The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
To activate an application installed in a virtual services container, use the activate command in virtual services configuration mode. To deactivate the application, use the no form of this command.
activate
no activate
This command has no arguments or keywords.
The application installed in the virtual services container is not activated.
Virtual services configuration (config-virt-serv)
Release | Modification |
---|---|
Cisco Plug-in for OpenFlow Release 1.0 |
This command was introduced. |
The following example shows how an application installed in a virtual services container is activated .
Device# virtual-service install name openflow_agent package bootflash:/ofa-1.0.0-n3000-SPA-k9.ova Note: Installing package 'bootflash:/ofa-1.0.0-n3000-SPA-k9.ova' for virtual service 'openflow_agent'. Once the install has finished, the VM may be activated. Use 'show virtual-service list' for progress. Device# 2013 Mar 8 20:35:23 n3k-202-194-2 %$ VDC-1 %$ %VMAN-2-INSTALL_STATE: Successfully installed virtual service 'openflow_agent' Device# configure terminal Device(config)# virtual-service openflow_agent Device(config-virt-serv)# activate
Command |
Description |
Enables support and allocates resources for Cisco Plug-in for OpenFlow VLAN tagging actions on the device hardware. |
|
Displays the status of installation of all applications on the virtual service container. |
|
Displays the version of an application installed in the virtual service container of a device. |
|
Displays the version of OpenFlow Agent application installed on the virtual services container of device. |
|
Provisions an application installed in the virtual services container of a device. |
|
Installs an application on the virtual services container of a device. |
To configure a controller for a Cisco Plug-in for OpenFlow logical switch, use the controller command in logical switch configuration mode. To remove the controller definitions for the logical switch, use the no form of this command.
controller ipv4 ipv4-address [ port port-number ] [ vrf vrf-name ] security { none | tls } no-tls
no controller ipv4 ipv4-address [ portport-number ] [ vrf vrf-name ] security { none | tls }
ipv4 ipv4-address | Specifies the IPv4 address of the controller. |
port port-number | (Optional) Specifies the port through which the device must connect to the controller. The default value is 6533. |
vrf vrf-name | (Optional) Specifies the virtual routing and forwarding (VRF) instance defined for the controller. The default value is default. |
security none | (Optional) Disables Transport Layer Security (TLS) for the controller connection. |
security tls | (Optional) Enables Transport Layer Security (TLS) for the controller connection. |
No controllers are defined for Cisco Plug-in for OpenFlow. If the security none keyword is not used, TLS has to be configured using the security tls command.
Logical switch configuration (config-ofa-switch)
Release | Modification |
---|---|
Cisco Plug-in for OpenFlow Release 1.0 |
This command was introduced. |
Cisco Plug-in for OpenFlow Release 1.1 |
This command was modified. The no-tls keyword was added. |
The following example shows how the controller command is used to configure a controller for an Cisco Plug-in for OpenFlowt logical switch.
Device> enable
Device# configure terminal
Device(config)# openflow
Device(config-ofa)# switch 1
Device(config-ofa-switch)# pipeline 201
Device(config-ofa-switch)# controller ipv4 10.1.0.6 port 6666 security none
Device(config-ofa-switch)# of-port interface ethernet1/1
Device(config-ofa-switch)# end
Device# copy running-config startup-config
Command |
Description |
Configures an interface as a port of an Cisco Plug-in for OpenFlow logical switch |
|
Configures Cisco Plug-in for OpenFlow. |
|
Configures Cisco Plug-in for OpenFlow logical switch used for Layer 2 switching and enter logical switch configuration mode |
|
Displays the match and action capabilities of a device. |
To enable support and allocates resources for Cisco Plug-in for OpenFlow VLAN tagging actions on the device hardware, use the hardware profile openflow command in global configuration mode. To disable VLAN tagging actions, use the no form of this command.
hardware profile openflow
no hardware profile openflow
This command has no keywords or arguments.
VLAN tagging actions for Cisco Plug-in for OpenFlow are disabled.
Global configuration (config)
Release | Modification |
---|---|
6.0(2)U1(1) |
This command was introduced. |
The hardware profile openflow command must be entered before an application is installed on the virtual services container of a device.
