Table Of Contents
neighbor activate
neighbor allowas-in
neighbor as-override
neighbor send-label
network-id
next-address
oam-ac emulation-enable
rd
route-target
set mpls experimental
set mpls experimental imposition
set mpls experimental topmost
set mpls-label
set ospf router-id
set port flowcontrol
set vlan
set vlan mapping
shortcut-frame-count
shortcut-frame-time
show adjacency
show cable bundle
show cef drop
show cef events
show cef interface
show cef interface policy-statistics
show cef linecard
show cef not-cef-switched
show cef timers
neighbor activate
To enable the exchange of information with a Border Gateway Protocol (BGP) neighbor, use the neighbor activate command in address family configuration mode or router configuration mode. To disable the exchange of an address with a BGP neighbor, use the no form of this command.
neighbor {ip-address | peer-group-name | ipv6-address} activate
no neighbor {ip-address | peer-group-name | ipv6-address} activate
Syntax Description
ip-address
|
IP address of the neighboring router.
|
peer-group-name
|
Name of BGP peer group.
|
ipv6-address
|
IPv6 address of the BGP neighbor.
This argument must be in the form documented in RFC 2373 where the address is specified in hexadecimal using 16-bit values between colons.
|
Defaults
The exchange of addresses with BGP neighbors is enabled for the IPv4 address family. Enabling address exchange for all other address families is disabled.
Note
Address exchange for address family IPv4 is enabled by default for each BGP routing session configured with the neighbor remote-as command unless you configure the no bgp default ipv4-activate command before configuring the neighbor remote-as command, or you disable address exchange for address family IPv4 with a specific neighbor by using the no form of the neighbor activate command.
Command Modes
Address family configuration
Router configuration
Command History
Release
|
Modification
|
11.0
|
This command was introduced.
|
12.0(5)T
|
Support for address family configuration mode and the IPv4 address family were added.
|
12.2(2)T
|
The ipv6-address argument and support for the IPv6 address family were added.
|
12.0(21)ST
|
This command was integrated into Cisco IOS Release 12.0(21)ST.
|
12.0(22)S
|
This command was integrated into Cisco IOS Release 12.0(22)S.
|
12.2(14)S
|
This command was integrated into Cisco IOS Release 12.2(14)S.
|
Usage Guidelines
Use this command to advertise address information in the form of an IP or IPv6 prefix. The address prefix information is known as Network Layer Reachability Information (NLRI) in BGP.
Examples
The following example shows how to enable address exchange for address family vpnv4 for all neighbors in the BGP peer group named PEPEER and for the neighbor 144.0.0.44:
Router(config)# address-family vpnv4
Router(config-router-af)# neighbor PEPEER activate
Router(config-router-af)# neighbor 144.0.0.44 activate
Router(config-router-af)# exit-address-family
The following example shows how to enable address exchange for address family IPv4 unicast for all neighbors in the BGP peer group named group1 and for the BGP neighbor 172.16.1.1:
Router(config)# address-family ipv4 unicast
Router(config-router-af)# neighbor group1 activate
Router(config-router-af)# neighbor 172.16.1.1 activate
The following example shows how to enable address exchange for address family IPv6 for all neighbors in the BGP peer group named group2 and for the BGP neighbor 7000::2:
Router(config)# address-family ipv6
Router(config-router-af)# neighbor group2 activate
Router(config-router-af)# neighbor 7000::2 activate
Related Commands
Command
|
Description
|
address-family ipv4
|
Places the router in address family configuration mode for configuring routing sessions, such as BGP, that use standard IPv4 address prefixes.
|
address-family ipv6
|
Places the router in address family configuration mode for configuring routing sessions, such as BGP, that use standard IPv6 address prefixes.
|
address-family vpnv4
|
Places the router in address family configuration mode for configuring routing sessions, such as BGP, that use standard VPNv4 address prefixes.
|
exit-address-family
|
Exits from the address family submode.
|
neighbor allowas-in
To configure provider edge (PE) routers to allow readvertisement of all prefixes containing duplicate autonomous system numbers (ASNs), use the neighbor allowas-in command in router configuration mode. To disable the readvertisement of the ASN of the PE router, use the no form of this command.
neighbor ip-address allowas-in [number]
no neighbor ip-address allowas-in [number]
Syntax Description
ip-address
|
IP address of the neighboring router.
|
number
|
(Optional) Specifies the number of times to allow the advertisement of a PE router's ASN. Valid values are from 1 to 10. If no number is supplied, the default value of 3 times is used.
|
Defaults
Readvertisement of all prefixes containing duplicate ASNs is disabled by default.
Command Modes
Router configuration
Command History
Release
|
Modification
|
12.0(7)T
|
This command was introduced.
|
12.1
|
This command was integrated into Cicso IOS Release 12.1.
|
12.2
|
This command was integrated into Cicso IOS Release 12.2.
|
12.3
|
This command was integrated into Cicso IOS Release 12.3.
|
12.3T
|
This command was integrated into Cicso IOS Release 12.3T.
|
Usage Guidelines
In a hub and spoke configuration, a PE router readvertises all prefixes containing duplicate autonomous system numbers. Use the neighbor allowas-in command to configure two VRFs on each PE router to receive and readvertise prefixes are as follows:
•
One Virtual Private Network routing and forwarding (VRF) instance receives prefixes with ASNs from all PE routers and then advertises them to neighboring PE routers.
•
The other VRF receives prefixes with ASNs from the customer edge (CE) router and readvertises them to all PE routers in the hub and spoke configuration.
You control the number of times an ASN is advertised by specifying a number from 1 to 10.
Examples
The following example shows how to configure the PE router with ASN 100 to allow prefixes from the VRF address family Virtual Private Network (VPN) IPv4 vrf1. The neighboring PE router with the IP address 192.168.255.255 is set to be readvertised to other PE routers with the same ASN six times.
Router(config)# router bgp 100
Router(config-router)# address-family ipv4 vrf vrf1
Router(config-router)# neighbor 192.168.255.255 allowas-in 6
Related Commands
Command
|
Description
|
address-family
|
Enters the address family configuration submode used to configure routing protocols such as BGP, OSPF, RIP, and static routing.
|
neighbor as-override
To configure a provider edge (PE) router to override the autonomous system number (ASN) of a site with the ASN of a provider, use the neighbor as-override command in router configuration mode. To remove Virtual Private Network (VPN) IPv4 prefixes from a specified router, use the no form of this command.
neighbor ip-address as-override
no neighbor ip-address as-override
Syntax Description
ip-address
|
Specifies the IP address of the router that is to be overridden with the ASN provided.
|
Defaults
Automatic override of the ASN is disabled by default.
Command Modes
Router configuration
Command History
Release
|
Modification
|
12.0(7)T
|
This command was introduced.
|
Usage Guidelines
This command is used in conjunction with the site-of-origin feature, identifying the site where a route originated, and preventing routing loops between routers within a VPN.
Examples
The following example shows how to configure a router to override the ASN of a site with the ASN of
a provider:
Router(config)# router bgp 100
Router(config-router)# neighbor 192.168.255.255 remote-as 109
Router(config-router)# neighbor 192.168.255.255 update-source loopback0
Router(config-router)# address-family ipv4 vrf vpn1
Router(config-router)# neighbor 192.168.255.255 activate
Router(config-router)# neighbor 192.168.255.255 as-override
Related Commands
Command
|
Description
|
neighbor activate
|
Enables the exchange of information with a BGP neighboring router.
|
neighbor remote-as
|
Allows a neighboring router's IP address to be included in the BGP routing table.
|
neighbor update-source
|
Allows internal BGP sessions to use any operational interface for TCP/IP connections.
|
route-map
|
Redistributes routes from one routing protocol to another.
|
neighbor send-label
To enable a Border Gateway Protocol (BGP) router to send Multiprotocol Label Switching (MPLS) labels with BGP routes to a neighboring BGP router, use the neighbor send-label command in address family configuration mode or router configuration mode. To disable the sending of MPLS labels with BGP routes, use the no form of this command.
neighbor ip-address send-label
no neighbor ip-address send-label
Syntax Description
ip-address
|
IP address of the neighboring router.
|
Defaults
By default, BGP routers distribute only BGP routes.
