Catalyst Supervisor Engine 32 PISA IOS Command Reference, 12.2ZY - show mls cef to show qm-sp [Cisco Catalyst 6500 Series Switches]

Table Of Contents

show mls cef

show mls cef adjacency

show mls cef exact-route

show mls cef exception

show mls cef hardware

show mls cef inconsistency

show mls cef ip

show mls cef ip multicast

show mls cef ipv6

show mls cef logging

show mls cef lookup

show mls cef maximum-routes

show mls cef mpls

show mls cef rpf

show mls cef statistics

show mls cef summary

show mls cef vrf

show mls df-table

show mls ip

show mls ip cef rpf-table

show mls ip multicast

show mls ip multicast bidir

show mls ip multicast rp-mapping

show mls ip multicast sso

show mls ip non-static

show mls ip routes

show mls ip static

show mls ip statistics

show mls nde

show mls netflow

show mls netflow ip

show mls netflow ip sw-installed

show mls netflow ipv6

show mls qos

show mls qos free-agram

show mls qos maps

show mls qos mpls

show mls qos protocol

show mls qos statistics-export info

show mls rate-limit

show mls sampling

show mls statistics

show mls table-contention

show mmls igmp explicit-tracking

show mmls msc

show mobility

show module

show monitor permit-list

show monitor session

show mpls l2transport vc

show mpls platform

show mpls ttfib

show pagp

show platform

show platform hardware capacity

show platform pisa np

show platform software ipv6-multicast

show platform software pisa fm interface

show platform software pisa split-vlan

show policy-map

show policy-map control-plane

show policy-map interface

show port-security

show power

show qdm status

show qm-sp port-data

show mls cef

To display the MLS-hardware Layer 3-switching table entries, use the show mls cef command.

show mls cef [ip] [prefix [mask-length | load-info]] [detail] [module number]
show mls cef [ip] [{lookup ...} | {multicast ...} | {rpf ...} | {vpn ...} | {vrf ...}]
show mls cef [{adjacency ...} | {block block-number [entries]} | {config-register reg-address} | {diags [detail]} | {entry index [detail]} | {exact-route ...} | {hardware [module number]} | {inconsistency ...} | {lookup ...} | {masks [type] [module number]} | {rpf ...} | {statistics ...} | {summary [module number]} | {tunnel fragment} | {used-blocks [type] [module number]} | {vpn ...} | {vrf ...}]
show mls cef [{eom ...} | {ip ...} | {ipv6 ...} | {mpls ...}]
Syntax Description

ip

(Optional) Displays IPv6 unicast entries in the MLS-hardware Layer 3-switching table; see the "Usage Guidelines" section for additional information.

prefix

(Optional) Entry prefix in the format A.B.C.D.

mask-length

(Optional) Mask length; valid values are from 0 to 32.

load-info

(Optional) Displays output with a hash value next to each adjacency.

detail

(Optional) Displays detailed hardware information. See the "Usage Guidelines" section for important information.

module number

(Optional) Displays information about the entries for a specific module.

lookup ...

(Optional) Displays IP entries in the MLS-hardware Layer 3-switching table for the specified destination IP address. See the show mls cef lookup command.

multicast ...

(Optional) Displays IP entries in the MLS-hardware Layer 3-switching table in the compact CEF table display format; see the show mls cef ip multicast command.

rpf ...

(Optional) Displays information about the RPF hardware in the MLS-hardware Layer 3-switching table; see the show mls cef rpf command.

vpn ...

(Optional) Displays information about the VPN ID CEF table. See the "Usage Guidelines" section for important information.

vrf ...

(Optional) Displays information about the CEF table for the specified VRF name.

adjacency ...

(Optional) Displays information about the MLS-hardware Layer 3-switching adjacency node; see the show mls cef adjacency command.

block block-number

(Optional) Displays information about the mask-block utilization for a specific block; valid values are from 0 to 4294967295. See the "Usage Guidelines" section for important information.

entries

(Optional) Displays the mask-block utilization entries. See the "Usage Guidelines" section for important information.

config-register reg-address

(Optional) Displays information about the hardware configuration register for a specific register. See the "Usage Guidelines" section for important information.

diags

(Optional) Displays information about the diagnostic entry. See the "Usage Guidelines" section for important information.

entry index

(Optional) Specifies the specified prefix entry index to display; valid values are from 0 to 4294967295. See the "Usage Guidelines" section for important information.

exact-route ...

(Optional) Displays information about hardware load sharing; see the show mls cef exact-route command.

hardware

(Optional) Displays a summary of the hardware information. See the "Usage Guidelines" section for important information.

inconsistency ...

(Optional) Displays information about the consistency checker; see the show mls cef inconsistency command.

masks ...

(Optional) Displays information about the mask. See the "Usage Guidelines" section for important information.

statistics ...

(Optional) Displays the number of switched packets and bytes; see the show mls cef statistics command.

tunnel fragment

(Optional) Displays the operational status of tunnel fragmentation.

summary ...

(Optional) Displays a summary of rates in the hardware for each protocol; see the show mls cef summary command.

used-blocks

(Optional) Displays a list of used blocks; see the "Usage Guidelines" section for important information.

eom ...

Displays information about the EoM protocol; this keyword is not supported.

ip ...

Displays information about the IP protocol; see the "Usage Guidelines" section for additional information.

ipv6 ...

Displays information about the IPv6 protocol.

mpls ...

Displays information about MPLS; see the show mls cef mpls command.

Command Default

If you do not specify a protocol, the default display is for IP and the global CEF table.

Command Modes

EXEC (>)

Command History

Release

Modification

12.2(18)ZY

Support for this command was introduced.

Usage Guidelines

The ... indicates that there is additional information.

The following options are for expert users only and are not documented:

•load-info

•detail

•block block-number [entries]

•config-register reg-address}

•diags [detail]

•entry index [detail]

•hardware [module number]

•masks [type]

•used-blocks [type]

•vpn

The MLS-hardware Layer 3 switching applies to IP traffic only.

Use the show mls cef [ip] vrf command to display the VRF CEF table entries.

You can enter this command on the supervisor engine or switch consoles. Enter the remote login command to session into the supervisor engine to enter the commands.

The show mls cef command offers three levels of options as follows:

•Protocol-independent options—The following keywords are not protocol specific:

–adjacency

–exact-route

–inconsistency

–module

–rpf

–statistics

–summary

–used-blocks

–vpn

–vrf

•Protocol-dependent keywords—The following keywords specify a protocol:

–eom

–ip

–ipv6

–mpls

•Default keywords—The following keywords display identical output for both the show mls cef and show mls cef ip commands:

– prefix

–lookup

–multicast—This keyword is not supported on systems configured with a Supervisor Engine 720.

–module

–rpf

–vpn

–vrf

Examples

This example shows how the show mls cef and show mls cef ip commands are identical:
Router# show mls cef
Codes: decap - Decapsulation, + - Push Label
Index  Prefix              Adjacency
64     127.0.0.51/32       punt
65     127.0.0.0/32        punt
66     127.255.255.255/32  punt
67     1.1.1.100/32        punt
68     1.1.1.0/32          punt
69     1.1.1.255/32        punt
70     2.2.2.100/32        punt
71     2.2.2.0/32          punt
72     2.2.2.255/32        punt
73     2.2.2.5/32          Gi5/2,          0000.c005.0205
74     0.0.0.0/32          punt
75     255.255.255.255/32  punt
76     200.1.22.22/32      punt
77     200.0.0.0/32        punt
78     200.255.255.255/32  punt
79     200.1.1.153/32      Vl30,           0050.808b.8200
81     200.1.1.91/32       Vl30,           0004.4eef.8800
82     200.1.1.100/32      Vl30,           00d0.bb02.0400
83     200.12.223.3/32     Vl30,           00d0.061b.7000
84     200.2.5.3/32        Vl30,           00d0.061d.200a
85     200.1.1.101/32      Vl30,           0007.ecfc.e40a
86     200.0.100.1/32      Vl30,           0050.2a8d.700a
87     200.1.1.104/32      Vl30,           0050.0f2d.ac00
88     223.255.254.226/32  Vl30,           0050.2a8d.700a
89     2.2.2.7/32          Gi5/2,          0000.c005.0207
90     1.1.1.5/32          Gi5/1,          0000.0101.0105
3200   224.0.0.0/24        punt
3201   1.1.1.0/24          punt
3202   2.2.2.0/24          punt
134400 200.0.0.0/8         punt
134432 0.0.0.0/0           drop
524256 0.0.0.0/0           drop
Router#
This example shows how to display all the MLS-hardware Layer 3-switching table IP entries:
Router# show mls cef ip
Codes: decap - Decapsulation, + - Push Label
Index  Prefix              Adjacency
64     127.0.0.51/32       punt
65     127.0.0.0/32        punt
66     127.255.255.255/32  punt
67     1.1.1.100/32        punt
68     1.1.1.0/32          punt
69     1.1.1.255/32        punt
70     2.2.2.100/32        punt
71     2.2.2.0/32          punt
72     2.2.2.255/32        punt
73     2.2.2.5/32          Gi5/2,          0000.c005.0205
74     0.0.0.0/32          punt
75     255.255.255.255/32  punt
76     200.1.22.22/32      punt
77     200.0.0.0/32        punt
78     200.255.255.255/32  punt
79     200.1.1.153/32      Vl30,           0050.808b.8200
81     200.1.1.91/32       Vl30,           0004.4eef.8800
82     200.1.1.100/32      Vl30,           00d0.bb02.0400
83     200.12.223.3/32     Vl30,           00d0.061b.7000
84     200.2.5.3/32        Vl30,           00d0.061d.200a
85     200.1.1.101/32      Vl30,           0007.ecfc.e40a
86     200.0.100.1/32      Vl30,           0050.2a8d.700a
87     200.1.1.104/32      Vl30,           0050.0f2d.ac00
88     223.255.254.226/32  Vl30,           0050.2a8d.700a
89     2.2.2.7/32          Gi5/2,          0000.c005.0207
90     1.1.1.5/32          Gi5/1,          0000.0101.0105
3200   224.0.0.0/24        punt
3201   1.1.1.0/24          punt
3202   2.2.2.0/24          punt
134400 200.0.0.0/8         punt
134432 0.0.0.0/0           drop
524256 0.0.0.0/0           drop
Router#
Table 2-80 describes the fields in the examples.

Table 2-80 show mls cef Command Output Fields

Field

Description

Index

MLS-hardware Layer 3-switching table entry index; the maximum is 256,000 entries.

Prefix

Entry prefix address/mask.

Adjacency

Adjacency types are as follows:

•drop—Packets matching the prefix entry are dropped.

•punt—Packets are redirected to an PISA for further processing.

•mac-address—Packets matching the prefix are forwarded to this specific next hop or the final destination host if directly attached.

This example shows how to display the operational status of tunnel fragmentation:
Router# show mls cef tunnel fragment
Tunnel Fragmentation:       Enabled
Router#
Related Commands

Command

Description

show mls cef summary

Displays the number of routes in the MLS-hardware Layer 3-switching table for all the protocols.

show mls cef adjacency

To display information about the MLS-hardware Layer 3-switching adjacency node, use the show mls cef adjacency command.

show mls cef adjacency [all | decap-tunnel | {encap-tunnel ip-src-addr} | {entry index [to end-range]} | {flags lower-flag upper-flag} | mac-address number | mac-rewrite | macv4 | {mpls [label]} | multicast | nat | recirculation | special | tcp | usage] [detail] [module number]
Syntax Description

all

(Optional) Displays all application-allocated entries.

decap-tunnel

(Optional) Displays the decapsulated tunneled-packet information.

encap-tunnel ip-src-addr

(Optional) Displays the encapsulated tunnel-adjacency entry that matches the specified address.

entry index

(Optional) Displays the adjacency-entry information for the specified index; valid values are from 0 to 1048575.

to end-range

(Optional) Specifies the index range to display adjacency-entry information; valid values are from 0 to 1048575.

flags

(Optional) Displays information about the specified bit flags. See the "Usage Guidelines" section for additional information.

lower-flag

Lower 32-bits flag values to display; valid values are 0 to FFFFFFFF.

upper-flag

Upper 32-bits flag values to display; valid values are 0 to FFFFFFFF.

mac-address number

(Optional) Displays information about the matched MAC-address adjacency for the specified 48-bit hardware address in the H.H.H format.

mac-rewrite

(Optional) Displays information about the MAC-rewrite adjacency.

macv4

(Optional) Displays information about the MACv4 adjacency.

mpls

(Optional) Displays information about the MPLS adjacency.

label

(Optional) MPLS label to display adjacency-entry information; valid values are from 0 to 1048575.

multicast

(Optional) Displays information about the multicast adjacency.

nat

(Optional) Displays information about the NAT adjacency.

recirculation

(Optional) Displays information about the recirculated-adjacency entry.

special

(Optional) Displays information about the special adjacencies.

tcp

(Optional) Displays information about the TCP-application adjacency.

usage

(Optional) Displays information about the adjacency usage.

detail

(Optional) Displays hardware-entry details.

module number

(Optional) Displays information about the adjacency node for a specific module.

Command Default

This command has no default settings.

Command Modes

EXEC (>)

Command History

Release

Modification

12.2(18)ZY

Support for this command was introduced.

Usage Guidelines

The decap-tunnel and endcap-tunnel keywords are used to display the tunnel nodes. The encapsulator node is considered the tunnel-entry point and the decapsulator node is considered the tunnel-exit point. There may be multiple source-destination pairs using the same tunnel between the encapsulator and decapsulator.

The decap-tunnel and endcap-tunnel keywords are not supported on Catalyst 6500 series switches that are configured with a Supervisor Engine 720.

The flags keyword applies to all adjacency formats (for example, mac-rewrite, mpls, and multicast) and indicates the bits that are set in the adjacency for the specific adjacency.

The module number keyword and argument designate the module and port number. Valid values depend on the chassis and module used. For example, if you have a 48-port 10/100BASE-T Ethernet module installed in a 13-slot chassis, valid values for the module number are from 1 to 13 and valid values for the port number are from 1 to 48.

MLS-hardware Layer 3 switching applies to IP traffic only.

MLS-hardware Layer 3-switching adjacency statistics are updated every 60 seconds.

You can display hardware-switched IP-directed broadcast information by entering the show mls cef adjacency mac-address number detail command.

For each MLS-hardware Layer 3-switching FIB entry, MLS-hardware Layer 3 switching stores Layer 2 information from the PISA for adjacent nodes in the MLS-hardware Layer 3-switching adjacency table. Adjacent nodes are directly connected at Layer 2. To forward traffic, MLS-hardware Layer 3 switching selects a route from a MLS-hardware Layer 3-switching FIB entry, which points to a MLS-hardware Layer 3-switching adjacency entry, and uses the Layer 2 header for the adjacent node in the adjacency table entry to rewrite the packet during Layer 3 switching. MLS-hardware Layer 3 switching supports one million adjacency-table entries.