Device# configure terminal Device(config)# hardware profile openflow Device(config)# exit Device# copy running-config startup-config Device# reload
Command |
Description |
Installs an application on the virtual services container of a device. |
To configure an interface as a port of an Cisco Plug-in for OpenFlow logical switch, use the of-port interface command in logical switch configuration mode. To remove port configurations for an interface on an Cisco Plug-in for OpenFlow logical switch, use the no form of this command.
of-port interface interface-name
no of-port interface interface-name
interface-name | Name of interface to be configured. |
No ports are configured for the Cisco Plug-in for OpenFlow logical switch.
Logical switch configuration (config-ofa-switch)
Release | Modification |
---|---|
Cisco Plug-in for OpenFlow Release 1.0 |
This command was introduced. |
Do not abbreviate the interface type. Ensure that interface types used are spelled out clearly and typed in lowercase, as shown in the examples. For example, ethernet and port-channel. If the keyword is abbreviated or not in lowercase, the interface is not configured. Ensure that the interface name does not have a space between the interface type and number.
The Ethernet interface configured can be a member interface of a port channel.
You must configure an interface as a port of Cisco Plug-in for OpenFlow only when Cisco Plug-in for OpenFlow is active and running. When an interface is configured as a port of Cisco Plug-in for OpenFlow, the mode openflow configuration is added to the interface. This configuration is removed when the no form of of-port interface is used only if the Cisco Plug-in for OpenFlow is running and active.
The following example shows how the interface command is used to configure an interface to be a port of an Cisco Plug-in for OpenFlow logical switch.
Device> enable Device# configure terminal Device(config)# openflow Device(config-ofa)# switch 1 Device(config-ofa-switch)# of-port interface ethernet1/1 Device(config-ofa-switch)# of-port interface port-channel1 Device(config-ofa-switch)# end Device# copy running-config startup-config
Command |
Description |
Configure a controller for an Cisco Plug-in for OpenFlow. |
|
Configures Cisco Plug-in for OpenFlow logical switch used for Layer 2 switching and enter logical switch configuration mode |
To configure the maximum TCP triggered backoff interval for which Cisco Plug-in for OpenFlow can wait before retrying a connection to the controller, use the max-backoff command in logical switch configuration mode. To restore the default backoff interval, use the no form of this command.
max-backoff backoff-timer
nomax-backoff backoff-timer
backoff-timer | Interval, in seconds, for which a device can wait before retrying a connection to the controller. |
A maximum backoff of 8 seconds is configured.
Logical switch configuration (config-ofa-switch)
Release | Modification |
---|---|
Cisco Plug-in for OpenFlow 1.1 |
This command was introduced. |
The following example shows how the max-backoff command is used to configure a controller for an OpenFlow Agent logical switch.
Device> enable Device# configure terminal Device(config)# openflow Device(config-ofa)# switch 1 Device(config-ofa-switch)# max-backoff 3 Device(config-ofa-switch)# end Device# copy running-config startup-config
To configure Cisco Plug-in for OpenFlow and enter Cisco Plug-in for OpenFlow Release configuration mode, use the openflow command in global configuration mode. To remove all configurations made forCisco Plug-in for OpenFlow and exit Cisco Plug-in for OpenFlow Release configuration mode, use the no form of this command.
openflow
no openflow
The Cisco Plug-in for OpenFlow is not configured.
Global configuration (config)
Release | Modification |
---|---|
Cisco Plug-in for OpenFlow Release 1.0 |
This command was introduced. |
The following example shows how the openflow command is used to configure the Cisco Plug-in for OpenFlow.
Device> enable Device(config)# openflow Device(config-ofa)# switch 1 Device(config-ofa-switch)# controller ipv4 10.1.0.6 Device(config-ofa-switch)# interface ethernet1/1 Device(config-ofa-switch)# end Device# copy running-config startup-config
Command |
Description |
Configure a controller for an Cisco Plug-in for OpenFlow. |
|
Configures an interface as a port of an Cisco Plug-in for OpenFlow logical switch |
|
Configures Cisco Plug-in for OpenFlow. |
|
Configures Cisco Plug-in for OpenFlow logical switch used for Layer 2 switching and enter logical switch configuration mode |
|
Configures an interval for which Cisco Plug-in for OpenFlow logical switch must wait before retrying a connection to the controller. |
|
Configures local and remote trust points needed for a Transport Layer Security (TLS) connection to the controller |
|
Configures an interval that Cisco Plug-in for OpenFlow logical switch waits before sending a probe to query an idle connection to controller. |
|
Configures a pipeline. |
|
Configures the rate at which packets are sent to a controller by Cisco Plug-in for OpenFlow logical switch. |
To configure a pipeline for a Cisco Plug-in for OpenFlow logical switch, use the pipeline command in logical switch configuration mode. To remove the pipeline configurations, use the no form of this command.