Command Modes
Address family configuration
Router configuration
Command History
Release
|
Modification
|
12.0(21)ST
|
This command was introduced.
|
12.0(22)S
|
This command was integrated into Cisco IOS Release 12.0(22)S.
|
12.2(13)T
|
This command was integrated into Cisco IOS Release 12.2(13)T.
|
12.2(14)S
|
This command was integrated into Cisco IOS Release 12.2(14)S.
|
Usage Guidelines
This command enables a router to use BGP to distribute MPLS labels along with the IPv4 routes to a peer router. You must issue this command on both the local router and the neighboring router.
This command has the following restrictions:
•
If a BGP session is running when you issue the neighbor send-label command, the command does not take effect until the BGP session is restarted.
•
In router configuration mode, only IPv4 addresses are distributed.
Use this command in IPv6 address family configuration mode to bind and advertise IPv6 prefix MPLS labels. Using this command in conjunction with the mpls ipv6 source-interface global configuration command allows IPv6 traffic to run over an IPv4 MPLS network without any software or hardware configuration changes in the backbone. Edge routers configured to run both IPv4 and IPv6 forward IPv6 traffic using MPLS and multiprotocol internal BGP (MP-iBGP).
Examples
The following example shows how to enable a router in the autonomous system 65000 to send MPLS labels with BGP routes to the neighbor BGP router at 192.168.0.1:
Router(config)# router bgp 65000
Router(config-router)# neighbor 192.168.0.1 remote-as 65001
Router(config-router)# neighbor 192.168.0.1 send-label
The following example shows how to enable a router in the autonomous system 65000 to bind and advertise IPv6 prefix MPLS labels and send the labels with BGP routes to the neighbor BGP router at 192.168.99.70:
Router(config)# router bgp 65000
Router(config-router)# neighbor 192.168.99.70 remote-as 65000
Router(config-router)# address-family ipv6
Router(config-router-af)# neighbor 192.168.99.70 activate
Router(config-router-af)# neighbor 192.168.99.70 send-label
Related Commands
Command
|
Description
|
mpls ipv6 source-interface
|
Specifies the IPv6 address of an interface to be used as the source address for locally generated IPv6 packets to be sent over a network running MPLS.
|
neighbor activate
|
Enables the exchange of information with a neighboring router.
|
network-id
To specify the network ID of a Multiprotocol over ATM (MPOA) server (MPS), use the network-id command in MPS configuration mode. To revert to the default value (default value is 1), use the no form of this command.
network-id id
no network-id
Syntax Description
id
|
Specifies the network ID of the MPOA server.
|
Defaults
The default value for the network ID is 1.
Command Modes
MPS configuration
Command History
Release
|
Modification
|
11.3(3a)WA4(5)
|
This command was introduced.
|
Usage Guidelines
Specifies the network ID of this MPS. This value is used in a very similar way the NHRP network ID is used. It is for partitioning nonbroadcast multiaccess (NBMA) clouds artificially by administration.
Examples
The following example shows how to set the network ID to 5:
Router(mpoa-server-config)# network-id 5
next-address
To specify the next IP address in the explicit path, use the next-address command in IP explicit path configuration mode. To remove the specified next IP address in the explicit path, use the no form of this command.
next-address A.B.C.D
no next-address A.B.C.D
Syntax Description
A.B.C.D
|
Next IP address in the explicit path.
|
Defaults
Next IP address in the explicit path is not specified.
Command Modes
IP explicit path configuration
Command History
Release
|
Modification
|
12.0(5)S
|
This command was introduced.
|
Examples
The following example shows how to assign the number 60 to the IP explicit path, enable the path, and specify 10.3.27.3 as the next IP address in the list of IP addresses:
Router(config)# ip explicit-path identifier 60 enable
Router(cfg-ip-expl-path)# next-address 10.3.27.3
Explicit Path identifier 60:
1: next-address 10.3.27.3
Router(cfg-ip-exp1-path)#
Related Commands
Command
|
Description
|
append-after
|
Inserts the new path entry after the specified index number. Commands might be renumbered as a result.
|
index
|
Inserts or modifies a path entry at a specified index.
|
ip explicit-path
|
Enters the subcommand mode for IP explicit paths and creates or modifies the specified path.
|
list
|
Displays all or part of the explicit paths.
|
show ip explicit-paths
|
Displays configured IP explicit paths.
|
oam-ac emulation-enable
To enable Operation, Administration, and Maintenance (OAM) cell emulation on ATM adaptation layer 5 (AAL5) over Multiprotocol Label Switching (MPLS), use the oam-ac emulation-enable command in the ATM VC configuration mode on both provider edge (PE) routers. To disable OAM cell emulation, use the no form of this command on both routers.
oam-ac emulation-enable [ais-rate]
no oam-ac emulation-enable [ais-rate]
Syntax Description
ais-rate
|
(Optional) The rate (in seconds) at which the alarm indication signal (AIS) cells should be sent. The range is 0 to 60 seconds. If you specify 0, no AIS cells are sent. The default is 1 second, which means that one AIS cell is sent every second.
|
Defaults
By default OAM cell emulation is disabled. If you enable OAM cell emulation without specifying an AIS rate, the default is to send one AIS cell every second.
Command Modes
ATM VC configuration mode
Command History
Release
|
Modification
|
12.0(23)S
|
This command was introduced.
|
12.2(14)S
|
This command was integrated into Cisco IOS Release 12.2(14)S.
|
12.2(15)T
|
This command was integrated into Cisco IOS Release 12.2(15)T.
|
Usage Guidelines
This command is only applicable to AAL5 over MPLS and is not supported with ATM Cell Relay over MPLS.
This command is only available when you specify the pvc vpi/vci l2transport command.
Examples
The following example shows how to enable OAM cell emulation on an ATM PVC:
Router# interface ATM 1/0/0
Router(config-if)# pvc 1/200 l2transport
Router(config-atm-vc)# oam-ac emulation-enable
The following example shows how to set the rate at which an AIS cell is sent to every 30 seconds:
Router (config-atm-vc)# oam-ac emulation-enable 30
Related Commands
Command
|
Description
|
show atm pvc
|
Displays all ATM PVCs and traffic information.
|
rd
To create routing and forwarding tables for a Virtual Private Network (VPN) routing/forwarding instance (VRF), use the rd command in VRF configuration mode.
rd route-distinguisher
Syntax Description
route-distinguisher
|
Adds an 8-byte value to an IPv4 prefix to create a VPN IPv4 prefix.
|
Defaults
There is no default. A route distinguisher (RD) must be configured for a VRF to be functional.
Command Modes
VRF configuration
Command History
Release
|
Modification
|
12.0(5)T
|
This command was introduced.
|
Usage Guidelines
A RD creates routing and forwarding tables and specifies the default route distinguisher for a VPN. The RD is added to the beginning of the customer's IPv4 prefixes to change them into globally unique VPN-IPv4 prefixes.
Either RD is an ASN-relative RD, in which case it is composed of an autonomous system number and an arbitrary number, or it is an IP-address-relative RD, in which case it is composed of an IP address and an arbitrary number.
You can enter an RD in either of these formats:
16-bit AS number: your 32-bit number
For example, 101:3.
32-bit IP address: your 16-bit number
For example, 192.168.122.15:1.
Examples
The following example shows how to configure a default RD for two VRFs. It illustrates the use of both AS-relative and IP-address-relative RDs:
Router(config)# ip vrf vrf_blue
Router(config-vrf)# rd 100:3
Router (config-vrf)# exit
Router(config)# ip vrf vrf_red
Router(config-vrf)# rd 173.13.0.12:200
Related Commands
Command
|
Description
|
ip vrf
|
Configures a VRF routing table.
|
show ip vrf
|
Displays the set of defined VRFs and associated interfaces.
|
route-target
To create a route-target extended community for a Virtual Private Network (VPN) routing/forwarding instance (VRF), use the route-target command in VRF configuration mode. To disable the configuration of a route-target community option, use the no form of this command.
route-target {import | export | both} route-target-ext-community
no route-target {import | export | both} route-target-ext-community
Syntax Description
import
|
Imports routing information from the target Virtual Private network (VPN) extended community.
|
export
|
Exports routing information to the target VPN extended community.
|
both
|
Imports both import and export routing information to the target VPN extended community.
|
route-target-ext-community
|
Adds the route-target extended community attributes to the VRF's list of import, export, or both (import and export) route-target extended communities.
|
Defaults
There are no defaults. A VRF has no route-target extended community attributes associated with it until specified by the route-target command.
