Table Of Contents
Cisco NX-OS Interfaces Commands
bandwidth (interface)
carrier-delay
channel-group
clear counters interface port-channel
clear lacp counters
encapsulation dot1Q
feature interface-vlan
feature lacp
feature tunnel
interface loopback
interface port-channel
interface tunnel
interface vlan
lacp port-priority
lacp system-priority
medium
port-channel load-balance ethernet
rate-mode dedicated
rate-mode shared
show interface counters trunk
show interface port-channel
show interface port-channel counters
show interface switchport
show interface trunk
show lacp counters
show lacp interface
show lacp neighbor
show lacp port-channel
show lacp system-identifier
show port-channel compatibility-parameters
show port-channel database
show port-channel load-balance
show port-channel rbh-distribution
show port-channel summary
show port-channel traffic
show port-channel usage
show running-config interface port-channel
switchport
switchport access vlan
switchport host
switchport mode
switchport trunk allowed vlan
switchport trunk native vlan
system default switchport
tunnel destination
tunnel mode
tunnel path-mtu-discovery
tunnel source
tunnel ttl
vlan dot1q tag native
Cisco NX-OS Interfaces Commands
This chapter describes the Cisco NX-OS interfaces commands.
bandwidth (interface)
To set the inherited and received bandwidth values for an interface, use the bandwidth command in interface configuration mode. To restore the default values, use the no form of this command.
bandwidth {kbps | inherit [kbps]}
no bandwidth {kbps | inherit [kbps]}
Syntax Description
kbps
|
Intended bandwidth, in kilobits per second. Valid values are 1 to 10000000.
|
inherit
|
(Optional) Specifies the inherited bandwidth such as how a subinterface inherits the bandwidth of its main interface.
|
Defaults
1000000 kbps
Command Modes
Interface configuration
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
The bandwidth command sets an informational parameter to communicate only the current bandwidth to the higher-level protocols; you cannot adjust the actual bandwidth of an interface using this command.
Note
This is a routing parameter only. It does not affect the physical interface.
The bandwidth inherit command controls how a subinterface inherits the bandwidth of its main interface.
The no bandwidth inherit command enables all subinterfaces to inherit the default bandwidth of the main interface, regardless of the configured bandwidth. If a bandwidth is not configured on a subinterface, and you use the bandwidth inherit command, all subinterfaces will inherit the current bandwidth of the main interface. If you configure a new bandwidth on the main interface, all subinterfaces will use this new value.
If you do not configure a bandwidth on the subinterface and you configure the bandwidth inherit command on the main interface, the subinterfaces will inherit the specified bandwidth.
In all cases, if an interface has an explicit bandwidth setting configured, then that interface will use that setting, regardless of whether the bandwidth inheritance setting is in effect.
This command does not require a license.
Examples
This example shows how to configure all subinterfaces off this main interface to inherit the configured bandwidth:
switch(config-if)# bandwidth inherit 30000
Related Commands
Command
|
Description
|
show interface
|
Displays the interface configuration information.
|
carrier-delay
To set the carrier delay on an interface, use the carrier-delay command. To return to the default carrier delay value, use the no form of this command.
carrier-delay {sec | {msec value}}
no carrier-delay
Syntax Description
sec
|
Seconds of delay. The range of values is from 0 to 60.
|
value
|
Milliseconds of delay. The range of values is from 0 to 1000.
|
Defaults
The default is 2 seconds or 50 milliseconds.
Command Modes
Interface
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0(3)
|
This command was introduced.
|
Usage Guidelines
Note
You must enable the VLAN interface feature, using the feature interface-vlan command, before you can use this command.
If a link goes down and comes back up before the carrier delay timer expires, the down state is effectively filtered, and the rest of the software on the device is not aware that a link-down event occured. A large carrier delay timer results in fewer link-up/link-down events being detected. When you set the carrier delay time to 0, the device detects each link-up/link-down event that occurs.
Note
The carrier-delay command is supported only on the VLAN interface mode; no other interface modes support this command.
In most environments, a lower carrier delay time is better than a higher one. The exact value that you choose depends on the nature of the link outages and how long you expect these linkages to last in your network. If your data links are subject to short outages (especially if those outages last less time than it takes for your IP routing to converge) you should set a long carrier delay value to prevent these short outages from causing unnecessary churn in your routing tables. However, if you outages tend to be longer, then you may want to set a shorter carrier delay time so that the outages are detected sooner, and the IP route convergence begins and ends sooner.
This command does not require a license.
Examples
This example shows how to set the carrier delay timer to 20 minutes for VLAN 6:
switch(config)# interface vlan 6
switch(config-if)# carrier-delay 20
Related Commands
Command
|
Description
|
show interface vlan
|
Displays information about VLAN interfaces.
|
channel-group
To assign and configure a physical interface to a port-channel group, use the channel-group command. To remove the channel-group configuration from the interface, use the no form of this command.
channel-group number [force] [mode {active | on | passive}]
no channel-group [number]
Syntax Description
number
|
Number of channel group. Maximum number of port channels that can be configured is 192 across all VDCs, and the range of values is from 1 to 4096.
|
force
|
Forces the interface to join the channel group, although some parameters are not compatible. See Usage Guidelines below for information on the compatibility parameters and which ones can be forced.
|
mode
|
Specifies the port-channel mode of the interface.
|
on
|
This is the default channel mode, and all port channels that are not running LACP remain in this mode. If you attempt to change the channel mode to active or passive before enabling LACP, the device returns an error message. After you enable LACP globally, by using the feature lacp command, you enable LACP on each channel by configuring the channel mode as either active or passive. An interface in this mode does not initiate or respond to LACP packets. When an LACP attempts to negotiate with an interface in the on state, it does not receive any LACP packets and becomes an individual link with that interface; it does not join the channel group.
The default mode is on.
|
active
|
Specifies that when you enable the Link Aggregation Control Protocol (LACP), this command enables LACP on the specified interface. Interface is in active negotiating state, in which the port initiates negotiations with other ports by sending LACP packets.
|
passive
|
Specifies that when you enable LACP, this command enables LACP only if an LACP device is detected.The interface is in a passive negotiation state, in which the port responds to LACP packets that it receives but does not initiate LACP negotiation.
|
Defaults
None
Command Modes
Interface configuration
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
Use this command to create a channel group that includes the interface that you are working on and to add or remove specific interfaces from the channel group. Use this command to move a port from one channel group to another. You enter the channel group that you want the port to move to; the device automatically removes the specified from its present channel group and adds that port to the specified channel group.
After you enable LACP globally, by using the feature lacp command, you enable LACP on each channel by configuring the channel mode as either active or passive. A port channel in the on channel mode is a pure port channel and can aggregate a maximum of eight ports. It does not run LACP.
You cannot change the mode for an existing port channel or any of its interfaces if that port channel is not running LACP; the channel mode remains as on. The system returns an error message if you try.
All ports in one port channel must be in the same virtual device context (VDC). With LACP enabled, this requirement applies to the possible eight active ports and the possible eight standby ports. The port channels can originate in one VDC (with all ports in that channel in the same VDC) and partner with a port channel in another VDC (again, all ports in that channel must be in that VDC).
Use the no form of this command to remove the physical interface from the port channel. When you delete the last physical interface from a port channel, the port channel remains. To delete the port channel completely, use the no form of this interface port-channel command.
The compatibility check includes the following operational attributes:
•
Network layer
•
(Link) speed capability
•
Speed configuration
•
Duplex capability
•
Duplex configuration
•
Port mode
•
Access VLAN
•
Trunk native VLAN
•
Tagged or untagged
•
Allowed VLAN list
•
MTU size
•
SPAN—cannot be SPAN source or destination port
•
Layer 3 ports cannot have subinterfaces.
•
Storm control
•
Flow control capability
•
Flow control configuration
Use the show port-channel compatibility-parameters command to see the full list of compatibility checks that the Cisco NX-OS uses.
You can only add interfaces configured with the channel mode set to on to static port channels, that is without a configured aggregation protocol. And you can only add interfaces configured with the channel mode as active or passive to port channels that are running LACP.
You can configure these attributes on an individual member port. If you configure a member port with an incompatible attribute, Cisco NX-OS suspends that port in the port channel.
Alternatively, you can force ports with incompatible parameters to join the port channel as long the following parameters are the same:
•
(Link) speed capability
•
Speed configuration
•
Duplex capability
•
Duplex configuration
•
Flow control capability
•
Flow control configuration
When the interface joins a port channel, some of its individual parameters are removed and replaced with the values on the port channel, as follows:
•
Bandwidth
•
Delay
•
Extended Authentication Protocol over UDP
•
VRF
•
IP address (v4 and v6)
•
MAC address
•
Spanning Tree Protocol
•
NAC
•
Service policy
•
Quality of Service (QoS)
•
ACLs
Also, many interface parameters remain unaffected with the interface joins or leaves a port channel, as follows:
•
Beacon
•
Description
•
CDP
•
LACP port priority
•
Debounce
•
UDLD
•
MDIX
•
Rate mode
•
Shutdown
•
SNMP trap
If subinterfaces are configured for the port-channel interface and a member port is removed from the port channel, the configuration of the port-channel subinterface is not propagated to the member ports.
Any configuration changes that you make in any of the compatibility parameters to the port-channel interface are propagated to all interfaces within the same channel group as the port channel (for example, configuration changes are also propagated to the physical interfaces that are not part of the port channel but are part of the channel group).
