Card, MDA, and port command reference

Context

config>port

config>lag

config>split-horizon-group

config>macsec>connectivity-association

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command creates a text description for a configuration context to help identify the content in the configuration file.

The no form of this command removes any description string from the context.

Parameters

long-description-string

The description character string. Strings can be up to 160 characters composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.

Context

config>card

config>card>mda

config>port

config>port>ethernet

config>lag

config>port>ethernet>ssm

config>redundancy>multi-chassis>peer

config>redundancy>multi-chassis>peer>mc-lag

config>redundancy>multi-chassis>peer>sync

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command administratively disables an entity. When disabled, an entity does not change, reset, or remove any configuration settings or statistics. The operational state of the entity is disabled as well as the operational state of any entities contained within.

The no form of this command administratively enables an entity.

Default

the default state for a card is no shutdown

the default state for an mda is no shutdown

the default state for a Link Aggregation Group (LAG) is shutdown

the default state for a port is shutdown

Context

config

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This mandatory command enables the context to access the chassis card Input/Output Module (IOM), slot, and MDA CLI context.

The no form of this command cannot be used on fixed IOM and MDA cards that are auto equipped and auto provisioned. The IOM card is equipped and provisioned for slot 1.

Parameters

slot-number

Specifies the slot number of the card in the chassis.

Context

config>card

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This mandatory command adds a card type to the device configuration for the slot. The card type can be preprovisioned, meaning that the card does not need to be installed in the chassis.

A card must be provisioned before an MDA or port can be configured.

A card can only be provisioned in a slot that is vacant, meaning no other card can be provisioned (configured) for that particular slot.

A card can only be provisioned in a slot if the card type is allowed in the slot. An error message is generated if an attempt is made to provision a card type that is not allowed.

A high severity alarm is raised if an administratively enabled card is removed from the chassis. The alarm is cleared when the correct card type is installed or the configuration is modified. A low severity trap is issued when a card is removed that is administratively disabled.

An appropriate alarm is raised if a partial or complete card failure is detected. The alarm is cleared when the error condition ceases.

The no form of this command cannot be used as the card is fixed.

Default

the card is equipped and preprovisioned for slot 1

Parameters

card-type

Specifies the type of card to be configured and installed in that slot.

Context

config>card

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This mandatory command enables the MDA CLI context to configure MDAs.

Default

1

Parameters

mda-slot

Specifies the MDA slot number to be configured. Fixed ports on the panel of the chassis belong to MDA 1.

Context

config>card>mda

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This mandatory command provisions a specific MDA type to the device configuration for the slot. The MDA can be preprovisioned but an MDA must be provisioned before ports can be configured. Ports can be configured when the MDA is properly provisioned.

7210 SAS-D and 7210 SAS-Dxp (all platform variants) support only a fixed MDA. These platforms do not support an expansion slot. The fixed MDA (addressed as mda 1) is auto-equipped and auto-provisioned on bootup. It cannot be deleted.

The no form of this command displays an error message if performed on fixed MDAs.

Default

MDA 1 is auto-equipped and auto-provisioned by default during bootup.

Parameters

mda-type

Specifies the type of MDA selected for the slot position.

Values

m4-tx+6-sfp (7210 SAS-D)

m6-tx+4-sfp+2-sfpp (7210 SAS-Dxp)

m2-tx+2-sfp+1-combo (7210 SAS-K 2F1C2T)

m4-tx+2-sfp+6-combo (7210 SAS-K 2F6C4T)

m3-10gb-sfp+8-combo (7210 SAS-K 3SFP+ 8C)

Context

config>card>mda

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command enables Synchronous Ethernet on the Ethernet ports that support Synchronous Ethernet. When Synchronous Ethernet is enabled, the timing information is derived from the Ethernet ports.

Synchronous Ethernet is supported for both Ethernet SFP ports and fixed copper ports.

See the 7210 SAS-D, Dxp, K 2F1C2T, K 2F6C4T, K 3SFP+ 8C Basic System Configuration Guide for more information about Synchronous Ethernet.

The no form of this command disables Synchronous Ethernet on the MDA.

Default

no sync-e

Context

config>port

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

Commands in this context configure QoS policy parameters on an access port.

Context

config>port>access

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

Commands in this context configure QoS policy parameters on an access-uplink port.

Context

config>port>access

config>port>access>uplink

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

Commands in this context configure QoS egress policy parameters for the access port on 7210 SAS-D and 7210 SAS-Dxp, and for the access-uplink port on 7210 SAS-D, 7210 SAS-Dxp, 7210 SAS-K 2F1C2T, 7210 SAS-K 2F6C4T, and 7210 SAS-K 3SFP+ 8C respectively.

Context

config>port>access>egress

config>port>access>uplink>egress

Platforms

7210 SAS-D, 7210 SAS-Dxp

Description

This command configures pool policies.

Default

default

Parameters

name

Specifies the pool name, a string up to 32 characters composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.

Context

config>port>access>egress>pool

config>port>access>uplink>egress>pool

Platforms

7210 SAS-D, 7210 SAS-Dxp

Description

This command specifies an existing slope policy which defines high and low priority RED slope parameters. The policy is defined in the config>qos>slope-policy context.

Parameters

name

Specifies the policy name, a string up to 32 characters.

Context

config>port>ethernet>access>egress

Platforms

7210 SAS-D, 7210 SAS-Dxp

Description

This command associates a access-egress QoS policy to the access port.

The no form of this policy removes the explicit association of a user configured QoS policy and associates a default QoS policy with the port.

Parameters

policy-id

Specifies an existing QoS policy to be assigned to the port.

Values

1 to 65535

Context

config>port>ethernet>access>uplink

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command associates a network QoS policy with the access-uplink port.

Parameters

policy-id

Specifies an existing QoS policy to be assigned to the port.

Values

1 to 65535

Context

config>port>ethernet>network

Platforms

7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C

Description

This command specifies the network egress aggregate shaper rate for port queues. The shaper value limits the maximum bandwidth that port queues can receive from the total port bandwidth, with remaining port bandwidth shared by SAPs on the port. This command is only supported on hybrid ports.

The no form of this command removes the configured egress aggregate shaper rate.

Default

no nw-egr-agg-shaper-rate

Parameters

rate

Specifies the egress aggregate shaper rate in kb/s.

Values

64 to 1000000 (7210 SAS-K 2F6C4T)

64 to 10000000 (7210 SAS-K 3SFP+ 8C)

Context

config>port>ethernet>network

Platforms

7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C

Description

This command associates a network QoS policy to a network port.

Parameters

policy-id

Specifies an existing QoS policy to be assigned to the port.

Values

1, 3 to 65535

Context

config

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures ports. Before a port can be configured, the chassis slot must be provisioned with a valid card type and the MDA parameter must be provisioned with a valid MDA type. (See card and mda commands.) All ports must be explicitly configured and enabled

Parameters

port-id

Specifies the physical port ID in the slot/mda/port format.

Context

config>port>ethernet

config>lag

Platforms

7210 SAS-D, 7210 SAS-Dxp

Description

This command enables DEI-based classification on access ports, network ports, access-uplink or hybrid ports.

If enabled, DEI value in the Ethernet packet header is used to determine the initial profile/color of the packet when the meter/policer used to police the FC is configured in color-aware mode. If the meter used to police the FC is configured in color-blind mode, then the DEI value of the packet has no effect. When in color-aware mode, DEI value of 0 is interpreted as in-profile or green packet and DEI value of 1 is interpreted as out-of-profile or yellow packet. In color-aware mode, the following behavior is accorded to packets classified with initial profile/color as in-profile/green and out-of-profile/yellow:

• If a green packet is received and the color-aware meter is within the CIR rate, then packet is assigned a final profile of green and it is assigned a final profile of yellow if the meter exceeds the CIR rate and is within the PIR rate.

• If a yellow packet is received and the color-aware meter is above the CIR rate and within the PIR rate, then the packet is assigned a final profile of yellow.

That is, in color-aware mode, yellow/out-of-profile packets cannot eat into the CIR bandwidth. It is exclusively reserved for green/in-profile packets.

The final profile assigned at ingress is used by egress to determine the WRED slope to use. The WRED slope determines whether the packet is eligible to be assigned a buffer and can be queued up on egress queue for transmission.

See the 7210 SAS-D, Dxp Quality of Service Guide for more information.

Default

no enable-dei

Context

config>port>ethernet

Platforms

7210 SAS-D, 7210 SAS-Dxp

Description

This command configures the scheduling behavior to the one specified in the policy (Strict, RR, WRR, WDRR, WRR/WDRR + Strict).

The no form of this command removes the policy from the port and makes the scheduling scheme of the port to strict.

Parameters

port-scheduler-policy-name

Specifies a port scheduler policy for the port.

Context

config>port>ethernet

config>lag

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures an Ethernet port for access mode, access-uplink mode, hybrid mode, or network mode of operation.

The following modes are supported on the 7210 SAS platforms:

• The 7210 SAS-D, 7210 SAS-Dxp, and 7210 SAS-K 2F1C2T support only access and access-uplink mode.

• The 7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C support access, access-uplink, hybrid, and network mode.

The functionality of the different modes is as follows:

• Access — An access port is used for customer facing traffic on which services are configured. A Service Access Point (SAP) can only be configured on an access port. When a port is configured for access mode, the appropriate encap-type must be specified to distinguish the services on the port. When an Ethernet port has been configured for access mode, multiple services can be configured on the Ethernet port.

• Access-uplink — Access-uplink ports are used to provide native Ethernet connectivity in service provider transport or infrastructure network. This can be achieved by configuring port mode as access uplink. With this option, the encap-type can be configured to only qinq. Access-uplink SAPs, which are QinQ SAPs, can only be configured on an access uplink port to allow the operator to differentiate multiple services being carried over a single access uplink port.

• Network — A network port participates in the service provider transport or infrastructure network when a network mode is selected. When the network option is configured, the encap-type can be configured to either null or dot1q.

• Hybrid — A hybrid Ethernet port allows the combination of network and access modes of operation on a per-VLAN basis and must be configured as either dot1q or QinQ encapsulation. When the hybrid port is configured with dot1q encapsulation, SAPs are configured in a service by providing the SAP ID, which must include the port-id value of the hybrid port and an unused VLAN tag value in the format port-id:qtag1. A SAP with the format port-id:* is also supported. Network IP interfaces are configured in the config>router>interface>port context by providing the port name, which consists of the port-id value of the hybrid port and an unused VLAN tag value in the format port-id:qtag1.

  A valid value must be entered for qtag1. The port-id:* format is not supported on a network IP interface. The 4096 VLAN tag space on the port is shared among VLAN SAPs and VLAN network IP interfaces. When the hybrid port is configured with QinQ encapsulation, SAPs are configured in a service by providing the SAP ID, which must include the port-id value of the hybrid port and the outer and inner VLAN tag values in the format port-id:qtag1.qtag2. SAPS with the format port-id:qtag1.* are also supported. The outer VLAN tag value must not have been used to create an IP network interface on this port. In addition, the qtag1.qtag2 value combination must not have been used by another SAP on this port.

  Network IP interfaces are configured in the config>router>interface>port context by providing the port name, which consists of the port-id value of the hybrid port and a VLAN tag value in the format port-id:qtag1.*. An outer VLAN tag qtag2 of * is used to create a network IP interface. In addition, the qtag1.qtag2 value combination must not have been used by another SAP or network IP interface on this port.

The no form of this command reverts to the default value.

Default

access (7210 SAS-D, 7210 SAS-Dxp, and 7210 SAS-K 2F1C2T)

network (7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C)

Parameters

access

Specifies the Ethernet port as service access.

access uplink

Specifies the Ethernet port for transport (Ethernet uplinks available only in access-uplink mode). A limited number of ports can be configured as access-uplink ports at any specified time on the 7210 SAS-Dxp.

hybrid

Specifies the Ethernet port for hybrid use (available only in network mode).

network

Specifies the Ethernet port as service access (available only in network mode).

Context

config>port>ethernet

Platforms

7210 SAS-D, 7210 SAS-Dxp, 7210 SAS-K 2F1C2T, 7210 SAS-K 2F6C4T, and 7210 SAS-K 3SFP+ 8C

Description

This command specifies the operational group to be monitored by the object under which it is configured. The oper-group name must be already configured under the config>system context before its name is referenced in this command.

The no form of this command removes the association from the configuration.

