Fujitsu XG700 - Switch User Manual

P3N1-E051-02ENZ0
XG700
User's Guide
2/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
Preface
You have purchased the XG700, a compact, 12-port 10 Gigabit Ethernet layer 2 switch that achieves unsurpassed standards of high throughput and low-latency performance. This guide describes the XG700 functions, installation procedures, configuration operations, and maintenance procedures and should be read and understood before you start using your XG700.
June, 2006
Linux is a registered trademark or trademark of Linus Torvalds in the United States and/or other countries.
All Rights Reserved, Copyright © PFU LIMITED 2005-2006
3/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
About this Manual
This section describes target readers, contents, notations, etc. of this guide.
Target Readers and Required Knowledge
This guide has been written for administrators, who are in charge of network construction, maintenance, and management. To use this guide, the following knowledge is required.
Basic knowledge of networks, the Internet, and intranet Basic knowledge of system security
This guide omits explanations of network protocol terms.
Contents
This guide to the XG700 is composed of the following chapters.
Chapter 1. Features and Functions
Describes the features and functions.
Chapter 2. Using the CLI
Describes operating environment of CLI and how to operate CLI.
Chapter 3. Installation
Describes the necessary installation procedures.
Chapter 4. Functions and Procedures for Setting Functions
Describes how to use the console screen.
Chapter 5. Command References
Describes how to use the commands.
Chapter 6. Managing the XG700
Describes the management of the XG700.
Chapter 7. Troubleshooting
Describes how to solve problems in the XG700.
Appendix A. Event Logs
Describes the contents of messages reported by the XG700 and actions to be taken for each message.
Appendix B. SNMP Traps
Describes message format of SNMP traps.
Appendix C. List of MIBs
Describes the list of MIBs supported by the SNMP agent
Related Manuals
The following are XG700 related manuals. Use these manuals as necessary.
XG700 Series Hardware Guide
Describes the hardware of the XG700.
Symbols Used in This Guide
The symbols used in this guide have the following meanings.
indicates useful information related to using the XG700.
indicates precautions which must be taken when using the XG700.
indicates supplementary information.
indicates related matters such as operation procedures, etc.
4/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
Contents
Preface .........................................................................................................................................................................2
About this Manual.......................................................................................................................................................3
Contents ......................................................................................................................................................................4
Chapter 1 Features and Functions ......................................................................................................................9
1.1 Features ............................................................................................................................................................10
Chapter 2 Using the CLI......................................................................................................................................11
2.1 Overview of the CLI...........................................................................................................................................12
2.1.1 Operating Environment for CLI ...................................................................................................................12
2.1.2 Command Modes and Mode Switching ......................................................................................................13
2.1.3 startup-config and running-config................................................................................................................15
2.2 Using the CLI.....................................................................................................................................................16
2.2.1 How to Enter Commands ............................................................................................................................16
2.2.2 Context-Sensitive Help................................................................................................................................16
2.2.3 Command Completion.................................................................................................................................17
2.2.4 Command Abbreviation...............................................................................................................................17
2.2.5 Command-Line Error Messages .................................................................................................................17
2.2.6 Scrolling Down or Up a Line or a Page .......................................................................................................17
2.2.7 Command History........................................................................................................................................18
2.2.8 Aborting Command .....................................................................................................................................18
2.2.9 No Form of Commands...............................................................................................................................18
2.2.10 Filtering show Command Output...............................................................................................................19
2.2.11 Redirecting show Command Output .........................................................................................................19
2.2.12 Displaying using monitor Command .........................................................................................................20
Chapter 3 Installation ..........................................................................................................................................21
3.1 Workflow to Prepare the XG700........................................................................................................................22
3.1.1 Setting Up Serial Interface ..........................................................................................................................22
3.1.2 Configure Management LAN Interface........................................................................................................23
3.1.3 Telnet Connection via Management LAN Interface (Optional)....................................................................23
3.1.4 SNMP Configuration (Optional)...................................................................................................................23
3.2 10GBASE-CX4 Cable Connection ....................................................................................................................24
3.2.1 Rx Signal Equalizer.....................................................................................................................................24
3.2.2 Precautions During Linkup ..........................................................................................................................24
Chapter 4 Functions and Procedures for Setting Functions ..........................................................................25
4.1 Basic Switch Functions......................................................................................................................................26
4.1.1 Switching Mode ...........................................................................................................................................26
4.1.2 MAC Address Table Management...............................................................................................................26
4.1.3 Jumbo Frame Support ................................................................................................................................27
4.1.4 Flow Control ................................................................................................................................................27
4.1.5 Storm Control ..............................................................................................................................................28
4.1.6 Port Security................................................................................................................................................28
4.1.7 Ingress Rate Control ...................................................................................................................................28
4.2 Port Mirroring.....................................................................................................................................................29
4.3 Link Pass Through.............................................................................................................................................30
4.4 Link Aggregation................................................................................................................................................31
4.4.1 Configuring Link Aggregation ......................................................................................................................32
4.4.2 Frame Distribution Methods in Link Aggregation ........................................................................................33
4.4.3 The Number of Ports That Require Linkup .................................................................................................33
4.4.4 Notes on Link Aggregation ..........................................................................................................................34
4.5 Uplink Filter........................................................................................................................................................35
4.6 Spanning Tree Protocol (STP)...........................................................................................................................38
4.6.1 Port Roles Based on Spanning Tree ...........................................................................................................39
4.6.2 Spanning Tree Protocol Port States ............................................................................................................39
4.6.3 Configuring Spanning Tree..........................................................................................................................40
4.7 VLAN .................................................................................................................................................................41
5/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
4.7.1 Port-Based VLAN ........................................................................................................................................41
4.7.2 Tag-Based (IEEE802.1Q) VLAN .................................................................................................................42
4.7.3 Multiple VLAN..............................................................................................................................................43
4.8 Quality of Service (QoS)....................................................................................................................................46
4.9 IGMP Snooping .................................................................................................................................................47
4.9.1 Registering Group Members .......................................................................................................................48
4.9.2 Removing Group Members .........................................................................................................................49
4.9.3 Managing Group Members .........................................................................................................................50
4.9.4 IGMP Querier ..............................................................................................................................................51
4.9.5 Configuring IGMP Snooping........................................................................................................................52
4.10 Network Management .....................................................................................................................................53
4.10.1 Traffic Statistics..........................................................................................................................................53
4.10.2 SNMP Agent..............................................................................................................................................54
4.10.3 RMON .......................................................................................................................................................54
Chapter 5 Command Reference .........................................................................................................................55
5.1 About Command Reference ..............................................................................................................................56
5.1.1 Command System.......................................................................................................................................56
5.1.2 Configuration of Command Reference........................................................................................................57
5.2 Management LAN Interface Configuration Commands ....................................................................................58
5.2.1 management-lan ip......................................................................................................................................58
5.2.2 management-lan dns-server .......................................................................................................................59
5.2.3 management-lan domain ............................................................................................................................60
5.2.4 hostname.....................................................................................................................................................61
5.2.5 remote-host .................................................................................................................................................62
5.3 Serial/telnet Configuration Commands..............................................................................................................64
5.3.1 terminal pager .............................................................................................................................................64
5.3.2 line...............................................................................................................................................................64
5.3.3 baud-rate .....................................................................................................................................................65
5.3.4 terminal timeout...........................................................................................................................................65
5.3.5 telnet-sever..................................................................................................................................................66
5.3.6 terminal window...........................................................................................................................................66
5.4 System Basic Operation Commands ................................................................................................................67
5.4.1 enable..........................................................................................................................................................67
5.4.2 disable .........................................................................................................................................................67
5.4.3 configure terminal........................................................................................................................................68
5.4.4 exit...............................................................................................................................................................68
5.4.5 logout...........................................................................................................................................................69
5.4.6 do.................................................................................................................................................................69
5.4.7 help..............................................................................................................................................................70
5.4.8 password .....................................................................................................................................................70
5.4.9 reset.............................................................................................................................................................71
5.4.10 system shutdown.......................................................................................................................................71
5.4.11 date............................................................................................................................................................72
5.4.12 date set......................................................................................................................................................72
5.4.13 date timezone............................................................................................................................................73
5.4.14 date summer-time .....................................................................................................................................74
5.4.15 ping............................................................................................................................................................76
5.4.16 enable password .......................................................................................................................................77
5.4.17 banner .......................................................................................................................................................78
5.4.18 ntp-server ..................................................................................................................................................79
5.5 Configuration File Operation Command............................................................................................................80
5.5.1 copy running-config startup-config ..............................................................................................................80
5.5.2 show running-config ....................................................................................................................................80
5.5.3 show running-config (redirect).....................................................................................................................81
5.5.4 show startup-config .....................................................................................................................................82
5.5.5 show startup-config (redirect)......................................................................................................................83
5.5.6 copy    startup-config...............................................................................................................................84
5.5.7 dir/ls.............................................................................................................................................................86
5.5.8 delete...........................................................................................................................................................87
5.5.9 rename ........................................................................................................................................................88
5.5.10 tftp get........................................................................................................................................................89
5.5.11 tftp put ........................................................................................................................................................90
5.6 Switch Basic Configuration Commands ............................................................................................................91
6/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
5.6.1 clear bridge mac-address-table...................................................................................................................91
5.6.2 show bridge .................................................................................................................................................92
5.6.3 show bridge mac-address-table ..................................................................................................................93
5.6.4 bridge forward-mode ...................................................................................................................................94
5.6.5 bridge jumbo-frame .....................................................................................................................................95
5.6.6 bridge learn-mode .......................................................................................................................................96
5.6.7 bridge mac-address-table............................................................................................................................97
5.6.8 bridge mac-address-table filter....................................................................................................................99
5.6.9 bridge aging-time.......................................................................................................................................101
5.7 Link Aggregation Configuration Commands....................................................................................................102
5.7.1 show link-aggregation ...............................................................................................................................102
5.7.2 link-aggregation.........................................................................................................................................105
5.7.3 lacp system-priority ...................................................................................................................................107
5.7.4 lacp port-priority.........................................................................................................................................108
5.8 Uplink Filter Commands ..................................................................................................................................109
5.8.1 show uplink................................................................................................................................................109
5.8.2 uplink-domain ............................................................................................................................................ 110
5.8.3 downlink allowed uplink-domain................................................................................................................112
5.9 Switch Port Configuration Commands ............................................................................................................113
5.9.1 show interface ...........................................................................................................................................113
5.9.2 shutdown (Administrator exec mode)........................................................................................................116
5.9.3 clear violation ............................................................................................................................................116
5.9.4 interface port .............................................................................................................................................117
5.9.5 flowcontorol ...............................................................................................................................................118
5.9.6 storm-control .............................................................................................................................................119
5.9.7 suppress-address-learning........................................................................................................................119
5.9.8 shutdown (Interface edit mode).................................................................................................................120
5.9.9 shutdown (Global configuration mode) .....................................................................................................120
5.9.10 port-security.............................................................................................................................................121
5.9.11 link-pass-through .....................................................................................................................................122
5.9.12 ingress-bandwidth ...................................................................................................................................123
5.9.13 multicast-forwarding ................................................................................................................................124
5.9.14 link-signal-tune ........................................................................................................................................125
5.9.15 link-signal-force-tune...............................................................................................................................126
5.10 Spanning Tree Protocol (STP) Configuration Commands.............................................................................127
5.10.1 show spanning-tree.................................................................................................................................127
5.10.2 spanning-tree ..........................................................................................................................................132
5.10.3 spanning-tree protocol.............................................................................................................................132
5.10.4 spanning-tree priority...............................................................................................................................133
5.10.5 spanning-tree hello-time..........................................................................................................................134
5.10.6 spanning-tree max-age ...........................................................................................................................135
5.10.7 spanning-tree forward-time .....................................................................................................................136
5.10.8 spanning-tree port-priority .......................................................................................................................137
5.10.9 spanning-tree port-path-cost ...................................................................................................................138
5.10.10 spanning-tree path-cost-default ............................................................................................................139
5.10.11 spanning-tree portfast............................................................................................................................140
5.10.12 spanning-tree portfast bpdu-guard........................................................................................................141
5.10.13 spanning-tree portfast errdisable-timeout .............................................................................................142
5.10.14 spanning-tree portfast bpdu-filter ..........................................................................................................143
5.11 Virtual LAN (VLAN) Setup Commands ..........................................................................................................144
5.11.1 show vlan.................................................................................................................................................144
5.11.2 vlan..........................................................................................................................................................145
5.11.3 port-vlan-id...............................................................................................................................................146
5.11.4 vlan-member allowed ..............................................................................................................................147
5.11.5 user-vlan-protocol-id................................................................................................................................148
5.11.6 ingress-filter no-vlan-member-frame .......................................................................................................149
5.11.7 ingress-filter tagged-frame.......................................................................................................................149
5.11.8 ingress-filter untagged-frame...................................................................................................................150
5.11.9 vlan-statistics collection ...........................................................................................................................151
5.12 QoS Setup Commands..................................................................................................................................152
5.12.1 show qos .................................................................................................................................................152
5.12.2 qos default-priority...................................................................................................................................153
5.12.3 qos-map priority.......................................................................................................................................153
5.12.4 bridge diffserv-tos....................................................................................................................................154
7/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
5.13 Port Mirroring Setup Commands...................................................................................................................155
5.13.1 show mirror..............................................................................................................................................155
5.13.2 mirror .......................................................................................................................................................156
5.14 IGMP Snooping Setup Commands ...............................................................................................................157
5.14.1 show ip snooping.....................................................................................................................................157
5.14.2 ip snooping protocol ................................................................................................................................159
5.14.3 ip snooping vlan ......................................................................................................................................160
5.14.4 ip snooping vlan max-group ....................................................................................................................161
5.14.5 ip snooping vlan mrouter.........................................................................................................................162
5.14.6 ip snooping vlan group-member-interval.................................................................................................163
5.14.7 ip snooping vlan fast-leave......................................................................................................................164
5.14.8 ip snooping vlan last-member-interval ....................................................................................................165
5.14.9 ip snooping vlan send-query-count .........................................................................................................166
5.14.10 ip snooping vlan querier ........................................................................................................................167
5.15 Statistics Commands.....................................................................................................................................168
5.15.1 monitor traffic-bytes.................................................................................................................................169
5.15.2 monitor traffic-counts...............................................................................................................................171
5.15.3 monitor framesize-traffic-counts..............................................................................................................173
5.15.4 monitor qos-priority-traffic-bytes..............................................................................................................175
5.15.5 monitor qos-priority-traffic-counts............................................................................................................176
5.15.6 monitor vlan-traffic-bytes.........................................................................................................................177
5.15.7 monitor vlan-traffic-counts.......................................................................................................................178
5.15.8 monitor dataflow ......................................................................................................................................179
5.15.9 monitor error............................................................................................................................................181
5.15.10 show statistics traffic-bytes....................................................................................................................183
5.15.11 show statistics traffic-counts..................................................................................................................184
5.15.12 show statistics framesize-traffic-counts.................................................................................................185
5.15.13 show statistics qos-priority-traffic-bytes ................................................................................................186
5.15.14 show statistics qos-priority-traffic-counts ..............................................................................................187
5.15.15 show statistics vlan-traffic-bytes............................................................................................................188
5.15.16 show statistics vlan-traffic-counts..........................................................................................................189
5.15.17 show statistics dataflow.........................................................................................................................190
5.15.18 show statistics error...............................................................................................................................191
5.15.19 clear statistics........................................................................................................................................192
5.16 SNMP Setup Commands ..............................................................................................................................193
5.16.1 show snmp-server ...................................................................................................................................193
5.16.2 snmp-server location ...............................................................................................................................194
5.16.3 snmp-server contact................................................................................................................................195
5.16.4 snmp-server access ................................................................................................................................196
5.16.5 snmp-server trap .....................................................................................................................................197
5.17 RMON Setup Commands..............................................................................................................................198
5.17.1 show rmon...............................................................................................................................................198
5.17.2 rmon collection history ............................................................................................................................200
5.17.3 rmon alarm ..............................................................................................................................................201
5.17.4 rmon event ..............................................................................................................................................202
5.18 System Operation Display Commands .........................................................................................................204
5.18.1 show system status .................................................................................................................................204
5.18.2 show system information.........................................................................................................................206
5.19 System Maintenance Commands .................................................................................................................208
5.19.1 clear log...................................................................................................................................................208
5.19.2 show log ..................................................................................................................................................209
5.19.3 log send...................................................................................................................................................210
5.19.4 save maintenance ...................................................................................................................................211
5.19.5 show maintenance ..................................................................................................................................211
5.19.6 tftp put-maintenance................................................................................................................................212
5.19.7 clear maintenance...................................................................................................................................213
5.19.8 update-system.........................................................................................................................................214
5.19.9 boot-system.............................................................................................................................................216
Chapter 6 Managing the XG700........................................................................................................................217
6.1 Verifying XG700 Operations............................................................................................................................218
6.1.1 Verifying Hardware Status.........................................................................................................................218
6.1.2 Verifying System Status ............................................................................................................................220
6.1.3 Reviewing Log Messages .........................................................................................................................220
8/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
6.2 Uploading/Downloading Configuration File .....................................................................................................223
6.2.1 Preparing the TFTP Server .......................................................................................................................223
6.2.2 Uploading Configuration File.....................................................................................................................223
6.2.3 Downloading Configuration File ................................................................................................................223
6.3 Updating Firmware ..........................................................................................................................................224
6.3.1 Updating Firmware....................................................................................................................................224
6.3.2 Selecting Firmware....................................................................................................................................225
6.4 Extracting of Maintenance Information............................................................................................................226
6.4.1 Procedure for Extracting Maintenance Information when a System Failure/Subsystem Failure Occurred
...................................................................................................................................................................226
6.4.2 Procedure for Extracting Maintenance Information when a System Loop has Occurred.........................227
6.4.3 Procedure for Extracting Maintenance Information when an XG700 Malfunction Occurs........................227
Chapter 7 Troubleshooting...............................................................................................................................228
7.1 Restoring Factory Defaults..............................................................................................................................229
7.1.1 Resetting startup-config to Factory Defaults.............................................................................................229
7.1.2 Selecting Firmware....................................................................................................................................229
7.1.3 Restoring Factory Defaults........................................................................................................................230
Appendix A Event Logs....................................................................................................................................232
A.1 Overview of Event Logs.............................................................................................................................232
A.2 List of Event Logs ......................................................................................................................................233
A.2.1 env (Supervisory Control: 0-999)...........................................................................................................233
A.2.2 kernel (Basic XG700 Control: 1000-1999).............................................................................................234
A.2.3 kernel (Layer 2 Basic Control: 2000-2999)............................................................................................235
A.2.4 npm (Network Protocol Control: 3000-3299) .........................................................................................240
A.2.5 clim (Basic CLI Control: 3300-3999)......................................................................................................243
A.2.6 xgsh (CLI Command History: 4000-4499) .............................................................................................244
A.2.7 rstp (Rapid Spanning Tree Control: 4500-4999)....................................................................................244
A.2.8 lacp (LACP Control: 5000-5499)............................................................................................................245
A.2.9 sys (Maintenance Support Function: 7400-7499)..................................................................................246
A.2.10 update (Firmware Update: 7500-7999)..............................................................................................247
A.2.11 snmp (SNMP Control: 8500-8599).....................................................................................................249
A.2.12 ntp (NTP Control: 8600-8699)............................................................................................................250
A.3 Message Format for Forwarding syslog ....................................................................................................251
Appendix B SNMP Traps ..................................................................................................................................252
Appendix C List of MIBs...................................................................................................................................253
Index.........................................................................................................................................................................263
9/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
Chapter 1 Features and Functions
This chapter describes the features and functions of the XG700.