You do not have to create a port-channel interface before you assign a physical interface to a channel group. A port-channel interface is created automatically when the channel group gets its first physical interface, if it is not already created.
You can create either a Layer 2 or a Layer 3 port channel by entering the interface port-channel command or when the channel group gets its first physical interface assignment. The port channels are not created at run time or dynamically.
This command does not require a license.
Examples
This example shows how to add an interface to LACP channel group 5 in active mode:
switch(config-if)# channel-group 5 mode active
Related Commands
Command
|
Description
|
show interface port-channel
|
Displays information about the traffic on the specified port-channel interface.
|
show port-channel summary
|
Displays information on the port channels.
|
show lacp
|
Displays LACP information.
|
clear counters interface port-channel
To clear the statistics for all interfaces for the specified port channel, use the clear counters interface port-channel command.
clear counters interface port-channel channel-number
Syntax Description
channel-number
|
Port-channel number. The range of values is from 1 to 4096.
|
Defaults
None
Command Modes
Any command mode
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
This command does not require a license.
Examples
This example shows how to clear all the counters for the specified port-channel:
switch(config)# clear counters interface port-channel 5
Related Commands
Command
|
Description
|
show interface port-channel counters
|
Displays information about port-channel statistics.
|
clear lacp counters
To clear the statistics for all interfaces for Link Aggregation Control Protocol (LACP) groups, use the clear lacp counters command.
clear lacp counters [interface port-channel channel-number]
Syntax Description
channel-number
|
(Optional) LACP port-channel number. The range of values is from 1 to 4096.
|
Defaults
None
Command Modes
Any command mode
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
If you enter this command for a static port-channel group, without the aggregation protocol enabled, the device ignores the command.
If you do not specify a channel number, the LACP counters for all LACP port groups are cleared.
This command does not require a license.
Examples
This example shows how to clear all the LACP counters:
switch(config)# clear lacp counters
This example shows how to clear all LACP counters for the LACP port-channel group 20:
switch(config)# clear lacp counters interface port-channel 20
Related Commands
Command
|
Description
|
show lacp counters
|
Displays information about LACP statistics.
|
encapsulation dot1Q
To enable IEEE 802.1Q encapsulation of traffic on a specified subinterface in a virtual LAN (VLAN), use the encapsulation dot1q command in subinterface configuration mode. To disable encapsulation, use the no form of this command.
encapsulation dot1Q vlan-id
no encapsulation dot1Q vlan-id
Syntax Description
vlan-id
|
VLAN to set when the interface is in access mode; valid values are from 1 to 4094, except for the VLANs reserved for internal switch use.
|
Defaults
No encapsulation
Command Modes
Subinterface configuration
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
IEEE 802.1Q encapsulation is configurable on Ethernet interfaces. IEEE 802.1Q is a standard protocol for interconnecting multiple switches and routers and for defining VLAN topologies.
Use the encapsulation dot1q command in subinterface range configuration mode to apply a VLAN ID to the subinterface.
This command does not require a license.
Examples
This example shows how to enable dot1Q encapsulation on a subinterface for VLAN 30:
switch(config-subif)# encapsulation dot1q 30
Related Commands
Command
|
Description
|
show vlan dot1Q
|
Displays dot1Q encapsulation information for a VLAN.
|
feature interface-vlan
To enable the creation of VLAN interfaces (switched virtual interfaces [SVI]), use the feature interface-vlan command in global configuration mode. To disable the VLAN interface feature, use the no form of this command.
feature interface-vlan
no feature interface-vlan
Syntax Description
This command has no arguments or keywords.
Defaults
Disabled
Command Modes
Global configuration
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
You must use the feature interface-vlan command before you can create VLAN interfaces.
This command does not require a license.
Examples
This example shows how to enable the interface VLAN feature:
switch(config)# feature interface-vlan
Related Commands
Command
|
Description
|
interface vlan
|
Creates a VLAN interface.
|
feature lacp
To enable Link Aggregation Control Protocol (LACP) port channeling on the device, use the feature lacp command. To disable LACP on the device, use the no form of this command.
feature lacp
no feature lacp
Syntax Description
This command has no arguments or keywords.
Defaults
Disabled
Command Modes
Global configuration
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
You must remove all the LACP configuration parameters from all port channels on the device before you can disable LACP. You cannot disable LACP while LACP configurations remain on the device.
Even after you enable LACP globally, you do not have to run LACP on all port channels on the device. You enable LACP on each channel mode using the channel-group mode command.
This command does not require a license.
Examples
This example shows how to enable LACP port channeling on the device:
switch(config)# feature lacp
Related Commands
Command
|
Description
|
show lacp port-channel
|
Displays information on port channels with LACP enabled.
|
feature tunnel
To enable the creation of tunnel interfaces, use the feature tunnel command in global configuration mode. To disable the tunnel interface feature, use the no form of this command.
feature tunnel
no feature tunnel
Syntax Description
This command has no arguments or keywords.
Defaults
Disabled
Command Modes
Global configuration
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
You must use the feature tunnel command before you can create tunnel interfaces.
This command requires the Enterprise license.
Examples
This example shows how to enable the interface tunnel feature:
switch(config)# feature tunnel
Related Commands
Command
|
Description
|
interface tunnel
|
Creates a tunnel interface.
|
interface loopback
To create a loopback interface and enter interface configuration mode, use the interface loopback command. To remove a loopback interface, use the no form of this command.
interface loopback number
no interface loopback number
Syntax Description
number
|
Identifying interface number; valid values are from 0 to 1023.
|
Defaults
None
Command Modes
Global configuration
Interface configuration
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
Use the interface loopback command to create or modify loopback interfaces.
This command does not require a license.
Examples
This example shows how to create a loopback interface:
switch(config)# interface loopback 50
Related Commands
Command
|
Description
|
show interface loopback
|
Displays information about the traffic on the specified loopback interface.
|
interface port-channel
To create a port-channel interface and enter interface configuration mode, use the interface port-channel command. To remove a logical port-channel interface or subinterface, use the no form of this command.
interface port-channel channel-number
no interface port-channel channel-number
Syntax Description
channel-number
|
Channel number that is assigned to this port-channel logical interface. The range of valid values is from 1 to 4096.
|
Defaults
None
Command Modes
Global configuration
Interface configuration
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
Use the interface port-channel command to create or delete port-channel groups and to enter the interface configuration mode for the port channel.
You can create port channels implicitly using the bandwidth (interface) command or explicitly using the feature tunnel command.
A port can belong to only one channel group.
You can create subinterfaces on a Layer 3 port-channel interface. However, you cannot add a Layer 3 interface that has existing subinterfaces to a port channel.
Note
The Layer 3 port-channel interface is the routed interface.
The Link Aggregation Control Protocol (LACP) system ID is unique for each VDC, and channel-group numbers and names can be re-used in different VDCs.
When you use the interface port-channel command, follow these guidelines:
•
If you are using CDP, you must configure it only on the physical interface and not on the port-channel interface.
•
If you do not assign a static MAC address on the port-channel interface, a MAC address is automatically assigned. If you assign a static MAC address and then later remove it, the MAC address is automatically assigned.
•
The MAC address of the port channel is the address of the first operational port added to the channel group. If this first-added port is removed from the channel, the MAC address comes from the next operational port added, if there is one.
This command does not require a license.
Examples
This example shows how to create a port-channel group interface with channel-group number 50:
switch(config)# interface port-channel 50
Related Commands
Command
|
Description
|
show interface port-channel
|
Displays information on traffic on the specified port-channel interface.
|
show port-channel summary
|
Displays information on the port channels.
|
show lacp
|
Displays LACP information.
|
interface tunnel
To create a tunnel interface and enter interface configuration mode, use the interface tunnel command. To remove a tunnel interface, use the no form of this command.
interface tunnel number
no interface tunnel number
Syntax Description
number
|
Identifying interface number; valid values are from 0 to 32767.
|
Defaults
None
Command Modes
Global configuration
Interface configuration
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
Use the interface tunnel command to create or modify tunnel interfaces.
Cisco NX-OS supports the GRE header defined in IETF RFC 2784. Cisco NX-OS does not support tunnel keys and other options from IETF RFC 1701.
You can configure IP tunnels only in the default virtual device context (VDC).
This command requires the Enterprise license.
Examples
This example shows how to create a tunnel interface:
switch(config)# interface tunnel 50
Related Commands
Command
|
Description
|
tunnel source
|
Sets the source of the IP tunnel.
|
tunnel destination
|
Sets the destination of the IP tunnel.
|
show interface tunnel
|
Displays information about the traffic on the specified tunnel interface.
|
interface vlan
To create a VLAN interface and enter interface configuration mode, use the interface vlan command. To remove a VLAN interface, use the no form of this command.
interface vlan vlan-id
no interface vlan vlan-id
Syntax Description
vlan-id
|
VLAN to set when the interface is in access mode; valid values are from 1 to 4094, except for the VLANs reserved for the internal switch use.
|
Defaults
None
Command Modes
Global configuration
Interface configuration
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
Use the interface vlan command to create or modify VLAN interfaces.
The VLAN interface is created the first time that you enter the interface vlan command for a particular VLAN. The vlan-id argument corresponds to the VLAN tag that is associated with the data frames on an Inter-Switch Link (ISL), the IEEE 802.1Q-encapsulated trunk, or the VLAN ID that is configured for an access port.
