were previously shut down are now enabled.

If the “bootp” or “dhcp” option is saved to the startup-config file (step 6), then the switch will start broadcasting service requests as soon as it is powered on.

To automatically configure the switch by communicating with BOOTP or DHCP address allocation servers on the network, complete the following steps:

1. From the Global Configuration mode prompt, type “interface vlan 1” to access the interface-configuration mode. Press <Enter>.

2. At the interface-configuration mode prompt, use one of the following commands:

• To obtain IP settings via DHCP, type “ip address dhcp” and press <Enter>.

• To obtain IP settings via BOOTP, type “ip address bootp” and press <Enter>.

3. Type “end” to return to the Privileged Exec mode. Press <Enter>.

Brocade 6910 Ethernet Access Switch Configuration Guide 17 53-1002651-02

Page 74

Basic Configuration

4. Wait a few minutes, and then check the IP configuration settings by typing the “show ip interface” command. Press <Enter>.

5. Then save your configuration changes by typing “copy running-config startup-config.” Enter the startup file name and press <Enter>.

Console(config)#interface vlan 1 Console(config-if)#ip address dhcp Console(config-if)#end Console#show ip interface VLAN 1 is Administrative Up - Link Up Address is 00-E0-0C-00-00-FB Index: 1001, MTU: 1500 Address Mode is DHCP IP Address: 192.168.0.2 Mask: 255.255.255.0 Console#copy running-config startup-config Startup configuration file name []: startup \Write to FLASH Programming.

\Write to FLASH finish. Success.

Obtaining an IPv6 Address

Link Local Address — There are several ways to configure IPv6 addresses. The simplest method is to automatically generate a “link local” address (identified by an address prefix of FE80). This address type makes the switch accessible over IPv6 for all devices attached to the same local subnet.

To generate an IPv6 link local address for the switch, complete the following steps:

1. From the Global Configuration mode prompt, type “interface vlan 1” to access the interface-configuration mode. Press <Enter>.

2. Type “ipv6 enable” and press <Enter>.

Console(config)#interface vlan 1 Console(config-if)#ipv6 enable Console(config-if)#end Console#show ipv6 interface VLAN 1 is up IPv6 is enabled. Link-local address: FE80::260:3EFF:FE11:6700/64 Global unicast address(es): 2001:DB8:2222:7272::/64, subnet is 2001:DB8:2222:7272::/64 Joined group address(es): FF02::1:FF00:0 FF02::1:FF11:6700 FF02::1 IPv6 link MTU is 1500 bytes ND DAD is enabled, number of DAD attempts: 3. ND retransmit interval is 1000 milliseconds ND advertised retransmit interval is 0 milliseconds ND reachable time is 30000 milliseconds ND advertised reachable time is 0 milliseconds Console#

18 Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 75

Basic Configuration

Address for Multi-segment Network — To generate an IPv6 address that can be used in a network containing more than one subnet, the switch can be configured to automatically generate a unique host address based on the local subnet address prefix received in router advertisement messages. (DHCP for IPv6 will also be supported in future software releases.)

To dynamically generate an IPv6 host address for the switch, complete the following steps:

1. From the Global Configuration mode prompt, type “interface vlan 1” to access the interface-configuration mode. Press <Enter>.

2. From the interface prompt, type “ipv6 address autoconfig” and press <Enter>.

3. Type “ipv6 enable” and press <Enter> to enable IPv6 on an interface that has not been configured with an explicit IPv6 address.

Console(config)#interface vlan 1 Console(config-if)#ipv6 address autoconfig Console(config-if)#ipv6 enable Console(config-if)#end Console#show ipv6 interface VLAN 1 is up IPv6 is enabled. Link-local address: FE80::260:3EFF:FE11:6700/64 Global unicast address(es): 2001:DB8:2222:7272::/64, subnet is 2001:DB8:2222:7272::/64 Joined group address(es): FF02::1:FF00:0 FF02::1:FF11:6700 FF02::1 IPv6 link MTU is 1500 bytes ND DAD is enabled, number of DAD attempts: 3. ND retransmit interval is 1000 milliseconds ND advertised retransmit interval is 0 milliseconds ND reachable time is 30000 milliseconds ND advertised reachable time is 0 milliseconds Console#

Downloading Configuration File Referenced by DHCP Server

Information passed on to the switch from a DHCP server may also include a configuration file to be downloaded and the TFTP servers where that file can be accessed. If the Factory Default Configuration file is used to provision the switch at startup, in addition to requesting IP configuration settings from the DHCP server, it will also ask for the name of a bootup configuration file and TFTP servers where that file is stored.

If the switch receives information that allows it to download the remote bootup file, it will save this file to a local buffer, and then restart the provision process.

Note the following DHCP client behavior:

• The bootup configuration file received from a TFTP server is stored on the switch with the

original file name. If this file name already exists in the switch, the file is overwritten.

• If the name of the bootup configuration file is the same as the Factory Default Configuration

file, the download procedure will be terminated, and the switch will not send any further DHCP client requests.

• If the switch fails to download the bootup configuration file based on information passed by the

DHCP server, it will not send any further DHCP client requests.

Brocade 6910 Ethernet Access Switch Configuration Guide 19 53-1002651-02

Page 76

Basic Configuration

• If the switch does not receive a DHCP response prior to completing the bootup process, it will

continue to send a DHCP client request once a minute. These requests will only be terminated if the switch’s address is manually configured, but will resume if the address mode is set back to DHCP.