Command Modes
VRF configuration
Command History
Release
|
Modification
|
12.0(5)T
|
This command was introduced.
|
Usage Guidelines
The route-target command creates lists of import and export route-target extended communities for the specified VRF. Enter the command one time for each target community. Learned routes that carry a specific route-target extended community are imported into all VRFs configured with that extended community as an import route target. Routes learned from a VRF site (for example, by Border Gateway Protocol (BGP), Routing Information Protocol (RIP), or static route configuration) contain export route targets for extended communities configured for the VRF added as route attributes to control the VRFs into which the route is imported.
The route target specifies a target VPN extended community. Like a route-distinguisher, an extended community is composed of either an autonomous system number and an arbitrary number or an IP address and an arbitrary number. You can enter the numbers in either of these formats:
16-bit AS number:your 32-bit number
For example, 101:3.
32-bit IP address:your 16-bit number
For example, 192.168.122.15: 1.
Examples
The following example shows how to configure route-target extended community attributes for a VRF. The result of the command sequence is that VRF named vrf_blue has two export extended communities (1000:1 and 1000:2) and two import extended communities (1000:1 and 173.27.0.130:200).
Router(config)# ip vrf vrf_blue
Router(config-vrf)# route-target both 1000:1
Router(config-vrf)# route-target export 1000:2
Router(config-vrf)# route-target import 173.27.0.130:200
Related Commands
Command
|
Description
|
import map
|
Configures an import route map for a VRF.
|
ip vrf
|
Configures a VRF routing table.
|
set mpls experimental
The set mpls experimental command is replaced by the set mpls experimental imposition command. See the set mpls experimental imposition command for more information.
set mpls experimental imposition
To set the value of the Multiprotocol Label Switching (MPLS) experimental (EXP) field on all imposed label entries, use the set mpls experimental imposition command in QoS policy-map class configuration mode. To disable the setting, use the no form of this command.
set mpls experimental imposition {mpls-exp-value | from-field [table table-map-name]}
no set mpls experimental imposition {mpls-exp-value | from-field [table table-map-name]}
Syntax Description
mpls-exp-value
|
Specifies the value used to set MPLS EXP bits defined by the policy map. Valid values are numbers from 0 to 7.
|
from-field
|
Specific packet-marking category to be used to set the MPLS EXP imposition value. If you are using a table map for mapping and converting packet-marking values, this establishes the "map from" packet-marking category. Packet-marking category keywords are as follows:
• precedence
• dscp
|
table
|
(Optional) Used in conjunction with the from-field argument. Indicates that the values set in a specified table map will be used to set the MPLS EXP imposition value.
|
table-map-name
|
(Optional) Used in conjunction with the table keyword. Name of the table map used to specify the MPLS EXP imposition value. The name can be a maximum of 64 alphanumeric characters.
|
Defaults
No MPLS EXP value is set.
Command Modes
QoS policy-map class configuration
Command History
Release
|
Modification
|
12.2(13)T
|
This command replaces (renames) the set mpls experimental command, introduced in 12.1(5)T. The set mpls experimental imposition command was modified for the Enhanced Packet Marking feature. A mapping table (table map) can now be used to convert and propagate packet-marking values.
|
Usage Guidelines
The set mpls experimental imposition command is supported only on input interfaces. Use this command during label imposition. This command sets the MPLS EXP field on all imposed label entries.
Using This Command with the Enhanced Packet Marking Feature
If you are using this command as part of the Enhanced Packet Marking feature, you can use this command to specify the "from-field" packet-marking category to be used for mapping and setting the class of service (CoS) value. The "from-field" packet-marking categories are as follows:
•
Precedence
•
Differentiated services code point (DSCP)
If you specify a "from-field" category but do not specify the table keyword and the applicable table-map-name argument, the default action will be to copy the value associated with the "from-field" category as the MPLS EXP imposition value. For instance, if you configure the set mpls experimental imposition precedence command, the precedence value will be copied and used as the MPLS EXP imposition value.
You can configure the set mpls experimental imposition dscp command, and the DSCP value will be copied and used as the MPLS EXP imposition value.
Note
If you configure the set mpls experimental imposition dscp command, only the first three bits (the class selector bits) of the DSCP field are used.
Examples
The following example shows how to set the MPLS EXP value to 3 on all imposed label entries:
Router(config-pmap)# set mpls experimental imposition 3
The following example shows how to create the policy map named policy1 to use the packet-marking values defined in a table map named table-map1. The table map was created earlier with the table-map (value mapping) command. For more information about the table-map (value mapping) command, see the table-map (value mapping) command page.
The following example sets the MPLS EXP imposition value according to the DSCP value defined in table-map1.
Router(config)# policy-map policy1
Router(config-pmap)# class class-default
Router(config-pmap-c)# set mpls experimental imposition dscp table table-map1
Router(config-pmap-c)# exit
Related Commands
Command
|
Description
|
set dscp
|
Marks a packet by setting the Layer 3 DSCP value in the ToS byte.
|
set mpls experimental topmost
|
Sets the MPLS EXP field value in the topmost label on either an input or an output interface.
|
set precedence
|
Sets the precedence value in the packet header.
|
show table-map
|
Displays the configuration of a specified table map or all table maps.
|
table-map (value mapping)
|
Creates and configures a mapping table for mapping and converting one packet-marking value to another.
|
set mpls experimental topmost
To set the Multiprotocol Label Switching (MPLS) experimental (EXP) field value in the topmost label on either an input or an output interface, use the set mpls experimental topmost command in QoS policy-map class configuration mode. To disable the setting, use the no form of this command.
set mpls experimental topmost {mpls-exp-value | qos-group [table table-map-name]}
no set mpls experimental topmost {mpls-exp-value | qos-group [table table-map-name]}
Syntax Description
mpls-exp-value
|
Specifies the value used to set MPLS experimental bits defined by the policy map. Valid values are numbers from 0 to 7.
|
qos-group
|
Specifies that the qos-group packet-marking category is used to set the MPLS EXP imposition value. If you are using a table map for mapping and converting packet-marking values, this establishes the "map from" packet-marking category.
|
table
|
(Optional) Used in conjunction with the qos-group keyword. Indicates that the values set in a specified table map will be used to set the MPLS EXP value.
|
table-map-name
|
(Optional) Used in conjunction with the table keyword. Name of the table map used to specify the MPLS EXP value. The name can be a maximum of 64 alphanumeric characters.
|
Defaults
No MPLS EXP value is set.
Command Modes
QoS policy-map class configuration
Command History
Release
|
Modification
|
12.2(13)T
|
This command was introduced.
|
Usage Guidelines
This command sets the MPLS EXP value only in the topmost label. This command does not affect an IP packet. The MPLS field in the topmost label header is not changed.
Using This Command with the Enhanced Packet Marking Feature
If you are using this command as part of the Enhanced Packet Marking feature, you can use this command to specify the qos-group packet-marking category to be used for mapping and setting the differentiated services code point (DSCP) value.
If you specify the qos-group category but do not specify the table keyword and the applicable table-map-name argument, the default action will be to copy the value associated with the qos-group category as the MPLS EXP topmost value. For instance, if you configure the set mpls experimental topmost qos-group command, the QoS group value will be copied and used as the MPLS EXP topmost value.
The valid value range for the MPLS EXP topmost value is a number from 0 to 7. The valid value range for the QoS group is a number from 0 to 99. Therefore, when configuring the set mpls experimental topmost qos-group command, note the following points:
•
If a QoS group value falls within both value ranges (for example, 6), the packet-marking value will be copied and the packets will be marked.
•
If a QoS group value exceeds the MPLS EXP topmost range (for example, 10), the packet-marking value will not copied and the packet will not be marked. No action is taken.
Examples
The following example shows how to set the MPLS EXP value to 3 in the topmost label of an input or output interface:
Router(config-pmap)# set mpls experimental topmost 3
The following example shows how to create the policy map named policy1 to use the packet-marking values defined in a table map named table-map1. The table map was created earlier with the table-map (value mapping) command. For more information about the table-map (value mapping) command, see the table-map (value mapping) command page.
