Command Reference for AlliedWare Plus™ Version 5.4.8-0.x

Allied Telesis AT-AR1050V-60 User Manual

Displayed below is the user manual for AT-AR1050V-60 by Allied Telesis which is a product in the Wired Routers category. This manual has pages.

Related Manuals

Allied Telesis AT-CV5001AC-60 Manual

Allied Telesis AT-CVMNT12 Manual

Allied Telesis AT-STACKXG-00 Manual

Allied Telesis AT-SBX31GS24 Manual

Allied Telesis AT-2911SX/LC-901 Manual

Allied Telesis MC102XLPCI Manual

Allied Telesis AT-9000/28SP-E-50 Manual

Allied Telesis 2716POE/FXSC Manual

C613-50228-01 Rev A

AR2050V

SECURE VPN ROUTER

Command Reference for

AlliedWare Plus™ Version 5.4.8-0.x

Acknowledgments

This product includes software developed by the University of California, Berkeley and its contributors.

This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit. For information about this see

www.openssl.org/

This product includes software licensed under v2 and v3 of the GNU General Public License, available from: www.gnu.org/licenses/

gpl2.html and www.gnu.org/licenses/gpl.html respectively.

Source code for all GPL licensed software in this product can be obtained from the Allied Telesis GPL Code Download Center at:

www.alliedtelesis.com/support/

Allied Telesis is committed to meeting the requirements of the open source licenses including the GNU General Public License (GPL) and

will make all required source code available.

If you would like a copy of the GPL source code contained in Allied Telesis products, please send us a request by registered mail including

a check for US$15 to cover production and shipping costs and a CD with the GPL code will be mailed to you.

GPL Code Request

Allied Telesis Labs (Ltd)

PO Box 8011

Christchurch

New Zealand

Allied Telesis, AlliedWare Plus, Allied Telesis Management Framework, EPSRing, SwitchBlade, VCStack, and VCStack Plus are trademarks or

registered trademarks in the United States and elsewhere of Allied Telesis, Inc.

Microsoft and Internet Explorer are registered trademarks of Microsoft Corporation. All other product names, company names, logos or

other designations mentioned herein may be trademarks or registered trademarks of their respective owners.

 2018 Allied Telesis, Inc.

Allied Telesis, Inc. reserves the right to make changes in specifications and other information contained in this document without prior

written notice. The information provided herein is subject to change without notice. In no event shall Allied Telesis, Inc. be liable for any

incidental, special, indirect, or consequential damages whatsoever, including but not limited to lost profits, arising out of or related to this

manual or the information contained herein, even if Allied Telesis, Inc. has been advised of, known, or should have known, the possibility

of such damages.

C613-50228-01 Rev A Command Reference for AR2050V 3

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

Contents

PART 1: Setup and Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . 103

Chapter 1: CLI Navigation Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . 104

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 104

configure terminal . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 105

disable (Privileged Exec mode) . . . . . . . . . . . . . . . . . . . . . . . . . . . . 106

do . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107

enable (Privileged Exec mode) . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108

end . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110

exit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111

help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 112

logout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113

show history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114

Chapter 2: File and Configuration Management Commands . . . . . . . . . . . . . . 115

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115

autoboot enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 118

boot config-file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 119

boot config-file backup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 121

boot system . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 122

boot system backup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 123

cd . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 124

copy (filename) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 125

copy current-software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 127

copy debug . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 128

copy running-config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 129

copy startup-config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 130

copy zmodem . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 131

create autoboot . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 132

delete . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133

delete debug . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 134

dir . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 135

edit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 137

edit (filename) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 138

C613-50228-01 Rev A Command Reference for AR2050V 4

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

erase factory-default . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 139

erase startup-config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 140

ip tftp source-interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 141

ipv6 tftp source-interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 142

mkdir . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 143

move . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 144

move debug . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 145

pwd . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 146

rmdir . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 147

show autoboot . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 148

show boot . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 149

show file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 151

show file systems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 152

show running-config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 154

show running-config interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . 158

show startup-config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 160

show version . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 161

unmount . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 166

write file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 167

write memory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 168

write terminal . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 169

Chapter 3: User Access Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 170

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 170

clear line console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 172

clear line vty . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 173

enable password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 174

enable secret . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 177

exec-timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 180

flowcontrol hardware (asyn/console) . . . . . . . . . . . . . . . . . . . . . . . . 182

length (asyn) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 184

line . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 185

privilege level . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 187

security-password history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 188

security-password forced-change . . . . . . . . . . . . . . . . . . . . . . . . . . 189

security-password lifetime . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 190

security-password min-lifetime-enforce . . . . . . . . . . . . . . . . . . . . . . 191

security-password minimum-categories . . . . . . . . . . . . . . . . . . . . . . 192

security-password minimum-length . . . . . . . . . . . . . . . . . . . . . . . . . 193

security-password reject-expired-pwd . . . . . . . . . . . . . . . . . . . . . . . 194

security-password warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 195

service advanced-vty . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 196

service password-encryption . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 197

service telnet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 198

show privilege . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 199

show security-password configuration . . . . . . . . . . . . . . . . . . . . . . . 200

show security-password user . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 201

show telnet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 202

show users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 203

telnet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 204

telnet server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 205

terminal length . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 206

terminal resize . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 207

C613-50228-01 Rev A Command Reference for AR2050V 5

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

username . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 208

Chapter 4: GUI Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 210

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 210

atmf topology-gui enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 211

http port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 212

http secure-port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 213

log event-host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 214

service http . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 215

show http . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 216

update webgui now . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 217

Chapter 5: Update Manager Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . 218

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 218

show resource . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 219

update webgui now . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 220

Chapter 6: System Configuration and Monitoring Commands . . . . . . . . . . . . 221

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 221

banner exec . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 223

banner login (system) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 225

banner motd . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 227

clock set . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 229

clock summer-time date . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 230

clock summer-time recurring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 232

clock timezone . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 234

hostname . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 235

max-fib-routes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 237

max-static-routes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 239

no debug all . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 240

reboot . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 242

reload . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 243

show clock . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 244

show cpu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 246

show cpu history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 249

show debugging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 251

show interface memory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 252

show memory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 254

show memory allocations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 256

show memory history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 258

show memory pools . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 259

show memory shared . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 260

show process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 261

show reboot history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 263

show router-id . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 264

show system . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 265

show system environment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 266

show system interrupts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 267

show system mac . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 268

show system pci device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 269

show system pci tree . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 270

show system serialnumber . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 271

C613-50228-01 Rev A Command Reference for AR2050V 6

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

show tech-support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 272

speed (asyn) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 274

terminal monitor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 276

undebug all . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 277

Chapter 7: Logging Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 278

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 278

clear exception log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 281

clear log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 282

clear log buffered . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 283

clear log external . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 284

clear log permanent . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 285

connection-log events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 286

copy buffered-log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 287

copy permanent-log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 288

default log buffered . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 289

default log console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 290

default log email . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 291

default log external . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 292

default log host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 293

default log monitor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 294

default log permanent . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 295

log buffered . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 296

log buffered (filter) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 297

log buffered exclude . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 300

log buffered size . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 303

log console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 304

log console (filter) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 305

log console exclude . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 308

log date-format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 311

log email . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 312

log email (filter) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 313

log email exclude . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 316

log email time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 319

log external . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 321

log external (filter) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 323

log external exclude . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 326

log external rotate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 329

log external size . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 331

log facility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 332

log host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 334

log host (filter) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 336

log host exclude . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 339

log host source . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 342

log host time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 343

log monitor (filter) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 345

log monitor exclude . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 348

log permanent . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 351

log permanent (filter) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 352

log permanent exclude . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 355

log permanent size . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 358

log-rate-limit nsm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 359

log trustpoint . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 360

C613-50228-01 Rev A Command Reference for AR2050V 7

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

log url-requests . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 361

show connection-log events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 362

show counter log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 363

show exception log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 364

show log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 365

show log config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 367

show log external . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 369

show log permanent . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 370

show running-config log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 371

unmount . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 372

Chapter 8: Scripting Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 373

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 373

activate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 374

echo . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 375

wait . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 376

Chapter 9: Interface Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 377

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 377

description (interface) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 378

interface (to configure) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 379

ip tcp adjust-mss . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 381

ipv6 tcp adjust-mss . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 383

mru jumbo . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 385

mtu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 386

service statistics interfaces counter . . . . . . . . . . . . . . . . . . . . . . . . . . 388

show interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 389

show interface brief . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 393

show interface memory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 394

show interface status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 396

shutdown . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 398

Chapter 10: USB Cellular Modem Commands . . . . . . . . . . . . . . . . . . . . . . . . 399

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 399

apn . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 400

chat-script . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 402

encapsulation ppp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 403

show cellular . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 405

show system usb . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 408

usb mode-switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 410

Chapter 11: Port Mirroring Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . 412

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 412

mirror interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 413

show mirror . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 415

show mirror interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 416

PART 2: Interfaces and Layer 2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 417

Chapter 12: Switching Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 418

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 418

C613-50228-01 Rev A Command Reference for AR2050V 8

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

backpressure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 420

clear mac address-table dynamic . . . . . . . . . . . . . . . . . . . . . . . . . . . 422

clear mac address-table static . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 424

clear port counter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 425

debug platform packet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 426

duplex . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 428

flowcontrol (switch port) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 430

linkflap action . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 432

mac address-table acquire . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 433

mac address-table ageing-time . . . . . . . . . . . . . . . . . . . . . . . . . . . . 434

mac address-table static . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 435

platform load-balancing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 436

polarity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 437

show debugging platform packet . . . . . . . . . . . . . . . . . . . . . . . . . . 438

show flowcontrol interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 439

show interface err-disabled . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 440

show interface switchport . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 441

show mac address-table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 442

show platform . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 444

show platform port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 445

show storm-control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 447

speed . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 448

storm-control level . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 450

undebug platform packet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 451

Chapter 13: Bridging Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 452

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 452

ageing-time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 454

bridge . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 455

bridge-group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 456

clear mac-filter counter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 457

default-action . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 458

default-protocol-action . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 460

l3-filtering enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 461

mac-filter-group egress . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 462

mac-filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 463

mac-filter-group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 464

mac-learning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 465

protocol ethii (macfilter) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 466

protocol novell (macfilter) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 468

protocol sap (macfilter) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 470

protocol snap (macfilter) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 472

rule (macfilter) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 474

rule ip (macfilter) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 476

rule ipv6 (macfilter) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 478

show bridge . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 480

show bridge macaddr . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 482

show mac-filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 483

Chapter 14: VLAN Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 485

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 485

show vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 486

C613-50228-01 Rev A Command Reference for AR2050V 9

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

switchport access vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 487

switchport mode access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 488

switchport mode trunk . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 489

switchport trunk allowed vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 490

switchport trunk native vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 493

vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 494

vlan database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 495

Chapter 15: Spanning Tree Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . 496

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 496

clear spanning-tree statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 498

clear spanning-tree detected protocols (RSTP and MSTP) . . . . . . . . . . . 499

debug mstp (RSTP and STP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 500

instance priority (MSTP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 504

instance vlan (MSTP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 506

region (MSTP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 508

revision (MSTP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 509

show debugging mstp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 510

show spanning-tree . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 511

show spanning-tree brief . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 514

show spanning-tree mst . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 515

show spanning-tree mst config . . . . . . . . . . . . . . . . . . . . . . . . . . . . 516

show spanning-tree mst detail . . . . . . . . . . . . . . . . . . . . . . . . . . . . 517

show spanning-tree mst detail interface . . . . . . . . . . . . . . . . . . . . . . 519

show spanning-tree mst instance . . . . . . . . . . . . . . . . . . . . . . . . . . . 521

show spanning-tree mst instance interface . . . . . . . . . . . . . . . . . . . . 522

show spanning-tree mst interface . . . . . . . . . . . . . . . . . . . . . . . . . . 523

show spanning-tree mst detail interface . . . . . . . . . . . . . . . . . . . . . . 524

show spanning-tree statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 526

show spanning-tree statistics instance . . . . . . . . . . . . . . . . . . . . . . . 528

show spanning-tree statistics instance interface . . . . . . . . . . . . . . . . . 529

show spanning-tree statistics interface . . . . . . . . . . . . . . . . . . . . . . . 531

show spanning-tree vlan range-index . . . . . . . . . . . . . . . . . . . . . . . . 533

spanning-tree autoedge (RSTP and MSTP) . . . . . . . . . . . . . . . . . . . . . 534

spanning-tree cisco-interoperability (MSTP) . . . . . . . . . . . . . . . . . . . . 535

spanning-tree edgeport (RSTP and MSTP) . . . . . . . . . . . . . . . . . . . . . 536

spanning-tree enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 537

spanning-tree errdisable-timeout enable . . . . . . . . . . . . . . . . . . . . . . 539

spanning-tree errdisable-timeout interval . . . . . . . . . . . . . . . . . . . . . 540

spanning-tree force-version . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 541

spanning-tree forward-time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 542

spanning-tree guard root . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 543

spanning-tree hello-time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 544

spanning-tree link-type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 545

spanning-tree max-age . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 546

spanning-tree max-hops (MSTP) . . . . . . . . . . . . . . . . . . . . . . . . . . . 547

spanning-tree mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 548

spanning-tree mst configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . 549

spanning-tree mst instance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 550

spanning-tree mst instance path-cost . . . . . . . . . . . . . . . . . . . . . . . . 551

spanning-tree mst instance priority . . . . . . . . . . . . . . . . . . . . . . . . . 553

spanning-tree mst instance restricted-role . . . . . . . . . . . . . . . . . . . . . 554

spanning-tree mst instance restricted-tcn . . . . . . . . . . . . . . . . . . . . . 556

C613-50228-01 Rev A Command Reference for AR2050V 10

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

spanning-tree path-cost . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 557

spanning-tree portfast (STP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 558

spanning-tree portfast bpdu-filter . . . . . . . . . . . . . . . . . . . . . . . . . . 560

spanning-tree portfast bpdu-guard . . . . . . . . . . . . . . . . . . . . . . . . . 562

spanning-tree priority (bridge priority) . . . . . . . . . . . . . . . . . . . . . . . 564

spanning-tree priority (port priority) . . . . . . . . . . . . . . . . . . . . . . . . . 565

spanning-tree restricted-role . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 566

spanning-tree restricted-tcn . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 567

spanning-tree transmit-holdcount . . . . . . . . . . . . . . . . . . . . . . . . . . 568

undebug mstp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 569

Chapter 16: Link Aggregation Commands . . . . . . . . . . . . . . . . . . . . . . . . . . 570

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 570

channel-group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 572

clear lacp counters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 574

debug lacp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 575

lacp global-passive-mode enable . . . . . . . . . . . . . . . . . . . . . . . . . . . 576

lacp port-priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 577

lacp system-priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 578

lacp timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 579

show debugging lacp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 581

show diagnostic channel-group . . . . . . . . . . . . . . . . . . . . . . . . . . . 582

show etherchannel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 583

show etherchannel detail . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 584

show etherchannel summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 585

show lacp sys-id . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 586

show lacp-counter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 587

show port etherchannel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 588

show static-channel-group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 589

static-channel-group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 590

undebug lacp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 592

Chapter 17: 802.1Q Encapsulation Commands . . . . . . . . . . . . . . . . . . . . . . . 593

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 593

encapsulation dot1q . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 594

Chapter 18: PPP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 596

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 596

debug ppp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 598

encapsulation ppp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 601

interface (PPP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 603

ip address negotiated . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 604

ip tcp adjust-mss . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 606

ip unnumbered . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 608

ipv6 tcp adjust-mss . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 610

keepalive (PPP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 612

mtu (PPP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 614

peer default ip address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 615

peer neighbor-route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 617

ppp authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 619

ppp authentication refuse . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 621

ppp hostname . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 623

C613-50228-01 Rev A Command Reference for AR2050V 11

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

ppp ipcp dns . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 625

ppp ipcp dns suffix-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 627

ppp ipcp ip-override . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 629

ppp password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 630

ppp service-name (PPPoE) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 631

ppp timeout idle . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 632

ppp username . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 633

show debugging ppp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 634

show interface (PPP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 635

undebug ppp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 639

Chapter 19: PPP over Ethernet (PPPoE) Commands . . . . . . . . . . . . . . . . . . . . 640

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 640

clear pppoe-ac statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 641

debug pppoe-ac . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 642

destination l2tp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 643

l2tp peer-address dns-lookup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 644

l2tp peer-address radius-lookup group . . . . . . . . . . . . . . . . . . . . . . . 646

l2tp peer-address static . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 647

l2tp profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 649

ppp-auth-protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 651

pppoe-ac . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 652

pppoe-ac-service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 653

proxy-auth . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 654

service-name . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 655

show debugging pppoe ac . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 657

show pppoe-ac config-check . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 658

show pppoe-ac connections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 660

show pppoe-ac statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 662

show running-config pppoe-ac . . . . . . . . . . . . . . . . . . . . . . . . . . . . 665

PART 3: Routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 666

Chapter 20: IP Addressing and Protocol Commands . . . . . . . . . . . . . . . . . . . . 667

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 667

arp-aging-timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 669

arp (IP address MAC) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 670

arp log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 672

arp opportunistic-nd . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 675

arp-reply-bc-dmac . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 677

clear arp-cache . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 678

debug ip packet interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 680

ip address (IP Addressing and Protocol) . . . . . . . . . . . . . . . . . . . . . . . 682

ip directed-broadcast . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 684

ip forward-protocol udp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 686

ip gratuitous-arp-link . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 688

ip helper-address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 690

ip limited-local-proxy-arp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 692

ip local-proxy-arp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 694

ip proxy-arp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 695

ip redirects . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 696

ip tcp synack-retries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 697

C613-50228-01 Rev A Command Reference for AR2050V 12

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

ip tcp timeout established . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 698

ip unreachables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 699

local-proxy-arp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 701

optimistic-nd . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 702

ping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 703

show arp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 705

show debugging ip packet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 708

show ip forwarding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 710

show ip interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 711

show ip interface vrf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 712

show ip sockets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 714

show ip traffic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 717

tcpdump . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 719

traceroute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 720

undebug ip packet interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 721

Chapter 21: Domain Name Service (DNS) Commands . . . . . . . . . . . . . . . . . . . 722

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 722

clear ip dns forwarding cache . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 724

ddns enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 725

ddns-update-method . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 726

ddns-update now . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 727

debug ddns . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 728

debug ip dns forwarding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 729

description (Domain List) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 730

domain (Domain List) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 731

host-name (DDNS) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 732

ip ddns-update-method . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 733

ip dns forwarding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 734

ip dns forwarding cache . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 735

ip dns forwarding dead-time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 736

ip dns forwarding domain-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 737

ip dns forwarding retry . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 738

ip dns forwarding source-interface . . . . . . . . . . . . . . . . . . . . . . . . . . 739

ip dns forwarding timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 740

ip domain-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 741

ip domain-lookup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 742

ip domain-name . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 743

ip name-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 744

ipv6 ddns-update-method . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 746

password (DDNS) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 747

ppp ipcp dns . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 748

ppp ipcp dns suffix-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 750

retry-interval (DDNS) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 752

show ddns-update-method status . . . . . . . . . . . . . . . . . . . . . . . . . . 753

show debugging ip dns forwarding . . . . . . . . . . . . . . . . . . . . . . . . . 754

show hosts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 755

show ip dns forwarding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 756

show ip dns forwarding cache . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 757

show ip dns forwarding server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 759

show ip domain-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 761

show ip domain-name . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 762

show ip name-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 763

C613-50228-01 Rev A Command Reference for AR2050V 13

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

suppress-ipv4-updates (DDNS) . . . . . . . . . . . . . . . . . . . . . . . . . . . . 765

undebug (DDNS) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 766

update-interval (DDNS) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 767

update-url (DDNS) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 768

use-ipv4-for-ipv6-updates (DDNS) . . . . . . . . . . . . . . . . . . . . . . . . . . 771

username (DDNS) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 772

Chapter 22: IPv6 Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 773

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 773

clear ipv6 neighbors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 775

ipv6 address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 776

ipv6 address autoconfig . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 778

ipv6 enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 780

ipv6 eui64-linklocal . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 782

ipv6 forwarding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 783

ipv6 multicast forward-slow-path-packet . . . . . . . . . . . . . . . . . . . . . . 784

ipv6 nd accept-ra-pinfo . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 785

ipv6 nd current-hoplimit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 786

ipv6 nd managed-config-flag . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 788

ipv6 nd minimum-ra-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 789

ipv6 nd other-config-flag . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 791

ipv6 nd prefix . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 792

ipv6 nd ra-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 794

ipv6 nd ra-lifetime . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 795

ipv6 nd reachable-time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 796

ipv6 nd retransmission-time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 798

ipv6 nd suppress-ra . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 800

ipv6 neighbor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 801

ipv6 opportunistic-nd . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 802

ipv6 route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 803

ipv6 unreachables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 804

ping ipv6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 805

show ipv6 forwarding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 806

show ipv6 interface brief . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 807

show ipv6 neighbors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 808

show ipv6 route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 809

show ipv6 route summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 811

traceroute ipv6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 812

Chapter 23: Routing Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 813

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 813

ip route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 814

ipv6 route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 817

max-fib-routes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 818

max-static-routes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 820

maximum-paths . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 821

show ip route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 822

show ip route database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 825

show ip route summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 828

show ipv6 route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 830

show ipv6 route summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 832

C613-50228-01 Rev A Command Reference for AR2050V 14

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

Chapter 24: RIP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 833

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 833

accept-lifetime . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 835

address-family ipv4 (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 837

alliedware-behavior . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 838

cisco-metric-behavior (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 840

clear ip rip route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 841

debug rip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 843

default-information originate (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . 844

default-metric (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 845

distance (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 846

distribute-list (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 847

fullupdate (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 848

ip summary-address rip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 849

ip prefix-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 850

ip rip authentication key-chain . . . . . . . . . . . . . . . . . . . . . . . . . . . . 852

ip rip authentication mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 854

ip rip authentication string . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 857

ip rip receive-packet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 859

ip rip receive version . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 860

ip rip send-packet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 861

ip rip send version . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 862

ip rip send version 1-compatible . . . . . . . . . . . . . . . . . . . . . . . . . . . 865

ip rip split-horizon . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 867

key . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 868

key chain . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 869

key-string . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 870

maximum-prefix . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 871

neighbor (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 872

network (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 873

passive-interface (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 875

recv-buffer-size (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 876

redistribute (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 877

restart rip graceful . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 879

rip restart grace-period . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 880

route (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 881

router rip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 882

send-lifetime . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 883

show debugging rip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 885

show ip prefix-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 886

show ip protocols rip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 887

show ip rip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 888

show ip rip database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 889

show ip rip interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 890

show ip rip vrf database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 891

show ip rip vrf interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 892

timers (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 893

undebug rip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 895

version (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 896

Chapter 25: RIPng for IPv6 Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . 898