To successfully transmit a bootup configuration file to the switch the DHCP daemon (using a Linux based system for this example) must be configured with the following information:

• Options 60, 66 and 67 statements can be added to the daemon’s configuration file.

TABLE 3 Options 60, 66 and 67 Statements

Statement

Option

Keyword Parameter

60 vendor-class-identifier a string indicating the vendor class identifier

66 tftp-server-name a string indicating the tftp server name

67 bootfile-name a string indicating the bootfile name

• By default, DHCP option 66/67 parameters are not carried in a DHCP server reply. To ask for a

DHCP reply with option 66/67 information, the DHCP client request sent by this switch includes a “parameter request list” asking for this information. Besides, the client request also includes a “vendor class identifier” that allows the DHCP server to identify the device, and select the appropriate configuration file for download. This information is included in Option 55 and 124.

TABLE 4 Options 55 and 124 Statements

Option

Keyword Parameter

55 dhcp-parameter-request-list a list of parameters, separated by ','

124 vendor-class-identifier a string indicating the vendor class identifier

Statement

The following configuration examples are provided for a Linux-based DHCP daemon (dhcpd.conf file). In the “Vendor class” section, the server will always send Option 66 and 67 to tell switch to download the “test” configuration file from server 192.168.255.101.

ddns-update-style ad-hoc;

default-lease-time 600; max-lease-time 7200;

log-facility local7;

server-name "Server1"; Server-identifier 192.168.255.250; #option 66, 67 option space dynamicProvision code width 1 length 1 hash size 2; option dynamicProvision.tftp-server-name code 66 = text; option dynamicProvision.bootfile-name code 67 = text;

subnet 192.168.255.0 netmask 255.255.255.0 { range 192.168.255.160 192.168.255.200; option routers 192.168.255.101;

20 Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 77

Basic Configuration

NOTE

option tftp-server-name "192.168.255.100"; #Default Option 66 option bootfile-name "bootfile"; #Default Option 67 }

class "Option66,67_2" { #DHCP Option 60 Vendor class match if option vendor-class-identifier = "es020000.cfg"; option tftp-server-name "192.168.255.101"; option bootfile-name "test"; }

Use “es020000.cfg” for the vendor-class-identifier in the dhcpd.conf file.

Enabling SNMP Management Access

The switch can be configured to accept management commands from Simple Network Management Protocol (SNMP) applications. You can configure the switch to respond to SNMP requests or generate SNMP traps.

When SNMP management stations send requests to the switch (either to return information or to set a parameter), the switch provides the requested data or sets the specified parameter. The switch can also be configured to send information to SNMP managers (without being requested by the managers) through trap messages, which inform the manager that certain events have occurred.

The switch includes an SNMP agent that supports SNMP version 1, 2c, and 3 clients. To provide management access for version 1 or 2c clients, you must specify a community string. The switch provides a default MIB View (i.e., an SNMPv3 construct) for the default “public” community string that provides read access to the entire MIB tree, and a default view for the “private” community string that provides read/write access to the entire MIB tree. However, you may assign new views to version 1 or 2c community strings that suit your specific security requirements (see “Setting

SNMPv3 Views” on page 956).

Community Strings (for SNMP version 1 and 2c clients)

Community strings are used to control management access to SNMP version 1 and 2c stations, as well as to authorize SNMP stations to receive trap messages from the switch. You therefore need to assign community strings to specified users, and set the access level.

The default strings are:

• public - with read-only access. Authorized management stations are only able to retrieve MIB

objects.

• private - with read/write access. Authorized management stations are able to both retrieve and

modify MIB objects.

To prevent unauthorized access to the switch from SNMP version 1 or 2c clients, it is recommended that you change the default community strings.

Brocade 6910 Ethernet Access Switch Configuration Guide 21 53-1002651-02

Page 78

Basic Configuration

NOTE

To configure a community string, complete the following steps:

1. From the Privileged Exec level global configuration mode prompt, type “snmp-server community string mode,” where “string” is the community access string and “mode” is rw (read/write) or ro (read only). Press <Enter>. (Note that the default mode is read only.)

2. To remove an existing string, simply type “no snmp-server community string,” where “string” is the community access string to remove. Press <Enter>.

Console(config)#snmp-server community admin rw Console(config)#snmp-server community private Console(config)#

If you do not intend to support access to SNMP version 1 and 2c clients, we recommend that you delete both of the default community strings. If there are no community strings, then SNMP management access from SNMP v1 and v2c clients is disabled.

Trap Receivers

You can also specify SNMP stations that are to receive traps from the switch. To configure a trap receiver, use the “snmp-server host” command. From the Privileged Exec level global configuration mode prompt, type:

“snmp-server host host-address community-string

[version {1 | 2c | 3 {auth | noauth | priv}}]”

where “host-address” is the IP address for the trap receiver, “community-string” specifies access rights for a version 1/2c host, or is the user name of a version 3 host, “version” indicates the SNMP client version, and “auth | noauth | priv” means that authentication, no authentication, or authentication and privacy is used for v3 clients. Then press <Enter>. For a more detailed description of these parameters, see “snmp-server host” on page 111. The following example creates a trap host for each type of SNMP client.

Console(config)#snmp-server host 10.1.19.23 batman Console(config)#snmp-server host 10.1.19.98 robin version 2c Console(config)#snmp-server host 10.1.19.34 barbie version 3 auth Console(config)#

Configuring Access for SNMP Version 3 Clients

To configure management access for SNMPv3 clients, you need to first create a view that defines the portions of MIB that the client can read or write, assign the view to a group, and then assign the user to a group. The following example creates one view called “mib-2” that includes the entire MIB-2 tree branch, and then another view that includes the IEEE 802.1d bridge MIB. It assigns these respective read and read/write views to a group call “r&d” and specifies group authentication via MD5 or SHA. In the last step, it assigns a v3 user to this group, indicating that MD5 will be used for authentication, provides the password “greenpeace” for authentication, and the password “einstien” for encryption.