Examples

This example shows how to display information for all adjacency nodes:
Router# show mls cef adjacency all
Index: 5       smac: 0000.0000.0000, dmac: 0000.0000.0000
               mtu: 0, vlan: 0, dindex: 0x0, l3rw_vld: 0
               packets: 0, bytes: 0
Index: 32773   smac: 0000.0000.0000, dmac: 0000.0000.0000
               mtu: 0, vlan: 0, dindex: 0x0, l3rw_vld: 0
               packets: 0, bytes: 0
<Output is truncated>
This example shows how to display the adjacency-entry information for a specific index:
Router# show mls cef adjacency entry 132
Index: 132     smac: 0000.0000.0000, dmac: 0000.0000.0000
               mtu: 0, vlan: 0, dindex: 0x0, l3rw_vld: 0
               packets: 0, bytes: 0
This example shows how to display the adjacency-entry information for a range of indexes:
Router# show mls cef adjacency entry 132 to 134
Index: 132     smac: 0000.0000.0000, dmac: 0000.0000.0000
               mtu: 0, vlan: 0, dindex: 0x0, l3rw_vld: 0
               packets: 0, bytes: 0
Index: 133     smac: 0000.0000.0000, dmac: 0000.0000.0000
               mtu: 0, vlan: 0, dindex: 0x0, l3rw_vld: 0
               packets: 0, bytes: 0
Index: 134     smac: 0000.0000.0000, dmac: 0000.0000.0000
               mtu: 0, vlan: 0, dindex: 0x0, l3rw_vld: 0
               packets: 0, bytes: 0
Router#
This example shows how to display recirculation-adjacency information:
Router# show mls cef adjacency recirculation detail
Index: 6       smac: 0000.0000.0000, dmac: 0000.0000.0000
               mtu: 65535, vlan: 0, dindex: 0x0, ccc = 110,
               format: RECIR, l3rw_vld: 1
Router#
This example shows how to display specific bit flags:
Router# show mls cef adjacency flags 8408 0
STAT_REQUIRED NO_STAT CAP1 IQO UTTL UTOS
Router# 
This example shows how to display adjacency-node information for a specific MAC address:
Router# show mls cef adjacency mac-address 00e0.f74c.842d
Index: 133138  smac: 00d0.061d.200a, dmac: 00e0.f74c.842d
               mtu: 1518, vlan: 45, dindex: 0x0, l3rw_vld: 1
               packets: 0, bytes: 0
Index: 133144  smac: 00d0.061d.200a, dmac: 00e0.f74c.842d
               mtu: 1518, vlan: 45, dindex: 0x0, l3rw_vld: 1
               packets: 0, bytes: 0
Router#
This example shows how to display the MAC-rewrite adjacency information:
Router# show mls cef adjacency mac-rewrite
Index: 133132  smac: 0000.0000.0000, dmac: 0000.0000.0000
               mtu: 0, vlan: 0, dindex: 0x0, l3rw_vld: 0
               packets: 0, bytes: 0
Index: 133133  smac: 000a.421f.3000, dmac: 0050.2a8d.700a
               mtu: 1518, vlan: 1, dindex: 0x0, l3rw_vld: 1
               packets: 0, bytes: 0
Index: 133134  smac: 000a.421f.3000, dmac: 0000.7201.0001
               mtu: 1518, vlan: 72, dindex: 0x0, l3rw_vld: 1
               packets: 0, bytes: 0
Index: 133135  smac: 000a.421f.3000, dmac: 0000.7301.0001
               mtu: 1518, vlan: 73, dindex: 0x0, l3rw_vld: 1
               packets: 0, bytes: 0
<Output is truncated>
This example shows how to display information about the MPLS adjacency:
Router#  show mls cef adjacency mpls detail 
Index: 32768 smac: 0000.0000.0000, dmac: 0000.0000.0000 
mtu: 1514, vlan: 0, dindex: 0x7FFA, l3rw_vld: 1 
format: MPLS, flags: 0x1000408600 
label0: 0, exp: 0, ovr: 0 
label1: 0, exp: 0, ovr: 0 
label2: 0, exp: 0, ovr: 0 
op: POP 
packets: 0, bytes: 0
Router#  
This example shows how to display information about the multicast adjacency:
Router# show mls cef adjacency multicast detail 
Index: 22 smac: 0000.0000.0000, dmac: 0000.0000.0000 
mtu: 0, vlan: 0, dindex: 0x0, l3rw_vld: 0 
format: MULTICAST, flags: 0x800 
met2: 0, met3: 0 
packets: 2232, bytes: 180684
Router#  
This example shows how to display information about the NAT adjacency:
Router# show mls cef adjacency nat detail 
Index: 200 mtu: 1522, vlan: 1063, dindex: 0x7FFA, l3rw_vld: 1 
format: NAT, flags: 0x8600 
ip_sa: 2.2.2.2, src_port: 100 
ip_da: 3.3.3.3, dst_port: 300 
delta_seq: 0, delta_ack: 0 
packets: 0, bytes: 0
Router#  
This example shows how to display information about the special adjacency:
Router# show mls cef adjacency special
Index: 0       smac: 0000.0000.0000, dmac: 0000.0000.0000
               mtu: 9234, vlan: 0, dindex: 0x0, l3rw_vld: 0
               format: MULTICAST, flags: 0x800 (mcast_fib_fail)
               met2: 0, met3: 0
               packets: 0, bytes: 0
Index: 1       smac: 0000.0000.0000, dmac: 0000.0000.0000
               mtu: 9234, vlan: 0, dindex: 0x0, l3rw_vld: 0
               format: MULTICAST, flags: 0x800 (mcast_fib_rf_cr)
               met2: 0, met3: 0
               packets: 0, bytes: 0
<Output is truncated>
This example shows how to display information about the TCP adjacency:
Router# show mls cef adjacency tcp detail 
Index: 200 smac: abcd.abcd.abcd, dmac: 0000.1000.2000 
mtu: 1518, vlan: 1063, dindex: 0x0, l3rw_vld: 1 
format: MAC_TCP, flags: 0x8408 
delta_seq: 10, delta_ack: 0 
packets: 0, bytes: 0
Router# 
This example shows how to display information about the adjacency usage:
Router# show mls cef adjacency usage
Adjacency Table Size: 1048576 
ACL region usage: 2 
Non-stats region usage: 128 
Stats region usage: 31 
Total adjacency usage: 161 
Router# 
show mls cef exact-route

To display information about the hardware load sharing, use the show mls cef exact-route command.

show mls cef exact-route src-ip {dest-ip | src-l4port} [dest-l4port | {module num}]
show mls cef exact-route {vrf instance-name} src-ip {dest-ip | src-l4port} [dest-l4port | {module num}]
Syntax Description

src-ip

Source IP address.

dest-ip

Destination IP address.

src-l4port

Layer 4-source port number; valid values are from 0 to 65535.

dest-l4port

(Optional) Layer 4-destination port number; valid values are from 0 to 65535.

module num

(Optional) Module number.

vrf instance-name

Displays the numeric VPN routing and forwarding ID for the specified VRF instance name.

Command Default

This command has no default settings.

Command Modes

EXEC (>)

Command History

Release

Modification

12.2(18)ZY

Support for this command was introduced.

Usage Guidelines

The vrf instance-name keyword and argument are not supported on Catalyst 6500 series switches that are configured with a Supervisor Engine 2.

Examples

This example shows how to display the hardware load-sharing information:
Router# show mls cef exact-route 172.20.52.16 172.20.52.31
Interface: Gi2/1, Next Hop: 255.255.255.255, Vlan: 4073, Destination Mac: 00d0.061d.200a
Router#
Related Commands

Command

Description

show ip cef exact-route

Displays the exact route for a source-destination IP address pair.

show mls cef exception

To display information about the CEF exception, use the show mls cef exception command.

show mls cef exception {status [detail] | priorities}
Syntax Description

status

Displays information about the CEF-exception status.

detail

(Optional) Displays detailed hardware information; see the "Usage Guidelines" section for more information.

priorities

Displays information about the CEF-exception priority.

Command Default

This command has no default settings.

Command Modes

EXEC (>)

Command History

Release

Modification

12.2(18)ZY

Support for this command was introduced.

Usage Guidelines

The detail keyword is for expert users only and is not documented.

In the output of the show mls cef exception status command, the following definitions apply:

•FALSE—Indicates that the protocol is not under the exception.

•TRUE—Indicates that the protocol is under the exception.

Examples

This example shows how to display detailed information about the CEF-exception status:
Router# show mls cef exception status
Current IPv4 FIB exception state = FALSE 
Current IPv6 FIB exception state = FALSE 
Current MPLS FIB exception state = FALSE 
Router#
This example shows how to display the FIB ERM-exception priority:
Router# show mls cef exception priorities 
Priority Protocol 
===================== 
1 IPv4 
2 IPv6 
3 MPLS 
Router#
Related Commands

Command

Description

mls erm priority

Assigns the priorities to define an order in which protocols attempt to recover from the exception status.

show mls cef hardware

To display the MLS-hardware Layer 3-switching table entries, use the show mls cef hardware command.

show mls cef hardware [module number]
Syntax Description

module number

(Optional) Displays the adjacency-node information for a specific module.

Command Default

This command has no default settings.

Command Modes

EXEC (>)

Command History

Release

Modification

12.2(18)ZY

Support for this command was introduced.

Usage Guidelines

MLS-hardware Layer 3 switching applies to IP traffic only.

Examples

This example shows how to display all the MLS-hardware Layer 3-switching table entries:
Router# show mls cef hardware
 CEF TCAM v2:
  Size:
        65536 rows/device, 4 device(s), 262144 total rows
        32 entries/mask-block
        8192 total blocks (32b wide)
        1212416 s/w table memory
  Options:
        sanity check: on
        sanity interval: 301 seconds
        consistency check: on
        consistency interval: 61 seconds
        redistribution: off
            redistribution interval: 120 seconds
            redistribution threshold: 10
        compression: on
            compression interval: 31 seconds
        tcam/ssram shadowing: on
  Operation Statistics:
        Entries inserted:               0000000000000024
        Entries deleted:                0000000000000005
        Entries compressed:             0000000000000000
        Blocks inserted:                0000000000000018
        Blocks deleted:                 0000000000000004
        Blocks compressed:              0000000000000000
        Blocks shuffled:                0000000000000002
        Blocks deleted for exception:   0000000000000000
        Direct h/w modifications:       0000000000000000
  Background Task Statistics:
        Consistency Check count:        0000000000014066
        Consistency Errors:             0000000000000000
        SSRAM Consistency Errors:       0000000000000000
        Sanity Check count:             0000000000002855
        Sanity Check Errors:            0000000000000000
        Compression count:              0000000000004621
        Exception Handling status    : on
        L3 Hardware switching status : on
        Fatal Error Handling Status  : Reset
        Fatal Errors:                   0000000000000000
        Fatal Error Recovery Count:     0000000000000000
  SSRAM ECC error summary:
        Uncorrectable ecc entries    : 0
        Correctable ecc entries      : 0
        Packets dropped              : 0
        Packets software switched    : 0
FIB SSRAM Entry status
----------------------
Key: UC - Uncorrectable error, C - Correctable error
        SSRAM banks  :  Bank0    Bank1
No ECC errors reported in FIB SSRAM.
show mls cef inconsistency

To display consistency-checker information, use the show mls cef inconsistency command.

show mls cef inconsistency [module num | now | records] [detail] [module num]
Syntax Description

module num

(Optional) Displays inconsistency information for the specified module.

now

(Optional) Runs a consistency check and displays any issues.

records

(Optional) Displays the inconsistency records.

detail

(Optional) Displays hardware-entry details.

module num

(Optional) Displays the adjacency-node information for a specific module.

Command Default

This command has no default settings.

Command Modes

EXEC (>)

Command History

Release

Modification

12.2(18)ZY

Support for this command was introduced.

Usage Guidelines

If you enter the show mls cef inconsistency command with no arguments, this information is displayed:

•Consistency check count

•TCAM-consistency check errors

•SSRAM-consistency check errors

Examples

This example shows how to display information about the consistency checker:
Router# show mls cef inconsistency
Consistency Check Count       : 81
TCAM Consistency Check Errors : 0
SSRAM Consistency Check Errors : 0
Router#
This example shows how to display information about the consistency checker for a specific module:
Router# show mls cef inconsistency module 7
Consistency Check Count       : 11033
TCAM Consistency Check Errors : 0
SSRAM Consistency Check Errors : 0
Router#
This example shows how to run a consistency check and display any issues:
Router#  show mls cef inconsistency now
Performing TCAM check now ...done
No. of FIB TCAM Consistency Check Errors  : 0
Performing SSRAM check now ...done
No. of FIB SSRAM Consistency Check Errors : 0
Router# 
This example shows how to display the consistency records:
Router# show mls cef inconsistency records
Consistency Check Count       : 11044
TCAM Consistency Check Errors : 0
SSRAM Consistency Check Errors : 0
Router# 
show mls cef ip

To display the IP entries in the MLS-hardware Layer 3-switching table, use the show mls cef ip command.

show mls cef ip [prefix [mask-length]] [detail] [module number]
show mls cef ip accounting per-prefix
show mls cef ip {lookup ...} | {multicast tcam ...} | {rpf ...} | {vpn ...} | {vrf ...}
Syntax Description

prefix

(Optional) Entry prefix in the format A.B.C.D.

mask-length

(Optional) Mask length; valid values are from 0 to 32.

detail

(Optional) Displays hardware-entry details.

module number

(Optional) Displays the entries for a specific module.

accounting per-prefix

Displays all the prefixes that are configured for the statistic collection.

lookup ...

Displays the TCAM-entry index for the specified destination IP unicast address; see the show mls cef lookup command.

multicast tcam ...

Displays the IP entries in the MLS-hardware Layer 3-switching table in the compact CEF table-display format; see the "Usage Guidelines" section for additional information.

rpf ...

Displays the RPF-hardware information in the MLS-hardware Layer 3-switching table; see the show mls cef rpf command.

vpn ...

(Optional) Displays information about the VPN ID CEF table; see the "Usage Guidelines" section for more information.

vrf ...

Displays information about the VPN-instance CEF table.

Command Default

This command has no default settings.

Command Modes

EXEC (>)

Command History

Release

Modification

12.2(18)ZY

Support for this command was introduced.

Usage Guidelines

See the show mls cef ip multicast tcam command for information about this command.

The ... indicates that there is additional information.

The vpn keyword is for expert users only and is not documented.

Information in the output of the show mls cef ip command is also displayed in the show mls cef commands.

The lookup is performed as a "longest prefix match" and displays the TCAM-entry index that applies to the specified destination IP address.

The information output is in this format: Index, Prefix, Mask, and Adjacency.

Examples

This example shows how the show mls cef and show mls cef ip commands are identical:
Router# show mls cef 
Codes: decap - Decapsulation, + - Push Label
Index  Prefix              Adjacency
64     127.0.0.51/32       punt
65     127.0.0.0/32        punt
66     127.255.255.255/32  punt
67     1.1.1.100/32        punt
68     1.1.1.0/32          punt
69     1.1.1.255/32        punt
70     2.2.2.100/32        punt
71     2.2.2.0/32          punt
72     2.2.2.255/32        punt
73     2.2.2.5/32          Gi5/2,          0000.c005.0205
74     0.0.0.0/32          punt
75     255.255.255.255/32  punt
76     200.1.22.22/32      punt
77     200.0.0.0/32        punt
78     200.255.255.255/32  punt
79     200.1.1.153/32      Vl30,           0050.808b.8200
81     200.1.1.91/32       Vl30,           0004.4eef.8800
82     200.1.1.100/32      Vl30,           00d0.bb02.0400
83     200.12.223.3/32     Vl30,           00d0.061b.7000
84     200.2.5.3/32        Vl30,           00d0.061d.200a
85     200.1.1.101/32      Vl30,           0007.ecfc.e40a
86     200.0.100.1/32      Vl30,           0050.2a8d.700a
87     200.1.1.104/32      Vl30,           0050.0f2d.ac00
88     223.255.254.226/32  Vl30,           0050.2a8d.700a
89     2.2.2.7/32          Gi5/2,          0000.c005.0207
90     1.1.1.5/32          Gi5/1,          0000.0101.0105
3200   224.0.0.0/24        punt
3201   1.1.1.0/24          punt
3202   2.2.2.0/24          punt
134400 200.0.0.0/8         punt
134432 0.0.0.0/0           drop
524256 0.0.0.0/0           drop
Router#
This example shows how to display all the MLS-hardware Layer 3-switching table IP entries:
Router# show mls cef ip
Codes: decap - Decapsulation, + - Push Label
Index  Prefix              Adjacency
64     127.0.0.51/32       punt
65     127.0.0.0/32        punt
66     127.255.255.255/32  punt
67     1.1.1.100/32        punt
68     1.1.1.0/32          punt
69     1.1.1.255/32        punt
70     2.2.2.100/32        punt
71     2.2.2.0/32          punt
72     2.2.2.255/32        punt
73     2.2.2.5/32          Gi5/2,          0000.c005.0205
74     0.0.0.0/32          punt
75     255.255.255.255/32  punt
76     200.1.22.22/32      punt
77     200.0.0.0/32        punt
78     200.255.255.255/32  punt
79     200.1.1.153/32      Vl30,           0050.808b.8200
81     200.1.1.91/32       Vl30           0004.4eef.8800
82     200.1.1.100/32      Vl30           00d0.bb02.0400
83     200.12.223.3/32     Vl30           00d0.061b.7000
84     200.2.5.3/32        Vl30           00d0.061d.200a
85     200.1.1.101/32      Vl30           0007.ecfc.e40a
86     200.0.100.1/32      Vl30           0050.2a8d.700a
87     200.1.1.104/32      Vl30           0050.0f2d.ac00
88     223.255.254.226/32  Vl30           0050.2a8d.700a
89     2.2.2.7/32          Gi5/2          0000.c005.0207
90     1.1.1.5/32          Gi5/1          0000.0101.0105
3200   224.0.0.0/24        punt
3201   1.1.1.0/24          punt
3202   2.2.2.0/24          punt
134400 200.0.0.0/8         punt
134432 0.0.0.0/0           drop
524256 0.0.0.0/0           drop
Router#
Table 2-81 describes the fields shown in the examples.

Table 2-81 show mls cef ip Command Output Fields

Field

Description

Index

MLS-hardware Layer 3-switching table entry index; the maximum is 256,000 entries.

Prefix

Entry prefix address/mask.

Adjacency

Adjacency information.