10/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
1.1 Features
The XG700 is a compact, 12-port 10 Gigabit Ethernet Layer 2 switch, which provides the world's highest level throughput and least delay. Special features of the XG700 are shown below:
Item Function Features
Throughput 240Gbit/s Latency 450ns Switching mode Either store-and-forward or cut-through is selectable. MAC address learning table size
8192 entries
MAC address learning SVL (Shared VLAN Learning), IVL (Independent VLAN Learning),
user selectable. Jumbo frame support Up to 15KB. Flow control IEEE802.3x compliant pause frame control. Possible to specify flow
control options for each port: send/receive or receive only. Storm control Detects the broadcast storm status to prevent the traffic from
overflowing the network and avoid degrading overall system
performance. Port security Possible to restrict port access based on a source MAC address. Ingress rate control Supports by-port ingress rate control. Port mirroring Possible to monitor the incoming/outgoing traffic by port mirroring.
Basic Switch Functions
Link pass through Possible to synchronize the link state of a monitored port with the
link state of a single or multiple ports. Link aggregation (Static and LACP)
Possible to increase bandwidth and redundancy. (Up to 6 ports for
each link).
Also supports IEE802.3ad LACP.
Scalability
Uplink Filter Filtering multicast, broadcast and unlearned unicast frames from
leaf nodes to uplink. Possible to configure fat tree using several XG
series.
Redundancy IEEE802.1D STP,
IEEE802.1w RSTP
Possible to make redundant and loop-free network using Rapid
Spanning Tree Protocol (upward compatible with Spanning Tree
Protocol). IEEE802.1Q VLAN Max. 128 groups. Filtering Ingress/egress filtering
VLAN support
Multiple VLAN Possible to create multiple Tag-based VLAN, with user VLAN tag
identifier.
QoS IEEE802.1p QoS
DiffServ
Supports output queue priority control based on VLAN priority or
DSCP (DiffServ Code Point) of IPv4/IPv6.
Multi-cast support IGMP snooping Prevents unnecessary forwarding of multicast traffic to ports to
reduce unnecessary multicast traffic. Traffic statistics Possible to analyze traffic and errors, using traffic statistics. Network Management SNMP agent Can be used in conjunction with an SNMP manager, supporting
MIBs, including Standard MIB, Bridge MIB, and RMON MIB. Console by serial/management LAN
The security of the XG700 is maintained from the serial interface or
dedicated management LAN interface that is independent from the
10 Gigabit ports.
Operation management
CLI Allows the user to provide environment settings and operation
management using command line interface (CLI).
11/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
Chapter 2 Using the CLI
This chapter describes how to use the command line interface (CLI) to operate the XG700.
12/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
2.1 Overview of the CLI
This section describes how to use the command line interface (CLI) for the XG Series.
2.1.1 Operating Environment for CLI
There are two ways to access the XG700 to run commands. Up to 4 terminal sessions can access the XG700 concurrently.
Serial connection
Connect to the serial port of the XG700 using RS232C cable. The available terminal type is VT100. When initially connecting a terminal to the XG700, configure the serial port on the client side as shown below.
Item Setting value
Baud rate 9600 bps (can be changed) Character size 8 bit Parity None Stop bits 1 bit Flow control None Emulation VT100 Character set ASCII Line feed code Transmission: CR (carriage return) only
Reception: LF is added
The baud rate can be changed to one of 9600, 19200, 38400 and 57600 (bps) using the "baud-rate" command.
Remote connection via management LAN port
Connect a terminal to the management LAN port of the XG700 using a telnet client (TCP port of 23 is used for the default telnet connection). The following tables list the factory defaults.
Management LAN Interface initial settings
Item Setting value
IP address None (must be set when using the management
LAN)
Subnet address None (must be set when using the management
LAN)
Telnet server initial settings
Item Setting value
Use telnet Disable (can be changed) Port number 23(TCP) Emulation VT100/VT200/xterm BackSpace key Delete Character set ASCII
To use the remote connection via management LAN port, use the "management-lan ip" command to configure the management LAN port for the XG700 and use the "telnet-server" command to enable the telnet service. VT100, VT200, and xterm can be used as a terminal.
13/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
2.1.2 Command Modes and Mode Switching
The following table shows a hierarchy of command modes and mode switching.
Command Modes and Prompt Text
(host name for XG700: xg)
Outline
Operator class The initial-level operating mode entered upon logging into the
system.
Operator EXEC mode
Prompt: xg>
Allows access to commands that have no effect on the switch operations. With the XG700, this mode is mainly used to view its status. The prompt changes to "xg>".
Administrator class To enter this level, use the "enable" command in the operator class
or type the administrator's authentication password.
Administrator EXEC mode Prompt: xg#
Allows users to perform operations that are related to the system management of the XG700, such as date/time setting and firmware update, in addition to those operations that are performed in the operator EXEC mode. The prompt changes to "xg#".
Global configuration mode
Prompt: xg(config)#
To switch to the global configuration mode, enter the "configure terminal" command in the administrator EXEC mode. This mode allows the user to define the environment settings for the XG700 that are to be saved in a configuration file. The prompt changes to "xg(config)#".
Interface edit mode
Prompt: xg(config-if)# or xg(config-agg)#
To enter the interface edit mode, enter the "interface" command in the global configuration mode. This mode allows the user to configure each port of the switch. The interface edit mode is represented by prompt "xg(config-if)#", while the edit mode for a port that is created with link aggregation function is represented by prompt "xg(config-agg)#".
Terminal edit mode
Prompt: xg(config-line)#
To enter the serial terminal edit mode, enter the "line console" command in the global configuration mode. The prompt changes to "xg(config-line)#". Baud rate of the serial terminal and screen display size can be set.
14/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
Entering a specific command allows switching from one mode to another. Entering the "exit" command will always take you back to the previous mode. Entering "end" command or pressing [Ctrl] and [Z] simultaneously in the global configuration, interface edit or terminal edit mode allows you to enter the administrator EXEC mode. An example is given below.
Login: admin password: ********
xg> enable
xg# configure terminal
xg(config)# interface port 1
xg(config-if)# exit
xg(config)# exit
xg# copy running-config startup-config
xg# exit
Switch to operator EXEC mode by performing a login operation. By default, the login username is "admin" and password "password".
Use the "enable" command to switch to administrator EXEC mode.
Use the "configure terminal" command to switch to global configuration mode. Use the "interface" command to switch to interface edit mode.
Use the "exit" command to return to global configuration mode.
Use the "exit" command to return to administrator EXEC mode.
Copy the current configuration file in memory to the startup-config in the nonvolatile memory. User is logged out and session is disconnected.
Multiple users can use the operator and administrator EXEC modes concurrently. (Up to 4 terminals) Only one terminal can switch to one of either global configuration, interface edit and terminal edit modes. It is not
possible for multiple terminals to simultaneously switch to global configuration mode.
15/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
2.1.3 startup-config and running-config
The XG700 configuration information is saved to startup-config and running-config files. This section describes the functions of the startup-config and running-config files.
startup-config
Startup-config is the configuration file that stores the environment settings that are enabled upon XG700 startup. The startup-config is saved in non-volatile memory and read the next time the XG700 begins to be used for the initial settings on the operating environment.
running-config
Running-config is a file stored in volatile memory that represents the operating environment of the system on which the XG700 is currently running. The information stored in the running-config will be lost when the system is restarted. To reflect the system configuration that is active in the current running-config the next time the system is started, use the "copy" command to save them to the startup-config file.
xg# copy running-config startup-config
The contents of the startup-config and running-config match immediately after the XG700 is started.
How to upload startup-config and running-config
To download the configuration information that was uploaded to the TFTP server as startup-config, run the "copy" command.
xg# show running-config | tftp HOST REMOTE-FILE
or
xg# show startup-config | tftp HOST REMOTE-FILE
How to download startup-config
To download the configuration information that was uploaded to the TFTP server as startup-config, run the "copy" command.
xg# copy tftp HOST REMOTE-FILE startup-config
To enable the settings downloaded to startup-config, restart the XG700 using the "reset" command.
Be sure to upload the contents of the startup-config file to a TFTP server because the contents will be
overwritten.
Refer to "Uploading/Downloading Configuration File
" for details on uploading and downloading
configuration.
16/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
2.2 Using the CLI
2.2.1 How to Enter Commands
Command Entry Format
Separate each command, subcommand and argument with a single space.
<command> <subcommand> <argument 1> <argument 2> ... (" " indicates a space.)
xg(config)# management-interface ip 192.168.1.10/24 default-gw 192.168.1.150 xg(config)# management-interface dns-server 192.168.1.150
Characters that can be entered:
Any letter (A-Z, a-z) and digit (0-9)
Space (ASCII code: 0x20)
Symbols: !, ". #, $, %, `, ', (, ), _, -, ~, ^, ¥, {, }, :, +, ,, ., @, =, [, ], &, *, ;, /, ?, |, >
Command and option separators are recognized by one or more space characters (ASCII code: 0x20). Enclose a parameter in quotes if it contains a blank space. The commands are not case-sensitive. Note that some entries (password, etc.) are case-sensitive.
2.2.2 Context-Sensitive Help
Entering a question mark "?" during command entry displays a list of commands available for each command mode. You can also get a list of any command's associated keywords and parameters with the context-sensitive help.
A list of commands that are available in the current mode
Entering a question mark "?" at the system prompt displays a list of commands and brief descriptions available for the current command mode.
xg # ? Exec commands: boot-system Select system to restart clear Reset functions configure Enter configuration mode copy Copy from one file to another date Display or set current date-time delete Delete local files dir Display local files :
(The rest is omitted.)
xg# _
Word help
If you type a question mark "?" in the middle of a command name, the CLI lists possible command completions that forward-match the letters you have typed. The prompt will show the letters that you typed. You only have to type in the rest of the letters to complete the command entry.
xg # co? Exec commands: configure Enter configuration mode copy Copy from one file to another xg# co_
The CLI lists all possible commands that begin with "co".
A list of options that are available in the current entry position
If you type a question mark "?" following a space after typing a command name, the CLI lists the names of commands that can be entered at the current option position. For option 2 and 3 positions, the CLI also lists options that can be entered at these positions. The prompt will show the letters that you typed. You only have to type in the rest of the letters to complete the command entry.
xg# configure ? terminal Configure from the terminal
xg# configure _
CLI lists possible options that follow the "configure" command.
The <cr> symbol appears in the list to indicate that you can execute the command without entering any subsequent options. Parameters enclosed in square brackets can be omitted and, therefore, the <cr> symbol does not appear.
17/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
2.2.3 Command Completion
If you enter part of a command or option and press the [Tab] key, the CLI displays the remaining command or option characters.
xg# con<TAB>
xg# configure _
For example, the only command that begins with "con" is "configure", so the CLI completes the command name as "configure". If you press the [TAB] key, the CLI lists all possible command or option names.
xg# con<TAB> configure copy xg# co_
Since there are two commands that begin with "co" - "configure" and "copy" - the CLI lists these two.
2.2.4 Command Abbreviation
Commands and options can be abbreviated to the minimum number of characters as long as command or option names are unique and forward-match the entered letters.
xg# con t
For example, you can abbreviate the "configure" command to "con" because "configure" is the only command that begins with "con", and "terminal" to "t" because "terminal" is the only command that begins with "t".
2.2.5 Command-Line Error Messages
The table below shows error messages that appear when you incorrectly enter a command. The "configure terminal" command is used as an example below:
Error Message Explanation
xg# co t % Ambiguous command: "co t"
You did not enter enough characters for the CLI to recognize the command. Re-enter the correct command string.
xg# configure % Incomplete command.
You did not enter all of the options or values required by this command entry. Set all necessary options and values.
xg# configure aerminal ^ % Invalid input detected at '^' marker
You entered a command improperly. A caret symbol (^) indicates the incorrect entry. Change incorrect entries and execute the command again.
xg# coc? % Unrecognized command
You typed part of a command that is not found with the context-sensitive help. Re-enter the correct command string.
2.2.6 Scrolling Down or Up a Line or a Page
When the information displayed by a command is wider than the console screen, a "--More--" prompt is displayed at the bottom of the screen and the CLI waits for a user entry.
xg# show running-config ! interface port 0
: :
(The rest is omitted.)
:
--More--
Scrolling Up a Line
To scroll up one line, press the [Enter] key.
Scrolling Up a Page
To scroll up one page, press the [Space] bar.
Finishing Displaying
To finish displaying, press the [q] or [Q] key.
The following table shows the combinations of shortcut keys, function keys or the [Ctrl] key used to edit commands.
18/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
Combinations of keys Description
"" or [Ctrl] + [P]
Recalls the previous command.
"" or [Ctrl] + [N]
Recalls the next command.
"" or [Ctrl] + [B]
Moves the cursor back one character.
"" or [Ctrl] + [F]
Moves the cursor forward one character. [Home] or [Ctrl]+[A] Moves the cursor to the first character in line. [End] or [Ctrl]+[E] Moves the cursor to the last character in line. [Esc] + [B] Moves the cursor back one word (to the beginning of a
parameter). [Esc] + [F] Moves the cursor forward one word (to the beginning of a
parameter). [Backspace] Erases the character to the left of the cursor and moves the
cursor back one character. [Delete] or [Ctrl]+[D] Deletes the character to the right of the cursor. [Ctrl]+[W] Records the character to the left of the cursor before
deleting. [Ctrl]+[U] Records the command line before deleting. [Ctrl]+[K] Records all characters to the left of the cursor before
deleting. [Ctrl]+[Y] Pastes a string recorded by [Ctrl]+[W], [U] or [K]. [Ctrl]+[L] Erases the current screen. [Ctrl]+[C] Runs command result and aborts output. [Enter], [Ctrl]+[J], or [Ctrl]+[M] Completes a command entry. [Ctrl]+[T] Transposes the character located at the cursor with the
character to the left of the cursor.
If any of the above key combinations or command completion using the [TAB] key does not take effect, VT100, VT200 or xterm may not be selected for the terminal type.
2.2.7 Command History
Command history is a function that records command lines you have entered so that you can reuse them. It is useful for repeatedly entering the same command line or for entering a similar command.
To display the previous command line in the history:
Press the up arrow key or [Ctrl]+[P] to recall the previous command in the history to the prompt. Repeat the key sequence to recall successively older commands.
To display a more recent command line:
Press the down arrow key or [Ctrl]+[N] to bring up the next line from the command history to the prompt. Repeat the key sequence to bring up successively more recent commands.
To list the command history:
Use the "show history" command to view the list of commands saved in the history: For each login up to 100 lines of command history can be registered.
2.2.8 Aborting Command
An executing command can be aborted by pressing the [Ctrl]+[C]. Note that this key sequence may not be effective for some commands.
2.2.9 No Form of Commands
Almost every configuration command has a no form. In general, the no form is used to cancel the settings with a configuration command or restore default values. Type "no" before entering a command name. For details of parameters and meanings that differ depending on commands, refer to " Command Reference".
19/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
2.2.10 Filtering show Command Output
This function allows you to filter show command outputs to extract the lines that satisfy specific conditions (filter for strings). This function is useful in excluding unnecessary information from a large amount of output. To use it, a "show" command must be followed by a keyword (pipe (|), begin, include or exclude) and a regular expression (filtering condition).
Syntax
show       | {begin | include | exclude} regular-expression
Keyword for filtering output Meaning
begin
Begins output starting at the first line that matches given regular expression parameters.
exclude
Displays output lines that do not contain those lines that match given regular expression parameters.
include
Displays output lines that match given regular expression parameters.
xg# show history | begin 2 ...skipping 2 configure terminal 3 show running-config 4 show history 5 show history | begin 2
xg# show history | exclude 2 1 enable 3 show users 4 show history
xg# show history | include 2 2 configure terminal 5 show history | begin 2
Regular expressions are case sensitive. For example, if you enter "| exclude strings", lines that include "String" are output, but those that include "strings" are not.
2.2.11 Redirecting show Command Output
You can redirect the output of "show" commands to a file in volatile memory using ">" or "| redirect".
Syntax (To redirect the output of a show command to a file in volatile memory:)
show       > FILE-NAME show       | redirect FILE-NAME
FILE-NAME
Specify a file name in the volatile memory to which the output of the command is redirected.
"| tftp" allows you to directly redirect the output of a show command to a file in a TFTP server.
Syntax (To directly redirect the output of a show command to a file in a TFTP server:)
show       | tftp HOST REMOTE-FILE  HOST
Specify a host name or IP address of the TFTP server.
REMOTE-FILE
Specify the file name in the TFTP server to which the output of the command is redirected.
In the following example, the current startup-config is redirected as filename "startup_09302005", the running-config file is redirected as filename "running_09302005", and system information is redirected as filename "system_09302005". The results of the redirection are confirmed with the "ls" command. Then, using the "tftp" command, each of these files is moved to the TFTP server.
xg# show startup-config > startup_09302005 xg# show running-config > running_09302005 xg# show system information > system_09302005 xg# ls
(ls command output)
Update-time File-size File-name
- 2005/09/30 11:57:27 872 system_09302005
- 2005/09/30 11:54:01 2,310 startup_09302005
- 2005/09/30 11:55:58 2,437 running_09302005 xg# tftp put remote-host1 startup_09302005 restore_startup_09302005
xg# tftp put remote-host1 running_09302005 restore_running_09302005 xg# tftp put remote-host1 system_09302005 restore_system_09302005
In the following example, show command output is directly redirected to TFTP server "remote-host1" using "| tftp".
xg# show startup-config | tftp remote-host1 restore_ startup_09302005 xg# show running-config | tftp remote-host1 restore_running_09302005 xg# show system information | tftp remote-host1 restore_system_09302005
20/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
2.2.12 Displaying using monitor Command
For screens that are displayed using the monitor screen, you can perform operations, such as update and move, via specific keys. The following table shows the keys used to perform screen-related operations.
Displayed item Meaning
ESC:exit Press the [Esc] key to close the monitor screen. F:refresh Press the [F] or [f] key to refresh the screen. U:page up Press the [U] or [u] key to scroll up to the previous page.
If the current page contains all lines, this item will not appear.
D:page down Press the [U] or [u] key to scroll up to the next page.
If the current page contains all lines, this item does not appear.
L:page left Press the [L] or [l] key to scroll the screen to the left.
If the current page contains all columns, this item will not appear.
R:page right Press the [R] or [r] key to scroll the screen to the right.
If the current page contains all columns, this item will not appear.
21/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
Chapter 3 Installation
This chapter describes the installation procedures for the XG700. Refer to "Using the CLI
" for details on using CLI.
Refer to "Command Reference" for details on commands.
22/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
3.1 Workflow to Prepare the XG700
This section describes the procedures to setup the XG700
1. Prepare an operation terminal
Prepare a terminal for the configuration.
2. Setting Up Serial Interface
Connect the XG700 and terminal with an RS232C cable. The initial setting of baud rate is 9,600bps.
3. Turn on the XG700 to start the system.
Turn on the terminal and the XG700 to start the system.
4. Configure Management LAN Interface
The initial setting of management LAN interface is disabled. To use the following functions, set up the management LAN interface.
Telnet connection
SNMP manager connection
System log transmission
Time synchronization using an NTP server
Configuration file upload/download
Firmware update
Collection of maintenance information
5. Telnet Connection via Management LAN Interface (Optional)
The initial setting of the Telnet connection via management LAN interface is disabled. Enable telnet connection if necessary.
6. SNMP Configuration (Optional)
The initial setting of SNMP agent configuration is not set. Set the SNMP configuration as needed.
7. This is the end of the preparation procedure
Proceed to setting switches.