Console(config)#snmp-server view mib-2 1.3.6.1.2.1 included Console(config)#snmp-server view 802.1d 1.3.6.1.2.1.17 included Console(config)#snmp-server group r&d v3 auth read mib-2 write 802.1d Console(config)#snmp-server user steve group r&d v3 auth md5 greenpeace priv des56

einstien

Console(config)#

22 Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 79

Managing System Files

For a more detailed explanation on how to configure the switch for access from SNMP v3 clients, refer to “Simple Network Management Protocol” on page 951, or refer to the specific CLI commands under “SNMP Commands” on page 105.

Managing System Files

The switch’s flash memory supports three types of system files that can be managed by the CLI program, web interface, or SNMP. The switch’s file system allows files to be uploaded and downloaded, copied, deleted, and set as a start-up file.

The types of files are:

• Configuration — This file type stores system configuration information and is created when

configuration settings are saved. Saved configuration files can be selected as a system start-up file or can be uploaded via FTP/TFTP to a server for backup. The file named “Factory_Default_Config.cfg” contains all the system default settings and cannot be deleted from the system. If the system is booted with the factory default settings, the switch will also create a file named “startup1.cfg” that contains system settings for switch initialization, including information about the unit identifier, and MAC address for the switch. The configuration settings from the factory defaults configuration file are copied to this file, which is then used to boot the switch. See “Saving or Restoring Configuration Settings” on page 23 for more information.

• Operation Code — System software that is executed after boot-up, also known as run-time

code. This code runs the switch operations and provides the CLI and web management interfaces. See “Managing System Files” on page 679 for more information.

• Diagnostic Code — Software that is run during system boot-up, also known as POST (Power On

Self-Test).

Due to the size limit of the flash memory, the switch supports only two operation code files. However, you can have as many diagnostic code files and configuration files as available flash memory space allows. The switch has a total of 32 Mbytes of flash memory for system files.

In the system flash memory, one file of each type must be set as the start-up file. During a system boot, the diagnostic and operation code files set as the start-up file are run, and then the start-up configuration file is loaded.

Note that configuration files should be downloaded using a file name that reflects the contents or usage of the file settings. If you download directly to the running-config, the system will reboot, and the settings will have to be copied from the running-config to a permanent file.

Saving or Restoring Configuration Settings

Configuration commands only modify the running configuration file and are not saved when the switch is rebooted. To save all your configuration changes in nonvolatile storage, you must copy the running configuration file to the start-up configuration file using the “copy” command.

New startup configuration files must have a name specified. File names on the switch are case-sensitive, can be from 1 to 31 characters, must not contain slashes (\ or /), and the leading letter of the file name must not be a period (.). (Valid characters: A-Z, a-z, 0-9, “.”, “-”, “_”)

Brocade 6910 Ethernet Access Switch Configuration Guide 23 53-1002651-02

Page 80

Managing System Files

There can be more than one user-defined configuration file saved in the switch’s flash memory, but only one is designated as the “startup” file that is loaded when the switch boots. The copy running-config startup-config command always sets the new file as the startup file. To select a previously saved configuration file, use the boot system config:<filename> command.

The maximum number of saved configuration files depends on available flash memory. The amount of available flash memory can be checked by using the dir command.

To save the current configuration settings, enter the following command:

1. From the Privileged Exec mode prompt, type “copy running-config startup-config” and press <Enter>.

2. Enter the name of the start-up file. Press <Enter>.

Console#copy running-config startup-config Startup configuration file name []: startup \Write to FLASH Programming.

\Write to FLASH finish. Success.

Console#

To restore configuration settings from a backup server, enter the following command:

1. From the Privileged Exec mode prompt, type “copy tftp startup-config” and press <Enter>.

2. Enter the address of the TFTP server. Press <Enter>.

3. Enter the name of the startup file stored on the server. Press <Enter>.

4. Enter the name for the startup file on the switch. Press <Enter>.

Console#copy file startup-config Console#copy tftp startup-config TFTP server IP address: 192.168.0.4 Source configuration file name: startup-rd.cfg Startup configuration file name [startup1.cfg]:

Success. Console#

24 Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 81

Section

Command Line Interface

This section provides a detailed description of the Command Line Interface, along with examples for all of the commands, and includes the following chapters:

•Using the Command Line Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

•General Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

•System Management Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47

•SNMP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 105

•Remote Monitoring Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 125

•Flow Sampling Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133

•Authentication Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 139

•General Security Measures. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 189

•Access Control Lists. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 233

•Interface Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 255

•Link Aggregation Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 285

•Port Mirroring Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 297

•Rate Limit Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 307

•Automatic Traffic Control Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 309

•Address Table Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 323

•Spanning Tree Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 329

•ERPS Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 355

•VLAN Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 369

•Class of Service Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 415

•Quality of Service Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 427

•Multicast Filtering Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 443

•LLDP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 499

•CFM Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 517

•OAM Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 569

•Domain Name Service Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 579

•DHCP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 587

•IP Interface Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 595

•IP Routing Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 629

•Debug Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 633

III

Brocade 6910 Ethernet Access Switch Configuration Guide 25 53-1002651-02

Page 82

26 Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 83

In this chapter

•Accessing the CLI. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

•Entering Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

•CLI Command Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

Accessing the CLI

When accessing the management interface for the switch over a direct connection to the server’s console port, or via a Telnet or Secure Shell connection (SSH), the switch can be managed by entering command keywords and parameters at the prompt. Using the switch's command-line interface (CLI) is very similar to entering commands on a UNIX system.