This example shows how to display the detailed MLS-hardware Layer 3-switching table entries:
Router# show mls cef ip 127.0.0.52 detail
Codes: M - mask entry, V - value entry, A - adjacency index, P - priority bit
       D - full don't switch, m - load balancing modnumber, B - BGP Bucket sel
       V0 - Vlan 0,C0 - don't comp bit 0,V1 - Vlan 1,C1 - don't comp bit 1
       RVTEN - RPF Vlan table enable, RVTSEL - RPF Vlan table select
Format: IPV4_DA - (8 | xtag vpn pi cr recirc tos prefix)
Format: IPV4_SA - (9 | xtag vpn pi cr recirc prefix)
M(194    ): E | 1 FFF  0 0 0 0   255.255.255.255
V(194    ): 8 | 1 0    0 0 0 0   127.0.0.52         (A:133120 ,P:1,D:0,m:0 ,B:0)
Router#
This example shows how to display all the prefixes that are configured for the statistic collection:
Router# show mls cef ip accounting per-prefix
     VRF              Prefix/Mask        Packets          Bytes
A - Active, I - Inactive
Router#
Related Commands

Command

Description

show mls cef

Displays the MLS-hardware Layer 3-switching table entries.

show mls cef ip multicast

To display the IP entries in the multilayer switching (MLS)-hardware Layer 3-switching table on the switch processor, use the show mls cef ip multicast command.

show mls cef ip multicast {bidir | grp-only | source source-ip} [detail | group group-id | vlan rpf-vlanid]
show mls cef ip multicast control [detail | prefix prefix | vlan rpf-vlanid]
show mls cef ip multicast group group-id [detail | vlan rpf-vlanid]
show mls cef ip multicast src-grp [detail | group group-ip | source | vlan rpf-vlanid]
show mls cef ip multicast subnet [detail | prefix prefix | vlan rpf-vlanid]
show mls cef ip multicast summary [vpn-num]
show mls cef ip multicast tcam [prefix [mask]] [detail] [module num] [vrf src-ip {src-port | dst-ip} [dst-port | module num]]
show mls cef ip multicast {grp-mask | vlan rpf-vlanid | vpn vpn-id} [detail]
Syntax Description

bidir

Displays Bidir information.

grp-only

Displays hardware-entry information that is based on (*,G) shortcuts; see the "Usage Guidelines" section for additional information.

source source-ip

Displays hardware-entry information based on the specified source IP address.

detail

(Optional) Displays hardware-entry details.

group group-id

(Optional) Displays hardware-entry information that is based on the specified group IP address.

vlan rpf-vlanid

(Optional) Displays information for a specific RPF VLAN ID; valid values are from 0 to 4095.

control

(Optional) Displays hardware-entry information that is based on (*,G/m) entries; see the "Usage Guidelines" section for additional information.

prefix prefix

(Optional) Displays hardware-entry information that is based on an IP subnet prefix.

src-grp

Displays hardware-entry information that is based on (S,G) shortcuts; see the "Usage Guidelines" section for additional information.

subnet

Displays hardware-entry information that is based on (S/m,*) shortcuts; see the "Usage Guidelines" section for additional information.

summary

Displays a summary of installed-hardware shortcuts.

tcam

Displays CEF-table information in a compact format; see the "Usage Guidelines" section for additional information.

mask

(Optional) Displays hardware-entry information that is based on the specified subnet mask.

vrf src-ip

(Optional) Displays the numeric VRF ID for the specified source IP address.

src-port

(Optional) Layer 4 source port; valid values are from 0 to 65535.

dst-ip

(Optional) Destination IP address.

dst-port

(Optional) Layer 4 destination port; valid values are from 0 to 65535.

grp-mask

Displays hardware-entry information that is based on Bidir (*,G/m) shortcuts.

vpn vpn-id

Displays hardware-entry information that is based on the specified VPN ID; valid values are from 0 to 4095.

Command Default

This command has no default settings.

Command Modes

EXEC (>)

Command History

Release

Modification

12.2(18)ZY

Support for this command was introduced.

Usage Guidelines

There are two MMLS modes, ingress and egress. The output displayed differs for each mode.

The hardware-entry types are as follows:

•{S/m,*}—Interface/mask (or subnet) entries that are used to catch a directly connected source.

•{*,G/m}—Groups that are served by the route processors as group/mask.

•{G,C}—G indicates a destination MAC address, which is derived from an IP-multicast address, and C indicates the ingress VLAN.

•{S,G,C}—S indicates the source IP address, G indicates the destination IP address, which is a multicast address, and C indicates the ingress VLAN, which is usually the RPF VLAN of the flow.

•{S,G}—Multicast-routing table entry that is maintained by the software or a multicast-forwarding table entry that is created in the FIB table.

•{*,G}—Same as {S,G}, except that the source address is a wildcard.

The DF index field ranges from 1 to 4 and is an index into the acceptance (PIM route processors multiplied by the DF) table. The acceptance table is used with DF forwarding and is used to identify the set of DF interfaces for each of the four RPs in a VPN.

Examples

This example shows how to display ingress hardware-entry information that is based on Bidir (*,G/m) shortcuts:
Router# show mls cef ip multicast grp-mask
Multicast CEF Entries for VPN#0
Flags: R - Control, S - Subnet, B - Bidir, C - Complete, P - Partial,
       c - Central Rewrite, p - Primary Input, r - Recirculation       
Source/mask         Destination/mask    RPF/DF  Flags #packets      #bytes             
rwindex  Output Vlans/Info             
+-------------------+-------------------+-------+-----+-------------+------------------+--
------+------------------------------+
*                   226.2.2.0/24         Df0    BCp   0             0                  -        
Vl50 [1 oifs]
*                   225.2.2.0/24         Df1    BCp   0             0                  -        
Vl51 [1 oifs]
*                   227.2.2.0/24         Df1    BCp   0             0                  -        
Vl51 [1 oifs]
Found 3 entries. 3 are mfd entries
Router#
This example shows how to display detailed ingress hardware-entry information that is based on Bidir (*,G/m) shortcuts:
Router# show mls cef ip multicast grp-mask detail 
(*, 226.2.2.0/24) 
        PI:1 (1) CR:0 (0) Recirc:0 (1)
        DFidx:0 AdjPtr:7,32775,65543,98311 FibRpfNf:0 FibRpfDf:0 FibAddr:0x100
        rwvlans:0 rwindex:0x0 adjmac:0006.d606.e240 rdt:0 E:0 CAP1:0
        fmt:mcast l3rwvld:1 DM:0 mtu:1518 rwtype:L3 met2:0x0 met3:0x5
        packets:0000000000000 bytes:000000000000000000
        Starting Offset: 0x0005
          V E C:  50 I:0x00449 
(*, 225.2.2.0/24) 
        PI:1 (1) CR:0 (0) Recirc:0 (1)
        DFidx:1 AdjPtr:8,32776,65544,98312 FibRpfNf:0 FibRpfDf:0 FibAddr:0x102
        rwvlans:0 rwindex:0x0 adjmac:0006.d606.e240 rdt:0 E:0 CAP1:0
        fmt:mcast l3rwvld:1 DM:0 mtu:1518 rwtype:L3 met2:0x0 met3:0x6
        packets:0000000000000 bytes:000000000000000000
        Starting Offset: 0x0006
          V E C:  51 I:0x0044B 
(*, 227.2.2.0/24) 
        PI:1 (1) CR:0 (0) Recirc:0 (1)
        DFidx:1 AdjPtr:19,32787,65555,98323 FibRpfNf:0 FibRpfDf:0 FibAddr:0x104
        rwvlans:0 rwindex:0x0 adjmac:0006.d606.e240 rdt:0 E:0 CAP1:0
        fmt:mcast l3rwvld:1 DM:0 mtu:1518 rwtype:L3 met2:0x0 met3:0x7
        packets:0000000000000 bytes:000000000000000000
        Starting Offset: 0x0007
          V E C:  51 I:0x0044B 
Found 3 entries. 3 are mfd entries
Router#
This example shows how to display ingress-Bidir information:
Router# show mls cef ip multicast bidir           
Multicast CEF Entries for VPN#0
Flags: R - Control, S - Subnet, B - Bidir, C - Complete, P - Partial,
       c - Central Rewrite, p - Primary Input, r - Recirculation       
Source/mask         Destination/mask    RPF/DF  Flags #packets      #bytes             
rwindex  Output Vlans/Info             
+-------------------+-------------------+-------+-----+-------------+------------------+--
------+------------------------------+
*                   225.2.2.2/32         Df1    BCp   0             0                  -        
Vl51,Vl30 [2 oifs]
*                   225.2.2.1/32         Df1    BCp   0             0                  -        
Vl51,Vl30 [2 oifs]
Found 2 entries. 2 are mfd entries
Router#
This example shows how to display detailed ingress-Bidir information:
Router# show mls cef ip multicast bidir detail 
(*, 225.2.2.2) 
        PI:1 (1) CR:0 (0) Recirc:0 (1)
        DFidx:1 AdjPtr:10,32778,65546,98314 FibRpfNf:0 FibRpfDf:0 FibAddr:0xE2
        rwvlans:0 rwindex:0x0 adjmac:0006.d606.e240 rdt:0 E:0 CAP1:0
        fmt:mcast l3rwvld:1 DM:0 mtu:1518 rwtype:L3 met2:0x0 met3:0xA
        packets:0000000000000 bytes:000000000000000000
        Starting Offset: 0x000A
          V  C:  51 I:0x004B5 P->19A0 
        - V  
          V E C:  30 I:0x0049B 
(*, 225.2.2.1) 
        PI:1 (1) CR:0 (0) Recirc:0 (1)
        DFidx:1 AdjPtr:9,32777,65545,98313 FibRpfNf:0 FibRpfDf:0 FibAddr:0xE0
        rwvlans:0 rwindex:0x0 adjmac:0006.d606.e240 rdt:0 E:0 CAP1:0
        fmt:mcast l3rwvld:1 DM:0 mtu:1518 rwtype:L3 met2:0x0 met3:0x8
        packets:0000000000000 bytes:000000000000000000
        Starting Offset: 0x0008
          V  C:  51 I:0x004B1 P->199C 
        - V  
          V E C:  30 I:0x00499 
Found 2 entries. 2 are mfd entries
Router#
This example shows how to display egress hardware-entry information that is based on Bidir (*,G/m) shortcuts:
Router# show mls cef ip multicast grp-mask        
Multicast CEF Entries for VPN#0
Flags: R - Control, S - Subnet, B - Bidir, C - Complete, P - Partial,
       c - Central Rewrite, p - Primary Input, r - Recirculation       
Source/mask         Destination/mask    RPF/DF  Flags #packets      #bytes             
rwindex  Output Vlans/Info             
+-------------------+-------------------+-------+-----+-------------+------------------+--
------+------------------------------+
*                   225.2.2.0/24         Df0    BCp   0             0                  -        
*                   225.2.2.0/24         -      Bpr   0             0                  
0x4AE    Vl51 [1 oifs]
*                   225.2.2.0/24         -      Br    0             0                  
0x40E    Vl51 [1 oifs]
*                   226.2.2.0/24         Df1    BCp   0             0                  -        
*                   226.2.2.0/24         -      Bpr   0             0                  
0x4AE    Vl50 [1 oifs]
*                   226.2.2.0/24         -      Br    0             0                  
0x40E    Vl50 [1 oifs]
*                   227.2.2.0/24         Df0    BCp   0             0                  -        
*                   227.2.2.0/24         -      Bpr   0             0                  
0x4AE    Vl51 [1 oifs]
*                   227.2.2.0/24         -      Br    0             0                  
0x40E    Vl51 [1 oifs]
Found 3 entries. 3 are mfd entries
Router#
This example shows how to display detailed egress hardware-entry information that is based on Bidir (*,G/m) shortcuts:
Router# show mls cef ip multicast grp-mask detail 
(*, 225.2.2.0/24) 
        PI:1 (1) CR:0 (0) Recirc:0 (1)
        DFidx:0 AdjPtr:7,32775,65543,98311 FibRpfNf:0 FibRpfDf:0 FibAddr:0x120
        rwvlans:0 rwindex:0x0 rdt:0 E:0 CAP1:0
        fmt:recir l3rwvld:1 DM:0 mtu:1522 rwtype:RECIR
        packets:0000000000000 bytes:000000000000000000
        PI:1 (1) CR:0 (0) Recirc:1 (1)
        AdjPtr:8,32776,65544,98312 FibRpfNf:0 FibRpfDf:0 FibAddr:0x122
        rwvlans:0 rwindex:0x4AE adjmac:0006.d606.e240 rdt:1 E:1 CAP1:0
        fmt:mcast l3rwvld:1 DM:0 mtu:1522 rwtype:L3 met2:0x0 met3:0x5
        packets:0000000000000 bytes:000000000000000000
        Starting Offset: 0x0005
          V E C:  51 I:0x0044C 
        PI:0 (1) CR:0 (0) Recirc:1 (1)
        AdjPtr:9,32777,65545,98313 FibRpfNf:0 FibRpfDf:0 FibAddr:0x124
        rwvlans:0 rwindex:0x40E adjmac:0006.d606.e240 rdt:1 E:0 CAP1:0
        fmt:mcast l3rwvld:1 DM:0 mtu:1522 rwtype:L3 met2:0x0 met3:0x5
        packets:0000000000000 bytes:000000000000000000
        Starting Offset: 0x0005
          V E C:  51 I:0x0044C 
(*, 226.2.2.0/24) 
        PI:1 (1) CR:0 (0) Recirc:0 (1)
        DFidx:1 AdjPtr:10,32778,65546,98314 FibRpfNf:0 FibRpfDf:0 FibAddr:0x126
        rwvlans:0 rwindex:0x0 rdt:0 E:0 CAP1:0
        fmt:recir l3rwvld:1 DM:0 mtu:1522 rwtype:RECIR
        packets:0000000000000 bytes:000000000000000000
        PI:1 (1) CR:0 (0) Recirc:1 (1)
        AdjPtr:11,32779,65547,98315 FibRpfNf:0 FibRpfDf:0 FibAddr:0x128
        rwvlans:0 rwindex:0x4AE adjmac:0006.d606.e240 rdt:1 E:1 CAP1:0
        fmt:mcast l3rwvld:1 DM:0 mtu:1522 rwtype:L3 met2:0x0 met3:0x1C
        packets:0000000000000 bytes:000000000000000000
        Starting Offset: 0x001C
          V E C:  50 I:0x00447 
        PI:0 (1) CR:0 (0) Recirc:1 (1)
        AdjPtr:12,32780,65548,98316 FibRpfNf:0 FibRpfDf:0 FibAddr:0x12A
        rwvlans:0 rwindex:0x40E adjmac:0006.d606.e240 rdt:1 E:0 CAP1:0
        fmt:mcast l3rwvld:1 DM:0 mtu:1522 rwtype:L3 met2:0x0 met3:0x1C
        packets:0000000000000 bytes:000000000000000000
        Starting Offset: 0x001C
          V E C:  50 I:0x00447 
(*, 227.2.2.0/24) 
        PI:1 (1) CR:0 (0) Recirc:0 (1)
        DFidx:0 AdjPtr:13,32781,65549,98317 FibRpfNf:0 FibRpfDf:0 FibAddr:0x12C
        rwvlans:0 rwindex:0x0 rdt:0 E:0 CAP1:0
        fmt:recir l3rwvld:1 DM:0 mtu:1522 rwtype:RECIR
        packets:0000000000000 bytes:000000000000000000
        PI:1 (1) CR:0 (0) Recirc:1 (1)
        AdjPtr:14,32782,65550,98318 FibRpfNf:0 FibRpfDf:0 FibAddr:0x12E
        rwvlans:0 rwindex:0x4AE adjmac:0006.d606.e240 rdt:1 E:1 CAP1:0
        fmt:mcast l3rwvld:1 DM:0 mtu:1522 rwtype:L3 met2:0x0 met3:0x1D
        packets:0000000000000 bytes:000000000000000000
        Starting Offset: 0x001D
          V E C:  51 I:0x0044C 
        PI:0 (1) CR:0 (0) Recirc:1 (1)
        AdjPtr:15,32783,65551,98319 FibRpfNf:0 FibRpfDf:0 FibAddr:0x130
        rwvlans:0 rwindex:0x40E adjmac:0006.d606.e240 rdt:1 E:0 CAP1:0
        fmt:mcast l3rwvld:1 DM:0 mtu:1522 rwtype:L3 met2:0x0 met3:0x1D
        packets:0000000000000 bytes:000000000000000000
        Starting Offset: 0x001D
          V E C:  51 I:0x0044C 
Found 3 entries. 3 are mfd entries
Router# 
This example shows how to display egress-Bidir information:
Router# show mls cef ip multicast bidir           
Multicast CEF Entries for VPN#0
Flags: R - Control, S - Subnet, B - Bidir, C - Complete, P - Partial,
       c - Central Rewrite, p - Primary Input, r - Recirculation       
Source/mask         Destination/mask    RPF/DF  Flags #packets      #bytes             
rwindex  Output Vlans/Info             
+-------------------+-------------------+-------+-----+-------------+------------------+--
------+------------------------------+
*                   225.2.2.2/32         Df0    BCp   0             0                  -        
*                   225.2.2.2/32         -      Bpr   0             0                  
0x4AE    Vl51,Vl30 [2 oifs]
*                   225.2.2.2/32         -      Br    0             0                  
0x40E    Vl51,Vl30 [2 oifs]
*                   225.2.2.1/32         Df0    BCp   0             0                  -        
*                   225.2.2.1/32         -      Bpr   0             0                  
0x4AE    Vl51,Vl30 [2 oifs]
*                   225.2.2.1/32         -      Br    0             0                  
0x40E    Vl51,Vl30 [2 oifs]
Found 2 entries. 2 are mfd entries
Router#
This example shows how to display detailed egress-Bidir information:
Router# show mls cef ip multicast bidir detail 
(*, 225.2.2.2) 
        PI:1 (1) CR:0 (0) Recirc:0 (1)
        DFidx:0 AdjPtr:19,32787,65555,98323 FibRpfNf:0 FibRpfDf:0 FibAddr:0xE6
        rwvlans:0 rwindex:0x0 rdt:0 E:0 CAP1:0
        fmt:recir l3rwvld:1 DM:0 mtu:1522 rwtype:RECIR
        packets:0000000000000 bytes:000000000000000000
        PI:1 (1) CR:0 (0) Recirc:1 (1)
        AdjPtr:20,32788,65556,98324 FibRpfNf:0 FibRpfDf:0 FibAddr:0xE8
        rwvlans:0 rwindex:0x4AE adjmac:0006.d606.e240 rdt:1 E:1 CAP1:0
        fmt:mcast l3rwvld:1 DM:0 mtu:1522 rwtype:L3 met2:0x0 met3:0x22
        packets:0000000000000 bytes:000000000000000000
        Starting Offset: 0x0022
          V  C:  51 I:0x004B3 P->24 
          V E C:  30 I:0x004B6 
        PI:0 (1) CR:0 (0) Recirc:1 (1)
        AdjPtr:21,32789,65557,98325 FibRpfNf:0 FibRpfDf:0 FibAddr:0xEA
        rwvlans:0 rwindex:0x40E adjmac:0006.d606.e240 rdt:1 E:0 CAP1:0
        fmt:mcast l3rwvld:1 DM:0 mtu:1522 rwtype:L3 met2:0x0 met3:0x22
        packets:0000000000000 bytes:000000000000000000
        Starting Offset: 0x0022
          V  C:  51 I:0x004B3 P->24 
          V E C:  30 I:0x004B6 
(*, 225.2.2.1) 
        PI:1 (1) CR:0 (0) Recirc:0 (1)
        DFidx:0 AdjPtr:16,32784,65552,98320 FibRpfNf:0 FibRpfDf:0 FibAddr:0xE0
        rwvlans:0 rwindex:0x0 rdt:0 E:0 CAP1:0
        fmt:recir l3rwvld:1 DM:0 mtu:1522 rwtype:RECIR
        packets:0000000000000 bytes:000000000000000000
        PI:1 (1) CR:0 (0) Recirc:1 (1)
        AdjPtr:17,32785,65553,98321 FibRpfNf:0 FibRpfDf:0 FibAddr:0xE2
        rwvlans:0 rwindex:0x4AE adjmac:0006.d606.e240 rdt:1 E:1 CAP1:0
        fmt:mcast l3rwvld:1 DM:0 mtu:1522 rwtype:L3 met2:0x0 met3:0x1E
        packets:0000000000000 bytes:000000000000000000
        Starting Offset: 0x001E
          V  C:  51 I:0x004AF P->20 
          V E C:  30 I:0x004B2 
        PI:0 (1) CR:0 (0) Recirc:1 (1)
        AdjPtr:18,32786,65554,98322 FibRpfNf:0 FibRpfDf:0 FibAddr:0xE4
        rwvlans:0 rwindex:0x40E adjmac:0006.d606.e240 rdt:1 E:0 CAP1:0
        fmt:mcast l3rwvld:1 DM:0 mtu:1522 rwtype:L3 met2:0x0 met3:0x1E
        packets:0000000000000 bytes:000000000000000000
        Starting Offset: 0x001E
          V  C:  51 I:0x004AF P->20 
          V E C:  30 I:0x004B2 
Found 2 entries. 2 are mfd entries
Router# 
This example shows how to display TCAM information:
Router# show mls cef ip multicast tcam
Index  Group              Source             RPF/DF Interface
64     224.0.1.39         0.0.0.0            NULL
66     224.0.1.40         0.0.0.0            NULL
96     224.0.0.0          0.0.0.0            NULL
Router#
show mls cef ipv6