Default

no monitor-oper-group

Parameters

name

Specifies a character string of maximum 32 ASCII characters identifying the group instance.

Values

32 chars maximum

Context

config>port>ethernet

config>lag

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command assigns a specific MAC address to an Ethernet port, Link Aggregation Group (LAG).

Only one MAC address can be assigned to a port. When multiple mac commands are entered, the last command overwrites the previous command. When the command is issued while the port is operational, IP will issue an ARP, if appropriate, and BPDUs are sent with the new MAC address. A default MAC address is assigned by the system from the chassis MAC address pool.

The no form of this command reverts the MAC address to the default value.

Parameters

ieee-address

Specifies the 48-bit MAC address in the form aa:bb:cc:dd:ee:ff or aa-bb-cc-dd-ee-ff where aa, bb, cc, dd, ee and ff are hexadecimal numbers. Allowed values are any non-broadcast, non-multicast MAC and non-IEEE reserved MAC addresses.

Context

config>port>ethernet

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures the maximum transmission unit (MTU) size for an Ethernet port. The Ethernet port level MTU parameter indirectly defines the largest physical packet the port can transmit or the far-end Ethernet port can receive. Packets received that are larger than the MTU value are discarded. Packets that cannot be fragmented at egress and exceed the MTU are discarded.

The value specified for the MTU includes the destination MAC address, source MAC address, the Ethertype or Length field and the complete Ethernet payload. The MTU value does not include the preamble, start of frame delimiter, or the trailing CRC.

The no form of this command reverts to the default values.

Default

The following table describes the default MTU values that are dependent on the (sub-)port type, mode, and encapsulation.

Parameters

mtu-bytes

Specifies the maximum allowable size of the MTU, expressed as an integer.

Values

512 to 9212

Context

config>port

Platforms

7210 SAS-K 2F1C2T, 7210 SAS-K 2F6C4T, and 7210 SAS-K 3SFP+ 8C

Description

This command enables Precision Time Protocol (PTP) port-based hardware timestamping on the port in both egress and ingress directions. For more information about PTP port-based hardware timestamping, including configuration guidelines, see the 7210 SAS-D, Dxp, K 2F1C2T, K 2F6C4T, K 3SFP+ 8C Basic System Configuration Guide.

The no version of this command disables PTP port-based hardware timestamping on the port.

Default

ptp-hw-timestamp

Context

config>system

Platforms

7210 SAS-Dxp

Description

This command specifies the port to assign for system use when using port loopback or for the mac-swap, mirroring, or testhead OAM tools. The system uses the resources of the port and the port is not available for configuring services.

The user cannot share a single port between multiple tools or applications if they intend to use the tools simultaneously. The system displays an error if the user tries to configure the same port for use with multiple OAM tools or if the user tries to use the tool without first configuring the port resources to be used by the tool.

The system verifies if any services are configured on the port specified with this command and if services are configured the command fails.

The no form of this command disables the use of this port by the specified OAM tool.

Parameters

mac-swap

Specifies that the port is dedicated for use by the mac-swap application/OAM tool.

mirror

Specifies that the port is dedicated for use by the mirroring application/OAM tool.

testhead

Specifies that the port is dedicated for use by the testhead application/OAM tool.

port-id

Specifies the physical port ID in the slot/mda/port format.

Context

config

Platforms

7210 SAS-K 2F6C4T, 7210 SAS-K 3SFP+ 8C, and 7210 SAS-Dxp 24p

Description

This command enables the context for MACsec configuration. The MACsec MKA profile can be configured in this context.

Context

config>macsec

Platforms

7210 SAS-K 2F6C4T, 7210 SAS-K 3SFP+ 8C, and 7210 SAS-Dxp 24p

Description

This command configures a connectivity association (CA). MACsec CAs are applied to a port dot1x configuration to enable MACsec on that port.

The no form of this command removes the CA.

Parameters

ca-name

Specifies the name of the CA using a string of up to 32 characters.

create

Specifies a mandatory keyword when creating an entry.

Context

config>macsec>connectivity-association

Platforms

7210 SAS-K 2F6C4T, 7210 SAS-K 3SFP+ 8C, and 7210 SAS-Dxp 24p

Description

This command configures encryption of datapath PDUs. When all parties in the CA have the security association key (SAK), they use the algorithm specified by the cipher-suite parameter, in conjunction with the SAK, to encrypt the datapath PDUs.

The no form of this command disables encryption of datapath PDUs.

Default

cipher-suite gcm-aes-128

Parameters

cipher-suite

Specifies the algorithm to use for control plane encryption.

Values

gcm-aes-128

gcm-aes-256

Context

config>macsec>connectivity-association

Platforms

7210 SAS-K 2F6C4T, 7210 SAS-K 3SFP+ 8C, and 7210 SAS-Dxp 24p

Description

This command puts 802.1Q tags in clear before SecTAG. The following modes are available: single-tag and dual-tag.

The following table describes the encrypted dot1q and QinQ packet format when clear-tag-mode (single-tag or dual-tag) is configured.

The no form of this command puts all dot1q tags after SecTAG and encrypts the tags.

Default

no clear-tag-mode

Parameters

clear-tag-mode

Specifies the clear tag mode.

Values

single-tag, dual-tag

Context

config>macsec>connectivity-association

Platforms

7210 SAS-K 2F6C4T, 7210 SAS-K 3SFP+ 8C, and 7210 SAS-Dxp 24p

Description

This command enters a description for the CA.

The no form of this command removes the CA description.

Parameters

description-string

Specifies a brief description of the CA using a string of up to 80 characters.

Context

config>macsec>connectivity-association

Platforms

7210 SAS-K 2F6C4T, 7210 SAS-K 3SFP+ 8C, and 7210 SAS-Dxp 24p

Description

This command specifies the offset of the encryption in MACsec packets.

The encryption offset is distributed by the MKA to all parties and is signaled via MACsec capabilities.

The following table describes the basic settings.

The no form of this command rejects all arriving traffic regardless of whether it is MACsec-secured.

Default

encryption-offset 0

Parameters

encryption-offset

Specifies the encryption offset.

Values

0 — encrypts the entire payload

30 — leaves the IPv4 header in clear

50 — leaves the IPv6 header in clear

Context

config>macsec>connectivity-association

Platforms

7210 SAS-K 2F6C4T, 7210 SAS-K 3SFP+ 8C, and 7210 SAS-Dxp 24p

Description

This command enables encryption and authentication (ICV payload) for all PDUs.

The no form of this command specifies that all PDUs are transmitted in cleartext form but still authenticated and have the trailing ICV.

Default

macsec-encrypt

Context

config>macsec>connectivity-association

Platforms

7210 SAS-K 2F6C4T, 7210 SAS-K 3SFP+ 8C, and 7210 SAS-Dxp 24p

Description

This command configures the size of the replay protection window.

This command must be configured to force packet discard when the system detects a packet that is not within the parameters configured for the replay-window-size command.

When this command is enabled, the sequence of the ID number of the received packets is checked. If the packet arrives out of sequence, and the difference between the packet numbers exceeds the replay window size, the packet is counted by the receiving port and then discarded. For example, if the replay protection window size is set to 5 and a packet assigned the ID of 1006 arrives on the receiving link immediately after the packet assigned the ID of 1000, the packet that is assigned the ID of 1006 is counted and discarded because it falls outside the parameters of the replay-window-size command.

Replay protection is especially useful for fighting man-in-the-middle attacks. A packet that is replayed by a man-in-the-middle attacker on the Ethernet link arrives on the receiving link out of sequence, so replay protection helps ensure the replayed packet is dropped instead of forwarded through the network.

Default

replay-protection

Context

config>macsec>connectivity-association

Platforms

7210 SAS-K 2F6C4T, 7210 SAS-K 3SFP+ 8C, and 7210 SAS-Dxp 24p

Description

This command specifies the size of the replay protection window.

This command must be configured to enable the replay-protection command.

When the number-of-packets parameter is set to 0, all packets that arrive out of order are dropped.

The no form of this command reverts to the default value.

Default

replay-window-size 0

Parameters

number-of-packets

Specifies the window that the packets can arrive out of order.

Values

0 to 4294967294

Context

config>macsec>connectivity-association

Platforms

7210 SAS-K 2F6C4T, 7210 SAS-K 3SFP+ 8C, and 7210 SAS-Dxp 24p

Description

This command shuts down the CA profile. All ports using this profile do not transmit PDUs because this command shuts down MACsec for this profile.

The no form of this command enables the CA profile.

Default

shutdown

Context

config>macsec>connectivity-association

Platforms

7210 SAS-K 2F6C4T, 7210 SAS-K 3SFP+ 8C, and 7210 SAS-Dxp 24p

Description

Commands in this context configure a Connectivity Association Key (CAK). A CAK is responsible for managing the MACsec key agreement (MKA).

Context

config>macsec>conn-assoc>static-cak

Platforms

7210 SAS-K 2F6C4T, 7210 SAS-K 3SFP+ 8C, and 7210 SAS-Dxp 24p

Description

This command specifies which preshared key is the active transmitting preshared key. If there are two preshared keys configured, the arriving MACsec MKA can be decrypted using CAKs of both preshared keys; however, only the active PSK is used for Tx encryption of MKA PDUs.

Default

active-psk 1

Parameters

active-pre-shared-key

Specifies the value of the preshared key.

Values

1 or 2

Context

config>macsec>conn-associ>static-cak

Platforms

7210 SAS-K 2F6C4T, 7210 SAS-K 3SFP+ 8C, and 7210 SAS-Dxp 24p

Description

This command specifies the key server priority used by the MKA protocol to select the key server when MACsec is enabled using the static CAK security mode.

The no form of this command disables this command.

Default

mka-key-server-priority 16

Parameters

priority

Specifies the priority of the server.

Values

0 to 255

Context

config>macsec>conn-assoc>static-cak

Platforms

7210 SAS-K 2F6C4T, 7210 SAS-K 3SFP+ 8C, and 7210 SAS-Dxp 24p

Description

This command specifies the preshared key used to enable MACsec using the static CAK security mode. This command also specifies the encryption algorithm used for encrypting the SAK.

A preshared key includes a connectivity association key name (CKN) and a CAK. The preshared key (the CKN and CAK) must match on both ends of a link.

A preshared key is configured on both devices at each end of a point-to-point link to enable MACsec using static CAK security mode. The MKA protocol is enabled after the successful MKA liveliness negotiation.

The encryption-type parameter is used to encrypt SAK and authentication of the MKA packet. The symmetric encryption key SAK needs to be encrypted (wrapped) using the encryption algorithm specified with the encryption-type parameter. The AES key is derived using the preshared key.

The no form of this command removes the index.

Parameters

pre-shared-key-index

Specifies the index of this preshared key.

Values

1, 2

encryption-type

Specifies the type of encryption.

Values

aes-128-cmac, aes-256-cmac

create

Specifies a mandatory keyword when creating an entry.

Context

config>macsec>conn-assoc>static-cak>pre-shared-key

Platforms

7210 SAS-K 2F6C4T, 7210 SAS-K 3SFP+ 8C, and 7210 SAS-Dxp 24p

Description

This command configures the CAK for a preshared key. The following values are derived from the CAK:

• KEK (Key Encryption Key)

  KEK is used to encrypt the MKA and SAK (symmetric key used for datapath PDUs) to be distributed between all members.

• ICK (Integrity Check Value)

  ICK is used to authenticate the MKA and SAK PDUs to be distributed between all members.

The no form of this command removes the CAK hexidecimal string value.

Parameters

hex-string

Specifies the value of the CAK using up to 64 hexadecimal characters, 32 hexadecimal characters for a 128-bit key, and 64 hexadecimal characters for a 256-bit key.

hash

Specifies the hash scheme.

hash2

Specifies the hash scheme.

Context

config>macsec>conn-assoc>static-cak>pre-shared-key

Platforms

7210 SAS-K 2F6C4T, 7210 SAS-K 3SFP+ 8C, and 7210 SAS-Dxp 24p

Description

This command specifies the connectivity association key name (CKN) for a preshared key.

The CKN is appended to the MKA for identification of the CAK by the peer.

The no form of this command removes the CKN.

Parameters

hex-string

Specifies the value of the CKN.

Values

32 octets char (64 hex)

Context

config>port

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

Commands in this context configure access parameters.

This context can only be used when configuring Ethernet LAN ports on an appropriate MDA.