This command does not require a license.
Examples
This example shows how to create a VLAN interface for VLAN 50:
switch(config)# interface vlan 50
Related Commands
Command
|
Description
|
feature interface-vlan
|
Enables the ability to create VLAN interfaces.
|
show interface vlan
|
Displays information about the traffic on the specified VLAN interface.
|
lacp port-priority
To set the priority for the physical interfaces for the Link Aggregation Control Protocol (LACP), use the lacp port-priority command. To return the port priority to the default value, use the no form of this command.
lacp port-priority priority
no lacp port-priority
Syntax Description
priority
|
Priority for the physical interfaces. The range of valid numbers is from 1 to 65535.
|
Defaults
32768
Command Modes
Interface configuration
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
Each port configured to use LACP has an LACP port priority. You can accept the default value of 32768 for the LACP port priority, or you can configure a value between 1 and 65535. LACP uses the port priority in combination with the port number to form the port identifier. The port priority is used with the port number to form the port identifier. The port priority is used to decide which ports should be put into standby mode when there is a hardware limitation that prevents all compatible ports from aggregating or when you have more than eight ports configured for the channel group.
When setting the priority, note that a higher number means a lower priority.
This command does not require a license.
Examples
This example shows how to set the LACP port priority for the interface to 2000:
switch(config-if)# lacp port-priority 2000
Related Commands
Command
|
Description
|
show lacp
|
Displays LACP information.
|
lacp system-priority
To set the system priority of the device for the Link Aggregation Control Protocol (LACP), use the lacp system-priority command. To return the system priority to the default value, use the no form of this command.
lacp system-priority priority
no lacp system-priority
Syntax Description
priority
|
Priority for the physical interfaces. The range of valid numbers is from 1 to 65535.
|
Defaults
32768
Command Modes
Global configuration
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
Each device that runs LACP has an LACP system priority value. You can accept the default value of 32768 for this parameter, or you can configure a value between 1 and 65535. LACP uses the system priority with the MAC address to form the system ID and also during negotiation with other systems. The system ID is unique for each virtual device context (VDC).
When setting the priority, note that a higher number means a lower priority.
This command does not require a license.
Examples
This example shows how to set the LACP system priority for the device to 2500:
switch(config)# lacp system-priority 2500
Related Commands
Command
|
Description
|
show lacp
|
Displays LACP information.
|
show lacp system identifier
|
Displays information on the LACP system identifier.
|
medium
To set the medium mode for an interface, use the medium command in interface configuration command. To remove the entry, use the no form of this command.
medium {broadcast | p2p}
no medium {broadcast | p2p}
Syntax Description
broadcast
|
Configures the interface as a broadcast medium.
|
p2p
|
Configures the interface as a point-to-point medium.
|
Defaults
None
Command Modes
Interface configuration
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
The medium command is used to configure the interface as broadcast or point to point.
This command does not require a license.
Examples
This example shows how to configure the interface for point-to-point medium:
switch(config-if)# medium p2p
port-channel load-balance ethernet
To set the load-balancing method among the interfaces in the channel-group bundle, use the port-channel load-balance ethernet command. To return the system priority to the default value, use the no form of this command.
port-channel load-balance ethernet method [module slot]
no port-channel load-balance ethernet [method [module slot]]
Syntax Description
method
|
Load-balancing method. See the "Usage Guidelines" section for a list of valid values.
|
module slot
|
(Optional) Specifies the module slot number.
|
Defaults
Layer 2 packets—src-dst-mac
Layer 3 packets—src-dst-ip
Command Modes
Global configuration
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
When you do not specify a module, you are configuring load balancing for the entire device. When you use the module parameter, you are configuring load balancing for the specified modules
Valid method values are as follows:
•
dst-ip—Loads distribution on the destination IP address.
•
dst-mac—Loads distribution on the destination MAC address.
•
dst-port—Loads distribution on the destination port.
•
src-dst-ip—Loads distribution on the source XOR-destination IP address.
•
src-dst-mac—Loads distribution on the source XOR-destination MAC address.
•
src-dst-port—Loads distribution on the source XOR-destination port.
•
src-ip—Loads distribution on the source IP address.
•
src-mac—Loads distribution on the source MAC address.
•
src-port—Loads distribution on the source port.
Note
You cannot configure load balancing using port channels per VDC. You must be in the default VDC to configure this feature; if you attempt to configure this feature from another VDC, the system returns an error.
Use the module argument to configure the module independently for port-channeling and load-balancing mode. When you do this, the remaining module use the current load-balancing method configured for the entire device, or the default method if you have not configured a method for the entire device. When you enter the no argument in conjunction with a module argument, the load-balancing method for the specified module takes the current load-balancing method that is in use for the entire device. If you configured a load-balancing method for the entire device, the specified module uses that configured method, rather than the default src-dst-ip/src-dst-mac. The per module configuration takes precedence over the load-balancing method configured for the entire device.
You can configure one load-balancing mode for the entire device, a different mode for specified modules, and yet another mode for other specified modules. The per module configuration takes precedence over the load balancing configuration for the entire device.
Use the option that provides the balance criteria with the greatest variety in your configuration. For example, if the traffic on a port channel is going only to a single MAC address and you use the destination MAC address as the basis of port channel load balancing, the port channel always chooses the same link in that port channel; using source addresses or IP addresses might result in better load balancing.
This command does not require a license.
Examples
This example shows how to set the load-balancing method for the entire device to use the source port:
switch(config)# port-channel load-balance ethernet src-port
Related Commands
Command
|
Description
|
show port-channel load-balance
|
Displays information on port-channel load balancing.
|
rate-mode dedicated
To set the dedicated rate mode for the specified ports, use the rate-mode dedicated command.
rate-mode dedicated
no rate-mode
Syntax Description
This command has no arguments or keywords.
Command Default
Shared rate mode is the default.
Command Modes
Interface configuration
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
Use the rate-mode dedicated command to set the dedicated rate mode for the specified ports.
On a 32-port 10-Gigabit Ethernet module, each set of four ports can handle 10 gigabits per second (Gb/s) of bandwidth. You can use the rate-mode parameter to dedicate that bandwidth to the first port in the set of four ports or share the bandwidth across all four ports.
Note
When you dedicate the bandwidth to one port, you must first administratively shut down the ports in the group, change the rate mode to dedicated, and then bring the dedicated port administratively up.
Table 1-1 identifies the ports that are grouped together to share each 10 Gb/s of bandwidth and which port in the group can be dedicated to utilize the entire bandwidth.
Table 1-1 Dedicated and Shared Ports
Ports Groups that Can Share Bandwidth
|
Ports that Can be Dedicated to Each 10-Gigabit Ethernet of Bandwidth
|
1, 3, 5, 7
|
1
|
2, 4, 6, 8
|
2
|
9, 11, 13, 15
|
9
|
10, 12, 14, 16
|
10
|
17, 19, 21, 23
|
17
|
18, 20, 22, 24
|
18
|
25, 27, 29, 31
|
25
|
26, 28, 30, 32
|
26
|
Note
All ports in each port group must be part of the same virtual device context (VDC). For more information on VDCs, see the Cisco Nexus 7000 Series NX-OS Virtual Device Context Configuration Guide, Release 4.0.
When you enter the rate-mode dedicated command, the full bandwidth of 10 Gb is dedicated to one port. When you dedicate the bandwidth, all subsequent commands for the port are for dedicated mode.
This command does not require a license.
Examples
This example shows how to configure the dedicated rate mode for Ethernet ports 4/17, 4/19, 4/21, and 4/23:
switch(config)# interface ethernet 4/17, ethernet 4/19, ethernet 4/21, ethernet 4/23
switch(config-if)# shutdown
switch(config-if)# interface ethernet 4/17
switch(config-if)# rate-mode dedicated
switch(config-if)# no shutdown
Related Commands
Command
|
Description
|
show interface
|
Displays interface information, which includes the current rate mode dedicated.
|
rate-mode shared
To set the shared rate mode for the specified ports, use the rate-mode shared command.
rate-mode shared
Syntax Description
This command has no arguments or keywords.
Command Default
Shared rate mode is the default.
Command Modes
Interface configuration
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
Use the rate-mode shared command to set the shared rate mode for the specified ports. This is the default rate mode for the module.
That is, use the rate-mode shared command to specify that each 10 Gb of bandwidth on a 32-port 10 GE Ethernet module is shared by ports in the same port group.
If the port group is in dedicated rate mode, you must first administratively shut down the ports in the group, change the rate mode to shared, and then bring the ports administratively up.
This command does not require a license.
Examples
This example shows how to configure the shared rate mode for Ethernet ports 4/17, 4/19, 4/21, and 4/23:
switch(config)# interface ethernet 4/17, ethernet 4/19, ethernet 4/21, ethernet 4/23
switch(config-if)# shutdown
switch(config-if)# interface ethernet 4/17
switch(config-if)# rate-mode shared
switch(config-if)# no shutdown
Related Commands
Command
|
Description
|
show interface
|
Displays interface information, which includes the current rate mode shared.
|
show interface counters trunk
To display the counters for Layer 2 switch port trunk interfaces, use the show interface counters trunk command.
show interface {ethernet slot/port} counters trunk
Syntax Description
ethernet slot/port
|
Specifies the module number and port number for the trunk interface that you want to display.
|
Defaults
None
Command Modes
Any command mode
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
The device supports only IEEE 802.1Q encapsulation. This command also displays the counters for trunk port channels.