To display the hardware IPv6-switching table entries, use the show mls cef ipv6 command.

show mls cef ipv6 [vrf-number] [ip-address/mask] [acccounting per-prefix] [module number]
show mls cef ipv6 exact-route src-addr [L4-src-port] dst-addr [L4-dst-port]
show mls cef ipv6 multicast tcam [v6mcast-address] [detail] [internal]
Syntax Description

vrf-number

(Optional) VRF number; valid values are from 0 to 4095.

ip-address/mask

(Optional) Entry IPv6 address and prefix mask; see the "Usage Guidelines" section for formatting information.

acccounting per-prefix

(Optional) Displays per-prefix accounting statistics.

module number

(Optional) Displays the entries for a specific module.

exact-route src-addr

Specifies the source IP address to display the hardware load sharing results.

L4-src-port

(Optional) Layer 4-source port number; valid values are from 0 to 65535.

dst-addr

Destination IP address.

L4-dst-port

(Optional) Layer 4-destination port number; valid values are from 0 to 65535.

multicast tcam

Displays IPv6-multicast entries.

v6mcast-address

(Optional) IPv6-multicast address.

detail

(Optional) Displays detailed hardware information.

internal

(Optional) Displays internal hardware information.

Command Default

This command has no default settings.

Command Modes

EXEC (>)

Command History

Release

Modification

12.2(18)ZY

Support for this command was introduced.

Usage Guidelines

You can enter this command on the supervisor engine and MLS-hardware Layer 3-switching module consoles only. Enter the remote login command to session into the supervisor engine to enter the commands.

When entering the ip-address/mask argument, use this format, X:X:X:X::X/mask, where valid values for mask are from 0 to 128.

Up to 64 IPv6 prefixes are supported.

You must enter the L4-src-port and L4-dst-port arguments when the load-sharing mode is set to full, for example, when Layer 4 ports are included in the load-sharing hashing algorithm.

Examples

This example shows how to display the hardware IPv6-switching table entries:
Router# show mls cef ipv6
Codes:M-MPLS encap, + - Push label 
Index Prefix Adjacency 
524384 BEEF:6::6/128 punt 
524386 5200::6/128 punt 
524388 2929::6/128 punt 
524390 6363::30/128 Fa1/48 , 0000.0001.0002 
524392 3FFE:1B00:1:1:0:5EFE:1B00:1/128 punt 
524394 2002:2929:6:2::6/128 punt 
524396 2002:2929:6:1::6/128 punt 
524398 6363::6/128 punt 
524416 BEEF:6::/64 drop 
524418 5200::/64 punt 
524420 2929::/64 punt 
524422 2002:2929:6:2::/64 punt 
524424 2002:2929:6:1::/64 punt 
524426 6363::/64 punt 
524428 3FFE:1B00:1:1::/64 Tu4 , V6 auto-tunnel 
524448 FEE0::/11 punt 
524480 FE80::/10 punt 
524512 FF00::/8 punt 
524544 ::/0 drop
Router#
This example shows how to display the IPv6 entries for a specific IPv6 address and mask:
Router# show mls cef ipv6 2001:4747::/64
Codes:R - Recirculation, I-IP encap
M-MPLS encap, + - Push label
Index Prefix Out i/f Out Label 
160 2001:4747::/64 punt
Router# 
This example shows how to display all the IPv6-FIB entries that have per-prefix statistics available:
Router# show mls cef ipv6 accounting per-prefix
(I) BEEF:2::/64: 0 packets, 0 bytes
 
A - Active, I - Inactive
Router#
This example shows how to display detailed hardware information:
Router# show mls cef ipv6 detail 
Codes: M - mask entry, V - value entry, A - adjacency index, P - FIB Priority
D - FIB Don't short-cut, m - mod-num
Format: IPv6_DA - (C | xtag vpn uvo prefix)
M(128 ): F | 1 FF 1 FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF 
V(128 ): C | 1 0 1 2001:4747::1253 (A:12 ,P:1,D:0,m:0 )
M(160 ): F | 1 FF 1 FFFF:FFFF:FFFF:FFFF:: 
V(160 ): C | 1 0 1 2001:4747:: (A:11 ,P:1,D:0,m:0 )
M(224 ): F | 1 FF 1 FFE0:: 
V(224 ): C | 1 0 1 FEE0:: (A:11 ,P:1,D:0,m:0 )
M(256 ): F | 1 FF 1 FFC0:: 
V(256 ): C | 1 0 1 FE80:: (A:12 ,P:1,D:0,m:0 )
M(352 ): F | 1 FF 1 FF00:: 
V(352 ): C | 1 0 1 FF00:: (A:12 ,P:1,D:0,m:0 )
M(480 ): F | 1 FF 1 :: 
V(480 ): C | 1 0 1 :: (A:14 ,P:1,D:0,m:0 
Router# 
Related Commands

Command

Description

mls ipv6 acl compress address unicast

Turns on the compression of IPv6 addresses.

show mls cef logging

To display the contents of the TCAM-inconsistency buffer, use the show mls cef logging command.

show mls cef logging [module num]
Syntax Description

module num

(Optional) Displays the entries for a specific module.

Command Default

This command has no default settings.

Command Modes

EXEC (>)

Command History

Release

Modification

12.2(18)ZY

Support for this command was introduced.

Usage Guidelines

The TCAM-inconsistency buffer records any inconsistency that is found in the TCAM.

MLS-hardware Layer 3 switching applies to IP traffic only.

Examples

This example shows how to display the contents of the TCAM inconsistency buffer:

Router# show mls cef logging
PFIB_ERR:TCAM_SHADOW_CONSISTENCY_ERR:value : Index: 100 
Expected: 0 -0 -0 
Hardware: 5 -1020304 -0 
PFIB_ERR:TCAM_SHADOW_CONSISTENCY_ERR:Mask : Index: 3 
Expected: 4 -0 -0 
Hardware: 6 -FFF00000-0
Router# 
show mls cef lookup

To display the IP entries in the MLS-hardware Layer 3-switching table for the specified destination IP address, use the show mls cef lookup command.

show mls cef [ip] lookup address [detail] [module number]
Syntax Description

ip

(Optional) Displays IP entries in the MLS-hardware Layer 3-switching table; see the "Usage Guidelines" section for additional information.

address

IP address in the format A.B.C.D.

detail

(Optional) Displays hardware-entry details.

module number

(Optional) Displays the entries for a specific module.

Command Default

This command has no default settings.

Command Modes

EXEC (>)

Command History

Release

Modification

12.2(18)ZY

Support for this command was introduced.

Usage Guidelines

The lookup is performed as a "longest-prefix match" and displays the TCAM-entry index that applies to the specified destination IP address.

The information output is in this format: Index, Prefix, Mask, and Adjacency.

The output of the show mls cef lookup ip and the show mls cef lookup commands is identical.

Examples

This example shows how to display the longest prefix match that applies to a specific IPv4-unicast address:
Router# show mls cef lookup 224.0.0.0
Codes: decap - Decapsulation, + - Push Label
Index  Prefix              Adjacency
3200   224.0.0.0/24        punt
Router#
show mls cef maximum-routes

To view the current maximum-route system configuration, use the show mls cef maximum-routes command.

show mls cef maximum-routes
Syntax Description

This command has no arguments or keywords.

Command Default

This command has no default settings.

Command Modes

EXEC (>)

Command History

Release

Modification

12.2(18)ZY

Support for this command was introduced.

Usage Guidelines

When you enter the mls cef maximum-routes command to change the configuration, the following additional fields appear in the output of the show mls cef maximum-routes command:

•User configured—Shows configuration changes that you have made.

•Upon reboot—Shows the configuration after a system reboot.

These fields appear if you have not saved the change (using the copy system:running-config nvram: startup-config command) after entering the mls cef maximum-routes command. See the "Examples" section for additional information.

Examples

This example shows the display after you have entered the mls cef maximum-routes command, saved the change (copy system:running-config nvram: startup-config command), and rebooted the system:
Router# show mls cef maximum-routes 
FIB TCAM maximum routes : 
======================= 
Current :- 
------- 
IPv4 - 1k (default) 
MPLS - 239k 
IPv6 + IP Multicast - 8k (default)
Router# 
This example shows the display if you entered the mls cef maximum-routes command and did not save the change:
Router# show mls cef maximum-routes 
FIB TCAM maximum routes : 
======================= 
Current :- 
------- 
IPv4 - 1k (default) 
MPLS - 239k 
IPv6 + IP Multicast - 8k (default)
User configured :- 
--------------- 
IPv4 + MPLS - 192k (default) 
IPv6 + IP multicast - 32k (default)
Upon reboot :- 
----------- 
IPv4 - 1k (default) 
MPLS - 239k 
IPv6 + IP multicast - 8k (default)
Router# 
This example shows the output if you have made a configuration change and saved the change (copy system:running-config nvram: startup-config command):
Router# show mls cef maximum-routes 
FIB TCAM maximum routes : 
======================= 
Current :- 
------- 
IPv4 - 1k (default) 
MPLS - 239k 
IPv6 + IP Multicast - 8k (default)
User configured :- 
--------------- 
IPv4 + MPLS - 192k (default) 
IPv6 + IP multicast - 32k (default)
Router# 
Related Commands

Command

Description

copy system:running-config nvram: startup-config

Saves the configuration to NVRAM.

mls cef maximum-routes

Limits the maximum number of the routes that can be programmed in the hardware allowed per protocol.

show mls cef mpls

To display the MPLS entries in the MLS-hardware Layer 3-switching table, use the show mls cef mpls command.

show mls cef mpls [detail] [internal] [labels value] [module number] [vpn instance] [vrf instance]
Syntax Description

detail

(Optional) Displays hardware-entry details.

internal

(Optional) Displays internal CEF entries.

labels value

(Optional) Displays the entries for a specific label; valid values are from 0 to 1048575.

module number

(Optional) Displays the entries for a specific module.

vpn instance

(Optional) Displays the VPN ID MPLS table entries for a specific VPN instance; valid values are from 0 to 4095.

vrf instance-name

(Optional) Displays the MPLS CEF table entries for a specific VRF.

Command Default

This command has no default settings.

Command Modes

EXEC (>)

Command History

Release

Modification

12.2(18)ZY

Support for this command was introduced.

Examples

This examples shows how to display MPLS entries:
Router# show mls cef mpls
Codes: + - Push label, - - Pop Label         * - Swap Label
Index  Local     Label                  Out i/f
       Label      Op
Router#
show mls cef rpf

To display the information about the RPF hardware in the MLS-hardware Layer 3-switching table, use the show mls cef rpf command.

show mls cef [ip] rpf [ip-address] [module num]
Syntax Description

ip

(Optional) Displays IP entries in the MLS-hardware Layer 3-switching table; see the "Usage Guidelines" section for additional information.

ip-address

(Optional) IP address.

module num

(Optional) Displays the entries for a specific module.

Command Default

This command has no default settings.

Command Modes

EXEC (>)

Command History

Release

Modification

12.2(18)ZY

Support for this command was introduced.

Usage Guidelines

If you enter the show mls cef ip rpf command without arguments, the RPF global mode status is displayed.

The output of the show mls cef ip rpf and the show mls cef rpf commands is identical.

Examples

This example shows how to display the status of the RPF global mode:
Router# show mls cef rpf
RPF global mode:        not enabled
Router#
This example shows how to display the RPF information for a specific IP address:
Router# show mls cef rpf 10.100.0.0 
RPF information for prefix 10.100.0.0/24 
uRPF check performed in the hardware for interfaces : 
GigabitEthernet1/1
Router#
Related Commands

Command

Description

mls ip cef rpf multipath

Configures the RPF modes.

show mls cef statistics

To display the number of switched packets and bytes, use the show mls cef statistics command.

show mls cef statistics [module number]
Syntax Description

module number

(Optional) Displays the information for a specific module.

Command Default

This command has no default settings.

Command Modes

EXEC (>)

Command History

Release

Modification

12.2(18)ZY

Support for this command was introduced.

Examples

This example shows how to display the MLS-hardware Layer 3-switching statistics:
Router# show mls cef statistics
Total CEF switched packets:  0000000000000000
Total CEF switched bytes:    0000000000000000
Router#   
show mls cef summary

To display the number of routes in the MLS-hardware Layer 3-switching table for all the protocols, use the show mls cef summary command.

show mls cef summary [module number]
Syntax Description

module number

(Optional) Displays the information for a specific module.

Command Default

This command has no default settings.

Command Modes

EXEC (>)

Command History

Release

Modification

12.2(18)ZY

Support for this command was introduced.

Usage Guidelines

The number of prefixes in the MLS-hardware Layer 3-switching table indicates the individual numbers for IPv4 and IPv6 unicast, IPv4 multicast, MPLS, and EoM routes.

Examples

This example shows how to display a summary of MLS-hardware Layer 3-switching information:
Router# show mls cef summary
Total routes:               80385
    IPv4 unicast routes:          42
    IPv4 Multicast routes:        5
    MPLS routes:                  0
    IPv6 unicast routes:          2
    EoM routes:                   0
Router# 
Table 2-82 describes the fields in the show mls cef summary command output.

Table 2-82 show mls cef summary Command Output Fields

Field

Description

Total MLS-hardware Layer 3-switching switched packets

Number of MLS-hardware Layer 3-switching packets forwarded by the MLS-hardware Layer 3-switching engine.

Total MLS-hardware Layer 3-switching switched bytes

Number of bytes forwarded by the MLS-hardware Layer 3-switching engine.

Total routes

Number of route entries.

IP unicast routes

Number of IP-unicast route entries.

IPX routes

Number of IPX route entries.

IP multicast routes

Number of IP-multicast route entries.

Related Commands

Command

Description

show mls cef

Displays the MLS-hardware Layer 3-switching table entries.

show mls cef vrf

To display information about the VPN routing and forwarding instance CEF table for a specific VRF name, use the show mls cef vrf command.

show mls cef vrf instance-name [prefix] [detail] [lookup ip-address] [module num] [rpf [ip-address]]
Syntax Description

instance-name

VPN routing/forwarding instance name; valid values are from 0 to 4095.

prefix

(Optional) Prefix of the entry to display.

detail

(Optional) Displays the hardware-entry details.

lookup ip-address

(Optional) Displays the longest prefix-match lookup entry for the specified address.

module num

(Optional) Displays the entries for a specific module.

rpf ip-address

(Optional) Displays the uRPF check information for the (optional) specified IP address.

Command Default

This command has no default settings.

Command Modes

EXEC (>)

Command History

Release

Modification

12.2(18)ZY

Support for this command was introduced.

Usage Guidelines

The show mls cef ip command displays the CEF entries in the default VRF. To display specific (nondefault) VRF entries, use the show mls cef [ip] vrf vrf-name command.

Examples

This example shows how to display information about the VPN routing and forwarding instance CEF table for a specific VRF name:
Router# show mls cef vrf vpn-1
Codes: decap - Decapsulation, + - Push Label
Index Prefix Adjacency 
64 0.0.0.0/32 receive
65 255.255.255.255/32 receive
280 7.50.27.1/32 receive
281 7.50.27.0/32 receive
282 7.50.27.255/32 receive
298 2.1.1.1/32 receive
299 2.1.1.0/32 receive
300 2.1.1.255/32 receive
656 2.1.99.1/32 receive
Router# 
Related Commands

Command

Description

show mls cef ip

Displays the IP entries in the MLS-hardware Layer 3-switching table.

show mls df-table

To display information about the DF table, use the show mls df-table command.

show mls df-table start-vlan end-vlan
Syntax Description

start-vlan

Start of a range of VLAN IDs; valid values are from 1 to 4094.

end-vlan

End of a range of VLAN IDs; valid values are from 1 to 4094.