Context

config>port>ethernet

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command enables speed and duplex autonegotiation on Fast Ethernet ports and enables far-end fault indicator support on gigabit ports.

There are three possible settings for autonegotiation:

• ‟on” or enabled with full port capabilities advertised

• ‟off” or disabled where there are no autonegotiation advertisements

• ‟limited” where a single speed/duplex is advertised.

When autonegotiation is enabled on a port, the link attempts to automatically negotiate the link speed and duplex parameters. If autonegotiation is enabled, the configured duplex and speed parameters are ignored.

When autonegotiation is disabled on a port, the port does not attempt to autonegotiate and will only operate at the speed and duplex settings configured for the port. Note that disabling autonegotiation on gigabit ports is not allowed as the IEEE 802.3 specification for gigabit Ethernet requires autonegotiation be enabled for far end fault indication.

If the autonegotiate limited keyword option is specified, the port will autonegotiate but will only advertise a specific speed and duplex. The speed and duplex advertised are the speed and duplex settings configured for the port. One use for limited mode is for multispeed gigabit ports to force gigabit operation while keeping autonegotiation enabled for compliance with IEEE 801.3.

7210 SAS requires that autonegotiation be disabled or limited for ports in a Link Aggregation Group to guarantee a specific port speed.

The no form of this command disables autonegotiation on this port.

Default

autonegotiate

Parameters

limited

Specifies tht the Ethernet interface will automatically negotiate link parameters with the far end, but will only advertise the speed and duplex mode specified by the Ethernet and commands.

Context

config>port>ethernet

Platforms

7210 SAS-K 2F1C2T, 7210 SAS-K 2F6C4T, 7210 SAS-K 3SFP+ 8C

Description

This command configures the connection type on the Ethernet combo port. The combo port provides two physical interface options to the user, SFP or copper. This command allows the user specify the physical interface that will be used.

When configured as SFP port it allows for fiber based connectivity with the flexibility of using suitable optics for longer reach. When configured as a fixed copper port it provides cheaper connectivity for shorter reach. The SFP port support 100/1000 speeds and the copper port can support 10/100/1000Mbps speed.

When configured as 'auto', software will attempt to detect the type of interface in use based on whether the copper cable is plugged in or the SFP optic is plugged in. It is not allowed to plug in copper cable and SFP optics into the Ethernet combo port at the same time.

When combo port is used for SyncE, the connection type has to be set to either sfp or copper. SyncE is not supported with connection-type as auto.

The combo port can be configured either as a SFP port or a copper port or set for automatic detection. That is, both the interfaces cannot be used simultaneously (even when 'auto' is set, software selects one of the ports based on the interface plugged in).

Default

sfp (7210 SAS-K 2F1C2T)

auto (7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C)

Parameters

connection-type

Specifies the type of Ethernet combo port.

Values

sfp, copper, auto

Context

config>port>ethernet

Platforms

7210 SAS-D, 7210 SAS-Dxp, 7210 SAS-K 2F1C2T, 7210 SAS-K 2F6C4T, 7210 SAS-K 3SFP+ 8C

Description

This command configures Ethernet CRC Monitoring parameters.

Context

config>port>ethernet>crc-monitor

Platforms

7210 SAS-D, 7210 SAS-Dxp, 7210 SAS-K 2F1C2T, 7210 SAS-K 2F6C4T, 7210 SAS-K 3SFP+ 8C

Description

This command specifies the error rate at which to declare the Signal Failure condition on an Ethernet interface.

The value represents a ratio of errored frames over total frames received over seconds of the sliding window. The CRC errors on the interface are sampled once per second. A default of 10 seconds is used when there is no additional window-size configured. The multiplier keyword is optional.

The no form of this command reverts to the default value of 1. If the multiplier keyword is omitted, the multiplier will return to the default value of 1.

Default

no sd-threshold

Parameters

threshold

Specifies the rate of CRC errored Ethernet frames.

Values

1 to 9

multiplier

Specifies the multiplier used to scale the CRC error ratio.

Values

1 to 9

Context

config>port>ethernet>crc-monitor

Platforms

7210 SAS-D, 7210 SAS-Dxp, 7210 SAS-K 2F1C2T, 7210 SAS-K 2F6C4T, 7210 SAS-K 3SFP+ 8C

Description

This command specifies the error rate at which to declare the Signal Degrade condition on an Ethernet interface.

The value represents a ratio of errored frames over total frames received over seconds of the sliding window. The CRC errors on the interface are sampled once per second. A default of 10 seconds is used when there is no additional window-size configured.

The no form of this command reverts to the default value of 1. If the multiplier keyword is omitted, the multiplier will return to the default value of 1.

Default

no sf-threshold

Parameters

threshold

Specifies the rate of CRC errored Ethernet frames.

Values

1 to 9

multiplier

Specifies the multiplier used to scale the CRC error ratio.

Values

1 to 9

Context

config>port>ethernet>crc-monitor

Platforms

7210 SAS-D, 7210 SAS-Dxp, 7210 SAS-K 2F1C2T, 7210 SAS-K 2F6C4T, 7210 SAS-K 3SFP+ 8C

Description

This command specifies sliding window size over which the Ethernet frames are sampled to detect signal fail or signal degrade conditions. The command is used jointly with the sf-threshold and the sd-threshold to configure the sliding window size.

Default

10

Parameters

seconds

Specifies the size of the sliding window in seconds over which the errors are measured.

Values

5 to 60

Context

config>port>ethernet

Platforms

7210 SAS-D, 7210 SAS-Dxp, 7210 SAS-K 2F1C2T, 7210 SAS-K 2F6C4T, 7210 SAS-K 3SFP+ 8C

Description

This command brings a port operationally down in the event the systems has detected internal max transmit errors.

Default

no down-on-internal-error

Context

config>port>ethernet

Platforms

7210 SAS-D, 7210 SAS-Dxp, 7210 SAS-K 2F1C2T, 7210 SAS-K 2F6C4T, 7210 SAS-K 3SFP+ 8C

Description

This command specifies the Ethertype expected when the port's encapsulation type is dot1q. Dot1q encapsulation is supported only on Ethernet interfaces.

When the dot1-etype is configured to a value other than 0x8100 (the default value) on a port, the outermost tag in the received packet is matched against the configured value and if there is a match then it is treated as a Dot1q packet and the VLAN ID is used to match against the configured Dot1q SAPs on the port to find the Dot1q SAP the packet should be matched to.

The no form of this command reverts the dot1q-etype value to the default.

Parameters

value

Specifies the Ethertype to expect, in decimal or hexadecimal format.

Default

If the encap-type is dot1p, the default is 0x8100.

If the encap-type is qinq, the default is 0x8100.

Values

1536 to 65535, or 0x0600 to 0xffff

Context

config>port>ethernet

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command enables the context for the configuration of the duplex mode of a Fast Ethernet port. If the port is configured to autonegotiate, this parameter is ignored.

Default

full

Parameters

full

Sets the link to full duplex mode.

half

Sets the link to half duplex mode.

Context

config>port>ethernet

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures the rate of traffic leaving the network.

The no form of this command reverts to the default value.

Default

no egress-rate

Parameters

sub-rate

The egress rate in Kbps.

Values

1 to 10000000

max-burst size-in-kbits

Specifies the maximum egress burst in kilobits. This parameter is configurable only on 7210 SAS-D and 7210 SAS-Dxp.

Values

32 to 16384, default

Context

config>port>ethernet

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

Commands in this context configure EFM-OAM attributes.

Context

config>port>ethernet>efm-oam

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command enables reactions to loopback control OAM PDUs from peers.

The no form of this command disables reactions to loopback control OAM PDUs.

Default

no accept-remote-loopback

Context

config>port>ethernet>efm-oam

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures the mode of OAM operation for this Ethernet port. These two modes differ in that active mode causes the port to continually send out efm-oam info PDUs while passive mode waits for the peer to initiate the negotiation process. A passive mode port cannot initiate monitoring activities (such as loopback) with the peer.

Default

active

Parameters

active

Specifies that the port has the capability to initiate negotiation and monitoring activities.

passive

Specifies that the port relies on peer to initiate negotiation and monitoring activities.

Context

config>port>ethernet>efm-oam

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures the transmit interval of OAM PDUs.

The minimum efm-oam session time-out value supported is 300 milliseconds. That is, user can configure transmit-interval 1 multiplier 3 as the minimum value. This is applicable to all platforms except for the 7210 SAS-D. On the 7210 SAS-D, the minimum transmit interval is 500 msec and multiplier is 4.

Default

transmit-interval 10 multiplier 5

Parameters

interval

Specifies the transmit interval, in 100 milliseconds.

Values

1 to 600

multiplier multiplier

Specifies the multiplier for transmit-interval to set local link down timer.

Values

2 to 5

Context

config>port>ethernet>efm-oam

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command enables EFM OAM PDU tunneling. Enabling tunneling will allow a port mode Epipe SAP to pass OAM frames through the pipe to the far end.

The no form of this command disables tunneling.

Default

no tunneling

Context

config>port>ethernet

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures the encapsulation method used to distinguish customer traffic on an Ethernet access port, or different VLANs on a port.

The no form of this command reverts to the default.

Default

encap-type null

Parameters

dot1q

Specifies that the ingress frames carry 802.1Q tags where each tag signifies a different service.

null

Specifies that the ingress frames will not use any tags to delineate a service. As a result, only one service can be configured on a port with a null encapsulation type.

qinq

Specifies QinQ encapsulation for QinQ access SAPs.

Context

config>port>ethernet

Platforms

7210 SAS-K 2F1C2T and 7210 SAS-K 2F6C4T

Description

This command allows rate changes received in ETH-BN messages on a port-based MEP to update the egress rate used on the port. The egress rate is capped by the minimum of the configured egress-rate and the maximum port rate.

The no form of this command reverts to the default value.

Default

no eth-bn-egress-rate-changes

Context

config>port>ethernet

Platforms

7210 SAS-K 2F1C2T and 7210 SAS-K 2F6C4T

Description

Commands in this context configure 802.1ag CFM parameters.

Context

config>port>ethernet>eth-cfm

Platforms

7210 SAS-K 2F1C2T and 7210 SAS-K 2F6C4T

Description

This command provisions the maintenance endpoint (MEP).

The no form of this command removes the configuration.

Default

no mep

Parameters

mep-id

Specifies the maintenance association endpoint identifier.

Values

1 to 8191

md-index

Specifies the maintenance domain (MD) index value.

Values

1 to 4294967295

ma-index

Specifies the MA index value.

Values

1 to 4294967295

Context

config>port>ethernet>eth-cfm>mep

Platforms

7210 SAS-K 2F1C2T and 7210 SAS-K 2F6C4T

Description

Commands in this context configure ETH-BN message handling.

Context

config>port>ethernet>eth-cfm>mep>eth-bn

Platforms

7210 SAS-K 2F1C2T and 7210 SAS-K 2F6C4T

Description

This command enables the reception and processing of ETH-BN messages, and the retrieval and processing of the current bandwidth field for inclusion in dynamic egress rate adjustments.

The received rate is a Layer 2 rate, and is expected to be in Mb/s. If this rate is a link rate (including preamble, start frame delimiter, and inter-frame gap), it requires the configuration of frame-based accounting in the config>port>ethernet context.

The no form of this command disables the reception and processing of ETH-BN messages.

Default

no receive

Context

config>port>ethernet>eth-cfm>mep>eth-bn

Platforms

7210 SAS-K 2F1C2T and 7210 SAS-K 2F6C4T

Description

This command sets the pace for update messages to and from the ETH-CFM subsystem to the QoS subsystem. The most recent update messages are held by the ETH-CFM subsystem, but the most recent update is held until the expiration of the pacing timer.

Default

rx-update-pacing 5

Parameters

seconds

Specifies the time to wait before sending subsequent updates (in seconds).

Values

1 to 600

Context

config>port>ethernet

Platforms

7210 SAS-K 2F1C2T, 7210 SAS-K 2F6C4T, 7210 SAS-K 3SFP+ 8C

Description

This command configures per port frame-based accounting. It can be enabled or disabled on each port. When enabled, all the shapers rates and queues statistics on that port also account for the Ethernet Layer 1 overhead (of 20 bytes) in both ingress and egress direction. That is all ingress queue shaper rates, egress queue shaper rates and aggregate SAP shaper rate account for the Ethernet overhead.