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 898

C613-50228-01 Rev A Command Reference for AR2050V 15

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

aggregate-address (IPv6 RIPng) . . . . . . . . . . . . . . . . . . . . . . . . . . . . 900

clear ipv6 rip route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 901

debug ipv6 rip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 902

default-information originate (IPv6 RIPng) . . . . . . . . . . . . . . . . . . . . . 903

default-metric (IPv6 RIPng) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 904

distribute-list (IPv6 RIPng) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 905

ipv6 prefix-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 906

ipv6 rip metric-offset . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 908

ipv6 rip split-horizon . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 910

ipv6 router rip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 912

neighbor (IPv6 RIPng) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 913

passive-interface (IPv6 RIPng) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 914

recv-buffer-size (IPv6 RIPng) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 915

redistribute (IPv6 RIPng) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 916

route (IPv6 RIPng) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 917

router ipv6 rip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 918

show debugging ipv6 rip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 919

show ipv6 prefix-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 920

show ipv6 protocols rip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 921

show ipv6 rip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 922

show ipv6 rip database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 923

show ipv6 rip interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 924

timers (IPv6 RIPng) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 925

undebug ipv6 rip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 926

Chapter 26: OSPF Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 927

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 927

area default-cost . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 930

area authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 931

area filter-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 932

area nssa . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 933

area range . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 935

area stub . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 937

area virtual-link . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 938

auto-cost reference bandwidth . . . . . . . . . . . . . . . . . . . . . . . . . . . . 941

bandwidth . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 943

capability opaque . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 944

capability restart . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 945

clear ip ospf process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 946

compatible rfc1583 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 947

debug ospf events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 948

debug ospf ifsm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 949

debug ospf lsa . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 950

debug ospf nfsm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 951

debug ospf nsm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 952

debug ospf packet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 953

debug ospf route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 954

default-information originate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 955

default-metric (OSPF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 956

distance (OSPF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 957

enable db-summary-opt . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 959

host area . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 960

ip ospf authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 961

C613-50228-01 Rev A Command Reference for AR2050V 16

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

ip ospf authentication-key . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 962

ip ospf cost . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 964

ip ospf database-filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 965

ip ospf dead-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 966

ip ospf disable all . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 967

ip ospf hello-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 968

ip ospf message-digest-key . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 969

ip ospf mtu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 971

ip ospf mtu-ignore . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 972

ip ospf network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 973

ip ospf priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 974

ip ospf resync-timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 975

ip ospf retransmit-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 976

ip ospf transmit-delay . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 977

max-concurrent-dd . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 978

maximum-area . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 979

neighbor (OSPF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 980

network area . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 981

ospf abr-type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 983

ospf restart grace-period . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 984

ospf restart helper . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 985

ospf router-id . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 987

overflow database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 988

overflow database external . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 989

passive-interface (OSPF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 990

redistribute (OSPF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 991

restart ospf graceful . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 993

router ospf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 994

router-id . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 996

show debugging ospf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 997

show ip ospf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 998

show ip ospf border-routers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1001

show ip ospf database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1002

show ip ospf database asbr-summary . . . . . . . . . . . . . . . . . . . . . . . 1004

show ip ospf database external . . . . . . . . . . . . . . . . . . . . . . . . . . . 1005

show ip ospf database network . . . . . . . . . . . . . . . . . . . . . . . . . . . 1007

show ip ospf database nssa-external . . . . . . . . . . . . . . . . . . . . . . . . 1008

show ip ospf database opaque-area . . . . . . . . . . . . . . . . . . . . . . . . 1010

show ip ospf database opaque-as . . . . . . . . . . . . . . . . . . . . . . . . . 1011

show ip ospf database opaque-link . . . . . . . . . . . . . . . . . . . . . . . . 1012

show ip ospf database router . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1013

show ip ospf database summary . . . . . . . . . . . . . . . . . . . . . . . . . . 1015

show ip ospf interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1018

show ip ospf neighbor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1019

show ip ospf route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1021

show ip ospf virtual-links . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1022

show ip protocols ospf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1023

summary-address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1024

timers spf exp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1025

undebug ospf events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1026

undebug ospf ifsm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1027

undebug ospf lsa . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1028

undebug ospf nfsm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1029

C613-50228-01 Rev A Command Reference for AR2050V 17

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

undebug ospf nsm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1030

undebug ospf packet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1031

undebug ospf route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1032

Chapter 27: OSPFv3 for IPv6 Commands . . . . . . . . . . . . . . . . . . . . . . . . . . 1033

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1033

abr-type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1036

area authentication ipsec spi . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1037

area default-cost (IPv6 OSPF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1039

area encryption ipsec spi esp . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1040

area range (IPv6 OSPF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1043

area stub (IPv6 OSPF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1045

area virtual-link (IPv6 OSPF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1046

area virtual-link authentication ipsec spi . . . . . . . . . . . . . . . . . . . . . 1048

area virtual-link encryption ipsec spi . . . . . . . . . . . . . . . . . . . . . . . . 1050

auto-cost reference bandwidth (IPv6 OSPF) . . . . . . . . . . . . . . . . . . . 1053

bandwidth . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1055

clear ipv6 ospf process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1056

debug ipv6 ospf events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1057

debug ipv6 ospf ifsm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1058

debug ipv6 ospf lsa . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1059

debug ipv6 ospf nfsm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1060

debug ipv6 ospf packet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1061

debug ipv6 ospf route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1062

default-information originate . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1063

default-metric (IPv6 OSPF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1064

distance (IPv6 OSPF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1065

ipv6 ospf authentication spi . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1067

ipv6 ospf cost . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1069

ipv6 ospf dead-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1071

ipv6 ospf display route single-line . . . . . . . . . . . . . . . . . . . . . . . . . 1072

ipv6 ospf encryption spi esp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1073

ipv6 ospf hello-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1076

ipv6 ospf neighbor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1077

ipv6 ospf network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1079

ipv6 ospf priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1080

ipv6 ospf retransmit-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1081

ipv6 ospf transmit-delay . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1082

ipv6 router ospf area . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1083

max-concurrent-dd (IPv6 OSPF) . . . . . . . . . . . . . . . . . . . . . . . . . . . 1085

passive-interface (IPv6 OSPF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1086

redistribute (IPv6 OSPF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1087

restart ipv6 ospf graceful . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1089

router ipv6 ospf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1090

router-id (IPv6 OSPF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1091

show debugging ipv6 ospf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1092

show ipv6 ospf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1093

show ipv6 ospf database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1095

show ipv6 ospf database external . . . . . . . . . . . . . . . . . . . . . . . . . 1097

show ipv6 ospf database grace . . . . . . . . . . . . . . . . . . . . . . . . . . . 1098

show ipv6 ospf database inter-prefix . . . . . . . . . . . . . . . . . . . . . . . 1099

show ipv6 ospf database inter-router . . . . . . . . . . . . . . . . . . . . . . . 1100

show ipv6 ospf database intra-prefix . . . . . . . . . . . . . . . . . . . . . . . 1101

C613-50228-01 Rev A Command Reference for AR2050V 18

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

show ipv6 ospf database link . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1102

show ipv6 ospf database network . . . . . . . . . . . . . . . . . . . . . . . . . 1103

show ipv6 ospf database router . . . . . . . . . . . . . . . . . . . . . . . . . . . 1105

show ipv6 ospf interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1110

show ipv6 ospf neighbor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1112

show ipv6 ospf route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1114

show ipv6 ospf virtual-links . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1116

summary-address (IPv6 OSPF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1117

timers spf (IPv6 OSPF) (deprecated) . . . . . . . . . . . . . . . . . . . . . . . . 1119

timers spf exp (IPv6 OSPF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1120

undebug ipv6 ospf events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1121

undebug ipv6 ospf ifsm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1122

undebug ipv6 ospf lsa . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1123

undebug ipv6 ospf nfsm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1124

undebug ipv6 ospf packet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1125

undebug ipv6 ospf route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1126

Chapter 28: BGP and BGP4+ Commands . . . . . . . . . . . . . . . . . . . . . . . . . . 1127

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1127

address-family . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1133

aggregate-address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1135

auto-summary (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1138

bgp aggregate-nexthop-check . . . . . . . . . . . . . . . . . . . . . . . . . . . 1139

bgp always-compare-med . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1140

bgp bestpath as-path ignore . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1141

bgp bestpath compare-confed-aspath . . . . . . . . . . . . . . . . . . . . . . 1142

bgp bestpath compare-routerid . . . . . . . . . . . . . . . . . . . . . . . . . . 1143

bgp bestpath med . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1144

bgp bestpath med remove-recv-med . . . . . . . . . . . . . . . . . . . . . . . 1146

bgp bestpath med remove-send-med . . . . . . . . . . . . . . . . . . . . . . . 1147

bgp client-to-client reflection . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1148

bgp cluster-id . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1149

bgp confederation identifier . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1151

bgp confederation peers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1152

bgp config-type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1154

bgp dampening . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1156

bgp damp-peer-oscillation (BGP only) . . . . . . . . . . . . . . . . . . . . . . . 1158

bgp default ipv4-unicast . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1159

bgp default local-preference (BGP only) . . . . . . . . . . . . . . . . . . . . . 1160

bgp deterministic-med . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1161

bgp enforce-first-as . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1163

bgp fast-external-failover . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1164

bgp graceful-restart . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1165

bgp graceful-restart graceful-reset . . . . . . . . . . . . . . . . . . . . . . . . . 1167

bgp log-neighbor-changes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1168

bgp memory maxallocation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1170

bgp nexthop-trigger-count . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1171

bgp nexthop-trigger delay . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1172

bgp nexthop-trigger enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1173

bgp rfc1771-path-select (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . 1174

bgp rfc1771-strict (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1175

bgp router-id . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1176

bgp scan-time (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1177

C613-50228-01 Rev A Command Reference for AR2050V 19

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

bgp update-delay . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1178

clear bgp * . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1179

clear bgp (IPv4 or IPv6 address) . . . . . . . . . . . . . . . . . . . . . . . . . . . 1180

clear bgp (ASN) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1182

clear bgp external . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1183

clear bgp peer-group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1184

clear bgp ipv6 (ipv6 address) (BGP4+ only) . . . . . . . . . . . . . . . . . . . . 1185

clear bgp ipv6 dampening (BGP4+ only) . . . . . . . . . . . . . . . . . . . . . 1186

clear bgp ipv6 flap-statistics (BGP4+ only) . . . . . . . . . . . . . . . . . . . . 1187

clear bgp ipv6 (ASN) (BGP4+ only) . . . . . . . . . . . . . . . . . . . . . . . . . 1188

clear bgp ipv6 external (BGP4+ only) . . . . . . . . . . . . . . . . . . . . . . . 1189

clear bgp ipv6 peer-group (BGP4+ only) . . . . . . . . . . . . . . . . . . . . . 1190

clear ip bgp * (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1191

clear ip bgp (IPv4) (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1193

clear ip bgp dampening (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . 1194

clear ip bgp flap-statistics (BGP only) . . . . . . . . . . . . . . . . . . . . . . . 1195

clear ip bgp (ASN) (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1196

clear ip bgp external (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . 1197

clear ip bgp peer-group (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . 1198

clear ip prefix-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1199

debug bgp (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1200

distance (BGP and BGP4+) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1201

exit-address-family . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1203

ip community-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1204

ip community-list expanded . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1206

ip community-list standard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1208

ip extcommunity-list expanded . . . . . . . . . . . . . . . . . . . . . . . . . . . 1210

ip extcommunity-list standard . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1212

ip prefix-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1214

ipv6 prefix-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1216

match as-path . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1218

match community . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1219

max-paths . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1221

neighbor activate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1222

neighbor advertisement-interval . . . . . . . . . . . . . . . . . . . . . . . . . . 1225

neighbor allowas-in . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1228

neighbor as-origination-interval . . . . . . . . . . . . . . . . . . . . . . . . . . 1231

neighbor attribute-unchanged . . . . . . . . . . . . . . . . . . . . . . . . . . . 1233

neighbor capability graceful-restart . . . . . . . . . . . . . . . . . . . . . . . . 1236

neighbor capability orf prefix-list . . . . . . . . . . . . . . . . . . . . . . . . . . 1239

neighbor capability route-refresh . . . . . . . . . . . . . . . . . . . . . . . . . . 1242

neighbor collide-established . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1245

neighbor default-originate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1247

neighbor description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1250

neighbor disallow-infinite-holdtime . . . . . . . . . . . . . . . . . . . . . . . . 1253

neighbor dont-capability-negotiate . . . . . . . . . . . . . . . . . . . . . . . . 1255

neighbor ebgp-multihop . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1258

neighbor enforce-multihop . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1261

neighbor filter-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1264

neighbor interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1267

neighbor local-as . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1268

neighbor maximum-prefix . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1270

neighbor next-hop-self . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1273

C613-50228-01 Rev A Command Reference for AR2050V 20

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

neighbor override-capability . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1276

neighbor passive . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1278

neighbor password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1280

neighbor peer-group (add a neighbor) . . . . . . . . . . . . . . . . . . . . . . 1284

neighbor peer-group (create a peer-group) . . . . . . . . . . . . . . . . . . . 1286

neighbor port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1287

neighbor prefix-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1289

neighbor remote-as . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1292

neighbor remove-private-AS (BGP only) . . . . . . . . . . . . . . . . . . . . . 1295

neighbor restart-time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1297

neighbor route-map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1299

neighbor route-reflector-client (BGP only) . . . . . . . . . . . . . . . . . . . . 1303

neighbor route-server-client (BGP only) . . . . . . . . . . . . . . . . . . . . . . 1305

neighbor send-community . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1306

neighbor shutdown . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1309

neighbor soft-reconfiguration inbound . . . . . . . . . . . . . . . . . . . . . . 1311

neighbor timers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1314

neighbor transparent-as . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1317

neighbor transparent-nexthop . . . . . . . . . . . . . . . . . . . . . . . . . . . 1319

neighbor unsuppress-map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1321

neighbor update-source . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1324

neighbor version (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1327

neighbor weight . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1329

network (BGP and BGP4+) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1332

network synchronization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1335

redistribute (into BGP or BGP4+) . . . . . . . . . . . . . . . . . . . . . . . . . . 1336

restart bgp graceful (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . 1338

router bgp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1339

route-map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1340

set as-path . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1343

set community . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1344

show bgp ipv6 (BGP4+ only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1346

show bgp ipv6 community (BGP4+ only) . . . . . . . . . . . . . . . . . . . . . 1347

show bgp ipv6 community-list (BGP4+ only) . . . . . . . . . . . . . . . . . . 1349

show bgp ipv6 dampening (BGP4+ only) . . . . . . . . . . . . . . . . . . . . . 1350

show bgp ipv6 filter-list (BGP4+ only) . . . . . . . . . . . . . . . . . . . . . . . 1351

show bgp ipv6 inconsistent-as (BGP4+ only) . . . . . . . . . . . . . . . . . . 1352

show bgp ipv6 longer-prefixes (BGP4+ only) . . . . . . . . . . . . . . . . . . 1353

show bgp ipv6 neighbors (BGP4+ only) . . . . . . . . . . . . . . . . . . . . . . 1354

show bgp ipv6 paths (BGP4+ only) . . . . . . . . . . . . . . . . . . . . . . . . . 1357

show bgp ipv6 prefix-list (BGP4+ only) . . . . . . . . . . . . . . . . . . . . . . 1358

show bgp ipv6 quote-regexp (BGP4+ only) . . . . . . . . . . . . . . . . . . . 1359

show bgp ipv6 regexp (BGP4+ only) . . . . . . . . . . . . . . . . . . . . . . . . 1360

show bgp ipv6 route-map (BGP4+ only) . . . . . . . . . . . . . . . . . . . . . 1361

show bgp ipv6 summary (BGP4+ only) . . . . . . . . . . . . . . . . . . . . . . 1362

show bgp memory maxallocation (BGP only) . . . . . . . . . . . . . . . . . . 1363

show bgp nexthop-tracking (BGP only) . . . . . . . . . . . . . . . . . . . . . . 1364

show bgp nexthop-tree-details (BGP only) . . . . . . . . . . . . . . . . . . . . 1365

show debugging bgp (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . 1366

show ip bgp (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1367

show ip bgp attribute-info (BGP only) . . . . . . . . . . . . . . . . . . . . . . . 1368

show ip bgp cidr-only (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . 1369

show ip bgp community (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . 1370

C613-50228-01 Rev A Command Reference for AR2050V 21

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

show ip bgp community-info (BGP only) . . . . . . . . . . . . . . . . . . . . . 1372

show ip bgp community-list (BGP only) . . . . . . . . . . . . . . . . . . . . . . 1373

show ip bgp dampening (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . 1374

show ip bgp filter-list (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . 1376

show ip bgp inconsistent-as (BGP only) . . . . . . . . . . . . . . . . . . . . . . 1377

show ip bgp longer-prefixes (BGP only) . . . . . . . . . . . . . . . . . . . . . . 1378

show ip bgp neighbors (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . 1379

show ip bgp neighbors connection-retrytime (BGP only) . . . . . . . . . . . 1382

show ip bgp neighbors hold-time (BGP only) . . . . . . . . . . . . . . . . . . 1383

show ip bgp neighbors keepalive (BGP only) . . . . . . . . . . . . . . . . . . 1384

show ip bgp neighbors keepalive-interval (BGP only) . . . . . . . . . . . . . 1385

show ip bgp neighbors notification (BGP only) . . . . . . . . . . . . . . . . . 1386

show ip bgp neighbors open (BGP only) . . . . . . . . . . . . . . . . . . . . . 1387

show ip bgp neighbors rcvd-msgs (BGP only) . . . . . . . . . . . . . . . . . . 1388

show ip bgp neighbors sent-msgs (BGP only) . . . . . . . . . . . . . . . . . . 1389

show ip bgp neighbors update (BGP only) . . . . . . . . . . . . . . . . . . . . 1390

show ip bgp paths (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1391

show ip bgp prefix-list (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . 1392

show ip bgp quote-regexp (BGP only) . . . . . . . . . . . . . . . . . . . . . . . 1393

show ip bgp regexp (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . 1395

show ip bgp route-map (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . 1397

show ip bgp scan (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1398

show ip bgp summary (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . 1399

show ip community-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1401

show ip extcommunity-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1402

show ip prefix-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1403

show ipv6 prefix-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1404

show ip protocols bgp (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . 1405

show route-map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1406

synchronization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1407

timers (BGP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1408

undebug bgp (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1409

Chapter 29: Route Map Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1410

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1410

match as-path . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1412

match community . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1413

match interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1415

match ip address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1416

match ip next-hop . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1418

match ipv6 address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1419

match ipv6 next-hop . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1421

match metric . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1422

match origin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1423

match route-type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1425

match tag . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1426

route-map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1427

set aggregator . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1430

set as-path . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1431

set atomic-aggregate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1432

set comm-list delete . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1433

set community . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1434

set dampening . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1436

C613-50228-01 Rev A Command Reference for AR2050V 22

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

set extcommunity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1438

set ip next-hop (route map) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1440

set ipv6 next-hop . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1441

set local-preference . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1442

set metric . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1443

set metric-type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1445

set origin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1446

set originator-id . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1447

set tag . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1448

set weight . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1449

show route-map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1450

Chapter 30: Policy-based Routing Commands . . . . . . . . . . . . . . . . . . . . . . . 1451

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1451

application-decision . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1452

debug policy-based-routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1454

ip policy-route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1455

ipv6 policy-route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1457

policy-based-routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1459

policy-based-routing enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1460

show ip pbr route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1461

show ipv6 pbr route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1463

show pbr rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1465

show pbr rules brief . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1470

Chapter 31: VRF-lite Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1472

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1472

address-family . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1475

address-family ipv4 (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1477

arp (IP address MAC) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1478

arp opportunistic-nd . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1480

clear arp-cache . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1482

clear ip bgp * (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1484

clear ip bgp (IPv4) (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1486

clear ip rip route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1487

crypto key pubkey-chain knownhosts . . . . . . . . . . . . . . . . . . . . . . . 1489

default-metric (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1491

description (VRF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1492

distance (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1493

distribute-list (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1494

export map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1495

fullupdate (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1496

import map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1497

ip route static inter-vrf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1498

ip route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1499

ip vrf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1502

ip vrf forwarding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1503

max-fib-routes (VRF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1504

max-static-routes (VRF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1506

neighbor next-hop-self . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1507

neighbor remote-as . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1510

neighbor password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1513

C613-50228-01 Rev A Command Reference for AR2050V 23

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

network (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1517

passive-interface (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1519

ping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1520

rd (route distinguisher) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1522

redistribute (into BGP or BGP4+) . . . . . . . . . . . . . . . . . . . . . . . . . . 1523

redistribute (OSPF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1525

redistribute (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1527

route (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1529

route-target . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1530

router ospf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1532

router-id (VRF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1534

show arp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1535

show crypto key pubkey-chain knownhosts . . . . . . . . . . . . . . . . . . . 1538

show ip bgp cidr-only (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . 1540

show ip bgp community (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . 1541

show ip bgp community-list (BGP only) . . . . . . . . . . . . . . . . . . . . . . 1543

show ip bgp dampening (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . 1544

show ip bgp filter-list (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . 1546

show ip bgp inconsistent-as (BGP only) . . . . . . . . . . . . . . . . . . . . . . 1547

show ip bgp longer-prefixes (BGP only) . . . . . . . . . . . . . . . . . . . . . . 1548

show ip bgp prefix-list (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . 1549

show ip bgp quote-regexp (BGP only) . . . . . . . . . . . . . . . . . . . . . . . 1550

show ip bgp regexp (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . 1552

show ip bgp route-map (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . 1554

show ip bgp summary (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . 1555

show ip interface vrf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1557

show ip rip vrf database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1559

show ip rip vrf interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1560

show ip route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1561

show ip route database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1564

show ip route summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1567

show ip vrf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1569

show ip vrf detail . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1570

show ip vrf interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1571

show running-config vrf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1572

ssh . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1573

tcpdump . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1575

telnet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1576

timers (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1577

traceroute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1579

version (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1580

Chapter 32: SD-WAN Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1582

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1582

application-decision . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1584

debug linkmon . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1586

destination (linkmon-probe) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1588

dscp (linkmon-probe) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1589

egress interface (linkmon-probe) . . . . . . . . . . . . . . . . . . . . . . . . . . 1590

enable (linkmon-probe) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1591

interval (linkmon-probe) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1592

ip policy-route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1593

ip-version (linkmon-probe) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1595