The following example shows how to set the MPLS EXP value according to the QoS group value defined in table-map1.
Router(config)# policy-map policy1
Router(config-pmap)# class class-default
Router(config-pmap-c)# set mpls experimental topmost qos-group table table-map1
Router(config-pmap-c)# exit
Related Commands
Command
|
Description
|
match mpls experimental topmost
|
Matches the MPLS EXP field value in the topmost label.
|
set mpls experimental imposition
|
Sets the value of the MPLS EXP field on all imposed label entries.
|
set qos-group
|
Sets a group ID that can be used later to classify packets.
|
show table-map
|
Displays the configuration of a specified table map or all table maps.
|
table-map (value mapping)
|
Creates and configures a mapping table for mapping and converting one packet-marking value to another.
|
set mpls-label
To enable a route to be distributed with a Multiprotocol Label Switching (MPLS) label if the route matches the conditions specified in the route map, use the set mpls-label command in route map configuration mode. To disable this function, use the no form of this command.
set mpls-label
no set mpls-label
Syntax Description
This command has no arguments or keywords.
Defaults
No route with an MPLS label is distributed.
Command Modes
Route map configuration
Command History
Release
|
Modification
|
12.0(21)ST
|
This command was introduced.
|
12.0(22)S
|
This command was integrated into Cisco IOS Release 12.0(22)S.
|
12.2(13)T
|
This command was integrated into Cisco IOS Release 12.2(13)T.
|
Usage Guidelines
This command can be used only with the neighbor route-map out command to manage outbound route maps for a Border Gateway Protocol (BGP) session.
Use the route-map global configuration command with match and set route-map configuration commands to define the conditions for redistributing routes from one routing protocol into another. Each route-map command has a list of match and set commands associated with it. The match commands specify the match criteria—the conditions under which redistribution is allowed for the current route-map command. The set commands specify the set actions—the particular redistribution actions to perform if the criteria enforced by the match commands are met. The no route-map command deletes the route map.
Examples
The following example shows how to create a route map that enables the route to be distributed with a label if the IP address of the route matches an IP address in ACL 1.
Router(config-router)# route-map incoming permit 10
Router(config-route-map)# match ip address 1
Router(config-route-map)# set mpls-label
Related Commands
Command
|
Description
|
match ip address
|
Distributes any routes that have a destination network number address that is permitted by a standard or extended access list.
|
match mpls-label
|
Redistributes routes that contain MPLS labels and match the conditions specified in the route map.
|
route-map (IP)
|
Defines the conditions for redistributing routes from one routing protocol into another, or enables policy routing.
|
set ospf router-id
To set a separate Open Shortest Path First (OSPF) router ID for each interface or subinterface on a provider edge (PE) router for each directly attached customer edge (CE) router, use the set ospf router-id command in route-map configuration mode.
set ospf router-id
Syntax Description
This command has no arguments or keywords.
Defaults
Open Shortest Path First (OSPF) router ID is not set.
Command Modes
Route-map configuration
Command History
Release
|
Modification
|
12.0(7)T
|
This command was introduced.
|
Usage Guidelines
To use this command, you must enable OSPF and create a routing process.
Examples
The following example shows how to match the PE router IP address 192.168.0.0 against the interface in access list 1 and set to the OSPF router ID:
router ospf 2 vrfvpn1-site1
redistribute bgp 100 metric-type 1 subnets
network 202.0.0.0 0.0.0.255 area 1
neighbor 172.19.89. 62 remote-as 100
access-list 1 permit 192.168.0.0
route-map vpn1-site1-map permit 10
Related Commands
Command
|
Description
|
router ospf
|
Enables OSPF routing, which places the router in router configuration mode.
|
set port flowcontrol
To set the receive flow-control value for a particular Gigabit Ethernet switching module port, use the set port flowcontrol command in privileged EXEC mode. To reset the receive flow-control value to the default, use the no form of this command.
set port flowcontrol {receive | send} [module-number | port-number] {off | on | desired}
no set port flowcontrol {receive | send} [module-number | port-number] {off | on | desired}
Syntax Description
receive
|
Indicates whether the port can receive administrative status from a remote device.
|
send
|
Indicates whether the local port can send administrative status to a remote device.
|
module-number
|
(Optional) Number of the module.
|
port-number
|
(Optional) Number of the port on the module.
|
off
|
When used with receive, it turns off an attached device's ability to send flow-control packets to a local port.
When used with send, it turns off the local port's ability to send administrative status to a remote device.
|
on
|
When used with receive, it requires that a local port receive administrative status from a remote device.
When used with send, the local port sends administrative status to a remote device.
|
desired
|
When used with receive, it allows a local port to operate with an attached device that is required to send flow-control packets or with an attached device that is not required to, but may send flow-control packets.
When used with send, the local port sends administrative status to a remote device if the remote device supports it.
|
Defaults
receive—off
send—desired
Default on multiplexed ports is on. The exception to these defaults applies to the 18-port Gigabit Ethernet switching module. For this module, the defaults are shown below:
•
Ports 1-2—send is off and receive is desired
•
Ports 3-18—send is on and receive is desired
Command Modes
Privileged EXEC
Command History
Release
|
Modification
|
12.2(11)T
|
This command was introduced and implemented on the Cisco 2600 series, Cisco 3600 series, and Cisco 3700 series routers
|
Usage Guidelines
This command is supported on Gigabit Ethernet switching modules only.
Examples
The following examples show how to use the set port flowcontrol command set.
The following example show how to set the port 5/1 flow-control receive administration status to on (port requires far end to send flowcontrol packets):
Router# set port flowcontrol receive 5/1 on
The following example show how to set the port 5/1 flow-control receive administration status to desired (port allows far end to send flowcontrol packets if far end supports it):
Router# set port flowcontrol receive 5/1 desired
The following example show how to set the port 5/1 flow-control receive administration status to off (port does not allow far end to send flowcontrol packets):
Router# set port flowcontrol receive 5/1 off
The following example show how to set port 5/1 flow-control send administration status o on (port sends flowcontrol packets to far end):
Router# set port flowcontrol send 5/1 on
The following example show how to set port 5/1 flow-control send administration status to desired (port sends flowcontrol packets to far end if far end supports it):
Router# set port flowcontrol send 5/1 desired
The following example show how to set port 5/1 flow-control send administration status to off (port does not send flowcontrol packets to far end):
Router# set port flowcontrol send 5/1 off
Related Commands
Command
|
Description
|
show port flowcontrol
|
Displays per-port status information and statistics related to flow control.
|
set vlan
To group ports into a virtual LAN (VLAN), use the set vlan command in privileged EXEC mode.
set vlan vlan-number module/port
set vlan vlan-number [name name] [type {ethernet | fddi | fddinet | trcrf | trbrf}]
[state {active | suspend}] [said said] [mtu mtu] [ring hex-ring-number]
[decring decimal-ring-number] [bridge bridge-number] [parent vlan-number] [mode {srt |
srb}] [stp {ieee | ibm | auto}] [translation vlan-number] [backupcrf {off | on}]
[aremaxhop hop-count] [stemaxhop hop-count]
Syntax Description
vlan-number
|
Number identifying the VLAN.
|
module
|
Number of the module. This argument is not valid when defining or configuring Token Ring Bridge Relay Functions (TRBRFs).
|
port
|
Number of the port on the module belonging to the VLAN; this argument does not apply to TRBRFs.
|
name name
|
(Optional) Defines a text string used as the name of the VLAN (1 to 32 characters).
|
type {ethernet | fddi | fddinet | trcrf | trbrf}
|
(Optional) Identifies the VLAN type. The default type is Ethernet.
|
state {active | suspend}
|
(Optional) Specifies whether the state of the VLAN is active or suspended. VLANs in suspended state do not pass packets. The default state is active.
|
said said
|
(Optional) Specifies the security association identifier. Possible values are 1 to 4294967294. The default is 100001 for VLAN1, 100002 for VLAN 2, 100003 for VLAN 3, and so on. This argument does not apply to Token Ring Concentrator Relay Functions (TRCRFs) or TRBRFs.
|
mtu mtu
|
(Optional) Specifies the maximum transmission unit (packet size, in bytes) that the VLAN can use. Possible values are 576 to 18190. The default is 1500 bytes.