Command Default

This command has no default settings.

Command Modes

Switch processor—EXEC (Switch-sp#)

Command History

Release

Modification

12.2(18)ZY

Support for this command was introduced.

Usage Guidelines

In the output display, the following applies:

•1 indicates that DF is enabled.

•0 indicates that DF is disabled.

Examples

This example shows how to display the DF-table contents for a range of VLANs:
Switch-sp# show mls df-table 201 212
TYCHO FIB DF Table
vlan   df_index
       3 2 1 0
-----+----------
 201   1 1 1 1
 202   1 1 1 1
 203   1 1 1 1
 204   1 1 1 1
 205   1 1 1 1
 206   1 1 1 1
 207   1 1 1 1
 208   1 1 1 1
 209   1 1 1 1
 210   1 1 1 1
 211   1 1 1 1
 212   1 1 1 1
Switch-sp# 
show mls ip

To display the MLS IP information, use the show mls ip command.

show mls ip [any | destination {hostname | ip-address} | detail | flow {tcp | udp} | {vlan vlan-id} | {macd destination-mac-address} | {macs source-mac-address} | {module number} | source {hostname | ip-address} | count | static]
show mls {ipv6 | mpls}
Syntax Description

any

(Optional) Displays any MLS IP information.

destination hostname

(Optional) Displays the entries for a specific destination hostname.

destination ip-address

(Optional) Displays the entries for a specific destination IP address.

detail

(Optional) Specifies a detailed output.

flow

(Optional) Specifies the flow type.

tcp | udp

Selects the flow type.

vlan vlan-id

(Optional) Specifies the VLAN ID; valid values are from 1 to 4094.

macd destination-mac-address

(Optional) Specifies the destination MAC address.

macs source- mac-address

(Optional) Specifies the source MAC address.

module number

(Optional) Displays the entries that are downloaded on the specified module; see the "Usage Guidelines" section for valid values.

source hostname

(Optional) Displays the entries for a specific source address.

source ip-address

(Optional) Displays the entries for a specific source IP address.

count

(Optional) Displays the total number of MLS entries.

static

(Optional) Displays the total number of static entries.

ipv6

Displays the total number of IPv6 entries.

mpls

Displays the total number of MPLS entries.

Command Default

This command has no default settings.

Command Modes

EXEC (>)

Command History

Release

Modification

12.2(18)ZY

Support for this command was introduced.

Usage Guidelines

The interface-number argument designates the module and port number. Valid values for interface-number depend on the specified interface type and the chassis and module that are used. For example, if you specify a Gigabit Ethernet interface and have a 48-port 10/100BASE-T Ethernet module that is installed in a 13-slot chassis, valid values for the module number are from 1 to 13 and valid values for the port number are from 1 to 48. This definition also applies to the module number keyword and argument.

When you view the output, note that a colon (:) is used to separate the fields.

Examples

This example shows how to display any MLS IP information:
Router# show mls ip any
Displaying Netflow entries in Supervisor Earl
DstIP           SrcIP           Prot:SrcPort:DstPort  Src i/f:AdjPtr
--------------------------------------------------------------------
Pkts         Bytes         Age   LastSeen  Attributes
---------------------------------------------------
0.0.0.0         0.0.0.0         0   :0      :0        0   : 0x0
82           3772          1329  20:46:03   L3 - Dynamic
Router# 
 
This example shows how to display MLS information on a specific IP address:
Router# show mls ip destination 172.20.52.122
Displaying Netflow entries in Supervisor Earl
DstIP           SrcIP           Dst i/f:DstMAC       Pkts         Bytes
-----------------------------------------------------------------------
SrcDstPorts   SrcDstEncap Age   LastSeen
----------------------------------------
172.20.52.122   0.0.0.0         5   : 00e0.4fac.b3ff 684          103469
Fa5/9,Fa5/9 ARPA,ARPA   281   07:17:02
 Number of Entries Found = 1           
Router#                                                
This example shows how to display MLS information on a specific flow type:
Router# show mls ip flow udp
Displaying Netflow entries in Supervisor Earl
DstIP           SrcIP           Prot:SrcPort:DstPort  Src i/f:AdjPtr
--------------------------------------------------------------------
Pkts         Bytes         Age   LastSeen  Attributes
---------------------------------------------------
0.0.0.0         0.0.0.0         0   :0      :0        0   : 0x0
78           3588          1259  20:44:53   L3 - Dynamic
Router#                                                
 
This example shows how to display detailed MLS information:
Router# show mls ip detail 
Displaying Netflow entries in Supervisor Earl
DstIP           SrcIP           Prot:SrcPort:DstPort  Src i/f:AdjPtr
--------------------------------------------------------------------
Pkts         Bytes         Age   LastSeen  Attributes
---------------------------------------------------
Mask Pi R CR Xt Prio Dsc IP_EN OP_EN Pattern Rpf FIN_RDT FIN/RST
----+--+-+--+--+----+---+-----+-----+-------+---+-------+-------
Ig/acli Ig/aclo Ig/qosi Ig/qoso Fpkt Gemini MC-hit Dirty Diags
-------+-------+-------+-------+----+------+------+-----+------
    QoS     Police Count Threshold    Leak     Drop Bucket  Use-Tbl Use-Enable
-----------+------------+---------+-----------+----+-------+-------+----------+
127.0.0.19      127.0.0.16      udp :68     :67       1009: 0x0
72           3312          1170  20:43:24   L3 - Dynamic
0    1  0  0  1  0    0    1     1     0       0     0      0
0          0       0       0      0    0       0     0     0
  0x0          0               0        0       NO   64        NO       NO
Router#                                                
Related Commands

Command

Description

mls ip

Enables MLS IP for the internal router on the interface.

show mls netflow ip

Displays information about the hardware NetFlow IP.

show mls ip cef rpf-table

To display the configuration of the RPF CEF table, use the show mls ip cef rpf-table command.

show mls ip cef rpf-table
Syntax Description

This command has no keywords or arguments.

Command Default

This command has no default settings.

Command Modes

EXEC (>)

Command History

Release

Modification

12.2(18)ZY

Support for this command was introduced.

Examples

This example shows how to display the RPF CEF-table entries:
Router# show mls ip cef rpf-table
----------------------------------------------------------------------------
172.10.10.0/24       [0] Fa2/1, Fa2/2, Fa2/3, Fa2/4
172.10.20.0/24
172.10.30.0/24
10.10.0.0/16         [1] Gi1/1, Gi1/2
10.20.0.0/16
Router# 
Related Commands

Command

Description

mls ip cef rpf interface-group

Defines an interface group in the RPF-VLAN table.

show mls ip multicast

To display the MLS IP information, use the show mls ip multicast command.

show mls ip multicast [{capability [module num]} | connected | group} {{hostname | ip-address} [ip-mask]} | {interface {interface interface-number}} | {module number} | mdt | {source {hostname | ip-address}} | statistics | summary]
show mls ip multicast consistency-check [mroute-mlsm | {rp-sp [log [clear] | statistics]}]
Syntax Description

capability

Displays information about the multicast-replication capabilities.

module num

(Optional) Specifies the module number.

connected

(Optional) Displays the installed interface or mask entries.

group

(Optional) Displays the entries for a specific multicast-group address.

hostname

Group IP hostname.

ip-address

Group IP address.

ip-mask

(Optional) IP mask for group IP address.

interface

(Optional) Specifies an interface.

interface

Interface type; possible valid values are ethernet, fastethernet, gigabitethernet, tengigabitethernet, pos, atm, and ge-wan.

interface-number

Module and port number; see the "Usage Guidelines" section for valid values.

module number

(Optional) Displays the entries that are downloaded on the specified module; see the "Usage Guidelines" section for valid values.

mdt

(Optional) Displays hardware-accelerated MDT information.

source hostname

(Optional) Displays the entries for a specific source address.

source ip-address

(Optional) Displays the entries for a specific source IP address.

statistics

(Optional) Displays the statistics from multicast entries.

summary

(Optional) Displays a summary of statistics from multicast entries.

consistency-check

Displays consistency-checker information.

mroute-mlsm

(Optional) Displays mroute/MLSM consistency-checker information.

rp-sp

(Optional) Displays route processor/switch processor consistency-checker information.

log

(Optional) Displays a log of mismatches that have been detected and corrected.

clear

(Optional) Clears the mismatches log.

statistics

(Optional) Displays the statistics of prefixes checked.

Command Default

This command has no default settings.

Command Modes

EXEC (>)

Command History

Release

Modification

12.2(18)ZY

Support for this command was introduced.

Usage Guidelines

The interface-number argument designates the module and port number. Valid values for interface-number depend on the specified interface type and the chassis and module that are used. For example, if you specify a Gigabit Ethernet interface and have a 48-port 10/100BASE-T Ethernet module that is installed in a 13-slot chassis, valid values for the module number are from 1 to 13 and valid values for the port number are from 1 to 48. These valid values also apply when entering the module number keyword and argument.

When you view the output, note that a colon (:) is used to separate the fields.

Examples

This example shows how to display general MLS IP-multicast information:
Router# show mls ip multicast 
Multicast hardware switched flows:
(*, 224.1.1.1) Incoming interface: Vlan0, Packets switched: 0
Hardware switched outgoing interfaces: Vlan202 
RPF-MFD installed
Total hardware switched flows : 1
Router#
This example shows how to display a summary of MLS information:
Router# show mls ip multicast summary 
1 MMLS entries using 168 bytes of memory
Number of partial hardware-switched flows: 0
Number of complete hardware-switched flows: 1
Directly connected subnet entry install is enabled
Aggregation of routed oif is enabled
Hardware shortcuts for mvpn mroutes supported
Egress Mode of replication is enabled
Maximum route support is enabled
Router# 
This example shows how to display MLS information on a specific interface:
Router# show mls ip multicast interface fastethernet 5/9
DstIP           SrcIP           Dst i/f:DstMAC       Pkts         Bytes
-----------------------------------------------------------------------
SrcDstPorts   SrcDstEncap Age   LastSeen
----------------------------------------
172.20.52.37    0.0.0.0         100: 00d0.5870.a4ff 1            129
Fa5/9,----- ARPA,ARPA   107   06:10:02
172.20.52.36    0.0.0.0         100 : 0050.7312.0cff 50           6403
Fa5/9,----- ARPA,ARPA   107   06:10:04
 Number of Entries Found = 2
Router#       
This example shows how to display information about the multicast-replication capabilities:
Router# show mls ip multicast capability
Current mode of replication is Ingress
auto replication mode detection is ON
 Slot           Multicast replication capability
    2                       Egress
    5                       Egress
    6                       Egress
    8                       Ingress
    9                       Ingress
Router#       
This example shows how to display information about the mroute consistency-checker log:
Router# show mls ip multicast consistency-check mroute-mlsm 
MMLS Consistancy checker of mroute-scan type is enabled 
Inter scan period = 2 sec 
Number of entry scanned = 20 
Settle time = 60 sec 
Storage for 1000 events (40000 bytes)
Mroute entry missed for a Shortcut : 0 
Mroute entry was uneligible for a Shortcut : 0 
Mroute entry rpf i/f mismatched with Shortcut : 0 
Mroute oif in hw and Shortcut oif in sw : 0 
Mroute oif in sw and Shortcut oif in sw : 0 
Mroute oif in sw and Shortcut oif in hw : 0 
Mroute #oif mismatched with Shortcut #oif : 0 
.
.
.
<Output is truncated>
This example shows how to display a log of mismatches that have been detected and corrected:
Router# show mls ip multicast consistency-check rp-sp log
MLSM RP<->SP Consistency Checker Mismatch log for Table 0:
size 512 current-index 0
0 total used entries in log
Router#
Related Commands

Command

Description

mls ip multicast (interface configuration mode)

Enables MLS IP shortcuts on the interface.

show mls ip multicast bidir

To display the Bidir hardware-switched entries, use the show mls ip multicast bidir command.

show mls ip multicast bidir [{group {{hostname | ip-address} [ip-mask]}} | {interface {interface interface-number}} | {source {hostname | ip-address}}]
Syntax Description

group

(Optional) Displays the entries for a specific multicast-group address.

hostname

Group IP hostname.

ip-address

Group IP address.

ip-mask

(Optional) IP mask for group IP address.

interface

(Optional) Specifies an interface.

interface

Interface type; possible valid values are ethernet, fastethernet, gigabitethernet, and tengigabitethernet.

interface-number

Module and port number; see the "Usage Guidelines" section for valid values.

source hostname

(Optional) Displays the entries for a specific source address.

source ip-address

(Optional) Displays the entries for a specific source IP address.

Command Default

This command has no default settings.

Command Modes

EXEC (>)

Command History

Release

Modification

12.2(18)ZY

Support for this command was introduced.

Examples

This example shows how to display the Bidir hardware-switched entries:
Router# show mls ip multicast bidir 
Multicast hardware switched flows: 
(*, 226.1.4.0) Incoming interface: Vlan51, Packets switched: 0 
Hardware switched outgoing interfaces: Vlan51 Vlan30 
RPF-MFD installed
(*, 227.1.4.0) Incoming interface: Gi2/1, Packets switched: 0 
Hardware switched outgoing interfaces: Gi2/1 Vlan30 
RPF-MFD installed
Router# 
Related Commands

Command

Description

mls ip multicast bidir gm-scan-interval

Sets the RPF scan interval for the Bidir rendezvous point.

show mls ip multicast rp-mapping

To display the mappings for the PIM-Bidir group to active rendezvous points, use the show mls ip multicast rp-mapping command.

show mls ip multicast rp-mapping [rp-address] [df-cache | gm-cache]
Syntax Description

rp-address

(Optional) Rendezvous-point address.

df-cache

(Optional) Displays information on the DF list in the rendezvous-point mapping cache in the hardware.

gm-cache

(Optional) Displays information on the group/mask ranges in the rendezvous-point mapping cache in the hardware.

Command Default

This command has no default settings.

Command Modes

EXEC (>)

Command History

Release

Modification

12.2(18)ZY

Support for this command was introduced.

Examples

This example shows how to display the mappings for the PIM group-to-active rendezvous points:
Router# show mls ip multicast rp-mapping 
RP Address State DF-count GM-count 
2.2.2.2 H 1 1 
9.9.9.9 H 1 2
Router# 
This example shows how to display information that is based on the DF list in the mapping cache of the route processor:
Router# show mls ip multicast rp-mapping df-cache 
RP Address   State   DF    State 
9.9.9.9      H       Vl30  H
Router# 
This example shows how to display information that is based on the mapping cache of the route processor:
Router# show mls ip multicast rp-mapping gm-cache 
State: H - Hardware Switched, I - Install Pending, D - Delete Pending, 
Z - Zombie
RP Address State Group Mask State Packet/Byte-count 
60.0.0.60 H 230.31.0.0 255.255.0.0 H 100/6400
Router# 
show mls ip multicast sso

To display information about multicast high-availability SSO, use the show mls ip multicast sso command.

show mls ip multicast sso [statistics]
Syntax Description

statistics

(Optional) Displays multicast high-availability SSO statistical information.

Command Default

This command has no default settings.

Command Modes

EXEC (>)

Command History

Release

Modification

12.2(18)ZY

Support for this command was introduced.

Examples

This example shows how to display multicast high-availability SSO information:
Router> show mls ip multicast sso
Multicast SSO is enabled
Multicast HA Parameters
---------------------------------------------------+------+
protocol convergence timeout                       120 secs
flow leak percent                                  10
flow leak interval                                 20 secs
heartquake#
This example shows how to display statistical information about multicast high-availability SSO:
Router# show mls ip multicast sso statistics 
Multicast HA Statistics: ACTIVE
--------------------------------------------------+------+
CHKPT msgs sent                                    5
CHKPT msgs send failed                             0
CHKPT msgs send aborted                            0
CHKPT met add msg sent                             5
CHKPT met del msg sent                             1
CHKPT icroif msg sent                              1
MET HA met add enqueued                            5
MET HA met del enqueued                            1
ICROIF HA add enqueued                             1
ICROIF HA del enqueued                             0
CHKPT buffer failure                               0
MET HA Reconstruction Statistics
--------------------------------------------------+------+
Number of met blks reconstructed                   0
Number of normal sets reconstructed                0
Number of fixed sets reconstructed                 0
Number of sets deleted                             0
Number of blks not found                           0
normal sets reconstruction failed                  0
fixed set reconstruction failed                    0
Multicast HA Statistics: STANDBY
--------------------------------------------------+------+
CHKPT msgs rcvd                                    5
CHKPT met add msg rcvd                             5
CHKPT met del msg rcvd                             1
CHKPT icroif msg rcvd                              1
CHKPT msg unknown                                  0
CHKPT buffer failure                               0
Router#
Related Commands

Command

Description

mls ip multicast sso

Configures the SSO parameters.

show mls ip non-static

To display information for the software-installed nonstatic entries, use the show mls ip non-static command.

show mls ip non-static [count [module number] | detail [module number] | module number]
Syntax Description

count

(Optional) Displays the total number of nonstatic entries.

module number

(Optional) Designates the module number.

detail

(Optional) Specifies a detailed per-flow output.

Command Default

This command has no default settings.

Command Modes

EXEC (>)

Command History

Release

Modification

12.2(18)ZY

Support for this command was introduced.