The no form of this command disables frame-based-accounting.

Default

no frame-based-accounting

Context

config>port>ethernet

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures port link dampening timers which reduce the number of link transitions reported to upper layer protocols. The hold-time value is used to dampen interface transitions.

When an interface transitions from an up state to a down state, it is immediately advertised to the rest of the system if the hold-time down interval is zero, but if the hold-time down interval is greater than zero, interface down transitions are not advertised to upper layers until the hold-time down interval has expired. Likewise, an interface is immediately advertised as up to the rest of the system if the hold-time up interval is zero, but if the hold-time up interval is greater than zero, up transitions are not advertised until the hold-time up interval has expired.

The no form of this command reverts to the default values.

Default

hold-time up 0 down 0 seconds

Parameters

up hold-timeup

Specifies the delay, in seconds or centiseconds, to notify the upper layers after an interface transitions from a down state to an up state.

Values

0 to 900 (seconds)

0, 10 to 90000 (centiseconds in 5-centisecond increments)

Values

0 to 900

down hold-time down

Specifies the delay, in seconds or centiseconds, to notify the upper layers after an interface transitions from an up state to a down state.

Values

0 to 900 (seconds)

0, 10 to 90000 (centiseconds in 5-centisecond increments)

seconds | centiseconds

Specifies the units of the hold time in seconds or centiseconds.

Values

0 to 900

Context

config>port>ethernet

Platforms

7210 SAS-D, 7210 SAS-Dxp, 7210 SAS-K 2F1C2T, 7210 SAS-K 2F6C4T, 7210 SAS-K 3SFP+ 8C

Description

This command enables LACP packet tunneling for the Ethernet port. When tunneling is enabled, the port will not process any LACP packets but will tunnel them instead. The port cannot be added as a member to a LAG group.

The no form of this command disables LACP packet tunneling for the Ethernet port.

Default

no lacp-tunnel

Context

config>port>ethernet

Platforms

7210 SAS-D, 7210 SAS-Dxp, 7210 SAS-K 2F1C2T, 7210 SAS-K 2F6C4T, 7210 SAS-K 3SFP+ 8C

Description

This command associates the context to which it is configured to the operational group specified in the group-name. The oper-group group-name must be already configured under config>system context before its name is referenced in this command.

The no form of this command removes the association.

Parameters

name

Specifies a character string of maximum 32 ASCII characters identifying the group instance.

Values

32 chars maximum

Context

config>port>ethernet

Platforms

7210 SAS-Dxp 16p and 7210 SAS-Dxp 24p

Description

This command enables PoE on the specified port and allows the user to configure the PoE device (PD) type that can be connected to the port.

This command must be used to enable PoE on a port before connecting a PD to the port. When a PD is connected to an enabled port, the software attempts to detect the type of device (that is, PoE, PoE+, PoE++, or HPoE) and the power it is requesting. If the detection is successful and the power request is within the maximum PoE power budget configured, power is supplied to the connected device. Otherwise, the request is denied and no power is provided to the port.

The no form of this command disables PoE, PoE+, PoE++, and HPoE capabilities on the specified port. If PoE is disabled, the software does not attempt to detect the characteristics of the connected PD.

Default

poe

Parameters

plus

Keyword to support PoE+ and allow 802.3at (Type-2) PoE devices to be connected to the port and request up to 30 W.

plusplus

Keyword to support PoE++ and allow 802.3bt (Type-3) PoE devices to be connected to the port and request up to 60 W.

hpoe

Keyword to support HPoE and allow 802.3bt (Type-4) PoE devices to be connected to the port and request up to 90 W.

Context

config>port>ethernet

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures the Ethertype used for Q-in-Q encapsulation.

When the qinq-etype is configured to a value other than the default value on a port, the outermost tag in the received packet is matched against the configured value and the inner tag's etype is matched against the default value. If there is a match, it is treated as a QinQ packet and the outer VLAN ID and inner VLAN ID is used to match against the configured Q1.Q2 SAPs on the port to find the QinQ SAP the packet should be matched to. If only the outermost tag's etype matches the qinq-etype configured on the port and the VLAN ID matches any of the Q1.* SAP configured on the port, the packet is processed in the context of that SAP. If the outermost tag's etype does not match the configured qinq-etype, then the packet is considered to be a untagged packet.

The no form of this command reverts the qinq-etype value to the default value. The default value is not user configurable.

Default

0x8100

Parameters

value

Specifies the qinq-etype to expect, in hexadecimal or decimal notation.

Values

1536 to 65535, or 0x0600 to 0xffff. Ensure that the values do not match any of the IEEE reserved Ethertype values such as 0x8a88, 0x9100, and 0x9200.

Context

config>port>ethernet

Platforms

7210 SAS-D, 7210 SAS-K 2F1C2T, 7210 SAS-K 2F6C4T, and 7210 SAS-K 3SFP+ 8C

Description

Commands in this context configure the counters associated with the egress port.

Context

config>port>ethernet>statistics

Platforms

7210 SAS-D, 7210 SAS-K 2F1C2T, 7210 SAS-K 2F6C4T, and 7210 SAS-K 3SFP+ 8C

Description

Commands in this context configure egress per queue statistics counter, which counts the total number of packets forwarded.

Context

config>port>ethernet

Platforms

7210 SAS-D ETR, 7210 SAS-Dxp, 7210 SAS-K 2F1C2T, 7210 SAS-K 2F6C4T, 7210 SAS-K 3SFP+ 8C

Description

This command forces the copper port to be a master or slave or set it for automatic detection. Using a value of master ensures that the local node is the SyncE master. A SyncE master port distributes the system timing over the copper port to the remote peer node. Using a value of slave ensures that the local node is a SyncE slave. A SyncE slave port uses the incoming timing information.

With copper ports using 1G speed, the nodes need to determine who will be the master and slave with respect to clock used for transmission and reception. The master-slave relationship between the two ports of the nodes is determined during autonegotiation of the link parameters and is automated; there is no management intervention in this process. When this process is complete, the master port transmit clock will be used for receiving the packets on the slave port. However, when SyncE is in use, to maintain clock distribution hierarchy (for example, master will be synchronized to a stable reference and will distribute this clock to the slave) one needs to make sure that one of the ports behave as a master while the remote port of the link in question behaves as a slave.

For copper ports, when port-clock is set to automatic, the Ethernet interface will automatically negotiate clock mastership along with other link parameters with the far end. Depending upon the capabilities of the two ends, one will be master the other will be slave for clocking.

The no form of this command allows the node to automatically determine the master or slave status for the copper port based on the nodes capabilities exchanged during auto-negotiation. That is, depending on the peer setting, the local end could end up as either a master or a slave when the no form of this command is used.

The following conditions must be met before using SyncE on the fixed port copper ports:

• Autonegotiation (or autonegotiation limited) must be turned on. This command is required only when the copper port speed is set to 1Gbps. This CLI command is not supported for fiber ports or for fiber ports that use copper SFPs.

• The port clock must be set to slave, if the port is used as a source-port for any reference. On the 7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C platform, when using combo ports, the connection-type must be set to copper. The port-clock parameter is ignored if the connection-type is set to sfp or auto.

Default

automatic

Parameters

master

Specifies that the local node is the synchronous Ethernet master. A synchronous Ethernet master port distributes the system timing over the copper port to the remote peer node.

slave

Specifies that the local node is a synchronous Ethernet slave. A synchronous Ethernet slave port uses the incoming timing information.

automatic

Specifies that the Ethernet interface will automatically negotiate clock mastership along with other link parameters with the far end. Depending upon the capabilities of the two ends, one will be master the other will be slave for clocking.

Context

config>port>ethernet

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures the port speed of a fast Ethernet port when autonegotiation is disabled. If the port is configured to autonegotiate, the speed parameter is ignored. Speed cannot be configured for ports that are part of a LAG.

Default

speed 100

Parameters

10

Keyword to set the link to 10 Mb/s.

100

Keyword to set the link to 100 Mb/s.

1000

Keyword to set the link to 1000 Mb/s.

Context

config>port>ethernet

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This configures simple port loopback and port loopback with MAC swap. When the optional parameter internal is specified, it provides the port loopback without the mac-swap functionality. It enables physical layer loopback of the packets that egress on the SAPs created on an Ethernet port. The packets that egress are looped back into the node instead of being transmitted on to the line. After loopback, the packets ingress the system and are mapped to the same SAP from which they were egressed. The packets that are looped back are processed as per the service configuration of the SAP.

This command, when used with service-id and MAC address, provides the port loopback with mac-swap functionality. It enables a physical layer loopback, so that packets which egress on the SAPs created on an Ethernet port are looped back into the system. After loopback, on ingress to the system, the MAC addresses in the Ethernet header are swapped (that is the source MAC address and destination MAC address is exchanged with each other) by the system before being processed as per the service configuration of the SAP.

On 7210 SAS platforms, use of port loopback with mac-swap, requires resources of another port to be assigned for system use. Users need to assign the resources of either internal virtual port or the resource of the front panel port for use with this OAM tool using the command configure> system> loopback-no-svc-port {mirror | mac-swap| testhead} port-id. The number of internal virtual port resources available for use is different for different platforms and can be obtained using the command show> system> internal-loopback-ports detail. Based on the number of internal virtual port resources and the use of other OAM tool that require the resources of another port, the user may need to assign the resources of a front-panel port if the internal virtual port resources are not available.

The following information describes guidelines for port loopback without mac-swap:

• Use this command for testing VLL services.

• Enabling this command for testing VPLS services leads to rapid MAC address movement to another port, as source or destination MAC address swap is not performed.

• This command affects all services provisioned on the port.

• Before enabling this command, turn off all Layer 2 and IP control protocols (such as LACP, EFM, 802.1x and so on) on the device and its peer to prevent errors such as protocol flaps caused by timeout and so on.When port loopback feature is to be used for multicast traffic with IGMP snooping enabled in the service, the corresponding datapath has to be statically created using static IGMP groups.

• For loopback to be functional, the following are not required:

  • SFP or XFPs need not be inserted into the device.

  • Ethernet cables need not be plugged in for copper ports.

• When the loopback command is enabled, ensure that Ethernet parameters such as speed, duplex, autonegotiation and so on are not modified.

The following information describes guidelines for port loopback with mac-swap:

• This command is available for testing VLL services and VPLS services only.

• When enabled, the command affects all services provisioned on the port.

• Before enabling this command, turn off all Layer 2 and IP control protocols (such as LACP, EFM, 802.1x and so on) on the device and its peer to prevent errors such as protocol flaps caused by timeout and so on.When port loopback feature is to be used for multicast traffic with IGMP snooping enabled in the service, the corresponding datapath has to be statically created using static IGMP groups.

• When using port loopback with mac-swap enabled, for unicast and unknown-unicast packets, if the packet matches the configured source and destination MAC address it will be swapped and looped back in the service. For broadcast and multicast packets, if the packet matches the configured source MAC address, its source MAC address will be used as the destination MAC address and the system MAC address will be the source MAC address. The packet is looped back in the service as a unicast packet. All other packets sent to the loopback port will be dropped as the forwarding of these packets after loopback can potentially cause network wide problems.

• For loopback to be functional, the following are not required:

  • SFP or XFPs need not be inserted into the device.

  • Ethernet cables need not be plugged in for copper ports.

• When the loopback is enabled, ensure that Ethernet parameters such as, speed, duplex, autonegotiation and so on are not modified.

• When the loopback is enabled, ensure that service parameter and attributes such as ingress qos policy, accounting records, ingress/egress ACLs, and so on are not modified.

  With port loopback in use, the SAP ingress ACLs with IP-criteria is not recommended for use because only MAC addresses are swapped.

The recommended procedure for using port loopback with mac-swap is:

• Configure the service and SAP on which loopback is to be enabled.

• Configure the assigned loopback port to be used.

• Send bidirectional learning frames on the SAP under test and spoke or uplink from a traffic tester or one can install static MAC for this purpose. Installing a static MAC is highly recommended because the recommended procedure for enabling port loopback is to shutdown the port –> enable loopback and then execute no shutdown the port.

• Enable port loopback and specify the service, SAP, and the source MAC address (SA) and the destination MAC address (DA). All packets with source MAC matching SA are the only ones processed in the context of the SAP on ingress after the loopback. Any other traffic, is dropped on ingress, to avoid issues caused by MAC movement and flooding issues in other services/SAPs, since the whole port is in loopback.