This command does not require a license.
Examples
This example shows how to display the counters for a trunk interface. This display shows the frames transmitted and received through the trunk interface, as well as the number of frames with the wrong trunk encapsulation:
switch# show interface ethernet 2/9 counters trunk
---------------------------------------------------------------------
Port TrunkFramesTx TrunkFramesRx WrongEncap
---------------------------------------------------------------------
Related Commands
Command
|
Description
|
clear counters interface
|
Clears the counters for the specified interfaces.
|
show interface port-channel
To display descriptive information about port channels, use the show interface port-channel command.
show interface port-channel channel-number [brief | description | flowcontrol | status |
switchport | trunk]
Syntax Description
channel-number
|
Number of the port-channel group. Valid values are from 1 to 4096.
|
brief
|
(Optional) Specifies the summary information for specified port channels.
|
description
|
(Optional) Specifies the description of specified port channels.
|
flowcontrol
|
(Optional) Specifies information about the flow-control status control for specified port channels and the statistics on received and transmitted flow-control pause packets.
|
status
|
(Optional) Specifies information about the status for specified port channels.
|
trunk
|
(Optional) Specifies information for specified Layer 2 port channels on the trunk mode.
|
Defaults
None
Command Modes
Any command mode
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
To display more statistics for the specified port channels, use the show interface port-channel counters command.
This command does not require a license.
Examples
This example shows how to display information for a specific port channel. This command displays statistical information gathered on the port channel at 1-minute intervals:
switch(config)# show interface port-channel 50
port-channel50 is down (No operational members)
Hardware is Port-Channel, address is 0000.0000.0000 (bia 0000.0000.0000)
MTU 1500 bytes, BW 100000 Kbit, DLY 10 usec,
reliability 255/255, txload 1/255, rxload 1/255
Input flow-control is off, output flow-control is off
Switchport monitor is off
Members in this channel: Eth2/10
Last clearing of "show interface" counters 2d71.2uh
5 minute input rate 0 bytes/sec, 0 packets/sec
5 minute output rate 0 bytes/sec, 0 packets/sec
0 input packets 0 unicast packets 0 multicast packets
0 broadcast packets 0 jumbo packets 0 storm suppression packets
0 output packets 0 multicast packets
0 broadcast packets 0 jumbo packets
0 input error 0 short frame 0 watchdog
0 no buffer 0 runt 0 CRC 0 ecc
0 overrun 0 underrun 0 ignored 0 bad etype drop
0 bad proto drop 0 if down drop 0 input with dribble
0 output error 0 collision 0 deferred
0 late collision 0 lost carrier 0 no carrier
0 Rx pause 0 Tx pause 0 reset
This example shows how to display a brief description for a specific port channel, including the mode for the port channel, the status, speed, and protocol:
switch# show interface port-channel 5 brief
--------------------------------------------------------------------------------
Port-channel VLAN Type Mode Status Reason Speed Protocol
--------------------------------------------------------------------------------
eth access down No operational members auto(D) lacp
This example shows how to display the description for a specific port channel:
switch# show interface port-channel 5 description
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
This example shows how to display the flow-control information for a specific port channel:
switch# show interface port-channel 50 flowcontrol
------------------------------------------------------------------------------
Port Send FlowControl Receive FlowControl RxPause TxPause
------------------------------------------------------------------------------
This example shows how to display the status of a specific port channel:
switch# show interface port-channel 5 status
--------------------------------------------------------------------------------
Port Name Status Vlan Duplex Speed Type
--------------------------------------------------------------------------------
This example shows how to display information for a specific Layer 2 port channel:
switch# show interface port-channel 50 switchport
Switchport Monitor: Not enabled
Access Mode VLAN: 1 (default)
Trunking Native Mode VLAN: 1 (default)
Trunking VLANs Enabled: 1-3967,4048-4093
Administrative private-vlan primary host-association: none
Administrative private-vlan secondary host-association: none
Administrative private-vlan primary mapping: none
Administrative private-vlan secondary mapping: none
Administrative private-vlan trunk native VLAN: none
Administrative private-vlan trunk encapsulation: dot1q
Administrative private-vlan trunk normal VLANs: none
Administrative private-vlan trunk private VLANs: none
Operational private-vlan: none
This command displays information for Layer 2 port channels in both the access and trunk modes.
When you use this command for a routed port channel, the device returns the following message:
This example shows how to display information for a specific Layer 2 port channel that is in trunk mode:
switch# show interface port-channel 5 trunk
switch# show interface port-channel 50 trunk
port-channel50 is down (No operational members)
Hardware is Ethernet, address is 0000.0000.0000
MTU 1500 bytes, BW 100000 Kbit, DLY 10 usec
Receive flow-control is off, Send flow-control is off
Members in this channel: Eth2/10
Allowed Vlans: 1-3967,4048-4093
This command displays information for only Layer 2 port channels in the trunk modes; you cannot display information about Layer 2 port channels in the access mode with this command.
Related Commands
Command
|
Description
|
show interface port-channel counters
|
Displays the statistics for channel groups.
|
show port-channel summary
|
Displays summary information for all channel groups.
|
show interface port-channel counters
To display information about port-channel statistics, use the show interface port-channel counters command.
show interface port-channel channel-number counters [brief | detailed [all | snmp] | errors
[snmp] | trunk]
Syntax Description
channel-number
|
Number of the port-channel group. Valid values are from 1 to 4096.
|
brief
|
(Optional) Specifies the rate MB/s and total frames for specified port channels.
|
detailed
|
(Optional) Specifies the nonzero counters for specified port channels.
|
all
|
(Optional) Specifies the counters for specified port channels.
|
snmp
|
(Optional) Specifies the SNMP MIB values for specified port channels.
|
errors
|
(Optional) Specifies the interface error counters for specified port channels.
|
trunk
|
(Optional) Specifies the interface trunk counters for specified port channels.
|
Defaults
None
Command Modes
Any command mode
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
This command displays statistics for all port channels including LACP-enabled port channels and those port channels that are not associated with an aggregation protocol.
This command does not require a license.
Examples
This example shows how to display the counters for a specific port channel. This display shows the transmitted and received unicast and multicast packets:
switch# show interface port-channel 2 counters
Port InOctets InUcastPkts InMcastPkts InBcastPkts
Port OutOctets OutUcastPkts OutMcastPkts OutBcastPkts
This example shows how to display the brief counters for a specific port channel. This display shows the transmitted and received rate and total frames:
switch# show interface port-channel 20 counters brief
-------------------------------------------------------------------------------
Interface Input (rate is 1 min avg) Output (rate is 1 min avg)
------------------------- -----------------------------
-------------------------------------------------------------------------------
This example shows how to display all the detailed counters for a specific port channel:
switch# show interface port-channel 20 counters detailed all
10. rxTxHCPkts64Octets = 0
11. rxTxHCpkts65to127Octets = 0
12. rxTxHCpkts128to255Octets = 0
13. rxTxHCpkts256to511Octets = 0
14. rxTxHCpkts512to1023Octets = 0
15. rxTxHCpkts1024to1518Octets = 0
16. rxTxHCpkts1519to1548Octets = 0
14. rxHCPkts65to127Octets = 0
15. rxHCPkts128to255Octets = 0
16. rxHCPkts256to511Octets = 0
17. rxHCpkts512to1023Octets = 0
18. rxHCpkts1024to1518Octets = 0
19. rxHCpkts1519to1548Octets = 0
21. txHCPkts65to127Octets = 0
22. txHCPkts128to255Octets = 0
23. txHCPkts256to511Octets = 0
24. txHCpkts512to1023Octets = 0
25. txHCpkts1024to1518Octets = 0
26. txHCpkts1519to1548Octets = 0
74. InLayer3RoutedOctets = 0
76. OutLayer3RoutedOctets = 0
78. OutLayer3UnicastOctets = 0
79. OutLayer3Multicast = 0
80. OutLayer3MulticastOctets = 0
82. InLayer3UnicastOctets = 0
83. InLayer3Multicast = 0
84. InLayer3MulticastOctets = 0
85. InLayer3AverageOctets = 0
86. InLayer3AveragePackets = 0
87. OutLayer3AverageOctets = 0
88. OutLayer3AveragePackets = 0
This example shows how to display the error counters for a specific port channel:
switch# show interface port-channel 5 counters errors
--------------------------------------------------------------------------------
Port Align-Err FCS-Err Xmit-Err Rcv-Err UnderSize OutDiscards
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Port Single-Col Multi-Col Late-Col Exces-Col Carri-Sen Runts
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Port Giants SQETest-Err Deferred-Tx IntMacTx-Er IntMacRx-Er Symbol-Err
--------------------------------------------------------------------------------
This example shows how to display information about the trunk interfaces for a specific port channel:
switch# show interface port-channel 5 counters trunk
-------------------------------------------------------------------------------
Port TrunkFramesTx TrunkFramesRx WrongEncap
-------------------------------------------------------------------------------
Related Commands
Command
|
Description
|
clear counters interface port-channel channel-number
|
Clears the statistics for all interfaces that belong to a specific channel group.
|
show interface switchport
To display information about all the switch port interfaces, use the show interface switchport command.
show interface [ethernet type/slot | port-channel channel-number] switchport
Syntax Description
ethernet type/slot | port- channel channel-number
|
(Optional) Type and number of the interface that you want to display.
|
Defaults
None
Command Modes
Any command mode
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
If you do not specify an interface, this command displays information about all Layer 2 interfaces, including access, trunk, and port-channel interfaces and all private VLAN ports.