Examples

This example shows how to display the software-installed nonstatic entries:
Router> show mls ip non-static
Displaying Netflow entries in Supervisor Earl
DstIP           SrcIP           Prot:SrcPort:DstPort  Src i/f:AdjPtr
--------------------------------------------------------------------
Pkts         Bytes       Age   LastSeen  Attributes
---------------------------------------------------
Router> 
This example shows how to display detailed information for the software-installed nonstatic entries:
Router> show mls ip non-static detail
Displaying Netflow entries in Supervisor Earl
DstIP           SrcIP           Prot:SrcPort:DstPort  Src i/f:AdjPtr
--------------------------------------------------------------------
Pkts         Bytes       Age   LastSeen  Attributes
---------------------------------------------------
QoS     Police Count Threshold    Leak     Drop Bucket  Use-Tbl Use-Enable
-----------+------------+---------+-----------+----+-------+-------+----------+
Router> 
This example shows how to display the total number of software-installed nonstatic entries:
Router> show mls ip non-static count
Displaying Netflow entries in Supervisor Earl
 Number of shortcuts = 0
Router> 
show mls ip routes

To display the NetFlow routing entries, use the show mls ip routes command.

show mls ip routes [non-static | static] [count [module number] | detail [module number] | module number]
Syntax Description

non-static

(Optional) Displays the software-installed nonstatic entries.

static

(Optional) Displays the software-installed static entries.

count

(Optional) Displays the total number of NetFlow routing entries.

module number

(Optional) Displays the entries that are downloaded on the specified module; see the "Usage Guidelines" section for valid values.

detail

(Optional) Specifies a detailed per-flow output.

Command Default

This command has no default settings.

Command Modes

EXEC (>)

Command History

Release

Modification

12.2(18)ZY

Support for this command was introduced.

Examples

This example shows how to display the software-installed nonstatic routing entries:
Router> show mls ip routes non-static
Displaying Netflow entries in Supervisor Earl
DstIP           SrcIP           Prot:SrcPort:DstPort  Src i/f:AdjPtr
--------------------------------------------------------------------
Pkts         Bytes       Age   LastSeen  Attributes
---------------------------------------------------
Router> 
This example shows how to display detailed information for the software-installed nonstatic routing entries:
Router> show mls ip routes non-static detail
Displaying Netflow entries in Supervisor Earl
DstIP           SrcIP           Prot:SrcPort:DstPort  Src i/f:AdjPtr
--------------------------------------------------------------------
Pkts         Bytes       Age   LastSeen  Attributes
---------------------------------------------------
    QoS     Police Count Threshold    Leak     Drop Bucket  Use-Tbl Use-Enable
-----------+------------+---------+-----------+----+-------+-------+----------+
Router> 
This example shows how to display the total number of software-installed routing entries:
Router> show mls ip routes count
Displaying Netflow entries in Supervisor Earl
 Number of shortcuts = 0
Router> 
Related Commands

Command

Description

show mls netflow ip sw-installed

Displays information for the software-installed IP entries.

show mls ip static

To display the information for the software-installed static IP entries, use the show mls ip static command.

show mls ip static [count [module number] | detail [module number] | module number]
Syntax Description

count

(Optional) Displays the total number of static entries.

module number

(Optional) Designates the module number.

detail

(Optional) Specifies a detailed per-flow output.

Command Default

This command has no default settings.

Command Default

EXEC (>)

Command History

Release

Modification

12.2(18)ZY

Support for this command was introduced.

Examples

This example shows how to display the software-installed static entries:
Router> show mls ip static
Displaying Netflow entries in Supervisor Earl
DstIP           SrcIP           Prot:SrcPort:DstPort  Src i/f:AdjPtr
--------------------------------------------------------------------
Pkts         Bytes       Age   LastSeen  Attributes
---------------------------------------------------
Router> 
This example shows how to display detailed information for the software-installed static entries:
Router> show mls ip static detail
Displaying Netflow entries in Supervisor Earl
DstIP           SrcIP           Prot:SrcPort:DstPort  Src i/f:AdjPtr
--------------------------------------------------------------------
Pkts         Bytes       Age   LastSeen  Attributes
---------------------------------------------------
    QoS     Police Count Threshold    Leak     Drop Bucket  Use-Tbl Use-Enable
-----------+------------+---------+-----------+----+-------+-------+----------+
Router> 
This example shows how to display the total number of software-installed static entries:
Router> show mls ip static count
Displaying Netflow entries in Supervisor Earl
 Number of shortcuts = 0
Router> 
show mls ip statistics

To display the statistical information for the NetFlow IP entries, use the show mls ip statistics command.

show mls ip statistics [count [module number] | detail [module number] | module number]
Syntax Description

count

(Optional) Displays the total number of NetFlow entries.

module number

(Optional) Displays the entries that are downloaded on the specified module.

detail

(Optional) Specifies a detailed per-flow output.

Command Default

This command has no default settings.

Command Modes

EXEC (>)

Command History

Release

Modification

12.2(18)ZY

Support for this command was introduced.

Examples

This example shows how to display statistical information for the NetFlow IP entries:
Router> show mls ip statistics
Displaying Netflow entries in Supervisor Earl
DstIP           SrcIP           Prot:SrcPort:DstPort  Src i/f:AdjPtr
--------------------------------------------------------------------
Pkts         Bytes       Age   LastSeen  Attributes
---------------------------------------------------
Router> 
This example shows how to display detailed statistical information for the NetFlow IP entries:
Router> show mls ip statistics detail
Displaying Netflow entries in Supervisor Earl
DstIP           SrcIP           Prot:SrcPort:DstPort  Src i/f:AdjPtr
--------------------------------------------------------------------
Pkts         Bytes       Age   LastSeen  Attributes
---------------------------------------------------
    QoS     Police Count Threshold    Leak     Drop Bucket  Use-Tbl Use-Enable
-----------+------------+---------+-----------+----+-------+-------+----------+
Router> 
show mls nde

To display information about the NDE hardware-switched flow, use the show mls nde command.

show mls nde
Syntax Description

This command has no arguments or keywords.

Command Default

This command has no default settings.

Command Modes

EXEC (>)

Command History

Release

Modification

12.2(18)ZY

Support for this command was introduced.

Usage Guidelines

The output for Catalyst 6500 series switches includes the current NDE mode.

Examples

This example shows how to display information about the NDE hardware-switched flow on a Catalyst 6500 series switch:
Router# show mls nde
 Netflow Data Export enabled (Interface Mode)
 Exporting flows to 172.20.55.71 (9991)
 Exporting flows from 10.6.60.120 (59020)
 Version: 7
 Include Filter not configured
 Exclude Filter not configured
 Total Netflow Data Export Packets are:
    0 packets, 0 no packets, 0 records
Router# 
Related Commands

Command

Description

mls nde sender

Enables MLS NDE export.

show ip flow-export

Displays the information about the hardware-switched and software-switched flows for the data export, including the main cache and all other enabled caches.

show mls netflow

Displays configuration information about the NetFlow hardware.

show mls netflow

To display configuration information about the NetFlow hardware, use the show mls netflow command.

show mls netflow {aging | aggregation flowmask | creation | flowmask | {table-contention {detailed | summary}} | usage}
show mls netflow [ip | ipv6 | mpls] [any | count | destination {hostname | ip-address} | detail | dynamic | flow {tcp | udp} | module number | nowrap | source {hostname | ip-address} | sw-installed [non-static | static]]
Syntax Description

aging

Displays the NetFlow-aging information.

aggregation flowmask

Displays the flow mask that is set for the currrent NetFlow aggregations.

creation

Displays the configured protocol-creation filters.

flowmask

Displays the current NetFlow IP and IPX flow mask.

table-contention

Displays the NetFlow table-contention level information.

detailed

Displays detailed NetFlow table-contention level information.

summary

Displays a summary of NetFlow table-contention levels.

usage

Displays the NetFlow table-usage notification status.

ip

(Optional) Displays information about the NetFlow IP table; see the show mls netflow ip command.

ipv6

(Optional) Displays information about the NetFlow IPv6 table; see the show mls netflow ipv6 command.

mpls

(Optional) Displays information about the NetFlow MPLS table.

any

(Optional) Displays detailed NetFlow table-entry information with no test wrap.

count

(Optional) Displays the total number of MLS NetFlow IP entries.

destination hostname

(Optional) Displays the entries for a specific destination hostname.

destination ip-address

(Optional) Displays the entries for a specific destination IP address.

detail

(Optional) Specifies a detailed output.

dynamic

(Optional) Displays the hardware-created dynamic entries.

flow tcp

(Optional) Displays information about the TCP flows.

flow udp

(Optional) Displays information about the UDP flows.

module number

(Optional) Displays the entries that are downloaded on the specified module; see the "Usage Guidelines" section for valid values.

nowrap

(Optional) Displays information without text wrap.

source hostname

(Optional) Displays the entries for a specific source address.

source ip-address

(Optional) Displays the entries for a specific source IP address.

sw-installed

(Optional) Displays the routing NetFlow entries; see the show mls netflow ip sw-installed command.

non-static

(Optional) Displays information for software-installed static IP entries; see the show mls netflow ip sw-installed command.

static

(Optional) Displays information for the software-installed nonstatic IP entries; see the show mls netflow ip sw-installed command.

Command Default

This command has no default settings.

Command Modes

EXEC (>)

Command History

Release

Modification

12.2(18)ZY

Support for this command was introduced.

Usage Guidelines

The interface, macd, and macs keywords are not supported.

If you enter the show mls netflow ip command with no argument, the output of the show mls netflow ip routes and show mls netflow ip dynamic commands are displayed.

When you view the output, note that a colon (:) is used to separate the fields.

If you enable the NetFlow table-usage notification and the NetFlow table-usage exceeds a preset percentage threshold, a warning message is displayed. You can use the mls netflow usage notify command to set the threshold percentage and the time interval to check the NetFlow table usage.

The interface-number argument designates the module and port number. Valid values for interface-number depend on the specified interface type and the chassis and module that are used. For example, if you specify a Gigabit Ethernet interface and have a 48-port 10/100BASE-T Ethernet module that is installed in a 13-slot chassis, valid values for the module number are from 1 to 13 and valid values for the port number are from 1 to 48. These valid values also apply when entering the module number keyword and argument.

Examples

This example shows how to display the NetFlow-aging configuration:
Router# show mls netflow aging
             enable timeout  packet threshold
             ------ -------  ----------------
normal aging true       300        N/A
fast aging   true       32         100
long aging   true       900        N/A
Router#           
This example shows how to display the configured protocol-creation filters:
Router#  show mls netflow creation 
Excluded protocols: 
port protocol 
-------+---------- 
10     tcp 
8      udp/tcp 
Router#
This example shows how to display the flow mask that is set for the currrent NetFlow aggregation:
Router# show mls netflow aggregation flowmask 
Current flowmask set for netflow aggregation : Dest only
Minimum flowmask required for netflow aggregation schemes 
----------------------+-------------------+----------------- 
Aggregation Scheme Min. Flowmask Status 
----------------------+-------------------+----------------- 
as Intf Src Dest disabled 
protocol-port Full Flow disabled 
source-prefix Intf Src Dest disabled 
destination-prefix Dest only enabled 
prefix Intf Src Dest disabled
Router#
This example shows how to display detailed information about the NetFlow table-contention level:
Router# show mls netflow table-contention detailed
Earl in Module 2
Detailed Netflow CAM (TCAM and ICAM) Utilization
================================================
TCAM Utilization   :     0%
ICAM Utilization   :     0%
Netflow TCAM count :     0
Netflow ICAM count :     0
Router#
This example shows how to display a summary of the NetFlow table-contention level:
Router# show mls netflow table summary
Earl in Module 2
Summary of Netflow CAM Utilization (as a percentage)
====================================================
TCAM Utilization   :     0%
ICAM Utilization   :     0%
Router#
This example shows how to display the NetFlow table-usage notification status:
Router# show mls netflow usage
Netflow table usage notification enabled at 80% every 300 seconds
Netflow table utilization of module 7 is 99%
Netflow table utilization of module 10 is 24%
Router#
Related Commands

Command

Description

ip flow-aggregation cache

Creates a flow-aggregation cache and enters the aggregation cache configuration mode.

mls netflow usage notify

Monitors the NetFlow table usage on the switch processor.

show ip cache flow

Displays a summary of the NetFlow cache-flow entries.

show mls netflow ip

To display information about the hardware NetFlow IP, use the show mls netflow ip command.

show mls netflow ip any
show mls netflow ip count [module number]
show mls netflow ip destination {hostname | ip-address}[/ip-mask] [count [module number]] | detail | dynamic | flow {icmp | tcp | udp} | module number | nowrap | qos | source {hostname | ip-address}[/ip-mask] | sw-installed [non-static | static]
show mls netflow ip detail [module number | nowrap [module number]]
show mls netflow ip dynamic [count [module number]] [detail] [module number] [nowrap [module number]] [{qos [module number] [nowrap [module number]}]]
show mls netflow ip {flow {icmp | tcp | udp}} [count [module number]] | {destination {hostname | ip-address}[/ip-mask]} | detail | dynamic | flow {icmp | tcp | udp} | module number | nowrap | qos | source {hostname | ip-address} | sw-installed [non-static | static]
show mls netflow ip {module number}
show mls netflow ip qos [module number | nowrap [module number]]
show mls netflow ip source {hostname | ip-address}[/ip-mask] [count [module number]] | detail | dynamic | flow {icmp | tcp | udp} | module number | nowrap | qos | sw-installed [non-static | static]
Syntax Description

any

Displays detailed NetFlow table-entry information with no test wrap.

count

Displays the total number of MLS NetFlow IP entries.

module number

(Optional) Displays the entries that are downloaded on the specified module; see the "Usage Guidelines" section for valid values.

destination hostname

Displays the entries for a specific destination hostname.

destination ip-address

Displays the entries for a specific destination IP address.

/ip-mask

(Optional) IP mask for a destination IP address.

detail

(Optional) Specifies a detailed output.

dynamic

Displays the hardware-created dynamic entries; see the show mls nde command.

flow icmp

Displays information about the ICMP flows.

flow tcp

Displays information about the TCP flows.

flow udp

Displays information about the UDP flows.

nowrap

Displays information without text wrap.

qos

Displays QoS microflow policing information.

source hostname

Displays the entries for a specific source address.

source ip-address

Displays the entries for a specific source IP address.

sw-installed

(Optional) Displays the routing NetFlow entries; see the show mls netflow ip sw-installed command.

non-static

(Optional) Displays information for software-installed static IP entries; see the show mls netflow ip sw-installed command.

static

(Optional) Displays information for the software-installed nonstatic IP entries; see the show mls netflow ip sw-installed command.

Command Default

This command has no default settings.

Command Modes

EXEC (>)

Command History

Release

Modification

12.2(18)ZY

Support for this command was introduced.

Usage Guidelines

If you enter the show mls netflow ip command with no arguments, the output of the show mls netflow ip sw-installed and show mls nde commands are displayed.

When you view the output, note that a colon (:) is used to separate the fields.