pipeline pipeline-id
no pipeline
pipeline-id | Configures pipeline number. This value must be taken from the output of the show openflow hardware capabilities |
A pipeline is not configured.
Logical switch configuration (config-ofa-switch)
Release | Modification |
---|---|
Cisco Plug-in for OpenFlow Release 1.1 |
This command was introduced. |
This command specifies the forwarding table used by Cisco Plug-in for OpenFlow logical switch. You can use the show openflow hardware capabilities command to view supported pipelines for a device.
The following example shows how to configure a pipeline for an Cisco Plug-in for OpenFlow logical switch for a Nexus 3000 Series device.
Device(config)# openflow Device(config-ofa)# switch 1 ! Specifies the pipeline that enables the L3 ACL Forwarding Table. Device(config-ofa)# pipeline 201
Command |
Description |
Displays the match and action capabilities of a device. |
To configure an interval that Cisco Plug-in for OpenFlow logical switch waits before sending a probe to query an idle connection to controller, use the probe-interval command in logical switch configuration mode. To restore the default probe interval, use the no form of this command.
probe-interval probe-interval
no probe-interval probe-interval
probe-interval | Interval, in seconds, at which an idle controller connection is probed. |
The idle controller connection is probed every 5 seconds.
Logical switch configuration (config-ofa-switch)
Release | Modification |
---|---|
Cisco Plug-in for OpenFlow Release 1.1 |
This command was introduced. |
The following example shows how the probe-interval command is used to configure a probe interval for an idle controller connection.
Device> enable Device# configure terminal Device(config)# openflow Device(config-ofa)# switch 1 Device(config-ofa)# probe-interval 6 Device(config-ofa)# end Device# copy running-config startup-config
To configure the rate at which packets are sent to the controller by Cisco Plug-in for OpenFlow logical switch, use the rate-limit command in the logical switch configuration mode. To remove the rate limit configurations, use the no form of this command.
rate-limit packet_in packet-rate burst number-of-packets
no rate-limit packet_in packet-rate burst number-of-packets
packet_in packet-rate | Configures, in packets per seconds, the maximum rate at which packets are sent to controller. |
burst number-of-packets | Configures the maximum supported bursts or number of packets destined for the controller that can be stored by the logical switch at any time. |
Rate limit is not configured for Cisco Plug-in for OpenFlow logical switch.
Logical switch configuration (config-ofa-switch)
Release | Modification |
---|---|
Cisco Plug-in for OpenFlow Release 1.1 |
This command was introduced. |
The following example shows how the rate-limit command is used to configure the rate limit for Cisco Plug-in for OpenFlow logical switch.
Device> enable Device# configure terminal Device(config)# openflow Device(config-ofa)# switch 1 Device(config-ofa-switch)# rate-limit packet_in 30 burst 50 Device(config-ofa-switch)# end Device# copy running-config startup-config
To display copyright and open-source information related to Cisco Plug-in for OpenFlow, use the show openflow copyright command in privileged EXEC mode.
show openflow copyright
Privileged EXEC (#)
Release | Modification |
---|---|
Cisco Plug-in for OpenFlow Version 1.0 |
This command was introduced. |
The following is sample output of the show openflow copyright command:
Device# show openflow copyright Cisco Nexus Operating System (NX-OS) Software TAC support: http://www.cisco.com/tac Copyright (c) 2002-2013, Cisco Systems, Inc. All rights reserved. The copyrights to certain works contained in this software are owned by other third parties and used and distributed under license. Certain components of this software are licensed under the GNU General Public License (GPL) version 2.0 or the GNU Lesser General Public License (LGPL) Version 2.1. A copy of each such license is available at http://www.opensource.org/licenses/gpl-2.0.php and http://www.opensource.org/licenses/lgpl-2.1.php
Command |
Description |
Configures Cisco Plug-in for OpenFlow. |
To display a list of Cisco Plug-in for OpenFlow logical switch ports, use the show openflow interface switch command in privileged EXEC mode.
show openflow interface [ interface-name ] [ switch switch-id ]
interface-name | (Optional) Name of the interface. See Usage Guidelines for more details. |
switch-id | (Optional) Unique switch identifier. 1 is the only permitted value. |
Displays a list of all interfaces associated with the Cisco Plug-in for OpenFlow logical switch.