3.1.1 Setting Up Serial Interface
Connect the XG700 and terminal with an RS232C cable. The initial setting of baud rate is 9,600bps. Refer to "Operating Environment for CLI
" for details on settings.
For serial interface settings, only baud rate can be changed. To change the serial interface settings, carry out the following procedure.
Command Task
xg login: admin Password: ********
Log in to the XG700 frame the serial terminal. The default user name is "admin". The default password is "password".
xg> enable
Switch to administrator EXEC mode.
xg# configure terminal
Switch to global configuration mode.
xg(config)# line console
Switch to serial terminal edit mode.
xg(config-line)# baud-rate {9600 | 19200 | 38400 | 57600}
Change serial baud rate. The baud rate is changed after the logout.
xg(config-line)# exit
Exit to global configuration mode.
xg(config)# terminal timeout console MINUTES
(Optional) Set a monitoring period (in minutes) during which the serial connection remains idle.
xg(config-line)# exit
Exit to global configuration mode.
xg(config)# exit
Exit to administrator EXEC mode.
23/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
3.1.2 Configure Management LAN Interface
The management LAN interface is initially disabled. To use the following functions, configure the management LAN interface.
Telnet connection
SNMP manager connection
System log transmission
Time synchronization using an NTP server
Configuration file upload/download
Firmware update
Collection of maintenance information
To configure the management LAN interface, carry out the following procedure.
Command Task
xg login: admin Password: ********
Log in to the XG700 from the serial terminal. The default user name is "admin". The default password is "password."
xg> enable
Switch to administrator EXEC mode.
xg# configure terminal
Switch to global configuration mode.
xg(config)# management-lan ip A.B.C.D/M [ default-gw A.B.C.D]
Set the IP address, subnet, and default gateway of the management LAN interface.
xg(config)# management-lan dns-server A.B.C.D
(Optional) Set up DNS servers. Up to 4 DNS servers can be set up. Priority is assigned to DNS servers in the order they are defined. To change their order, delete them using no command before doing so.
xg(config)# management-lan domain DOMAIN-NAME
(Optional) Set the name of the network domain.
xg(config)# remote-host A.B.C.D HOST-NAME
(Optional) Register the remote host name and IP address with the associated table. This allows you to specify a remote IP address using a host name without relying on a DNS server.
xg(config)# exit
Exit to administrator EXEC mode.
3.1.3 Telnet Connection via Management LAN Interface (Optional)
The "Telnet server function" via management LAN interface is initially disabled. To set up Telnet connection, carry out the following procedure in the administrator EXEC mode.
Command Task
xg# configure terminal
Switch to global configuration mode.
xg(config)# telnet-server
Enable Telnet connection,
xg(config)# terminal timeout vty <0-60>
(Optional) Set a monitoring period (in minutes) during which the Telnet connection remains idle.
xg(config)# exit
Exit to administrator EXEC mode.
3.1.4 SNMP Configuration (Optional)
To operate in conjunction with an SNMP manager, the SNMP agent must be configured. To configure the SNMP agent, carry out the following procedures in the administrator EXEC mode.
Command Task
xg# configure terminal
Switch to global configuration mode.
xg(config)# hostname HOST-NAME xg(config)# snmp-server location SYSTEM-LOCATION xg(config)# snmp-server contact SYSTEM-CONTACT
Set the system name (HOST-NAME), system's location (SYSTEM-LOCATION), and contact (SYSTEM-CONTACT).
xg(config)# snmp-server access host {A.B.C.D|HOSTNAME} community COMMUNITY-NAME
Set the IP address (host name) from which the SNMP manager can access the host and community name.
xg(config)# snmp-server trap host {A.B.C.D|HOSTNAME} community COMMUNITY-NAME [protocol {v1|v2c}]
Set the IP address (host name) of the host that is notified of SNMP traps and community name, if SNMP trap notification is enabled.
xg(config)# exit
Exit to administrator EXEC mode.
24/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
3.2 10GBASE-CX4 Cable Connection
The switch chip installed in this device is incorporated with an equalizer that optimizes Rx signals. The use of up to 15m of cable becomes possible by using this function.
3.2.1 Rx Signal Equalizer
The equalizer incorporated in the switch chip installed in this device automatically optimizes Rx signals. Optimization is performed every time a signal is detected. The optimization of Rx signals makes the use of 15m of cable possible.
3.2.2 Precautions During Linkup
It takes about 15 seconds to complete signal optimization, and then link becomes up.
25/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
Chapter 4 Functions and Procedures for Setting
Functions
This chapter describes the functions of the XG700 and how to set the functions. Refer to "Operating Environment for CLI
" for details on using CLI.
Refer to "Command Reference" for details on commands.
26/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
4.1 Basic Switch Functions
This section describes the basic switch functions.
4.1.1 Switching Mode
The XG700 provides the following two switching modes.
Store-and-forward switching mode
After the XG700 has finished receiving a frame, it checks the FCS (Frame Check Sequence) and performs a validity check (on packet size, etc.) before forwarding the frame. If the switch receives a frame with an error frame, it discards it.
Cut-through switching mode
The XG700 transmits the frame to the destination as soon as the first 64 bytes of the frame are received with no errors. Since the XG700 starts transmitting the frame before it has received the entire frame, this mode allows forwarding at low latency.
To change the switching modes, carry out the following procedures in the administrator EXEC mode.
Command Task
xg# configure terminal
Switch to global configuration mode.
xg(config)# bridge forward-mode {cut-through | store-and-forward }
xg(config)# no bridge forward-mode
Select the cut-through (or store-and-forward) for the switching mode.
xg(config)# exit
Exit to administrator EXEC mode.
4.1.2 MAC Address Table Management
MAC address table is a database used for managing the association between address information and destination ports. The XG700 can learn up to 8912 entries of MAC addresses.
MAC address table management
The XG700 has two management methods for MAC address table management.
SVL(Shared VLAN Learning)
The XG700 learns MAC addresses common to all VLANs. Different VLAN with identical MAC addresses are treated as identical entries.
IVL(Independent VLAN Learning)
The XG700 learns MAC addresses separately for each VLAN. Identical MAC addresses with different VLANs
are treated as separate entries. To change the MAC address table management modes, carry out the following procedures in the management EXEC mode.
Command Task
xg# configure terminal
Switch to the global configuration mode.
xg(config)# bridge learn-mode { ivl | svl }
xg(config)# no bridge learn-mode
Select IVL or SVL for the MAC address table management mode.
xg(config)# exit
Exit to administrator EXEC mode.
xg# copy running-config startup-config
Save the current settings of the XG700 to nonvolatile memory.
xg# reset
If the MAC address table management mode is changed, the new setting becomes enables after the XG700 is restarted.
Dynamic MAC address learning
The XG700 dynamically learns MAC addresses from a received frame. If MAC addresses are not uploaded for a period by the aging function, they will be removed frame MAC address table. To disable the dynamic learning, carry out the following procedures in the administrator EXEC mode.
Command Task
xg# configure terminal
Switch to global configuration mode.
xg(config)# interface port 1 2 3
xg(config)# interface port range 1 3
Switch to the interface edit mode for the port for which you want to change the configuration. In this example, the global interface configuration mode is selected for ports 1 through 3.
xg(config-if)# suppress-address-learning
xg(config-if)# no suppress-address-learning
Disable (or enable) the dynamic MAC address learning.
xg(config-if)# exit
Exit to global configuration mode.
xg(config)# exit
Exit to administrator EXEC mode.
27/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
Static unicast address
By registering a unicast MAC address to which a frame is forwarded with the MAC address table, you can forward a specific unicast frame to a specified port. Static unicast addresses are not subject to MAC address removal controlled by aging function. To register, change or delete a static unicast address, carry out the following procedures in the administrator EXEC mode.
Command Task
xg# configure terminal
Switch to global configuration mode.
xg(config)# bridge mac-address-table static MAC [vlan <1-4094>] {[port <1-12>] | [agg-port <1-6>]}
xg(config)# no bridge mac-address-table static MAC [vlan <1-4094>]
Register a static unicast address and destination port with the MAC address table (or remove them from it).
xg(config)# exit
Exit to administrator EXEC mode.
Static multicast address
By registering a multicast MAC address to which a frame is forwarded with the MAC address table, you can forward a specific multicast frame to a designated port. To register, change or delete a multicast address, carry out the following procedures in the administrator EXEC mode.
Command Task
xg# configure terminal
Switch to global configuration mode.
xg(config)# bridge mac-address-table static MAC [vlan <1-4094>] [port <1-12> [<1-12>    ]] [agg-port <1-6> [<1-6>   ]]
xg(config)# no bridge mac-address-table static MAC [vlan <1-4094>]
Register (or remove) a static multicast address table and destination port. For a multicast MAC address, multiple ports can be specified.
xg(config)# exit
Exit to administrator EXEC mode.
4.1.3 Jumbo Frame Support
The XG700 can transmit jumbo frames of up to 15KB (15360 bytes). To configure jumbo frame support, carry out the following procedure in the administrator EXEC mode.
Command Task
xg# configure terminal
Switch to global configuration mode.
xg(config)# bridge jumbo-frame [{9216 | 12288 | 15360}]
xg(config)# no bridge jumbo-frame
Enable (or disable) jumbo frame support.
xg(config)# exit
Exit to administrator EXEC mode.
If the maximum jumbo frame size is set to 15360, flow control is set to "only-receive" and unable to be set to
"send-receive".
4.1.4 Flow Control
Flow control is a function to prevent frame loss when the receive buffer in the switch overflows due to temporary traffic overload by using a PAUSE frame. When XG700 has received a PAUSE frame, it temporarily stops sending frames at the receive port. If space in the receive buffer runs out, it is possible to restrict frame transmission from the connected device by sending a PAUSE frame. For each port, it is possible to select whether or not to send a PAUSE frame. Select the mode depending on whether the destination can control a PAUSE frame. To change the flow control mode, carry out the following procedures in the administrator EXEC mode.
Command Task
xg# configure terminal
Switch to global configuration mode.
xg(config)# interface port 1 2 3
xg(config)# interface port range 1 3
Switch to the interface edit mode for the port for which you want to change the flow control mode. In this example, the global interface configuration mode is selected for ports 1 through 3.
xg(config-if)# flowcontorol { only-receive | send-receive }
Set the flow control mode.
xg(config-if)# exit
Exit to global configuration mode.
xg# exit
Exit to administrator EXEC mode.
If the maximum jumbo frame size is set to 15360, flow control is set to "only-receive" and unable to be set to
"send-receive".
28/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
4.1.5 Storm Control
The XG700 discards broadcast frames when the number of received broadcast frames is over a given threshold to prevent unnecessary waste of bandwidth due to retained broad cast frames on the network. This function is called "Storm Control". For each port, it is possible to configure storm control. When broadcast frames are discarded by Storm Control, error logs are output, after which storm control logging is disabled. To re-enabled logging, violations must be cleared with "clear violation". To configure Storm Control, carry out the following procedures in the administrator EXEC mode.
Command Task
xg# configure terminal
Switch to global configuration mode.
xg(config)# interface port 1 2 3
xg(config)# interface port range 1 3
Switch to the interface edit mode for the port for which you want to change the flow control mode. In this example, the global interface configuration mode is selected for ports 1 though 3.
xg(config-if)# storm-control
Enable storm control.
xg(config-if)# exit
Exit to global configuration mode.
xg# exit
Exit to administrator EXEC mode.
4.1.6 Port Security
Port security blocks connections attempted by unregistered hosts. When a host MAC address is registered, the XG700 receives only those frames that use permitted MAC addresses as source address. For each port, it is possible to configure port security. To register a MAC address for a host, use the "bridge mac-address-table static". The port to which the host is connected must be registered as a member port. In Independent VLAN Learning mode, this must be done for all VLANs that permit transmission. Either of the following two modes can be specified for a security-violating (unregistered) frame the XG700 receives.
Restrict mode
Filters violating frames only, forwarding permitted frames.
Shutdown mode
Filters all frames upon reception of a violating frame.
Once a security violation is detected, an error log is recorded. No further detection of a violating frame will cause an error log to be recorded until security violations are reset by "clear violation". To configure Port Security, carry out the following procedures in the administrator EXEC mode.
Command Task
xg# configure terminal
Switch to global configuration mode.
xg(config)# interface port 1 2 3
xg(config)# interface port range 1 3
Switch to the interface edit mode for the port for which you want to change the flow control mode. In this example, the global interface configuration mode is selected for ports 1 though 3.
xg(config-if)# port-security violation {restrict | shutdown}
Enable Port Security.
xg(config_if)# clear violation
Clear security violations.
xg(config-if)# exit
Exit to global configuration mode.
xg# exit
Exit to administrator EXEC mode.
4.1.7 Ingress Rate Control
It is possible to set ingress rate limiting value for each port in approximately 40Mbps increments. To set an ingress rate limiting value, carry out the following procedures in the administrator EXEC mode.
Command Task
xg# configure terminal
Switch to global configuration mode.
xg(config)# interface port 1 2 3
xg(config)# interface port range 1 3
Switch to the interface edit mode for the port for which you want to change the flow control mode. In this example, the global interface configuration mode is selected for ports 1 though 3.
xg(config-if)# ingress-bandwidth <40-10000>
Specify an ingress rate limiting value.
xg(config-if)# exit
Exit to global configuration mode.
xg# exit
Exit to administrator EXEC mode.
The ingress rate is measured at 100us time intervals. Should burst transfer take place at intervals of 100us or over, the ingress rate the XG700 actually allows may be less than the specified value.
29/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
4.2 Port Mirroring
It is possible to monitor the traffic by mirroring the frames sent or received by a port. To configure Port Mirroring, carry out the following procedure in the administrator EXEC mode.
Command Task
xg# configure terminal
Switch to global configuration mode.
xg(config)# mirror monitored-port <1-12> [rx-mirroring-port <1-12>] [tx-mirroring-port <1-12>]
Configure the ports to be monitored and mirror ports.
xg(config)# exit
Exit to administrator EXEC mode.
xg# show mirror
View the status of port mirroring.
30/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
4.3 Link Pass Through
Link Pass Through is a function that monitors the status of a link for a specified port and notifies the device connected to a port (to which a link status notification is sent) of the link status of a monitored port by synchronizing the monitored port with the link status of that port.
This function allows the XG700 to notify the port to which link status notification is sent of a link fault if it is detected in a monitored port. Link pass through indicates the link fault status to the other port by sending a remote fault (RF) signal, as prescribed in IEEE802.3ae LFS (Link Fault Signaling). When the link status of the monitored port is restored to normal, the other port is also restored to normal, the network line having been recovered. To configure Link Pass Through, carry out the following procedure in the administrator EXEC mode.
Command Task
xg# configure terminal
Switch to global configuration mode.
xg(config)# link-pass-through { monitored-port <1-12> | monitored-agg-port <1-6>} [domino-port <1-12> [<1-12>   ]] [domino-agg-port <1-6> [<1-6>   ]]
Set the relationship between the ports to be monitored and ports to which link status notification is sent.
xg(config)# exit
Exit to administrator EXEC mode.
31/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
4.4 Link Aggregation
Link aggregation is a function that combines multiple ports into a single logical link. A set of ports that comprise a logical link is called an Aggregation Group. Link aggregation provides:
Increased bandwidth
By grouping multiple physical ports into a single logical link (an aggregation group), you can balance network traffic (data to send and receive) across the physical ports, which provides increased bandwidth.
Redundancy
Multiplexing ports allows uninterrupted network operations should one of the multiple ports fail or a failure occurs. Since the link status of the logical aggregation groups remains unchanged, there are no fluctuations in the network, the effect of a fault having been minimized.
Up to 6 ports can be used to create a single link aggregation group using Link Aggregation. Up to 6 aggregation groups can be created.
32/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
4.4.1 Configuring Link Aggregation
Either static or dynamic (also known as LACP) configuration can be selected for Link Aggregation.
Static configuration
Configures aggregation groups statically.
LACP
Configures link aggregation using Aggregation Control Protocol (LACP). The LACP is a switch-to-switch control protocol that enables dynamic configuration of aggregation groups and is standardized by the IEEE802.3ad. The LACP facilitates determination of consistency with devices connected. Either "active" or "passive" LACP mode can be selected.
active
The XG700 starts LACP negotiation. Since the active mode allows the reception of LACP control frames, it is
possible to connect the XG700 with "active" mode.
passive
The XG700 responds to LACP control frames but does not start LACP negotiation.
To configure static link aggregation, carry out the following procedure in the administrator EXEC mode.
Command Task
xg# configure terminal
Switch to global configuration mode.
xg(config)# link-aggregation agg-port <1-6> protocol none port <1-12> <1-12>   
Set numbers you assign to the aggregation groups to be created (agg-port) and numbers you assign to ports that make up link aggregation (port). Specify "none" in "protocol" for static configuration.
xg(config)# interface agg-port <1-6>
To change the setting of the aggregation group created, switch to the interface edit mode for the aggregation group using the "interface agg-port" command. The prompt changes to "config-agg".
xg(config-agg)# port-vlan-id vlan 2
(Optional) Change the setting of the aggregation group. In this example, default VLAN ID is set to 2.
xg(config-agg)# exit
Exit to global configuration mode.
xg(config)# exit
Exit to administrator EXEC mode.
To configure LACP link aggregation, carry out the following procedure in the administrator EXEC mode.
Command Task
xg# configure terminal
Switch to global configuration mode.
xg(config)# link-aggregation agg-port <1-6> protocol lacp lacp-mode {active | passive } port <1-12> <1-12>   
Set numbers you assign to the aggregation groups to be created (agg-port) and numbers you assign to ports that make up link aggregation (port). Specify "lacp" in "protocol" for LACP link aggregation and specify the desired negotiation operational mode in "lacp-mode".
xg(config)# interface agg-port <1-6>
To change the setting of the aggregation group created, switch to the interface edit mode for the aggregation group using the "interface agg-port" command. The prompt changes to "config-agg".
xg(config-agg)# port-vlan-id vlan 2
(Optional) Change the setting of the aggregation group. In this example, default VLAN ID is set to 2.
xg(config-agg)# exit
Exit to global configuration mode.
xg(config)# exit
Exit to administrator EXEC mode.
33/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
4.4.2 Frame Distribution Methods in Link Aggregation
How frames are distributed to physical ports that make up an aggregation group is determined by contents of a frame (source and destination MAC addresses). There are three ways to specify how frames are distributed:
Frame distribution based on destination MAC address (dst-mac)
The destination port is determined based on the destination MAC address of the frames.
Frame distribution based on source MAC address (src-mac)
The destination port is determined based on the source MAC address of the frames.
Frame distribution based on destination and source MAC addresses (dst-src-mac)
The destination port is determined based on the destination and source MAC addresses of the frames.
If there are not many MAC addresses to be distributed on an aggregation group, the distribution
among the destination ports tends to become biased. To reduce such bias, use a distribution method that uses more MAC addresses. For example, if a server is connected to an aggregation group and a client is connected to a different port, it is recommended that you use either "src-mac" or "dst-src-mac".
To set a distribution method, carry out the following procedure in the administrator EXEC mode.
Command Task
xg# configure terminal
Switch to global configuration mode.
xg(config)# link-aggregation agg-port <1-6> protocol {none | lacp} load-balance dst-mac|src-mac|dst-src-mac} port <1-12> <1-12>   
Specify a distribution method in the load-balance parameter of the "link-aggregation" command.
xg(config)# exit
Exit to administrator EXEC mode.
4.4.3 The Number of Ports That Require Linkup
It is possible to specify the number of ports in a linkup state as conditions for enabling linkup for an aggregation group. If the number of ports that make up an aggregation group in a linkup state is less than the specified number of ports, the aggregation group changes to a linkdown state.