|
ring hex-ring-number
|
(Optional) Specifies the logical ring number for Token Ring VLANs. Possible values are hexadecimal numbers 0x1 to 0xFFF. This argument is valid and required only when defining a TRCRF.
|
decring decimal-ring-number
|
(Optional) Specifies the logical ring number for Token Ring VLANs. Possible values are decimal numbers 1 to 4095. This argument is valid and required only when defining a TRCRF.
|
bridge bridge-number
|
(Optional) Specifies the identification number of the bridge. Possible values are hexadecimal numbers 0x1 to 0xF. For Token Ring VLANs, the default is 0F. This argument is not valid for TRCRFs.
|
parent vlan-number
|
(Optional) Sets a parent VLAN. The range for vlan-number is 2 to 1005. This argument identifies the TRBRF to which a TRCRF belongs and is required when defining a TRCRF.
|
mode {srt | srb}
|
(Optional) Specifies the TRCRF bridging mode.
|
stp {ieee | ibm | auto}
|
(Optional) Specifies the Spanning Tree Protocol version for a TRBRF to use: source-routing transparent (ieee), source-route bridging (ibm), or automatic source selection (auto).
|
translation vlan-number
|
(Optional) Specifies a translational VLAN used to translate FDDI to Ethernet. Valid values are from 1 to 1005. This argument is not valid for defining or configuring Token Ring VLANs.
|
backupcrf {off | on}
|
(Optional) Specifies whether the TRCRF is a backup path for traffic.
|
aremaxhop hop-count
|
(Optional) Specifies the maximum number of hops for All-Routes Explorer frames. Possible values are 1 to 14. The default is 7. This argument is only valid when defining or configuring TRCRFs.
|
stemaxhop hop-count
|
(Optional) Specifies the maximum number of hops for Spanning-Tree Explorer frames. Possible values are 1 to 14. The default is 7. This argument is only valid when defining or configuring TRCRFs.
|
Defaults
The default configuration has all switched Ethernet ports and Ethernet repeater ports in VLAN 1. The default SAID is 100001 for VLAN 1, 100002 for VLAN 2, 100003 for VLAN 3, and so on. The default type is Ethernet. The default MTU is 1500 bytes. The default state is active.
The default TRBRF is 1005, the default TRCRF is 1003, and the default MTU for TRBRFs and TRCRFs is 4472. The default state is active. The default aremaxhop is 7; the default stemaxhop is 7.
Command Modes
Privileged EXEC
Usage Guidelines
You cannot use the set vlan command until the networking device is either in VTP transparent mode or until a VTP domain name has been set.
Valid MTU values for Token Ring VLAN are 1500 or 4472. While you can enter any value for the MTU value, the value you enter defaults to the next lowest valid value.
You cannot set multiple VLANs for Inter-Switch Link (ISL) ports using this command. The VLAN name can be from 1 to 32 characters in length. If adding a new VLAN, the VLAN number must be within the range 2 to 1001. When modifying a VLAN, the valid range for the VLAN number is 2 to 1005.
On a new Token Ring VLAN, if you do not specify the parent parameter for a TRCRF, the default TRBRF (1005) is used.
Examples
The following example shows how to set VLAN 850 to include ports 4 through 7 on module 3. Because ports 4 through 7 were originally assigned to TRCRF 1003, the message reflects the modification of VLAN 1003.
Router# set vlan 850 3/4-7
---- -----------------------
Related Commands
Command
|
Description
|
clear vlan
|
Deletes an existing VLAN from a management domain.
|
show vlans
|
Displays VLAN subinterfaces.
|
set vlan mapping
To map 802.1Q virtual LANs (VLANs) to Inter-Switch Link (ISL) VLANs, use the set vlan mapping command in privileged EXEC mode.
set vlan mapping dot1q 1q-vlan-number isl isl-vlan-number
Syntax Description
dot1q
|
Specifies the 802.1Q VLAN.
|
1q-vlan-number
|
Number identifying the 802.1Q VLAN; valid values are 1001 to 4095.
|
isl
|
Specifies the ISL VLAN.
|
isl-vlan-number
|
Number identifying the ISL VLAN; valid values are 1 to 1000.
|
Defaults
No 802.1Q-to-ISL mappings are defined.
Command Modes
Privileged EXEC
Usage Guidelines
IEEE 802.1Q VLAN trunks support VLANs 1 through 4095. ISL VLAN trunks support VLANs 1 through 1000. The switch automatically maps 802.1Q VLANs 1000 and lower to ISL VLANs with the same number.
The native VLAN of the 802.1Q trunk cannot be used in the mapping.
Use this feature to map 802.1Q VLANs above 1000 to ISL VLANs. Note that if you map a 802.1Q VLAN over 1000 to an ISL VLAN, the corresponding 802.1Q VLAN will be blocked. For example, if you map 802.1Q VLAN 2000 to ISL VLAN 200, then 802.1Q VLAN 200 will be blocked.
You can map up to seven VLANs. Only one 802.1Q VLAN can be mapped to an ISL VLAN. For example, if 802.1Q VLAN 800 has been automatically mapped to ISL VLAN 800, do not manually map any other 802.1Q VLANs to ISL VLAN 800.
You cannot overwrite existing 802.1Q VLAN mapping. If the 802.1Q VLAN number is in the mapping table, the command is aborted. You must first clear that mapping.
If vlan-number does not exist, then either of the following occurs:
•
If the switch is in server or transparent mode, the VLAN is created with all default values.
•
If the switch is in client mode, then the command proceeds without creating the VLAN. A warning will be given indicating that the VLAN does not exist.
If the table is full, the command is aborted with an error message indicating the table is full.
Examples
The following example shows how to map VLAN 1022 to ISL VLAN 850:
Router# set vlan mapping dot1q 1022 isl 850
Vlan 850 configuration successful
The following example shows the display if you enter a VLAN that does not exist:
Router# set vlan mapping dot1q 1017 isl 999
Warning: vlan 999 non-existent
Vlan 999 configuration successful
The following example shows the display if you enter an existing mapping:
Router# set vlan mapping dot1q 1033 isl 722
722 exists in the mapping table. Please clear the mapping first.
The following example shows the display if the mapping table is full:
Router# set vlan mapping dot1q 1099 isl 917
Related Commands
Command
|
Description
|
clear vlan mapping
|
Deletes existing 802.1Q VLAN to ISL VLAN-mapped pairs.
|
show vlans
|
Displays VLAN subinterfaces.
|
shortcut-frame-count
To specify the maximum number of times a packet can be routed to the default router within shortcut-frame time before a Multiprotocol over ATM (MPOA) resolution request is sent, use the shortcut-frame-count command in MPC configuration mode. To restore the default shortcut-setup frame count value, use the no form of this command.
shortcut-frame-count count
no shortcut-frame-count
Syntax Description
count
|
Shortcut-setup frame count. The default is 10 frames.
|
Defaults
The default is 10 frames.
Command Modes
MPC configuration
Command History
Release
|
Modification
|
11.3(3a)WA4(5)
|
This command was introduced.
|
Examples
The following example shows how to set the shortcut-setup frame count to 5 for the MPC:
Router(mpoa-client-config)# shortcut-frame-count 5
Related Commands
Command
|
Description
|
atm-address
|
Overrides the control ATM address of an MPC or MPS.
|
mpoa client config name
|
Defines an MPC with a specified name.
|
shortcut-frame-time
|
Sets the shortcut-setup frame time (in seconds) for the MPC.
|
shortcut-frame-time
To set the shortcut-setup frame time (in seconds) for the Multiprotocol over ATM (MPOA) client (MPC), use the shortcut-frame-time command in MPC configuration mode. To restore the default shortcut-setup frame-time value, use the no form of this command.
shortcut-frame-time time
no shortcut-frame-time
Syntax Description
time
|
Shortcut-setup frame time (in seconds).
|
Defaults
The default is 1 second.