Privileged EXEC (#)
Release | Modification |
---|---|
Cisco Plug-in for OpenFlow Version 1.0 |
This command was introduced. |
Do not abbreviate the interface. Ensure that the ethernet or port-channel keywords are spelled out completely and are typed in lowercase. For example, ethernet1/1 or port-channel2. If the keyword is abbreviated or not in lowercase, the interface is not configured.
Only interfaces specified by the interface (OpenFlow) command can display an output.
The following is sample output of the show openflow interface command:
Device# show openflow interface Logical Switch Id: 1 Interfaces: Ethernet1/11 Ethernet1/12 Ethernet1/13 Ethernet1/2 Ethernet1/24 Ethernet1/25 Ethernet1/3 Ethernet1/4 port-channel2
Device# show openflow interface ethernet1/2 switch 1 Logical Switch Id: 1 Interface: ethernet1/2
Device# show openflow interface switch 1 Interfaces: Ethernet1/11 Ethernet1/12 Ethernet1/13 Ethernet1/2 Ethernet1/24 Ethernet1/25 Ethernet1/3 Ethernet1/4 port-channel2
Command |
Description |
Configures an interface as a port of an Cisco Plug-in for OpenFlow logical switch |
|
Configures Cisco Plug-in for OpenFlow logical switch used for Layer 2 switching and enter logical switch configuration mode |
To display information related to an Cisco Plug-in for OpenFlow logical switch, use the show openflow switch command in privileged EXEC mode.
show openflow switch [ switch-id ]
switch-id | (Optional) Cisco Plug-in for OpenFlow logical switch ID. Only the value 1 is permitted. |
Privileged EXEC (#)
Release | Modification |
---|---|
Cisco Plug-in for OpenFlow Release 1.0 |
This command was introduced. |
The following is sample output of the show openflow switch command on Nexus 3000 Series Device.
Device# show openflow switch 1 Logical Switch Context Id: 1 Switch type: Forwarding Pipeline id: 201 Signal version: Openflow 1.0 Data plane: secure Table-Miss default: NONE Config state: no-shutdown Working state: enabled Rate limit (packet per second): 0 Burst limit: 0 Max backoff (sec): 8 Probe interval (sec): 5 TLS local trustpoint name: not configured TLS remote trustpoint name: not configured Stats coll. period (sec): 5 Logging flow changes: Disabled OFA Description: Manufacturer: Cisco Systems, Inc. Hardware: N3K-C3064PQ V01 Software: 6.0(2)U2(1) of_agent 1.1.0_fc1 Serial Num: SSI15200QD8 DP Description: n3k-200-141-3:sw1 OF Features: DPID:0001547fee00c2a0 Number of tables:1 Number of buffers:256 Capabilities: FLOW_STATS TABLE_STATS PORT_STATS Actions: OUTPUT SET_VLAN_VID STRIP_VLAN SET_DL_SRC SET_DL_DST Controllers: 1.1.1.1:6653, Protocol: TLS, VRF: s Interfaces: Ethernet1/1 Ethernet1/7
Field |
Description |
---|---|
Id |
Cisco Plug-in for OpenFlow logical switch identifier. |
Switch type |
Type of switch. The possible values are as follows: |
Pipeline ID |
Identifier used for pipeline. |
Layer |
Network layer on which the switch operates. |
Data plane: secure |
Security levels of the data plane. |
Table-Miss default: |
Fallback state of switch. |
Signal version |
OpenFlow version. |
Config state: |
The switch is in a configuration state of no shutdown. |
Working state: |
The switch is in a working state. |
TLS |
Transport Layer Security (TLS) capability and trust points. |
Rate Limit |
Rate limit. |
Burst Limit |
Burst limit. |
Maximum Backoff |
Maximum backoff. |
Probe interval |
Probe interval. |
Stats coll. period (sec): |
Time period at which stats are collected. |
Logging Flow changes |
|
Manufacturer: Cisco Systems, Inc. |
Manufacturer of the Cisco Plug-in for OpenFlow software. |
Hardware |
Device on which the Cisco Plug-in for OpenFlow is installed. |
Software: |
Operating system running on the device. |
Serial Num: |
Serial Number of the device. |
DP Description |
Data Path description used by the controller to identify the device. |
DPID |
Data Path identifier used by the controller to identify the device. |
Number of tables |
Number of flows defined for the device on the controller. |
Number of buffers |
Number of buffers allocated to the device. |
Capabilites: |
Match capabilities available on this device. |
Actions: |
Actions available on this device. |
Controllers: 192.168.1.31:8005, Protocol: TCP, VRF: default 192.168.94.173:6633, Protocol: TCP, VRF: management |
Controllers connected to this device, port number used, protocol used for between the controller and the device, and the VRF on which the controller is defined. |
Interfaces: |
List of interfaces defined for the device. |
To display information about controllers connected to an Cisco Plug-in for OpenFlow switch, use the show openflow switch controller command in privileged EXEC mode.