For static link aggregation
If the number of ports that make up an aggregation group in a linkup state no longer satisfies the specified number of ports, the aggregation group changes to a linkdown state.
For LACP link aggregation
If the number of ports that make up an aggregation group for LACP has been established no longer satisfied the specified number of ports, the aggregation group changes to a linkdown state.
To set the number of ports in the aggregation group, carry out the following procedure in the administrator EXEC mode.
Command Task
xg# configure terminal
Switch to global configuration mode.
xg(config)# link-aggregation agg-port <1-6> protocol {none | lacp} minimum-port <1-12> port <1-12> <1-12>   
Specify the required number of ports in "minimum-port" parameter of the "link-aggregation" command. The default value for "minimum-port" parameter is 1.
xg(config)# exit
Exit to administrator EXEC mode.
34/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
4.4.4 Notes on Link Aggregation
The port in aggregation group whose number is the smallest serves as a master port. The setting of an aggregation group immediately after the establishment of link aggregation take over the same settings as those for the master port, excluding the portion of it. The setting that is not taken over from those for the master port are:
"link-pass-through"
Set for the ports to be configured is cleared.
The information registered in MAC address table
All entries which will become port members that configure aggregation are cleared.
"spanning-tree port-path-cost"
Will be adjusted to match the number of ports that configures aggregation.
When changing the settings for aggregation group that has already been created, the aggregation group changes to a linkdown state, and then to a linkup state if one of the following conditions satisfied.
A master port has been removed A master port has been changed The "protocol" or "lacp-mode" parameter has been changed
35/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
4.5 Uplink Filter
When an uplink domain is defined, the domain's uplink domain port filters (drops) multicast, broadcast and unlearned (flooding) unicast frames from non-membership downlink ports. However it does not filter learned unicast frames that are forwarded based on MAC table.
The uplink filter is useful in configuring large networks with multiple paths, such as a fat tree network, by cascading multiple XG series switches.
To configure an uplink filter, specify an uplink domain whose membership consists of one or more downlink ports and one or more uplink ports. For example, in the fat tree network, an uplink domain is configured such that ports connected to switches are designated as uplink ports, and leaf nodes as downlink ports. The uplink domain will then block multicast, broadcast and flooding unicast frames to other uplink domains configured within the switch and only distribute traffic from the downlink to the uplink ports within that domain.
If an uplink filter is specified to have multiple uplink ports, link aggregation and redundancy are provisioned within that domain. The uplink filter differs from link aggregation in that the uplink ports within the uplink domain can be connected to different switches or equipment to ensure redundancy within the various uplink ports.
36/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
When specifying multiple uplink ports within an uplink domain, frame distribution among the uplink ports is performed as equally from port to port and not by type of frame. Frame distribution changes automatically when a fail-over or fail-back occurs, providing uplink redundancy.
37/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
The following is an example of a fat tree configuration with network redundancy.
To configures uplink filter, carry out the following procedures in the administrator EXEC mode.
Command Task
xg# configure terminal
Switch to global configuration mode.
xg(config)# uplink-domain 1 port 11 12
Create a uplink domain that consists of port 11 and 12.
xg(config)# interface port 1 2 3 (interface port range 1 3)
Switch to interface edit mode to configure uplink for port. In this example, the global interface configuration mode is selected for ports 1 through 3.
xg(config-if)# downlink allowed uplink-domain 1
Register each port as downlink of the uplink domain.
xg(config-if)# exit
Exit to global configuration mode.
xg(config)# exit
Exit to administrator EXEC mode.
xg# show uplink
View the state of the uplink.
Multicast, broadcast and unlearned unicast frames are filtered by uplink filter. But both statically and
dynamically learned unicast frames that are forwarded to a specified port is not filtered.
A member of uplink port consisting of uplink domain is not allowed to be a member of link aggregation
group.
STP has to be disabled on uplink ports. IGMP snooping and uplink function cannot be used at the same time.
38/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
4.6 Spanning Tree Protocol (STP)
The Spanning Tree Protocol (STP) is a function that prevents loops from occurring on a network. It is also possible to provide network redundancy by intentionally creating a loop. STP exclusively uses only one active path between network devices, and shuts out other paths, to avoid network loops. An active path is selected by comparing path costs defined on each path. After the comparison, the lowest cost path will be selected. If the selected path becomes disabled, STP will activate the lowest cost path among the paths remaining. The XG700 supports IEEE802.1w RSTP (Rapid Spanning Tree Protocol). The RSTP is upward compatible with IEEE802.1D STP (Spanning Tree Protocol) and serves as an STP if the destination device supports the STP only.
39/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
4.6.1 Port Roles Based on Spanning Tree
The RSTP assigns one of these port roles to individual ports:
Root port
Provides the best path (lowest cost) when the switch forwards packets to the root switch.
Designated port
Connects to the designated switch toward the leaves of the spanning tree. The port of the specified switch to connect the designated port serves as a root port.
Alternate Port
Provides an alternative port with the second lowest path cost. In the event that the root port becomes a linkdown state, alternative port serves as a root port. It does not always send or receive any frames while it is in the blocking state.
Backup Port
Provides an alternative path of the path specified by the specific path. In the event that the specified port becomes a linkdown state, backup port serves as a designated port. It does not always send or receive any frames while it is in the blocking state.
Disabled Port
Disabled port, it does not send or receive any frames.
4.6.2 Spanning Tree Protocol Port States
The port states defined by the STP are:
Discard
Shows the port is in "discarding state. BPDUs only are received.
Learn
Shows the port is in "learning" state. A port in the learning state learns the destination MAC address of the receive frames but does not participate in frame forwarding.
Forward
Shows the port is ready to transmit data traffic.
The STP states "blocking" and "listening" have been merged into a unique RSTP "discarding" state. The correspondence between STP port states and RTSTP port states is shown below.
Display Format
STP(IEEE802.1D) RSTP(IEEE802.1w)
Discard Blocking Discarding Discard Listening Discarding Learn Learning Learning Forward Forwarding Forwarding
40/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
4.6.3 Configuring Spanning Tree
To configure the spanning tree protocol, carry out the following procedure in the administrator EXEC mode.
Command Task
xg# configure terminal
Switch to global configuration mode.
xg(config)# spanning-tree enable
Enable Spanning Tree Protocol.
xg(config)# spanning-tree priority <0-61440> xg(config)# spanning-tree hello-time <1-10> xg(config)# spanning-tree max-age <6-40> xg(config)# spanning-tree forward-time <4-30>
Configure Spanning Tree Protocol parameters on the XG700.
Switch priority Hello time Maximum aging time (max-age) Forward delay time (forward-time)
xg(config)# interface port 1 2 3
xg(config)# interface port range 1 3
Switch to interface edit mode to configure spanning tree-related parameters for port. In this example, the global interface configuration mode is selected for ports 1 through 3.
xg(config-if)# spanning-tree protocol { rstp | none }
Set a spanning tree protocol mode that corresponds to each port.
xg(config-if)# spanning-tree port-priority <0-240>
xg(config-if)# spanning-tree port-path-cost <1-200000000>
Configure the following parameters related to the spanning tree topology:
Port priority Path cost
xg(config-if)# spanning-tree portfast
(Optional) If the port is configured as an edge port(*), it is possible to make settings that can reduce the time taken to transit into forwarding state. * It is available only when the port is directly connected to an end terminal that has no influence on the spanning tree configuration.
xg(config-if)# exit
Exit to global configuration mode.
xg(config)# exit
Exit to administrator EXEC mode.
xg# show spanning-tree [ detail ]
View the state of the spanning tree.
41/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
4.7 VLAN
VLAN (Virtual LAN) is a technology that divides a single network into virtually separated networks. VLAN divides a network into multiple network segmentations, without changing the network physically. This configures a network domain independent from other VLANs. VLAN can change network configuration easily without changing physical cable connections, It can create a flexible network system. As a VLAN protocol, port-based VLAN or Tag-based (IEEE802.1Q) VLAN is available for the XG700.
4.7.1 Port-Based VLAN
Port-based VLAN is a method to configure a VLAN for each port, with forwarding based on the destination MAC addresses and related port.
To configure a port-based VLAN, carry out the following procedures in the administrator EXEC mode.
Command Task
xg# configure terminal
Switch to global configuration mode.
xg(config)# vlan <1-4094> [ name VLAN_NAME ]
Create a VLAN to use.
xg(config)# vlan-statistics collection <1-4094> [ <1-4094>     ]
(Optional) Configure a VLAN that collects statistics.
xg(config)# interface port 1 2 3 (interface port range 1 3)
Switch to interface edit mode for the port for which you want to configure the port-based VLAN. In this example, the global interface configuration mode is selected for ports 1 through 3.
xg(config-if)# port-vlan-id vlan <1-4094>
Set the default port VLAN ID for each port.
xg(config-if)# ingress-filter tagged-frame
xg(config-if)# ingress-filter untagged-frame
(Optional) Define a filter on frames received (tagged and untagged frames) if necessary.
xg(config-if)# exit
Exit to global configuration mode.
xg(config)# exit
Exit to administrator EXEC mode.
xg# show interface
View the port state. Check the information displayed in [Port Default Vlan ID] under command output [Vlan Information].
xg# show vlan
View the port's VLAN membership state.
42/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
4.7.2 Tag-Based (IEEE802.1Q) VLAN
Tag-based VLAN is a method to configure VLANs so that the frame forwarding decision is based on the extra tag in the MAC header which identifies the VLAN membership. It adds 4 bytes of information called a VLAN tag to a frame, and identifies the VLAN to which the frame belongs. Using VLAN tag enables a configuration that allows a single physical link to be shared by multiple VLANs. XG700's tag-based VLAN function is based on the IEEE 802.1Q standard. The following figure shows an Ethernet frame format including a VLAN tag that is specified by the IEEE 802.1Q.
To configure a tag-based VLAN, carry out the following procedures in the administrator EXEC mode.
Command Task
xg# configure terminal
Switch to global configuration mode.
xg(config)# vlan <1-4094> [ name VLAN_NAME ]
Create a VLAN to use.
xg(config)# vlan-statistics collection <1-4094> [ <1-4094>     ]
(Optional) Configure a VLAN that collects statistics.
xg(config)# interface port 1 2 3 (interface port range 1 3)
Switch to interface edit mode for the port for which you want to configure the tag-based VLAN. In this example, the global interface configuration mode is selected for ports 1 though 3.
xg(config-if)# vlan-member allowed vlan { <1-4094> | all } { egress-untagging | egress-tagging }
Register a VLAN to which the port belongs.
xg(config-if)# ingress-filter tagged-frame
xg(config-if)# ingress-filter untagged-frame
(Optional) Define a filter on frames received (tagged and untagged frames) for the port, if necessary.
xg(config-if)# exit
Exit to global configuration mode.
xg(config)# exit
Exit to administrator EXEC mode.
xg# show vlan
View the port's VLAN membership state.
43/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
4.7.3 Multiple VLAN
Identifier or TPID: Tag Protocol Identifier is 0x8100 in IEEE 802.1Q. With the user-defined VLAN tag protocol identifier, the IEEE 802.1Q standard tag can be replaced with a user-defined VPID, allowing for encapsulation in a multiple-tag VLAN.
For the frame format, refer to TPID (Tag Protocol Identifier) in "Tag VLAN Frame Format
".
Using Multiple VLAN (also known as double tagging or Q in Q) allows a service provider to transparently forward customers' VLAN traffic even if the service provider assigns customers traffic to different VLANs.
To configure multiple VLAN using user-defined VLAN tag protocol identifier, carry out the following procedures in the administrator EXEC mode.
Command Task
xg# configure terminal
Switch to global configuration mode.
xg(config)# vlan <1-4094> [ name VLAN_NAME ]
Create a VLAN to use.
xg(config)# vlan-statistics collection <1-4094> [ <1-4094>      ]
(Optional) Configure a VLAN that collects statistics.
xg(config)# interface port 1
Switch to interface edit mode for the port for which you want to configure the multiple VLAN. In this example, the global interface configuration mode is selected for port 1.
xg(config-if)# user-vlan-protocol-id <0x05DD ~ 0xFFFF>
Set the user-defined VLAN tag protocol identifier.
xg(config-if)# vlan-member allowed vlan { <1-4094> | all } { egress-untagging | egress-tagging }
Register a VLAN to which the port belongs. Specify "egress-tagging" for the port that is output with the tag of the user-defined VLAN tag protocol identifier added. Specify "egress-untagging" for the port that is output with the tag of the user-defined VLAN tag protocol identifier removed.
xg(config-if)# ingress-filter tagged-frame
xg(config-if)# ingress-filter untagged-frame
(Optional) Define a filter on frames received (tagged and untagged frames) for the port, if necessary.
xg(config-if)# exit
Exit to global configuration mode.
xg(config)# exit
Exit to administrator EXEC mode.
xg# show interface xg# show vlan
View the port state and VLAN membership state for each port.
44/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
An example of Multiple VLAN and the movement of frames when the outgoing port is a VLAN member (VLAN-tagged frame), is shown below.
An example of Multiple VLAN and the movement of frames when the outgoing port is a VLAN member (VLAN-untagged frame), is shown below.
45/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
An example of Multiple VLAN and the movement of frames when the user-defined VPID of the incoming and outgoing port differ and the outgoing port is a VLAN member (VLAN-tagged frame), is shown below.
An example of multiple VLAN and the movement of frames when the user-defined VPID of the incoming and outgoing port differ and the outgoing port is not a VLAN member (VLAN-untagged frame), is shown below.
46/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
4.8 Quality of Service (QoS)
The XG700 provides Quality of Service (QoS) that is based on the IEEE802.1p standard. The XG700 QoS determines the priority of frames at the ingress side using DiffServ, VLAN tag (including priority tag) or port's default priority. Their priorities are mapped to 4 output queues. These queues are processed in the precedence order. The QoS transmits frames in order of their priority. With the XG700, you can set:
DiffServ
Select the QoS using the IPv4 header or DiffServ Code Point included in the IPv6 header.
Default priority
Set default priority of 0 to 7 for each port. For frames whose priority has not been set (VLAN-untagged frames). the default priority is assigned as the priority value of the frame.
Mapping to output queues
The XG700 is equipped with four output queues with different levels (0 to 3). Frames are transmitted in order of output queue priority.
Each priorities are mapped to specified output queue.
To set the default priority and output queue mapping, carry out the following procedure in the administrator EXEC mode.
Command Task
xg# configure terminal
Switch to global configuration mode.
xg(config)# interface port 1 2 3
xg(config)# interface port range 1 3
Switch to interface edit mode for the port for which you want to set the default QoS priority. In this example, the global interface configuration mode is selected for ports 1 though 3.
xg(config-if)# qos default-priority <0-7>
Set the frame's default priority when a frame whose priority has not been set (VLAN-untagged frame) arrives.
xg(config-if)# exit
Exit to global configuration mode.
xg(config)# bridge diffserv-tos {ipv4 | ipv6}
(Optional) Used to enable QoS based on DiffServ Code Point.
xg(config)# qos-map priority <0-7> output-priority <0-3>
Set the level of output queue you want to map to each frame that has its own priority value when forwarding them.
xg(config)# exit
Exit to administrator EXEC mode.
xg# show qos [ { default-priority | qos-map } ]
Show the QoS setting status.
47/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
4.9 IGMP Snooping
IP multicast is often used to distribute multimedia data, including video and voice, over a network. A general layer 2 switch floods multicast frames, causing absorption of unnecessary network bandwidth. A layer 3 switch that supports Internet Group Management Protocol (IGMP) manages multicast groups using IGMP packets. The XG700 controls to forward IP multi packets to required ports only by snooping IGMP packets between these layer 3 switches, preventing unnecessary flooding. This function is called "IGMP Snooping". The XG700 supports IGMP snooping for IGMP v1/v2/v3.
IGMP v3 does not support source IP addressing and filtering. IGMP snooping and uplink filter function cannot be used at the same time.
48/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
4.9.1 Registering Group Members
Upon reception of an IGMP Report message, the XG700 registers a multicast MAC address with the MAC address table for the port that received the IGMP Report message and the port to which a multicast router is connected.
The following figure shows the relationship between the registered IP multicast address and the multicast MAC address. MAC addresses that are registered with IGMP snooping are between 0100.5E00.0000 and 0100.5E7F.FFFF. An IP multicast address is 32 bits, of which the first 4 bits are always 1110, which are followed by 28 bits to represent its own address information. Of these 28 bits, the lower order 23 bits are mapped to a MAC address and the data in the higher order 5 bits is not used. Therefore 32 IP multicast addresses are mapped to the same single MAC address.
49/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
4.9.2 Removing Group Members
The group members registered by IGMP snooping are removed under the following status.
If after receiving an IGMP Report message for group registration, the group member interval expires before the XG700
receives another IGMP Report message, it removes that group member. The default setting for the group member interval is 260 seconds.
If an IGMP Leave message is sent from a host, the multicast router sends out an IGMP Specific Query (GSQ)
message to determine that the host has left the group. If after receiving the IGMP Leave message, the last member interval expires before the XG700 receives another IGMP Report message, it removes that group member. The default setting for the last member interval is 2 seconds.
50/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
4.9.3 Managing Group Members
When network congestion causes Leave message loss or there is a terminal that uses IGMPv1, the multicast router does not receive Leave messages. The multicast router sends out an IGMP General Query message to all terminals (IP address:
224.0.0.1) at intervals (query interval) to determine membership information. Upon reception of an IGMP General Query message, a terminal, a member of the group, returns an IGMP Report message to maintain membership to the group.
In consideration of General Query or Report message loss caused by network congestion, it is recommended that the value that satisfies the following equation be taken as the group member interval for the XG700.
Group member interval = (query interval for multicast router) × 2 + 10 (seconds)
Since RFC defines the default query interval for multicast router as 125 seconds, the XG700 uses 260 seconds for the default group member interval.
51/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
4.9.4 IGMP Querier
In a general network configuration, the multicast router periodically sends out an IGMP General Query message to determine if the hosts on the network are members of any multicast groups by receiving a response from the hosts. IGMP Querier is a function that acts as a proxy for a multicast router when it is not included in a network segment to send an IGMP General Query message to all terminals. The number of Query messages issued is configured using the "ip snooping vlan send-query-count" command. The frequency at which the General Query messages are sent (query interval) is automatically calculated by the following equation based the frequency at which the Query messages are sent and the group member interval.
Query interval = (Group membership interval - 10)/send query count (seconds)
The default setting for the Query interval is 125 seconds.
Upon reception of an IGMP Leave message, the XG700 sends an IGMP Specific Query (GSQ) message to determine that the host is interested in leaving the group. If an IGMP Specific Query message is sent as many times as specified by the send query count and a terminal does not respond with an IGMP Report message, that group is removed.
Generally, IGMP Querier uses "0.0.0.0" for the source IP address when sending a Query message.
Since some client software does not return a response for a Query message with the source IP address being set to "0.0.0.0", it is recommended that an address other than "0.0.0.0" be used.
If multicast router exists, XG700 does not send Query message even if IGMP Querier is valid.
52/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
4.9.5 Configuring IGMP Snooping
To configure IGMP snooping, carry out the following procedure in the administrator EXEC mode.