Chapter

3Using the Command Line Interface

Console Connection

To access the switch through the console port, perform these steps:

1. At the console prompt, enter the user name and password. (The default user names are “admin” and “guest” with corresponding passwords of “admin” and “guest.”) When the administrator user name and password is entered, the CLI displays the “Console#” prompt and enters privileged access mode (i.e., Privileged Exec). But when the guest user name and password is entered, the CLI displays the “Console>” prompt and enters normal access mode (i.e., Normal Exec).

2. Enter the necessary commands to complete your desired tasks.

3. When finished, exit the session with the “quit” or “exit” command.

After connecting to the system through the console port, the login screen displays:

User Access Verification Username: admin Password: CLI session with the BR6910 is opened. To end the CLI session, enter [Exit]. Console#

Telnet Connection

Telnet operates over the IP transport protocol. In this environment, your management station and any network device you want to manage over the network must have a valid IP address. Valid IP addresses consist of four numbers, 0 to 255, separated by periods. Each address consists of a network portion and host portion. For example, the IP address assigned to this switch, 10.1.0.1, consists of a network portion (10.1.0) and a host portion (1).

Brocade 6910 Ethernet Access Switch Configuration Guide 27 53-1002651-02

Page 84

Entering Commands

NOTE

The IP address for this switch is obtained via DHCP by default.

To access the switch through a Telnet session, you must first set the IP address for the Master unit, and set the default gateway if you are managing the switch from a different IP subnet. For example,

Console(config)#interface vlan 1 Console(config-if)#ip address 10.1.0.254 255.255.255.0 Console(config-if)#exit Console(config)#ip default-gateway 10.1.0.254 Console(config)#

If your corporate network is connected to another network outside your office or to the Internet, you need to apply for a registered IP address. However, if you are attached to an isolated network, then you can use any IP address that matches the network segment to which you are attached.

After you configure the switch with an IP address, you can open a Telnet session by performing these steps:

1. From the remote host, enter the Telnet command and the IP address of the device you want to access.

2. At the prompt, enter the user name and system password. The CLI will display the “Vty-n#” prompt for the administrator to show that you are using privileged access mode (i.e., Privileged Exec), or “Vty-n>” for the guest to show that you are using normal access mode (i.e., Normal Exec), where n indicates the number of the current Telnet session.

3. Enter the necessary commands to complete your desired tasks.

4. When finished, exit the session with the “quit” or “exit” command.

After entering the Telnet command, the login screen displays:

Username: admin Password:

CLI session with the BR6910 is opened. To end the CLI session, enter [Exit].

Vty-0#

You can open up to four sessions to the device via Telnet.

Entering Commands

This section describes how to enter CLI commands.

Keywords and Arguments

A CLI command is a series of keywords and arguments. Keywords identify a command, and arguments specify configuration parameters. For example, in the command “show interfaces status ethernet 1/5,” show interfaces and status are keywords, ethernet is an argument that specifies the interface type, and 1/5 specifies the unit/port.

28 Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 85

Entering Commands

You can enter commands as follows:

• To enter a simple command, enter the command keyword.

• To enter multiple commands, enter each command in the required order. For example, to

enable Privileged Exec command mode, and display the startup configuration, enter:

Console>enable Console#show startup-config

• To enter commands that require parameters, enter the required parameters after the

command keyword. For example, to set a password for the administrator, enter:

Console(config)#username admin password 0 smith

Minimum Abbreviation

The CLI will accept a minimum number of characters that uniquely identify a command. For example, the command “configure” can be entered as con. If an entry is ambiguous, the system will prompt for further input.

Command Completion

If you terminate input with a Tab key, the CLI will print the remaining characters of a partial keyword up to the point of ambiguity. In the “logging history” example, typing log followed by a tab will result in printing the command up to “logging.”

Getting Help on Commands

You can display a brief description of the help system by entering the help command. You can also display command syntax by using the “?” character to list keywords or parameters.

Showing Commands

If you enter a “?” at the command prompt, the system will display the first level of keywords or command groups. You can also display a list of valid keywords for a specific command. For example, the command “system ?” displays a list of possible system commands:

Console#show ? access-group Access groups access-list Access lists accounting Uses an accounting list with this name alarm-status Show alarm status arp Information of ARP cache authorization Enables EXEC accounting auto-traffic-control Auto traffic control information banner Banner info bridge-ext Bridge extension information cable-diagnostics Shows the information of cable diagnostics calendar Date and time information class-map Displays class maps dns DNS information dot1q-tunnel dot1q-tunnel dot1x 802.1X content efm Ethernet First Mile feature erps Displays ERPS configuration ethernet Specifies the ethernet