• When the port is in loopback, software disable learning and aging on the specified SAP. When the loopback configuration is removed for the port, then the software enables learning and aging for specified SAP. Therefore, port loopback with mac-swap cannot be used for learning or aging.

• It is not recommend to change the service parameters for the SAP and the service when loopback is active. Additionally use of commands which clears the FDB, and so on is highly discouraged.

• Remove the loopback on the SAP port to bring the sap out of MAC swap with loopback mode.

The no form of this command disables physical layer loopback on the Ethernet port.

The following list is the recommended sequence of commands to be executed to perform loopback:

1. Disable the port, execute the config>port>shutdown command.

2. Enable loopback, execute the config>port>ethernet>loopback internal command

3. Enable the port, execute the config>port>no shutdown command.

4. Perform the required tests.

5. Disable the port, execute the config>port>shutdown command.

6. Disable loopback, execute the config>port>ethernet>no loopback internal command

Enable the port, execute the command config>port> no shutdown.Enable the required services. The following list is the recommended sequence of commands to be executed to perform loopback when SFP or XFPs are inserted into the device:

1. Insert SFP or XFPs. SFP or XFPs are not required in case of fixed copper ports.

2. Enable the port and execute the config>port>no shutdown command.

3. Disable the port and execute the config>port>shutdown command. Enable loopback and execute the config>port>ethernet>loopback internal command.

4. Enable the port and execute the config>port>no shutdown command.Perform the required tests.

5. Disable the port and execute the config>port>shutdown command. Disable loopback and execute the config>port>ethernet>no loopback internal command.

6. Enable the port and execute the config>port>no shutdown command.Enable the required services.

The following list is the sequence of commands to be executed to perform loopback when SFP or XFPs are changed:

1. Disable the port, execute the config>port>shutdown command.

2. Insert the new SFP or XFP.

3. Enable the port and execute the config>port>no shutdown command. Disable the port and execute the config>port>shutdown command. Enable loopback and execute the config>port>ethernet>loopback internal command.

4. Enable the port and execute the config>port>no shutdown command.

5. Perform the required tests.

6. Disable the port and execute the config>port>shutdown command.

7. Disable loopback and execute the config>port>ethernet>no loopback internal command.

8. Enable the port and execute the config>port>no shutdown command.

9. Enable the required services.

10. Enable loopback and execute the config>port>ethernet>loopback internal command.

11. Perform the required tests.

12. Disable loopback and execute the config>port>ethernet>no loopback internal command.

13. Enable the required services.

Parameters

internal

Sets the associated port or channel into a internal loopback mode. A internal loopback loops the frames from the local router back at the framer.

service svc-id

Specifies the unique service identification number or string identifying the service in the service domain. This ID must be unique to this service and may not be used for any other service of any type. The service-id must be the same number used for every on which this service is defined.

Values

1 to 2147483648

sap sap-id

Specifies the physical port identifier portion of the SAP.

Values

null — port-id

dot1q — port-id:qtag1

qinq — port-id:qtag1.qtag2

port-id — slot/mda/port[.channel]

id — 1 to 1000

qtag1 — 0 to 4094

qtag2 — *, 1 to 4094

src-mac SA

Specifies the source MAC address.

Values

SA 6-byte unicast mac-address (xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx).

dst-mac DA

Specifies the destination MAC address.

Values

DA 6-byte unicast mac-address (xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx).

Context

config>port>ethernet

Platforms

7210 SAS-D ETR, 7210 SAS-Dxp, 7210 SAS-K 2F1C2T, 7210 SAS-K 2F6C4T, 7210 SAS-K 3SFP+ 8C

Description

This command enables Ethernet Synchronous Status Message (SSM) capability on a synchronous Ethernet port. Synchronous Ethernet must be enabled on the MDA (using the sync-e command) before SSM can be enabled.

Context

config>port>ethernet>ssm

Platforms

7210 SAS-D ETR, 7210 SAS-Dxp, 7210 SAS-K 2F1C2T, 7210 SAS-K 2F6C4T, 7210 SAS-K 3SFP+ 8C

Description

This command configures the encoding of synchronous status messages, that is, to select either SDH or SONET set of values. Configuring the code-type is only applicable to Synchronous Ethernet ports. For the code-type, SDH refers to ITU-T G.781 Option-1,while SONET refers to G.781 Option 2 (equivalent to Telcordia GR-253-CORE).

Default

sdh

Parameters

sdh

Specifies the values used on a G.781 Option 1 compliant network.

sonet

Specifies the values used on a G.781 Option 2 compliant network.

Context

config>port>ethernet>ssm

Platforms

7210 SAS-D, 7210 SAS-Dxp, 7210 SAS-K 2F1C2T, 7210 SAS-K 2F6C4T, 7210 SAS-K 3SFP+ 8C

Description

This command allows ESMC frames that are received into the Ethernet port to be tunneled in an Epipe or VPLS service. This configuration is only required for compliance to MEF 6.1.1 EPL Option 2. The port where esmc-tunnel is enabled cannot be used for Synchronous Ethernet.

The no form of this command extracts the ESMC frames on reception by the port. The ESMC frames are not tunneled through the service.

Default

no esmc-tunnel

Context

config>port>ethernet>ssm

config>port>sonet-sdh (not supported on 7210 SAS-Dxp)

Platforms

7210 SAS-D ETR, 7210 SAS-Dxp, 7210 SAS-K 2F1C2T, 7210 SAS-K 2F6C4T, 7210 SAS-K 3SFP+ 8C

Description

This command forces the QL value transmitted from the SSM channel of the SONET/SDH port or the Synchronous Ethernet port to be set to QL-DUS/QL-DNU. This capability is provided to block the use of the interface for timing purposes from the 7210 SAS.

Default

no tx-dus

Context

config>port>ethernet

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

Commands in this context configure port-specific 802.1x authentication attributes. This context can only be used when configuring Fast Ethernet, Gigabit Ethernet, or 10-Gigabit Ethernet LAN ports on an appropriate MDA.

Context

config>port>ethernet>dot1x

Platforms

7210 SAS-Dxp

Description

This command configures the guest VLAN that must be configured on the port when there is no response from the RADIUS server or when dot1x authentication is enabled on a port but no EAPOL packets are received from the connected device.

Users must specify the EHS script to be invoked when the logEvent_PORT_tmnxPortDot1xAuthLostGRvC event is raised and configure the guest VLAN in the script using the parameter passed to the script.

The no form of this command disables the guest VLAN assignment.

Default

no guest-service

Parameters

service-id

Specifies the service under which the SAP must be configured using the EHS script. The EHS script must use the NULL (“:0”) tag to configure a NULL SAP if the optional vlan-id parameter is not configured. If vlan-id is configured, it is used as the SAP tag.

Values

service-id: 1 to 2147483647

svc-name: 64 characters maximum

vlan-id

Specifies the VLAN ID. The configured vlan-id cannot be modified if the config>port>ethernet>dot1x>port-control command is set to auto. To modify the service and VLAN ID information, users must set the config>port>ethernet>dot1x>port-control command to either force-auth or force-unauth.

Values

0 to 4049

Context

config>port>ethernet>dot1x

Platforms

7210 SAS-Dxp

Description

This command enables MAC-based authentication. To use MAC-based authentication, 802.1x authentication must first be enabled using the port-control auto command.

When MAC-based authentication is enabled, and the mac-auth-wait timer expires, the 7210 SAS begins listening on the port for valid Ethernet frames. The source MAC address of a received frame is used for MAC-based authentication.

MAC authentication and Dot1x authentication or VLAN authentication are mutually exclusive and cannot be configured on the same port.

The no form of this command disables MAC-based authentication.

Default

no mac-auth

Context

config>port>ethernet>dot1x

Platforms

7210 SAS-Dxp

Description

This command configures the delay period before MAC authentication is activated.

The no form of this command disables the delay and allows MAC authentication to be used immediately.

Default

no mac-auth-wait

Parameters

seconds

Specifies the MAC authentication delay period, in seconds.

Values

1 to 3600

Context

config>port>ethernet>dot1x

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures the maximum number of times that the 7210 SAS will send an access request RADIUS message to the RADIUS server. If a reply is not received from the RADIUS server after the specified number attempts, the 802.1x authentication procedure is considered to have failed.

The no form of this command reverts to the default value.

Default

2

Parameters

max-auth-request

Specifies the maximum number of RADIUS retries.

Values

1 to 10

Context

config>port>ethernet>dot1x

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures the 802.1x authentication mode.

The no form of this command reverts to the default value.

Default

force-auth

Parameters

force-auth

Specifies that 802.1x authentication will be disabled and causes the port to transition to the authorized state without requiring any authentication exchange. The port transmits and receives normal traffic without requiring 802.1x-based host authentication.

force-unauth

Specifies that the port will remain in the unauthorized state, ignoring all attempts by the hosts to authenticate. The switch cannot provide authentication services to the host through the interface.

auto

Specifies that 802.1x authentication will be enabled. The port starts in the unauthorized state, allowing only EAPOL frames to be sent and received through the port. Both the 7210 SAS and the host can initiate an authentication procedure. The port will remain in an unauthorized state (no traffic except EAPOL frames is allowed) until the first client is authenticated successfully. After this, traffic is allowed on the port for all connected hosts.

Context

config>port>ethernet>dot1x

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures the period between two authentication sessions during which no EAPOL frames are sent by the 7210 SAS.

The no form of this command reverts to the default value.

Default

30

Parameters

seconds

Specifies the quiet period in seconds.

Values

1 to 3600

Context

config>port>ethernet>dot1x

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures the RADIUS policy to be used for 802.1x authentication. An 802.1x RADIUS policy must be configured (under config>security>dot1x) before it can be associated with a port. If the RADIUS policy-id does not exist, an error is returned. Only one 802.1x RADIUS policy can be associated with a port at a time.

The no form of this command removes the RADIUS policy association.

Default

no radius-plcy

Parameters

name

Specifies an existing 802.1x RADIUS policy name.

Context

config>port>ethernet>dot1x

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures the period after which re-authentication is performed. This value is only relevant if re-authentication is enabled.

The no form of this command reverts to the default value.

Default

3600

Parameters

seconds

Specifies the re-authentication delay period in seconds.

Values

1 to 9000

Context

config>port>ethernet>dot1x

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command enables or disables periodic 802.1x re-authentication.

When re-authentication is enabled, the 7210 SAS will re-authenticate clients on the port every re-auth-period seconds.

The no form of this command reverts to the default value.

Default

re-authentication

Context

config>port>ethernet>dot1x

Platforms

7210 SAS-Dxp

Description

This command configures the restricted VLAN that must be configured on the port when the RADIUS server returns an authentication failure.

Users must specify the EHS script to be invoked when the logEvent_PORT_tmnxPortDot1xAuthLostGRvC event is raised and configure the restricted VLAN in the script using the parameter passed to the script.

The no form of this command disables the restricted VLAN assignment.

Default

no restricted-service

Parameters

service-id

Specifies the service under which the SAP must be configured using the EHS script. The EHS script must use the NULL (“:0”) tag to configure a NULL SAP if the optional vlan-id parameter is not configured. If vlan-id is configured, it is used as the SAP tag.

Values

service-id: 1 to 2147483647

svc-name: 64 characters maximum

vlan-id

Specifies the VLAN ID. The configured vlan-id cannot be modified if the config>port>ethernet>dot1x>port-control command is set to auto. To modify the service and VLAN ID information, users must set the config>port>ethernet>dot1x>port-control command to either force-auth or force-unauth.

Values

0 to 4049

Context

config>port>ethernet>dot1x

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures the period during which the 7210 SAS waits for the RADIUS server to responds to its access request message. When this timer expires, the 7210 SAS will re-send the access request message, up to the specified number times.

The no form of this command reverts to the default value.

Default

30

Parameters

seconds

Specifies the server timeout period in seconds.

Values

1 to 300

Context

config>port>ethernet>dot1x

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures the period during which the 7210 SAS waits for a client to respond to its EAPOL messages. When the supplicant-timeout expires, the 802.1x authentication session is considered to have failed.

The no form of this command reverts to the default value.

Default

30

Parameters

seconds

Specifies the server timeout period in seconds.

Values

1 to 300

Context

config>port>ethernet>dot1x

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures the period after which the 7210 SAS sends a new EAPOL request message.

The no form of this command reverts to the default value.