Command Task
xg# configure terminal
Switch to global configuration mode.
xg(config)# ip snooping protocol igmp
Enable global IGMP snooping on the XG700.
xg(config)# ip snooping vlan <1-4094>
Enable IGMP snooping for each VLAN separately.
xg(config)# ip snooping vlan <1-4094> group-member-interval <60-600>
(Optional) Change the group member interval.
xg(config)# ip snooping vlan <1-4094> mrouter { port <1-12> | agg-port <1-6> }
(Optional) Register a port on which a multicast router resides statically.
xg(config)# ip snooping vlan <1-4094> mrouter suppress-learning
(Optional) Suppress dynamic registration of port on which a multicast router resides.
xg(config)# ip snooping vlan <1-4094> last-member-interval <1-9>
(Optional) Change the last member interval.
xg(config)# ip snooping vlan <1-4094> send-query-count <1-3>
(Optional) Change the frequency at which a Query message is sent.
xg(config)# ip snooping vlan max-group <10-128>
(Optional) Change the number of multicast addresses that can be registered with IGMP snooping for each VLAN.
xg(config)# ip snooping vlan <1-4094> fast-leave
(Optional) Set the fast-leave mode used when receiving an IGMP Leave message.
xg(config)# exit
Exit to administrator EXEC mode.
To enable IGMP query, carry out the following procedure in the administrator EXEC mode.
Command Task
xg# configure terminal
Switch to global configuration mode.
xg(config)# ip snooping protocol igmp
Enable global IGMP snooping on the XG700.
xg(config)# ip snooping vlan <1-4094>
Enable IGMP snooping for each VLAN separately.
xg(config)# ip snooping vlan <1-4094> group-member-interval <60-600>
(Optional) Change the group member interval.
xg(config)# ip snooping vlan <1-4094> last-member-interval <1-9>
(Optional) Change the last member interval.
xg(config)# ip snooping vlan <1-4094> send-query-count <1-3>
(Optional) Change the frequency at which a Query message is sent.
xg(config)# ip snooping vlan <1-4094> querier ip A.B.C.D
Enable IGMP query and set the source IP address for a Query message.
xg(config)# exit
Exit to administrator EXEC mode.
53/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
4.10 Network Management
4.10.1 Traffic Statistics
The XG700 can display traffic statistics to analyze network operations such as traffic, errors, etc. The following are the Traffic Statistics information XG700 provides.
Displays traffic information on outgoing and incoming frames for each port. Displays traffic information on incoming frames by frame size range for each port. Displays traffic information on incoming frames for each VLAN. Displays incoming traffic information by QoS priority for each port. Displays information related to data flow for each port. Displays information about errors that occur during transmission/reception for each port.
To display traffic statistics, monitor and show commands are provided.
"monitor" command
Displays real-time traffic statistics.
"show statistics" command
Outputs details of the current traffic statistics.
Enter this command followed by "> FILE_NAME" or "| redirect FILE_NAME" to output the results to a file in volatile memory.
To display the traffic statistics, run the following commands in the operator EXEC mode or in the administrator EXEC mode.
Command Task
xg> monitor traffic-counts { current | total } [interval <3-60>] xg> monitor traffic-bytes { current | total } [interval <3-60>]
xg> show statistics traffic-counts xg> show statistics traffic-bytes
View incoming and outgoing traffic statistics (number of frames and number of bytes) for each port.
xg> monitor framesize-traffic-counts { current | total } [interval <3-60>]
xg> show statistics framesize-traffic-counts
View traffic statistics (number of frames) by frame size range for each port.
xg> monitor vlan-traffic-counts { current | total } [interval <3-60>] xg> monitor vlan-traffic-bytes { current | total } [interval <3-60>]
xg> show statistics vlan-traffic-counts xg> show statistics vlan-traffic-bytes
View traffic statistics (number of frames and number of bytes) on incoming frames for each VLAN.
xg> monitor qos-priority-traffic-counts { current | total } [interval <3-60>] xg> monitor qos-priority-traffic-bytes { current | total } [interval <3-60>]
xg> show statistics qos-priority-traffic-counts xg> show statistics qos-priority-traffic-bytes
View incoming traffic statistics (number of frames and number of bytes) by QoS priority for each port.
xg> monitor dataflow { current | total } [interval <3-60>] xg> show statistics dataflow
View traffic statistics (number of frames) that are related to data flow during frame forwarding for each port.
xg> monitor error { current | total } [interval <3-60>] xg> show statistics error
View information about errors that occur during transmission/reception for each port.
xg> enable xg# clear statistics
Clear cumulative traffic statistics collected after system startup.
54/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
4.10.2 SNMP Agent
SNMP (Simple Network Management Protocol) is a protocol that manages network devices via a network. The XG700 supports the SNMP (v1/v2c) function to collect management information (MIB) from a remote network manager (SNMP manager). For operations via SNMP manager, only read-only operations are allowed. For the MIB supported, refer to Appendix C. The XG700 can set up to 4 SNMP managers and up to 4 SNMP trap destinations. To configure the SNMP agent, carry out the following procedures in the administrator EXEC mode.
Command Task
xg# configure terminal
Switch to global configuration mode.
xg(config)# hostname HOST-NAME xg(config)# snmp-server location SYSTEM-LOCATION xg(config)# snmp-server contact SYSTEM-CONTACT
Set the system name (HOST-NAME), system's location (SYSTEM-LOCATION), and contact (SYSTEM-CONTACT).
xg(config)# snmp-server access host HOST community COMMUNITY-NAME
Set the IP address (host name) from which the SNMP manager can access the host and community name.
xg(config)# snmp-server trap host HOST community COMMUNITY-NAME [protocol {v1|v2c}]
Set the SNMP trap receiver IP address (host name) and community name.
xg(config)# exit
Exit to administrator EXEC mode.
4.10.3 RMON
Remote Monitoring (RMON) is a function provided to monitor communications over a network, such as traffic and errors. RMON, used in conjunction with the SNMP agent, allows you to remotely monitor the traffic on a LAN segment. The XG700 supports 4 RMON groups (Statistics, History, Alarm and Even).
Statistics group
Collects traffic statistics for each port.
History group
Records traffic statistics of each port at specified time intervals.
Alarm group
Monitors MIB at specified time intervals and, if the monitored MIB exceeds or falls below a specified threshold, a RMON event is executed.
Event group
Specifies an event operation that is executed by an alarm. Possible event operations include creation of log entry and generation of SNMP trap.
To configure RMON, carry out the following procedure in the administrator EXEC mode.
Command Task
xg# configure terminal
Switch to global configuration mode.
xg(config)# rmon collection history <1-65535> port <1-12> [buckets <1-20>] [interval <1-3600>] [owner OWNERNAME]
(Optional) Enable a RMON history group.
xg(config)# rmon alarm <1-65535> VARIABLE interval <2-65535> {absolute | delta} rising-threshold <0-2147483647> [<1-65535>] falling-threshold <0-2147483647> [<1-65535>] [owner OWNERNAME]
(Optional) Enable a RMON alarm group.
xg(config)# rmon event <1-65535> [log] [trap COMMUNITY] [description DESCRIPTION-STRING] [owner OWNERNAME]
(Optional) Enable a RMON event group.
xg(config)# exit
Exit to administrator EXEC mode.
55/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
Chapter 5 Command Reference
56/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
5.1 About Command Reference
This section describes how to read command references.
5.1.1 Command System
The following is the system of commands provided in the XG700:
Item Function
Management LAN Interface Configuration commands
They are used to set items related to management LAN interface.
Serial/telnet configuration commands They are used to set items related to serial and telnet connections. System Basic Operation commands They are necessary for system operation such as system time setting
and password setting, and file operation. Configuration Information Operation commands
They are used for operation related to configuration information
(running-config and startup-config) of the XG700. Switch Basic Configuration commands They are used to set the basic settings of the XG700 switches in
general. Link Aggregation Configuration commands They are used to create/delete aggregation groups. Switch Port Configuration commands They are used to set items related to operating characteristics of each
switch port. Spanning Tree Protocol (STP) Setup commands
They are used to set items related to STP (Spanning Tree Protocol).
Virtual LAN (VLAN) Configuration commands They are used to set items related to virtual LAN (VLAN). Quality of Service (QoS) Setup commands They are used to set QoS (Quality of Service) configuration. Port Mirroring Setup commands They are used to set port mirroring. IGMP Snooping Setup commands They are used to set items related to IGMP Snooping. Statistics commands They are used to display various statistics. SNMP Configuration commands They are used to set items related to SNMP. RMON Configuration commands They are used to set items related to RMON. System Status Display commands They are used to display the system status of the XG700 or operational
status of the hardware. Maintenance commands They are necessary for maintenance.
57/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
5.1.2 Configuration of Command Reference
This section describes the configuration of command reference and descriptive content.
Function
Explains the functions of the commands.
Prompt
Indicates the prompt of the operation mode, in which commands can be entered.
Command syntax
Describes the command syntax. The notation of the command syntax is as follows:
Notation Meaning Example of description
Lower-case characters Indicate fixed strings such as command names
and keyword names.
enable
Upper-case characters Indicate parameters specifying any strings. delete FILE-NAME [ ] (Enclosed in a pair of square brackets)
Indicate omissible parameters. date [ YYYYMMDD-hhmmss ]
{ | } (Enclosed in a pair of curly brackets with a vertical line in-between)
Indicate parameters, from which at least one alternative must be chosen.
baudrate { 9600|19200|38400|57600 }
< > (Enclosed in a pair of angle brackets)
Indicate parameters with a condition of numerical range.
interface port <1-12>
Parameter
Explains how to specify command parameters, and their meanings.
Command type
Indicates configuration commands (those which retain configuration information in startup-config and running-config ) or operation management commands (those which are related to configuration of the XG700, such as status display or time setting).
Default
Indicates the factory default of this command.
Output form
Explains the meaning of output (or input) results, when there is a command output (or input).
Message
Explains messages displayed when executing a command, their solution, and significance.
Note
Explains notes for commands.
Example
Describes how to use commands, using examples.
58/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
5.2 Management LAN Interface Configuration Commands
This section explains configuration commands related to the Management LAN Interface.
5.2.1 management-lan ip
Function
Sets the IP address and default gateway, when the Management LAN Interface is used. Use the no form to disable the Management LAN Interface.
Prompt
xg(config)#
Command syntax
management-lan ip A.B.C.D/M [default-gw A.B.C.D] no management-lan ip
Parameter
ip A.B.C.D/M
Specifies the IP address and subnet mask bit length of the Management LAN Interface in the A.B.C.D/M format. Specifies an IP address to A.B.C.D, and a subnet mask bit length to M. IP addresses that can be set are: 1.0.0.1 - 126.255.255.254, 128.0.0.1 - 191.255.255.254, and 192.0.0.1 -
223.255.255.254.
default-gw A.B.C.D
Specifies the IP address of the default gateway.
Command type
Configuration command
Default
None
Message
% Invalid IP-address.
Explanation
The specified format of the IP address or specified content is incorrect.
Solution
Specify the IP address in a correct format and execute it again.
Note
When the IP address is changed from a telnet terminal using this command, telnet connection will be disconnected.
Connect again with a new address.
Example
Make the Management LAN Interface usable by setting IP address to "12.34.56.25," subnet mask bit length to "24" (255.255.255.0), and default gateway address to "12.34.56.1".
xg(config)# management-lan ip 12.34.56.25/24 default-gw 12.34.56.1
59/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
5.2.2 management-lan dns-server
Function
Registers the IP address of DNS (Domain Name Service) server, which is used for name resolution of the host name. Up to three DNS servers can be registered. Use the no form to delete registered DNS servers.
Prompt
xg(config)#
Command syntax
management-lan dns-server A.B.C.D no management-lan dns-server [A.B.C.D]
Parameter
dns-server A.B.C.D
Sets the IP address to register as a DNS server in A.B.C.D format. IP addresses that can be set are: 1.0.0.1 - 126.255.255.254, 128.0.0.1 - 191.255.255.254, and 192.0.0.1 -
223.255.255.254.
(no management-lan) dns-server [A.B.C.D]
Deletes registered DNS server(s). Specifies IP address in A.B.C.D format. When IP address is omitted, all registered DNS servers will be deleted.
Command type
Configuration command
Default
None
Message
% Not exist IP-address of DNS server
Explanation
The specified IP address is not found.
Solution
Specify the IP address of a registered DNS server.
% Number of DNS server is over (max=3)
Explanation
The upper limit of the number of registerable DNS servers has been surpassed.
Solution
After deleting unnecessary DNS server information, execute it again.
% Invalid IP-address.
Explanation
The specified format of the IP address or specified content is incorrect.
Solution
Specify the IP address in a correct format and execute it again.
Note
Since DNS server(s) must be connected via the Management LAN Interface, it is necessary to have configured the
Management LAN Interface by management-lan ip.
Example
Register DNS servers with IP addresses "12.34.56.76" and "12.34.56.77".
xg(config)# management-lan dns-server 12.34.56.76 xg(config)# management-lan dns-server 12.34.56.77
Delete all registered DNS servers.
xg(config)# no management-lan dns-server
60/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
5.2.3 management-lan domain
Function
Sets the default domain name when referring to DNS (Domain Name Service) server. For example, when the host name is "hostname1," and "abc.jp" is specified to the default domain name, perform a search for the address with an FQDN (Fully Qualified Domain Name) name of "hostname1.abc.jp." Use the no form to delete the set domain name.
Prompt
xg(config)#
Command syntax
management-lan domain DOMAIN-NAME no management-lan domain
Parameter
domain DOMAIN-NAME
Specifies the default domain name.
Follow the rules below for the domain name:
Characters usable for the name
Alphabet ([a - z], [A - Z]), numerical characters ([0 - 9]), hyphen (-), and period (.)
First characters
Alphabet ([a - z], [A - Z])
Last characters
Alphabet ([a - z], [A - Z]), numerical characters ([0 - 9]), and period (.)
Command type
Configuration command
Default
None
Example
Specify "corp.co.jp" for the default domain name when referring to the DNS server. Then, return to the operator exec mode, specify "hostname1" for TFTP server name, and execute the "tftp" command. At this time, the default domain name is added to "hostname1," and the IP address can be referenced from the DNS server with the FQDN name of "hostname1.corp.co.jp."
xg(config)# management-lan domain corp.co.jp xg(config)# exit xg# tftp get hostname1 remotefile localfile
61/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
5.2.4 hostname
Function
Changes the hostname of the XG700. Use the no form to return to the default ("xg").
Prompt
xg(config)#
Command syntax
hostname HOST-NAME no hostname
Parameter
HOST-NAME
Specifies the hostname of the XG700. Specify the hostname using 63 characters or less, with an alphabet character at the beginning.
Follow the rules below for the hostname and domain name:
Characters usable for the name
Alphabet ([a - z], [A - Z]), numerical characters ([0 - 9]), hyphen (-), and period (.)
First characters
Alphabet ([a - z], [A - Z])
Last characters
Alphabet ([a - z], [A - Z]), numerical characters ([0 - 9]), and period (.)
Command type
Configuration command
Default
"xg"
Example
Specify the hostname of the XG700 to be "xg2." The beginning of the prompt character will change to "xg2." Also, when switching to the administrator exec mode and displaying the system status, you can confirm that the System Name has been changed to "xg2."
xg(config)# hostname xg2 xg2(config)# exit xg2# show system information
System Information 2005/08/22-11:04:54 ======================================= System Name (hostname) : xg2 System Location : (none)      
62/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
5.2.5 remote-host
Function
Registers remote host information, which shows the relationship between the remote hostname and IP address. By registering the IP address of a remote host, which is used frequently, the name can be specified instead of the IP address, which leads to improved convenience. The relationship between the registered hostname and IP address is given priority over the DNS server configuration. Use the no form to delete registered remote host information.
Prompt
xg(config)#
Command syntax
remote-host A.B.C.D HOST-NAME no remote-host [ A.B.C.D ]
Parameter
A.B.C.D
Specifies the IP address of a remote host in A.B.C.D format. IP addresses that can be set are: 1.0.0.1 - 126.255.255.254, 128.0.0.1 - 191.255.255.254, and 192.0.0.1 -
223.255.255.254.
HOST-NAME
Specifies the hostname to register. Specify the hostname using 63 characters or less, with an alphabet character at the beginning.
Follow the rules below for the hostname and domain name:
Characters usable for the name
Alphabet ([a - z], [A - Z]), numerical characters ([0 - 9]), hyphen (-), and period (.)
First characters
Alphabet ([a - z], [A - Z])
Last characters
Alphabet ([a - z], [A - Z]), numerical characters ([0 - 9]), and period (.)
(no remote-host) [A.B.C.D]
Deletes the information of a registered remote host. Specifies IP address in A.B.C.D format. When IP address is omitted, all registered remote hosts will be deleted.
Command type
Configuration command
Default
None
Message
% Invalid IP-address.
Explanation
The specified format of the IP address or specified content is incorrect.
Solution
Specify the IP address in a correct format and execute it again.
% Number of remote-host is over (max=10)
Explanation
The upper limit of the number of registerable remote hosts has been surpassed.
Solution
After deleting unnecessary hosts, execute it again.
% Already exist name of remote host
Explanation
A hostname with the same IP address has already been registered.
Solution
Change the hostname of the IP address to the correct name, or register it again after deleting it.
% Not exist IP-address of remote host
Explanation
The specified host definition is not registered.
Solution
Specify a registered IP address and execute it again.
63/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
Example
Register the IP address "11.22.33.45" as the hostname of "HOST005," and then "11.22.33.46" as the hostname of "HOST006." Using the show remote-host command, registration of "HOST005" and "HOST006" can be confirmed.
xg(config)# remote-host 11.22.33.45 HOST005 xg(config)# remote-host 11.22.33.46 HOST006 xg(config)# exit xg# show remote-host
Remote Host 2005/08/22-11:45:46 ================================ IP Address Host Name
---------- -----------------------------------------
11.22.33.45 HOST005
11.22.33.46 HOST006
64/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
5.3 Serial/telnet Configuration Commands
This section explains configuration commands related to serial connection/telnet connection.
5.3.1 terminal pager
Function
Enables or disables the pager function of the serial/telnet terminal.
Prompt
xg>, xg#
Command syntax
terminal pager { on | off }
Parameter
pager { on | off }
Specifies enable/disable of the pager.
on
Enables the pager.
off
Disables the pager.
Command type
Operation management commands
Default
on
Note
This command is effective until the terminal is disconnected.
5.3.2 line
Function
Switches to the terminal edit mode
Prompt
xg(config)#
Command syntax
line console
Parameter
console
Switches to the terminal edit mode of serial connection.
Command type
Configuration command
Example
Switch from the administrator exec mode to the terminal edit mode with the serial interface.
xg# configure terminal xg(config)# line console
65/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
5.3.3 baud-rate
Function
Sets serial baud rate (bps).
Prompt
xg(config-line)#
Command syntax
baud-rate { 9600 | 19200 | 38400 | 57600 }
Parameter
{ 9600 | 19200 | 38400 | 57600 }
Specifies any of 9600/19200/38400/57600 as the serial baud rate (bps).
Command type
Configuration command
Default
9600
Note
When the serial baud rate is newly set, it will become valid after logging out the serial terminal in use and connecting it
again.
Example
Switch from the global configuration mode to the terminal edit mode using the "line console" command. And then change the serial baud rate to 38400bps.
xg(config)# line console xg(config-line)# baud-rate 38400
5.3.4 terminal timeout
Function
Sets the monitoring period during which serial connection or telnet connection with the XG700 remains idle. When there is no operation from the terminal within the monitoring time specified with this command, the terminal will be logged out automatically. Use the no form to return to the Default setup.
Prompt
xg(config)#
Command syntax
terminal timeout { console | vty } <0-60> no terminal timeout { console | vty }
Parameter
timeout { console | vty }
Specifies the type of the terminal for setting the monitoring period during which operation remains idle.
console
Sets the monitoring period during which serial connection remains idle.
vty
Sets the monitoring period during which telnet connection remains idle.