C613-50228-01 Rev A Command Reference for AR2050V 24

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

ipv6 policy-route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1596

jitter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1598

latency . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1600

linkmon probe-history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1602

linkmon probe . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1604

linkmon profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1606

member (linkmon-group) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1607

pktloss . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1609

preference . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1611

sample-size (linkmon-probe) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1613

show debugging linkmon . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1614

show linkmon probe . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1615

show linkmon probe-history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1618

show pbr rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1620

show pbr rules brief . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1625

size (linkmon-probe) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1627

source (linkmon-probe) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1628

PART 4: Multicast Applications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1629

Chapter 33: IGMP and IGMP Snooping Commands . . . . . . . . . . . . . . . . . . . . 1630

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1630

clear ip igmp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1632

clear ip igmp group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1633

clear ip igmp interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1634

debug igmp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1635

ip igmp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1636

ip igmp flood specific-query . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1637

ip igmp last-member-query-count . . . . . . . . . . . . . . . . . . . . . . . . . 1638

ip igmp last-member-query-interval . . . . . . . . . . . . . . . . . . . . . . . . 1639

ip igmp maximum-groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1640

ip igmp mroute-proxy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1642

ip igmp proxy-service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1643

ip igmp querier-timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1644

ip igmp query-holdtime . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1645

ip igmp query-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1647

ip igmp query-max-response-time . . . . . . . . . . . . . . . . . . . . . . . . . 1649

ip igmp ra-option . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1651

ip igmp robustness-variable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1652

ip igmp snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1653

ip igmp snooping fast-leave . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1654

ip igmp snooping mrouter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1655

ip igmp snooping querier . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1656

ip igmp snooping report-suppression . . . . . . . . . . . . . . . . . . . . . . . 1657

ip igmp snooping routermode . . . . . . . . . . . . . . . . . . . . . . . . . . . 1658

ip igmp snooping source-timeout . . . . . . . . . . . . . . . . . . . . . . . . . 1660

ip igmp snooping tcn query solicit . . . . . . . . . . . . . . . . . . . . . . . . . 1661

ip igmp source-address-check . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1663

ip igmp startup-query-count . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1664

ip igmp startup-query-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . 1665

ip igmp trusted . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1666

ip igmp version . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1667

C613-50228-01 Rev A Command Reference for AR2050V 25

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

show debugging igmp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1668

show ip igmp groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1669

show ip igmp interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1671

show ip igmp proxy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1673

show ip igmp proxy groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1674

show ip igmp snooping mrouter . . . . . . . . . . . . . . . . . . . . . . . . . . 1676

show ip igmp snooping routermode . . . . . . . . . . . . . . . . . . . . . . . . 1677

show ip igmp snooping source-timeout . . . . . . . . . . . . . . . . . . . . . 1678

show ip igmp snooping statistics . . . . . . . . . . . . . . . . . . . . . . . . . . 1679

undebug igmp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1681

Chapter 34: MLD and MLD Snooping Commands . . . . . . . . . . . . . . . . . . . . . 1682

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1682

clear ipv6 mld . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1684

clear ipv6 mld group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1685

clear ipv6 mld interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1686

debug mld . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1687

ipv6 mld . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1688

ipv6 mld last-member-query-count . . . . . . . . . . . . . . . . . . . . . . . . 1689

ipv6 mld last-member-query-interval . . . . . . . . . . . . . . . . . . . . . . . 1690

ipv6 mld querier-timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1691

ipv6 mld query-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1692

ipv6 mld query-max-response-time . . . . . . . . . . . . . . . . . . . . . . . . 1693

ipv6 mld robustness-variable . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1694

ipv6 mld snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1695

ipv6 mld snooping fast-leave . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1697

ipv6 mld snooping mrouter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1698

ipv6 mld snooping querier . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1700

ipv6 mld snooping report-suppression . . . . . . . . . . . . . . . . . . . . . . 1701

ipv6 mld ssm-map enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1703

ipv6 mld static-group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1704

ipv6 mld version . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1706

show debugging mld . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1707

show ipv6 mld groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1708

show ipv6 mld interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1709

show ipv6 mld snooping mrouter . . . . . . . . . . . . . . . . . . . . . . . . . 1710

show ipv6 mld snooping statistics . . . . . . . . . . . . . . . . . . . . . . . . . 1711

Chapter 35: Multicast Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1712

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1712

clear ip mroute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1714

clear ip mroute statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1715

clear ipv6 mroute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1716

clear ipv6 mroute statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1717

debug nsm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1718

debug nsm mcast . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1719

debug nsm mcast6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1720

ip mroute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1721

ip multicast route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1723

ip multicast route-limit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1725

ip multicast wrong-vif-suppression . . . . . . . . . . . . . . . . . . . . . . . . 1726

ip multicast-routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1727

C613-50228-01 Rev A Command Reference for AR2050V 26

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

ipv6 mroute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1728

ipv6 multicast route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1730

ipv6 multicast route-limit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1732

ipv6 multicast-routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1733

multicast . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1734

show debugging nsm mcast . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1735

show ip mroute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1736

show ip mvif . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1738

show ip rpf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1739

show ipv6 mroute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1740

show ipv6 multicast forwarding . . . . . . . . . . . . . . . . . . . . . . . . . . . 1742

show ipv6 mif . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1743

Chapter 36: PIM-SM Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1744

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1744

clear ip pim sparse-mode bsr rp-set * . . . . . . . . . . . . . . . . . . . . . . . 1746

clear ip pim sparse-mode packet statistics . . . . . . . . . . . . . . . . . . . . 1747

clear ip mroute pim sparse-mode . . . . . . . . . . . . . . . . . . . . . . . . . . 1748

debug pim sparse-mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1749

debug pim sparse-mode timer . . . . . . . . . . . . . . . . . . . . . . . . . . . 1750

ip pim anycast-rp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1752

ip pim bsr-border . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1753

ip pim bsr-candidate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1754

ip pim cisco-register-checksum . . . . . . . . . . . . . . . . . . . . . . . . . . . 1755

ip pim crp-cisco-prefix . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1756

ip pim dr-priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1757

ip pim exclude-genid . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1758

ip pim ext-srcs-directly-connected . . . . . . . . . . . . . . . . . . . . . . . . . 1759

ip pim hello-holdtime (PIM-SM) . . . . . . . . . . . . . . . . . . . . . . . . . . . 1760

ip pim hello-interval (PIM-SM) . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1761

ip pim ignore-rp-set-priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1762

ip pim jp-timer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1763

ip pim register-rate-limit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1764

ip pim register-rp-reachability . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1765

ip pim register-source . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1766

ip pim register-suppression . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1767

ip pim rp-address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1768

ip pim rp-candidate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1769

ip pim rp-register-kat . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1770

ip pim sparse-mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1771

ip pim sparse-mode passive . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1772

ip pim spt-threshold . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1773

ip pim ssm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1774

show debugging pim sparse-mode . . . . . . . . . . . . . . . . . . . . . . . . 1775

show ip pim sparse-mode bsr-router . . . . . . . . . . . . . . . . . . . . . . . 1776

show ip pim sparse-mode interface . . . . . . . . . . . . . . . . . . . . . . . . 1777

show ip pim sparse-mode interface detail . . . . . . . . . . . . . . . . . . . . 1779

show ip pim sparse-mode local-members . . . . . . . . . . . . . . . . . . . . 1780

show ip pim sparse-mode mroute . . . . . . . . . . . . . . . . . . . . . . . . . 1781

show ip pim sparse-mode mroute detail . . . . . . . . . . . . . . . . . . . . . 1783

show ip pim sparse-mode neighbor . . . . . . . . . . . . . . . . . . . . . . . . 1785

show ip pim sparse-mode nexthop . . . . . . . . . . . . . . . . . . . . . . . . 1786

show ip pim sparse-mode packet statistics . . . . . . . . . . . . . . . . . . . . 1787

C613-50228-01 Rev A Command Reference for AR2050V 27

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

show ip pim sparse-mode rp-hash . . . . . . . . . . . . . . . . . . . . . . . . . 1788

show ip pim sparse-mode rp mapping . . . . . . . . . . . . . . . . . . . . . . 1789

undebug all pim sparse-mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1790

Chapter 37: PIM-SMv6 Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1791

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1791

clear ipv6 mroute pim . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1794

clear ipv6 mroute pim sparse-mode . . . . . . . . . . . . . . . . . . . . . . . . 1795

clear ipv6 pim sparse-mode bsr rp-set * . . . . . . . . . . . . . . . . . . . . . . 1796

debug ipv6 pim sparse-mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1797

debug ipv6 pim sparse-mode packet . . . . . . . . . . . . . . . . . . . . . . . 1799

debug ipv6 pim sparse-mode timer . . . . . . . . . . . . . . . . . . . . . . . . 1800

ipv6 pim anycast-rp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1802

ipv6 pim bsr-border . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1804

ipv6 pim bsr-candidate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1806

ipv6 pim cisco-register-checksum . . . . . . . . . . . . . . . . . . . . . . . . . 1808

ipv6 pim crp-cisco-prefix . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1809

ipv6 pim dr-priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1810

ipv6 pim exclude-genid . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1812

ipv6 pim ext-srcs-directly-connected . . . . . . . . . . . . . . . . . . . . . . . 1813

ipv6 pim hello-holdtime . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1814

ipv6 pim hello-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1815

ipv6 pim ignore-rp-set-priority . . . . . . . . . . . . . . . . . . . . . . . . . . . 1816

ipv6 pim jp-timer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1817

ipv6 pim neighbor-filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1818

ipv6 pim register-rate-limit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1819

ipv6 pim register-rp-reachability . . . . . . . . . . . . . . . . . . . . . . . . . . 1820

ipv6 pim register-source . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1821

ipv6 pim register-suppression . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1822

ipv6 pim rp-address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1823

ipv6 pim rp-candidate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1825

ipv6 pim rp embedded . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1826

ipv6 pim rp-register-kat . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1827

ipv6 pim sparse-mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1828

ipv6 pim sparse-mode passive . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1829

ipv6 pim spt-threshold . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1830

ipv6 pim ssm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1831

ipv6 pim unicast-bsm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1832

show debugging ipv6 pim sparse-mode . . . . . . . . . . . . . . . . . . . . . 1833

show ipv6 pim sparse-mode bsr-router . . . . . . . . . . . . . . . . . . . . . . 1834

show ipv6 pim sparse-mode interface . . . . . . . . . . . . . . . . . . . . . . . 1835

show ipv6 pim sparse-mode interface detail . . . . . . . . . . . . . . . . . . . 1837

show ipv6 pim sparse-mode local-members . . . . . . . . . . . . . . . . . . . 1838

show ipv6 pim sparse-mode mroute . . . . . . . . . . . . . . . . . . . . . . . . 1840

show ipv6 pim sparse-mode mroute detail . . . . . . . . . . . . . . . . . . . . 1842

show ipv6 pim sparse-mode neighbor . . . . . . . . . . . . . . . . . . . . . . 1844

show ipv6 pim sparse-mode nexthop . . . . . . . . . . . . . . . . . . . . . . . 1845

show ipv6 pim sparse-mode rp-hash . . . . . . . . . . . . . . . . . . . . . . . 1846

show ipv6 pim sparse-mode rp mapping . . . . . . . . . . . . . . . . . . . . . 1847

show ipv6 pim sparse-mode rp nexthop . . . . . . . . . . . . . . . . . . . . . 1848

undebug all ipv6 pim sparse-mode . . . . . . . . . . . . . . . . . . . . . . . . 1850

undebug ipv6 pim sparse-mode . . . . . . . . . . . . . . . . . . . . . . . . . . 1851

C613-50228-01 Rev A Command Reference for AR2050V 28

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PART 5: Access and Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1853

Chapter 38: Traffic Control Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . 1854

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1854

class (htb) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1856

class (priority) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1858

class (wrr) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1860

debug traffic-control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1862

interface (traffic-control) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1863

l3-filtering enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1864

move rule (traffic-control) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1865

policy (traffic-control) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1866

red-curve . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1868

rule (traffic-control) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1870

show debugging traffic-control . . . . . . . . . . . . . . . . . . . . . . . . . . . 1872

show running-config traffic-control . . . . . . . . . . . . . . . . . . . . . . . . 1873

show traffic-control counters . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1875

show traffic-control interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1877

show traffic-control policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1879

show traffic-control red-curve . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1881

show traffic-control rule config-check . . . . . . . . . . . . . . . . . . . . . . . 1883

show traffic-control rule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1884

show traffic-control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1885

sub-class (htb) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1886

sub-class (priority) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1888

sub-class (wrr) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1890

sub-sub-class (htb) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1892

sub-sub-class (priority) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1894

sub-sub-class (wrr) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1896

traffic-control enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1898

traffic-control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1899

Chapter 39: Authentication Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . 1901

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1901

auth critical . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1904

auth host-mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1905

auth log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1907

auth max-supplicant . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1909

auth profile (Global Configuration) . . . . . . . . . . . . . . . . . . . . . . . . . 1911

auth profile (Interface Configuration) . . . . . . . . . . . . . . . . . . . . . . . 1912

auth reauthentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1913

auth supplicant-ip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1914

auth supplicant-mac . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1916

auth timeout connect-timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . 1919

auth timeout quiet-period . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1921

auth timeout reauth-period . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1922

auth timeout server-timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1924

auth-web accounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1925

auth-web authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1926

auth-web enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1927

auth-web forward . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1929

auth-web idle-timeout enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1932

C613-50228-01 Rev A Command Reference for AR2050V 29

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

auth-web idle-timeout timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . 1933

auth-web max-auth-fail . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1934

auth-web method . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1936

auth-web-server dhcp ipaddress . . . . . . . . . . . . . . . . . . . . . . . . . . 1937

auth-web-server dhcp lease . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1938

auth-web-server dhcp-wpad-option . . . . . . . . . . . . . . . . . . . . . . . . 1939

auth-web-server host-name . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1940

auth-web-server intercept-port . . . . . . . . . . . . . . . . . . . . . . . . . . . 1941

auth-web-server ipaddress . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1942

auth-web-server page language . . . . . . . . . . . . . . . . . . . . . . . . . . 1943

auth-web-server login-url . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1944

auth-web-server page logo . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1945

auth-web-server page sub-title . . . . . . . . . . . . . . . . . . . . . . . . . . . 1946

auth-web-server page success-message . . . . . . . . . . . . . . . . . . . . . 1947

auth-web-server page title . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1948

auth-web-server page welcome-message . . . . . . . . . . . . . . . . . . . . 1949

auth-web-server ping-poll enable . . . . . . . . . . . . . . . . . . . . . . . . . 1950

auth-web-server ping-poll failcount . . . . . . . . . . . . . . . . . . . . . . . . 1951

auth-web-server ping-poll interval . . . . . . . . . . . . . . . . . . . . . . . . . 1952

auth-web-server ping-poll reauth-timer-refresh . . . . . . . . . . . . . . . . 1953

auth-web-server ping-poll timeout . . . . . . . . . . . . . . . . . . . . . . . . . 1954

auth-web-server port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1955

auth-web-server redirect-delay-time . . . . . . . . . . . . . . . . . . . . . . . 1956

auth-web-server redirect-url . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1957

auth-web-server session-keep . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1958

auth-web-server ssl . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1959

auth-web-server ssl intercept-port . . . . . . . . . . . . . . . . . . . . . . . . . 1960

copy proxy-autoconfig-file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1961

copy web-auth-https-file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1962

description (Authentication Profile) . . . . . . . . . . . . . . . . . . . . . . . . 1963

erase proxy-autoconfig-file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1964

erase web-auth-https-file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1965

show auth . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1966

show auth diagnostics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1967

show auth interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1968

show auth sessionstatistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1971

show auth statistics interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1972

show auth supplicant . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1973

show auth supplicant interface . . . . . . . . . . . . . . . . . . . . . . . . . . . 1976

show auth-web-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1977

show auth-web-server page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1978

show proxy-autoconfig-file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1979

Chapter 40: AAA Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1980

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1980

aaa accounting auth-web . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1982

aaa accounting commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1984

aaa accounting login . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1986

aaa authentication auth-web . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1989

aaa authentication enable default group tacacs+ . . . . . . . . . . . . . . . 1991

aaa authentication enable default local . . . . . . . . . . . . . . . . . . . . . . 1993

aaa authentication login . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1994

aaa authentication openvpn . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1996

C613-50228-01 Rev A Command Reference for AR2050V 30

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

aaa authorization commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1997

aaa authorization config-commands . . . . . . . . . . . . . . . . . . . . . . . . 1999

aaa group server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2000

aaa local authentication attempts lockout-time . . . . . . . . . . . . . . . . . 2001

aaa local authentication attempts max-fail . . . . . . . . . . . . . . . . . . . . 2002

aaa login fail-delay . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2003

accounting login . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2004

authorization commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2005

clear aaa local user lockout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2007

debug aaa . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2008

proxy-port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2010

radius-secure-proxy aaa . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2011

server (radsecproxy-aaa) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2012

server mutual-authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2014

server name-check . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2015

server trustpoint . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2016

show aaa local user locked . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2018

show aaa server group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2019

show debugging aaa . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2020

show radius server group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2021

undebug aaa . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2023

Chapter 41: RADIUS Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2024

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2024

deadtime (RADIUS server group) . . . . . . . . . . . . . . . . . . . . . . . . . . 2025

debug radius . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2026

ip radius source-interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2027

radius-server deadtime . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2028

radius-server host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2029

radius-server key . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2032

radius-server retransmit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2033

radius-server timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2035

server (server group) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2037

show debugging radius . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2039

show radius . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2040

undebug radius . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2043

Chapter 42: Local RADIUS Server Commands . . . . . . . . . . . . . . . . . . . . . . . 2044

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2044

attribute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2046

authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2049

client (radsecproxy-srv) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2050

client mutual-authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2052

client name-check . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2053

client trustpoint . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2054

clear radius local-server statistics . . . . . . . . . . . . . . . . . . . . . . . . . . 2055

copy fdb-radius-users (to file) . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2056

copy local-radius-user-db (from file) . . . . . . . . . . . . . . . . . . . . . . . . 2058

copy local-radius-user-db (to file) . . . . . . . . . . . . . . . . . . . . . . . . . . 2059

crypto pki enroll local (deleted) . . . . . . . . . . . . . . . . . . . . . . . . . . . 2060

crypto pki enroll local local-radius-all-users (deleted) . . . . . . . . . . . . . 2061

C613-50228-01 Rev A Command Reference for AR2050V 31

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

crypto pki enroll local user (deleted) . . . . . . . . . . . . . . . . . . . . . . . . 2062

crypto pki export local pem (deleted) . . . . . . . . . . . . . . . . . . . . . . . 2063

crypto pki export local pkcs12 (deleted) . . . . . . . . . . . . . . . . . . . . . 2064

crypto pki trustpoint local (deleted) . . . . . . . . . . . . . . . . . . . . . . . . 2065

debug crypto pki (deleted) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2066

domain-style . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2067

egress-vlan-id . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2068

egress-vlan-name . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2069

group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2070

nas . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2071

radius-secure-proxy local-server . . . . . . . . . . . . . . . . . . . . . . . . . . 2072

radius-server local . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2073

server auth-port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2074

server enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2075

show crypto pki certificates (deleted) . . . . . . . . . . . . . . . . . . . . . . . 2076

show crypto pki certificates local-radius-all-users (deleted) . . . . . . . . . 2077

show crypto pki certificates user (deleted) . . . . . . . . . . . . . . . . . . . . 2078

show crypto pki trustpoints (deleted) . . . . . . . . . . . . . . . . . . . . . . . 2079

show radius local-server group . . . . . . . . . . . . . . . . . . . . . . . . . . . 2080

show radius local-server nas . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2081

show radius local-server statistics . . . . . . . . . . . . . . . . . . . . . . . . . . 2082

show radius local-server user . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2083

user (RADIUS server) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2085

vlan (RADIUS server) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2087

Chapter 43: Public Key Infrastructure Commands . . . . . . . . . . . . . . . . . . . . 2088

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2088

crypto key generate rsa . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2089

crypto key zeroize . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2090

crypto pki authenticate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2091

crypto pki enroll . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2092

crypto pki enroll user . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2093

crypto pki export pem . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2095

crypto pki export pkcs12 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2096

crypto pki import pem . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2098

crypto pki import pkcs12 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2100

crypto pki trustpoint . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2101

enrollment (trustpoint configuration mode) . . . . . . . . . . . . . . . . . . . 2102

fingerprint (trustpoint configuration mode) . . . . . . . . . . . . . . . . . . . 2103

no crypto pki certificate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2105

rsakeypair (trustpoint configuration mode) . . . . . . . . . . . . . . . . . . . 2106

show crypto key mypubkey rsa . . . . . . . . . . . . . . . . . . . . . . . . . . . 2107

show crypto pki certificates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2108

show crypto pki enrollment user . . . . . . . . . . . . . . . . . . . . . . . . . . 2110

show crypto pki trustpoint . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2111

subject-name (trustpoint configuration) . . . . . . . . . . . . . . . . . . . . . 2112

Chapter 44: TACACS+ Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2114

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2114

authorization commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2115

aaa authorization commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2117

aaa authorization config-commands . . . . . . . . . . . . . . . . . . . . . . . . 2119

C613-50228-01 Rev A Command Reference for AR2050V 32

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

ip tacacs source-interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2120

show tacacs+ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2121

tacacs-server host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2123

tacacs-server key . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2125

tacacs-server timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2126

PART 6: High Availability . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2127

Chapter 45: High Availability Commands . . . . . . . . . . . . . . . . . . . . . . . . . . 2128

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2128

ha associate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2129

Chapter 46: VRRP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2131

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2131

advertisement-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2133

alternate-checksum-mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2135

circuit-failover . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2136

debug vrrp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2138

debug vrrp events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2139

debug vrrp packet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2140

disable (VRRP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2141

enable (VRRP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2142

preempt-mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2143

priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2145

router ipv6 vrrp (interface) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2147

router vrrp (interface) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2149

show debugging vrrp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2151

show running-config router ipv6 vrrp . . . . . . . . . . . . . . . . . . . . . . . 2152

show running-config router vrrp . . . . . . . . . . . . . . . . . . . . . . . . . . 2153

show vrrp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2154

show vrrp counters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2156

show vrrp ipv6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2159

show vrrp (session) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2160

transition-mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2162

undebug vrrp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2164

undebug vrrp events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2165

undebug vrrp packet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2166

virtual-ip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2167

virtual-ipv6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2169

vrrp vmac . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2171

PART 7: Network Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2172

Chapter 47: Allied Telesis Management Framework™ (AMF) Commands . . . . . . 2173

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2173

area-link . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2178

atmf area . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2180

atmf area password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2182

atmf authorize . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2184

atmf authorize provision . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2186

atmf backup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2188

atmf backup area-masters delete . . . . . . . . . . . . . . . . . . . . . . . . . . 2189