Examples

This example shows how to display information about any MLS NetFlow IP:
Router# show mls netflow ip 
Displaying Netflow entries in Supervisor Earl 
DstIP SrcIP Prot:SrcPort:DstPort Src i/f:AdjPtr 
----------------------------------------------------------------------------- 
Pkts Bytes Age LastSeen Attributes 
--------------------------------------------------- 
12.1.1.2 11.1.1.2 tcp :3 :5 Fa5/11 :0x0 
459983 21159218 6 07:45:13 L3 - Dynamic 
12.1.1.2 11.1.1.3 tcp :3 :5 Fa5/11 :0x0 
459984 21159264 6 07:45:13 L3 - Dynamic
Router#
This example shows how to display detailed NetFlow table-entry information:
Router# show mls netflow ip detail 
Displaying Netflow entries in Supervisor Earl
DstIP SrcIP Prot:SrcPort:DstPort Src i/f:AdjPtr
--------------------------------------------------------------------
Pkts Bytes Age LastSeen Attributes
---------------------------------------------------
Mask Pi R CR Xt Prio Dsc IP_EN OP_EN Pattern Rpf FIN_RDT FIN/RST
----+--+-+--+--+----+---+-----+-----+-------+---+-------+-------
Ig/acli Ig/aclo Ig/qosi Ig/qoso Fpkt Gemini MC-hit Dirty Diags
-------+-------+-------+-------+----+------+------+-----+------
QoS Police Count Threshold Leak Drop Bucket Use-Tbl Use-Enable
-----------+------------+---------+-----------+----+-------+-------+----------+
172.30.46.2 172.30.45.2 4 :0 :0 Gi7/1: 0x0 
140063 6442898 15 01:42:52 L3 - Dynamic
1 1 0 0 1 0 0 1 1 0 0 0 0
0 0 0 0 0 0 0 0 0
0x0 672645504 0 0 NO 31784 NO NO 
Router#
This example shows how to display NetFlow table-entry information with no test wrap:
Router# show mls netflow ip nowrap 
 Displaying Netflow entries in Supervisor Earl 
 DstIP SrcIP Prot:SrcPort:DstPort Src i/f 
 :AdjPtr Pkts Bytes Age LastSeen Attributes 
 ----------------------------------------------------------------------- 
 - 
 ------------------------------------------------------------------ 
 12.1.1.2 11.1.1.92 udp :63 :63 Fa5/11 
 :0x0 176339 8111594 912 22:31:15 L3 - Dynamic 
 12.1.1.2 11.1.1.93 udp :63 :63 Fa5/11 
 :0x0 176338 8111548 912 22:31:15 L3 - Dynamic 
 12.1.1.2 11.1.1.94 udp :63 :63 Fa5/11 
 :0x0 176338 8111548 912 22:31:15 L3 - Dynamic 
 12.1.1.2 11.1.1.95 udp :63 :63 Fa5/11 
 :0x0 176338 8111548 912 22:31:15 L3 - Dynamic 
 12.1.1.2 11.1.1.96 udp :63 :63 Fa5/11 
 :0x0 176338 8111548 912 22:31:15 L3 - Dynamic 
 12.1.1.2 11.1.1.97 udp :63 :63 Fa5/11 
 :0x0 176337 8111502 912 22:31:15 L3 - Dynamic 
 12.1.1.2 11.1.1.98 udp :63 :63 Fa5/11 
 :0x0 176337 8111502 912 22:31:15 L3 - Dynamic 
 12.1.1.2 11.1.1.99 udp :63 :63 Fa5/11 
 :0x0 176337 8111502 912 22:31:15 L3 - Dynamic 
 12.1.1.2 11.1.1.100 udp :63 :63 Fa5/11 
 :0x0 176337 8111502 912 22:31:15 L3 - Dynamic 
Router#
This example shows how to display information about the MLS NetFlow on a specific IP address:
Router# show mls netflow ip destination 172.20.52.122
Displaying Netflow entries in Supervisor Earl
DstIP           SrcIP           Prot:SrcPort:DstPort  Src i/f:AdjPtr
--------------------------------------------------------------------
Pkts         Bytes       Age   LastSeen  Attributes
---------------------------------------------------
Router#
This example shows how to display information about the MLS NetFlow on a specific flow:
Router# show mls netflow ip flow udp
Displaying Netflow entries in Supervisor Earl
DstIP           SrcIP           Prot:SrcPort:DstPort  Src i/f:AdjPtr
--------------------------------------------------------------------
Pkts         Bytes       Age   LastSeen  Attributes
---------------------------------------------------
172.20.52.19    0.0.0.0         0   :0      :0        0   : 0
0            0           1407  11:01:32   L3 - Dynamic
Router# 
This example shows how to display detailed information about the MLS NetFlow on a full-flow mask:
Router# show mls netflow ip detail
Displaying Netflow entries in Supervisor Earl
DstIP           SrcIP           Prot:SrcPort:DstPort  Src i/f:AdjPtr
--------------------------------------------------------------------
Pkts         Bytes       Age   LastSeen  Attributes
---------------------------------------------------
    QoS     Police Count Threshold    Leak     Drop Bucket  Use-Tbl Use-Enable
-----------+------------+---------+-----------+----+-------+-------+----------+
172.20.52.19    0.0.0.0         0   :0      :0        0   : 0
0            0           1464  11:02:31   L3 - Dynamic
  0x0          0               0        0       NO   64        NO       NO
Router# 
This example shows how to display detailed information about a specific flow type:
Router# show mls netflow ip flow icmp 
Displaying Netflow entries in Supervisor Earl 
DstIP SrcIP Prot:SrcPort:DstPort Src i/f 
:AdjPtr 
> 
>--------------------------------------------------------------------------- 
- 
- 
Pkts Bytes Age LastSeen Attributes 
--------------------------------------------------- 
12.1.1.2 11.1.10.151 icmp:0 :0 Fa5/11 
:0x0 
1945 89470 1062 08:45:15 L3 - Dynamic 
12.1.1.2 11.1.10.153 icmp:0 :0 Fa5/11 
:0x0 
1945 89470 1062 08:45:15 L3 - Dynamic 
12.1.1.2 11.1.10.155 icmp:0 :0 Fa5/11 
:0x0 
1945 89470 1062 08:45:15 L3 - Dynamic 
12.1.1.2 11.1.10.157 icmp:0 :0 Fa5/11 
:0x0 
1945 89470 1062 08:45:15 L3 - Dynamic 
12.1.1.2 11.1.10.159 icmp:0 :0 Fa5/11 
:0x0 
1945 89470 1062 08:45:15 L3 - Dynamic 
12.1.1.2 11.1.10.161 icmp:0 :0 Fa5/11 
:0x0 
1945 89470 1062 08:45:15 L3 - Dynamic 
12.1.1.2 11.1.10.163 icmp:0 :0 Fa5/11 
:0x0 
Router# 
This example shows how to display QoS information:
Router# show mls netflow ip qos   
Displaying netflow qos information in Supervisor Earl
DstIP            SrcIP           Prot:SrcPort:DstPort Src i/f:AdjPtr     
-------------------------------------------------------------------------
Pkts         Bytes        LastSeen   QoS   PoliceCount Threshold  Leak   
-------------------------------------------------------------------------
Drop  Bucket
------------
xxx.xxxx.xxx.xxx xxx.xxx.xxx.xxx xxxx:63     :63      Fa5/11 :0x0        
772357       35528422     17:59:01   xxx   xxx         xxx        xxx    
xxx   xxx
Router# 
Related Commands

Command

Description

clear mls netflow

Clears the MLS NetFlow-shortcut entries.

ip flow-aggregation cache

Creates a flow-aggregation cache and enters the aggregation cache configuration mode.

show ip cache flow

Displays a summary of the NetFlow cache-flow entries.

show mls netflow ip sw-installed

To display information for the software-installed IP entries, use the show mls netflow ip sw-installed command.

show mls netflow ip sw-installed {non-static | static} [count [module number] | detail [module number] | module number]
Syntax Description

non-static

Displays the software-installed routing entries.

static

Displays the software-installed static routing entries.

count

(Optional) Displays the total number of nonstatic entries.

module number

(Optional) Displays the entries that are downloaded on the specified module; see the "Usage Guidelines" section for valid values.

detail

(Optional) Specifies a detailed per-flow output.

Command Default

This command has no default settings.

Command Modes

EXEC (>)

Command History

Release

Modification

12.2(18)ZY

Support for this command was introduced.

Examples

This example shows how to display the software-installed nonstatic entries:
Router> show mls netflow ip sw-installed non-static
Displaying Netflow entries in Supervisor Earl
DstIP           SrcIP           Prot:SrcPort:DstPort  Src i/f:AdjPtr
--------------------------------------------------------------------
Pkts         Bytes       Age   LastSeen  Attributes
---------------------------------------------------
Router> 
This example shows how to display detailed information for the software-installed nonstatic entries:
Router> show mls netflow ip sw-installed non-static detail
Displaying Netflow entries in Supervisor Earl
DstIP           SrcIP           Prot:SrcPort:DstPort  Src i/f:AdjPtr
--------------------------------------------------------------------
Pkts         Bytes       Age   LastSeen  Attributes
---------------------------------------------------
    QoS     Police Count Threshold    Leak     Drop Bucket  Use-Tbl Use-Enable
-----------+------------+---------+-----------+----+-------+-------+----------+
Router> 
This example shows how to display the total number of software-installed nonstatic entries:
Router> show mls netflow ip sw-installed non-static count
Displaying Netflow entries in Supervisor Earl
 Number of shortcuts = 0
Router> 
show mls netflow ipv6

To display information about the hardware NetFlow IPv6 configuration, use the show mls netflow ipv6 command.

show mls netflow ipv6 any
show mls netflow ipv6 count [module number]
show mls netflow ipv6 destination ipv6-address[/ipv6-prefix] [count [module number]] | detail | dynamic | flow {icmp | tcp | udp} | module number | nowrap | qos | source ipv6-address[/ipv6-prefix] | sw-installed [non-static | static]
show mls netflow ipv6 detail [module number | nowrap [module number]]
show mls netflow ipv6 dynamic [count [module number]] [detail] [module number] [nowrap [module number]] [{qos [module number]] [nowrap [module number]}]
show mls netflow ipv6 {flow {icmp | tcp | udp}} [count [module number]] | {destination ipv6-address[/ipv6-prefix]} | detail | dynamic | flow {icmp | tcp | udp} | module number | nowrap | qos | {source ipv6-address[/ipv6-prefix]} | sw-installed [non-static | static]]
show mls netflow ipv6 {module number}
show mls netflow ipv6 qos [module number | nowrap [module number]]
show mls netflow ipv6 source ipv6-address[/ipv6-prefix] [count [module number]] | detail | dynamic | flow {icmp | tcp | udp} | module number | nowrap | qos | sw-installed [non-static | static]
Syntax Description

any

Displays the NetFlow-aging information.

count

Displays the total number of MLS NetFlow IPv6 entries.

module number

(Optional) Displays the entries that are downloaded on the specified module; see the "Usage Guidelines" section for valid values.

destination ipv6-address

Displays the entries for a specific destination IPv6 address.

/ipv6-prefix

IPv6 prefix; valid values are from 0 to 128.

detail

Specifies a detailed output.

dynamic

Displays the hardware-created dynamic entries.

flow icmp | tcp | udp

Specifies the flow type.

nowrap

(Optional) Turns off text wrapping.

qos

Displays information about QoS statistics.

source ipv6-address

(Optional) Displays the entries for a specific source IPv6 address.

sw-installed

(Optional) Displays the routing NetFlow entries.

non-static

(Optional) Displays information about the software-installed static IPv6 entries.

static

(Optional) Displays information about the software-installed nonstatic IPv6 entries.

Command Default

This command has no default settings.

Command Default

EXEC (>)

Command History

Release

Modification

12.2(18)ZY

Support for this command was introduced.

Examples

This example shows how to display information about the hardware NetFlow configuration:
Router# show mls netflow ipv6
Displaying Netflow entries in Supervisor Earl
DstIP                                   SrcIP                                  
-------------------------------------------------------------------------------
Prot:SrcPort:DstPort   Src i/f          :AdjPtr
Pkts        Bytes       Age  LastSeen   Attributes
------------------------------------------------------------------------------------------
50::2                                   47::2                                   
tcp :16     :32        Vl47             :0x0         
23758       1425480     4    23:48:36   L3 (IPv6) - Dynamic
50::2                                   47::3                                   
tcp :16     :32        Vl47             :0x0         
23758       1425480     4    23:48:36   L3 (IPv6) - Dynamic
50::2                                   47::4                                   
tcp :16     :32        Vl47             :0x0         
23758       1425480     4    23:48:36   L3 (IPv6) - Dynamic
50::2                                   47::5                                   
tcp :16     :32        Vl47             :0x0         
23758       1425480     4    23:48:36   L3 (IPv6) - Dynamic
50::2                                   47::6                                   
tcp :16     :32        Vl47             :0x0         
23758       1425480     4    23:48:36   L3 (IPv6) - Dynamic
Router#
This example shows how to display IPv6 microflow policing information:
Router# show mls netflow ipv6 qos
Displaying Netflow entries in Supervisor Earl
DstIP                                   SrcIP                                   
--------------------------------------------------------------------------------
Prot:SrcPort:DstPort  Src i/f          :AdjPtr    Pkts         Bytes            
--------------------------------------------------------------------------------
LastSeen   QoS    PoliceCount  Threshold   Leak      Drop  Bucket   
--------------------------------------------------------------------
101::3                                  100::2                                  
icmp:0      :0        --               0x0          0            0              
22:22:09   0x0    0                  0         0       NO  0        
101::2                                  100::2                                  
icmp:0      :0        --               0x0          0            0              
22:22:09   0x0    0                  0         0       NO  0        
Router#
This example shows how to display IPv6 microflow policing information for a specific module:
Router# show mls netflow ipv6 qos module 7
Displaying Netflow entries in module 7
DstIP                                   SrcIP                                   
--------------------------------------------------------------------------------
Prot:SrcPort:DstPort  Src i/f          :AdjPtr    Pkts         Bytes            
--------------------------------------------------------------------------------
LastSeen   QoS    PoliceCount  Threshold   Leak      Drop  Bucket   
--------------------------------------------------------------------
101::2                                  100::2                                  
icmp:0      :0        --               0x0          0            0              
22:22:56   0x0    0                  0         0       NO  0        
101::3                                  100::2                                  
icmp:0      :0        --               0x0          0            0              
22:22:56   0x0    0                  0         0       NO  0        
Router#
This example shows the output display when you turn off text wrapping:
Router# show mls netflow ipv6 qos nowrap
Displaying Netflow entries in Supervisor Earl
DstIP                                   SrcIP                                   
Prot:SrcPort:DstPort  Src i/f          :AdjPtr    Pkts         Bytes            LastSeen   
QoS    PoliceCount  Threshold   Leak      Drop  Bucket   
------------------------------------------------------------------------------------------
------------------------------------------------------------------------------------------
------------------------------------------------
101::3                                  100::2                                  icmp:0      
:0        --               0x0          0            0              22:22:19   0x0    0                  
0         0       NO  0        
101::2                                  100::2                                  icmp:0      
:0        --               0x0          0            0              22:22:19   0x0    0                  
0         0       NO  0        
Router#
This example shows the output display when you turn off text wrapping for a specific module:
Router# show mls netflow ipv6 qos nowrap module 7
Displaying Netflow entries in module 7
DstIP                                   SrcIP                                   
Prot:SrcPort:DstPort  Src i/f          :AdjPtr    Pkts         Bytes            LastSeen   
QoS    PoliceCount  Threshold   Leak      Drop  Bucket   
------------------------------------------------------------------------------------------
------------------------------------------------------------------------------------------
------------------------------------------------
101::3                                  100::2                                  icmp:0      
:0        --               0x0          0            0              22:22:38   0x0    0                  
0         0       NO  0        
101::2                                  100::2                                  icmp:0      
:0        --               0x0          0            0              22:22:38   0x0    0                  
0         0       NO  0        
Router#
Related Commands

Command

Description

clear mls netflow

Clears the MLS NetFlow-shortcut entries.

show mls qos

To display MLS QoS information, use the show mls qos command.

show mls qos [{arp | ipv6 | ip | ipx | last | mac | maps [map-type]} [{interface interface-number} | {slot slot} | {null interface-number} | {port-channel number} | {vlan vlan-id}]]
Syntax Description

arp

(Optional) Displays ARP information.

ipv6

(Optional) Displays IPv6 information.

ip | ipx

(Optional) Displays information about the MLS IP or IPX status.

last

(Optional) Displays information about the last packet-policing.

mac

(Optional) Displays information about the MAC address-based QoS status.

maps

(Optional) Displays information about the QoS mapping.

map-type

(Optional) Map type; see the "Usage Guidelines" section for valid values.

interface

(Optional) Interface type; possible valid values are ethernet, fastethernet, gigabitethernet, tengigabitethernet, ge-wan, pos, and atm.

interface-number

(Optional) Module and port number; see the "Usage Guidelines" section for valid values.

slot slot

(Optional) Specifies the slot number; displays the global and per-interface QoS enabled and disabled settings and the global QoS counters.

null interface-number

(Optional) Specifies the null interface; the valid value is 0.

port-channel number

(Optional) Specifies the channel interface; valid values are a maximum of 64 values ranging from 1 to 282.

vlan vlan-id

(Optional) Specifies the VLAN ID; valid values are from 1 to 4094.

Command Default

This command has no default settings.

Command Modes

EXEC (>)

Command History

Release

Modification

12.2(18)ZY

Support for this command was introduced.

Usage Guidelines

The interface-number argument designates the module and port number. Valid values for interface-number depend on the specified interface type and the chassis and module that are used. For example, if you specify a Gigabit Ethernet interface and have a 48-port 10/100BASE-T Ethernet module that is installed in a 13-slot chassis, valid values for the module number are from 1 to 13 and valid values for the port number are from 1 to 48.

The port-channel number values from 257 to 282 are supported on the CSM and the FWSM only.

Valid values for map-types are defined as follows:

•cos-dscp—Specifies the ingress CoS-to-DSCP mapping to display; valid values are from 0 to 7.

•dscp-cos—Displays the egress DSCP-to-CoS mapping.

•dscp-exp—Displays the DSCP-to-EXP mapping on the MPLS domain ingress and egress; this keyword is not supported.

•exp-dscp—Displays the EXP-to-DSCP mapping on the MPLS domain ingress and egress; this keyword is not supported.

•ip-prec-dscp value—Specifies the ingress IP precedence-to-DSCP mapping to display; valid values are from 0 to 7.

•policed-dscp—Displays the policed DSCP values to marked-down DSCP values mapping.

The dscp-exp and exp-dscp options are supported on Catalyst 6500 series switches that are configured with a Supervisor Engine 720 only.