<0-60>
Specifies the monitoring period in minutes during which operation remains idle. It can be specified in the range of 0 to
60. When 0 is specified, no-operation monitoring is not performed, and the terminal will not be logged out automatically.
Command type
Configuration command
Default
10 minutes.
Note
While the "monitor" command or the "update-system" command is being executed, no-operation monitoring is
deterred.
Example
Set the monitoring periods, during which the serial connection and Telnet connection remain idle, to 10 minutes and 5 minutes respectively.
xg# configure terminal xg(config)# terminal timeout console 10 xg(config)# terminal timeout vty 5
66/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
5.3.5 telnet-sever
Function
Enables telnet connection with the XG700. Use the no form to disable telnet connection.
Prompt
xg(config)#
Command syntax
telnet-server no telnet-server
Command type
Configuration command
Default
Disabled
Example
Enable telnet connection to the XG700.
xg(config)# telnet-server
5.3.6 terminal window
Function
Sets the screen display size in the serial connection terminal. Use the no form to return to the default setup. Also, in telnet connection, the screen size will be obtained automatically from the software in the client terminal.
Prompt
(config-line)#
Command syntax
terminal window <50-200> <12-100>
Parameter
<50-200>
Specifies the number of columns (horizontal) of the screen. It can be set in the range of 50 to 200
<12-100>
Specifies the number of lines (vertical) of the screen. It can be set in the range of 12 to 100.
Command type
Configuration command
Default
80 columns by 24 lines
67/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
5.4 System Basic Operation Commands
This section explains the basic commands, which are necessary when using CLI operation of the XG700.
5.4.1 enable
Function
Switches from the operator exec mode to the administrator exec mode. When a password is set to the "enable" command, entering the password is required. When there is an error in entering the password, entering of the password will be prompted up to three times. Additionally, after successful authentication of the password, and switching to the administrator exec mode, entering the password for the enable command will not be prompted while logged in.
Prompt
xg>
Command syntax
enable
Command type
Operation management commands
Example
Switch from the operator exec mode to the administrator exec mode using the "enable" command. The prompt character will change to "xg#."
xg> enable xg#
When a password is set to the "enable" command, enter the password. When password authentication is successful, it switches to the administrator exec mode, and the prompt character will change to "xg#."
xg> enable Password: Enter the password to "enable." xg# (The entered password is not displayed.)
5.4.2 disable
Function
Switches from the administrator exec mode to the operator exec mode.
Prompt
xg#
Command syntax
disable
Command type
Operation management commands
Example
Switch from the administrator exec mode to the operator exec mode using the "disable" command. The prompt character will change to "xg>."
xg# disable xg>
68/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
5.4.3 configure terminal
Function
Switches from the administrator exec mode to the global configuration mode.
Prompt
xg#
Command syntax
configure terminal
Command type
Operation management commands
Message
Configuration is locked by other.
Explanation
A switch in state is not possible because a terminal switching to global configuration mode exists.
Solution
After switching the terminal switching to global configuration mode to administrator EXEC mode, re-execute the command in this terminal.
Example
Switch from the administrator exec mode to the global configuration mode using the "configure terminal" command. The prompt character will change to "xg(config)#."
xg# configure terminal xg(config)#
5.4.4 exit
Function
Returns one level from the current command mode. The relationship between the current command mode and the command mode switching status after executing the "exit" command is as follows:
Current command mode Status after switch/ mode
Operator exec mode Log out Administrator exec mode Log out Global configuration mode Administrator exec mode Interface Global configuration mode Terminal edit mode Global configuration mode
Prompt
xg>, xg#, xg(config)# , xg(config-if)# , xg(config-agg)# , xg(config-line)#
Command syntax
exit
Command type
Operation management commands
Example
Switch from the global configuration mode to the administrator exec mode using the "exit" command. The prompt character will change to "xg#."
xg#(config)# exit xg#
69/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
5.4.5 logout
Function
Logs out and disconnects the session of the terminal.
Prompt
xg>, or xg#
Command syntax
logout
Command type
Operation management commands
Example
Log out and disconnect the session of the terminal.
xg# logout Connection closed by foreign host.
5.4.6 do
Function
Executes administrator exec mode commands from the global configuration mode. Using this command saves the trouble of having to return to the administrator exec mode.
Prompt
xg(config)#
Command syntax
do LINE
Parameter
LINE
Specifies the command line of the administrator exec mode to execute.
Command type
Operation management commands
Message
Can't execute this command.
Explanation
The specified command cannot be executed with the do command.
Solution
Execute a command in an appropriate mode without using the do command.
Example
Set "bridge aging-time" from the global configuration mode. And then, without returning to the administrator exec mode, check the setting status using the "show bridge" command.
xg(config)# bridge aging-time 200 xg(config)# do show bridge
Switch Basic Information 2005/08/22-12:16:17 ================================================================ Aging Time : 200 (sec) Cut-through Switching : Enabled Jumbo Frame Support
: Enabled Max Frame Size: 9216 (byte)
Independent-vlan-learning: Enabled DiffServ ToS : Disabled ================================================================
70/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
5.4.7 help
Function
Displays help on how to use CLI.
Prompt
xg>, xg#, xg(config)# , xg(config-if)# , xg(config-agg)# , xg(config-line)#
Command syntax
Help
Command type
Operation management commands
5.4.8 password
Function
Change the login password to the XG700.
Prompt
xg#
Command syntax
Password
Command type
Operation management commands
Default
"password"
Message
Bad password: too short.
Explanation
The password is too short.
Solution
Specify the password using five or more characters.
Bad password: too long.
Explanation
The password is too long.
Solution
Specify the password using 16 or less characters.
Note
Specify the password length in the range of 5 to 16 characters. Make a note of the changed password and retain it. If you forget the password, you cannot login the next time. Login password information is not included in the configuration information. Therefore, even when the configuration
information is downloaded in another device, the password information will not be reflected.
Example
Change the login password.
xg# password Changing password for admin
Old password:****** Enter the password. (The entered password is not displayed.) Enter the new password (minimum of 5, maximum of 16 characters)
Please use a combination of upper and lower case letters and numbers. Enter new password:****** Enter the password. (The entered password is not displayed.) Re-enter new password:***** Enter the new password again for confirmation. Password changed. (The entered password is not displayed.)
71/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
5.4.9 reset
Function
Restarts the XG700.
Prompt
xg#
Command syntax
reset [ factory-default ]
Parameter
[ factory-default ]
When this parameter is specified, the contents of startup-config, log, and login password will be returned to the factory default.
Command type
Operation management commands
Note
When the system is restarted without saving the information of running-config in startup-config, the information set in
running-config will be lost.
When the XG700 is restarted, connected telnet will be disconnected. Reconnect it after restart of the system is
complete.
Example
Start XG700 using the "reset" command. When the "reset" command is executed, the confirmation message is displayed.
xg# reset Do you restart system? (y/n) : Confirmation message is displayed.
When "y" or "Y" is entered for the confirmation message, reboot process will be performed. When "n" or "N" is entered for the confirmation message, reboot process will be cancelled.
5.4.10 system shutdown
Function
Stops the system of the XG700 and prepares it for power off. After executing this command, when STATUS-LED goes out, turn off the power of the XG700.
Prompt
xg#
Command syntax
system shutdown
Command type
Operation management commands
Note
When the power of the XG700 is turned off without executing the system shutdown command, the maintenance
information will not be stored normally. Furthermore, if the power is turned off while data is being written in the nonvolatile memory, it may be destroyed, and the system may not be started.
When the system is shut down without saving the information of running-config in startup-config, the information set in
running-config will be lost.
Example
When the "system shutdown" command is executed, the confirmation message is displayed.
xg# system shutdown Do you shutdown system? (y/n) : Confirmation message is displayed.
When "y" or "Y" is entered for the confirmation message, system shutdown process will be performed. When "n" or "N" is entered for the confirmation message, system shutdown process will be canceled.
72/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
5.4.11 date
Function
Displays the date/time of the current system clock.
Prompt
xg>, or xg#
Command syntax
date
Command type
Operation management commands
Output form
The current date and time is displayed in the form of "year/month/date-hour:minute:second."
xg2# date 2005/08/22-14:31:02
5.4.12 date set
Function
Changes the date/time of the current system clock.
Prompt
xg#
Command syntax
date set DATE-TIME
Parameter
DATE-TIME
Enter the date and time in the form of "MMDDhhmm[[CC]YY][.ss]."
MM
Specify the month to set in the range of 1 to 12.
DD
Specify the day to set in the range of 1 to 31.
hh
Specify the hour to set in the range of 0 to 23.
mm
Specify the minute to set in the range of 0 to 59.
[[CC]YY]
Specify the first two digits of the four digits of the year for CC. When it is omitted 20 will be specified. Specify the last two digits of the four digits of the year for YY. If CC and YY are both omitted, the year will not be changed.
[.ss] (second <0 - 59>)
Specify the second to set in the range of 0 to 59.
Command type
Operation management commands
Message
% invalid date %1$.
Explanation
The specified parameter of the date and time is incorrect. [[Inserted string]]%1$: specified date and time
Solution
Check that no mistakes have been made in the specifications for the parameter of date and time.
Example
Set the date and time of the system to 20:25:30, June 30, 2005.
xg# date set 06302025.30 (Year omitted) or xg# date set 0630202505.30 (Year specified with the last two didits) or xg# date set 063020252005.30 (Year specified with four didits)
73/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
5.4.13 date timezone
Function
Sets the time zone of the XG700. Use the no form to return to the default setup.
Prompt
xg>, or xg#
Command syntax
Date timezone gmt OFFSET No date timezone
Parameter
gmt [ OFFSET ]
Specifies the time difference from GMT (Greenwich mean time) and sets the time zone. The time difference from GMT is specified in the form of "+hhmm" (+ can be omitted) when setting forward from GMT. It is specified in the form of "-hhmm" when setting backward from GMT.
hh
Specifies the hour difference from GMT.
mm
Specifies the minute difference from GMT.
It can be set in the range of -1200 to +1300.
Command type
Operation management commands
Default
0000
Message
% invalid input %1$.
Explanation
The specified parameter of the time difference is incorrect. [[Inserted string]]%1$: specified time difference
Solution
Check that no mistakes have been made in the specifications for the parameter of time difference.
Note
The setting will be valid after restarting the system. Use the "show system information" command to confirm the settings. The setting will not be included in the configuration information. Therefore, even if the configuration information was
restored at another device, the setting of the timezone will be invalid.
Example
Set the time zone to +9:00 (JST: Japan Standard Time) from GMT.
xg# date timezone gmt +0900 or xg# date timezone gmt 0900
Then set the time zone to -1:30 from GMT.
xg# date timezone gmt -0130
74/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
5.4.14 date summer-time
Function
Sets the Day Light Saving Time. Use the no form to return to the default setup.
Prompt
xg#
Command syntax
date summer-time START_DAY[/TIME] END_DAY[/TIME] [OFFSET]
Parameter
START_DAY[/TIME]
Specifies the day/time to start the Day Light Saving Time in any form of "Mm.w.d/hhmm," "Jn/hhmm," or "n/hhmm."
Mm.w.d
Specifies the day to start the Day Light Saving Time in m, w, and d. Specify month for m (1 to 12), week for w (1 to 5), and day of the week for d (0 to 6). w = 1 means the first week where d exists, and w = 5 means the last week. d = 0 means Sunday.
Jn
Specifies the day to start the Day Light Saving Time in day of year (Julian day). In leap years, February 29th is not counted. Specify a number in the range of 1 to 365 for n.
n
Specifies the day to start the Day Light Saving Time in day of year. In leap years, February 29th is counted. Specify a number in the range of 1 to 365 for n. Specifies the following values, for the first day of each month in "Jn" specification and "n" specification.
specification Month/Day Jn specification
Common year Leap year
January 1st J1 1 1 February 1st J32 32 32 March 1st J60 60 61 April 1st J91 91 92 May 1st J121 121 122 June 1st J152 152 153 July 1st J182 182 183 August 1st J213 213 213 September 1st J244 244 245 October 1st J274 274 275 November 1st J305 305 306 December 1st J335 335 336
hh
Specifies the hour to start the Day Light Saving Time.
mm
Specifies the minute to start the Day Light Saving Time.
When hhmm is omitted, "0100" (an hour) is specified.
END_DAY[/TIME]
Specifies the day/time to end the Day Light Saving Time. The description format is the same as "START_DAY/TIME."
OFFSET
Specifies the time to set forward in the period of the Day Light Saving Time in the form of "hhmm."
hh
Specifies the hour to set forward in the period of the Day Light Saving Time with a two-digit number. It can be set in the range of 00 to 23.
mm
Specifies the minute to set forward in the period of the Day Light Saving Time with a two-digit number. It can be set in the range of 00 to 59.
When this parameter is omitted, "0100" (an hour) is specified.
Command type
Operation management commands
Default
None
Message
% DATE '%1$' is invalid
Explanation
The specification of date/time is incorrect. [[Inserted string]]%1$: incorrect parameter value is displayed.
Solution
Correct the error of the parameter, and execute it again.
75/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
% OFFSET '%1$' is invalid
Explanation
The specification of OFFSET is incorrect. [[Inserted string]]%2$: incorrect parameter value is displayed.
Solution
Correct the error of the parameter, and execute it again.
% Parameter '%1$' is too long
Explanation
Specification of the parameter is too long. [[Inserted string]]%1$: incorrect parameter value is displayed.
Solution
Correct the error of the parameter, and execute it again.
% DATE '%1$' is too long
Explanation
Specification of the date is too long. [[Inserted string]]%1$: incorrect parameter value is displayed.
Solution
Correct the error of the parameter, and execute it again.
% Type of start-day and end-day is inconsistency
Explanation
Different forms of dates are specified for the start date and end date to the parameters of the Day Light Saving Time.
Solution
Make the forms of dates of the start date and end date of the Day Light Saving Time (Mm.w.d/ Jn/ n) consistent, and execute it again.
Note
The setting will be valid after restarting the system. Use the "show system information" command to confirm the settings. The setting will not be included in the configuration information. Therefore, even if the configuration information was
restored at another device, the setting of the timezone will be invalid.
Example
Set the Day Light Saving Time (from 2:00 on Sunday of the first week in April to 02:00 on Sunday of the fifth week in October, with the time difference of an hour).
xg# date summer-time M4.1.0/0200 M10.5.0/0200 0100
76/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
5.4.15 ping
Function
Checks if communication with the specified host is possible by sending ICMP Echo Request packet to the specified host from the manage LAN interface of the XG700 and receiving ICMP Echo Reply packet.
Prompt
xg>, or xg#
Command syntax
ping HOST [ count <1-100> ]
Parameter
HOST
Specifies the hostname or IP address to check.
count <1-100>
Sets the count to transmit. 1 to 100. If omitted, 10 will be specified. Press Ctrl + C to abort ping process.
Command type
Operation management commands
Output form (when the host to check is working normally)
xg2# ping white PING white (192.168.1.1) from 192.168.1.2 : 56(84) bytes of data.
64 bytes from white (192.168.1.1): icmp_seq=1 ttl=64 time=0.780 ms There is a response. 64 bytes from white (192.168.1.1): icmp_seq=2 ttl=64 time=0.592 ms There is a response.
               
--- white ping statistics --- Displayed after aborting the process pressing Ctrl+ C. 5 packets transmitted, 5 received, 0% loss, time 4041ms rtt min/avg/max/mdev = 0.549/0.619/0.724/0.060 ms
Output form (when the host to check is in trouble)
xg2# ping blue PING blue (192.168.1.3) from 192.168.1.2 : 56(84) bytes of data. There is no response. 292 packets transmitted, 0 received, 100% loss, time 293516ms Displayed after aborting the process
pressing Ctrl+ C.
Message
ping: unknown host %1$.
Explanation
The specified hostname is incorrect. [[Inserted string]]%1$: specified hostname
Solution
Review the hostname, and execute it again.
77/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
5.4.16 enable password
Function
Sets the password for the enable command. Use the no form to enable the password protection.
Prompt
xg(config)#
Command syntax
enable password
no enable password
Parameter
password
Specifies the password in enable. After executing the command, entering of the password will be prompted. (Enter twice for confirmation.) Specify the password length in the range of five to 16 characters.
Command type
Configuration command
Default
None
Note
The set password will be encoded and reflected in running-config. The content of the password will not be displayed by any means after executing the command. Make a note of the set
password and retain it.
Example
Set the enable password from the global configuration mode using the "enable password" command. And then, return to the administrator exec mode, execute "show running-config," and the encoded password content will be displayed with "enable encryption-password."
xg(config)# enable password Enter password: Enter the password. (The entered password is not displayed.) Re-enter password: Enter the password again for confirmation. (The entered password is not displayed.)
xg(config)# exit xg# show running-config
       
enable encryption-password 4DUzjKbFg9.iU The password is encoded and output. !
78/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
5.4.17 banner
Function
Sets the banner string to display when logging in to the XG700. Use the no form to deter the banner string to display.
Prompt
xg(config)#
Command syntax
banner login LINE banner login default
no banner
Parameter
login LINE
Sets a banner string.
login default
Returns the banner string to default ("XG700 firmware identification information").
Command type
Configuration command
Default
"XG700 firmware identification information" The firmware identification information is the same information as displayed in FirmWare[1] or FirmWare[2] of the "
show
system information" command.
Example
Set the banner string to "Welcome to XG700."
xg(config)# banner login Welcome to XG700
79/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
5.4.18 ntp-server
Function
Synchronizes the specified NTP server with the system time, using NTP (Network Time Protocol) Version3. Up to four NTP servers can be registered. Use the no form to return the setting to default.
Prompt
xg(config)#
Command syntax
ntp-server host HOST ntp-server polling MINUTES ntp-server timeout SECONDS
no ntp-server host HOST no ntp-server polling no ntp-server timeout
Parameter
host HOST
Specifies the hostname or IP address of an NTP server. IP addresses that can be set are: 1.0.0.1 - 126.255.255.254, 128.0.0.1 - 191.255.255.254, and 192.0.0.1 -
223.255.255.254.
polling MINUTES
Specifies the time interval to synchronize the time with an NTP server in minutes. The value can be set in the range of 1 to 1440.
timeout SECONDS
Specifies the response latency from an NTP server in seconds. The value can be set in the range of 1 to 4.
Command type
Configuration command
Default
host : None polling: 60 minutes timeout: 1 second
Message
% hostname can register up to 4.
Explanation
The number of hosts that can be set to an NTP server is four.
Solution
After deleting unnecessary NTP server settings, execute it again.
% Cannot find %1$
Explanation
The specified host cannot be found. [[Inserted string]]%1$: specified hostname
Solution
Check whether the hostname is correct, or the hostname is registered.
% Hostname is too long
Explanation
The specified hostname is too long.
Solution
Check whether the hostname is correct.
% Invalid IP-address.
Explanation
The specified format of the IP address or specified content is incorrect.
Solution
Specify the IP address in a correct format and execute it again.
Note
Set the time zone and Day Light Saving Time to a correct value beforehand, and reboot a system. Then, set this
function.
Example
Register an NTP server with IP address "192.168.1.1" and set the interval for time synchronization to 600 minutes.
xg(config)# ntp-server host 192.168.1.1 xg(config)# ntp-server polling 600
80/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
5.5 Configuration File Operation Command
This section explains the commands related to configuration file and file operation in the volatile memory.
5.5.1 copy running-config startup-config
Function
Stores the configuration file (running-config) in the volatile memory, on which the system is currently operating, to startup-config in nonvolatile memory. When changing the setting of running-config, use the setting when it is used after restarting the system.