Default

30

Parameters

seconds

Specifies the server transmit period in seconds.

Values

1 to 3600

Context

config>port>ethernet>dot1x

Platforms

7210 SAS-D, 7210 SAS-Dxp, 7210 SAS-K 2F1C2T, 7210 SAS-K 2F6C4T, 7210 SAS-K 3SFP+ 8C

Description

This command enables tunneling of dot1x frames. With dot1x tunneling enabled, dot1x frames received on the port are transparently forwarded to the remote end of the service. To forwards dot1x frames transparently the port on which tunneling is enabled must be configured with NULL SAP and the NULL SAP must be configured in an Epipe service. Tunneling is not supported for any other port encapsulation or when using any other service.

Additionally, dot1x protocol must be disabled on the port (using the command configure port ethernet dot1x port-control force-auth) before dot1x tunneling can be enabled using this command. If dot1x is configured to use either force-unauath or auto, then dot1x tunneling cannot be enabled. If dot1x tunneling is enabled, then the user cannot configure either force-unauth or auto.

The no form of this command disables dot1x tunneling.

Default

no tunneling

Context

config>port>ethernet>dot1x

Platforms

7210 SAS-Dxp

Description

This command enables VLAN-based authentication. To use VLAN-based authentication, 802.1x authentication must first be enabled using the port-control auto command.

When VLAN-based authentication is enabled, all traffic for all VLANs on the port is blocked. VLAN-tagged EAPOL messages are forwarded to the RADIUS server for authentication. If authentication is successful, the VLAN corresponding to the successfully authenticated VLAN-tagged EAPOL message is unblocked and traffic is processed for the configured service. If authentication fails, the VLAN continues to be blocked.

VLAN authentication and MAC authentication are mutually exclusive and cannot be configured on the same port.

The no form of this command disables VLAN-based authentication.

Default

no vlan-auth

Context

config>port>ethernet

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures Ethernet loop detection attributes.

Context

config>port>ethernet>dwl

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures the time interval between keep-alive PDUs.

Default

no keep-alive

Parameters

timer

Specifies the time interval, in seconds, between keep-alive PDUs.

Values

1 to 120

Context

config>port>ethernet>dwl

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures the minimum wait time before re-enabling the port after loop detection.

Default

no retry-timeout

Parameters

timer

Specifies the minimum wait time before re-enabling port after loop detection.

Values

0, 10 to 160

Context

config>port>ethernet>dot1x

Platforms

7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C

Description

This command configures MACsec functionality for the port.

The no form of this command disables MACsec functionality for the port.

Context

config>port>ethernet>dot1x>macsec

Platforms

7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C

Description

This command configures the CA linked to the MACsec port. The CA provides the MACsec parameter that is used or is negotiated with other peers.

The no form of this command removes the CA from the MACsec port.

Parameters

ca-name

Specifies the CA to use for the MACsec port, up to 32 characters.

Context

config>port>ethernet>dot1x>macsec

Platforms

7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C

Description

This command configures the destination MAC address of the EAPoL to the unicast address of the MACsec peer, so that the EAPoL and MKA signaling is unicast between two peers.

The EAPoL destination MAC address uses a destination multicast MAC address of 01:80:C2:00:00:03. Some networks cannot tunnel these packets over the network or consume them, causing the MKA session to fail.

The no form of this command reverts to the default value.

Default

no eapol-destination-address

Parameters

mac

Specifies the destination MAC address used by the EAPoL MKA packets of the specified port. The 48-bit MAC address is in the form aa:bb:cc:dd:ee:ff or aa-bb-cc-dd-ee-ff, where aa, bb, cc, dd, ee, and ff are hexadecimal numbers.

Context

config>port>ethernet>dot1x>macsec

Platforms

7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C

Description

This command configures the protocols for which packets are not secured with MACsec when MACsec is enabled on a port. When this command is enabled in a CA that is attached to an interface, MACsec is not enabled for all packets of the specified protocols that are sent and received on the link.

When this command is enabled on a port where MACsec is configured, packets of the specified protocols are sent and received in clear text.

Default

no exclude-protocol

Parameters

protocol-name

Specifies the protocol name.

Values

cdp, lacp, lldp, eapol-start

Context

config>port>ethernet>dot1x>macsec

Platforms

7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C

Description

This command configures the maximum number of peers allowed for the specified MACsec instance.

The no form of this command reverts to the default value.

Default

no max-peer

Parameters

max-peer

Specifies the maximum number of peers supported on this port.

Values

0 to 32

Context

config>port>ethernet>dot1x>macsec

Platforms

7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C

Description

This command specifies that all non-MACsec-secured traffic that is received on the port is dropped.

When this command is disabled, all arriving traffic is accepted, regardless of whether traffic is MACsec-secured.

The no form of this command disables the command.

Default

rx-must-be-encrypted

Context

config>port>ethernet>dot1x>macsec

Platforms

7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C

Description

This command shuts down MACsec functionality, including MKA negotiation, for the port. In the shutdown state, the port is not MACsec capable and all PDUs are transmitted and expected without encryption and authentication.

A valid CA that is different from another CA configured on a sub-port of this port, and also a max-peer value larger than 0, must be configured. In MACsec-enabled mode, packets are sent in clear text until the MKA session is up, and if the rx-must-be-encrypted command is configured on the port, all incoming packets without MACsec are dropped.

The no form of this command sets the port to MACsec-enabled mode.

Default

shutdown

Context

config>port>ethernet

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

Commands in this context configure Link Layer Discovery Protocol (LLDP) parameters on the specified port.

Context

config>port>ethernet>lldp

Platforms

7210 SAS-D, 7210 SAS-Dxp, 7210 SAS-K 2F1C2T, 7210 SAS-K 2F6C4T, 7210 SAS-K 3SFP+ 8C

Description

This command configures tunneling for LLDP frames that use the nearest-bridge-dest-mac as destination MAC address. If enabled using the tunnel-nearest-bridge-dest-mac command, all frames received with the appropriate destination MAC address are forwarded transparently to the remote end of the service. To forward these frames transparently the port on which tunneling is enabled must be configured with NULL SAP and the NULL SAP must be configured in an Epipe service. Tunneling is not supported for any other port encapsulation or when using any other service.

Additionally, before enabling tunneling, admin status for LLDP dest-mac nearest-bridge must be set to disabled or Tx only, using the command admin-status available under configure> port> ethernet> lldp> dest-mac nearest-bridge. If admin-status for dest-mac nearest-bridge is set to receive and process nearest-bridge LLDPDUs (that is, if either rx or tx-rx is set) then it overrides the tunnel-nearest-bridge-dest-mac command.

The following table describes the behavior for LLDP with different values set in use for admin-status and when tunneling is enabled or disabled.

The no form of this command disable LLDP tunneling for frames using nearest-bridge destination MAC address.

Default

no tunnel-nearest-bridge-dest-mac

Context

config>port>ethernet>lldp

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures destination MAC address parameters to use by LLDP.

Parameters

nearest-bridge

Specifies to use the nearest bridge

nearest-non-tmpr

Specifies to use the nearest non-Two-Port MAC Relay (TPMR).

nearest-customer

Specifies to use the nearest customer.

Context

config>port>ethernet>lldp>dstmac

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command specifies the desired administrative status of the local LLDP agent.

Parameters

rx

Specifies that the LLDP agent receives LLDP frames on this port, also indicates that the LLDP agent does not transmit LLDP frames.

tx

Specifies that the LLDP agent transmits LLDP frames on this port and does not store any information about the remote systems connected.

tx-rx

Specifies that the LLDP agent transmits and receives LLDP frames on this port.

disabled

Specifies that the LLDP agent does not transmit or receive LLDP frames on this port. If there is remote systems information which is received on this port and stored in other tables, before the port's admin status becomes disabled, then the information will naturally age out.

Context

config>port>ethernet>lldp>dest-mac

Platforms

7210 SAS-Dxp

Description

Commands in this context configure the administrative status of the local LLDP-MED agent.

Context

config>port>ethernet>lldp>dest-mac>lldp-med

Platforms

7210 SAS-Dxp

Description

This command configures the administrative status of the local LLDP-MED agent.

The no form of this command disables the ability to specify the administrative status of the local LLDP-MED agent.

Default

admin-status disabled

Parameters

tx-rx

Keyword to configure the LLDP agent to transmit and receive LLDP-MED TLVs on the configured port.

disabled

Keyword to indicate that the LLDP-MED agent does not transmit or receive LLDP frames with LLDP-MED TLVs on the configured port. If no remote systems information is received on the configured port and stored in other tables before the port administrative status becomes disabled, the information ages out.

Context

config>port>ethernet>lldp>dest-mac>lldp-med

Platforms

7210 SAS-Dxp

Description

This command configures the network policy information that the node transmits in the Network Policy TLV.

Up to four policies can be configured, as long as the configured application-type for each policy is different. The system includes multiple Network Policy TLVs (if multiple policies are configured), with the policy for each application-type included in its own Network Policy TLV. The Network Policy TLV order in the LLDP message matches the policy order configured in the CLI. If the system cannot fit all configured Network Policy TLVs into the LLDP frame because of size constraints, a log message is generated for the last network policy that exceeds the frame size. The error notification allows the user to adjust the configuration appropriately.

The user must explicitly configure a network policy (with values assigned to the endpoint device) before the transmission and reception of LLDP-MED TLVs on the port is allowed. If a port is configured to transmit the LLDP-MED Network Policy TLV but the user has not configured a network policy, the node will not transmit the Network Policy TLV. The node processes the received Network Policy TLV and displays the TLV values in the LLDP message received from the peer provided that the LLDP-MED receiving processing and Network Policy TLV processing is enabled, regardless of whether network-policy is configured.

The no form of this command removes the association of all network policies with the port.

Default

no network-policy

Parameters

policy-id

Specifies network policy ID.

Values

1 to 65535

Context

config>port>ethernet>lldp>dest-mac>lldp-med

Platforms

7210 SAS-Dxp

Description

This command configures the specific transmit TLV from the network connectivity TLV set to be transmitted on the port if LLDP-MED TLV transmission is enabled on the port.

The no form of this command removes the configuration.

Default

no tx-tlvs

Parameters

network-policy

Keyword to enable the transmission of the network policy TLV.

mac-phy-config-status

Keyword to enable the transmission of the MAC-PHY Configuration and Status TLV.

Context

config>port>ethernet>lldp>dstmac

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command enables LLDP notifications.

The no form of this command disables LLDP notifications.

Context

config>port>ethernet>lldp>dest-mac

Platforms

7210 SAS-D, 7210 SAS-Dxp, 7210 SAS-K 2F1C2T, 7210 SAS-K 2F6C4T, 7210 SAS-K 3SFP+ 8C

Description

This command specifies how to encode the PortID TLV transmit to the peer. Some versions of the NSP NFM-P require the default tx-local (if Index value) setting to properly build the Layer Two topology map using LLDP. Changing this setting to transmit the ifName (tx-if-name) or ifAlias (tx-if-alias), instead of the ifIndex (tx-local), may affect the ability of the NSP NFM-P to build the Layer 2 topology map using LLDP.

The no form of this command reverts to the default value.

Default

portid-subtype tx-local

Parameters

tx-if-alias

Keyword to transmit the ifAlias String (subtype 1) that describes the port as stored in the IF-MIB, either user configured or the default entry (for example, 10/100/Gig Ethernet SFP).

tx-if-name

Keyword to transmit the ifName string (subtype 5) that describes the port as stored in the IF-MIB ifName information.

tx-local

Keyword to specify the interface ifIndex value (subtype 7) as the PortID.

Context

config>port>ethernet>lldp>dstmac

Platforms

7210 SAS-D, 7210 SAS-Dxp, 7210 SAS-K 2F1C2T, 7210 SAS-K 2F6C4T, 7210 SAS-K 3SFP+ 8C

Description

This command specifies which management address to transmit. The operator can choose to send the system IPv4 IP Address, system IPv6 address, or both.

Default

no tx-mgmt-address

Parameters

system

Keyword to transmit the system IPv4 address.

system-ipv6

Keyword to transmit the system IPv6 address. This parameter can only be used on platforms that support IPv6.

Context

config>port>ethernet>lldp>dstmac

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command specifies which LLDP TLVs to transmit.

The no form of this command reverts to the default value.