C613-50228-01 Rev A Command Reference for AR2050V 33

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

atmf backup area-masters enable . . . . . . . . . . . . . . . . . . . . . . . . . 2190

atmf backup area-masters now . . . . . . . . . . . . . . . . . . . . . . . . . . . 2191

atmf backup area-masters synchronize . . . . . . . . . . . . . . . . . . . . . . 2192

atmf backup bandwidth . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2193

atmf backup delete . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2194

atmf backup enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2195

atmf backup guests delete . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2196

atmf backup guests enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2197

atmf backup guests now . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2198

atmf backup guests synchronize . . . . . . . . . . . . . . . . . . . . . . . . . . 2199

atmf backup now . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2200

atmf backup redundancy enable . . . . . . . . . . . . . . . . . . . . . . . . . . 2202

atmf backup server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2203

atmf backup stop . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2205

atmf backup synchronize . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2206

atmf cleanup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2207

atmf container . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2208

atmf container login . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2209

atmf controller . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2210

atmf distribute firmware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2211

atmf domain vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2213

atmf enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2216

atmf group (membership) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2217

atmf guest-class . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2219

atmf log-verbose . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2221

atmf management subnet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2222

atmf management vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2225

atmf master . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2227

atmf mtu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2228

atmf network-name . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2229

atmf provision . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2230

atmf provision node clone . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2231

atmf provision node configure boot config . . . . . . . . . . . . . . . . . . . 2233

atmf provision node configure boot system . . . . . . . . . . . . . . . . . . . 2234

atmf provision node create . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2235

atmf provision node delete . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2237

atmf provision node identity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2239

atmf provision node license-cert . . . . . . . . . . . . . . . . . . . . . . . . . . 2241

atmf provision node locate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2243

atmf reboot-rolling . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2244

atmf recover . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2248

atmf recover guest . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2250

atmf recover led-off . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2251

atmf recovery-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2252

atmf remote-login . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2254

atmf restricted-login . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2256

atmf secure-mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2258

atmf secure-mode certificate expire . . . . . . . . . . . . . . . . . . . . . . . . 2260

atmf secure-mode certificate expiry . . . . . . . . . . . . . . . . . . . . . . . . 2261

atmf secure-mode certificate renew . . . . . . . . . . . . . . . . . . . . . . . . 2262

atmf secure-mode enable-all . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2263

atmf select-area . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2265

atmf topology-gui enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2266

C613-50228-01 Rev A Command Reference for AR2050V 34

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

atmf virtual-crosslink . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2267

atmf virtual-link . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2269

atmf working-set . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2271

bridge-group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2273

clear atmf links statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2274

clear atmf recovery-file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2275

clear atmf secure-mode certificates . . . . . . . . . . . . . . . . . . . . . . . . 2276

clear atmf secure-mode statistics . . . . . . . . . . . . . . . . . . . . . . . . . . 2277

debug atmf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2278

debug atmf packet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2280

discovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2283

description (amf container) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2285

erase factory-default . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2286

http-enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2287

log event-host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2289

modeltype . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2290

show atmf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2291

show atmf area . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2295

show atmf area guests . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2298

show atmf area guests-detail . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2300

show atmf area nodes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2302

show atmf area nodes-detail . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2304

show atmf area summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2306

show atmf authorization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2307

show atmf backup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2310

show atmf backup area . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2314

show atmf backup guest . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2316

show atmf container . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2318

show atmf detail . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2321

show atmf group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2323

show atmf group members . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2325

show atmf guests . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2327

show atmf guests detail . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2329

show atmf links . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2332

show atmf links detail . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2334

show atmf links guest . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2343

show atmf links guest detail . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2345

show atmf links statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2349

show atmf nodes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2352

show atmf provision nodes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2354

show atmf recovery-file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2355

show atmf secure-mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2356

show atmf secure-mode audit . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2358

show atmf secure-mode audit link . . . . . . . . . . . . . . . . . . . . . . . . . 2359

show atmf secure-mode certificates . . . . . . . . . . . . . . . . . . . . . . . . 2360

show atmf secure-mode sa . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2363

show atmf secure-mode statistics . . . . . . . . . . . . . . . . . . . . . . . . . 2366

show atmf tech . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2368

show atmf virtual-links . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2371

show atmf working-set . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2373

show debugging atmf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2374

show debugging atmf packet . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2375

show running-config atmf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2376

C613-50228-01 Rev A Command Reference for AR2050V 35

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

state . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2377

switchport atmf-agentlink . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2379

switchport atmf-arealink remote-area . . . . . . . . . . . . . . . . . . . . . . . 2380

switchport atmf-crosslink . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2382

switchport atmf-guestlink . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2384

switchport atmf-link . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2386

type atmf node . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2387

undebug atmf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2390

username . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2391

Chapter 48: Autonomous Wave Control Commands . . . . . . . . . . . . . . . . . . . 2393

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2393

airtime-fairness enable (wireless-ap-prof-radio) . . . . . . . . . . . . . . . . . 2398

antenna (wireless-ap-prof-radio) . . . . . . . . . . . . . . . . . . . . . . . . . . 2400

ap-profile (wireless) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2401

ap-profile (wireless-ap) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2402

ap . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2403

authentication (wireless-sec-wep) . . . . . . . . . . . . . . . . . . . . . . . . . 2404

band-steering (wireless-network) . . . . . . . . . . . . . . . . . . . . . . . . . . 2405

band . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2406

bandwidth (wireless-ap-prof-radio) . . . . . . . . . . . . . . . . . . . . . . . . 2407

bcast-key-refresh-interval (wireless-sec-wpa-ent) . . . . . . . . . . . . . . . 2408

bcast-key-refresh-interval (wireless-sec-wpa-psnl) . . . . . . . . . . . . . . . 2409

channel (wireless-ap-prof-radio) . . . . . . . . . . . . . . . . . . . . . . . . . . 2410

channel (wireless-ap-radio) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2411

ciphers (wireless-sec-wpa-ent) . . . . . . . . . . . . . . . . . . . . . . . . . . . 2412

ciphers (wireless-sec-wpa-psnl) . . . . . . . . . . . . . . . . . . . . . . . . . . . 2413

country-code . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2414

day (wireless-task) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2415

description (wireless-ap) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2416

description (wireless-ap-prof) . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2417

description (wireless-network) . . . . . . . . . . . . . . . . . . . . . . . . . . . 2418

description (wireless-task) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2419

enable (wireless-sec-wep) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2420

enable (wireless-ap) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2421

enable (wireless-wds) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2422

enable (wireless-ap-prof-radio) . . . . . . . . . . . . . . . . . . . . . . . . . . . 2423

enable (wireless) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2424

enable (wireless-task) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2425

force-disable (wireless-ap-radio) . . . . . . . . . . . . . . . . . . . . . . . . . . 2426

hide-ssid (wireless-network) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2427

hwtype . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2428

index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2430

initialization-button enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2431

ip-address (wireless-ap) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2432

key (wireless-sec-wep) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2433

key (wireless-sec-wpa-psnl) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2435

led enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2436

length (wireless-sec-wep) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2437

mac-address (wireless-ap) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2440

mac-auth radius auth group (wireless-network) . . . . . . . . . . . . . . . . 2441

C613-50228-01 Rev A Command Reference for AR2050V 36

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

management address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2442

management-frame-protection enable (wireless-sec-wpa-ent) . . . . . . . 2443

management-frame-protection (wireless-sec-wpa-psnl) . . . . . . . . . . . 2444

max-clients . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2445

mode (wireless-ap-prof-radio) . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2446

network (wireless) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2448

ntp designated-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2449

ntp designated-server enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2450

ntp designated-server period . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2451

outdoor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2452

peer (wireless-wds) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2453

power (wireless-ap-radio) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2455

pre-authentication enable (wireless-sec-wpa-ent) . . . . . . . . . . . . . . . 2456

radio (wireless-ap) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2457

radio (wirless-ap-profile) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2458

radius auth group (wireless-sec-wpa-ent) . . . . . . . . . . . . . . . . . . . . 2459

rogue-ap-detection enable (wireless) . . . . . . . . . . . . . . . . . . . . . . . 2460

security (wireless-wds) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2461

security (wireless) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2462

security (wireless-network) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2464

session-key-refresh-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2465

show wireless . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2466

show wireless ap . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2467

show wireless ap capability . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2472

show wireless ap client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2474

show wireless ap neighbors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2475

show wireless ap power-channel . . . . . . . . . . . . . . . . . . . . . . . . . . 2476

show wireless ap-profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2477

show wireless country-code . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2479

show wireless network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2480

show wireless power-channel calculate . . . . . . . . . . . . . . . . . . . . . . 2482

show wireless security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2483

show wireless task . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2486

show wireless wds . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2489

ssid (wireless-network) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2491

station-isolation enable (wireless-ap-prof-radio) . . . . . . . . . . . . . . . . 2492

task . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2493

time (wireless-task) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2494

type ap-configuration apply ap . . . . . . . . . . . . . . . . . . . . . . . . . . . 2495

type download ap (wireless-task) . . . . . . . . . . . . . . . . . . . . . . . . . . 2496

type power-channel ap all . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2497

type (wireless-sec-wep) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2498

vap network (wireless-ap-prof-radio) . . . . . . . . . . . . . . . . . . . . . . . 2499

versions (wireless-sec-wpa-ent) . . . . . . . . . . . . . . . . . . . . . . . . . . . 2500

versions (wireless-sec-wpa-psnl) . . . . . . . . . . . . . . . . . . . . . . . . . . 2501

vlan (wireless-network) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2502

wds . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2503

wds radio (wireless-ap) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2504

web-auth radius auth group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2505

wireless . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2506

wireless ap-configuration apply ap . . . . . . . . . . . . . . . . . . . . . . . . . 2507

wireless download ap url . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2508

wireless power-channel ap all . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2510

C613-50228-01 Rev A Command Reference for AR2050V 37

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

wireless reset ap . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2511

Chapter 49: Dynamic Host Configuration Protocol (DHCP) Commands . . . . . . . 2512

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2512

bootfile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2514

clear ip dhcp binding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2515

default-router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2516

dns-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2517

domain-name . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2518

host (DHCP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2519

ip address dhcp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2520

ip dhcp bootp ignore . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2522

ip dhcp leasequery enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2523

ip dhcp option . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2524

ip dhcp pool . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2526

ip dhcp-client default-route distance . . . . . . . . . . . . . . . . . . . . . . . 2527

ip dhcp-client request vendor-identifying-specific . . . . . . . . . . . . . . . 2529

ip dhcp-client vendor-identifying-class . . . . . . . . . . . . . . . . . . . . . . 2530

ip dhcp-relay agent-option . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2531

ip dhcp-relay agent-option checking . . . . . . . . . . . . . . . . . . . . . . . 2533

ip dhcp-relay agent-option remote-id . . . . . . . . . . . . . . . . . . . . . . . 2535

ip dhcp-relay information policy . . . . . . . . . . . . . . . . . . . . . . . . . . 2537

ip dhcp-relay maxhops . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2539

ip dhcp-relay max-message-length . . . . . . . . . . . . . . . . . . . . . . . . 2540

ip dhcp-relay server-address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2542

lease . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2544

network (DHCP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2546

next-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2547

option . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2548

probe enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2550

probe packets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2551

probe timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2552

probe type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2553

range . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2554

route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2555

service dhcp-relay . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2556

service dhcp-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2557

show counter dhcp-client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2558

show counter dhcp-relay . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2559

show counter dhcp-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2563

show dhcp lease . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2565

show ip dhcp binding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2567

show ip dhcp pool . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2569

show ip dhcp-relay . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2573

show ip dhcp server statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2575

show ip dhcp server summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2577

subnet-mask . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2578

Chapter 50: DHCP for IPv6 (DHCPv6) Commands . . . . . . . . . . . . . . . . . . . . . 2579

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2579

address prefix . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2581

address range . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2583

C613-50228-01 Rev A Command Reference for AR2050V 38

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

clear counter ipv6 dhcp-client . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2585

clear counter ipv6 dhcp-server . . . . . . . . . . . . . . . . . . . . . . . . . . . 2586

clear ipv6 dhcp binding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2587

clear ipv6 dhcp client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2589

dns-server (DHCPv6) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2590

domain-name (DHCPv6) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2592

ipv6 address (DHCPv6 PD) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2593

ipv6 address dhcp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2596

ipv6 dhcp client pd . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2598

ipv6 dhcp option . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2600

ipv6 dhcp pool . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2602

ipv6 dhcp server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2604

ipv6 local pool . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2605

ipv6 nd prefix (DHCPv6) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2607

link-address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2609

option (DHCPv6) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2611

prefix-delegation pool . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2613

show counter ipv6 dhcp-client . . . . . . . . . . . . . . . . . . . . . . . . . . . 2615

show counter ipv6 dhcp-server . . . . . . . . . . . . . . . . . . . . . . . . . . . 2617

show ipv6 dhcp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2619

show ipv6 dhcp binding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2620

show ipv6 dhcp interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2623

show ipv6 dhcp pool . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2625

sntp-address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2627

Chapter 51: NTP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2628

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2628

ntp authenticate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2629

ntp authentication-key . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2630

ntp broadcastdelay . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2631

ntp discard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2632

ntp master . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2633

ntp peer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2634

ntp restrict . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2636

ntp server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2638

ntp source . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2640

ntp trusted-key (deprecated) . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2642

show counter ntp (deprecated) . . . . . . . . . . . . . . . . . . . . . . . . . . . 2643

show ntp associations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2644

show ntp counters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2646

show ntp counters associations . . . . . . . . . . . . . . . . . . . . . . . . . . . 2648

show ntp status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2650

Chapter 52: SNMP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2651

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2651

debug snmp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2653

show counter snmp-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2654

show debugging snmp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2658

show running-config snmp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2659

show snmp-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2660

show snmp-server community . . . . . . . . . . . . . . . . . . . . . . . . . . . 2661

show snmp-server group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2662

C613-50228-01 Rev A Command Reference for AR2050V 39

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

show snmp-server user . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2663

show snmp-server view . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2664

snmp trap link-status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2665

snmp trap link-status suppress . . . . . . . . . . . . . . . . . . . . . . . . . . . 2667

snmp-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2669

snmp-server community . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2671

snmp-server contact . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2672

snmp-server enable trap . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2673

snmp-server engineID local . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2675

snmp-server engineID local reset . . . . . . . . . . . . . . . . . . . . . . . . . . 2677

snmp-server group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2678

snmp-server host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2680

snmp-server legacy-ifadminstatus . . . . . . . . . . . . . . . . . . . . . . . . . 2682

snmp-server location . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2683

snmp-server source-interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2684

snmp-server startup-trap-delay . . . . . . . . . . . . . . . . . . . . . . . . . . . 2685

snmp-server user . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2686

snmp-server view . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2689

undebug snmp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2690

Chapter 53: SMTP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2691

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2691

debug mail . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2692

delete mail . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2693

mail . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2694

mail from . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2695

mail smtpserver . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2696

show counter mail . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2697

show mail . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2698

undebug mail . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2699

Chapter 54: Secure Shell (SSH) Commands . . . . . . . . . . . . . . . . . . . . . . . . . 2700

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2700

banner login (SSH) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2702

clear ssh . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2703

crypto key destroy hostkey . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2704

crypto key destroy userkey . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2705

crypto key generate hostkey . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2706

crypto key generate userkey . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2708

crypto key pubkey-chain knownhosts . . . . . . . . . . . . . . . . . . . . . . . 2709

crypto key pubkey-chain userkey . . . . . . . . . . . . . . . . . . . . . . . . . . 2711

debug ssh client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2713

debug ssh server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2714

service ssh . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2715

show banner login . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2717

show crypto key hostkey . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2718

show crypto key pubkey-chain knownhosts . . . . . . . . . . . . . . . . . . . 2720

show crypto key pubkey-chain userkey . . . . . . . . . . . . . . . . . . . . . . 2722

show crypto key userkey . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2723

show running-config ssh . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2724

show ssh . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2726

show ssh client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2728

C613-50228-01 Rev A Command Reference for AR2050V 40

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

show ssh server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2729

show ssh server allow-users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2731

show ssh server deny-users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2732

ssh . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2733

ssh client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2735

ssh server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2737

ssh server allow-users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2739

ssh server authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2741

ssh server deny-users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2743

ssh server max-auth-tries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2745

ssh server resolve-host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2746

ssh server scp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2747

ssh server sftp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2748

undebug ssh client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2749

undebug ssh server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2750

Chapter 55: Trigger Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2751

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2751

active (trigger) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2753

day . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2754

debug trigger . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2756

description (trigger) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2757

repeat . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2758

script . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2759

show debugging trigger . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2761

show running-config trigger . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2762

show trigger . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2763

test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2768

time (trigger) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2769

trap . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2771

trigger . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2772

trigger activate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2773

type atmf node . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2774

type cpu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2777

type interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2778

type log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2779

type memory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2780

type periodic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2781

type ping-poll . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2782

type reboot . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2783

type time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2784

type usb . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2785

undebug trigger . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2786

Chapter 56: Ping-Polling Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2787

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2787

active (ping-polling) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2789

clear ping-poll . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2790

critical-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2791

debug ping-poll . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2792

description (ping-polling) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2793

fail-count . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2794

C613-50228-01 Rev A Command Reference for AR2050V 41

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

ip (ping-polling) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2795

length (ping-poll data) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2796

normal-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2797

ping-poll . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2798

sample-size . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2799

show counter ping-poll . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2801

show ping-poll . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2803

source-ip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2807

timeout (ping polling) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2809

up-count . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2810

undebug ping-poll . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2811

PART 8: Firewall and Network Address Translation (NAT) . . . . . . . . . . . . . 2812

Chapter 57: Firewall Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2813

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2813

clear firewall connections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2815

connection-limit (Firewall) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2816

connection-log events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2817

firewall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2818

debug firewall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2819

ip tcp timeout established . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2820

move rule (Firewall) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2821

protect (Firewall) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2822

rule (Firewall) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2823

show connection-log events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2825

show firewall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2826

show firewall connections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2827

show firewall connections limits . . . . . . . . . . . . . . . . . . . . . . . . . . 2828

show firewall connections limits config-check . . . . . . . . . . . . . . . . . 2829

show firewall rule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2830

show firewall rule config-check . . . . . . . . . . . . . . . . . . . . . . . . . . . 2832

show debugging firewall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2833

show running-config firewall . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2834

Chapter 58: Application and Entity Commands . . . . . . . . . . . . . . . . . . . . . . 2835

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2835

application . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2837

dport . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2839

dscp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2841

host (Entity) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2843

icmp-code . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2845

icmp-type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2847

ip address (Entity) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2849

ip subnet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2851

ipv6 address (Entity) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2853

ipv6 subnet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2855

network (Entity) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2857

protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2859

show application . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2861

show application detail . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2862

show entity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2865

C613-50228-01 Rev A Command Reference for AR2050V 42

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

sport . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2867

zone . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2869

Chapter 59: NAT Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2871

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2871

enable (NAT) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2873

ip limited-local-proxy-arp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2874

local-proxy-arp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2876

move rule (NAT) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2877

nat . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2878

rule (NAT) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2879

show nat . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2883

show nat rule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2884

show nat rule config-check . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2886

show running-config nat . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2887

PART 9: Advanced Network Protection . . . . . . . . . . . . . . . . . . . . . . . . 2888

Chapter 60: IPS Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2889

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2889

category action (IPS) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2890

ips . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2891

protect (IPS) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2892

show ips . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2893

show ips categories . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2894

show running-config ips . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2896

Chapter 61: URL Filtering Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2897

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2897

blacklist . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2899

log url-requests . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2900

protect (URL filtering) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2901

show running-config url-filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2902

show url-filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2903

url-filter reload custom-lists . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2904

url-filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2905

whitelist . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2906

Chapter 62: Application Awareness Commands . . . . . . . . . . . . . . . . . . . . . 2907

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2907

dpi . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2908

enable (DPI) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2909

provider . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2911

show dpi . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2912

show dpi statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2913

show running-config dpi . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2914

PART 10: Virtual Private Networks (VPNs) . . . . . . . . . . . . . . . . . . . . . . . 2915

Chapter 63: IPsec Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2916

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2916

C613-50228-01 Rev A Command Reference for AR2050V 43

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

clear isakmp sa . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2918

crypto ipsec profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2919

crypto isakmp key . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2921

crypto isakmp peer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2923

crypto isakmp profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2925

debug isakmp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2927

dpd-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2929

dpd-timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2930

interface tunnel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2931

lifetime (IPsec Profile) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2932

lifetime (ISAKMP Profile) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2933

no debug isakmp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2934

pfs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2935

show debugging isakmp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2937

show interface tunnel (IPsec) . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2938

show ipsec counters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2939

show ipsec peer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2940

show ipsec policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2941

show ipsec profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2942

show ipsec sa . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2944

show isakmp counters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2945

show isakmp key (IPsec) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2946

show isakmp peer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2947

show isakmp profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2948

show isakmp sa . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2950

transform (IPsec Profile) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2951

transform (ISAKMP Profile) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2952

tunnel destination (IPsec) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2954

tunnel local name (IPsec) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2956

tunnel local selector . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2957

tunnel mode ipsec . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2959

tunnel protection ipsec (IPsec) . . . . . . . . . . . . . . . . . . . . . . . . . . . 2960

tunnel remote name (IPsec) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2961

tunnel remote selector . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2962

tunnel security-reprocessing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2964

tunnel source (IPsec) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2965

undebug isakmp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2967

version (ISAKMP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2968

Chapter 64: GRE Tunneling Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . 2969

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2969

interface tunnel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2970

show interface tunnel (GRE) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2971

tunnel checksum . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2972

tunnel dscp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2973

tunnel destination (GRE) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2974

tunnel local name (GRE) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2976

tunnel mode gre . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2977

tunnel protection ipsec (GRE) . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2978

tunnel remote name (GRE) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2979

tunnel security-reprocessing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2980

tunnel source (GRE) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2981

tunnel ttl . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2983

C613-50228-01 Rev A Command Reference for AR2050V 44

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

Chapter 65: OpenVPN Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2984

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2984

ip tcp adjust-mss . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2986

ipv6 tcp adjust-mss . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2988

show interface tunnel (OpenVPN) . . . . . . . . . . . . . . . . . . . . . . . . . 2990

show openvpn connections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2991

show openvpn connections detail . . . . . . . . . . . . . . . . . . . . . . . . . 2992

tunnel openvpn authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . 2993

tunnel openvpn cipher . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2994

tunnel mode openvpn tap . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2996

tunnel mode openvpn tun . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2997

tunnel openvpn expiry-bytes . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2998

tunnel openvpn expiry-seconds . . . . . . . . . . . . . . . . . . . . . . . . . . 2999

tunnel openvpn port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3000

tunnel openvpn tagging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3001

tunnel security-reprocessing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3002