Prompt
xg#
Command syntax
copy running-config startup-config
Command type
Operation management commands
Note
When the system is restarted without saving the information of running-config in startup-config, the information set in
running-config will be lost.
Be sure to upload the contents of the startup-config file to a TFTP server because the contents will be overwritten.
Example
Store running-config in startup-config. Then, check the information of startup-config using the show command.
xg# copy running-config startup-config xg# show startup-config
5.5.2 show running-config
Function
Displays the configuration information (running-config) in the currently operating volatile memory.
Prompt
xg#
Command syntax
show running-config
Command type
Operation management commands
Example
Display the content of running-config.
xg# show running-config
81/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
5.5.3 show running-config (redirect)
Function
Copies the configuration information (running-config) in the currently operating volatile memory to the volatile memory. Also, it can be copied directly to a file in the TFTP server using the "tftp" command.
Prompt
xg#
Command syntax
show running-config > CONFIG-FILE show running-config | redirect CONFIG-FILE
show running-config | tftp HOST REMOTE-FILE
Parameter
> CONFIG-FILE
Specifies the file name to copy in the volatile memory.
| redirect CONFIG-FILE
Specifies the file name to copy in the volatile memory. It means the same as "> CONFIG-FILE."
Follow the rules below in specifying file names:
File names must start with alphabet ([a - z], [A - Z]).
Characters usable for file names are: alphabet ([a - z], [A - Z]), numerical characters ([0 - 9]),
underscore (_), and period (.)
| tftp
Directly copies to a file on the TFTP server.
HOST
Specify the hostname of the TFTP server or IP address. IP addresses that can be set are: 1.0.0.1 - 126.255.255.254, 128.0.0.1 - 191.255.255.254, and 192.0.0.1 -
223.255.255.254.
REMOTE-FILE
pacifies the file name to copy onto the TFTP server.
Command type
Operation management commands
Message
% tftp: %1$: Host name lookup failure
Explanation
The specified hostname does not exist. [[Inserted string]]%1$: specified hostname
Solution
Check whether the specified hostname is correct.
% tftp: server says: %1$
Explanation
An error has been received from the TFTP server. [[Inserted string]]%1$: content of error message received from the TFTP server. The content of message depend on the type of the TFTP server. For example, there is a message as below.
File not found: There are no files in the TFTP server.
Access violation: File permission error has occurred in the TFTP server.
Not allowed to overwrite existing files: The file in the TFTP server cannot be overwritten.
File already exists: There are files in the TFTP server.
Unknown transfer ID: Process will be aborted in time out.
Solution
Take actions in accordance with the message received from the TFTP server.
% tftp: last timeout
Explanation
There is no response from the TFTP server. There is a possibility of network communication error with the management LAN, or the setting of time out of the TFTP server may be too short.
Solution
Check whether there is no problem in network connection with the TFTP server using the "ping" command. If the problem persists, review the setting of time out of the TFTP server.
% Invalid IP-address.
Explanation
The specified format of the IP address or specified content is incorrect.
Solution
Specify the IP address in a correct format and execute it again.
82/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
Note
When copied in the volatile memory, the information will be lost when the system is restarted.
If uploading is necessary, restart the system after storing the data in the TFTP server using the "tftp" command.
If there are no files in the TFTP server, or directories are specified, an error may occur. (it depends on the functionality
of the TFTP server)
If timeout setting of the TFTP server is too short, an error may occur. (it depends on the functionality of the TFTP
server)
Example
Copy the content of running-config to the file name "run_conf." Then, upload the copied "run_conf" file with the file name "run_conf_20050822" in the TFTP server called "host1."
xg# show running-config > run_conf xg# tftp put host1 run_conf run_conf_20050822
Copy the content of running-config directly to a file in the TFTP server "host1."
xg# show running-config | tftp host1 run_conf run_conf_20050822
5.5.4 show startup-config
Function
Displays the configuration information (startup-config) stored in the nonvolatile memory of the XG700.
Prompt
xg#
Command syntax
show startup-config
Command type
Operation management commands
Example
Display the content of startup-config.
xg# show startup-config
83/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
5.5.5 show startup-config (redirect)
Function
Copies the configuration information (startup-config) stored in the nonvolatile memory of the XG700 to the volatile memory. Also, it can be copied directly to a file in the TFTP server using the "tftp" command.
Prompt
xg#
Command syntax
show startup-config > CONFIG-FILE show startup-config| redirect CONFIG-FILE
show startup-config | tftp HOST REMOTE-FILE
Parameter
> CONFIG-FILE
Specifies the file name to copy in the volatile memory.
| redirect CONFIG-FILE
Specifies the file name to copy in the volatile memory. It means the same as "> CONFIG-FILE."
Follow the rules below in specifying file names:
File names must start with alphabet ([a - z], [A - Z]).
Characters usable for file names are: alphabet ([a - z], [A - Z]), numerical characters ([0 - 9]),
underscore (_), and period (.)
| tftp
Directly copies to a file on the TFTP server.
HOST
Specify the hostname of the TFTP server or IP address. IP addresses that can be set are: 1.0.0.1 - 126.255.255.254, 128.0.0.1 - 191.255.255.254, and 192.0.0.1 -
223.255.255.254.
REMOTE-FILE
Specifies the file name to copy onto the TFTP server.
Command type
Operation management commands
Message
% tftp: %1$: Host name lookup failure
Explanation
The specified hostname does not exist. [[Inserted string]]%1$: specified hostname
Solution
Check whether the specified hostname is correct.
% tftp: server says: %1$
Explanation
An error has been received from the TFTP server. [[Inserted string]]%1$: content of error message received from the TFTP server. The content of message depend on the type of the TFTP server. For example, there is a message as below.
File not found: There are no files in the TFTP server.
Access violation: File permission error has occurred in the TFTP server.
Not allowed to overwrite existing files: The file in the TFTP server cannot be overwritten.
File already exists: There are files in the TFTP server.
Unknown transfer ID: Process will be aborted in time out.
Solution
Take actions in accordance with the message received from the TFTP server.
% tftp: last timeout
Explanation
There is no response from the TFTP server. There is a possibility of network communication error with the management LAN, or the setting of time out of the TFTP server may be too short.
Solution
Check whether there is no problem in network connection with the TFTP server using the "ping" command. If the problem persists, review the setting of time out of the TFTP server.
% Invalid IP-address.
Explanation
The specified format of the IP address or specified content is incorrect.
Solution
Specify the IP address in a correct format and execute it again.
84/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
Note
When copied in the volatile memory, the information will be lost when the system is restarted.
If uploading is necessary, restart the system after storing the data in the TFTP server using the "tftp" command.
If there are no files in the TFTP server, or directories are specified, an error may occur. (it depends on the functionality
of the TFTP server)
If timeout setting of the TFTP server is too short, an error may occur. (it depends on the functionality of the TFTP
server)
Example
Copy the content of running-config to the file name "run_conf." Then, upload the copied "run_conf" file with the file name "run_conf_20050822" in the TFTP server called "host1."
xg# show startup-config > start_conf xg# tftp put host1 start_conf start_conf_20050822
Copy the content of running-config directly to a file in the TFTP server "host1."
xg# show startup-config | tftp host1 start_conf_20050822
5.5.6 copy    startup-config
Function
Saves the configuration information stored in the volatile memory of the XG700 to the nonvolatile memory as startup-config. Also, the configuration information can be loaded from the TFTP server using the "tftp" command. After executing this command, it is necessary to restart the system using the "reset" command, in order to reflect the set content of startup-config.
Prompt
xg#
Command syntax
copy local CONFIG-FILE startup-config copy tftp HOST REMOTE-FILE startup-config
Parameter
local CONFIG-FILE
Specifies the file name in the volatile memory, from which the data is copied.
Follow the rules below in specifying file names:
File names must start with alphabet ([a - z], [A - Z]).
Characters usable for file names are: alphabet ([a - z], [A - Z]), numerical characters ([0 - 9]),
underscore (_), and period (.)
tftp HOST
Directly loads the files stored in the TFTP server. Specify the hostname of the TFTP server or IP address for HOST. IP addresses that can be set are: 1.0.0.1 - 126.255.255.254, 128.0.0.1 - 191.255.255.254, and 192.0.0.1 -
223.255.255.254.
REMOTE-FILE
Specifies the file name stored on the TFTP server.
Command type
Operation management commands
Message
% Not found file: %1$
Explanation
The specified file cannot be found. [[Inserted string]]%1$: specified file name
Solution
Check the file name, and execute it again.
% Config-file(header) is invalid: %1$
Explanation
The specified file is not the configuration file format. [[Inserted string]]%1$: specified file name
Solution
Check the content of the file.
% Config-file(version/level) is invalid: %1$
Explanation
The configuration uploaded using a new version of firmware may not be used with an old version of firmware. [[Inserted string]]%1$: specified file name
Solution
Check the content of the file.
85/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
% tftp: %1$: Host name lookup failure
Explanation
The specified hostname does not exist. [[Inserted string]]%1$: specified hostname
Solution
Check whether the specified hostname is correct.
% tftp: server says: %1$
Explanation
An error has been received from the TFTP server. [[Inserted string]]%1$: content of error message received from the TFTP server. The content of message depend on the type of the TFTP server. For example, there is a message as below.
File not found: There are no files in the TFTP server.
Access violation: File permission error has occurred in the TFTP server.
Solution
Take actions in accordance with the message received from the TFTP server.
% tftp: write: No space left on device
Explanation
There is no free space for files to use as a work area on the XG700. Some of the files being imported may remain in the XG700.
Solution
Delete the files on the XG700, which are being processed for import, and unnecessary files using the "delete" command, and execute it again.
% tftp: last timeout
Explanation
There is no response from the TFTP server. There is a possibility of network communication error with the management LAN, or the setting of time out of the TFTP server may be too short.
Solution
Check whether there is no problem in network connection with the TFTP server using the "ping" command. If the problem persists, review the setting of time out of the TFTP server.
% Invalid IP-address.
Explanation
The specified format of the IP address or specified content is incorrect.
Solution
Specify the IP address in a correct format and execute it again.
Note
The startup-config uploaded using a new version of firmware may not be downloaded with an old version of firmware.
Example
Import the "start_conf_20050822" file stored on the TFTP server "host1" with the file name "start_conf." Then, download the imported "start_conf" file to startup-config.
xg# tftp get host1 start_conf_20050822 start_conf xg# copy local start_conf startup-config
Download the "start_conf_20050822" file stored on the TFTP server "host1 directly to startup-config.
xg# copy tftp host1 start_conf_20050822 startup-config
86/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
5.5.7 dir/ls
Function
Lists the files in the volatile memory of the XG700.
Prompt
xg#
Command syntax
dir ls
Command type
Operation management commands
Output form
xg# dir Update-time File-size File-name
- 2005/08/22 19:23:03 913
system_info_20050822
- 2005/08/22 19:22:41 2,604 start_conf_20050822
- 2005/08/22 19:22:19
2,655 run_conf_20050822
unused: 14,639,104 bytes
Update-time
Displays the file update time.
File-size
Displays the file size (byte).
File-name
Displays the file name.
unused
Displays the size of free memory.
Example
Copy running-config, startup-config and the system information to files in the volatile memory, and then list the files in the volatile memory.
xg# show running-config > run_conf_20050822 xg# show startup-config > start_conf_20050822 xg# show system information > system_info_20050822 xg# ls
Update-time File-size File-name
- 2005/08/22 19:23:03 913 system_info_20050822
- 2005/08/22 19:22:41
2,604 start_conf_20050822
- 2005/08/22 19:22:19 2,655 run_conf_20050822
unused: 14,639,104 bytes
87/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
5.5.8 delete
Function
Deletes the files in the volatile memory of the XG700.
Prompt
xg#
Command syntax
delete FILE-NAMES
Parameter
FILE-NAMES
Specifies the name of the file to delete in the volatile memory. Specify a generic designation with "*" (asterisk) for the file name, and files whose "*" part corresponds to the file name of arbitrary strings will be deleted.
Command type
Operation management commands
Message
% cannot remove `%1$': No such file or directory
Explanation
The specified file does not exist. [[Inserted string]]%1$: specified file name
Solution
Check whether the specified file is correct.
Example
Delete a file with the file name "run_conf_20050822".
xg# delete run_conf_20050822
Specify a generic designation with "run_conf_*" after a file name. All files whose file name starts with "run_conf_" will be deleted.
xg# delete run_conf_*
Specify only "*" for the file name to delete all user files on the volatile memory.
xg# delete *
88/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
5.5.9 rename
Function
Changes the file names in the volatile memory.
Prompt
xg#
Command syntax
rename FROM-NAME TO-NAME
Parameter
FROM-NAME
Specifies the file name to change.
TO-NAME
Specifies a file name to which the file name will be changed.
Follow the rules below in specifying file names:
File names must start with alphabet ([a - z], [A - Z]).
Characters usable for file names are: alphabet ([a - z], [A - Z]), numerical characters ([0 - 9]),
underscore (_), and period (.)
Command type
Operation management commands
Message
% unable to rename `%1$': No such file or directory
Explanation
The specified file does not exist. [[Inserted string]]%1$: specified file name
Solution
Check whether the specified file is correct.
Example
Change a file with the file name "run_conf_20050822" to "run_conf."
xg# rename run_conf_20050822 run_conf
89/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
5.5.10 tftp get
Function
Downloads files on the TFTP server into the volatile memory of the XG700.
Prompt
xg#
Command syntax
tftp get HOST REMOTE-FILE [ LOCAL-FILE ]
Parameter
HOST
Specify the hostname of the TFTP server or IP address. IP addresses that can be specified are: 1.0.0.1 - 126.255.255.254, 128.0.0.1 - 191.255.255.254, and 192.0.0.1 -
223.255.255.254.
REMOTE-FILE
Specifies the file name of the files stored on the TFTP server.
[ LOCAL-FILE ]
Specifies the file name to save in the volatile memory. When this parameter is omitted, it will be the same file name as "REMOTE-FILE."
Command type
Operation management commands
Message
% tftp: %1$: Host name lookup failure
Explanation
The specified hostname does not exist. [[Inserted string]]%1$: specified hostname
Solution
Check whether the specified hostname is correct.
% tftp: server says: %1$
Explanation
An error has been received from the TFTP server. [[Inserted string]]%1$: content of error message received from the TFTP server. The content of message depend on the type of the TFTP server. For example, there is a message as below.
Access violation: File permission error has occurred in the TFTP server.
Could not open requested file for reading: There are no files in the TFTP server.
Solution
Take actions in accordance with the message received from the TFTP server.
% tftp: write: No space left on device
Explanation
There is not enough free space to store the files on the XG700. Some of the files being imported will remain on the XG700.
Solution
After deleting the files, which are being processed for import, and unnecessary files using the "delete" command, execute it again.
% tftp: last timeout
Explanation
There is no response from the TFTP server. There is a possibility of network communication error with the management LAN, or the setting of time out of the TFTP server may be too short.
Solution
Check whether there is no problem in network connection with the TFTP server using the "ping" command. If the problem persists, review the setting of time out of the TFTP server.
% local file: No such file or directory
Explanation
The specified file does not exist on the XG700.
Solution
Check the status of the file on the XG700.
% Invalid IP-address.
Explanation
The specified format of the IP address or specified content is incorrect.
Solution
Specify the IP address in a correct format and execute it again.
Example
Specify the "start_conf_20050822" file, which has been uploaded to the TFTP server "host1", with the file name "start_conf", and then import it to the XG700. Then, check whether the file size of the file imported with the "tftp" command is persistent using the dir/(ls) command.
xg# tftp get host1 start_conf_20050822 start_conf xg# ls Update-time File-size File-name
- 2005/08/22 19:22:41 2,604 start_conf
90/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
5.5.11 tftp put
Function
Uploads the files into the volatile memory to the TFTP server.
Prompt
xg#
Command syntax
tftp put HOST LOCAL-FILE [ REMOTE-FILE ]
Parameter
HOST
Specify the hostname of the TFTP server or IP address. IP addresses that can be specified are: 1.0.0.1 - 126.255.255.254, 128.0.0.1 - 191.255.255.254, and 192.0.0.1 -
223.255.255.254.
LOCAL-FILE
Specifies a file name to upload.
[ REMOTE-FILE ]
Specifies the file name to use when saving on the TFTP server. When this parameter is omitted, it will be the same file name as "LOCAL-FILE."
Command type
Operation management commands
Message
% tftp: %1$: Host name lookup failure
Explanation
The specified hostname does not exist. [[Inserted string]]%1$: specified hostname
Solution
Check whether the specified hostname is correct.
% tftp: server says: %1$
Explanation
An error has been received from the TFTP server. [[Inserted string]]%1$: content of error message received from the TFTP server. The content of message depend on the type of the TFTP server. For example, there is a message as below.
File not found: There are no files in the TFTP server.
Access violation: File permission error has occurred in the TFTP server.
Not allowed to overwrite existing files: The file in the TFTP server cannot be overwritten.
File already exists: There are files in the TFTP server.
Unknown transfer ID: Process will be aborted in time out.
Solution
Take actions in accordance with the message received from the TFTP server.
% tftp: last timeout
Explanation
There is no response from the TFTP server. There is a possibility of network communication error with the management LAN, or the setting of time out of the TFTP server may be too short.
Solution
Check whether there is no problem in network connection with the TFTP server using the "ping" command. If the problem persists, review the setting of time out of the TFTP server.
% local file: No such file or directory
Explanation
The specified file does not exist on the XG700. [[Inserted string]]%1$: specified file name
Solution
Check the status of the file on the XG700.
% Invalid IP-address.
Explanation
The specified format of the IP address or specified content is incorrect.
Solution
Specify the IP address in a correct format and execute it again.
Note
If there are no specified files in the TFTP server, or directories are specified, an error may occur. (it depends on the
functionality of the TFTP server)
When transferring a file with a large file size, if the time out is set short on the TFTP server, an error may occur. (it
depends on the functionality of the TFTP server)
In order to check whether the file has been transferred successfully, check that the file size displayed by the "dir" or "ls"
command is identical to the size of the file transferred onto the TFTP server.
Example
Copy the content of running-config to the file name "run_conf." Then, upload the copied "run_conf" file with the file name "run_conf_20050822" in the TFTP server called "host1."
xg# show running-config > run_conf xg# tftp put host1 run_conf run_conf_20050822
91/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
5.6 Switch Basic Configuration Commands
This section explains configuration commands related to general operation of the switch.
5.6.1 clear bridge mac-address-table
Function
Deletes dynamically-learned MAC addresses from the MAC address table.
Prompt
xg#
Command syntax
#clear bridge mac-address-table dynamic { all | port <1-12> | agg-port <1-6> }
Parameter
dynamic { all | port <1-12> | agg-port <1-6> }
Specifies the port to delete the MAC address.
all
Deletes MAC addresses dynamically-learned at every port.
port <1-12>
Specifies the port number to delete.
agg-port <1-6>
Specifies the aggregation group number to delete.
Command type
Operation management commands
Message
% Aggregation-port not bound to bridge
Explanation
The specified aggregation group is not created.
Solution
Check whether the specified aggregation group number is correct.
% Can't clear port which belongs to an aggregation port
Explanation
A port consisting of a link aggregation cannot be specified and deleted.
Solution
Specify an aggregation group and delete the MAC address.
Example
Delete all dynamically-learned MAC addresses.
xg# clear bridge mac-address-table dynamic all
92/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
5.6.2 show bridge
Function
Displays the basic configuration file of the switch.
