The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
This chapter describes the Cisco Nexus 1000V commands that begin with the letter I.
To add the inherited configuration to the new port profile as a default configuration, use the inherit port-profile command. To remove the inherited policies, use the no form of this command.
Port profile name whose policies are inherited. The name has a maximum length of 80, case-sensitive, alphanumeric characters and must be unique for each port profile on the Cisco Nexus 1000V. |
Port profile configuration (config-port-prof)
|
|
Any inherited setting, except the port profile type, can be changed using the command-line interface (CLI).
When you use the no form of this command, the port profile settings are returned to the defaults, except for the port profile type and any settings that were explicitly configured independent of those inherited.
This example shows how to designate AllAccess1 as the port profile whose policies will be inherited:
This example shows how to remove the inherited policies:
#
no port-profile inherit
|
|
---|---|
Places you into port profile configuration mode and defines the port profile. |
|
Displays the port profile inherited by the current port profile. |
To install a license file(s) on a Virtual Supervisor Module (VSM), use the install license bootflash: command.
install license bootflash: filename
(Optional) License file name. If you do not specify a name, then the license is installed using the default name. The filename is alphanumeric, case-sensitive and can be up to 28 characters. |
network-admin
network-operator
|
|
This example shows how to install a license to bootflash on a VSM and then display the installed file:
To configure the control interface and enter interface configuration mode, use the interface control0 command.
Global configuration (config)
Interface configuration (config-if)
|
|
This example shows how to enter interface configuration mode to configure the control interface:
n1000v(config)#
interface
control0
n1000v(config-if)#
|
|
---|---|
Displays information about the traffic on the control interface. |
To configure an Ethernet interface, use the interface ethernet command.
Slot number and port number for the Ethernet interface. The slot number ranges from 1 to 66 and the port number from 1 to 128. The slot and port numbers must be separated by the slash (/) operator. |
Interface configuration (config-if)
|
|
This example shows how to access interface command mode for configuring the Ethernet interface on slot 2, port 1:
|
|
---|---|
To configure the management interface and enter interface configuration mode, use the interface mgmt0 command.
Global configuration (config)
Interface configuration (config-if)
This example shows how to enter interface configuration mode to configure the management interface:
n1000v(config)#
interface
mgmt0
n1000v(config-if)#
|
|
---|---|
Displays information about the traffic on the management interface. |
To create a port channel interface and enter interface configuration mode, use the interface port-channe l command. To remove a logical port channel interface or subinterface, use the no form of this command.
interface port-channel channel-number
no interface port-channel channel-number
Channel number that is assigned to this port channel logical interface. The range is from 1 to 4096. |
Global configuration (config)
Interface configuration (config-if)
|
|
Use the interface port-channel command to create or delete port channel groups and to enter interface configuration mode for the port channel.
A port can belong to only one channel group.
When you use the interface port-channel command, follow these guidelines:
This example shows how to create a port channel group interface with channel group number 50:
n1000v(config)#
interface port-channel 50
n1000v(config-if)#
|
|
---|---|
Displays information on traffic on the specified port channel interface. |
|
To create a virtual Ethernet interface and enter interface configuration mode, use the interface vethernet command. To remove a virtual Ethernet interface, use the no form of this command.
Global configuration (config)
Interface configuration (config-if)
|
|
Use the interface vethernet command to create a virtual Ethernet interface.
This example shows how to create a virtual Ethernet interface:
n1000v(config)#
interface
vethernet 50
n1000v(config-if)#
|
|
---|---|
Displays information about the traffic on the specified virtual Ethernet interface. |
To create an IP access group for the mgmt0 interface, use the ip access-group command. To remove the access group, use the no form of this command.
ip access-group name { in | out }
no ip access-group name { in | out }
List name. The list name is alphanumeric, case-sensitive and can be up to 28 characters. |
|
Interface configuration (config-if)
|
|
This example shows how to configure an IP access group named Telnet for incoming traffic to the mgmt0 interface:
|
|
---|---|
To create an access list, use the ip access-list command. To remove an access list, use the no form of this command.
ip access-list { name | match-local-traffic }
no ip access-list { name | match-local-traffic }
List name. The list name is alphanumeric, case-sensitive and can be up to 28 characters. |
|
|
|
This example shows how to create an access list:
n1000v#
configure terminal
n1000v(
config)#
ip access-list acl1
n1000v(
config)#
|
|
---|---|
To create an IP route, use the ip route command. To remove an IP route, use the no form of this command.