Chapter 66: L2TPv2 PPP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3003

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3003

debug l2tp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3005

destination . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3006

encapsulation ppp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3007

ip-version . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3009

l2tp tunnel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3010

l2tp unmanaged port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3012

l2tp-profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3013

local-subaddress . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3014

protection ipsec . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3015

protection local-name . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3016

protection profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3018

protection remote-name . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3019

remote-subaddress . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3021

shared-secret . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3022

show debugging l2tp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3023

show l2tp session . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3024

show l2tp tunnel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3026

show l2tp tunnel config-check . . . . . . . . . . . . . . . . . . . . . . . . . . . 3030

show running-config l2tp-profile . . . . . . . . . . . . . . . . . . . . . . . . . . 3032

show running-config l2tp-tunnel . . . . . . . . . . . . . . . . . . . . . . . . . . 3033

source . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3034

version . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3035

Chapter 67: L2TPv3 Ethernet Pseudowire Commands . . . . . . . . . . . . . . . . . . 3036

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3036

interface tunnel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3037

l2tp unmanaged port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3038

show interface tunnel (L2TPv3) . . . . . . . . . . . . . . . . . . . . . . . . . . . 3039

tunnel destination (L2TPv3) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3040

tunnel local id . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3042

tunnel mode l2tp v3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3043

tunnel protection ipsec . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3044

tunnel remote id . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3045

C613-50228-01 Rev A Command Reference for AR2050V 45

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

tunnel security-reprocessing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3046

tunnel source (L2TPv3) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3047

Chapter 68: Dual Stack Lite (DS-Lite) Commands . . . . . . . . . . . . . . . . . . . . . 3049

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3049

ds-lite adjust-mss . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3050

ds-lite default-route distance . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3052

ds-lite enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3053

ds-lite mtu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3054

ds-lite static-aftr-name . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3055

ds-lite upstream-interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3056

show ds-lite . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3057

show running-config ds-lite . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3058

tunnel security-reprocessing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3059

C613-50228-01 Rev A Command Reference for AR2050V 46

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

List of Commands

aaa accounting auth-web . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1982

aaa accounting commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1984

aaa accounting login. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1986

aaa authentication auth-web. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1989

aaa authentication enable default group tacacs+ . . . . . . . . . . . . . . . . . . . . . . . 1991

aaa authentication enable default local. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1993

aaa authentication login . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1994

aaa authentication openvpn . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1996

aaa authorization commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1997

aaa authorization commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2117

aaa authorization config-commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1999

aaa authorization config-commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2119

aaa group server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2000

aaa local authentication attempts lockout-time . . . . . . . . . . . . . . . . . . . . . . . . . 2001

aaa local authentication attempts max-fail. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2002

aaa login fail-delay. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2003

abr-type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1036

accept-lifetime . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .835

accounting login. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2004

activate. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .374

active (ping-polling) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2789

active (trigger) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2753

address prefix . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2581

address range . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2583

address-family ipv4 (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1477

C613-50228-01 Rev A Command Reference for AR2050V 47

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

address-family ipv4 (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 837

address-family. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1133

address-family. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1475

advertisement-interval. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2133

ageing-time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 454

aggregate-address (IPv6 RIPng) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 900

aggregate-address. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1135

airtime-fairness enable (wireless-ap-prof-radio). . . . . . . . . . . . . . . . . . . . . . . . . .2398

alliedware-behavior . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 838

alternate-checksum-mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2135

antenna (wireless-ap-prof-radio) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2400

ap. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2403

apn . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 400

application . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2837

application-decision . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1452

application-decision . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1584

ap-profile (wireless). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2401

ap-profile (wireless-ap) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2402

area authentication ipsec spi. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1037

area authentication. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 931

area default-cost (IPv6 OSPF). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1039

area default-cost. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 930

area encryption ipsec spi esp. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1040

area filter-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 932

area nssa . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 933

area range (IPv6 OSPF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1043

area range. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 935

area stub (IPv6 OSPF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1045

area stub . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 937

area virtual-link (IPv6 OSPF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1046

area virtual-link authentication ipsec spi. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1048

area virtual-link encryption ipsec spi . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1050

area virtual-link . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 938

area-link. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2178

arp (IP address MAC). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1478

C613-50228-01 Rev A Command Reference for AR2050V 48

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

arp (IP address MAC). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 670

arp log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 672

arp opportunistic-nd. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1480

arp opportunistic-nd. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 675

arp-aging-timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 669

arp-reply-bc-dmac. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 677

atmf area password. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2182

atmf area. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2180

atmf authorize provision . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2186

atmf authorize. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2184

atmf backup area-masters delete. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2189

atmf backup area-masters enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2190

atmf backup area-masters now. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2191

atmf backup area-masters synchronize . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2192

atmf backup bandwidth . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2193

atmf backup delete . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2194

atmf backup enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2195

atmf backup guests delete . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2196

atmf backup guests enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2197

atmf backup guests now. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2198

atmf backup guests synchronize . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2199

atmf backup now. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2200

atmf backup redundancy enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2202

atmf backup server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2203

atmf backup stop. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2205

atmf backup synchronize . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2206

atmf backup. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2188

atmf cleanup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2207

atmf container login . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2209

atmf container. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2208

atmf controller . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2210

atmf distribute firmware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2211

atmf domain vlan. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2213

atmf enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2216

atmf group (membership) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2217

C613-50228-01 Rev A Command Reference for AR2050V 49

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

atmf guest-class . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2219

atmf log-verbose . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2221

atmf management subnet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2222

atmf management vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2225

atmf master . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2227

atmf mtu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2228

atmf network-name . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2229

atmf provision node clone . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2231

atmf provision node configure boot config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2233

atmf provision node configure boot system . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2234

atmf provision node create . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2235

atmf provision node delete . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2237

atmf provision node identity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2239

atmf provision node license-cert . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2241

atmf provision node locate. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2243

atmf provision. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2230

atmf reboot-rolling . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2244

atmf recover guest. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2250

atmf recover led-off. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2251

atmf recover. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2248

atmf recovery-server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2252

atmf remote-login . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2254

atmf restricted-login. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2256

atmf secure-mode certificate expire . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2260

atmf secure-mode certificate expiry . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2261

atmf secure-mode certificate renew . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2262

atmf secure-mode enable-all. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2263

atmf secure-mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2258

atmf select-area . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2265

atmf topology-gui enable. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 211

atmf topology-gui enable. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2266

atmf virtual-crosslink . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2267

atmf virtual-link . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2269

atmf working-set . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2271

attribute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2046

C613-50228-01 Rev A Command Reference for AR2050V 50

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

auth critical. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1904

auth host-mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1905

auth log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1907

auth max-supplicant. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1909

auth profile (Global Configuration) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1911

auth profile (Interface Configuration). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1912

auth reauthentication. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1913

auth supplicant-ip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1914

auth supplicant-mac. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1916

auth timeout connect-timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1919

auth timeout quiet-period . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1921

auth timeout reauth-period . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1922

auth timeout server-timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1924

authentication (wireless-sec-wep). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2404

authentication. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2049

authorization commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2005

authorization commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2115

auth-web accounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1925

auth-web authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1926

auth-web enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1927

auth-web forward . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1929

auth-web idle-timeout enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1932

auth-web idle-timeout timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1933

auth-web max-auth-fail . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1934

auth-web method . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1936

auth-web-server dhcp ipaddress . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1937

auth-web-server dhcp lease. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1938

auth-web-server dhcp-wpad-option . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1939

auth-web-server host-name. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1940

auth-web-server intercept-port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1941

auth-web-server ipaddress. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1942

auth-web-server login-url . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1944

auth-web-server page language . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1943

auth-web-server page logo . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1945

auth-web-server page sub-title. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1946

C613-50228-01 Rev A Command Reference for AR2050V 51

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

auth-web-server page success-message. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1947

auth-web-server page title . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1948

auth-web-server page welcome-message . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1949

auth-web-server ping-poll enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1950

auth-web-server ping-poll failcount . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1951

auth-web-server ping-poll interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1952

auth-web-server ping-poll reauth-timer-refresh . . . . . . . . . . . . . . . . . . . . . . . . .1953

auth-web-server ping-poll timeout. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1954

auth-web-server port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1955

auth-web-server redirect-delay-time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1956

auth-web-server redirect-url . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1957

auth-web-server session-keep . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1958

auth-web-server ssl intercept-port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1960

auth-web-server ssl . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1959

autoboot enable. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 118

auto-cost reference bandwidth (IPv6 OSPF). . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1053

auto-cost reference bandwidth . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 941

auto-summary (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1138

backpressure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 420

band . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2406

band-steering (wireless-network) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2405

bandwidth (wireless-ap-prof-radio) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2407

bandwidth . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1055

bandwidth . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 943

banner exec . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 223

banner login (SSH). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2702

banner login (system). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 225

banner motd . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 227

bcast-key-refresh-interval (wireless-sec-wpa-ent) . . . . . . . . . . . . . . . . . . . . . . . .2408

bcast-key-refresh-interval (wireless-sec-wpa-psnl) . . . . . . . . . . . . . . . . . . . . . . .2409

bgp aggregate-nexthop-check. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1139

bgp always-compare-med . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1140

bgp bestpath as-path ignore. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1141

bgp bestpath compare-confed-aspath . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1142

bgp bestpath compare-routerid. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1143

C613-50228-01 Rev A Command Reference for AR2050V 52

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

bgp bestpath med remove-recv-med . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1146

bgp bestpath med remove-send-med. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1147

bgp bestpath med. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1144

bgp client-to-client reflection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1148

bgp cluster-id . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1149

bgp confederation identifier . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1151

bgp confederation peers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1152

bgp config-type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1154

bgp dampening . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1156

bgp damp-peer-oscillation (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1158

bgp default ipv4-unicast . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1159

bgp default local-preference (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1160

bgp deterministic-med . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1161

bgp enforce-first-as. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1163

bgp fast-external-failover . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1164

bgp graceful-restart graceful-reset . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1167

bgp graceful-restart . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1165

bgp log-neighbor-changes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1168

bgp memory maxallocation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1170

bgp nexthop-trigger delay . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1172

bgp nexthop-trigger enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1173

bgp nexthop-trigger-count . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1171

bgp rfc1771-path-select (BGP only). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1174

bgp rfc1771-strict (BGP only). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1175

bgp router-id . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1176

bgp scan-time (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1177

bgp update-delay . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1178

blacklist . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2899

boot config-file backup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 121

boot config-file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 119

boot system backup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 123

boot system . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 122

bootfile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2514

bridge. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 455

bridge-group. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2273

C613-50228-01 Rev A Command Reference for AR2050V 53

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

bridge-group. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 456

capability opaque . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .944

capability restart. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 945

category action (IPS) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2890

cd. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 124

channel (wireless-ap-prof-radio) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2410

channel (wireless-ap-radio) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2411

channel-group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 572

chat-script. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 402

ciphers (wireless-sec-wpa-ent) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2412

ciphers (wireless-sec-wpa-psnl) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2413

circuit-failover . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2136

cisco-metric-behavior (RIP). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 840

class (htb) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1856

class (priority) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1858

class (wrr) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1860

clear aaa local user lockout. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2007

clear arp-cache . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1482

clear arp-cache . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 678

clear atmf links statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2274

clear atmf recovery-file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2275

clear atmf secure-mode certificates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2276

clear atmf secure-mode statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2277

clear bgp (ASN) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1182

clear bgp (IPv4 or IPv6 address) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1180

clear bgp * . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1179

clear bgp external . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1183

clear bgp ipv6 (ASN) (BGP4+ only). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1188

clear bgp ipv6 (ipv6 address) (BGP4+ only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1185

clear bgp ipv6 dampening (BGP4+ only). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1186

clear bgp ipv6 external (BGP4+ only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1189

clear bgp ipv6 flap-statistics (BGP4+ only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1187

clear bgp ipv6 peer-group (BGP4+ only). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1190

clear bgp peer-group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1184

clear counter ipv6 dhcp-client. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2585

C613-50228-01 Rev A Command Reference for AR2050V 54

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

clear counter ipv6 dhcp-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2586

clear exception log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 281

clear firewall connections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2815

clear ip bgp (ASN) (BGP only). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1196

clear ip bgp (IPv4) (BGP only). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1193

clear ip bgp (IPv4) (BGP only). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1486

clear ip bgp * (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1191

clear ip bgp * (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1484

clear ip bgp dampening (BGP only). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1194

clear ip bgp external (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1197

clear ip bgp flap-statistics (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1195

clear ip bgp peer-group (BGP only). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1198

clear ip dhcp binding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2515

clear ip dns forwarding cache . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 724

clear ip igmp group. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1633

clear ip igmp interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1634

clear ip igmp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1632

clear ip mroute pim sparse-mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1748

clear ip mroute statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1715

clear ip mroute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1714

clear ip ospf process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 946

clear ip pim sparse-mode bsr rp-set *. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1746

clear ip pim sparse-mode packet statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1747

clear ip prefix-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1199

clear ip rip route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1487

clear ip rip route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 841

clear ipv6 dhcp binding. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2587

clear ipv6 dhcp client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2589

clear ipv6 mld group. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1685

clear ipv6 mld interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1686

clear ipv6 mld . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1684

clear ipv6 mroute pim sparse-mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1795

clear ipv6 mroute pim . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1794

clear ipv6 mroute statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1717

clear ipv6 mroute. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1716

C613-50228-01 Rev A Command Reference for AR2050V 55

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

clear ipv6 neighbors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 775

clear ipv6 ospf process. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1056

clear ipv6 pim sparse-mode bsr rp-set * . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1796

clear ipv6 rip route. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 901

clear isakmp sa . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2918

clear lacp counters. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 574

clear line console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 172

clear line vty. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 173

clear log buffered. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 283

clear log external . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 284

clear log permanent . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 285

clear log. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 282

clear mac address-table dynamic. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 422

clear mac address-table static . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 424

clear mac-filter counter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 457

clear ping-poll . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2790

clear port counter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 425

clear pppoe-ac statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 641

clear radius local-server statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2055

clear spanning-tree detected protocols (RSTP and MSTP) . . . . . . . . . . . . . . . . . 499

clear spanning-tree statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 498

clear ssh. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2703

client (radsecproxy-srv) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2050

client mutual-authentication. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2052

client name-check . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2053

client trustpoint . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2054

clock set. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 229

clock summer-time date . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 230

clock summer-time recurring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 232

clock timezone . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 234

compatible rfc1583 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 947

configure terminal. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 105

connection-limit (Firewall) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2816

connection-log events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2817

connection-log events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 286

C613-50228-01 Rev A Command Reference for AR2050V 56

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

copy (filename) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 125

copy buffered-log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 287

copy current-software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 127

copy debug . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 128

copy fdb-radius-users (to file) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2056

copy local-radius-user-db (from file). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2058

copy local-radius-user-db (to file) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2059

copy permanent-log. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 288

copy proxy-autoconfig-file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1961

copy running-config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 129

copy startup-config. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 130

copy web-auth-https-file. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1962

copy zmodem . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 131

country-code . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2414

create autoboot . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 132

critical-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2791

crypto ipsec profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2919

crypto isakmp key . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2921

crypto isakmp peer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2923

crypto isakmp profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2925

crypto key destroy hostkey. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2704

crypto key destroy userkey. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2705

crypto key generate hostkey . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2706

crypto key generate rsa . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2089

crypto key generate userkey . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2708

crypto key pubkey-chain knownhosts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1489

crypto key pubkey-chain knownhosts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2709

crypto key pubkey-chain userkey. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2711

crypto key zeroize . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2090

crypto pki authenticate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2091

crypto pki enroll local (deleted) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2060

crypto pki enroll local local-radius-all-users (deleted) . . . . . . . . . . . . . . . . . . . .2061

crypto pki enroll local user (deleted). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2062

crypto pki enroll user . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2093

crypto pki enroll . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2092

C613-50228-01 Rev A Command Reference for AR2050V 57

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

crypto pki export local pem (deleted) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2063

crypto pki export local pkcs12 (deleted) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2064

crypto pki export pem . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2095

crypto pki export pkcs12. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2096

crypto pki import pem . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2098

crypto pki import pkcs12. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2100

crypto pki trustpoint local (deleted) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2065

crypto pki trustpoint. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2101

day (wireless-task) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2415

day. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2754

ddns enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 725

ddns-update now . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 727

ddns-update-method. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 726

deadtime (RADIUS server group) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2025

debug aaa. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2008

debug atmf packet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2280

debug atmf. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2278

debug bgp (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1200

debug crypto pki (deleted). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2066

debug ddns . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 728

debug firewall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2819

debug igmp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1635

debug ip dns forwarding. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 729

debug ip packet interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 680

debug ipv6 ospf events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1057

debug ipv6 ospf ifsm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1058

debug ipv6 ospf lsa . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1059

debug ipv6 ospf nfsm. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1060

debug ipv6 ospf packet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1061

debug ipv6 ospf route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1062

debug ipv6 pim sparse-mode packet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1799

debug ipv6 pim sparse-mode timer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1800

debug ipv6 pim sparse-mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1797

debug ipv6 rip. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 902

debug isakmp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2927

C613-50228-01 Rev A Command Reference for AR2050V 58

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

debug l2tp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3005

debug lacp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 575

debug linkmon . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1586

debug mail . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2692

debug mld . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1687

debug mstp (RSTP and STP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 500

debug nsm mcast . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1719

debug nsm mcast6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1720

debug nsm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1718

debug ospf events. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 948

debug ospf ifsm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 949

debug ospf lsa. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 950

debug ospf nfsm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 951

debug ospf nsm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 952

debug ospf packet. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 953

debug ospf route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 954

debug pim sparse-mode timer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1750

debug pim sparse-mode. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1749

debug ping-poll . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2792

debug platform packet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 426

debug policy-based-routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1454

debug ppp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 598

debug pppoe-ac. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 642

debug radius . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2026

debug rip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 843

debug snmp. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2653

debug ssh client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2713

debug ssh server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2714

debug traffic-control. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1862

debug trigger . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2756

debug vrrp events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2139

debug vrrp packet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2140

debug vrrp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2138

default log buffered . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 289

default log console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 290

C613-50228-01 Rev A Command Reference for AR2050V 59

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

default log email . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 291

default log external . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 292

default log host. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 293

default log monitor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 294

default log permanent . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 295

default-action . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 458

default-information originate (IPv6 RIPng). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 903

default-information originate (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 844

default-information originate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1063

default-information originate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 955

default-metric (IPv6 OSPF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1064

default-metric (IPv6 RIPng). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 904

default-metric (OSPF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 956

default-metric (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1491

default-metric (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 845

default-protocol-action . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 460

default-router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2516

delete debug . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 134

delete mail . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2693

delete . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133

description (amf container) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2285

description (Authentication Profile) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1963

description (Domain List) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 730

description (interface) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 378

description (ping-polling). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2793

description (trigger) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2757

description (VRF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1492

description (wireless-ap) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2416

description (wireless-ap-prof) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2417

description (wireless-network) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2418

description (wireless-task) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2419

destination (linkmon-probe) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1588

destination l2tp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 643

destination . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3006

dir. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 135

C613-50228-01 Rev A Command Reference for AR2050V 60

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

disable (Privileged Exec mode) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 106

disable (VRRP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2141

discovery. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2283

distance (BGP and BGP4+) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1201

distance (IPv6 OSPF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1065

distance (OSPF). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 957

distance (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1493

distance (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 846

distribute-list (IPv6 RIPng). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 905

distribute-list (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1494

distribute-list (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 847

dns-server (DHCPv6). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2590

dns-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2517

do. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107

domain (Domain List) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 731

domain-name (DHCPv6) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2592

domain-name . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2518

domain-style . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2067

dpd-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2929

dpd-timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2930

dpi . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2908

dport. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2839

dscp (linkmon-probe). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1589

dscp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2841

ds-lite adjust-mss . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3050

ds-lite default-route distance. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3052

ds-lite enable. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3053

ds-lite mtu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3054

ds-lite static-aftr-name. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3055

ds-lite upstream-interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3056

duplex . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 428

echo . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 375

edit (filename). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 138

edit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 137

egress interface (linkmon-probe). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1590

C613-50228-01 Rev A Command Reference for AR2050V 61

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

egress-vlan-id . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2068

egress-vlan-name. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2069

enable (DPI) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2909

enable (linkmon-probe). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1591

enable (NAT) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2873

enable (Privileged Exec mode) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108

enable (VRRP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2142

enable (wireless). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2424

enable (wireless-ap) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2421

enable (wireless-ap-prof-radio). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2423

enable (wireless-sec-wep). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2420

enable (wireless-task) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2425

enable (wireless-wds) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2422

enable db-summary-opt . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 959

enable password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 174

enable secret . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 177

encapsulation dot1q. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 594

encapsulation ppp. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3007

encapsulation ppp. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 403

encapsulation ppp. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 601

end . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110

enrollment (trustpoint configuration mode) . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2102

erase factory-default. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 139

erase factory-default. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2286

erase proxy-autoconfig-file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1964

erase startup-config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 140

erase web-auth-https-file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1965

exec-timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 180

exit. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111

exit-address-family . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1203

export map. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1495

fail-count. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2794

fingerprint (trustpoint configuration mode) . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2103

firewall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2818

flowcontrol (switch port). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 430