Use the show interface counters command to display statistics for the specified Layer 2 interface.
This command does not require a license.
Examples
This example shows how to display information for all Layer 2 interfaces:
switch# show interface switchport
Switchport Monitor: Not enabled
Access Mode VLAN: 1 (default)
Trunking Native Mode VLAN: 1 (default)
Trunking VLANs Enabled: 1-3967,4048-4093
Administrative private-vlan primary host-association: none
Administrative private-vlan secondary host-association: none
Administrative private-vlan primary mapping: none
Administrative private-vlan secondary mapping: none
Administrative private-vlan trunk native VLAN: none
Administrative private-vlan trunk encapsulation: dot1q
Administrative private-vlan trunk normal VLANs: none
Administrative private-vlan trunk private VLANs: none
Operational private-vlan: none
Switchport Monitor: Not enabled
Access Mode VLAN: 1 (default)
Trunking Native Mode VLAN: 1 (default)
Trunking VLANs Enabled: 1-3967,4048-4093
Administrative private-vlan primary host-association: none
Administrative private-vlan secondary host-association: none
Administrative private-vlan primary mapping: none
Administrative private-vlan secondary mapping: none
Administrative private-vlan trunk native VLAN: none
Administrative private-vlan trunk encapsulation: dot1q
Administrative private-vlan trunk normal VLANs: none
Administrative private-vlan trunk private VLANs: none
Operational private-vlan: none
Switchport Monitor: Not enabled
Access Mode VLAN: 1 (default)
Trunking Native Mode VLAN: 1 (default)
Trunking VLANs Enabled: 1-3967,4048-4093
Administrative private-vlan primary host-association: none
Administrative private-vlan secondary host-association: none
Administrative private-vlan primary mapping: none
Administrative private-vlan secondary mapping: none
Administrative private-vlan trunk native VLAN: none
Administrative private-vlan trunk encapsulation: dot1q
Administrative private-vlan trunk normal VLANs: none
Administrative private-vlan trunk private VLANs: none
Operational private-vlan: none
Related Commands
Command
|
Description
|
switchport mode
|
Sets the specified interfaces as either Layer 2 access or trunk interfaces.
|
show interface trunk
To display information about all the trunk interfaces, use the show interface trunk command.
show interface [ethernet type/slot | port-channel channel-number] trunk [module number | vlan
vlan-id]
Syntax Description
ethernet type/slot | port- channel channel-number
|
(Optional) Type and number of the interface you want to display.
|
module number
|
(Optional) Specifies the module number.
|
vlan vlan-id
|
(Optional) Specifies the VLAN number.
|
Defaults
None
Command Modes
Any command mode
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
If you do not specify an interface, a module number or a VLAN number, the system displays information for all trunk interfaces.
This command displays information about all Layer 2 trunk interfaces and trunk port-channel interfaces.
Use the show interface counters command to display statistics for the specified Layer 2 interface.
This command does not require a license.
Examples
This example shows how to display information for all Layer 2 trunk interfaces:
switch(config)# show interface trunk
-----------------------------------------------------------------------------
-----------------------------------------------------------------------------
-----------------------------------------------------------------------------
Port Vlans Allowed on Trunk
-----------------------------------------------------------------------------
-----------------------------------------------------------------------------
-----------------------------------------------------------------------------
Related Commands
Command
|
Description
|
switchport mode trunk
|
Sets the specified interfaces as Layer 2 trunk interfaces.
|
show lacp counters
To display information about Link Aggregation Control Protocol (LACP) statistics, use the show lacp counters command.
show lacp counters [interface port-channel channel-number]
Syntax Description
channel-number
|
(Optional) Number of the LACP channel group. Valid values are from 1 to 4096.
|
Defaults
None
Command Modes
Any command mode
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
If you do not specify the channel-number, all channel groups are displayed.
This command does not require a license.
Examples
This example shows how to display the LACP statistics for a specific channel group:
switch# show lacp counters interface port-channel 1
LACPDUs Marker Marker Response LACPDUs
Port Sent Recv Sent Recv Sent Recv Pkts Err
-----------------------------------------------------------------------------
Ethernet1/1 554 536 0 0 0 0 0
Ethernet1/2 527 514 0 0 0 0 0
Ethernet1/3 535 520 0 0 0 0 0
Ethernet1/4 515 502 0 0 0 0 0
Ethernet1/5 518 505 0 0 0 0 0
Ethernet1/6 540 529 0 0 0 0 0
Ethernet1/7 541 530 0 0 0 0 0
Ethernet1/8 547 532 0 0 0 0 0
Ethernet1/9 544 532 0 0 0 0 0
Ethernet1/10 513 501 0 0 0 0 0
Ethernet1/11 497 485 0 0 0 0 0
Ethernet1/12 493 486 0 0 0 0 0
Ethernet1/13 492 485 0 0 0 0 0
Ethernet1/14 482 481 0 0 0 0 0
Ethernet1/15 481 476 0 0 0 0 0
Ethernet1/16 482 477 0 0 0 0 0
Related Commands
Command
|
Description
|
clear lacp counters
|
Clears the statistics for all LACP interfaces or those interfaces that belong to a specific LACP channel group.
|
show lacp interface
To display information about specific Link Aggregation Control Protocol (LACP) interfaces, use the show lacp interface command.
show lacp interface ethernet slot/port
Syntax Description
slot/port
|
Slot number and port number for the interface you want to display.
|
Defaults
None
Command Modes
Any command mode
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
The LACP_Activity field displays whether the link is configured in the active or passive port-channel mode.
The Port Identifier field displays the port priority as part of the information. The part of the information in this field is the port number. The following example shows how to identify the port priority and the port number:
Port Identifier=0x8000,0x101
The port priority value is 0x8000, and the port number value is 0x101 in this example.
This command does not require a license.
Examples
This example shows how to display the LACP statistics for a specific channel group:
switch# show lacp interface ethernet 1/1
switch(config-if-range)# show lacp interface eth1/1
Interface Ethernet1/1 is up
Channel group is 1 port channel is Po1
Lag Id: [ [(8000, 0-11-11-22-22-74, 0, 8000, 101), (8000, 0-11-11-22-22-75, 0, 8
Operational as aggregated link since Wed Jun 11 20:37:59 2008
Local Port: Eth1/1 MAC Address= 0-11-11-22-22-74
System Identifier=0x8000,0-11-11-22-22-74
Port Identifier=0x8000,0x101
LACP_Timeout=Long Timeout (30s)
Partner information refresh timeout=Long Timeout (90s)
MAC Address= 0-11-11-22-22-75
System Identifier=0x8000,0-11-11-22-22-75
Port Identifier=0x8000,0x401
LACP_Timeout=Long Timeout (30s)
Related Commands
Command
|
Description
|
show port-channel summary
|
Displays information about all port-channel groups.
|
show lacp neighbor
To display information about Link Aggregation Control Protocol (LACP) neighbors, use the show lacp neighbor command.
show lacp neighbor [interface port-channel channel-number]
Syntax Description
channel-number
|
Port-channel number for the LACP neighbor that you want to display. The range of values is from 1 to 4096.
|
Defaults
None
Command Modes
Any command mode
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
If you do not specify the channel-number, all channel groups are displayed.
This command does not require a license.
Examples
This example shows how to display the information about the LACP neighbors for a specific port channel:
switch# show lacp neighbor interface port-channel 1
Flags: S - Device is sending Slow LACPDUs F - Device is sending Fast LACPDUs
A - Device is in Active mode P - Device is in Passive mode
Port System ID Port Number Age Flags
Eth1/1 32768,0-11-11-22-22-750x401 44817 SA
LACP Partner Partner Partner
Port Priority Oper Key Port State
Port System ID Port Number Age Flags
Eth1/2 32768,0-11-11-22-22-750x402 44817 SA
LACP Partner Partner Partner
Port Priority Oper Key Port State
Related Commands
Command
|
Description
|
show port-channel summary
|
Displays information about all port-channel groups.
|
show lacp port-channel
To display information about Link Aggregation Control Protocol (LACP) port channels, use the show lacp port-channel command.
show lacp port-channel [interface port-channel channel-number]
Syntax Description
channel-number
|
Port-channel number for the LACP channel group that you want to display. The range of values is from 1 to 4096.
|
Defaults
None
Command Modes
Any command mode
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
If you do not specify the channel-number, all channel groups are displayed.
This command does not require a license.
Examples
This example shows how to display the information about LACP port channels:
switch# show lacp port-channel
Local System Identifier=0x8000,0-11-11-22-22-74
Partner System Identifier=0x8000,0-11-11-22-22-75
Aggregate or individual=1
Local System Identifier=0x8000,0-11-11-22-22-74
Partner System Identifier=0x8000,0-11-11-22-22-75
Aggregate or individual=1
Related Commands
Command
|
Description
|
show port-channel summary
|
Displays information about all port-channel groups.
|
show lacp system-identifier
To display the Link Aggregation Control Protocol (LACP) system identifier for the device, use the show lacp system-identifier command.
show lacp system-identifier
Syntax Description
This command has no arguments or keywords.