Command Modes
MPC configuration
Command History
Release
|
Modification
|
11.3(3a)WA4(5)
|
This command was introduced.
|
Examples
The following example shows how to set the shortcut-setup frame time to 7 for the MPC:
Router(mpoa-client-config)# shortcut-frame-time 7
Related Commands
Command
|
Description
|
atm-address
|
Overrides the control ATM address of an MPC or MPS.
|
mpoa client config name
|
Defines an MPC with a specified name.
|
shortcut-frame-count
|
Specifies the maximum number of times a packet can be routed to the default router within shortcut-frame time before an MPOA resolution request is sent.
|
show adjacency
To display Cisco Express Forwarding (CEF) adjacency table information, use the show adjacency command in user EXEC or privileged EXEC mode.
show adjacency [type number] [detail] [summary]
Syntax Description
type number
|
(Optional) Displays CEF adjacency information for the specified interface type and number.
|
detail
|
(Optional) Displays detailed adjacency information, including Layer 2 information.
|
summary
|
(Optional) Displays CEF adjacency table summary information.
|
Command Modes
Exec EXEC
Privileged EXEC
Command History
Release
|
Modification
|
11.2 GS
|
This command was introduced.
|
11.1 CC
|
Multiple platform support was added.
|
12.2(8)T
|
The detail keyword output was modified to show the epoch value for each entry of the adjacency table.
The summary keyword output was modified to show the table epoch for the adjacency table.
|
Usage Guidelines
This command is used to verify that an adjacency exists for a connected device, that the adjacency is valid, and that the MAC header rewrite string is correct.
Examples
The following is sample output from the show adjacency detail command:
Router# show adjacency detail
Protocol Interface Address
IP Serial5/0/0/1:1 point2point(7)
IP Serial5/0/1/1:1 point2point(7)
The following is sample output from the show adjacency summary command:
Router# show adjacency summary
Adjacency Table has 2 adjacencies
Table epoch: 14 (2 entries at this epoch)
Interface Adjacency Count
Table 3 describes the significant fields shown in the displays.
Table 3 show adjacency Field Descriptions
Field
|
Description
|
Protocol
|
Routed protocol to which the adjacency is related.
|
Interface
|
Outgoing interface associated with the adjacency.
|
Address
|
The address can represent one of these addresses:
• Next-hop address
• Point-to-point address
The number (in parentheses) that follows this field indicates the number of internal references to the adjacency.
|
Table epoch
|
Table epoch value at the time when the adjacency was last modified.
|
Related Commands
show cable bundle
To display the forwarding table for the specified interface, use the show cable bundle command in privileged EXEC mode.
show cable bundle bundle-number forwarding-table
Syntax Description
bundle-number
|
Specifies the bundle identifier. Valid range is from 1 to 255.
|
forwarding-table
|
Displays the forwarding table for the specified interface.
|
Command Modes
Privileged EXEC
Command History
Release
|
Modification
|
12.0(7)XR
|
This command was introduced.
|
Examples
In the following example, a cable bundle of 25 is specified:
Router# show cable bundle 25 forwarding-table
Table 4 describes the significant fields shown in the display.
Table 4 show cable bundle Field Descriptions
Field
|
Description
|
MAC address
|
Media Access Control ID for each interface in the bundle.
|
Interface
|
The cable interface slot and port number.
|
Related Commands
Command
|
Description
|
cable bundle
|
Creates an interface bundle.
|
show cef drop
To display a list of which packets each line card dropped, use the show cef drop command in user EXEC or privileged EXEC mode.
show cef drop
Syntax Description
This command has no arguments or keywords.
Command Modes
User EXEC
Privileged EXEC
Command History
Release
|
Modification
|
11.2 GS
|
This command was introduced to support the Cisco 12012 Internet router.
|
11.1 CC
|
Multiple platform support was added.
|
12.0(22)S
|
The display output for this command was modified to include support for Cisco Express Forwarding for IPv6 (CEFv6) and distributed CEF for IPv6 (dCEFv6) packets.
|
12.0(23)S
|
This command was integrated into Cisco IOS Release 12.0(23)S.
|
12.2(13)T
|
This command was integrated into Cisco IOS Release 12.2(13)T. Previously there was a show cef command, and drop was a keyword of that command.
|
12.2(14)S
|
This command was integrated into Cisco IOS Release 12.2(14)S.
|
Usage Guidelines
A line card might drop packets because of encapsulation failure, absence of route information, or absence of adjacency information.
A packet is sent to a different switching path (punted) because CEF does not support the encapsulation or feature, the packet is destined for the router, or the packet has IP options, such as time stamp and record route. IP options are process switched.
Note
If CEFv6 or dCEFv6 is enabled globally on the router, the show cef drop command displays IPv6 CEF counter information and IPv4 CEF counter information. If CEFv6 or dCEFv6 is not enabled globally on the router, the command displays only IPv4 CEF counter information.
Examples
The following is sample output from the show cef drop command:
Slot Encap_fail Unresolved Unsupported No_route No_adj ChksumErr
Slot Encap_fail Unresolved Unsupported No_route No_adj
Table 5 describes the significant fields shown in the display.
Table 5 show cef drop Field Descriptions
Field
|
Description
|
Slot
|
The slot number on which the packets were received.
|
Encap_fail
|
Indicates the number of packets dropped after exceeding the limit for packets punted to the processor due to missing adjacency information (CEF throttles packets passed up to the process level at a rate of one packet per second).
|
Unresolved
|
Indicates the number of packets dropped due to an unresolved prefix in the Forwarding Information Base (FIB) table.
|
Unsupported
|
Indicates the number of packets fast-dropped by CEF (drop adjacency).
|
No_route
|
Indicates the number of packets dropped due to a missing prefix in the FIB table.
|
No_adj
|
Indicates the number of packets dropped due to incomplete adjacency.
|
ChksumErr
|
Indicates the number of IPv4 packets received with a checksum error.
Note This field is not supported for IPv6 packets.
|
Related Commands
Command
|
Description
|
show cef interface
|
Displays CEF-related interface information.
|
show ipv6 cef
|
Displays entries in the IPv6 FIB.
|
show cef events
To display a list of events internal to the CEF process, use the show cef events command in user EXEC or privileged EXEC mode.
show cef events
Syntax Description
This command has no arguments or keywords.
Command Modes
User EXEC
Privileged EXEC
Command History
Release
|
Modification
|
12.0(23)S
|
This command was introduced.
|
12.0(24)S
|
This command was integrated into Cisco IOS Release 12.0(24)S.
|
12.2(13)T
|
This command was integrated into Cisco IOS Release 12.2(13)T.
|
Examples
The following is sample output from the show cef events command:
CEF events (14/0 recorded/ignored)
+00:00:00.000 SubSys ipfib init
+00:00:00.000 SubSys ipfib_ios init
+00:00:00.000 SubSys ipfib_util init
+00:00:00.000 SubSys adj_ios init
+00:00:00.000 SubSys ipfib_les init
+00:00:01.272 Flag FIB enabled set to yes
+00:00:01.272 Flag FIB switching enabled set to yes
+00:00:01.272 GState CEF enabled
+00:00:02.872 Process Background created
+00:00:02.872 Flag FIB running set to yes
+00:00:02.872 Process Background event loop enter
+00:00:02.912 Flag FIB switching running set to yes
+00:00:02.920 Process Scanner created
+00:00:02.920 Process Scanner event loop enter
Table 6 describes the significant fields shown in the display.
Table 6 show cef events Field Descriptions
Field
|
Description
|
Time
|
Time that the event occurred.
|
Event
|
Type of event that occurred.
|
Details
|
Detailed description of the event.
|
Related Commands
show cef interface
To display detailed Cisco Express Forwarding (CEF) information for all interfaces, use the show cef interface command in user EXEC or privileged EXEC mode.
show cef interface [type number] [statistics] [detail]
Syntax Description
type number
|
(Optional) Interface type and number.
|
statistics
|
(Optional) Displays switching statistics for the line card.
|
detail
|
(Optional) Displays detailed CEF information for the specified interface type and number.
|
Command Modes
User EXEC
Privileged EXEC
Command History
Release
|
Modification
|
11.2 GS
|
This command was introduced to support the Cisco 12012 Internet router.
|
11.1 CC
|
Multiple platform support was added.
|
12.0(14)ST
|
Documentation for the statistics keyword was updated.
|
12.2(2)T
|
Documentation for the statistics and detail keywords was updated.
|
12.0(22)S
|
The display output for this command was modified to include support for CEF for IPv6 (CEFv6) and distributed (dCEFv6) interface information.
|
12.0(23)S
|
This command was integrated into Cisco IOS Release 12.0(23)S.
|
12.2(13)T
|
This command was integrated into Cisco IOS Release 12.2(13)T.
|
12.2(14)S
|
This command was integrated into Cisco IOS Release 12.2(14)S.
|
Usage Guidelines
You can use this command to display the detailed CEF status for all of the interfaces.