Brocade 6910 Ethernet Access Switch Configuration Guide 29 53-1002651-02

Page 86

Entering Commands

garp GARP properties gvrp GVRP interface information history Shows history information hosts Host information interfaces Shows interface information ip IP information ipv6 IPv6 information l2protocol-tunnel Layer 2 protocol tunneling configuration lacp LACP statistics line TTY line information lldp LLDP log Log records logging Logging setting loop Shows the information of loopback mac MAC access list mac-address-table Configuration of the address table mac-vlan MAC-based VLAN information management Shows management information memory Memory utilization mvr multicast vlan registration mvr6 IPv6 Multicast VLAN registration network-access Shows the entries of the secure port. nlm Show notification log policy-map Displays policy maps port Port characteristics port-channel Port channel information power-save Shows the power saving information process Device process protocol-vlan Protocol-VLAN information public-key Public key information qos Quality of Service queue Priority queue information radius-server RADIUS server information reload Shows the reload settings rmon Remote Monitoring Protocol rspan Display status of the current RSPAN configuration running-config Information on the running configuration sflow Shows the sflow information snmp Simple Network Management Protocol configuration and statistics sntp Simple Network Time Protocol configuration spanning-tree Spanning-tree configuration ssh Secure shell server connections startup-config Startup system configuration subnet-vlan IP subnet-based VLAN information system System information tacacs-server TACACS server information tech-support Technical information time-range Time range traffic-segmentation Traffic segmentation information upgrade Shows upgrade information users Information about users logged in version System hardware and software versions vlan Shows virtual LAN settings vlan-translation VLAN translation information voice Shows the voice VLAN information web-auth Shows web authentication configuration Console#show

30 Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 87

Entering Commands

The command “show interfaces ?” will display the following information:

Console#show interfaces ? brief Shows brief interface description counters Interface counters information history Historical sample of interface counters information protocol-vlan Protocol-VLAN information status Shows interface status subnet-vlan IP subnet-based VLAN information switchport Shows interface switchport information transceiver Interface of transceiver information Console#

Show commands which display more than one page of information (e.g., show running-config) pause and require you to press the [Space] bar to continue displaying one more page, the [Enter] key to display one more line, or the [a] key to display the rest of the information without stopping. You can press any other key to terminate the display.

Partial Keyword Lookup

If you terminate a partial keyword with a question mark, alternatives that match the initial letters are provided. (Remember not to leave a space between the command and question mark.) For example “s?” shows all the keywords starting with “s.”

Console#show s? sflow snmp sntp spanning-tree ssh startup-config subnet-vlan system Console#show s

Negating the Effect of Commands

For many configuration commands you can enter the prefix keyword “no” to cancel the effect of a command or reset the configuration to the default value. For example, the logging command will log system messages to a host server. To disable logging, specify the no logging command. This guide describes the negation effect for all applicable commands.

Using Command History

The CLI maintains a history of commands that have been entered. You can scroll back through the history of commands by pressing the up arrow key. Any command displayed in the history list can be executed again, or first modified and then executed.

Using the show history command displays a longer list of recently executed commands.

Brocade 6910 Ethernet Access Switch Configuration Guide 31 53-1002651-02

Page 88

Entering Commands

Understanding Command Modes

The command set is divided into Exec and Configuration classes. Exec commands generally display information on system status or clear statistical counters. Configuration commands, on the other hand, modify interface parameters or enable certain switching functions. These classes are further divided into different modes. Available commands depend on the selected mode. You can always enter a question mark “?” at the prompt to display a list of the commands available for the current mode. The command classes and associated modes are displayed in the following table:

TABLE 5 General Command Modes

Class Mode

Exec Normal

Privileged

Configuration Global

* You must be in Privileged Exec mode to access the Global configuration mode.

You must be in Global Configuration mode to access any of the other configuration modes.

Access Control List CFM Class Map ERPS IGMP Profile Interface Line Multiple Spanning Tree Policy Map Time Range VLAN Database

Exec Commands

When you open a new console session on the switch with the user name and password “guest,” the system enters the Normal Exec command mode (or guest mode), displaying the “Console>” command prompt. Only a limited number of the commands are available in this mode. You can access all commands only from the Privileged Exec command mode (or administrator mode). To access Privilege Exec mode, open a new console session with the user name and password “admin.” The system will now display the “Console#” command prompt. You can also enter Privileged Exec mode from within Normal Exec mode, by entering the enable command, followed by the privileged level password “super.”

To enter Privileged Exec mode, enter the following user names and passwords:

Username: admin Password: [admin login password]

CLI session with the BR6910 is opened. To end the CLI session, enter [Exit].

Console# Username: guest Password: [guest login password]

CLI session with the BR6910 is opened. To end the CLI session, enter [Exit].

32 Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 89

Entering Commands

Console>enable Password: [privileged level password] Console#

Configuration Commands

Configuration commands are privileged level commands used to modify switch settings. These commands modify the running configuration only and are not saved when the switch is rebooted. To store the running configuration in non-volatile storage, use the copy running-config startup-config command.

The configuration commands are organized into different modes:

• Global Configuration - These commands modify the system level configuration, and include

commands such as hostname and snmp-server community.

• Access Control List Configuration - These commands are used for packet filtering.

• CFM Configuration - Configures connectivity monitoring using continuity check messages, fault

verification through loopback messages, and fault isolation by examining end-to-end connections between Provider Edge devices or between Customer Edge devices.

• Class Map Configuration - Creates a DiffServ class map for a specified traffic type.

• ERPS Configuration – These commands configure Ethernet Ring Protection Switching for

increased availability of Ethernet rings commonly used in service provider networks.

• IGMP Profile - Sets a profile group and enters IGMP filter profile configuration mode.

• Interface Configuration - These commands modify the port configuration such as speed-duplex

and negotiation.

• Line Configuration - These commands modify the console port and Telnet configuration, and

include command such as parity and databits.

• Multiple Spanning Tree Configuration - These commands configure settings for the selected

multiple spanning tree instance.

• Policy Map Configuration - Creates a DiffServ policy map for multiple interfaces.

• Time Range - Sets a time range for use by other functions, such as Access Control Lists.