Defaults
None
Command Modes
Any command mode
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
The LACP system ID is the combination of the configurable LACP system priority value and the MAC address.
Each system that runs LACP has an LACP system priority value. You can accept the default value of 32768 for this parameter, or you can configure a value between 1 and 65535. LACP uses the system priority with the MAC address to form the system ID and also uses the system priority during negotiation with other devices. A higher system priority value means a lower priority.
The system ID is different for each virtual device context (VDC).
This command does not require a license.
Examples
This example shows how to display the information about the LACP port channel for a specific port channel:
switch> show lacp system-identifier
Related Commands
Command
|
Description
|
lacp system-priority
|
Sets the system priority for LACP.
|
show port-channel compatibility-parameters
To display the parameters that must be the same among the member ports in order to join a port channel, use the show port-channel compatibility parameters command.
show port-channel compatibility-parameters
Syntax Description
This command has no arguments or keywords.
Defaults
None
Command Modes
Any command mode
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
When you add an interface to a channel group, the software checks certain interface attributes to ensure that the interface is compatible with the channel group. For example, you cannot add a Layer 3 interface to a Layer 2 channel group. The software also checks a number of operational attributes for an interface before allowing that interface to participate in the port-channel aggregation.
This command displays the list of compatibility checks that the system uses.
Using the channel-group command, you can force ports with incompatible parameters to join the port channel as long as the following parameters are the same:
•
(Link) speed capability
•
Speed configuration
•
Duplex capability
•
Duplex configuration
•
Flow-control capability
•
Flow-control configuration
Note
See the channel-group command for information about forcing ports to join a port channel.
This command does not require a license.
Examples
This example shows how to display the list of compatibility checks that the system makes before an interface to a channel group:
switch# show port-channel compatibility-parameters
Members must have the same port mode configured, either E or AUTO. If they
are configured in AUTO port mode, they have to negotiate E mode when they
come up. If a member negotiates a different mode, it will be suspended.
Members must have the same speed configured. If they are configured in AUTO
speed, they have to negotiate the same speed when they come up. If a member
negotiates a different speed, it will be suspended.
Members have to have the same MTU configured. This only applies to ethernet
Members have to have the same medium type configured. This only applies to
Members must have the same span mode.
Members must not have sub-interfaces.
Members must have same Duplex Mode configured.
Members must have same Ethernet Layer (switchport/no-switchport) configured.
Members cannot be SPAN ports.
Members must have same storm-control configured.
Members must have same flowctrl configured.
Members must have common capabilities.
Members port does not exist.
Members must be switching port, Layer 2.
Members must have the same port access VLAN.
Members must have the same port native VLAN.
Members must have the same port allowed VLAN list.
Related Commands
Command
|
Description
|
channel-group
|
Adds or removes interfaces to port-channel groups and assigns the port-channel mode to the interface.
|
show port-channel database
To display information about the current running of the port channels, use the show port-channel database command.
show port-channel database [interface port-channel channel-number]
Syntax Description
channel-number
|
Port-channel number for the information that you want to display. The range of values is from 1 to 4096.
|
Defaults
None
Command Modes
Any command mode
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
If you do not specify the channel-number, all channel groups are displayed. This command displays Link Aggregation Control Protocol (LACP)-enabled ports channels and port channels without an associated aggregation protocol.
This command does not require a license.
Examples
This example shows how to display information on the current running of all port channels:
switch# show port-channel database
Administrative channel mode is active
Operational channel mode is active
Last membership update is successful
1 ports in total, 0 ports up
Age of the port-channel is 1d:16h:18m:50s
Time since last bundle is 1d:16h:18m:56s
Ports: Ethernet2/5 [down]
Administrative channel mode is active
Operational channel mode is active
Last membership update is successful
1 ports in total, 0 ports up
Age of the port-channel is 1d:16h:18m:50s
Time since last bundle is 1d:16h:18m:56s
Ports: Ethernet2/20 [down]
This example shows how to display information on the current running of a specific port channel:
switch# show port-channel database interface port-channel 20
Administrative channel mode is active
Operational channel mode is active
Last membership update is successful
1 ports in total, 0 ports up
Age of the port-channel is 1d:16h:23m:14s
Time since last bundle is 1d:16h:23m:20s
Ports: Ethernet2/20 [down]
Related Commands
Command
|
Description
|
show port-channel summary
|
Displays a summary of information about all port channels.
|
show port-channel load-balance
To display information about load-balancing using port channels, use the show port-channel load-balance command.
show port-channel load-balance [forwarding-path interface port-channel channel-number]
Syntax Description
forwarding-path interface port-channel
|
(Optional) Identifies the port in the port channel that forwards the packet.
|
channel-number
|
Port-channel number for the load-balancing forwarding path that you want to display. The range of values is from 1 to 4096.
|
Defaults
None
Command Modes
Any command mode
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
This command does not require a license.
Examples
This example shows how to display information about the current port-channel load balancing for the system:
switch# show port-channel load-balance
Port Channel Load-Balancing Configuration:
System: source-dest-ip-vlan
Port Channel Load-Balancing Addresses Used Per-Protocol:
Related Commands
Command
|
Description
|
port-channel load-balance ethernet
|
Configures load balancing using port channels.
|
show port-channel rbh-distribution
To display information about the Result Bundle Hash (RBH) for port channels, use the show port-channel rbh-distribution command.
show port-channel rbh-distribution [interface port-channel channel-number]
Syntax Description
channel-number
|
Port-channel number for the information the you want to display. The range of values is from 1 to 4096.
|
Defaults
None
Command Modes
Any command mode
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
The RBH value ranges from 0 to 7 and is shared among port members in a port channel.
This command does not require a license.
Examples
This example shows how to display RBH distribution for a specific port channel:
switch# show port-channel rbh-distribution interface port-channel 4
ChanId Member port RBH values Num of buckets
-------- ------------- ----------------- ----------------
Related Commands
Command
|
Description
|
port-channel summary
|
Displays summary information on port channels.
|
show port-channel summary
To display summary information about the port channels, use the show port-channel summary command.
show port-channel summary
Syntax Description
This command has no arguments or keywords.
Defaults
None
Command Modes
Any command mode
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
If the Link Aggregation Control Protocol (LACP) is not enabled, the output shows NONE in the Protocol column of the display.
A channel-group interface can be in the following operational states:
•
Down—The interface is down because it is administratively shut down or some other reason not related to port channels.
•
Individual—The interface is part of a port channel but unable to aggregate into a port channel because of protocol exchange problems.
–
This interface continues to forward traffic as an individual link.
–
STP is aware of this interface.
•
Suspended—The operational parameters of the interface are not compatible with the port channel. This interface is not forwarding traffic, although the physical MAC link state is still up.
•
Switched—The interface is switched.
•
Up (port channel)—The port channel is up.
•
Up in port channel (members)—The port member of the port channel is up.
•
Hot standby (LACP only)—The interface is eligible to join the port group if one of the interfaces currently participating in the LACP channel goes down.
–
This interface does not forward data traffic, only protocol data units (PDUs).
–
This interface does not run STP.
•
Module-removed—The module has been removed.
•
Routed—The interface is routed.
This command does not require a license.
Examples
This example shows how to display summary information for the port channels:
switch# show port-channel summary
Flags: D - Down P - Up in port-channel (members)
I - Individual H - Hot-standby (LACP only)
s - Suspended r - Module-removed
-------------------------------------------------------------------
Group Port- Type Protocol Member Ports
-------------------------------------------------------------------
5 Po5(SD) Eth LACP Eth2/5(D)
20 Po20(RD) Eth LACP Eth2/20(D)
Related Commands
Command
|
Description
|
show port-channel usage
|
Displays the port-channel numbers used and available.
|
show port-channel traffic
|
Displays transmitted and received unicast, multicast, and broadcast percentages for the port channels.
|
show port-channel traffic
To display traffic statistics for port channels, use the show port-channel traffic command.
show port-channel traffic [interface port-channel channel-number]
Syntax Description
channel-number
|
Port-channel number for the traffic statistics that you want to display. The range of values is from 1 to 4096.
|
Defaults
None
Command Modes
Any command mode
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
This command displays the percentage of transmitted and received unicast, multicast, and broadcast traffic on the port channel.
If you do not specify the channel-number, information for all port channels is displayed.
This command does not require a license.
Examples
This example shows how to display the traffic statistics for all port channels:
switch(config)# show port-channel traffic
ChanId Port Rx-Ucst Tx-Ucst Rx-Mcst Tx-Mcst Rx-Bcst Tx-Bcst
------ --------- ------- ------- ------- ------- ------- -------
5 Eth2/5 0.0% 0.0% 0.0% 0.0% 0.0% 0.0%
------ --------- ------- ------- ------- ------- ------- -------
20 Eth2/20 0.0% 0.0% 0.0% 0.0% 0.0% 0.0%
This example shows how to display the traffic statistics for a specific port channel:
switch(config)# show port-channel traffic interface port-channel 5
ChanId Port Rx-Ucst Tx-Ucst Rx-Mcst Tx-Mcst Rx-Bcst Tx-Bcst
------ --------- ------- ------- ------- ------- ------- -------
5 Eth2/5 0.0% 0.0% 0.0% 0.0% 0.0% 0.0%
Related Commands
Command
|
Description
|
port-channel summary
|
Displays summary information about port channels.
|
show port-channel usage
To display the port-channel numbers used and available, use the show port-channel usage command.
show port-channel usage
Syntax Description
This command has no arguments or keywords.