ip route { address mask | prefix } { next-hop | next-hop-prefix | interface-type interface-number } [ tag tag-value | preference ]
no ip route { address mask | prefix } { next-hop | next-hop-prefix | interface-type interface-number } [ secondary | tag tag-value | preference ]
IP prefix and network mask length in the format A.B.C.D/LEN. |
|
(Optional) Configures additional IP addresses on the interface. |
|
Supply tag value. The range is from 0 to 4294967295. The default is 0. |
|
|
|
This example shows how to create an IP address:
n1000v#
configure terminal
n1000v(
config)#
ip route 10.1.1.0 255.255.255.0 10.1.1.10
n1000v(
config)#
|
|
---|---|
To enable IP directed broadcast, use the ip directed-broadcast command. To disable IP directed broadcast, use the no form of this command.
Interface configuration (config-if)
|
|
This example shows how to enable IP directed broadcast:
n1000v#
configure terminal
n1000v(
config)#
interface mgmt 0
n1000v(
config-if)#
ip directed-broadcast
n1000v(
config-if)#
|
|
---|---|
To enable a Flexible NetFlow flow monitor for traffic that the router is receiving or forwarding, use the ip flow monitor command. To disable a Flexible NetFlow flow monitor, use the no form of this command.
ip flow monitor monitor-name { input | output }
no ip flow monitor monitor-name { input | output }
Interface configuration (config-if)
|
|
You must have already created a flow monitor by using the flow monitor command before you can apply the flow monitor to an interface with the ip flow monitor command to enable traffic monitoring with Flexible NetFlow.
This example shows how to enable a flow monitor for monitoring input traffic:
This example shows how to enable a flow monitor for monitoring output traffic:
This example shows how to enable the same flow monitor on the same interface for monitoring input and output traffic:
This example shows how to enable two different flow monitors on the same interface for monitoring input and output traffic:
This example shows how to enable the same flow monitor on two different interfaces for monitoring input and output traffic:
This example shows how to enable two different flow monitors on two different interfaces for monitoring input and output traffic:
|
|
---|---|
To enable Internet Group Management Protocol (IGMP) snooping, use the ip igmp snooping command. To disable IGMP snooping, use the no form of this command.
|
|
If the global configuration of IGMP snooping is disabled, all VLANs are treated as disabled, whether they are enabled or not.
This example shows how to enable IGMP snooping:
n1000v(
config)#
ip igmp snooping
n1000v(
config)#
This example shows how to disable IGMP snooping:
n1000v(
config)#
no ip igmp snooping
n1000v(
config)#
|
|
---|---|
To enable Internet Group Management Protocol (IGMP) snooping on a VLAN interface, use the ip igmp snooping command. To disable IGMP snooping on the interface, use the no form of this command.
VLAN configuration (config-vlan)
|
|
If the global configuration of IGMP snooping is disabled, all VLANs are treated as disabled, whether they are enabled or not.
This example shows how to enable IGMP snooping on a VLAN interface:
n1000v(
config)#
vlan configuration 342
n1000v(
config-vlan)#
ip igmp snooping
n1000v(
config-vlan)#
This example shows how to disable IGMP snooping on a VLAN interface:
n1000v(
config)#
vlan configuration 342
n1000v(
config-vlan)#
no ip igmp snooping
n1000v(
config-vlan)#
|
|
---|---|
To enable tracking of Internet Group Management Protocol Version 3 (IGMPv3) membership reports from individual hosts for each port on a per-VLAN basis, use the ip igmp snooping explicit-tracking command. To disable tracking, use the no form of this command.
ip igmp snooping explicit-tracking
no ip igmp snooping explicit-tracking
VLAN feature configuration (config-vlan-config)
|
|
This example shows how to enable tracking of IGMPv3 membership reports on a VLAN interface:
n1000v(
config)#
vlan configuration 1
n1000v(
config-vlan-config)#
ip igmp snooping explicit-tracking
n1000v(
config-vlan-config)#
This example shows how to disable IGMP snooping on a VLAN interface:
n1000v(
config)#
vlan configuration 1
n1000v(
config-vlan-config)#
no ip igmp snooping explicit-tracking
n1000v(
config-vlan-config)#
|
|
---|---|
To enable support of Internet Group Management Protocol Version 2 (IGMPv2) hosts that cannot be explicitly tracked because of the host report suppression mechanism of the IGMPv2 protocol, use the ip igmp snooping fast-leave command. To disable support of IGMPv2 hosts, use the no form of this command.
no ip igmp snooping fast-leave
VLAN configuration (config-vlan)
|
|
When you enable fast leave, the IGMP software assumes that only one host is present on each VLAN port.