• VLAN Configuration - Includes the command to create VLAN groups.

To enter the Global Configuration mode, enter the command configure in Privileged Exec mode. The system prompt will change to “Console(config)#” which gives you access privilege to all Global Configuration commands.

Console#configure Console(config)#

Brocade 6910 Ethernet Access Switch Configuration Guide 33 53-1002651-02

Page 90

Entering Commands

To enter the other modes, at the configuration prompt type one of the following commands. Use the exit or end command to return to the Privileged Exec mode.

TABLE 6 Configuration Command Modes

Mode Command Prompt Page

Access Control List

CFM ethernet cfm domain Console(config-ether-cfm) 524

Class Map class-map Console(config-cmap) 428

ERPS erps domain Console(config-erps) 357

Interface interface {ethernet port | port-channel id| vlan id} Console(config-if) 256

Line line {console | vty} Console(config-line) 75

MSTP spanning-tree mst-configuration Console(config-mstp) 335

Policy Map policy-map Console(config-pmap) 431

Time Range time-range Console(config-time-range) 101

VLAN vlan database Console(config-vlan) 375

access-list arp access-list ip standard access-list ip extended access-list ipv6 standard access-list ipv6 extended access-list mac

Console(config-arp-acl) Console(config-std-acl) Console(config-ext-acl) Console(config-std-ipv6-acl) Console(config-ext-ipv6-acl) Console(config-mac-acl)

250 234 234 240 240 245

For example, you can use the following commands to enter interface configuration mode, and then return to Privileged Exec mode

Console(config)#interface ethernet 1/5 . . .

Console(config-if)#exit Console(config)#

Command Line Processing

Commands are not case sensitive. You can abbreviate commands and parameters as long as they contain enough letters to differentiate them from any other currently available commands or parameters. You can use the Tab key to complete partial commands, or enter a partial command followed by the “?” character to display a list of possible matches. You can also use the following editing keystrokes for command-line processing:

TABLE 7 Keystroke Commands

Keystroke Function

Ctrl-A Shifts cursor to start of command line.

Ctrl-B Shifts cursor to the left one character.

Ctrl-C Terminates the current task and displays the command prompt.

Ctrl-E Shifts cursor to end of command line.

Ctrl-F Shifts cursor to the right one character.

Ctrl-K Deletes all characters from the cursor to the end of the line.

Ctrl-L Repeats current command line on a new line.

34 Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 91

CLI Command Groups

TABLE 7 Keystroke Commands (Continued)

Keystroke Function

Ctrl-N Enters the next command line in the history buffer.

Ctrl-P Enters the last command.

Ctrl-R Repeats current command line on a new line.

Ctrl-U Deletes from the cursor to the beginning of the line.

Ctrl-W Deletes the last word typed.

Esc-B Moves the cursor back one word.

Esc-D Deletes from the cursor to the end of the word.

Esc-F Moves the cursor forward one word.

Delete key or backspace key

Showing Status Information

There are various “show” commands which display configuration settings or the status of specified processes. Many of these commands will not display any information unless the switch is properly configured, and in some cases the interface to which a command applies is up.

Erases a mistake when entering a command.

For example, if a static router port is configured, the corresponding show command will not display any information unless IGMP snooping is enabled, and the link for the static router port is up.

Console#configure Console(config)#ip igmp snooping vlan 1 mrouter ethernet 1/11 Console(config)#end Console#show ip igmp snooping mrouter VLAN M'cast Router Ports Type

---- ------------------- -------

Console#configure Console(config)#ip igmp snooping Console(config)#end Console#show ip igmp snooping mrouter VLAN M'cast Router Ports Type

---- ------------------- -------

1 Eth 1/11 Static Console#

CLI Command Groups

The system commands can be broken down into the functional groups shown below.

TABLE 8 Command Group Index

Command Group Description Page

General Basic commands for entering privileged access mode, restarting the

System Management Display and setting of system information, basic modes of operation,

system, or quitting the CLI

maximum frame size, file management, console port and telnet settings, system logs, SMTP alerts, and the system clock

Brocade 6910 Ethernet Access Switch Configuration Guide 35 53-1002651-02

Page 92

CLI Command Groups

TABLE 8 Command Group Index (Continued)

Command Group Description Page

Simple Network Management Protocol

Activates authentication failure traps; configures community access strings, and trap receivers

105

Remote Monitoring Supports statistics, history, alarm and event groups 125

Flow Sampling Samples traffic flows, and forwards data to designated collector 133

User Authentication Configures user names and passwords, logon access using local or

139

remote authentication, management access through the web server, Telnet server and Secure Shell; as well as port security, IEEE 802.1X port access control, and restricted access based on specified IP addresses

General Security Measures Segregates traffic for clients attached to common data ports; and

189

prevents unauthorized access by configuring valid static or dynamic addresses, web authentication, MAC address authentication, filtering DHCP requests and replies, and discarding invalid ARP responses

Access Control List Provides filtering for IPv4 frames (based on address, protocol, TCP/UDP

233

port number or TCP control code), IPv6 frames (based on address or DSCP traffic class), or non-IP frames (based on MAC address or Ethernet type)

Interface Configures the connection parameters for all Ethernet ports, aggregated

255

links, and VLANs

Link Aggregation Statically groups multiple ports into a single logical trunk; configures Link

285

Aggregation Control Protocol for port trunks

Mirror Port Mirrors data to another port for analysis without affecting the data

Rate Limit Controls the maximum rate for traffic transmitted or received on

Automatic Traffic Control Configures bounding thresholds for broadcast and multicast