Defaults
None
Command Modes
Any command mode
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
This command displays port-channel numbers used and available in the virtual device context (VDC) that you are monitoring.
The number of port-channel numbers available across all VDCs for the entire system is from 1 to 4096.
This command does not require a license.
Examples
This example shows how to display the usage for all port channels:
switch# show port-channel usage
Totally 2 port-channel numbers used
====================================
Unused: 1 - 4 , 6 - 19 , 21 - 4096
Related Commands
Command
|
Description
|
port-channel summary
|
Displays summary information about port channels.
|
show running-config interface port-channel
To display the running configuration for a specific port channel, use the show running-config interface port-channel command.
show running-config interface port-channel {channel-number}
Syntax Description
channel-number
|
Number of the port-channel group. The range of values is from 1 to 4096.
|
Defaults
None
Command Modes
Any command mode
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
This command does not require a license.
Examples
This example shows how to display the running configuration for port channel 10:
switch(config)# show running-config interface port-channel 10
Related Commands
Command
|
Description
|
show port-channel summary
|
Displays a summary of port-channel information.
|
switchport
To set the interface as a Layer 2 switching port, use the switchport command. To return the interface to the default Layer 3 routed interface status and cause all Layer 2 configuration to be erased, use the no form of this command.
switchport
no switchport
Syntax Description
This command has no keywords or arguments.
Defaults
Interfaces are Layer 3 by default.
Command Modes
Interface configuration
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
You must enter the switchport command without any keywords to configure the LAN interface as a Layer 2 interface before you can enter additional switchport commands with keywords. This action is required only if you have not entered the switchport command for the interface.
The default switchport mode is the access mode. Use the switchport mode command to do the following:
•
Set the interface to the Layer 2 access mode
•
Return the interface to the Layer 2 trunk mode
•
Use the interface with private VLANs.
Enter the no switchport command to shut down the port and then reenable it. This action may generate messages on the device to which the port is connected.
When you use the no switchport command, all the Layer 2 configuration is deleted from that interface, and the interface will have the default VLAN configuration.
The port will go down and reinitialize when you change the interface mode.
This command does not require a license.
Examples
This example shows how to cause a port interface to stop operating as a Cisco routed port and convert to a Layer 2 switched interface:
Router(config-if)# switchport
Related Commands
Command
|
Description
|
show interface switchport
|
Displays the administrative and operational status of a switching (nonrouting) port.
|
switchport access vlan
To set the access VLAN when the interface is in access mode, use the switchport access vlan command. To reset the access-mode VLAN to the appropriate default VLAN for the device, use the no form of this command.
switchport access vlan vlan-id
no switchport access vlan
Syntax Description
vlan-id
|
VLAN to set when the interface is in access mode; valid values are from 1 to 4094, except for the VLANs reserved for internal switch use.
|
Defaults
VLAN1
Command Modes
Interface configuration
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
You must enter the switchport command without any keywords to configure the LAN interface as a Layer 2 interface before you can enter the switchport access vlan command. This action is required only if you have not entered the switchport command for the interface.
Enter the no switchport access vlan command to shut down the port and then reenable it. This action may generate messages on the device to which the port is connected.
Use the no form of the switchport access vlan command to reset the access-mode VLAN to the appropriate default VLAN for the device.
This command does not require a license.
Examples
This example shows how to cause a port interface that has already been configured as a switched interface to operate as an access port in VLAN 2 instead of the platform's default VLAN in the interface-configuration mode:
Router(config-if)# switchport access vlan 2
Related Commands
Command
|
Description
|
show interface switchport
|
Displays the administrative and operational status of a switching (nonrouting) port.
|
switchport host
To configure a port that is not connected to any other devices as a Layer 2 access port with optimized packet forwarding, use the switchport host command. To disable a port that is not connected to any other devices as a Layer 2 access, use the no form of this command.
switchport host
no switchport host
Syntax Description
This command has no keywords or arguments.
Defaults
Interfaces are Layer 3 by default.
Command Modes
Interface configuration
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
You must enter the switchport command without any keywords to configure the LAN interface as a Layer 2 interface before you can enter the switchport host command. This action is required only if you have not entered the switchport command for the interface.
Entering the switchport host command on an interface:
•
Makes the Layer 2 interface an access port.
•
Makes the Layer 2 interface an STP edge port, which decreases the time that it takes to start up packet forwarding.
•
Disables port channeling on this interface.
You should enter the switchport host command only on ports that are connected to a single host. When you use this command with an interface connected to other than a single host, the device returns an error message.
To optimize the port configuration, entering the switchport host command sets the switch port mode to access and disables channel grouping. Only an end station can accept this configuration.
This command toggles the port if it is in the UP state.
This command does not require a license.
Examples
This example shows how to optimize an access port configuration for a host connection:
switch(config-if)# switchport host
Related Commands
Command
|
Description
|
show interface switchport
|
Displays the administrative and operational status of a switching (nonrouting) port.
|
switchport mode
To set the Layer 2 interface type, use the switchport mode command. To return the interface to the Layer 2 access mode, use the no form of this command.
switchport mode {access | trunk}
no switchport mode
Syntax Description
access
|
Specifies the interface as a nontrunking, nontagged single-VLAN Layer 2 interface. An access port carry traffic in one VLAN only.
|
trunk
|
Specifies the trunking VLAN interface in Layer 2. A trunk port can carry traffic in one or more VLANs (based on the trunk allowed VLAN list configuration) on the same physical link.
|
Defaults
access ports
Command Modes
Interface configuration
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
You must enter the switchport command without any keywords to configure the LAN interface as a Layer 2 interface before you can enter the switchport mode command. This action is required only if you have not entered the switchport command for the interface.
If you enter access mode, the interface goes into nontrunking mode; if you enter trunk mode, the interface goes into trunking mode.
To correctly deliver the traffic on a trunk port with several VLANs, the switch uses the IEEE 802.1Q encapsulation, or tagging, method. If an access port receives a packet with an 802.1Q tag in the header, that port drops the packet without learning its MAC source address.
Note
A port can function as either an access port, a trunk port, or a private VLAN port; a port cannot function as all three simultaneously.
The port will go down and reinitialize when you change the interface mode.
This command does not require a license.
Examples
This example shows how to set the interface to trunking mode:
switch(config-if)# switchport mode trunk
Related Commands
Command
|
Description
|
show interface switchport
|
Displays the administrative and operational status of a switching (nonrouting) port.
|
switchport trunk allowed vlan
To set the list of allowed VLANs on the trunking interface, use the switchport trunk allowed vlan command. To allow all VLANs on the trunking interface, use the no form of this command.
switchport trunk allowed vlan {vlan-list | all | none | [add | except | remove {vlan-list}]}
no switchport trunk allowed vlan
Syntax Description
vlan-list
|
Allowed VLANs that transmit through this interface in tagged format when in trunking mode; the range of valid values is from 1 to 4094.
|
all
|
Allows all appropriate VLANs to transmit through this interface in tagged format when in trunking mode.
|
none
|
Blocks all VLANs transmitting through this interface in tagged format when in trunking mode.
|
add
|
(Optional) Adds the defined list of VLANs to those currently set instead of replacing the list.
|
except
|
(Optional) Allows all VLANs to transmit through this interface in tagged format when in trunking mode except the specified values.
|
remove
|
(Optional) Removes the defined list of VLANs from those currently set instead of replacing the list.
|
Defaults
All VLANs
Command Modes
Interface configuration
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
You must enter the switchport command without any keywords to configure the LAN interface as a Layer 2 interface before you can enter the switchport trunk allowed vlan command. This action is required only if you have not entered the switchport command for the interface.
You can enter the switchport trunk allowed vlan command on interfaces where the Switched Port Analyzer (SPAN) destination port is either a trunk or an access port.
If you remove VLAN 1 from a trunk, the trunk interface continues to send and receive management traffic in VLAN 1.
This command does not require a license.
Examples
This example shows how to add a series of consecutive VLANs to the list of allowed VLANs on a trunking port:
switch(config-if)# switchport trunk allowed vlan add 40-50
Related Commands
Command
|
Description
|
show interface switchport
|
Displays the administrative and operational status of a switching (nonrouting) port.
|
switchport trunk native vlan
To change the native VLAN ID when the interface is in trunking mode, use the switchport trunk native vlan command. To return the native VLAN ID to VLAN 1, use the no form of this command.
switchport trunk native vlan vlan-id
no switchport trunk native vlan
Syntax Description
vlan-id
|
Native VLAN for the trunk in 802.1Q trunking mode. The range of valid values is from 1 to 4094, except the internally reserved VLANs 3968 to 4047 and 4094.
|
Defaults
VLAN1
Command Modes
Interface configuration
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
You must enter the switchport command without any keywords to configure the LAN interface as a Layer 2 interface before you can enter the switchport trunk native vlan command. This action is required only if you have not entered the switchport command for the interface.
Note
See the vlandot1q tag native command for more information on configuring the native VLAN for 802,1Q trunk ports.
Use the no form of the native vlan command to reset the native mode VLAN to the default VLAN1 for the device.
This command does not require a license.