This example shows how to enable support of IGMPv2 hosts:
n1000v(
config)#
vlan configuration 342
n1000v(
config-vlan)#
ip igmp snooping fast-leave
n1000v(
config-vlan)#
This example shows how to disable support of IGMPv2 hosts:
n1000v(
config)#
vlan configuration 342
n1000v(
config-vlan)#
no ip igmp snooping fast-leave
n1000v(
config-vlan)#
|
|
---|---|
To configure a query interval in which the software removes a group, use the ip igmp snooping last-member-query-interval command. To reset the query interval to the default, use the no form of this command.
ip igmp snooping last-member-query-interval interval
no ip igmp snooping last-member-query-interval [ interval ]
Query interval in seconds. The range is from 1 to 25. The default is 1. |
VLAN configuration (config-vlan)
|
|
This example shows how to configure a query interval in which the software removes a group:
n1000v(
config)#
vlan configuration 342
n1000v(
config-vlan)#
ip igmp snooping last-member-query-interval 3
n1000v(
config-vlan)#
This example shows how to reset a query interval to the default:
n1000v(
config)#
vlan configuration 342
n1000v(
config-vlan)#
no ip igmp snooping last-member-query-interval
n1000v(
config-vlan)#
|
|
---|---|
To suppress snooping on link-local group IP addresses use the ip igmp snooping link-local-groups-suppression command. To allow unlimited snooping, use the no form of this command.
ip igmp snooping link-local-groups-suppression
no ip igmp snooping link-local-groups-suppression
VLAN configuration (config-vlan)
You can apply link-local groups suppression to all interfaces in the Virtual Supervisor Module (VSM) by entering this command in global configuration mode.
|
|
This example shows how to limit Internet Group Management Protocol (IGMP) traffic sent from VLAN 342:
n1000v#
configure terminal
n1000v(
config)# vlan configuration 342
n1000v(
config-vlan)#
ip igmp snooping link-local-groups-suppression
This example shows how to resume IGMP traffic sent from VLAN 342:
n1000v#
configure terminal
n1000v(
config)# vlan vlan2
n1000v(
config-vlan)#
no ip igmp snooping link-local-groups-suppression
n1000v(
config-vlan)#
|
|
---|---|
To suppress snooping on link-local group IP addresses, use the ip igmp snooping link-local-groups-suppression command. To allow unlimited snooping, use the no form of this command.
ip igmp snooping link-local-groups-suppression
no ip igmp snooping link-local-groups-suppression
|
|
You can apply link-local groups suppression to a single VLAN by entering this command in VLAN configuration mode.
This example shows how to limit Internet Group Management Protocol (IGMP) traffic sent from all interfaces in the Virtual Supervisor Module (VSM):
n1000v#
configure terminal
n1000v(
config)#
ip igmp snooping link-local-groups-suppression
n1000v(
config)#
This example shows how to resume sending unlimited IGMP traffic from all interfaces in the VSM:
n1000v#
configure terminal
n1000v(
config)#
no ip igmp snooping link-local-groups-suppression
n1000v(
config)#
|
|
---|---|
To configure a static connection to a multicast router, use the ip igmp snooping mrouter interface command. To remove the static connection, use the no form of this command.
ip igmp snooping mrouter interface if-type if-number
no ip igmp snooping mrouter interface if-type if-number
VLAN configuration (config-vlan)
|
|
This example shows how to configure a static connection to a multicast router:
n1000v(
config)#
vlan configuration 342
n1000v(
config-vlan)#
ip igmp snooping mrouter interface ethernet 2/1
n1000v(
config-vlan)#
This example shows how to remove a static connection to a multicast router:
n1000v(
config)#
vlan configuration 342
n1000v(
config-vlan)#
no ip igmp snooping mrouter interface ethernet 2/1
n1000v(
config-vlan)#
|
|
---|---|
Displays Internet Group Management Protocol (IGMP) snooping information. |
To configure Internet Group Management Protocol Version 1 (IGMPv1) or IGMPv2 report suppression for VLANs, use the ip igmp snooping report-suppression command. To remove IGMPv1 or IGMPv2 report suppression, use the no form of this command.