show openflow switch [ switch-id | [ controllers [ stats ] ] ]
switch-id | (Optional) Cisco Plug-in for OpenFlow logical switch identifier. |
stats | (Optional) Cisco Plug-in for OpenFlow Displays controller based statistics. |
Privileged EXEC (#)
Release | Modification |
---|---|
Cisco Plug-in for OpenFlow Version 1.0 |
This command was introduced. |
A device can connect to up to eight controllers.
The following is sample output of the show openflow switch 1 controllers command:
Device# show openflow switch 1 controllers Logical Switch Id: 1 Total Controllers: 1 Controller: 1 10.168.1.31:7777 Protocol: tcp VRF: default Connected: Yes Role: Other state:ACTIVE sec_since_connect:31474
The following is sample output of the show openflow switch 1 controllers command:
Device# show openflow switch 1 controllers Logical Switch Id: 1 Total Controllers: 1 Controller: 1 10.86.201.162:8050 Protocol: tcp VRF: management Local Trustpoint: disabled Remote Trustpoint: disabled Connected: Yes Role: Master state:ACTIVE sec_since_connect:36844
Field |
Descriptions |
---|---|
Logical Switch Id: 1 |
Indicates the unique switch identifier. |
Total Controllers: 1 |
Indicates the total number of controllers connected to this device. |
Controller: 1 |
Indicates the controller identifier. |
192.168.1.31:7777 |
Indicates the IP address of the controller and the controller port used for the connection. |
Protocol: TCP |
Indicates the protocol used for controller-device communication. |
VRF: default |
Indicates the virtual routing and forwarding (VRF) instance of which the controller is part of. |
Local Trustpoint |
Status of local trustpoint |
Remote Trustpoint |
Status of remote trustpoint |
Connected: Yes |
Indicates whether the switch is connected to the controller. |
Role: Other |
Indicates the role of the controller. |
state:ACTIVE |
Indicates the state of the controller. Possible values are given below: |
sec_since_connect |
Indicates the number of seconds that have elapsed since the connector connected to the device. |
Command |
Description |
Configure a controller for an Cisco Plug-in for OpenFlow. |
|
Configures Cisco Plug-in for OpenFlow logical switch used for Layer 2 switching and enter logical switch configuration mode |
To display a list of flows defined for Cisco Plug-in for OpenFlow logical switch and related information, use the show openflow switch flows command in privileged EXEC mode.
show openflow switch switch-id flows [ configured | controller | default | fixed | pending | pending-del ] [ brief | summary ]
switch-id | (Optional) Cisco Plug-in for OpenFlow logical switch identifier. |
configured | (Optional) Displays information related to configured flows. |
controller | (Optional) Displays flow information related to controllers. |
default | (Optional) Displays default information related to flows. |
fixed | (Optional) Displays information related to fixed flows. |
fixed | (Optional) Displays information related to fixed flows. |
pending | (Optional) Displays information related to pending flows. |
pending-del | (Optional) Displays brief information related to flows pending deletion. |
summary | (Optional) Displays a summary of information related to flows. |
Privileged EXEC (#)
Release | Modification |
---|---|
Cisco Plug-in for OpenFlow Version 1.0 |
This command was introduced. |
The flows displayed are configured by the controller that is connected to Cisco Plug-in for OpenFlow logical switch on the device.