Examples
This example shows how to configure the native VLAN for an interface in trunk mode:
switch(config-if)# switchport trunk native vlan 5
Related Commands
Command
|
Description
|
show interface switchport
|
Displays the administrative and operational status of a switching (nonrouting) port.
|
system default switchport
To change the default interface mode for the system from Layer 3 routing to Layer 2 switching. use the system default switchport command. To return the system to Layer 3 routing default interface mode, use the no form of this command.
system default switchport [shutdown]
no system default switchport [shutdown]
Syntax Description
shutdown
|
(Optional) Configures administrative state as down.
|
Defaults
None
Command Modes
Global configuration
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
The system default switchport command makes all the interfaces Layer 2 access ports.
This command does not require a license.
Examples
This example shows how to configure the system so that all the interfaces are in Layer 2 access mode:
switch(config-if)# system default switchport
Related Commands
Command
|
Description
|
show interface switchport
|
Displays the administrative and operational status of a switching (nonrouting) port.
|
tunnel destination
To configure the destination endpoint for a tunnel, use the tunnel destination command in interface configuration mode. To remove the tunnel destination, use the no form of this command.
tunnel destination {ip-address | host-name}
no tunnel destination {ip-address | host-name}
Syntax Description
ip-address
|
IP address for the tunnel destination.
|
host-name
|
Host name for the tunnel destination.
|
Defaults
None
Command Modes
Interface configuration
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
Use the tunnel destination command to configure the destination address for an IP tunnel.
You should not have two tunnels using the same encapsulation mode with the same source and destination address.
This command requires the Enterprise license.
Examples
This example shows how to configure the tunnel destination:
switch(config-if)# tunnel destination 192.0.2.120
Related Commands
Command
|
Description
|
tunnel source
|
Sets the source of the IP tunnel.
|
interface tunnel
|
Creates the IP tunnel.
|
show interface tunnel
|
Displays information about the traffic on the specified tunnel interface.
|
tunnel mode
To configure the tunnel encapsulation mode for a tunnel, use the tunnel mode command in interface configuration mode. To restore the default value, use the no form of this command.
tunnel mode gre {ip | ipv6}
no tunnel mode gre {ip | ipv6}
Syntax Description
ip
|
Configures this tunnel encapsulation mode as IPv4.
|
ip v6
|
Configures this tunnel encapsulation mode as IPv6.
|
Defaults
None
Command Modes
Interface configuration
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
Use the tunnel mode command to configure the tunnel encapsulation mode for a tunnel.
This command requires the Enterprise license.
Examples
This example shows how to configure the tunnel mode:
switch(config-if)# tunnel mode gre ip
Related Commands
Command
|
Description
|
tunnel destination
|
Sets the destination of the IP tunnel.
|
interface tunnel
|
Creates the IP tunnel.
|
show interface tunnel
|
Displays information about the traffic on the specified tunnel interface.
|
tunnel path-mtu-discovery
To enable Path MTU Discovery (PMTUD) on a tunnel interface, use the tunnel path-mtu-discovery command in interface configuration mode. To disable PMTUD on a tunnel interface, use the no form of this command.
tunnel path-mtu-discovery [age-timer {aging-mins | infinite} | min-mtu mtu-bytes]
no tunnel path-mtu-discovery [age-timer {aging-mins | infinite} | min-mtu mtu-bytes]
Syntax Description
age-timer
|
(Optional) Sets a timer to run for a specified interval, in minutes, after which the tunnel interface resets the maximum transmission unit (MTU) of the path to the default tunnel MTU minus 24 bytes for GRE tunnels or minus 20 bytes for IP-in-IP tunnels.
|
aging-mins
|
Number of minutes. The range is from 10 to 30. The default is 10.
|
infinite
|
Disables the age timer.
|
min-mtu mtu-bytes
|
(Optional) Specifies the minimum Path MTU across GRE tunnels. The range is from 92 to 65535 bytes. The default is 92.
|
Defaults
Disabled
Command Modes
Interface configuration
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
When PMTUD (RFC 1191) is enabled on a tunnel interface, the router performs PMTUD processing for the tunnel IP packets. The router always performs PMTUD processing on the original data IP packets that enter the tunnel. When PMTUD is enabled, no packet fragmentation occurs on the encapsulated packets that travel through the tunnel. Without packet fragmentation, there is a better throughput of TCP connections. PMTUD maximizes the use of available bandwidth in the network between the endpoints of a tunnel interface.
After PMTUD is enabled, the Don't Fragment (DF) bit of the IP packet header that is forwarded into the tunnel is copied to the IP header of the external IP packets. The external IP packet is the encapsulating IP packet. Adding the DF bit allows the PMTUD mechanism to work on the tunnel path of the tunnel. The tunnel endpoint listens for Internet Control Message Protocol (ICMP) unreachable too-big messages and modifies the IP MTU of the tunnel interface, if required.
When the aging timer is configured, the tunnel code resets the tunnel MTU after the aging timer expires. After the tunnel MTU is reset, a set of full-size packets with the DF bit set is required to trigger the tunnel PMTUD and lower the tunnel MTU. At least two packets are dropped each time that the tunnel MTU changes.
When PMTUD is disabled, the DF bit of an external (encapsulated) IP packet is set to zero even if the encapsulated packet has a DF bit set to one.
The min-mtu keyword sets a low limit through the MTU that can be learned through the PMTUD process. Any ICMP signal received that specifies an MTU less than the minimum MTU configured will be ignored. You can use this feature to prevent a denial- of-service attack from any node that can send an ICMP message to the router that specifies a very small MTU.
Note
PMTUD on a tunnel interface requires that the tunnel endpoint is able to receive ICMP messages generated by routers in the path of the tunnel. You should check that ICMP messages can be received before you use PMTUD over firewall connections.
This command requires the Enterprise license.
Examples
This example shows how to configure PMTUD:
switch(config-if)# tunnel path-mtu-discovery
Related Commands
Command
|
Description
|
tunnel destination
|
Sets the destination of the IP tunnel.
|
interface tunnel
|
Creates the IP tunnel.
|
show interface tunnel
|
Displays information about the traffic on the specified tunnel interface.
|
tunnel source
To configure the source endpoint for a tunnel, use the tunnel source command in interface configuration mode. To remove the tunnel source, use the no form of this command.
tunnel source {ip-address | interface-type number}
no tunnel source [ip-address | interface-type number]
Syntax Description
ip-address
|
IP address for the tunnel source.
|
interface-type number
|
Interface for the tunnel source.
|
Defaults
None
Command Modes
Interface configuration
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
Use the tunnel source command to configure the source address for an IP tunnel.
You should not have two tunnels using the same encapsulation mode with the same source and destination address.
This command requires the Enterprise license.
Examples
This example shows how to set the tunnel source:
switch(config-if)# tunnel source 192.0.2.120
Related Commands
Command
|
Description
|
tunnel destination
|
Sets the destination of the IP tunnel.
|
interface tunnel
|
Creates the IP tunnel.
|
show interface tunnel
|
Displays information about the traffic on the specified tunnel interface.
|
tunnel ttl
To configure the time-to-live value for a tunnel, use the tunnel ttl command in interface configuration mode. To restore the default value, use the no form of this command.
tunnel ttl value
no tunnel ttl [value]
Syntax Description
value
|
time-to-live value for the tunnel. The range is from 1 to 255.
|
Defaults
None
Command Modes
Interface configuration
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
Use the tunnel ttl command to configure the time-to-live value for an IP tunnel.
This command requires the Enterprise license.
Examples
This example shows how to configure the time-to-live value for a tunnel interface:
switch(config-if)# tunnel ttl 30
Related Commands
Command
|
Description
|
tunnel destination
|
Sets the destination of the IP tunnel.
|
interface tunnel
|
Creates the IP tunnel.
|
show interface tunnel
|
Displays information about the traffic on the specified tunnel interface.
|
vlan dot1q tag native
To enable dot1q (IEEE 802.1Q) tagging for the native VLAN in a trunk, use the vlan dot1q tag native command. To return to the default where no packets are tagged in the native VLAN in a trunk, use the no form of this command.
vlan dot1q tag native
no vlan dot1q tag native
Syntax Description
This command has no arguments or keywords.
Defaults
Disabled
Command Modes
Global configuration
Supported User Roles
network-admin
vdc-admin
Command History
Release
|
Modification
|
4.0
|
This command was introduced.
|
Usage Guidelines
Typically, you configure 802.1Q trunks with a native VLAN ID, which strips tagging from all packets on that VLAN and allows all untagged traffic and control traffic to transit the switch. Packets that enter the switch with 802.1Q tags that match the native VLAN ID value are similarly stripped of tagging. If you choose to maintain the tagging on the native VLAN and drop untagged traffic, enter the vlan dot1q tag native command.
Use the vlan dot1q tag native command to configure the switch to tag the traffic received on the native VLAN and to admit only 802.1Q-tagged frame, dropping any untagged traffic, including untagged traffic in the native VLAN. Control traffic continues to be accepted untagged on the native VLAN on a trunked port, even when the vlan dot1q tag native command is enabled.
Use this command to enable the tagging behavior on all native VLANs on all trunked ports on the switch.
Note
If you enable 802.1Q tagging on one switch and disable it on another switch, all traffic is dropped; you must identically configure 802.1Q tagging on each switch.
This command does not require a license.
Examples
This example shows how to enable dot1q tagging for all VLANs on all trunk ports on the switch:
switch(config)# vlan dot1q tag native
Related Commands
Command
|
Description
|
show vlan dot1q tag native
|
Displays native VLAN-tagging information.
|