Prompt
xg> or xg#
Command syntax
show bridge
Command type
Operation management commands
Output form
xg# show bridge Switch Basic Information 2005/08/22-12:12:15 =============================================================================== Aging Time : {Disabled | <10-1756> } (sec) Cut-through Switching : {Disabled | Enabled } Jumbo Frame Support
: {Disabled | Enabled Max Frame Size: 9216 (byte) }
Independent-vlan-learning
: {Disabled | Enabled }
DiffServ ToS : {Disabled | Enabled } ===============================================================================
Aging Time
Displays the ageing time of the MAC address.
Disabled
Aging is disabled.
<10-1756> (sec)
Aging time (the time until a dynamically-learned MAC address expires) is displayed.
Cut-through Switching
The state whether cut-through is enabled as the switching method is displayed.
Disabled
The switching method is Store-and-forward.
Enabled
The switching method is Cut-through.
Jumbo Frame Support
The state whether jumbo frames are supported is displayed.
Disabled
Disables jumbo frame forwarding.
Enabled Max Frame Size
Displays the maximum size of a jumbo frame that is in forwarding mode.
Independent-vlan-learning
The state whether the IVL (Independent Vlan Learning) mode is enabled is displayed.
Disabled
The learning mode is SVL (Shared Vlan Learning) mode.
Enabled
The learning mode is IVL(Independent Vlan Learning) mode.
DiffServ ToS
The QoS state based on ToS of DiffServ is displayed.
Disabled
DiffServ is disabled.
IPv4
DiffServ of IPv4 is enabled.
IPv6
DiffServ of IPv6 is enabled.
Example
Display the basic configuration file of the switch.
xg# show bridge
93/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
5.6.3 show bridge mac-address-table
Function
Displays the MAC address information registered in the MAC address table.
Prompt
xg> or xg#
Command syntax
show bridge mac-address-table [ { static | dynamic | igmp-snooping } ]
Parameter
static
Displays only static MAC addresses.
dynamic
Displays only dynamic MAC addresses.
igmp-snooping
Displays MAC addresses registered in IGMP snooping.
When the parameters are omitted, all MAC addresses will be displayed.
Command type
Operation management commands
Output form
xg# show bridge mac-address-table Mac Address Table Information 2005/08/22-12:12:15
Static Mac-address Table
-----------------------------------------------------------------------­Mac-address Vlan-id Destination-port
-------------- -------- --------------------
0001.123a.4321 vlan-1 port 2
0002.123a.4321 vlan-1 port 4
0003.123a.4321 vlan-3 filter ef01.123a.4321 vlan-3 port 1,2,3,4,5,6,7,8
Dynamic Mac-address Table
---------------------------------------------------------------­Mac-address Vlan-id Destination-port
-------------- -------- --------------------
0004.123a.4321 vlan-1 port 4
IGMP snooping learning group Mac-address Table
---------------------------------------------------------------­Mac-address Vlan-id
Destination-port
-------------- --------- ------------------------------------­ (nothing) ================================================================
MAC addresses are sorted in the ascending order.
Mac-address
The destination MAC address to which it belongs is displayed.
Vlan-id
VLAN ID to which it belongs is displayed. When the learning mode of the MAC address table is SVL (Shared Vlan Learning), "-------" is displayed.
Destination-port
The destination port number is displayed.
port <1-12>
The destination port number is shown. For multicast MAC addresses, multiple port numbers are displayed.
filter
It means MAC addresses to be filtered.
CPU
This is used for the internal control of the XG700.
Message
% IGMP snooping is not enabled.
Explanation
Since Global IGMP snooping is disabled, igmp-snooping cannot be specified.
Solution
After enabling IGMP snooping, specify igmp-snooping.
94/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
Example
Display the content of all MAC address tables.
xg# show bridge mac-address-table Mac Address Table Information 2005/08/22-12:12:15 =================================================================== Static Mac-address Table
------------------------------------------------------------------­Mac-address Vlan-id Destination-port
-------------- -------- --------------------
0001.123a.4321 vlan-1 port 2
0002.123a.4321 vlan-1 port 4
0003.123a.4321 vlan-3 filter ef01.123a.4321 vlan-3 port 1 2 3 4 5 6 7 8
Dynamic Mac-address Table
------------------------------------------------------------------­Mac-address Vlan-id Destination-port
-------------- -------- --------------------
0004.123a.4321 vlan-1 port 4
IGMP snooping learning group Mac-address Table
------------------------------------------------------------------­Mac-address Vlan-id Destination-port
-------------- --------- ----------------------------------------- (nothing) ===================================================================
By combining with the "| include" command, only information of specific conditions can be narrowed down and displayed. Display the information whose MAC address is 0002.123a.4321.
xg# show bridge mac-address-table | include port 4
0002.123a.4321 vlan-1 port 4
View the MAC address information forwarded to port 4 among static MAC addresses.
xg# show bridge mac-address-table static | include port 4
0002.123a.4321 vlan-1 port 4
0004.123a.4321 vlan-1 port 4
5.6.4 bridge forward-mode
Function
For the switching method of frame forwarding, the XG700 supports two types of Store-and-forward and Cut-through.
Store-and-forward
After a full frame is received, an error check is performed before forwarding.
Cut-through
After reading the data up to the beginning 64 bytes of a received frame, forwarding is immediately performed. Basically, FSC errors are not checked, which allows low latency forwarding. Use the no form return to the default setup.
Prompt
xg(config)#
Command syntax
bridge forward-mode { cut-through | store-and-forward } no bridge forward-mode
Parameter
forward-mode { cut-through | store-and-forward }
Specifies the switching method.
cut-through
Sets to Cut-through forwarding.
store-and-forward
Sets to Store-and-forward forwarding.
Command type
Configuration command
Default
store-and-forward
Example
Set the switching method to Cut-through.
xg(config)# bridge forward-mode cut-through
95/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
5.6.5 bridge jumbo-frame
Function
Sets the maximum frame size of the jumbo frame. The maximum frame size that can be forwarded is 15360 byte. Use the no form to return to the default setup.
Prompt
xg(config)#
Command syntax
bridge jumbo-frame [ { 9216 | 12288 | 15360 } ] no bridge jumbo-frame
Parameter
jumbo-frame [ { 9216 | 12288 | 15360 } ]
Specifies the maximum frame size of the jumbo frame.
9216
Sets the permitted jumbo frame size to 9216 byte.
12288
Sets the permitted jumbo frame size to 12288 byte.
15360
Sets the permitted jumbo frame size to 15360 byte.
When this parameter is omitted, 9216 is specified.
Command type
Configuration command
Default
None
Message
% Flowcontrol was changed to only-receive.
Explanation
When 15360 bytes is specified to the maximum frame size of the jumbo frame, Flow Control of every switch port has been changed to "only-receive" (Flow Control is valid only in receiving).
Solution
When the setting of Flow Control is used in "send-receive," set the jumbo frame to other than 15360.
Note
On forwardable frame size
The forwardable frame size when Jumbo Frame Forwarding is disabled is as follows:
Frame status Forwardable frame size
VLAN-untagged 1518 bytes VLAN-tagged 1522 bytes User VLAN + VLAN-tagged 1526 bytes
When Jumbo Frame Forwarding is permitted, the forwardable frame size will include the sizes of VLAN tag and user VLAN tag.
When the settings of Jumbo Frame Forwarding is changed, link down will occur at every port. Therefore, if the
spanning tree is active, STP State will be in the state of Discard. And as Rx signals are optimized, it takes about 15 seconds to become link up again.
When the settings of Jumbo Frame Forwarding is changed, statistical values will be cleared. Therefore, if this
command is executed while the monitor command is being executed, the statistics of the monitor command will temporarily show unusual values. In that case, either wait for the next automatic update time of the statistics, or execute the monitor command again.
When the jumbo frame size is set to 15360 bytes, Flow Control setting of every port will be "only-receive" (only
receiving is enabled).
Violation due to port security, loop back alert, and storm control will be cleared.
Example
Set Jumbo Frame to permit up to 9216 bytes.
xg(config)# bridge jumbo-frame 9216
96/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
5.6.6 bridge learn-mode
Function
Sets the MAC address table learning mode. The XG700 supports two types of SVL (Shared Vlan Learning) and IVL (Independent VLAN Learning).
SVL(Shared VLAN Learning)
Regardless of VLAN to which a frame belongs, it is learned as a MAC address entry (mapping of MAC address for port) common to every VLAN.
IVL(Independent VLAN Learning)
It is learned as a MAC address entry (mapping of MAC address for port) different in every VLAN.
Use the no form to return to the default setup.
Prompt
xg(config)#
Command syntax
bridge learn-mode { ivl | svl } no bridge learn-mode
Parameter
learn-mode { ivl | svl }
Specifies the MAC address table learning mode.
ivl
Sets to IVL (Independent Vlan Learning).
svl
Sets to SVL(Shared Vlan Learning).
Command type
Configuration command
Default
svl
Message
% Setting becomes effective by rebooting.
Explanation
The changed setting becomes enabled after the XG700 is restarted.
Solution
In order to enable the setting, after executing "copy running-config startup-config," restart the XG700 using the "reset" command.
Note
When the learning mode is changed, the setting is not changed immediately, and will be enabled after the system is
restarted. In order to enable the setting, after reflecting the setting to startup-config using the "copy running-config startup-config" command, restart the XG700 using the "reset" command.
When changing from SVL to IVL, MAC addresses registered statically in SVL will be registered in VLAN ID 1. Also,
when changing from IVL to SVL, MAC addresses registered statically in IVL will be all cleared, except for the ones registered in VLAN ID 1.
Example
This is used to set the MAC address table learning mode to IVL (Independent VLAN Learning). Then, move to the administrator exec mode, reflect the setting in startup-config, and restart the system.
xg(config)# bridge learn-mode ivl xg(config)# exit xg# copy running-config startup-config xg# reset
97/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
5.6.7 bridge mac-address-table
Function
By registering static MAC addresses to the MAC address table, frames with specific destination MAC addresses can be forwarded to a specified port. When a unicast static MAC address is registered, dynamic MAC addresses will not be learned, even when frames sent from the same MAC address are received from a different port. Also, by registering multicast static MAC addresses, frames to be sent to specific multicast can be assigned so that they will be forwarded only to the port this switch specifies. In this case, set the multicast forwarding mode to "forward-unregistered-mac" or "filter-unregistered-mac" using the "multicast-forwarding" command. Use the no form to delete registered static MAC addresses.
Prompt
xg(config)#
Command syntax
bridge mac-address-table static MAC [ vlan <1-4094> ] [ port <1-12> [ <1-12>  ] ] [ agg-port <1-6> [ <1-6> ] ] no bridge mac-address-table static MAC [ vlan <1-4094> ]
Parameter
static MAC
Specifies static MAC addresses. When a frame with this destination address is received, it will be forwarded to the port of the specified switch. The MAC address format is "HHHH.HHHH.HHHH," which is a 12-digit hexadecimal number with a period (.) inserted between every four digits.
A unicast MAC address can register the information on only one port in the MAC address table. (As
for IVL, a port per VLAN) Therefore, if the same unicast MAC address is already set to a different port, it will be replaced with the setting of a newly executed command.
A multicast MAC address can register the information on multiple ports in the MAC address table. If
the same multicast MAC address is already set to a different port, the setting of a newly executed command will be added to it.
As for a broadcast address (FFFF.FFFF.FFFF), although it can register the information on multiple
ports, it will be replaced with the setting of the last executed command.
The following reserved multicast addresses, prescribed under the IEEE802.1D, cannot be registered.
In the range of 0180.C200.0000 - 0180.C200.0010
In the range of 0180.C200.0020 - 0180.C200.002F
vlan <1-4094>
Specifies VLAN to register the MAC address. Specifies VLAN in the range of 1 to 4094. This parameter is valid only when the learning mode of the MAC address table is IVL (Independent Vlan Learning). For SVL (Shared Vlan Learning), this parameter is not necessary.
port <1-12> [ <1-12> ]
Specifies the port number to which a frame is forwarded. This parameter is specified in the range of 1 to the maximum port number (=12). Additionally, only when MAC addresses to register are static multicast addresses (including broadcast addresses), multiple addresses can be specified by separating the port numbers with " " (space).
agg-port <1-6> [ <1-6> ]
Specifies the aggregation group number to which a frame is forwarded. This parameter is specified in the range of 1 to
6. Additionally, only when MAC addresses to register are static multicast addresses (including broadcast addresses), multiple addresses can be specified by separating the aggregation group numbers with " " (space).
Command type
Configuration command
Default
Only broadcast address (FFFF.FFFF.FFFF) is registered.
Message
% Unable to translate mac address %1$
Explanation
The specified format of the MAC address is incorrect. [[Inserted string]]%1$: specified MAC address
Solution
After reviewing the specified format of the MAC address, execute the command again.
% Can't set vlan in case of shared-vlan-learning.
Explanation
When bridge learn-mode is SVL, VLAN cannot be specified.
Solution
Omit the specification of vlan, and execute the command again.
98/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
% Vlan id is not found. vid=%1$
Explanation
The specified VLAN is not created. [[Inserted string]]%1$: VLAN ID
Solution
Review the specification of vlan, and execute the command again.
% Port is not vlan member. port %1$ vid=%2$
Explanation
The port is not the specified VLAN member. [[Inserted string]]%1$: port number [[Inserted string]]%2$: VLAN ID
Solution
After adding the target port to vlan member, execute the command again.
% Aggregation port is not vlan member. agg-port %1$ vid=%2$
Explanation
The specified aggregation group is not a VLAN member. [[Inserted string]]%1$: port number [[Inserted string]]%2$: VLAN ID
Solution
After adding the specified aggregation group to vlan member, execute the command again.
% Can't set mac-address-table. %1$ vid=%2$
Explanation
The maximum number to register has been surpassed. [[Inserted string]]%1$: specified port name [[Inserted string]]%2$: VLAN ID
Solution
After deleting unnecessary MAC addresses, execute the command again.
% In case of a unicast address, can set only one port.
Explanation
For a unicast MAC address, only one item of port information can be specified.
Solution
Review the specification of port information, and execute the command again.
% port is a member of aggregation group. port %1$
Explanation
A port consisting of a link aggregation cannot be specified. [[Inserted string]]%1$: port number
Solution
Specify an aggregation group and execute the command again.
% Aggregation port is not found. agg-port %1$
Explanation
The specified aggregation group does not exist. [[Inserted string]]%1$: specified aggregation group number
Solution
Review the specified aggregation group number, and execute the command again.
% MAC address is reserved by IEEE802.1D %s.
Explanation
MAC addresses reserved under the IEEE802.1D cannot be specified. [[Inserted string]]%1$: MAC address
Solution
Review the specified MAC address.
Note
Unicast MAC addresses/multicast MAC addresses that can be statically registered to the XG700 are 128 addresses
maximum each. Additionally, since MAC addresses are managed with a hash table, a message saying an address cannot be registered may be displayed before reaching the maximum number.
Example
The following example shows how to add a static MAC address 0001.2300.4567.
xg(config)# bridge mac-address-table static 0001.2300.4567 port 2
Register a static MAC address c1b1.123a.4321 at VLAN3. When a frame with this MAC address as its destination is received at VLAN3, it will be forwarded to the port of the specified switch.
xg(config)# bridge mac-address-table static c1b1.123a.4321 vlan 3 port 4
As for registered MAC addresses, all registered MAC address information can be checked using the show mac address-table command. By combining with the "| include" command, only information of specific MAC address can be output.
xg# show bridge mac-address-table static Static Mac-address Table
-------------------------------------------------------------­Mac-address Vlan-id Destination-port
-------------- --------- -------------------------------------
0001.123a.4321 vlan-1 port 2
0002.123a.4321 vlan-1 port 4
0100.5e00.1001 vlan-1 port 1 2 3 4 5 6 7 8 ffff.ffff.ffff vlan-1 port 1 2 3 4 5 6 7 8 9 10 11 12
0003.123a.4321 vlan-2 port 4 ffff.ffff.ffff vlan-2 port 1 2 3 4 5 6 7 8 9 10 11 12
xg# show bridge mac-address-table static | include 0001.123a.4321
0001.123a.4321 vlan-1 port 2
99/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
5.6.8 bridge mac-address-table filter
Function
By registering a MAC address to filter, the frame of a specific destination MAC address can be discarded. When filtering of a MAC address is registered, dynamic learning to the MAC address table will not be performed, even when frames sent from the same MAC address are received from a different port. Use the no form to delete the MAC address to filter.
Prompt
xg(config)#
Command syntax
bridge mac-address-table static MAC [ vlan <1-4094> ] filter no bridge mac-address-table static MAC [ vlan <1-4094> ]
Parameter
static MAC
Specifies the destination MAC address to filter. The MAC address format is "HHHH.HHHH.HHHH," which is a 12-digit hexadecimal number with a period (.) inserted between every four digits.
vlan <1-4094>
Specifies VLAN to filter. Specifies VLAN in the range of 1 to 4094. This parameter is valid only when the learning mode of the MAC address table is IVL (Independent Vlan Learning). For SVL (Shared Vlan Learning), this parameter is not necessary.
Command type
Configuration command
Default
None
Message
% Unable to translate mac address %1$
Explanation
The specified format of the MAC address is incorrect. Broadcast addresses cannot be registered. [[Inserted string]]%1$: specified MAC address
Solution
After reviewing the specified format of the MAC address, execute the command again.
% Can't set vlan in case of shared-vlan-learning.
Explanation
When bridge learn-mode is SVL, VLAN cannot be specified.
Solution
Omit the specification of vlan, and execute the command again.
% Vlan id is not found. vid=%1$
Explanation
The specified VLAN is not created. [[Inserted string]]%1$: VLAN ID
Solution
Review the specification of vlan, and execute the command again.
% port is a member of aggregation group. port %1$
Explanation
A port consisting of a link aggregation cannot be specified. [[Inserted string]]%1$: port number
Solution
Specify an aggregation group and execute the command again.
% Aggregation port is not found. agg-port %1$
Explanation
The specified aggregation group does not exist. [[Inserted string]]%1$: specified aggregation group number
Solution
Review the specified aggregation group number, and execute the command again.
% MAC address is reserved by IEEE802.1D %s.
Explanation
MAC addresses reserved under the IEEE802.1D cannot be specified. [[Inserted string]]%1$: MAC address
Solution
Review the specified MAC address.
Note
Unicast MAC addresses/multicast MAC addresses that can be statically registered to the XG700 are 128 addresses
maximum each. Addresses to set as a filter are also included in these. Additionally, since MAC addresses are managed with a hash table, a message saying an address cannot be registered may be displayed before reaching the maximum number.
100/266
A
ll Rights Reserved, Copyright (C) PFU LIMITED 2005-2006
Example
The following is an example to filter a MAC address 0001.2300.4567.
xg(config)# bridge mac-address-table static 0001.2300.4567 filter
Filter a MAC address c1b1.123a.4321 at VLAN3. Frames, which have this MAC address as its destination, are discarded at VLAN3.
xg(config)# bridge mac-address-table static c1b1.123a.4321 vlan 3 filter
Using the show mac address-table command, a filtering MAC address and all registered MAC addresses information will be displayed. By combining with the "| include" command, only filtered MAC addresses can be output.
xg# show bridge mac-address-table static
Mac Address Table Information 2005/06/23-07:18:06 ================================================================== Static Mac-address Table
----------------------------------------------------------------------------
--­Mac-address Type Vlan-id Destination-port
-------------- ------- -------- --------------------
0001.123a.4321 static vlan-1 port 2
0002.123a.4321 static vlan-1 port 4
0003.123a.4321 static vlan-3 filter ef01.123a.4321 static vlan-3 port 1 2 3 4 5 6 7 8 ==================================================================
xg# show bridge mac-address-table static | include filter
0003.123a.4321 static vlan-3 filter
Loading...