C613-50228-01 Rev A Command Reference for AR2050V 62

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

flowcontrol hardware (asyn/console). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 182

force-disable (wireless-ap-radio) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2426

fullupdate (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1496

fullupdate (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 848

group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2070

ha associate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2129

help. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 112

hide-ssid (wireless-network) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2427

host (DHCP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2519

host (Entity) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2843

host area . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 960

host-name (DDNS). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 732

hostname . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 235

http port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 212

http secure-port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 213

http-enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2287

hwtype. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2428

icmp-code. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2845

icmp-type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2847

import map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1497

index. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2430

initialization-button enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2431

instance priority (MSTP). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 504

instance vlan (MSTP). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 506

interface (PPP). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 603

interface (to configure) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 379

interface (traffic-control) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1863

interface tunnel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2931

interface tunnel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2970

interface tunnel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3037

interval (linkmon-probe) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1592

ip (ping-polling) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2795

ip address (Entity) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2849

ip address (IP Addressing and Protocol) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 682

ip address dhcp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2520

C613-50228-01 Rev A Command Reference for AR2050V 63

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

ip address negotiated. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 604

ip community-list expanded . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1206

ip community-list standard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1208

ip community-list. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1204

ip ddns-update-method . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 733

ip dhcp bootp ignore . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2522

ip dhcp leasequery enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2523

ip dhcp option. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2524

ip dhcp pool. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2526

ip dhcp-client default-route distance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2527

ip dhcp-client request vendor-identifying-specific . . . . . . . . . . . . . . . . . . . . . . .2529

ip dhcp-client vendor-identifying-class . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2530

ip dhcp-relay agent-option checking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2533

ip dhcp-relay agent-option remote-id . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2535

ip dhcp-relay agent-option . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2531

ip dhcp-relay information policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2537

ip dhcp-relay maxhops . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2539

ip dhcp-relay max-message-length. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2540

ip dhcp-relay server-address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2542

ip directed-broadcast . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 684

ip dns forwarding cache . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 735

ip dns forwarding dead-time. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 736

ip dns forwarding domain-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 737

ip dns forwarding retry . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 738

ip dns forwarding source-interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 739

ip dns forwarding timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 740

ip dns forwarding. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 734

ip domain-list. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 741

ip domain-lookup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 742

ip domain-name. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 743

ip extcommunity-list expanded . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1210

ip extcommunity-list standard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1212

ip forward-protocol udp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 686

ip gratuitous-arp-link . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 688

ip helper-address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 690

C613-50228-01 Rev A Command Reference for AR2050V 64

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

ip igmp flood specific-query . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1637

ip igmp last-member-query-count . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1638

ip igmp last-member-query-interval. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1639

ip igmp maximum-groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1640

ip igmp mroute-proxy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1642

ip igmp proxy-service. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1643

ip igmp querier-timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1644

ip igmp query-holdtime . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1645

ip igmp query-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1647

ip igmp query-max-response-time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1649

ip igmp ra-option. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1651

ip igmp robustness-variable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1652

ip igmp snooping fast-leave. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1654

ip igmp snooping mrouter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1655

ip igmp snooping querier . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1656

ip igmp snooping report-suppression . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1657

ip igmp snooping routermode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1658

ip igmp snooping source-timeout. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1660

ip igmp snooping tcn query solicit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1661

ip igmp snooping. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1653

ip igmp source-address-check . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1663

ip igmp startup-query-count . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1664

ip igmp startup-query-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1665

ip igmp trusted . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1666

ip igmp version. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1667

ip igmp. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1636

ip limited-local-proxy-arp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2874

ip limited-local-proxy-arp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 692

ip local-proxy-arp. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 694

ip mroute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1721

ip multicast route. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1723

ip multicast route-limit. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1725

ip multicast wrong-vif-suppression. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1726

ip multicast-routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1727

ip name-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 744

C613-50228-01 Rev A Command Reference for AR2050V 65

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

ip ospf authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 961

ip ospf authentication-key . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 962

ip ospf cost . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 964

ip ospf database-filter. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 965

ip ospf dead-interval. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 966

ip ospf disable all . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 967

ip ospf hello-interval. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 968

ip ospf message-digest-key . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 969

ip ospf mtu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 971

ip ospf mtu-ignore. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 972

ip ospf network. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 973

ip ospf priority. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 974

ip ospf resync-timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 975

ip ospf retransmit-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 976

ip ospf transmit-delay. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 977

ip pim anycast-rp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1752

ip pim bsr-border. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1753

ip pim bsr-candidate. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1754

ip pim cisco-register-checksum . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1755

ip pim crp-cisco-prefix . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1756

ip pim dr-priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1757

ip pim exclude-genid . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1758

ip pim ext-srcs-directly-connected . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1759

ip pim hello-holdtime (PIM-SM) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1760

ip pim hello-interval (PIM-SM). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1761

ip pim ignore-rp-set-priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1762

ip pim jp-timer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1763

ip pim register-rate-limit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1764

ip pim register-rp-reachability. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1765

ip pim register-source . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1766

ip pim register-suppression . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1767

ip pim rp-address. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1768

ip pim rp-candidate. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1769

ip pim rp-register-kat . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1770

ip pim sparse-mode passive. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1772

C613-50228-01 Rev A Command Reference for AR2050V 66

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

ip pim sparse-mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1771

ip pim spt-threshold . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1773

ip pim ssm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1774

ip policy-route. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1455

ip policy-route. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1593

ip prefix-list. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1214

ip prefix-list. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 850

ip proxy-arp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 695

ip radius source-interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2027

ip redirects . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 696

ip rip authentication key-chain . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 852

ip rip authentication mode. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 854

ip rip authentication string. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 857

ip rip receive version. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 860

ip rip receive-packet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 859

ip rip send version 1-compatible . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 865

ip rip send version . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 862

ip rip send-packet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 861

ip rip split-horizon . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 867

ip route static inter-vrf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1498

ip route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1499

ip route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 814

ip subnet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2851

ip summary-address rip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 849

ip tacacs source-interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2120

ip tcp adjust-mss . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2986

ip tcp adjust-mss . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 381

ip tcp adjust-mss . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 606

ip tcp synack-retries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 697

ip tcp timeout established . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2820

ip tcp timeout established . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 698

ip tftp source-interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 141

ip unnumbered. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 608

ip unreachables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 699

ip vrf forwarding. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1503

C613-50228-01 Rev A Command Reference for AR2050V 67

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

ip vrf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1502

ip-address (wireless-ap). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2432

ips . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2891

ipv6 address (DHCPv6 PD) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2593

ipv6 address (Entity) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2853

ipv6 address autoconfig . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 778

ipv6 address dhcp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2596

ipv6 address. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 776

ipv6 ddns-update-method . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 746

ipv6 dhcp client pd . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2598

ipv6 dhcp option . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2600

ipv6 dhcp pool . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2602

ipv6 dhcp server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2604

ipv6 enable. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 780

ipv6 eui64-linklocal . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 782

ipv6 forwarding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 783

ipv6 local pool. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2605

ipv6 mld last-member-query-count . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1689

ipv6 mld last-member-query-interval. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1690

ipv6 mld querier-timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1691

ipv6 mld query-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1692

ipv6 mld query-max-response-time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1693

ipv6 mld robustness-variable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1694

ipv6 mld snooping fast-leave . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1697

ipv6 mld snooping mrouter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1698

ipv6 mld snooping querier . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1700

ipv6 mld snooping report-suppression . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1701

ipv6 mld snooping. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1695

ipv6 mld ssm-map enable. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1703

ipv6 mld static-group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1704

ipv6 mld version. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1706

ipv6 mld. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1688

ipv6 mroute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1728

ipv6 multicast forward-slow-path-packet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 784

ipv6 multicast route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1730

C613-50228-01 Rev A Command Reference for AR2050V 68

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

ipv6 multicast route-limit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1732

ipv6 multicast-routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1733

ipv6 nd accept-ra-pinfo . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 785

ipv6 nd current-hoplimit. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 786

ipv6 nd managed-config-flag . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 788

ipv6 nd minimum-ra-interval. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 789

ipv6 nd other-config-flag . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 791

ipv6 nd prefix (DHCPv6). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2607

ipv6 nd prefix. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 792

ipv6 nd ra-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 794

ipv6 nd ra-lifetime . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 795

ipv6 nd reachable-time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 796

ipv6 nd retransmission-time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 798

ipv6 nd suppress-ra. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 800

ipv6 neighbor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 801

ipv6 opportunistic-nd. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 802

ipv6 ospf authentication spi. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1067

ipv6 ospf cost . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1069

ipv6 ospf dead-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1071

ipv6 ospf display route single-line . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1072

ipv6 ospf encryption spi esp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1073

ipv6 ospf hello-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1076

ipv6 ospf neighbor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1077

ipv6 ospf network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1079

ipv6 ospf priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1080

ipv6 ospf retransmit-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1081

ipv6 ospf transmit-delay . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1082

ipv6 pim anycast-rp. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1802

ipv6 pim bsr-border . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1804

ipv6 pim bsr-candidate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1806

ipv6 pim cisco-register-checksum . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1808

ipv6 pim crp-cisco-prefix. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1809

ipv6 pim dr-priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1810

ipv6 pim exclude-genid. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1812

ipv6 pim ext-srcs-directly-connected . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1813

C613-50228-01 Rev A Command Reference for AR2050V 69

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

ipv6 pim hello-holdtime . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1814

ipv6 pim hello-interval. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1815

ipv6 pim ignore-rp-set-priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1816

ipv6 pim jp-timer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1817

ipv6 pim neighbor-filter. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1818

ipv6 pim register-rate-limit. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1819

ipv6 pim register-rp-reachability . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1820

ipv6 pim register-source . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1821

ipv6 pim register-suppression. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1822

ipv6 pim rp embedded . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1826

ipv6 pim rp-address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1823

ipv6 pim rp-candidate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1825

ipv6 pim rp-register-kat. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1827

ipv6 pim sparse-mode passive . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1829

ipv6 pim sparse-mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1828

ipv6 pim spt-threshold. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1830

ipv6 pim ssm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1831

ipv6 pim unicast-bsm. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1832

ipv6 policy-route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1457

ipv6 policy-route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1596

ipv6 prefix-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1216

ipv6 prefix-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 906

ipv6 rip metric-offset . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 908

ipv6 rip split-horizon. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 910

ipv6 route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 803

ipv6 route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 817

ipv6 router ospf area. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1083

ipv6 router rip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 912

ipv6 subnet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2855

ipv6 tcp adjust-mss . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2988

ipv6 tcp adjust-mss . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 383

ipv6 tcp adjust-mss . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 610

ipv6 tftp source-interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 142

ipv6 unreachables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 804

ip-version (linkmon-probe). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1595

C613-50228-01 Rev A Command Reference for AR2050V 70

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

ip-version . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3009

jitter. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1598

keepalive (PPP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 612

key (wireless-sec-wep) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2433

key (wireless-sec-wpa-psnl) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2435

key chain . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 869

key. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 868

key-string . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 870

l2tp peer-address dns-lookup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 644

l2tp peer-address radius-lookup group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 646

l2tp peer-address static . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 647

l2tp profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 649

l2tp tunnel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3010

l2tp unmanaged port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3012

l2tp unmanaged port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3038

l2tp-profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3013

l3-filtering enable. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1864

l3-filtering enable. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 461

lacp global-passive-mode enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 576

lacp port-priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 577

lacp system-priority. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 578

lacp timeout. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 579

latency . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1600

lease . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2544

led enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2436

length (asyn) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 184

length (ping-poll data). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2796

length (wireless-sec-wep) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2437

lifetime (IPsec Profile) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2932

lifetime (ISAKMP Profile) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2933

line. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 185

link-address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2609

linkflap action . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 432

linkmon probe. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1604

linkmon probe-history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1602

C613-50228-01 Rev A Command Reference for AR2050V 71

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

linkmon profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1606

local-proxy-arp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2876

local-proxy-arp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 701

local-subaddress . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3014

log buffered (filter) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 297

log buffered exclude. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 300

log buffered size. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 303

log buffered . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 296

log console (filter) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 305

log console exclude . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 308

log console. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 304

log date-format. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 311

log email (filter). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 313

log email exclude. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 316

log email time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 319

log email . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 312

log event-host. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 214

log event-host. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2289

log external (filter) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 323

log external exclude . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 326

log external rotate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 329

log external size . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 331

log external . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 321

log facility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 332

log host (filter). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 336

log host exclude . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 339

log host source . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 342

log host time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 343

log host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 334

log monitor (filter) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 345

log monitor exclude . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 348

log permanent (filter) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 352

log permanent exclude . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 355

log permanent size . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 358

log permanent . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 351

C613-50228-01 Rev A Command Reference for AR2050V 72

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

log trustpoint. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 360

log url-requests. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2900

log url-requests. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 361

login authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2009

logout. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113

log-rate-limit nsm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 359

mac address-table acquire . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 433

mac address-table ageing-time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 434

mac address-table static . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 435

mac-address (wireless-ap). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2440

mac-auth radius auth group (wireless-network). . . . . . . . . . . . . . . . . . . . . . . . . .2441

mac-filter. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 463

mac-filter-group egress . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 462

mac-filter-group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 464

mac-learning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 465

mail from. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2695

mail smtpserver . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2696

mail . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2694

management address. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2442

management-frame-protection (wireless-sec-wpa-psnl) . . . . . . . . . . . . . . . . .2444

management-frame-protection enable (wireless-sec-wpa-ent) . . . . . . . . . . .2443

match as-path . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1218

match as-path . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1412

match community . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1219

match community . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1413

match interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1415

match ip address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1416

match ip next-hop. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1418

match ipv6 address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1419

match ipv6 next-hop . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1421

match metric . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1422

match origin. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1423

match route-type. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1425

C613-50228-01 Rev A Command Reference for AR2050V 73

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

match tag . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1426

max-clients. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2445

max-concurrent-dd (IPv6 OSPF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1085

max-concurrent-dd . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 978

max-fib-routes (VRF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1504

max-fib-routes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 237

max-fib-routes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 818

maximum-area . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 979

maximum-paths . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 821

maximum-prefix. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 871

max-paths. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1221

max-static-routes (VRF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1506

max-static-routes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 239

max-static-routes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 820

member (linkmon-group). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1607

mirror interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 413

mkdir . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 143

mode (wireless-ap-prof-radio). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2446

modeltype . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2290

move debug. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 145

move rule (Firewall). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2821

move rule (NAT) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2877

move rule (traffic-control). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1865

move. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 144

mru jumbo . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 385

mtu (PPP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 614

mtu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 386

multicast . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1734

nas. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2071

nat . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2878

neighbor (IPv6 RIPng). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 913

neighbor (OSPF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 980

neighbor (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 872

neighbor activate. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1222

neighbor advertisement-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1225

C613-50228-01 Rev A Command Reference for AR2050V 74

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

neighbor allowas-in . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1228

neighbor as-origination-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1231

neighbor attribute-unchanged. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1233

neighbor capability graceful-restart . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1236

neighbor capability orf prefix-list. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1239

neighbor capability route-refresh . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1242

neighbor collide-established . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1245

neighbor default-originate. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1247

neighbor description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1250

neighbor disallow-infinite-holdtime. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1253

neighbor dont-capability-negotiate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1255

neighbor ebgp-multihop . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1258

neighbor enforce-multihop . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1261

neighbor filter-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1264

neighbor interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1267

neighbor local-as . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1268

neighbor maximum-prefix . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1270

neighbor next-hop-self . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1273

neighbor next-hop-self . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1507

neighbor override-capability. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1276

neighbor passive . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1278

neighbor password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1280

neighbor password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1513

neighbor peer-group (add a neighbor) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1284

neighbor peer-group (create a peer-group). . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1286

neighbor port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1287

neighbor prefix-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1289

neighbor remote-as . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1292

neighbor remote-as . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1510

neighbor remove-private-AS (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1295

neighbor restart-time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1297

neighbor route-map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1299

neighbor route-reflector-client (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1303

neighbor route-server-client (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1305

neighbor send-community. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1306

C613-50228-01 Rev A Command Reference for AR2050V 75

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

neighbor shutdown . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1309

neighbor soft-reconfiguration inbound. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1311

neighbor timers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1314

neighbor transparent-as . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1317

neighbor transparent-nexthop. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1319

neighbor unsuppress-map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1321

neighbor update-source . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1324

neighbor version (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1327

neighbor weight. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1329

network (BGP and BGP4+) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1332

network (DHCP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2546

network (Entity) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2857

network (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1517

network (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 873

network (wireless) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2448

network area . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 981

network synchronization. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1335

next-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2547

no crypto pki certificate. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2105

no debug all. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 240

no debug isakmp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2934

normal-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2797

ntp authenticate. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2629

ntp authentication-key . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2630

ntp broadcastdelay . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2631

ntp designated-server enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2450

ntp designated-server period . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2451

ntp designated-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2449

ntp discard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2632

ntp master . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2633

ntp peer. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2634

ntp restrict . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2636

ntp server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2638

ntp source. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2640

ntp trusted-key (deprecated). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2642

C613-50228-01 Rev A Command Reference for AR2050V 76

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

optimistic-nd . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 702

option (DHCPv6). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2611

option. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2548

ospf abr-type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 983

ospf restart grace-period. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 984

ospf restart helper . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 985

ospf router-id. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 987

outdoor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2452

overflow database external . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 989

overflow database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 988

passive-interface (IPv6 OSPF). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1086

passive-interface (IPv6 RIPng) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 914

passive-interface (OSPF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 990

passive-interface (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1519

passive-interface (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 875

password (DDNS) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 747

peer (wireless-wds) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2453

peer default ip address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 615

peer neighbor-route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 617

pfs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2935

ping ipv6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 805

ping. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1520

ping. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 703

ping-poll . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2798

pktloss . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1609

platform load-balancing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 436

polarity. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 437

policy (traffic-control). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1866

policy-based-routing enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1460

policy-based-routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1459

power (wireless-ap-radio) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2455

ppp authentication refuse . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 621

ppp authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 619

ppp hostname. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 623

ppp ipcp dns suffix-list. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 627

C613-50228-01 Rev A Command Reference for AR2050V 77

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

ppp ipcp dns suffix-list. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 750

ppp ipcp dns . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 625

ppp ipcp dns . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 748

ppp ipcp ip-override . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 629

ppp password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 630

ppp service-name (PPPoE) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 631

ppp timeout idle. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 632

ppp username. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 633

ppp-auth-protocol. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 651

pppoe-ac. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 652

pppoe-ac-service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 653

pre-authentication enable (wireless-sec-wpa-ent) . . . . . . . . . . . . . . . . . . . . . . .2456

preempt-mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2143

preference . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1611

prefix-delegation pool . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2613

priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2145

privilege level . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 187

probe enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2550

probe packets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2551

probe timeout. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2552

probe type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2553

protect (Firewall) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2822

protect (IPS) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2892

protect (URL filtering). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2901

protection ipsec . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3015

protection local-name . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3016

protection profile. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3018

protection remote-name. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3019

protocol ethii (macfilter) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 466

protocol novell (macfilter) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 468

protocol sap (macfilter) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 470

protocol snap (macfilter). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 472

protocol. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2859

provider. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2911

proxy-auth . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 654

C613-50228-01 Rev A Command Reference for AR2050V 78

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

proxy-port. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2010

pwd. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 146

radio (wireless-ap) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2457

radio (wirless-ap-profile) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2458

radius auth group (wireless-sec-wpa-ent). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2459

radius-secure-proxy aaa. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2011

radius-secure-proxy local-server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2072

radius-server deadtime . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2028

radius-server host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2029

radius-server key . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2032

radius-server local . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2073

radius-server retransmit. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2033

radius-server timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2035

range . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2554

rd (route distinguisher) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1522

reboot . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 242

recv-buffer-size (IPv6 RIPng) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 915

recv-buffer-size (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 876

red-curve. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1868

redistribute (into BGP or BGP4+) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1336

redistribute (into BGP or BGP4+) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1523

redistribute (IPv6 OSPF). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1087

redistribute (IPv6 RIPng) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 916

redistribute (OSPF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1525

redistribute (OSPF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 991

redistribute (RIP). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1527

redistribute (RIP). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 877

region (MSTP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 508

reload . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 243

remote-subaddress . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3021

repeat. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2758

restart bgp graceful (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1338

restart ipv6 ospf graceful. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1089

restart ospf graceful . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 993

restart rip graceful . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 879

C613-50228-01 Rev A Command Reference for AR2050V 79

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

retry-interval (DDNS). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 752

revision (MSTP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 509

rip restart grace-period . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 880

rmdir. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 147

rogue-ap-detection enable (wireless). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2460

route (IPv6 RIPng) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 917

route (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1529

route (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 881

route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2555

route-map. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1340

route-map. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1427

router bgp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1339

router ipv6 ospf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1090

router ipv6 rip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 918

router ipv6 vrrp (interface) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2147

router ospf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1532

router ospf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 994

router rip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 882

router vrrp (interface) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2149

router-id (IPv6 OSPF). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1091

router-id (VRF). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1534

router-id . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 996

route-target . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1530

rsakeypair (trustpoint configuration mode) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2106

rule (Firewall). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2823

rule (macfilter). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 474

rule (NAT) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2879

rule (traffic-control) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1870

rule ip (macfilter) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 476

rule ipv6 (macfilter) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 478

sample-size (linkmon-probe). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1613

sample-size. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2799

script. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2759

security (wireless). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2462

security (wireless-network). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2464

C613-50228-01 Rev A Command Reference for AR2050V 80

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

security (wireless-wds) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2461

security-password forced-change . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 189

security-password history. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 188

security-password lifetime . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 190

security-password minimum-categories. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 192

security-password minimum-length. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 193

security-password min-lifetime-enforce . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 191

security-password reject-expired-pwd. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 194

security-password warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 195

send-lifetime . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 883

server (radsecproxy-aaa) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2012

server (server group). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2037

server auth-port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2074

server enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2075

server mutual-authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2014

server name-check . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2015

server trustpoint. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2016

service advanced-vty . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 196

service dhcp-relay . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2556

service dhcp-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2557

service http. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 215

service password-encryption. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 197

service ssh. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2715

service statistics interfaces counter. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 388

service telnet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 198

service-name . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 655

session-key-refresh-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2465

set aggregator. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1430

set as-path . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1343

set as-path . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1431

set atomic-aggregate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1432

set comm-list delete . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1433

set community . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1344

set community . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1434

set dampening . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1436

C613-50228-01 Rev A Command Reference for AR2050V 81

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

set extcommunity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1438

set ip next-hop (route map) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1440

set ipv6 next-hop . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1441

set local-preference. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1442

set metric . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1443

set metric-type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1445

set origin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1446

set originator-id . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1447

set tag. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1448

set weight . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1449

shared-secret. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3022

show aaa local user locked . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2018

show aaa server group. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2019

show application detail . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2862

show application . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2861

show arp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1535

show arp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 705

show atmf area guests . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2298

show atmf area guests-detail. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2300

show atmf area nodes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2302

show atmf area nodes-detail . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2304

show atmf area summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2306

show atmf area . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2295

show atmf authorization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2307

show atmf backup area . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2314

show atmf backup guest. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2316

show atmf backup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2310

show atmf container. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2318

show atmf detail. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2321

show atmf group members . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2325

show atmf group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2323

show atmf guests detail. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2329

show atmf guests. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2327

show atmf links detail. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2334

show atmf links guest detail. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2345