Default

no tx-tlvs

Parameters

port-desc

Specifies that the LLDP agent should transmit port description TLVs.

sys-name

Specifies that the LLDP agent should transmit system name TLVs.

sys-desc

Specifies that the LLDP agent should transmit system description TLVs.

sys-cap

Specifie that the LLDP agent should transmit system capabilities TLVs.

Context

config>port>ethernet

Platforms

7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C

Description

Commands in this context configure network port parameters.

Context

config>port>access

Platforms

7210 SAS-D, 7210 SAS-Dxp, 7210 SAS-K 2F1C2T, 7210 SAS-K 2F6C4T, 7210 SAS-K 3SFP+ 8C

Description

Commands in this context configure access uplink egress port parameters.

Context

config>port>ethernet>network

config>port>ethernet>access>uplink

config>port>ethernet>access

Platforms

7210 SAS-D, 7210 SAS-Dxp, 7210 SAS-K 2F1C2T, 7210 SAS-K 2F6C4T, 7210 SAS-K 3SFP+ 8C; the network context applies only to the 7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C

Description

This command configures an accounting policy that can apply to an interface.

An accounting policy must be configured before it can be associated with an interface. If the accounting policy-id does not exist, an error is returned.

Accounting policies associated with service billing can only be applied to SAPs. Accounting policies associated with network ports can only be associated with interfaces. Only one accounting policy can be associated with an interface at a time.

The no form of this command removes the accounting policy association from the network interface, and the accounting policy reverts to the default. No accounting policies are specified by default. You must explicitly specify a policy. If configured, the accounting policy configured as the default is used.

Parameters

policy-id

Specifies the accounting policy-id of an existing policy. Accounting policies record either service (access) or network information. A network accounting policy can only be associated with the network port configurations. Accounting policies are configured in the config>log>accounting-policy context.

Values

1 to 99

Context

config>port>ethernet>access>uplink

config>port>ethernet>access

config>port>ethernet>network

Platforms

7210 SAS-D, 7210 SAS-Dxp, 7210 SAS-K 2F1C2T, 7210 SAS-K 2F6C4T, 7210 SAS-K 3SFP+ 8C; the network context applies only to the 7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C

Description

This command enables the collection of accounting and statistical data for the network interface. When applying accounting policies, the data, by default, is collected in the appropriate records and written to the designated billing file.

The no form of this command ensures that the statistics are still accumulated by the IOM cards, however, the CPU does not obtain the results and write them to the billing file.

If the collect-stats command is issued again (enabled), then the counters written to the billing file will include the traffic collected while the no collect-stats command was in effect.

Default

no collect-stats

Context

config>port>ethernet>network

config>port>ethernet>access>uplink

Platforms

7210 SAS-Dxp, 7210 SAS-K 2F1C2T, 7210 SAS-K 2F6C4T, 7210 SAS-K 3SFP+ 8C; the network context applies only to the 7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C

Description

This command specifies the existing network queue policy which defines queue parameters such as CIR and PIR rates, as well as forwarding-class to queue mappings. The network-queue policy is defined in the config>qos>network-queue context.

A default CBS is defined for the queues and this is not configurable.

Default

default

Parameters

name

Specifies an existing network-queue policy name.

Context

config

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command enables the context for configuring Link Aggregation Group (LAG) attributes.

A LAG can be used to group multiple ports into one logical link. The aggregation of multiple physical links allows for load sharing and provides seamless redundancy. If one of the links fails, traffic will be redistributed over the remaining links.

There are three possible settings for autonegotiation:

• ‟on” or enabled with full port capabilities advertised

• ‟off” or disabled where there is no autonegotiation advertisements

• ‟limited” where a single speed/duplex is advertised.

When autonegotiation is enabled on a port, the link attempts to automatically negotiate the link speed and duplex parameters. If autonegotiation is enabled, the configured duplex and speed parameters are ignored.

When autonegotiation is disabled on a port, the port does not attempt to autonegotiate and will only operate at the speed and duplex settings configured for the port. Note that disabling autonegotiation on gigabit ports is not allowed as the IEEE 802.3 specification for gigabit Ethernet requires autonegotiation be enabled for far end fault indication.

If the autonegotiate limited keyword option is specified the port will autonegotiate but will only advertise a specific speed and duplex. The speed and duplex advertised are the speed and duplex settings configured for the port. One use for limited mode is for multispeed gigabit ports to force gigabit operation while keeping autonegotiation is enabled for compliance with IEEE 801.3.

The system requires that autonegotiation be disabled or limited for ports in a LAG to guarantee a specific port speed.

The no form of this command deletes the LAG from the configuration. Deleting a LAG can only be performed while the LAG is administratively shut down. Any dependencies such as IP-Interfaces configurations must be removed from the configuration before issuing the no lag command.

Parameters

lag-id

The LAG identifier, expressed as a decimal integer.

Values

1 to 3 (7210 SAS-K 2F1C2T)

1 to 5 (7210 SAS-D)

1 to 6 (7210 SAS-Dxp, 7210 SAS-K 2F6C4T, 7210 SAS-K 3SFP+ 8C)

Context

config>lag

Platforms

Supported on 7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C

Description

This command enables OSPF costing of a Link Aggregation Group (LAG) based on the available aggregated operational bandwidth.

The path cost is dynamically calculated based on the interface bandwidth. OSPF path cost can be changed through the interface metric or the reference bandwidth.

If dynamic cost is configured, then costing is applied based on the total number of links configured and the cost advertised is inversely proportional to the number of links available at the time. This is provided that the number of links that are up exceeds the configured LAG threshold value at which time the configured threshold action determines if, and at what cost, this LAG will be advertised.

For example:

Assume a physical link in OSPF has a cost associated with it of 100, and the LAG consists of four physical links. The cost associated with the logical link is 25. If one link fails then the cost would automatically be adjusted to 33.

If dynamic cost is not configured and OSPF autocost is configured, then costing is applied based on the total number of links configured. This cost will remain static provided the number of links that are up exceeds the configured LAG threshold value at which time the configured threshold action determines if and at what cost this LAG will be advertised.

If dynamic cost is configured and OSPF autocost is not configured, the cost is determined by the cost configured on the OSPF metric provided the number of links available exceeds the configured LAG threshold value at which time the configured threshold action determines if this LAG will be advertised.

If neither dynamic-cost nor OSPF autocost are configured, the cost advertised is determined by the cost configured on the OSPF metric provided the number of links available exceeds the configured LAG threshold value at which time the configured threshold action determines if this LAG will be advertised.

The no form of this command removes dynamic costing from the LAG.

Default

no dynamic-cost

Context

config>lag

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures the encapsulation method used to distinguish customer traffic on a LAG. The encapsulation type is configurable on a LAG port. The LAG port and the port member encapsulation types must match when adding a port member.

If the encapsulation type of the LAG port is changed, the encapsulation type on all the port members will also change. The encapsulation type can be changed on the LAG port only if there is no interface associated with it. If the MTU is set to a non default value, it will be reset to the default value when the encap type is changed. All traffic on the port belongs to a single service or VLAN.

The no form of this command reverts the default.

Default

null

Parameters

dot1q

Specifies that the ingress frames will carry 802.1Q tags where each tag signifies a different service.

null

Specifies that the ingress frames will not use any tags to delineate a service. As a result, only one service can be configured on a port with a null encapsulation type.

qinq

Specifies QinQ encapsulation.

Context

config>lag

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command specifies the timer, in tenths of seconds, which controls the delay between detecting that a LAG is down (all active ports are down) and reporting it to the higher levels.

A non-zero value can be configured, for example, when active/standby signaling is used in a 1:1 fashion to avoid informing higher levels during the small time interval between detecting that the LAG is down and the time needed to activate the standby link.

Default

0

Parameters

down hold-down-time

Specifies the hold-time for event reporting.

Values

0 to 2000

Context

config>lag

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command enables the Link Aggregation Control Protocol (LACP) mode for aggregated Ethernet interfaces only. Per the IEEE 802.3ax standard (formerly 802.3ad), the LACP provides a standardized means for exchanging information between Partner Systems on a link. This allow their Link Aggregation Control instances to reach agreement on the identity of the Link Aggregation Group to which the link belongs, move the link to that Link Aggregation Group, and enable its transmission and reception functions in an orderly manner. LACP can be enabled on a maximum of 256 ports.

Default

no lacp

Parameters

mode

Specifies the mode in which LACP will operate.

Values

passive — Starts transmitting LACP packets only after receiving packets.

active — Initiates the transmission of LACP packets.

power-off — Disables transmitter of standby ports.

admin-key

Specifies an administrative key value to identify the channel group on each port configured to use LACP. This value should be configured only in exceptional cases. If it is not specified, a random key is assigned.

Values

1 to 65535

system-id

Specifies a 6 byte value expressed in the same notation as MAC address

Values

xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx

priority

Specifies the system priority to be used for the LAG in the context of the MC-LAG.

Values

0 to 65535

Context

config>lag

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command specifies the interval signaled to the peer and tells the peer at which rate it should transmit.

Default

fast

Parameters

slow

Specifies that packets will transmit every 30 seconds.

fast

Specifies that packets will transmit every second.

Context

config>lag

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command enables LACP message transmission on standby links.

The no form of this command disables LACP message transmission. This command should be disabled for compatibility when using active/standby groups. This forces a timeout of the standby links by the peer. Use the no form if the peer does not implement the correct behavior regarding the LACP sync bit.

Default

lacp-xmit-stdby

Context

config>lag

Platforms

7210 SAS-K 2F1C2T, 7210 SAS-K 3SFP+ 8C

Description

This command specifies the operational group to monitor. The state of the operational group affects the state of this LAG. When the operational group is inactive, the state of the LAG goes down, and the LAG uses the configured lag>standby-signaling mechanism (lacp or power-off) to signal its unavailability to the CE.

The no form of this command reverts to the default.

Default

no monitor-oper-group

Parameters

name

Specifies the name of the operational group, up to 32 characters.

Context

config>lag

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command adds ports (links) to a Link Aggregation Group (LAG).

The port configuration of the first port added to the LAG is used as a basis to compare to subsequently added ports. If a discrepancy is found with a newly added port, that port is not added to the LAG.

The maximum number of ports allowed in a LAG depends on the platform. The following are the limits per platform:

• On the 7210 SAS-D and 7210 SAS-Dxp, a maximum of four 1 GE ports can be added to or removed from the LAG. The 7210 SAS-Dxp also supports up to two 10 GE ports in a LAG.

• On the 7210 SAS-K 2F1C2T, 7210 SAS-K 2F6C4T, and 7210 SAS-K 3SFP+ 8C, a maximum of three 1 GE ports can be added to or removed from the LAG.

• On the 7210 SAS-K 3SFP+ 8C, a maximum of two 10 GE ports can be added to or removed from a LAG.

All ports added to a LAG must share the same characteristics (speed, duplex, and so on). An error message is displayed when adding ports that do not share the same characteristics. Hold timers must be 0. Ports that are part of a LAG must be configured with autonegotiation set to limited mode or disabled. No ports are defined as members of a LAG.

The no form of this command removes ports from the LAG.

Parameters

port-id

Specifies the port ID configured or displayed in the slot/mda/port format.

priority priority

Specifies the port priority used by LACP. The port priority is also used to determine the primary port. The port with the lowest priority is the primary port. In the event of a tie, the smallest port ID becomes the primary port.

Values

1 to 65535

subgroup sub-group-id

Specifies a LAG subgroup. Subgroups in a LAG must be configured on only one side of the LAG, not both. Having only one side perform the active/standby selection guarantees a consistent selection and fast convergence. The active/standby selection is signaled through LACP to the other side. The hold time should be configured when using subgroups to prevent the LAG going down when switching between active and standby links, in the case where no links are usable for a short time, especially in case a subgroup consists of one member.

Values

1 to 2

Context

config>lag

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures the behavior for the Link Aggregation Group (LAG) if the number of operational links is equal to or below a threshold level.

The no form of this command reverts to the default values.

Default

‟0” action down

Parameters

value

Specifies the decimal integer threshold number of operational links for the LAG at or below which the configured action will be invoked. If the number of operational links exceeds the port-threshold value, any action taken for being below the threshold value will cease.

Values

0 to 3

action [{down}]

Specifies the action to take if the number of active links in the LAG is at or below the threshold value.

If the number of operational links is equal to or less than the configured threshold value and action down is specified, the LAG is brought to an operationally down state. The LAG is considered as operationally up only when the number of operational links exceeds the configured threshold value.