Values entered for the type and number arguments display CEF status information for the specified interface type and number.
Examples
The following is sample output from the show cef interface detail command for Ethernet interface 1/0/0:
Router# show cef interface Ethernet 1/0/0 detail
Ethernet1/0/0 is up (if_number 9)
Corresponding hwidb fast_if_number 9
Corresponding hwidb firstsw->if_number 9
Internet address is 10.2.61.8/24
ICMP redirects are always sent
Per packet load-sharing is disabled
IP unicast RPF check is disabled
Inbound access list is not set
Outbound access list is not set
IP policy routing is disabled
Hardware idb is Ethernet1/0/0
Fast switching type 1, interface type 5
IP Distributed CEF switching enabled
IP Feature Fast switching turbo vector
IP Feature CEF switching turbo vector
Input fast flags 0x0, Output fast flags 0x0
Transmit limit accumulator 0x48001A82 (0x48001A82)
The following is sample output from the show cef interface Null 0 detail command:
Router# show cef interface Null 0 detail
Null0 is up (if_number 1)
Corresponding hwidb fast_if_number 1
Corresponding hwidb firstsw->if_number 1
Internet Protocol processing disabled
Interface is marked as nullidb
Packets switched to this interface on linecard are dropped to next slow path
Fast switching type 13, interface type 0
IP Feature CEF switching turbo vector
Input fast flags 0x0, Output fast flags 0x0
Slot -1 Slot unit -1 VC -1
Transmit limit accumulator 0x0 (0x0)
Table 7 describes the significant fields shown in the displays.
Table 7 show cef interface Field Descriptions
Field
|
Description
|
Ethernet1/0/0 is up
|
Indicates type, number, and status of the interface.
|
Internet address is
|
Internet address of the interface.
|
ICMP redirects are always sent
|
Indicates how packet forwarding is configured.
|
Per packet load-sharing is disabled
|
Indicates status of load sharing on the interface.
|
IP unicast RPF check is disabled
|
Indicates status of IP unicast Reverse Path Forwarding (RPF) check on the interface.
|
Inbound access list is not set
|
Indicates the number or name of the inbound access list if one is applied to this interface.
|
Outbound access list is not set
|
Indicates the number or name of the outbound access list if one is applied to this interface.
|
IP policy routing is disabled
|
Indicates the status of IP policy routing on the interface.
|
Hardware idb is Ethernet1/0/0
|
Interface type and number configured.
|
Fast switching type
|
Used for troubleshooting; indicates switching mode in use.
|
interface type 5
|
Indicates interface type.
|
IP Distributed CEF switching enabled
|
Indicates whether distributed CEF is enabled on this interface. (Cisco 7500 and 12000 series Internet routers only.)
|
IP Feature Fast switching turbo vector
|
Indicates IP fast switching type configured.
|
IP Feature CEF switching turbo vector
|
Indicates IP feature CEF switching type configured.
|
Input fast flags
|
Indicates the input status of various switching features, as follows:
• 0x0001 (input Access Control List [ACL] enabled)
• 0x0002 (policy routing enabled)
• 0x0004 (input rate limiting)
• 0x0008 (MAC/Prec accounting)
• 0x0010 (DSCP/PREC/QOS GROUP)
• 0x0020 (input named access lists)
• 0x0040 (NAT enabled on input)
• 0x0080 (crypto map on input)
• 0x0100 (QPPB classification)
• 0x0200 (inspect on input)
• 0x0400 (input classification)
• 0x0800 (casa input enable)
• 0x1000 (Virtual Private Network [VPN] enabled on a swidb)
• 0x2000 (input idle timer enabled)
• 0x4000 (unicast Reverse Path Forwarding [RPF] check)
• 0x8000 (per-address ACL enabled)
• 0x10000 (deaggregating a packet)
• 0x20000 (GPRS enabled on input)
• 0x40000 (URL RenDezvous)
• 0x80000 (QoS classification)
• 0x100000 (FR switching on interface)
• 0x200000 (WCCP redirect on input)
• 0x400000 (input classification)
|
Output fast flags
|
Indicates the output status of various switching features, as follows:
• 0x0001 (output ACL enabled)
• 0x0002 (IP accounting enabled)
• 0x0004 (WCC redirect enabled interface)
• 0x0008 (rate limiting)
• 0x0010 (MAC/Prec accounting)
• 0x0020 (DSCP/PREC/QOS GROUP)
• 0x0040 (D-QOS classification)
• 0x0080 (output named access lists)
• 0x0100 (NAT enabled on output)
• 0x0200 (TCP intercept enabled)
• 0x0400 (crypto map set on output)
• 0x0800 (output firewall)
• 0x1000 (RSVP classification)
• 0x2000 (inspect on output)
• 0x4000 (QoS classification)
• 0x8000 (QoS pre-classification)
• 0x10000 (output stile)
|
ifindex 7/(7)
|
Indicates a Cisco IOS internal index or identifier for this interface.
|
Slot 1 Slot unit 0 VC -1
|
The slot number and slot unit.
|
Transmit limit accumulator
|
Indicates the maximum number of packets allowed in the transmit queue.
|
IP MTU
|
The MTU size set on the interface.
|
Related Commands
Command
|
Description
|
show cef drop
|
Displays a list of which packets each line card dropped.
|
show cef linecard
|
Displays CEF-related interface information by line card.
|
show cef interface policy-statistics
To display detailed Cisco Express Forwarding (CEF) policy statistical information for all interfaces, use the show cef interface policy-statistics command in user EXEC or privileged EXEC mode.
show cef interface [type number] policy-statistics
Syntax Description
type number
|
(Optional) Interface type and number.
|
Command Modes
User EXEC
Privileged EXEC
Command History
Release
|
Modification
|
12.0(9)S
|
This command was introduced to support the Cisco 12000 series Internet routers.
|
12.0(17)ST
|
This command was integrated into Cisco IOS Release 12.0(17)ST.
|
12.0(23)S
|
This command was integrated into Cisco IOS Release 12.0(23)S.
|
12.2(13)T
|
This command was integrated into Cisco IOS Release 12.2(13)T.
|
Usage Guidelines
This command is available only on distributed switching platforms.
The type and number arguments display CEF status information for the specified interface type and number.
Examples
The following is sample output from the show cef interface policy-statistics command:
Router# show cef interface policy-statistics
POS7/0 is up (if_number 8)
The following is sample output from the show cef interface policy-statistics command showing policy statistics for Ethernet interface 1/0:
Router# show cef interface ethernet 1/0 policy-statistics
Ethernet1/0 is up (if_number 3)
Corresponding hwidb fast_if_number 3
Corresponding hwidb firstsw->if_number 3
Table 8 describes the significant fields shown in the display.
Table 8 show cef interface policy-statistics Field Descriptions
Field
|
Description
|
Index
|
Traffic index set with the route-map command.
|
Packets
|
Number of packets switched matching the index definition.
|
Bytes
|
Number of bytes switched matching the index definition.
|
Related Commands
Command
|
Description
|
show cef drop
|
Displays a list of which packets each line card dropped.
|
show cef linecard
|
Displays CEF-related interface information by line card.
|
show cef linecard
To display Cisco Express Forwarding (CEF)-related information by line card, use the show cef linecard command in user EXEC or privileged EXEC mode.
show cef linecard [slot-number] [detail] [internal]
Syntax Description
slot-number
|
(Optional) Slot number containing the line card about which to display CEF-related information. When you omit this argument, information about all line cards is displayed.
|
detail
|
(Optional) Displays detailed CEF information for the specified line card.
|
internal
|
(Optional) Displays internal CEF information for the specified line card.
|
Command Modes
User EXEC
Privileged EXEC
Command History
Release
|
Modification
|
11.2 GS
|
This command was introduced to support the Cisco 12012 Internet router.
|
11.1 CC
|
Multiple platform support was added.
|
12.0(10)S
|
Output display was changed.
|
12.1(2)T
|
This command was integrated into Cisco IOS Release 12.1(2)T.
|
12.0(22)S
|
The display output for this command was modified to include support for CEF for IPv6 (CEFv6) and distributed CEFv6 (dCEFv6) line card information.
|
12.0(23)S
|
This command was integrated into Cisco IOS Release 12.0(23)S.
|
12.2(13)T
|
This command was integrated into Cisco IOS Release 12.2(13)T.
|
12.2(14)S
|
This command was integrated into Cisco IOS Release 12.2(14)S.
|
Usage Guidelines
This command is available only on distributed switching platforms.