C613-50228-01 Rev A Command Reference for AR2050V 82

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

show atmf links guest. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2343

show atmf links statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2349

show atmf links. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2332

show atmf nodes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2352

show atmf provision nodes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2354

show atmf recovery-file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2355

show atmf secure-mode audit link . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2359

show atmf secure-mode audit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2358

show atmf secure-mode certificates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2360

show atmf secure-mode sa. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2363

show atmf secure-mode statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2366

show atmf secure-mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2356

show atmf tech . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2368

show atmf virtual-links. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2371

show atmf working-set . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2373

show atmf. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2291

show auth diagnostics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1967

show auth interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1968

show auth sessionstatistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1971

show auth statistics interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1972

show auth supplicant interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1976

show auth supplicant . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1973

show auth. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1966

show auth-web-server page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1978

show auth-web-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1977

show autoboot . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 148

show banner login. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2717

show bgp ipv6 (BGP4+ only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1346

show bgp ipv6 community (BGP4+ only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1347

show bgp ipv6 community-list (BGP4+ only). . . . . . . . . . . . . . . . . . . . . . . . . . . . .1349

show bgp ipv6 dampening (BGP4+ only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1350

show bgp ipv6 filter-list (BGP4+ only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1351

show bgp ipv6 inconsistent-as (BGP4+ only). . . . . . . . . . . . . . . . . . . . . . . . . . . . .1352

show bgp ipv6 longer-prefixes (BGP4+ only). . . . . . . . . . . . . . . . . . . . . . . . . . . . .1353

show bgp ipv6 neighbors (BGP4+ only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1354

C613-50228-01 Rev A Command Reference for AR2050V 83

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

show bgp ipv6 paths (BGP4+ only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1357

show bgp ipv6 prefix-list (BGP4+ only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1358

show bgp ipv6 quote-regexp (BGP4+ only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1359

show bgp ipv6 regexp (BGP4+ only). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1360

show bgp ipv6 route-map (BGP4+ only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1361

show bgp ipv6 summary (BGP4+ only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1362

show bgp memory maxallocation (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . .1363

show bgp nexthop-tracking (BGP only). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1364

show bgp nexthop-tree-details (BGP only). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1365

show boot. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 149

show bridge macaddr . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 482

show bridge. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 480

show cellular . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 405

show clock . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 244

show connection-log events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2825

show connection-log events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 362

show counter dhcp-client. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2558

show counter dhcp-relay . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2559

show counter dhcp-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2563

show counter ipv6 dhcp-client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2615

show counter ipv6 dhcp-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2617

show counter log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 363

show counter mail . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2697

show counter ntp (deprecated) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2643

show counter ping-poll . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2801

show counter snmp-server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2654

show cpu history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 249

show cpu. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 246

show crypto key hostkey. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2718

show crypto key mypubkey rsa. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2107

show crypto key pubkey-chain knownhosts . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1538

show crypto key pubkey-chain knownhosts . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2720

show crypto key pubkey-chain userkey. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2722

show crypto key userkey . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2723

show crypto pki certificates (deleted). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2076

C613-50228-01 Rev A Command Reference for AR2050V 84

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

show crypto pki certificates local-radius-all-users (deleted). . . . . . . . . . . . . . .2077

show crypto pki certificates user (deleted) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2078

show crypto pki certificates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2108

show crypto pki enrollment user . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2110

show crypto pki trustpoint . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2111

show crypto pki trustpoints (deleted) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2079

show ddns-update-method status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 753

show debugging aaa . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2020

show debugging atmf packet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2375

show debugging atmf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2374

show debugging bgp (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1366

show debugging firewall. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2833

show debugging igmp. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1668

show debugging ip dns forwarding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 754

show debugging ip packet. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 708

show debugging ipv6 ospf. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1092

show debugging ipv6 pim sparse-mode. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1833

show debugging ipv6 rip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 919

show debugging isakmp. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2937

show debugging l2tp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3023

show debugging lacp. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 581

show debugging linkmon. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1614

show debugging mld . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1707

show debugging mstp. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 510

show debugging nsm mcast . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1735

show debugging ospf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 997

show debugging pim sparse-mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1775

show debugging platform packet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 438

show debugging ppp. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 634

show debugging pppoe ac . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 657

show debugging radius. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2039

show debugging rip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 885

show debugging snmp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2658

show debugging traffic-control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1872

show debugging trigger . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2761

C613-50228-01 Rev A Command Reference for AR2050V 85

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

show debugging vrrp. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2151

show debugging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 251

show dhcp lease. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2565

show diagnostic channel-group. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 582

show dpi statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2913

show dpi . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2912

show ds-lite . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3057

show entity. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2865

show etherchannel detail . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 584

show etherchannel summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 585

show etherchannel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 583

show exception log. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 364

show file systems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 152

show file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 151

show firewall connections limits config-check . . . . . . . . . . . . . . . . . . . . . . . . . . .2829

show firewall connections limits . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2828

show firewall connections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2827

show firewall rule config-check . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2832

show firewall rule. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2830

show firewall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2826

show flowcontrol interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 439

show history. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114

show hosts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 755

show http . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 216

show interface (PPP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 635

show interface brief. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 393

show interface err-disabled . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 440

show interface memory. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 252

show interface memory. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 394

show interface status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 396

show interface switchport . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 441

show interface tunnel (GRE). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2971

show interface tunnel (IPsec). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2938

show interface tunnel (L2TPv3). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3039

show interface tunnel (OpenVPN) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2990

C613-50228-01 Rev A Command Reference for AR2050V 86

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

show interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 389

show ip bgp (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1367

show ip bgp attribute-info (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1368

show ip bgp cidr-only (BGP only). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1369

show ip bgp cidr-only (BGP only). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1540

show ip bgp community (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1370

show ip bgp community (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1541

show ip bgp community-info (BGP only). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1372

show ip bgp community-list (BGP only). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1373

show ip bgp community-list (BGP only). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1543

show ip bgp dampening (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1374

show ip bgp dampening (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1544

show ip bgp filter-list (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1376

show ip bgp filter-list (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1546

show ip bgp inconsistent-as (BGP only). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1377

show ip bgp inconsistent-as (BGP only). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1547

show ip bgp longer-prefixes (BGP only). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1378

show ip bgp longer-prefixes (BGP only). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1548

show ip bgp neighbors (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1379

show ip bgp neighbors connection-retrytime (BGP only). . . . . . . . . . . . . . . . .1382

show ip bgp neighbors hold-time (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . .1383

show ip bgp neighbors keepalive (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . .1384

show ip bgp neighbors keepalive-interval (BGP only) . . . . . . . . . . . . . . . . . . . .1385

show ip bgp neighbors notification (BGP only). . . . . . . . . . . . . . . . . . . . . . . . . . .1386

show ip bgp neighbors open (BGP only). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1387

show ip bgp neighbors rcvd-msgs (BGP only). . . . . . . . . . . . . . . . . . . . . . . . . . . .1388

show ip bgp neighbors sent-msgs (BGP only). . . . . . . . . . . . . . . . . . . . . . . . . . . .1389

show ip bgp neighbors update (BGP only). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1390

show ip bgp paths (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1391

show ip bgp prefix-list (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1392

show ip bgp prefix-list (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1549

show ip bgp quote-regexp (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1393

show ip bgp quote-regexp (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1550

show ip bgp regexp (BGP only). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1395

show ip bgp regexp (BGP only). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1552

C613-50228-01 Rev A Command Reference for AR2050V 87

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

show ip bgp route-map (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1397

show ip bgp route-map (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1554

show ip bgp scan (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1398

show ip bgp summary (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1399

show ip bgp summary (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1555

show ip community-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1401

show ip dhcp binding. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2567

show ip dhcp pool. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2569

show ip dhcp server statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2575

show ip dhcp server summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2577

show ip dhcp-relay . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2573

show ip dns forwarding cache . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 757

show ip dns forwarding server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 759

show ip dns forwarding. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 756

show ip domain-list. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 761

show ip domain-name . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 762

show ip extcommunity-list. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1402

show ip forwarding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 710

show ip igmp groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1669

show ip igmp interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1671

show ip igmp proxy groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1674

show ip igmp proxy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1673

show ip igmp snooping mrouter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1676

show ip igmp snooping routermode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1677

show ip igmp snooping source-timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1678

show ip igmp snooping statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1679

show ip interface vrf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1557

show ip interface vrf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 712

show ip interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 711

show ip mroute. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1736

show ip mvif. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1738

show ip name-server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 763

show ip ospf border-routers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1001

show ip ospf database asbr-summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1004

show ip ospf database external . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1005

C613-50228-01 Rev A Command Reference for AR2050V 88

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

show ip ospf database network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1007

show ip ospf database nssa-external . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1008

show ip ospf database opaque-area . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1010

show ip ospf database opaque-as . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1011

show ip ospf database opaque-link. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1012

show ip ospf database router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1013

show ip ospf database summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1015

show ip ospf database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1002

show ip ospf interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1018

show ip ospf neighbor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1019

show ip ospf route. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1021

show ip ospf virtual-links. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1022

show ip ospf. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 998

show ip pbr route. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1461

show ip pim sparse-mode bsr-router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1776

show ip pim sparse-mode interface detail . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1779

show ip pim sparse-mode interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1777

show ip pim sparse-mode local-members . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1780

show ip pim sparse-mode mroute detail. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1783

show ip pim sparse-mode mroute. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1781

show ip pim sparse-mode neighbor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1785

show ip pim sparse-mode nexthop. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1786

show ip pim sparse-mode packet statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1787

show ip pim sparse-mode rp mapping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1789

show ip pim sparse-mode rp-hash . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1788

show ip prefix-list. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1403

show ip prefix-list. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 886

show ip protocols bgp (BGP only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1405

show ip protocols ospf. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1023

show ip protocols rip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 887

show ip rip database. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 889

show ip rip interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 890

show ip rip vrf database. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1559

show ip rip vrf database. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 891

show ip rip vrf interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1560

C613-50228-01 Rev A Command Reference for AR2050V 89

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

show ip rip vrf interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 892

show ip rip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 888

show ip route database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1564

show ip route database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 825

show ip route summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1567

show ip route summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 828

show ip route. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1561

show ip route. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 822

show ip rpf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1739

show ip sockets. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 714

show ip traffic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 717

show ip vrf detail . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1570

show ip vrf interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1571

show ip vrf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1569

show ips categories. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2894

show ips. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2893

show ipsec counters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2939

show ipsec peer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2940

show ipsec policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2941

show ipsec profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2942

show ipsec sa. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2944

show ipv6 dhcp binding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2620

show ipv6 dhcp interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2623

show ipv6 dhcp pool . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2625

show ipv6 dhcp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2619

show ipv6 forwarding. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 806

show ipv6 interface brief. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 807

show ipv6 mif . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1743

show ipv6 mld groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1708

show ipv6 mld interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1709

show ipv6 mld snooping mrouter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1710

show ipv6 mld snooping statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1711

show ipv6 mroute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1740

show ipv6 multicast forwarding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1742

show ipv6 neighbors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 808

C613-50228-01 Rev A Command Reference for AR2050V 90

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

show ipv6 ospf database external . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1097

show ipv6 ospf database grace. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1098

show ipv6 ospf database inter-prefix . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1099

show ipv6 ospf database inter-router. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1100

show ipv6 ospf database intra-prefix . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1101

show ipv6 ospf database link. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1102

show ipv6 ospf database network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1103

show ipv6 ospf database router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1105

show ipv6 ospf database. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1095

show ipv6 ospf interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1110

show ipv6 ospf neighbor. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1112

show ipv6 ospf route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1114

show ipv6 ospf virtual-links . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1116

show ipv6 ospf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1093

show ipv6 pbr route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1463

show ipv6 pim sparse-mode bsr-router. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1834

show ipv6 pim sparse-mode interface detail . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1837

show ipv6 pim sparse-mode interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1835

show ipv6 pim sparse-mode local-members . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1838

show ipv6 pim sparse-mode mroute detail . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1842

show ipv6 pim sparse-mode mroute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1840

show ipv6 pim sparse-mode neighbor. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1844

show ipv6 pim sparse-mode nexthop . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1845

show ipv6 pim sparse-mode rp mapping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1847

show ipv6 pim sparse-mode rp nexthop. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1848

show ipv6 pim sparse-mode rp-hash . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1846

show ipv6 prefix-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1404

show ipv6 prefix-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 920

show ipv6 protocols rip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 921

show ipv6 rip database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 923

show ipv6 rip interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 924

show ipv6 rip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 922

show ipv6 route summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 811

show ipv6 route summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 832

show ipv6 route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 809

C613-50228-01 Rev A Command Reference for AR2050V 91

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

show ipv6 route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 830

show isakmp counters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2945

show isakmp key (IPsec) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2946

show isakmp peer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2947

show isakmp profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2948

show isakmp sa. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2950

show l2tp session. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3024

show l2tp tunnel config-check . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3030

show l2tp tunnel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3026

show lacp sys-id . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 586

show lacp-counter. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 587

show linkmon probe. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1615

show linkmon probe-history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1618

show log config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 367

show log external. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 369

show log permanent. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 370

show log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 365

show mac address-table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 442

show mac-filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 483

show mail . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2698

show memory allocations. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 256

show memory history. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 258

show memory pools . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 259

show memory shared. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 260

show memory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 254

show mirror interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 416

show mirror . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 415

show nat rule config-check . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2886

show nat rule. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2884

show nat . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2883

show ntp associations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2644

show ntp counters associations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2648

show ntp counters. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2646

show ntp status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2650

show openvpn connections detail. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2992

C613-50228-01 Rev A Command Reference for AR2050V 92

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

show openvpn connections. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2991

show pbr rules brief . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1470

show pbr rules brief . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1625

show pbr rules. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1465

show pbr rules. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1620

show ping-poll . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2803

show platform port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 445

show platform. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 444

show port etherchannel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 588

show pppoe-ac config-check. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 658

show pppoe-ac connections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 660

show pppoe-ac statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 662

show privilege. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 199

show process. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 261

show proxy-autoconfig-file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1979

show radius local-server group. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2080

show radius local-server nas . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2081

show radius local-server statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2082

show radius local-server user. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2083

show radius server group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2021

show radius . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2040

show reboot history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 263

show resource. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 219

show route-map. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1406

show route-map. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1450

show router-id. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 264

show running-config atmf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2376

show running-config dpi. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2914

show running-config ds-lite. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3058

show running-config firewall. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2834

show running-config interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 158

show running-config ips . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2896

show running-config l2tp-profile. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3032

show running-config l2tp-tunnel. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3033

show running-config log. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 371

C613-50228-01 Rev A Command Reference for AR2050V 93

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

show running-config nat. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2887

show running-config pppoe-ac . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 665

show running-config router ipv6 vrrp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2152

show running-config router vrrp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2153

show running-config snmp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2659

show running-config ssh. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2724

show running-config traffic-control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1873

show running-config trigger . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2762

show running-config url-filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2902

show running-config vrf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1572

show running-config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 154

show security-password configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 200

show security-password user. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 201

show snmp-server community . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2661

show snmp-server group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2662

show snmp-server user . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2663

show snmp-server view . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2664

show snmp-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2660

show spanning-tree brief . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 514

show spanning-tree mst config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 516

show spanning-tree mst detail interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 519

show spanning-tree mst detail interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 524

show spanning-tree mst detail . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 517

show spanning-tree mst instance interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 522

show spanning-tree mst instance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 521

show spanning-tree mst interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 523

show spanning-tree mst . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 515

show spanning-tree statistics instance interface . . . . . . . . . . . . . . . . . . . . . . . . . . 529

show spanning-tree statistics instance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 528

show spanning-tree statistics interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 531

show spanning-tree statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 526

show spanning-tree vlan range-index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 533

show spanning-tree . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 511

show ssh client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2728

show ssh server allow-users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2731

C613-50228-01 Rev A Command Reference for AR2050V 94

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

show ssh server deny-users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2732

show ssh server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2729

show ssh . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2726

show startup-config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 160

show static-channel-group. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 589

show storm-control. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 447

show system environment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 266

show system interrupts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 267

show system mac. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 268

show system pci device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 269

show system pci tree . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 270

show system serialnumber. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 271

show system usb . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 408

show system . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 265

show tacacs+. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2121

show tech-support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 272

show telnet. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 202

show traffic-control counters. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1875

show traffic-control interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1877

show traffic-control policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1879

show traffic-control red-curve. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1881

show traffic-control rule config-check . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1883

show traffic-control rule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1884

show traffic-control. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1885

show trigger. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2763

show url-filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2903

show users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 203

show version . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 161

show vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 486

show vrrp (session) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2160

show vrrp counters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2156

show vrrp ipv6. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2159

show vrrp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2154

show wireless ap capability . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2472

show wireless ap client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2474

C613-50228-01 Rev A Command Reference for AR2050V 95

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

show wireless ap neighbors. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2475

show wireless ap power-channel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2476

show wireless ap . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2467

show wireless ap-profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2477

show wireless country-code. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2479

show wireless network. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2480

show wireless power-channel calculate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2482

show wireless security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2483

show wireless task . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2486

show wireless wds . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2489

show wireless . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2466

shutdown . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 398

size (linkmon-probe). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1627

snmp trap link-status suppress . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2667

snmp trap link-status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2665

snmp-server community . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2671

snmp-server contact. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2672

snmp-server enable trap . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2673

snmp-server engineID local reset. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2677

snmp-server engineID local . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2675

snmp-server group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2678

snmp-server host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2680

snmp-server legacy-ifadminstatus. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2682

snmp-server location . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2683

snmp-server source-interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2684

snmp-server startup-trap-delay . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2685

snmp-server user . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2686

snmp-server view. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2689

snmp-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2669

sntp-address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2627

source (linkmon-probe). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1628

source. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3034

source-ip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2807

spanning-tree autoedge (RSTP and MSTP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 534

spanning-tree cisco-interoperability (MSTP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 535

C613-50228-01 Rev A Command Reference for AR2050V 96

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

spanning-tree edgeport (RSTP and MSTP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 536

spanning-tree enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 537

spanning-tree errdisable-timeout enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 539

spanning-tree errdisable-timeout interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 540

spanning-tree force-version. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 541

spanning-tree forward-time. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 542

spanning-tree guard root . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 543

spanning-tree hello-time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 544

spanning-tree link-type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 545

spanning-tree max-age . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 546

spanning-tree max-hops (MSTP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 547

spanning-tree mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 548

spanning-tree mst configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 549

spanning-tree mst instance path-cost . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 551

spanning-tree mst instance priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 553

spanning-tree mst instance restricted-role. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 554

spanning-tree mst instance restricted-tcn . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 556

spanning-tree mst instance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 550

spanning-tree path-cost . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 557

spanning-tree portfast (STP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 558

spanning-tree portfast bpdu-filter. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 560

spanning-tree portfast bpdu-guard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 562

spanning-tree priority (bridge priority) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 564

spanning-tree priority (port priority). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 565

spanning-tree restricted-role. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 566

spanning-tree restricted-tcn . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 567

spanning-tree transmit-holdcount . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 568

speed (asyn). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 274

speed . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 448

sport . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2867

ssh client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2735

ssh server allow-users. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2739

ssh server authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2741

ssh server deny-users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2743

ssh server max-auth-tries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2745

C613-50228-01 Rev A Command Reference for AR2050V 97

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

ssh server resolve-host. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2746

ssh server scp. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2747

ssh server sftp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2748

ssh server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2737

ssh . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1573

ssh . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2733

ssid (wireless-network). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2491

state . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2377

static-channel-group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 590

station-isolation enable (wireless-ap-prof-radio) . . . . . . . . . . . . . . . . . . . . . . . . .2492

storm-control level . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 450

sub-class (htb) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1886

sub-class (priority) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1888

sub-class (wrr) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1890

subject-name (trustpoint configuration). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2112

subnet-mask . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2578

sub-sub-class (htb). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1892

sub-sub-class (priority). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1894

sub-sub-class (wrr). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1896

summary-address (IPv6 OSPF). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1117

summary-address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1024

suppress-ipv4-updates (DDNS). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 765

switchport access vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 487

switchport atmf-agentlink . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2379

switchport atmf-arealink remote-area . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2380

switchport atmf-crosslink . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2382

switchport atmf-guestlink. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2384

switchport atmf-link . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2386

switchport mode access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 488

switchport mode trunk . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 489

switchport trunk allowed vlan. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 490

switchport trunk native vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 493

synchronization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1407

tacacs-server host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2123

tacacs-server key . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2125

C613-50228-01 Rev A Command Reference for AR2050V 98

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

tacacs-server timeout. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2126

task . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2493

tcpdump . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1575

tcpdump . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 719

telnet server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 205

telnet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1576

telnet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 204

terminal length . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 206

terminal monitor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 276

terminal resize. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 207

test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2768

time (trigger) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2769

time (wireless-task) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2494

timeout (ping polling) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2809

timers (BGP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1408

timers (IPv6 RIPng). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 925

timers (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1577

timers (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 893

timers spf (IPv6 OSPF) (deprecated) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1119

timers spf exp (IPv6 OSPF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1120

timers spf exp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1025

traceroute ipv6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 812

traceroute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1579

traceroute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 720

traffic-control enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1898

traffic-control. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1899

transform (IPsec Profile). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2951

transform (ISAKMP Profile) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2952

transition-mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2162

trap . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2771

trigger activate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2773

trigger . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2772

tunnel checksum . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2972

tunnel destination (GRE) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2974

tunnel destination (IPsec) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2954

C613-50228-01 Rev A Command Reference for AR2050V 99

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

tunnel destination (L2TPv3) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3040

tunnel dscp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2973

tunnel local id . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3042

tunnel local name (GRE). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2976

tunnel local name (IPsec) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2956

tunnel local selector . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2957

tunnel mode gre. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2977

tunnel mode ipsec. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2959

tunnel mode l2tp v3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3043

tunnel mode openvpn tap . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2996

tunnel mode openvpn tun . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2997

tunnel openvpn authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2993

tunnel openvpn cipher . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2994

tunnel openvpn expiry-bytes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2998

tunnel openvpn expiry-seconds. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2999

tunnel openvpn port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3000

tunnel openvpn tagging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3001

tunnel protection ipsec (GRE) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2978

tunnel protection ipsec (IPsec) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2960

tunnel protection ipsec . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3044

tunnel remote id. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3045

tunnel remote name (GRE) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2979

tunnel remote name (IPsec) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2961

tunnel remote selector. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2962

tunnel security-reprocessing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2964

tunnel security-reprocessing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2980

tunnel security-reprocessing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3002

tunnel security-reprocessing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3046

tunnel security-reprocessing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3059

tunnel source (GRE). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2981

tunnel source (IPsec). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2965

tunnel source (L2TPv3). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3047

tunnel ttl . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2983

type (wireless-sec-wep) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2498

type ap-configuration apply ap . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2495