Address Table Configures the address table for filtering specified addresses,

Spanning Tree Configures Spanning Tree settings for the switch 329

ERPS Configures Ethernet Ring Protection Switching for increased

VLANs Configures VLAN settings, and defines port membership for VLAN

Class of Service Sets port priority for untagged frames, selects strict priority or

Quality of Service Configures Differentiated Services 427

Multicast Filtering Configures IGMP multicast filtering, query, profile, and proxy

Link Layer Discovery Protocol

Connectivity Fault Management

passing through or the performance of the monitored port

a port

storms which can be used to trigger configured rate limits or to shut down a port

displays current entries, clears the table, or sets the aging time

availability of Ethernet rings commonly used in service provider networks

groups; also enables or configures private VLANs, protocol VLANs, voice VLANs, and QinQ tunneling

weighted round robin, relative weight for each priority queue, also sets priority for DSCP

parameters; specifies ports attached to a multicast router; also configures multicast VLAN registration

Configures LLDP settings to enable information discovery about neighbor devices

Configures connectivity monitoring using continuity check messages, fault verification through loopback messages, and fault isolation by examining end-to-end connections between Provider Edge devices or between Customer Edge devices

297

307

309

323

355

369

415

443

499

517

36 Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 93

CLI Command Groups

TABLE 8 Command Group Index (Continued)

Command Group Description Page

OAM Configures Operations, Administration and Maintenance remote

Domain Name Service Configures DNS services. 579

Dynamic Host Configuration Protocol

IP Interface Configures IP address for the switch interfaces; also configures

IP Routing Configures static unicast routes

Debug Displays debugging information for all key functions

management tools required to monitor and maintain the links to subscriber CPEs

Configures DHCP client functions 587

ARP parameters

The access mode shown in the following tables is indicated by these abbreviations:

ACL (Access Control List Configuration)

CFM (Connectivity Fault Management Configuration)

CM (Class Map Configuration)

ERPS (Ethernet Ring Protection Switching Configuration)

GC (Global Configuration)

IC (Interface Configuration)

IPC (IGMP Profile Configuration)

LC (Line Configuration)

MST (Multiple Spanning Tree)

NE (Normal Exec)

PE (Privileged Exec)

PM (Policy Map Configuration)

VC (VLAN Database Configuration)

569

595

629

633

Brocade 6910 Ethernet Access Switch Configuration Guide 37 53-1002651-02

Page 94

CLI Command Groups

38 Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 95

In this chapter

General commands are used to control the command access mode, configuration mode, and other basic functions.

TABLE 9 General Commands

Command Function Mode

prompt Customizes the CLI prompt GC

reload Restarts the system at a specified time, after a specified delay, or at a periodic

enable Activates privileged mode NE

quit Exits a CLI session NE, PE

show history Shows the command history buffer NE, PE

configure Activates global configuration mode PE

disable Returns to normal mode from privileged mode PE

reload Restarts the system immediately PE

show reload Displays the current reload settings, and the time at which next scheduled reload

end Returns to Privileged Exec mode any config.

exit Returns to the previous configuration mode, or exits the CLI any mode

help Shows how to use help any mode

? Shows options for command completion (context sensitive) any mode

Chapter

4General Commands

interval

will take place

mode

prompt

This command customizes the CLI prompt. Use the no form to restore the default prompt.

Syntax

prompt string

no prompt

string - Any alphanumeric string to use for the CLI prompt. (Maximum length: 255 characters)

Default Setting Console

Brocade 6910 Ethernet Access Switch Configuration Guide 39 53-1002651-02

Page 96

General Commands

Command Mode Global Configuration

Example

Console(config)#prompt RD2 RD2(config)#

reload (Global Configuration)

This command restarts the system at a specified time, after a specified delay, or at a periodic interval. You can reboot the system immediately, or you can configure the switch to reset after a specified amount of time. Use the cancel option to remove a configured setting.

Syntax

reload {at hour minute [{month day | day month} [year]] |

in {hour hours | minute minutes | hour hours minute minutes} | regularity hour minute [period {daily cancel [at | in | regularity]}

reload at - A specified time at which to reload the switch.

hour - The hour at which to reload. (Range: 0-23)

weekly day-of-week

monthly day

}] |

minute - The minute at which to reload. (Range: 0-59)

month - The month at which to reload. (january ... december)

day - The day of the month at which to reload. (Range: 1-31)

year - The year at which to reload. (Range: 2001-2050)

reload in - An interval af ter which to reload the switch.

hours - The number of hours, combined with the minutes, before the switch resets. (Range: 0-576)

minutes - The number of minutes, combined with the hours, before the switch resets. (Range: 0-59)

reload

hour - The hour at which to reload. (Range: 0-23)

minute - The minute at which to reload. (Range: 0-59)

day-of-week - Day of the week at which to reload. (Range: monday ... saturday)

day

reload cancel - Cancels the specified reload option.

Default Setting None

regularity

- Day of the month at which to reload. (Range: 1-31)

- A periodic interval at which to reload the switch.

Command Mode Global Configuration

40 Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 97

enable

General Commands

Command Usage

• This command resets the entire system.

• Any combination of reload options may be specified. If the same option is re-specified, the

previous setting will be overwritten.

• When the system is restarted, it will always run the Power-On Self-Test. It will also retain all

configuration information stored in non-volatile memory by the copy running-config

startup-config command (See “copy” on page 67).