The following is sample output of the show openflow switch 1 flows command:
Device# show openflow switch 1 flows Logical Switch Id: 1 Total flows: 1 1 Rule: ip,dl_vlan=99 Actions: strip_vlan,output:1 Priority: 0x8000 Table: 0 Cookie: 0x466c6f7732 Duration: 176.383s Number of packets: 0 Number of bytes: 0
Device# show openflow switch 1 flows Total flows: 2 Flow: 1 Rule: ip,dl_vlan=99 Actions: strip_vlan,output:1 Priority: 0x8000 Table: 0 Cookie: 0x466c6f7732 Duration: 96.359s Number of packets: 0 Number of bytes: 0 Flow: 2 Rule: ip,in_port=2,dl_vlan=50 Actions: output:1 Priority: 0x8000 Table: 0 Cookie: 0x1 Duration: 95.504s Number of packets: 0 Number of bytes:
Command |
Description |
Configure a controller for an Cisco Plug-in for OpenFlow. |
|
Configures Cisco Plug-in for OpenFlow logical switch used for Layer 2 switching and enter logical switch configuration mode |
To display the mapping between the Cisco Plug-in for OpenFlow logical switch ports and the device’s physical interfaces, use the show openflow switch ports command in privileged EXEC mode.
showopenflow switch [ switch-id [ ports ] ]
switch-id | (Optional) Cisco Plug-in for OpenFlow logical switch identifier. |
ports | (Optional) Displays send and receive statistics for each port defined for an Cisco Plug-in for OpenFlow logical switch. |
Privileged EXEC (#)
Release | Modification |
---|---|
Cisco Plug-in for OpenFlow Version 1.0 |
This command was introduced. |
The following is sample output of the show openflow switch 1 ports command:
Device# show openflow switch 1 ports Logical Switch Id: 1 Port Interface Name Config-State Link-State Features 2 Ethernet1/2 PORT_UP LINK_UP 10MB-FD 3 Ethernet1/3 PORT_UP LINK_DOWN 100MB-HD AUTO_NEG 4 Ethernet1/4 PORT_UP LINK_UP 10MB-FD 11 Ethernet1/11 PORT_UP LINK_UP 1GB-FD 12 Ethernet1/12 PORT_UP LINK_UP 1GB-FD 13 Ethernet1/13 PORT_UP LINK_UP 1GB-FD 24 Ethernet1/24 PORT_UP LINK_DOWN 1GB-HD AUTO_NEG 25 Ethernet1/25 PORT_UP LINK_DOWN 1GB-HD AUTO_NEG 321 port-channel2 PORT_UP LINK_DOWN 100MB-HD AUTO_NEG
Command |
Description |
Configures an interface as a port of an Cisco Plug-in for OpenFlow logical switch |
|
Configures Cisco Plug-in for OpenFlow logical switch used for Layer 2 switching and enter logical switch configuration mode |
To display send and receive statistics for each port defined for the Cisco Plug-in for OpenFlow logical switch, use the show openflow switch stats command in privileged EXEC mode.