ip igmp snooping report-suppression
no ip igmp snooping report-suppression
|
|
This example shows how to configure IGMPv1 or IGMPv2 report suppression for VLANs:
n1000v(
config)#
ip igmp snooping report-suppression
This example shows how to remove IGMPv1 or IGMPv2 report suppression:
n1000v(
config)#
no ip igmp snooping report-suppression
|
|
---|---|
To configure Internet Group Management Protocol Version 1 (IGMPv1) or IGMPv2 report suppression for VLANs, use the ip igmp snooping report-suppression command. To remove IGMPv1 or IGMPv2 report suppression, use the no form of this command.
ip igmp snooping report-suppression
no ip igmp snooping report-suppression
VLAN configuration (config-vlan)
|
|
This example shows how to configure IGMPv1 or IGMPv2 report suppression for VLAN 342:
This example shows how to remove IGMPv1 or IGMPv2 report suppression from VLAN 342:
|
|
---|---|
To configure a Layer 2 port of a VLAN as a static member of a multicast group, use the ip igmp snooping static-group command. To remove the static member, use the no form of this command.
ip igmp snooping static-group group interface if-type if-number
no ip igmp snooping static-group group interface if-type if-number
VLAN configuration (config-vlan)
|
|
You can specify the interface by the type and the number, such as ethernet slot/port.
This example shows how to configure a static member of a multicast group:
n1000v(
config)#
vlan configuration 342
n1000v(
config-vlan)#
ip igmp snooping static-group 230.0.0.1 interface ethernet 2/1
n1000v(
config-vlan)#
This example shows how to remove a static member of a multicast group:
n1000v(
config)#
vlan configuration 342
n1000v(
config-vlan)#
no ip igmp snooping static-group 230.0.0.1 interface ethernet 2/1
n1000v(
config-vlan)#
|
|
---|---|
To configure Internet Group Management Protocol Version 3 (IGMPv3) report suppression and proxy reporting, use the ip igmp snooping v3-report-suppression command. To remove IGMPv3 report suppression and proxy reporting, use the no form of this command.
ip igmp snooping v3-report-suppression
no ip igmp snooping v3-report-suppression
|
|
This example shows how to configure IGMPv3 report suppression and proxy reporting:
n1000v(
config)#
ip igmp snooping v3-report-suppression
This example shows how to remove IGMPv3 report suppression and proxy reporting:
n1000v(
config)#
no ip igmp snooping v3-report-suppression
|
|
---|---|
To configure Internet Group Management Protocol Version 3 (IGMPv3) report suppression and proxy reporting for a VLAN, use the ip igmp snooping v3-report-suppression command. To remove IGMPv3 report suppression, use the no form of this command.
ip igmp snooping v3-report-suppression
no ip igmp snooping v3-report-suppression
VLAN configuration (config-vlan)
|
|
This example shows how to configure IGMPv3 report suppression and proxy reporting for VLAN 342:
This example shows how to remove IGMPv3 report suppression and proxy reporting for VLAN 342:
|
|
---|---|
To create an access group, use the ip port access-group command. To remove access control, use the no form of this command.
ip port access-group name { in | out }
no ip port access-group name { in | out }
Access group name. The range is from 1 to 64, case-sensitive, alphanumeric characters. |
|
Port profile configuration (config-port-prof)
|
|
You create an access group to specify in an access control list (ACL) the access control of packets.
This example shows how to create an access group:
|
|
---|---|
To create a static IP source entry for a Layer 2 virtual Ethernet interface, use the ip source binding command. To disable the static IP source entry, use the no form of this command.
ip source binding IP-address MAC-address vlan vlan-id interface vethernet interface-number
no ip source binding IP-address MAC-address vlan vlan-id interface vethernet interface-number
|
|
This example shows how to create a static IP source entry that is associated with VLAN 100 on virtual Ethernet interface 3:
|
|
---|---|