Context

config>lag

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command specifies which selection criteria should be used to select the active sub-group.

Default

highest-count

Parameters

highest-count

Specifies sub-group with the highest number of eligible members.

highest-weight

Specifies sub-group with the highest aggregate weight.

best-port

Specifies the selection criteria used with ‟power-off” mode of operation. The sub-group containing the port with highest priority port. In case of equal port priorities the sub-group containing the port with the lowest port-id is taken

slave-to-partner

Specifies that, together with the selection criteria, the slave-to-partner keyword should be used to select the active sub-group. An eligible member is a lag-member link which can potentially become active. This means it is operationally up (not disabled) for use by the remote side. The slave-to-partner parameter can be used to control whether or not this latter condition is taken into account.

Context

config>lag

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command specifies how the state of a member port is signaled to the remote side when the status corresponding to this member port has the standby value.

Default

lacp

Parameters

lacp

Specifies that LACP protocol is used to signal standby links of the LAG.

power-off

The laser of the standby links in the LAG are shutoff to indicate standby status. It allows user to use LAG standby link feature without LACP, if the peer node does not support LACP.

Context

config

Platforms

7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C

Description

Commands in this context configure redundancy operations.

Context

config>redundancy

Platforms

7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C

Description

Commands in this context configure multi-chassis parameters.

Context

config>redundancy>multi-chassis

Platforms

7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C

Description

This command configures the MC-LAG peer.

Parameters

ip-address

Specifies the IP address.

Values

ipv4-address: a.b.c.d

create

Specifies the mandatory keyword to create the peer.

Context

config>redundancy>multi-chassis>peer

Platforms

7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C

Description

This command configures the authentication key used between this node and the multi-chassis peer. The authentication key can be any combination of letters or numbers.

Parameters

authentication-key

Specifies the authentication key. Allowed values are any string up to 20 characters composed of printable, 7-bit ASCII characters. If the string contains special characters (#, $, spaces, and so on), the entire string must be enclosed within double quotes.

hash-key

Specifies the hash key. The key can be any combination of ASCII characters up to 33 (hash1-key) or 55 (hash2-key) characters (encrypted). If spaces are used in the string, enclose the entire string in quotation marks.

hash

Specifies that the key is entered in an encrypted form. If the hash or hash2 parameter is not used, the key is assumed to be in a non-encrypted, clear text form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.

hash2

Specifies that the key is entered in a more complex encrypted form that involves more variables then the key value alone, this means that the hash2 encrypted variable cannot be copied and pasted. If the hash or hash2 parameter is not used, the key is assumed to be in a non-encrypted, clear text form. For security, all keys are stored in encrypted form in the configuration file with the hash or hash2 parameter specified.

Context

config>redundancy>multi-chassis>peer

Platforms

7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C

Description

This command adds a text description for the ring path.

The no form of this command removes the text description.

Default

‟”

Parameters

string

Specifies the text description up to 160 characters.

Context

config>redundancy>multi-chassis>peer>mc-ep

Platforms

7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C

Description

This command specifies the number of keep-alive intervals that the local node waits for packets from the MC-EP peer before assuming failure. After this time interval, all the mc-endpoints configured in the service revert to single chassis behavior, activating the best local pseudowire.

The no form of this command reverts the multiplier to the default value.

Default

3

Parameters

multiplier

Specifies the hold time applied on neighbor failure.

Values

2 to 25

Context

config>redundancy>multi-chassis>peer>mc-lag

Platforms

7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C

Description

Commands in this context configure multi-chassis LAG operations and related parameters.

The no form of this command administratively disables multi-chassis LAG. MC-LAG can be issued only when MC-LAG is shutdown.

Context

config>redundancy>multi-chassis>peer>mc-lag

Platforms

7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C

Description

This command specifies the standby node wait interval to receive packets from the active node before assuming a redundant-neighbor node failure. This delay in switchover operation is required to accommodate different factors influencing node failure detection rate, such as IGP convergence or HA switch-over times, and to prevent the standby node from taking action prematurely.

The no form of this command reverts the multiplier to the default value.

Default

3

Parameters

multiplier

Specifies the time interval that the standby node waits for packets from the active node before assuming a redundant-neighbor node failure.

Values

2 to 25

Context

config>redundancy>multi-chassis>peer>mc-lag

Platforms

7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C

Description

This command sets the interval at which keep-alive messages are exchanged between two systems participating in MC-LAG. These keep-alive messages are used to determine remote-node failure and the interval is set in deciseconds.

The no form of this command reverts the interval to the default value.

Default

10

Parameters

interval

Specifies the time interval expressed in deciseconds.

Values

5 to 500

Context

config>redundancy>multi-chassis>peer>mc-lag

Platforms

7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C

Description

This command defines a LAG that forms a redundant-pair for MC-LAG with a LAG configured on the specific peer. The same LAG group can be defined only in the scope of 1 peer. In order for MC-LAG to become operational, all configured parameters (lacp-key, system-id, system-priority) must be the same on both nodes of the same redundant pair.

In the partner system (the system connected to all links forming MC-LAG), all ports using the same lacp-key, system-id, system-priority are considered part of the same LAG. To achieve this in MC operation, both redundant-pair nodes must be configured with the same values. In case of a mismatch, MC-LAG is kept in the oper-down state.

The no form of this command disables MC-LAG for the specific LAG (regardless of the mode).

Parameters

lag-id

Specifies the LAG identifier, expressed as a decimal integer. Specifying the lag-id allows mismatch between lag-id on a redundant-pair. If no lag-id is specified, it is assumed that the neighbor system uses the same lag-id as a part of the specific MC-LAG. If no matching MC-LAG group can be found between neighbor systems, the individual LAGs will operate as usual (no MC-LAG operation is established).

Values

1 to 6 (for 7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C)

lacp-key admin-key

Specifies a 16-bit key that needs to be configured in the same manner on both sides of the MC-LAG for the MC-LAG to come up.

Values

1 to 65535

system-id system-id

Specifies a 6-byte value expressed in the same notation as MAC address.

Values

xx:xx:xx:xx:xx:xx — xx (00 to FF)

remote-lag lag-id

Specifies the LAG ID on the remote system.

Values

1 to 6

system-priority system-priority

Specifies the system priority to be used in the context of the MC-LAG. The partner system will consider all ports using the same lacp-key, system-id, and system-priority as part of the same LAG.

Values

1 to 65535

Context

config>redundancy>multi-chassis>peer

Platforms

7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C

Description

This command specifies the source address used to communicate with the multi-chassis peer.

Parameters

ip-address

Specifies the source address used to communicate with the multi-chassis peer.

Context

config>redundancy>multi-chassis>peer

Platforms

7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C

Description

This command specifies the peer name used to communicate with the multi-chassis peer.

Parameters

name

Specifies the name used to communicate with the multi-chassis peer.

Context

config>redundancy>multi-chassis>peer

Platforms

7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C

Description

Commands in this context configure synchronization parameters.

Context

config>redundancy>multi-chassis>peer>sync

Platforms

7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C

Description

This command specifies whether IGMP snooping information should be synchronized with the multi-chassis peer.

Default

no igmp-snooping

Context

config>redundancy>multi-chassis>peer>sync

Platforms

7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C

Description

This command specifies the port when synchronized with the multi-chassis peer and the synchronization tag to be use when synchronizing the port with the multi-chassis peer.

Parameters

port-id

Specifies the port to synchronize with the multi-chassis peer.

lag-id

Specifies the LAG ID to synchronize with the multi-chassis peer.

sync-tag sync-tag

Specifies the synchronization tag to use while synchronizing this port with the multi-chassis peer.

Context

config>redundancy>multi-chassis>peer>sync>port

Platforms

7210 SAS-K 2F6C4T and 7210 SAS-K 3SFP+ 8C

Description

This command configures a range of encapsulation values.

Parameters

encap-range

Specifies a range of encapsulation values on a port to be synchronized with a multi-chassis peer.

Values

Dot1Q	start-qtag-end-qtag
start-qtag	0 to 4094
end-qtag	0 to 4094
QinQ	- <qtag1>.<start-qtag2>-<qtag1>.<end-qtag2>
	- <start-qtag1>.*-<end-qtag1>.*
qtag1	1 to 4094
start-qtag1	1 to 4094
end-qtag1	1 to 4094
start-qtag2	1 to 4094
end-qtag2	1 to 4094

sync-tag sync-tag

Specifies a synchronization tag, up to 32 characters, to use when synchronizing this encapsulation value range with the multi-chassis peer.

Context

config

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures a G.8032 protected Ethernet ring. G.8032 Rings may be configured as major rings with two paths (a&b).

The no form of this command deletes the Ethernet ring specified by the ring-id.

Default

no eth-ring

Parameters

ring-id

Specifies the ring ID.

Values

1 to 128

Context

config>eth-ring

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures the guard time for an Eth-Ring. The guard timer is standard and is configurable from 100 ms to 2 seconds

The no form of this command reverts to the default guard-time.

Default

5 deciseconds

Parameters

value

Specifies the guard-time.

Values

1 to 20 deciseconds

Context

config>eth-ring

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures the revert time for an Eth-Ring. It ranges from 60 seconds to 720 second by 1 second intervals.

The no form of this command means non-revertive mode and revert time essentially is 0 meaning the revert timers are not set.

Default

300 seconds

Parameters

value

Specifies the guard-time, in seconds.

Values

60 to 720

Context

config>eth-ring

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures eth-ring dampening timers.

This command specifies the timer, which controls the delay between detecting that ring path is down and reporting it to the G.8032 protection module. If a non-zero value is configured, the CPM will wait for the time specified in the value parameter before reporting it to the G.8032 protection module.

This command specifies the timer, which controls the delay between detecting that ring path is up and reporting it to the G.8032 protection module. If a non-zero value is configured, the CPM will wait for the time specified in the value parameter before reporting it to the G.8032 protection module.

The no form of this command reverts the up and down timer to the default values.

Parameters

down-timeout

Specifies the down timeout, in deciseconds.

Values

0 to 5000

up-timeout

Specifies the hold-time for reporting the recovery, in deciseconds.

Values

0 to 5000

Context

config>eth-ring

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures the G.8032 Ring Protection Link (RPL) type as owner or neighbor. When RPL owner or neighbor is specified, either the a or b path must be configured with the RPL end command. An owner is responsible for operation of the RPL link. Configuring the RPL as neighbor is optional (can be left as no rpl-node) but if the command is used the nbr is mandatory.

The no form of this command removes the connection to the RPL link.

Default

no rpl-node

Parameters

owner

Specifies a G.8032 RPL type of owner.

nbr

Specifies a G.8032 RPL type of neighbor.

Context

config>eth-ring

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This optional command configures the MAC address of the RPL control. The default is to use the chassis MAC for the ring control. This command allows the chassis MAC to be overridden with another MAC address.

The no form of this command removes the RPL link.

Default

no node-id

Parameters

mac

Specifies a MAC address in the format xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx

Context

config>eth-ring>sub-ring

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command specifies this ring-id to be sub-ring as defined in G.8032. By declaring the ring as a sub-ring object, the ring will only have one valid path and the sub-ring will be connected to a major ring or a VPLS instance. The virtual-link parameter declares that a sub-ring is connected to another ring and that control messages can be sent over the attached ring to the other side of the sub-ring. The non-virtual channel parameter declares that a sub-ring may be connected to a another ring or to a VPLS instance but that no control messages from the sub-ring use the attached ring or VPLS instance. The non-virtual channel behavior is standard G.8032 capability.

The no form of this command deletes the sub-ring and its virtual channel associations.

Default

no sub-ring

Parameters

virtual-link

Specifies the interconnection is to a ring and a virtual link will be used.

non-virtual-link

Specifies the interconnection is to a ring or a VPLS instance and a virtual link will not be used.

Context

config>eth-ring

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command configures the backward compatibility logic for the Ethernet rings.

Default

2

Parameters

version

Specifies the Ethernet ring version.

Values

1 to 2

Context

config>eth-ring

Platforms

Supported on all 7210 SAS platforms as described in this document

Description

This command assigns the ring (major or sub-ring) path to a port and defines the Ring APS tag. Rings typically have two paths, a and b.

The no form of this command removes the path a or b.

Default

no path

Parameters

path

Specifies the path.

Values

a, b

port-id

Specifies the port ID.

Values

slot/mda/port