Example This example shows how to reset the switch after 30 minutes:

Console(config)#reload in minute 30 *** *** --- Rebooting at January 1 02:10:43 2007 --***

Are you sure to reboot the system at the specified time? <y/n>

This command activates Privileged Exec mode. In privileged mode, additional commands are available, and certain commands display additional information. See “Understanding Command

Modes” on page 32.

Syntax

enable [level]

level - Privilege level to log into the device.

The device has two predefined privilege levels: 0: Normal Exec, 15: Privileged Exec. Enter level 15 to access Privileged Exec mode.

Default Setting Level 15

Command Mode Normal Exec

Command Usage

• “super” is the default password required to change the command mode from Normal Exec to

Privileged Exec. (To set this password, see the enable password command.)

• The “#” character is appended to the end of the prompt to indicate that the system is in

privileged access mode.

Example

Console>enable Password: [privileged level password] Console#

Related Commands

“disable” on page 43 “enable password” on page 140

Brocade 6910 Ethernet Access Switch Configuration Guide 41 53-1002651-02

Page 98

quit

General Commands

This command exits the configuration program.

Default Setting None

Command Mode Normal Exec, Privileged Exec

Command Usage The quit and exit commands can both exit the configuration program.

Example This example shows how to quit a CLI session:

Console#quit

Press ENTER to start session

User Access Verification

show history

Username:

This command shows the contents of the command history buffer.

Default Setting None

Command Mode Normal Exec, Privileged Exec

Command Usage The history buffer size is fixed at 10 Execution commands and 10 Configuration commands.

Example In this example, the show history command lists the contents of the command history buffer:

Console#show history Execution command history: 2 config 1 show history

Configuration command history: 4 interface vlan 1 3 exit 2 interface vlan 1 1 end

Console#

42 Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Page 99

configure

General Commands

The ! command repeats commands from the Execution command history buffer when you are in Normal Exec or Privileged Exec Mode, and commands from the Configuration command history buffer when you are in any of the configuration modes. In this example, the !2 command repeats the second command in the Execution history buffer (config).

Console#!2 Console#config Console(config)#

This command activates Global Configuration mode. You must enter this mode to modify any settings on the switch. You must also enter Global Configuration mode prior to enabling some of the other configuration modes, such as Interface Configuration, Line Configuration, and VLAN Database Configuration. See “Understanding Command Modes” on page 32.

Default Setting None

Command Mode Privileged Exec

disable

Example

Console#configure Console(config)#

Related Commands

“end” on page 44

This command returns to Normal Exec mode from privileged mode. In normal access mode, you can only display basic information on the switch's configuration or Ethernet statistics. To gain access to all commands, you must use the privileged mode. See “Understanding Command

Modes” on page 32.

Default Setting None

Command Mode Privileged Exec

Command Usage The “>” character is appended to the end of the prompt to indicate that the system is in normal

access mode.

Example

Console#disable Console>

Related Commands

“enable” on page 41

Brocade 6910 Ethernet Access Switch Configuration Guide 43 53-1002651-02

Page 100

General Commands

NOTE

reload (Privileged Exec)

This command restarts the system.

When the system is restarted, it will always run the Power-On Self-Test. It will also retain all configuration information stored in non-volatile memory by the copy running-config startup-config command.

Default Setting None

Command Mode Privileged Exec

Command Usage This command resets the entire system.

Example This example shows how to reset the switch:

show reload

end

Console#reload System will be restarted, continue <y/n>? y

This command displays the current reload settings, and the time at which next scheduled reload will take place.

Command Mode Privileged Exec

Example

Console#show reload Reloading switch in time: 0 hours 29 minutes.

The switch will be rebooted at January 1 02:11:50 2001. Remaining Time: 0 days, 0 hours, 29 minutes, 52 seconds. Console#

This command returns to Privileged Exec mode.

Default Setting None

Command Mode Global Configuration, Interface Configuration, Line Configuration, VLAN Database Configuration,

and Multiple Spanning Tree Configuration.

44 Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

Brocade 6910 User Manual

Specifications and Main Features

Frequently Asked Questions

User Manual

Contents

Figures

Tables

About This Document

Supported hardware and software

Summary of enhancements for Brocade R2.2.0.0

Summary of enhancements for Brocade R2.1.0.4

Summary of enhancements for Brocade R2.0.2.10

Summary of enhancements for Brocade R2.0.2.9

Document conventions

Text formatting

Command syntax conventions

Notes

Trademark references

Related publications

Getting technical help

Document feedback

Getting Started

1Introduction

Key Features

Description of Software Features

System Defaults

Connecting to the Switch

2Initial Switch Configuration

Configuration Options

Required Connections

Basic Configuration

Remote Connections

Console Connection

Setting Passwords

Setting an IP Address

Manual Configuration

Dynamic Configuration

Downloading Configuration File Referenced by DHCP Server

Enabling SNMP Management Access

Community Strings (for SNMP version 1 and 2c clients)

Trap Receivers

Configuring Access for SNMP Version 3 Clients

Managing System Files

Saving or Restoring Configuration Settings

Command Line Interface

Accessing the CLI

3Using the Command Line Interface

Console Connection

Telnet Connection

Entering Commands

Keywords and Arguments

Minimum Abbreviation

Command Completion

Getting Help on Commands

Showing Commands

Partial Keyword Lookup

Negating the Effect of Commands

Using Command History

Understanding Command Modes

Exec Commands

Configuration Commands

Command Line Processing

CLI Command Groups

Showing Status Information

4General Commands

prompt

reload (Global Configuration)

enable

quit

show history

configure

disable

reload (Privileged Exec)

show reload