Examples

This example shows how to display information about the last logged packet:
Router# show mls qos last
QoS engine last packet information:
    Packet was transmitted
    Output TOS/DSCP: 0xC0/48[unchanged]   Output COS: 0[unchanged]
    Aggregate policer index: 0(none)
    Microflow policer index: 0(none)
Router#                                  
This example shows how to display the QoS-map settings:
Router# show mls qos maps
   Policed-dscp map:
            0  1  2  3  4  5  6  7  8  9
   ----------------------------------
      00:  00 01 02 03 04 05 06 07 08 09
      10:  10 11 12 13 14 15 16 17 18 19
      20:  20 21 22 23 24 25 26 27 28 29
      30:  30 31 32 33 34 35 36 37 38 39
      40:  40 41 42 43 44 45 46 47 48 49
      50:  50 51 52 53 54 55 56 57 58 59
      60:  60 61 62 63
   Dscp-cos map:
            0  1  2  3  4  5  6  7  8  9
   ----------------------------------
      00:  00 00 00 00 00 00 00 00 01 01
      10:  01 01 01 01 01 01 02 02 02 02
      20:  02 02 02 02 03 03 03 03 03 03
      30:  03 03 04 04 04 04 04 04 04 04
      40:  05 05 05 05 05 05 05 05 06 06
      50:  06 06 06 06 06 06 07 07 07 07
      60:  07 07 07 07
   Cos-dscp map:
          cos:   0  1  2  3  4  5  6  7
       ----------------------------------
        dscp:   0  8 16 24 32 40 48 56
   IpPrecedence-dscp map:
       ipprec:   0  1  2  3  4  5  6  7
       ----------------------------------
        dscp:   0  8 16 24 32 40 48 56
Router# 
This example shows how to verify the configuration of DSCP-mutation mapping:
Router# show mls qos maps | begin DSCP mutation 
DSCP mutation map mutmap1:                  (dscp= d1d2)
     d1 :  d2 0  1  2  3  4  5  6  7  8  9 
     -------------------------------------
      0 :    00 01 02 03 04 05 06 07 08 09 
      1 :    10 11 12 13 14 15 16 17 18 19 
      2 :    20 21 22 23 24 25 26 27 28 29 
      3 :    08 31 32 33 34 35 36 37 38 39 
      4 :    40 41 42 43 44 45 46 47 48 49 
      5 :    50 51 52 53 54 55 56 57 58 59 
      6 :    60 61 62 63 
<...Output Truncated...>
Router#
Note In the DSCP-mutation map displays, the marked-down DSCP values are shown in the body of the matrix. The first digit of the original DSCP value is in the column labeled d1, and the second digit is in the top row. In the example, DSCP 30 maps to DSCP 08.

This example shows how to display IPv6 information:
Router# show mls qos ipv6
QoS Summary [IPv6]:      (* - shared aggregates, Mod - switch module)
     Int Mod Dir  Class-map DSCP  Agg  Trust Fl   AgForward-By   AgPoliced-By
                                  Id         Id
------------------------------------------------------------------------------
      All  7   -    Default    0    0*    No  0      189115356              0
Router#
This example shows how to display QoS information:
Router# show mls qos
QoS is enabled globally
Microflow policing is enabled globally
QoS ip packet dscp rewrite enabled globally
QoS is disabled on the following interfaces:
Fa6/3 Fa6/4
QoS DSCP-mutation map is enabled on the following interfaces:
Fa6/5
Vlan or Portchannel(Multi-Earl) policies supported: Yes
Egress policies supported: Yes
----- Module [5] -----
QoS global counters:
Total packets: 164
IP shortcut packets: 0
Packets dropped by policing: 0
IP packets with TOS changed by policing: 0
IP packets with COS changed by policing: 0
Non-IP packets with COS changed by policing: 0
MPLS packets with EXP changed by policing: 0
Router#
Related Commands

Command

Description

mls qos (global configuration mode)

Enables the QoS functionality globally.

mls qos (interface configuration mode)

Enables the QoS functionality on an interface.

show mls qos free-agram

To display the number of free aggregate RAM indexes on the switch processor, use the show mls qos free-agram command.

show mls qos free-agram
Syntax Description

This command has no keywords or arguments.

Command Default

This command has no default settings.

Command Default

EXEC (>)

Command History

Release

Modification

12.2(18)ZY

Support for this command was introduced.

Examples

This example shows how to display the number of free aggregate RAM indexes on the switch processor :
Router# show mls qos free-agram 
Total Number of Avalable AG RAM indices : 1023
 Module [1]
 Free AGIDs : 1023
 Module [6]
 Free AGIDs : 1023
Router#
show mls qos maps

To display information about the QoS-map configuration and runtime-version, use the show mls qos maps command.

show mls qos maps [cos-dscp | cos-mutation | dscp-cos | dscp-exp | dscp-mutation | exp-dscp | exp-mutation | ip-prec-dscp | policed-dscp]
Syntax Description

cos-dscp

(Optional) Displays information about the CoS-to-DSCP map.

cos-mutation

(Optional) Displays information about the CoS-mutation map.

dscp-cos

(Optional) Displays information about the DSCP-to-CoS map.

dscp-exp

(Optional) Displays information about the DSCP-to-exp map.

dscp-mutation

(Optional) Displays information about the DSCP-mutation map.

exp-dscp

(Optional) Displays information about the exp-to-DSCP map.

exp-mutation

(Optional) Displays information about the exp-mutation map.

ip-prec-dscp

(Optional) Displays information about the IP precedence-to-DSCP map.

policed-dscp

(Optional) Displays information about the policed-DSCP map.

Command Default

This command has no default settings.

Command Modes

EXEC (>)

Command History

Release

Modification

12.2(18)ZY

Support for this command was introduced.

Examples

This example shows how to display information about the QoS-map configuration and runtime version:
Router# show mls qos maps
   Normal Burst Policed-dscp map:                 (dscp= d1d2)
     d1 :  d2 0  1  2  3  4  5  6  7  8  9
     -------------------------------------
      0 :    00 01 02 03 04 05 06 07 08 09
      1 :    10 11 12 13 14 15 16 17 18 19
      2 :    20 21 22 23 24 25 26 27 28 29
      3 :    30 31 32 33 34 35 36 37 38 39
      4 :    40 41 42 43 44 45 46 47 48 49
      5 :    50 51 52 53 54 55 56 57 58 59
      6 :    60 61 62 63
   Maximum Burst Policed-dscp map:                (dscp= d1d2)
     d1 :  d2 0  1  2  3  4  5  6  7  8  9
     -------------------------------------
      0 :    00 01 02 03 04 05 06 07 08 09
      1 :    10 11 12 13 14 15 16 17 18 19
      2 :    20 21 22 23 24 25 26 27 28 29
      3 :    30 31 32 33 34 35 36 37 38 39
      4 :    40 41 42 43 44 45 46 47 48 49
      5 :    50 51 52 53 54 55 56 57 58 59
      6 :    60 61 62 63
   Dscp-cos map:                                  (dscp= d1d2)
     d1 :  d2 0  1  2  3  4  5  6  7  8  9
     -------------------------------------
      0 :    00 00 00 00 00 00 00 00 01 01
      1 :    01 01 01 01 01 01 02 02 02 02
      2 :    02 02 02 02 03 03 03 03 03 03
      3 :    03 03 04 04 04 04 04 04 04 04
      4 :    05 05 05 05 05 05 05 05 06 06
      5 :    06 06 06 06 06 06 07 07 07 07
      6 :    07 07 07 07
   Cos-dscp map:
        cos:   0  1  2  3  4  5  6  7
     ------------------------------------
       dscp:   0  8 16 24 32 40 48 56
   IpPrecedence-dscp map:
     ipprec:   0  1  2  3  4  5  6  7
     ------------------------------------
       dscp:   0  8 16 24 32 40 48 56
Router#
This example shows how to display the configuration and runtime version of the CoS-to-CoS map:
Router# show mls qos maps cos-mutation
   CoS mutation map test-map:
     In-CoS :  Out-CoS 
     ------------------
      0 :        0 
      1 :        1 
      2 :        2 
      3 :        1 
      4 :        1 
      5 :        1 
      6 :        6 
      7 :        7
Router# 
Related Commands

Command

Description

mls qos map cos-dscp

Defines the ingress CoS-to-DSCP map for trusted interfaces.

mls qos map cos-mutation

Maps a packet's CoS to a new CoS value.

mls qos map dscp-cos

Defines an egress DSCP-to-CoS map.

mls qos map dscp-mutation

Defines a named DSCP mutation map.

mls qos map ip-prec-dscp

Defines an ingress-IP precedence-to-DSCP map for trusted interfaces.

mls qos map policed-dscp

Sets the mapping of policed DSCP values to marked-down DSCP values.

show mls qos mpls

To display an interface summary for MPLS QoS classes in the policy maps, use the show mls qos mpls command.

show mls qos mpls [{interface interface-number} | {module slot}]
Syntax Description

interface

(Optional) Interface type; possible valid values are fastethernet, gigabitethernet, tengigabitethernet.

interface-number

Module and port number; see the "Usage Guidelines" section for valid values.

module slot

(Optional) Specifies the module slot number.

Command Default

This command has no default settings.

Command Modes

EXEC (>)

Command History

Release

Modification

12.2(18)ZY

Support for this command was introduced.

Usage Guidelines

This command is supported in PFC3BXL or PFC3B mode only.

The interface-number argument designates the module and port number. Valid values for interface-number depend on the specified interface type and the chassis and module that are used. For example, if you specify a Gigabit Ethernet interface and have a 48-port 10/100BASE-T Ethernet module that is installed in a 13-slot chassis, valid values for the module number are from 1 to 13 and valid values for the port number are from 1 to 48.

Examples

This example shows how to display an interface summary for MPLS QoS classes in the policy maps:
Router# show mls qos mpls
QoS Summary [MPLS]: (* - shared aggregates, Mod - switch module)
Int Mod Dir Class-map DSCP Agg Trust Fl AgForward-By AgPoliced-By 
Id Id 
------------------------------------------------------------------------------------------
---------------------------- 
Fa3/38 5 In exp2 0 1 dscp 0 378900 0 
Fa3/41 5 In exp4 0 3 dscp 0 0 0
All 5 - Default 0 0* No 0 1191011240 0 
Router#
Related Commands

Command

Description

mls qos exp-mutation

Attaches an egress-EXP mutation map to the interface.

mls qos map exp-dscp

Defines the ingress EXP value to the internal DSCP map.

mls qos map exp-mutation

Maps a packet's EXP to a new EXP value.

show mls qos protocol

To display protocol pass-through information, use the show mls qos protocol command.

show mls qos protocol [module num]
Syntax Description

module num

(Optional) Specifies the module number.

Command Default

This command has no default settings.

Command Default

EXEC (>)

Command History

Release

Modification

12.2(18)ZY

Support for this command was introduced.

Examples

This example shows how to display protocol pass-through information:
Router# show mls qos protocol 
RIP : Passthru mode 
OSPF : Passthru mode
ND : Policing mode Cir = 32000 Burst = 1000
----- Module [5] ----- 
Routing protocol RIP is using AgId 0* 
Routing protocol OSPF is using AgId 0*
Routing protocol ND is using AgId 1
----- Module [6] ----- 
Routing protocol RIP is using AgId 0* 
Routing protocol OSPF is using AgId 0*
Router#
Related Commands

Command

Description

mls qos protocol

Defines the routing-protocol packet policing.

show mls qos statistics-export info

To display information about the MLS-statistics data-export status and configuration, use the show mls qos statistics-export info command.

show mls qos statistics-export info
Syntax Description

This command has no keywords or arguments.

Command Default

This command has no default settings.

Command Modes

EXEC (>)

Command History

Release

Modification

12.2(18)ZY

Support for this command was introduced.

Examples

This example shows how to display information about the MLS-statistics data-export status and configuration:
Router# show mls qos statistics-export info 
QoS Statistics Data Export Status and Configuration information
---------------------------------------------------------------
Export Status : enabled
Export Interval : 250 seconds
Export Delimiter : @
Export Destination : 172.20.52.3, UDP port 514 Facility local6, Severity debug
QoS Statistics Data Export is enabled on following ports:
---------------------------------------------------------
FastEthernet5/24
QoS Statistics Data export is enabled on following shared aggregate policers:
-----------------------------------------------------------------------------
aggr1M
QoS Statistics Data Export is enabled on following class-maps:
---------------------------------------------------------------
class3
Router#
Related Commands

Command

Description

mls qos statistics-export (global configuration mode)

Enables QoS-statistics data export globally.

mls qos statistics-export (interface configuration mode)

Enables per-port QoS-statistics data export.

mls qos statistics-export aggregate-policer

Enables QoS-statistics data export on the named aggregate policer.

mls qos statistics-export class-map

Enables QoS-statistics data export for a class map.

mls qos statistics-export delimiter

Sets the QoS-statistics data-export field delimiter.

mls qos statistics-export destination

Configures the QoS-statistics data-export destination host and UDP port number.

mls qos statistics-export interval

Specifies how often a port and/or aggregate-policer QoS-statistics data is read and exported.

show mls rate-limit

To display information about the MLS rate limiter, use the show mls rate-limit command.

show mls rate-limit [usage]
Syntax Description

usage

(Optional) Displays the feature that is used with the rate-limiter register.

Command Default

This command has no default settings.

Command Modes

EXEC (>)

Command History

Release

Modification

12.2(18)ZY

Support for this command was introduced.

Usage Guidelines

In the command output, the rate-limit status could be one of the following:

•On indicates a rate for that particular case has been set.

•Off indicates that the rate-limiter type has not been configured, and the packets for that case are not rate limited.

•On/Sharing indicates a particular case (not manually configured) is affected by the configuration of another rate limiter belonging to the same sharing group.

•A hyphen indicates that the multicast partial-SC rate limiter is disabled.

In the command output, the rate-limit sharing indicates the following information:

•Whether sharing is static or dynamic

•Group dynamic sharing codes

The show mls rate-limit usage command displays the hardware register that is used by a rate-limiter type. If the register is not used by any rate-limiter type, Free is displayed in the output. If the register is used by a rate-limiter type, Used and the rate-limiter type are displayed.

Examples

This example shows how to display information about the rate-limit status:
Router# show mls rate-limit 
 Sharing Codes: S - static, D - dynamic
 Codes dynamic sharing: H - owner (head) of the group, g - guest of the group 
   Rate Limiter Type       Status     Packets/s   Burst  Sharing
 ---------------------   ----------   ---------   -----  -------
         MCAST NON RPF   Off                  -       -     -
        MCAST DFLT ADJ   On              100000     100  Not sharing
      MCAST DIRECT CON   Off                  -       -     -
        ACL BRIDGED IN   Off                  -       -     -
       ACL BRIDGED OUT   Off                  -       -     -
           IP FEATURES   Off                  -       -     -
          ACL VACL LOG   On                2000       1  Not sharing
           CEF RECEIVE   Off                  -       -     -
             CEF GLEAN   Off                  -       -     -
      MCAST PARTIAL SC   On              100000     100  Not sharing
        IP RPF FAILURE   On                 100      10  Group:0 S
           TTL FAILURE   On                1000     100  Not sharing
 ICMP UNREAC. NO-ROUTE   On                 100      10  Group:0 S
 ICMP UNREAC. ACL-DROP   On                 100      10  Group:0 S
         ICMP REDIRECT   Off                  -       -     -
           MTU FAILURE   On                1000     100  Not sharing
       MCAST IP OPTION   Off                  -       -     -
       UCAST IP OPTION   Off                  -       -     -
           LAYER_2 PDU   Off                  -       -     -
            LAYER_2 PT   Off                  -       -     -
       LAYER_2 PORTSEC   On               10000       1  Not sharing
             IP ERRORS   On                 100      10  Group:0 S
           CAPTURE PKT   Off                  -       -     -
            MCAST IGMP   Off                  -       -     -
 MCAST IPv6 DIRECT CON   Off                  -       -     -
 MCAST IPv6 ROUTE CNTL   Off                  -       -     -
 MCAST IPv6 *G M BRIDG   Off                  -       -     -
  MCAST IPv6 SG BRIDGE   Off                  -       -     -
  MCAST IPv6 DFLT DROP   Off                  -       -     -
 MCAST IPv6 SECOND. DR   Off                  -       -     -
  MCAST IPv6 *G BRIDGE   Off                  -       -     -
        MCAST IPv6 MLD   Off                  -       -     -
  IP ADMIS. ON L2 PORT   Off                  -       -     -
Router# 
This example shows how to display information about the rate-limit usage:
Router# show mls rate-limit usage
                           Rate Limiter Type       Packets/s   Burst
                           ---------------------   ---------   -----
Layer3 Rate Limiters:
             RL# 0: Free                       -           -       -
             RL# 1: Free                       -           -       -
             RL# 2: Free                       -           -       -
             RL# 3: Used
                                  MCAST DFLT ADJ      100000     100
             RL# 4: Used
                                     MTU FAILURE        1000     100
             RL# 5: Used
                                     TTL FAILURE        1000     100
             RL# 6: Used
                                  IP RPF FAILURE         100      10
                           ICMP UNREAC. NO-ROUTE         100      10
                           ICMP UNREAC. ACL-DROP         100      10
                                       IP ERRORS         100      10
             RL# 7: Used
                                    ACL VACL LOG        2000       1
             RL# 8: Rsvd for capture           -           -       -
Layer2 Rate Limiters:
             RL# 9: Reserved
             RL#10: Reserved
             RL#11: Free                       -           -       -
             RL#12: Used
                                 LAYER_2 PORTSEC       10000       1
Router #
Related Commands

Command

Description

mls rate-limit layer2

Enables and sets the rate limiters for the control packets in Layer 2.

mls rate-limit multicast ipv4

Enables and sets the rate limiters for the IPv4 multicast packets.

mls rate-limit multicast ipv6

Configures the IPv6 multicast rate limiters.

mls rate-limit unicast acl

Enables and sets the ACL-bridged rate limiters.

show mls sampling

To display information about the sampled NDE status, use the show mls sampling command.

show mls sampling
Syntax Description

This command has no keywords or arguments.

Command Default

This command has no default settings.

Command Modes

EXEC (>)

Command History

Release

Modification

12.2(18)ZY

Support for this command was introduced.

Usage Guidelines

Sampled NetFlow is supported on Layer 3 interfaces only.

Examples
Router# show mls sampling
time-based sampling is enabled
1 out of every 1024 packets is being sampled.
Sampling Interval and Period is 4 millisec per 4096 millisec
Router# 
Related Commands

Command

Description

mls netflow sampling

Enables the sampled NetFlow on an interface.

mls sampling

Enables the sampled NetFlow and specifies the sampling method.

show mls statistics

To display the MLS statistics for the IP, multicast, Layer 2 protocol, and QoS, use the show mls statistics command.

show mls statistics [module num | protocol type]
Syntax Description