show openflow switch switch-id stats
switch-id | (Optional) Cisco Plug-in for OpenFlow logical switch identifier. |
Privileged EXEC (#)
Release | Modification |
---|---|
Cisco Plug-in for OpenFlow Version 1.0 |
This command was introduced. |
The following is sample output of the show openflow switch 1 stats command:
Device# show openflow switch 1 stats Logical Switch Id: 1 Total ports 9 Port 4: rx pkts=8570, bytes=2459590, drop=0, errs=0, tx pkts=8585, bytes=2461949, drop=0, errs=0, Port 2: rx pkts=0, bytes=0, drop=0, errs=0, tx pkts=0, bytes=0, drop=0, errs=0, Total tables 1 Table 0: classifier Wildcards = 0x3fffff Max entries = 1000000 Active entries = 0 Number of lookups = 0 Number of matches = 0
The following is sample output of the show openflow switch 1 stats command:
Device# show openflow switch 1 stats Logical Switch Id: 1 Total ports: 1 Port 4: rx pkts=8570, bytes=2459590, drop=0, errs=0, tx pkts=8585, bytes=2461949, drop=0, errs=0, Port 2: rx pkts=0, bytes=0, drop=0, errs=0, tx pkts=0, bytes=0, drop=0, errs=0, Total tables: 1 Table 0: classifier Wildcards = 0x3fffff Max entries = 1500 Active entries = 0 Number of lookups = 0 Number of matches = 0
Field |
Descriptions |
---|---|
Logical Switch Id: 1 |
Indicates the unique switch identifier. |
Total ports: 1 |
Indicates the total number of ports defined for the switch. |
Port: N |
Indicates the port number. |
rx pkts=0, bytes=0, errs=0 |
Indicates the number of packets and bytes received by the port and the number of errors generated while receiving data. |
tx pkts=0, bytes=376480 |
Indicates number of packets and bytes sent by the port. |
Total tables |
Indicates the total number of tables defined for the device on the controller. |
Table 0: classifier |
Indicates the name of the table. |
Wildcards |
Indicates the wildcard character. |
Max entries |
Indicates the maximum number of flow entries defined in the table. |
Active entries |
Indicates the number of active flow entries in the table. |
Number of lookups |
Indicates the number of table lookups that have occurred. |
Number of matches |
Indicates the number of matches that have occurred for the flow entries in the table. |
Command |
Description |
Configure a controller for an Cisco Plug-in for OpenFlow. |
|
Configures Cisco Plug-in for OpenFlow logical switch used for Layer 2 switching and enter logical switch configuration mode |
To display the match and action capabilities of a device, use the show openflow hardware capabilities command in privileged EXEC mode.
show openflow hardware capabilities
This command has no arguments or keywords.
Privileged EXEC (#)
Release | Modification |
---|---|
Cisco Plug-in for OpenFlow Release 1.0 |
This command was introduced. |
This command displays the list of match and action capabilities supported on this device. The controller connected to this device can define flows using this match criteria and can associate actions to be executed when packets match the flow criteria. The match and action criteria supported for various devices are given below.
The following is sample output for the show openflow hardware capabilities command.
The following is sample output for Nexus 3000 Series device.
Device# show openflow hardware capabilities Pipeline ID: 201 Flow table ID: 0 Match Capabilities Match Types ------------------ ----------- ethernet type mandatory VLAN ID optional VLAN priority code point optional IP DSCP optional IP protocol optional IPv4 source address lengthmask IPv4 destination address lengthmask source port optional destination port optional in port (virtual or physical) optional Actions: output to: specified interface, use normal forwading, controller set: set eth source mac, set eth destination mac, set vlan id pop: pop vlan tag other actions: drop packet Pipeline ID: 202 Flow table ID: 0 Match Capabilities Match Types ------------------ ----------- ethernet type mandatory VLAN ID optional VLAN priority code point optional IP DSCP optional IP protocol optional IPv4 source address lengthmask IPv4 destination address lengthmask source port optional destination port optional in port (virtual or physical) optional Actions: output to: specified interface, use normal forwading, controller set: set eth source mac, set eth destination mac, set vlan id pop: pop vlan tag other actions: drop packet Flow table ID: 1 Match Capabilities Match Types ------------------ ----------- ethernet mac destination mandatory VLAN ID mandatory Actions: output to: specified interface other actions: drop packet
Command |
Description |
---|---|
Pipeline ID |
Pipeline to be configured for using the table. |
Flow table ID |
Table number in a logical switch. |
Min Timer |
Minimum time at which polling for statistics occurs. |
Max Timer |
Maximum time at which polling for statistics occurs. |
Match Capabilities |
Displays a list of match capabilities that can be defined for this device. The definitions of the different match criteria can be found in the OpenFlow 1.0 specification. |
Match Types |
Displays the type of match criteria. The match types and their meaning are as followed: |
Actions |
Displays a list of actions that can be defined for this device, if a packet matches the flow criteria. The actions can be as follows: |
Stats |
Displays a list of parameters for which statistics are collected. |
Others: packet out |
Sending of packets to an output location (packet out) is supported by this Cisco Plug-in for OpenFlow. |
Command |
Description |
Enables support and allocates resources for Cisco Plug-in for OpenFlow VLAN tagging actions on the device hardware. |
To configure Cisco Plug-in for OpenFlow logical switch used for Layer 2 switching and enter logical switch configuration mode, use the switch command in Cisco Plug-in for OpenFlow Release configuration mode. To remove the Cisco Plug-in for OpenFlow logical switch configurations, use the no form of this command.
switch logical-switch-id
no switch logical-switch-id
logical-switch-id | Specifies a numerical ID for the logical switch. |
Cisco Plug-in for OpenFlow logical switch is not defined.