When you omit the slot-number argument, information about all line cards is displayed. When you omit the slot-number argument and include the detail keyword, detailed information is displayed for all line cards. When you omit the slot-number argument and include the internal keyword, detailed internal information is displayed for all line cards. When you omit all keywords and arguments, the show cef linecard command displays important information about all line cards in table format.
Examples
The following is sample output from the show cef linecard detail command for all line cards:
Router# show cef linecard detail
CEF linecard slot number 0, status up
Sequence number 4, Maximum sequence number expected 28, Seq Epoch 2
Send failed 0, Out Of Sequence 0, drops 0
Linecard CEF reset 0, reloaded 1
95 elements packed in 6 messages(3588 bytes) sent
linecard in sync after reloading
0/0/0 xdr elements in LowQ/MediumQ/HighQ
11/9/69 peak elements on LowQ/MediumQ/HighQ
Output packets 0, bytes 0, drops 0
Table name Version Prefix-xdr Status
Default-table 7 4 Active, up, sync
CEF linecard slot number 1, status up
Sequence number 4, Maximum sequence number expected 28, Seq Epoch 2
Send failed 0, Out Of Sequence 0, drops 0
Linecard CEF reset 0, reloaded 1
95 elements packed in 6 messages(3588 bytes) sent
linecard in sync after reloading
0/0/0 xdr elements in LowQ/MediumQ/HighQ
11/9/69 peak elements on LowQ/MediumQ/HighQ
Output packets 0, bytes 0, drops 0
Table name Version Prefix-xdr Status
Default-table 7 4 Active, up, sync
The following is sample output from the show cef linecard internal command for all line cards:
Router# show cef linecard internal
CEF linecard slot number 0, status up
Sequence number 11, Maximum sequence number expected 35
Send failed 0, Out Of Sequence 0
Linecard CEF reset 2, reloaded 2
flow features deactivate 2
4574 elements packed in 4495 messages(90286 bytes) sent
flow features deactivate 1
linecard disabled - failed a reload
0/0/0 xdr elements in LowQ/MediumQ/HighQ
Output packets 0, bytes 0, drops 0
Table name Version Prefix-xdr Status
Default-table 8 4 Active, sync
The following is sample output from the show cef linecard command. The command displays information for all line cards in table format.
Router# show cef linecard
Slot MsgSent XDRSent Window LowQ MedQ HighQ Flags
VRF Default-table, version 8, 6 routes
Slot Version CEF-XDR I/Fs State Flags
Table 9 describes the significant fields shown in the displays.
Table 9 show cef linecard Field Descriptions
Field
|
Description
|
Table name
|
Name of the CEF table.
|
Version
|
Number of the Forwarding Information Base (FIB) table version.
|
Prefix-xdr
|
Number of prefix IPC information elements XDRs processed.
|
Status
|
State of the CEF table.
|
Slot
|
Slot number of the line card.
|
MsgSent
|
Number of IPC messages sent.
|
XDRSent
|
XDRs packed into IPC messages sent from the Route Processor (RP) to the line card.
|
Window
|
Size of the IPC window between the line card and the RP.
|
LowQ/MedQ/HighQ
|
Number of XDR elements in the Low, Medium, and High priority queues.
|
Flags
|
Indicates the status of the line card. States are
• up—Line card is up.
• sync—Line card is in synchronization with the main FIB.
• reset—Line card FIB is reset.
• reloading—Line card FIB is being reloaded.
• disabled—Line card is disabled.
|
CEF-XDR
|
Number of CEF XDR messages processed.
|
I/Fs
|
Interface numbers.
|
Related Commands
Command
|
Description
|
show cef drop
|
Displays a list of which packets each line card dropped.
|
show cef interface
|
Displays CEF-related interface information.
|
show ipv6 cef
|
Displays entries in the IPv6 FIB.
|
show cef not-cef-switched
To display which packets were sent to a different switching path, use the show cef not-cef-switched command in user EXEC or privileged EXEC mode.
show cef not-cef-switched
Syntax Description
This command has no arguments or keywords.
Command Modes
User EXEC
Privileged EXEC
Command History
Release
|
Modification
|
11.2 GS
|
This command was introduced to support the Cisco 12012 Internet router.
|
11.1 CC
|
Multiple platform support was added.
|
12.0(22)S
|
The display output for this command was modified to include support for Cisco Express Forwarding for IPv6 (CEFv6) and distributed CEF for IPv6 (dCEFv6) packets.
|
12.0(23)S
|
This command was integrated into Cisco IOS Release 12.0(23)S.
|
12.2(13)T
|
This command was integrated into Cisco IOS Release 12.2(13)T. Previously there was a show cef command, and drop was a keyword of that command.
|
12.2(14)S
|
This command was integrated into Cisco IOS Release 12.2(14)S.
|
Usage Guidelines
If packets are not being cef switched and you want to determine why, enter the show cef not-cef switched command.
Note
If CEFv6 or dCEFv6 is enabled globally on the router, the show cef not-cef-switched command displays IPv6 CEF counter information and IPv4 CEF counter information. If CEFv6 or dCEFv6 is not enabled globally on the router, the command displays only IPv4 CEF counter information.
Examples
The following is sample output from the show cef not-cef switched command:
Router# show cef not-cef-switched
CEF Packets passed on to next switching layer
Slot No_adj No_encap Unsupp'ted Redirect Receive Options Access Frag
IPv6 CEF Packets passed on to next switching layer
Slot No_adj No_encap Unsupp'ted Redirect Receive Options Access MTU
Table 10 describes the significant fields shown in the display.
Table 10 show cef not-cef-switched Field Descriptions
Field
|
Meaning
|
Slot
|
The slot number on which the packets were received.
|
No_adj
|
Indicates the number of packets sent to the processor due to incomplete adjacency.
|
No_encap
|
Indicates the number of packets sent to the processor for Address Resolution Protocol (ARP) resolution.
|
Unsupp'ted
|
Indicates the number of packets punted to the next switching level due to unsupported features.
|
Redirect
|
Records packets that are ultimately destined to the router, and packets destined to a tunnel endpoint on the router. If the decapsulated tunnel is IP, it is CEF switched; otherwise, packets are process switched.
|
Receive
|
Indicates the number of packets ultimately destined to the router, or packets destined to a tunnel endpoint on the router. If the decapsulated tunnel packet is IP, the packet is CEF switched. Otherwise, packets are process switched.
|
Options
|
Indicates the number of packets with options. Packets with IP options are handled only at the process level.
|
Access
|
Indicates the number of packets punted due to an access list failure.
|
Frag
|
Indicates the number of packets punted due to fragmentation failure.
Note This field is not supported for IPv6 packets.
|
MTU
|
Indicates the number of packets punted due to maximum transmission unit (MTU) failure.
Note This field is not supported for IPv4 packets.
|
Related Commands
Command
|
Description
|
show cef drop
|
Displays a list of which packets each line card dropped.
|
show cef interface
|
Displays CEF-related interface information.
|
show ipv6 cef
|
Displays entries in the IPv6 FIB.
|
show cef timers
To display the current state of the timers internal to the CEF process, use the show cef timers command in user EXEC or privileged EXEC mode.
show cef timers
Syntax Description
This command has no arguments or keywords.
Command Modes
User EXEC
Privileged EXEC
Command History
Release
|
Modification
|
12.3(2)T
|
This command was introduced.
|
Examples
The following is sample output from the show cef timers command:
0.208 adjacency update hwidb
Table 11 describes the significant fields shown in the display.
Table 11 show cef timers Field Descriptions
Field
|
Description
|
Expiration
|
Seconds in which the timers will expire.
|
Type
|
Identification of the timer.
|
Related Commands
Command
|
Description
|
show cef interface
|
Displays CEF-related interface information.
|
show ipv6 cef
|
Displays entries in the IPv6 FIB.
|