Cisco Plug-in for OpenFlow Release configuration (config-ofa)
Release | Modification |
---|---|
Cisco Plug-in for OpenFlow Version 1.0 |
This command was introduced. |
The following example describes how the switch command is used in configuring Cisco Plug-in for OpenFlow logical switch.
Device> enable Device# configure terminal Device(config)# openflow Device(config-ofa)# switch 1 Device(config-ofa-switch)# controller ipv4 10.1.0.6 Device(config-ofa-switch)# interface ethernet1/1 Device(config-ofa-switch)# end Device# copy running-config startup-config
Command |
Description |
Configure a controller for an Cisco Plug-in for OpenFlow. |
|
Configures an interface as a port of an Cisco Plug-in for OpenFlow logical switch |
|
Configures Cisco Plug-in for OpenFlow. |
|
Configures Cisco Plug-in for OpenFlow logical switch used for Layer 2 switching and enter logical switch configuration mode |
|
Configures an interval for which Cisco Plug-in for OpenFlow logical switch must wait before retrying a connection to the controller. |
|
Configures local and remote trust points needed for a Transport Layer Security (TLS) connection to the controller |
|
Configures an interval that Cisco Plug-in for OpenFlow logical switch waits before sending a probe to query an idle connection to controller. |
|
Configures a pipeline. |
|
Configures the rate at which packets are sent to a controller by Cisco Plug-in for OpenFlow logical switch. |
To disable an Cisco Plug-in for OpenFlow logical switch, use the shutdown command in logical switch configuration mode. To re-enable the Cisco Plug-in for OpenFlow logical switch, use the no form of this command.
shutdown
no shutdown
This command has no arguments or keywords.
The Cisco Plug-in for OpenFlow logical switch is enabled.
Logical switch configuration (config-ofa-switch)
Release | Modification |
---|---|
Cisco Plug-in for OpenFlow Version 1.0 |
This command was introduced. |
The following example describes how the shutdown command is used to disable an Cisco Plug-in for OpenFlow logical switch.
Device> enable Device# configure terminal Device(config)# openflow Device(config-ofa)# switch 1 Device(config-ofa-switch)# shutdown Device(config-ofa-switch)# end Device# copy running-config startup-config
To configure local and remote trust points needed for a Transport Layer Security (TLS) connection to the controller, use the tls trust-point command in logical switch configuration mode.
tls trust-point local local-trust-point-name remote remote-trust-point-name
no tls trust-point local local-trust-point-name remote remote-trust-point-name
local local-trust-point-name | Configures the local trust point. |
remote remote-trust-point-name | Configures the remote trust point. |
TLS is enabled for controller connections, but TLS trust points are not configured.
Logical switch configuration (config-ofa-switch)
Release | Modification |
---|---|
Cisco Plug-in for OpenFlow Release 1.1 |
This command was introduced. |
This command does not set up the TLS connection and only configures the trust points.
If this command is not configured, TLS must be disabled in order for the controller connection to work using the no-tls keyword of the controller command. Otherwise the controller connection fails.
The following example shows how the tls trust-point command is used to configure a TLS connection to a controller.
Device> enable Device# configure terminal Device(config)# openflow Device(config-ofa)# switch 1 Device(config-ofa-switch)# controller ipv4 10.1.1.1 Device(config-ofa-switch)# tls trust-point local XXX remote YYY Device(config-ofa-switch)# end Device# copy running-config startup-config
The following example shows how TLS must be disabled if the tls trust-point command is not used.
Device> enable Device# configure terminal Device(config)# openflow Device(config-ofa)# switch 1 Device(config-ofa-switch)# controller ipv4 10.1.1.1 security none Device(config-ofa-switch)# end Device# copy running-config startup-config
Command |
Description |
Configure a controller for an Cisco Plug-in for OpenFlow. |