C613-50228-01 Rev A Command Reference for AR2050V 100

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

type atmf node . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2387

type atmf node . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2774

type cpu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2777

type download ap (wireless-task). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2496

type interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2778

type log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2779

type memory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2780

type periodic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2781

type ping-poll . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2782

type power-channel ap all . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2497

type reboot . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2783

type time. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2784

type usb. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2785

undebug (DDNS) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 766

undebug aaa . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2023

undebug all ipv6 pim sparse-mode. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1850

undebug all pim sparse-mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1790

undebug all . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 277

undebug atmf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2390

undebug bgp (BGP only). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1409

undebug igmp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1681

undebug ip packet interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 721

undebug ipv6 ospf events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1121

undebug ipv6 ospf ifsm. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1122

undebug ipv6 ospf lsa . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1123

undebug ipv6 ospf nfsm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1124

undebug ipv6 ospf packet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1125

undebug ipv6 ospf route. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1126

undebug ipv6 pim sparse-mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1851

undebug ipv6 rip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 926

undebug isakmp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2967

undebug lacp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 592

undebug mail . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2699

undebug mstp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 569

undebug ospf events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1026

C613-50228-01 Rev A Command Reference for AR2050V 101

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

undebug ospf ifsm. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1027

undebug ospf lsa . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1028

undebug ospf nfsm. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1029

undebug ospf nsm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1030

undebug ospf packet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1031

undebug ospf route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1032

undebug ping-poll . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2811

undebug platform packet. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 451

undebug ppp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 639

undebug radius . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2043

undebug rip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 895

undebug snmp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2690

undebug ssh client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2749

undebug ssh server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2750

undebug trigger. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2786

undebug vrrp events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2165

undebug vrrp packet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2166

undebug vrrp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2164

unmount . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 166

unmount . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 372

up-count . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2810

update webgui now . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 217

update webgui now . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 220

update-interval (DDNS) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 767

update-url (DDNS) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 768

url-filter reload custom-lists . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2904

url-filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2905

usb mode-switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 410

use-ipv4-for-ipv6-updates (DDNS). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 771

user (RADIUS server) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2085

username (DDNS). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 772

username . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 208

username . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2391

vap network (wireless-ap-prof-radio) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2499

version (ISAKMP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2968

C613-50228-01 Rev A Command Reference for AR2050V 102

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

version (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1580

version (RIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 896

version . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3035

versions (wireless-sec-wpa-ent) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2500

versions (wireless-sec-wpa-psnl) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2501

virtual-ip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2167

virtual-ipv6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2169

vlan (RADIUS server) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2087

vlan (wireless-network) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2502

vlan database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 495

vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 494

vrrp vmac . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2171

wait . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 376

wds radio (wireless-ap) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2504

wds . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2503

web-auth radius auth group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2505

whitelist. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2906

wireless ap-configuration apply ap . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2507

wireless download ap url . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2508

wireless power-channel ap all . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2510

wireless reset ap . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2511

wireless . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2506

write file. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 167

write memory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 168

write terminal . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 169

zone . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2869

C613-50228-01 Rev A Command Reference for AR2050V 103

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

Part 1: Setup and Troubleshooting

C613-50228-01 Rev A Command Reference for AR2050V 104

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

CLI Navigation

Commands

Introduction

Overview This chapter provides an alphabetical reference for the commands used to

navigate between different modes. This chapter also provides a reference for the

help and show commands used to help navigate within the CLI.

Command List •“configure terminal” on page 105

•“disable (Privileged Exec mode)” on page 106

•“do” on page 107

•“enable (Privileged Exec mode)” on page 108

•“end” on page 110

•“exit” on page 111

•“help” on page 112

•“logout” on page 113

•“show history” on page 114

C613-50228-01 Rev A Command Reference for AR2050V 105

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

CLI NAVIGATION COMMANDS

CONFIGURE TERMINAL

configure terminal

Overview This command enters the Global Configuration command mode.

Syntax configure terminal

Mode Privileged Exec

Example To enter the Global Configuration command mode (note the change in the

command prompt), enter the command:

awplus# configure terminal

awplus(config)#

C613-50228-01 Rev A Command Reference for AR2050V 106

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

CLI NAVIGATION COMMANDS

DISABLE (PRIVILEGED EXEC MODE)

disable (Privileged Exec mode)

Overview This command exits the Privileged Exec mode, returning the prompt to the User

Exec mode. To end a session, use the exit command.

Syntax disable

Mode Privileged Exec

Example To exit the Privileged Exec mode, enter the command:

awplus# disable

awplus>

Commands

enable (Privileged Exec mode)

end

exit

C613-50228-01 Rev A Command Reference for AR2050V 107

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

CLI NAVIGATION COMMANDS

Overview This command lets you to run User Exec and Privileged Exec mode commands

when you are in any configuration mode.

Syntax do <command>

Mode Any configuration mode

Example awplus# configure terminal

awplus(config)# do ping 192.0.2.23

Parameter Description

<command>Specify the command and its parameters.

C613-50228-01 Rev A Command Reference for AR2050V 108

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

CLI NAVIGATION COMMANDS

ENABLE (PRIVILEGED EXEC MODE)

enable (Privileged Exec mode)

Overview This command enters the Privileged Exec mode and optionally changes the

privilege level for a session. If a privilege level is not specified then the maximum

privilege level (15) is applied to the session. If the optional privilege level is omitted

then only users with the maximum privilege level can access Privileged Exec mode

without providing the password as specified by the enable password or enable

secret commands. If no password is specified then only users with the maximum

privilege level set with the username command can assess Privileged Exec mode.

Syntax enable [<privilege-level>]

Mode User Exec

Usage Many commands are available from the Privileged Exec mode that configure

operating parameters for the device, so you should apply password protection to

the Privileged Exec mode to prevent unauthorized use. Passwords can be

encrypted but then cannot be recovered. Note that non-encrypted passwords are

shown in plain text in configurations.

The username command sets the privilege level for the user. After login, users are

given access to privilege level 1. Users access higher privilege levels with the

enable (Privileged Exec mode) command. If the privilege level specified is higher

than the users configured privilege level specified by the username command,

then the user is prompted for the password for that level.

Note that a separate password can be configured for each privilege level using the

enable password and the enable secret commands from the Global Configuration

mode. The service password-encryption command encrypts passwords

configured by the enable password and the enable secret commands, so

passwords are not shown in plain text in configurations.

Example The following example shows the use of the enable command to enter the

Privileged Exec mode (note the change in the command prompt).

awplus> enable

awplus#

The following example shows the enable command enabling access the

Privileged Exec mode for users with a privilege level of 7 or greater. Users with a

privilege level of 7 or greater do not need to enter a password to access Privileged

Exec mode. Users with a privilege level 6 or less need to enter a password to access

Parameter Description

<privilege

- level>

Specify the privilege level for a CLI session in the range <1-15>, where

15 is the maximum privilege level, 7 is the intermediate privilege level

and 1 is the minimum privilege level. The privilege level for a user must

match or exceed the privilege level set for the CLI session for the user

to access Privileged Exec mode. Privilege level for a user is configured

by username.

C613-50228-01 Rev A Command Reference for AR2050V 109

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

CLI NAVIGATION COMMANDS

ENABLE (PRIVILEGED EXEC MODE)

Privilege Exec mode. Use the enable password command or the enable secret

commands to set the password to enable access to Privileged Exec mode.

awplus> enable 7

awplus#

Commands

disable (Privileged Exec mode)

enable password

enable secret

exit

service password-encryption

username

C613-50228-01 Rev A Command Reference for AR2050V 110

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

CLI NAVIGATION COMMANDS

END

end

Overview This command returns the prompt to the Privileged Exec command mode from

any other advanced command mode.

Syntax end

Mode All advanced command modes, including Global Configuration and Interface

Configuration modes.

Example The following example shows the use of the end command to return to the

Privileged Exec mode directly from Interface mode.

awplus# configure terminal

awplus(config)# interface eth1

awplus(config-if)# end

awplus#

Commands

disable (Privileged Exec mode)

enable (Privileged Exec mode)

exit

C613-50228-01 Rev A Command Reference for AR2050V 111

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

CLI NAVIGATION COMMANDS

EXIT

exit

Overview This command exits the current mode, and returns the prompt to the mode at the

previous level. When used in User Exec mode, the exit command terminates the

session.

Syntax exit

Mode All command modes, including Global Configuration and Interface Configuration

modes.

Example The following example shows the use of the exit command to exit Interface mode,

and return to Configure mode.

awplus# configure terminal

awplus(config)# interface eth1

awplus(config-if)# exit

awplus(config)#

Commands

disable (Privileged Exec mode)

enable (Privileged Exec mode)

end

C613-50228-01 Rev A Command Reference for AR2050V 112

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

CLI NAVIGATION COMMANDS

HELP

help

Overview This command displays a description of the AlliedWare Plus™ OS help system.

Syntax help

Mode All command modes

Example To display a description on how to use the system help, use the command:

awplus# help

Output Figure 1-1: Example output from the help command

When you need help at the command line, press '?'.



If nothing matches, the help list will be empty. Delete 

characters until entering a '?' shows the available options.



Enter '?' after a complete parameter to show remaining valid 

command parameters (e.g. 'show ?').



Enter '?' after part of a parameter to show parameters that 

complete the typed letters (e.g. 'show ip?').

C613-50228-01 Rev A Command Reference for AR2050V 113

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

CLI NAVIGATION COMMANDS

LOGOUT

logout

Overview This command exits the User Exec or Privileged Exec modes and ends the session.

Syntax logout

Mode User Exec and Privileged Exec

Example To exit the User Exec mode, use the command:

awplus# logout

C613-50228-01 Rev A Command Reference for AR2050V 114

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

CLI NAVIGATION COMMANDS

SHOW HISTORY

show history

Overview This command lists the commands entered in the current session. The history

buffer is cleared automatically upon reboot.

The output lists all command line entries, including commands that returned an

error.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide.

Syntax show history

Mode User Exec and Privileged Exec

Example To display the commands entered during the current session, use the command:

awplus# show history

Output Figure 1-2: Example output from the show history command

1 en

2 show ru

3 conf t

4 route-map er deny 3

5 exit

6 ex

7 di

C613-50228-01 Rev A Command Reference for AR2050V 115

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

File and

Configuration

Management

Commands

Introduction

Overview This chapter provides an alphabetical reference of AlliedWare Plus™ OS file and

configuration management commands.

Filename Syntax

and Keyword

Usage

Many of the commands in this chapter use the placeholder “filename” to represent

the name and location of the file that you want to act on. The following table

explains the syntax of the filename for each different type of file location.

When you copy a

file... Use this syntax: Example:

Copying in local

Flash memory

flash:[/][<directory>/]<filename>To specify a file in the configs directory

in Flash:

flash:configs/example.cfg

Copying to or from

a USB storage

device

usb:[/][<directory>/]<filename>To specify a file in the top-level

directory of the USB stick:

usb:example.cfg

Copying with

HTTP

http://[[<username>:<password>]@]

{<hostname>|<host-ip>}[/<filepath

>]/<filename>

To specify a file in the configs directory

on the server:

http://www.company.com/configs/exa

mple.cfg

Copying with TFTP tftp://[[<location>]/<directory>]

/<filename>

To specify a file in the top-level

directory of the server:

tftp://172.1.1.1/example.cfg

Copying with SCP scp://<username>@<location>[/<dir

ectory>][/<filename>]

To specify a file in the configs directory

on the server, logging on as user “bob”:

e.g.

scp://bob@10.10.0.12/configs/example

.cfg

Copying with SFTP sftp://[[<location>]/<directory>]

/<filename>

To specify a file in the top-level

directory of the server:

sftp://10.0.0.5/example.cfg

C613-50228-01 Rev A Command Reference for AR2050V 116

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

Valid characters The filename and path can include characters from up to four categories. The

categories are:

1) uppercase letters: A to Z

2) lowercase letters: a to z

3) digits: 0 to 9

4) special symbols: most printable ASCII characters not included in the previous

three categories, including the following characters:

•-

•/

•.

•_

•@

•"

•'

•*

•:

•~

•?

Do not use spaces, parentheses or the + symbol within filenames. Use hyphens or

underscores instead.

Syntax for

directory listings

A leading slash (/) indicates the root of the current filesystem location.

In commands where you need to specify the local filesystem’s Flash base directory,

you may use flash or flash: or flash:/. For example, these commands are all the

same:

•dir flash

•dir flash:

•dir flash:/

Similarly, you can specify the USB storage device base directory with usb or usb:

or usb:/

You cannot name a directory or subdirectory flash, nvs, usb, card, tftp, scp, sftp

or http. These keywords are reserved for tab completion when using various file

commands.

Command List •“autoboot enable” on page 118

•“boot config-file” on page 119

•“boot config-file backup” on page 121

•“boot system” on page 122

C613-50228-01 Rev A Command Reference for AR2050V 117

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

•“boot system backup” on page 123

•“cd” on page 124

•“copy (filename)” on page 125

•“copy current-software” on page 127

•“copy debug” on page 128

•“copy running-config” on page 129

•“copy startup-config” on page 130

•“copy zmodem” on page 131

•“create autoboot” on page 132

•“delete” on page 133

•“delete debug” on page 134

•“dir” on page 135

•“edit” on page 137

•“edit (filename)” on page 138

•“erase factory-default” on page 139

•“erase startup-config” on page 140

•“ip tftp source-interface” on page 141

•“ipv6 tftp source-interface” on page 142

•“mkdir” on page 143

•“move” on page 144

•“move debug” on page 145

•“pwd” on page 146

•“rmdir” on page 147

•“show autoboot” on page 148

•“show boot” on page 149

•“show file” on page 151

•“show file systems” on page 152

•“show running-config” on page 154

•“show running-config interface” on page 158

•“show startup-config” on page 160

•“show version” on page 161

•“unmount” on page 166

•“write file” on page 167

•“write memory” on page 168

•“write terminal” on page 169

C613-50228-01 Rev A Command Reference for AR2050V 118

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

AUTOBOOT ENABLE

autoboot enable

Overview This command enables the device to restore a release file and/or a configuration

file from a USB storage device.

When the Autoboot feature is enabled, the device looks for a special file called

autoboot.txt on the external media. If this file exists, the device will check the key

and values in the file and recover the device with a new release file and/or

configuration file from the external media. An example of a valid autoboot.txt file

is shown in the following figure.

Figure 2-1: Example autoboot.txt file

Use the no variant of this command to disable the Autoboot feature.

Syntax autoboot enable

no autoboot enable

Default The Autoboot feature operates the first time the device is powered up in the field,

after which the feature is disabled by default.

Mode Global Configuration

Example To enable the Autoboot feature, use the command:

awplus# configure terminal

awplus(config)# autoboot enable

Commands

create autoboot

show autoboot

show boot

[AlliedWare Plus]

Copy_from_external_media_enabled=yes

Boot_Release=AR2050V-5.4.8-0.2.rel

Boot_Config=network1.cfg

C613-50228-01 Rev A Command Reference for AR2050V 119

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

BOOT CONFIG-FILE

boot config-file

Overview Use this command to set the configuration file to use during the next boot cycle.

Use the no variant of this command to remove the configuration file.

Syntax boot config-file <filepath-filename>

no boot config-file

Mode Global Configuration

Usage You can only specify that the configuration file is on a USB storage device if there

is a backup configuration file already specified in Flash. If you attempt to set the

configuration file on a USB storage device and a backup configuration file is not

specified in Flash, the following error message is displayed:

For an explanation of the configuration fallback order, see the File Management

Feature Overview and Configuration Guide.

Examples To run the configuration file “branch.cfg” the next time the device boots up, when

“branch.cfg” is stored on the device’s Flash filesystem, use the commands:

awplus# configure terminal

awplus(config)# boot config-file flash:/branch.cfg

To stop running the configuration file “branch.cfg” when the device boots up,

when “branch.cfg” is stored on the device’s Flash filesystem, use the commands:

awplus# configure terminal

awplus(config)# no boot config-file flash:/branch.cfg

To run the configuration file “branch.cfg” the next time the device boots up, when

“branch.cfg” is stored on a USB storage device, use the commands:

awplus# configure terminal

awplus(config)# boot config-file usb:/branch.cfg

Parameter Description

<filepath-filename> Filepath and name of a configuration file.

The specified configuration file must exist in the

specified filesystem.

Valid configuration files must have a . cfg extension.

% Backup configuration files must be stored in the flash

filesystem

C613-50228-01 Rev A Command Reference for AR2050V 120

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

BOOT CONFIG-FILE

To stop running the configuration file “branch.cfg” when the device boots up,

when “branch.cfg” is stored on a USB storage device, use the commands:

awplus# configure terminal

awplus(config)# no boot config-file usb:/branch.cfg

Commands

boot config-file backup

boot system

boot system backup

show boot

C613-50228-01 Rev A Command Reference for AR2050V 121

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

BOOT CONFIG-FILE BACKUP

boot config-file backup

Overview Use this command to set a backup configuration file to use if the main

configuration file cannot be accessed.

Use the no variant of this command to remove the backup configuration file.

Syntax boot config-file backup <filepath-filename>

no boot config-file backup

Mode Global Configuration

Usage For an explanation of the configuration fallback order, see the File Management

Feature Overview and Configuration Guide.

Examples To set the configuration file backup.cfg as the backup to the main

configuration file, use the commands:

awplus# configure terminal

awplus(config)# boot config-file backup flash:/backup.cfg

To remove the configuration file backup.cfg as the backup to the main

configuration file, use the commands:

awplus# configure terminal

awplus(config)# no boot config-file backup flash:/backup.cfg

Commands

boot config-file

boot system

boot system backup

show boot

Parameter Description

<filepath-filename> Filepath and name of a backup configuration file.

Backup configuration files must be in the Flash filesystem.

Valid backup configuration files must have a . cfg

extension.

backup The specified file is a backup configuration file.

C613-50228-01 Rev A Command Reference for AR2050V 122

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

BOOT SYSTEM

boot system

Overview Use this command to set the release file to load during the next boot cycle.

Use the no variant of this command to stop specifying a primary release file to boot

from. If the device boots up with no release file set, it will use autoboot or the

backup release file if either of those are configured, or you can use the boot menu

to select a release file source. To access the boot menu, type Ctrl-B at bootup.

Syntax boot system <filepath-filename>

no boot system

Mode Global Configuration

Usage You can only specify that the release file is on a USB storage device if there is a

backup release file already specified in Flash. If you attempt to set the release file

on a USB storage device and a backup release file is not specified in Flash, the

following error message is displayed:

Examples To boot up with the release AR2050V-5.4.8-0.2.rel file the next time the device

boots up, when the release file is stored on the device’s Flash filesystem, use the

commands:

awplus# configure terminal

awplus(config)# boot system flash:/AR2050V-5.4.8-0.2.rel

To run the release file AR2050V-5.4.8-0.2.rel the next time the device boots up,

when the release file is stored on a USB storage device, use the commands:

awplus# configure terminal

awplus(config)# boot system usb:/AR2050V-5.4.8-0.2.rel

Commands

boot config-file

boot config-file backup

boot system backup

show boot

Parameter Description

<filepath-filename> Filepath and name of a release file.

The specified release file must exist and must be stored

in the root directory of the specified filesystem.

Valid release files must have a . rel extension.

% A backup boot image must be set before setting a current boot 

image on USB storage device

C613-50228-01 Rev A Command Reference for AR2050V 123

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

BOOT SYSTEM BACKUP

boot system backup

Overview Use this command to set a backup release file to load if the main release file cannot

be loaded.

Use the no variant of this command to stop specifying a backup release file.

Syntax boot system backup <filepath-filename>

no boot system backup

Mode Global Configuration

Examples To specify the file AR2050V-5.4.7-2.1.rel as the backup to the main release file, use

the commands:

awplus# configure terminal

awplus(config)# boot system backup flash:/AR2050V-5.4.7-2.1.rel

To stop specifying a backup to the main release file, use the commands:

awplus# configure terminal

awplus(config)# no boot system backup

Commands

boot config-file

boot config-file backup

boot system

show boot

Parameter Description

<filepath-filename> Filepath and name of a backup release file.

Backup release files must be in the Flash filesystem.

Valid release files must have a . rel extension.

backup The specified file is a backup release file.

C613-50228-01 Rev A Command Reference for AR2050V 124

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

Overview This command changes the current working directory.

Syntax cd <directory-name>

Mode Privileged Exec

Example To change to the directory called images, use the command:

awplus# cd images

Commands

dir

pwd

show file systems

Parameter Description

<directory-name> Name and path of the directory.

C613-50228-01 Rev A Command Reference for AR2050V 125

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

COPY (FILENAME)

copy (filename)

Overview This command copies a file. This allows you to:

• copy files from your device to a remote device

• copy files from a remote device to your device

• copy files stored on Flash memory to or from a different memory type, such

as a USB storage device

• create two copies of the same file on your device

Syntax copy [force] <source-name> <destination-name>

Mode Privileged Exec

Examples To use TFTP to copy the file “bob.key” into the current directory from the remote

server at 10.0.0.1, use the command:

awplus# copy tftp://10.0.0.1/bob.key bob.key

To use SFTP to copy the file “new.cfg” into the current directory from a remote

server at 10.0.1.2, use the command:

awplus# copy sftp://10.0.1.2/new.cfg bob.key

To use SCP with the username “beth” to copy the file old.cfg into the directory

config_files on a remote server that is listening on TCP port 2000, use the

command:

awplus# copy scp://beth@serv:2000/config_files/old.cfg old.cfg

To copy the file “newconfig.cfg” onto your device’s Flash from a USB storage

device, use the command:

awplus# copy usb:/newconfig.cfg flash:/newconfig.cfg

To copy the file “newconfig.cfg” to a USB storage device from your device’s Flash,

use the command:

awplus# copy flash:/newconfig.cfg usb:/newconfig.cfg

Parameter Description

force This parameter forces the copy command to overwrite the

destination file, if it already exists, without prompting the

user for confirmation.

<source-name> The filename and path of the source file. See Introduction

on page 115 for valid syntax.

<destination-name> The filename and path for the destination file. See

Introduction on page 115 for valid syntax.

C613-50228-01 Rev A Command Reference for AR2050V 126

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

COPY (FILENAME)

To copy the file “config.cfg” into the current directory from a USB storage device,

and rename it to “configtest.cfg”, use the command:

awplus# copy usb:/config.cfg configtest.cfg

To copy the file “config.cfg” into the current directory from a remote file server, and

rename it to “configtest.cfg”, use the command:

awplus# copy fserver:/config.cfg configtest.cfg

On an AMF network, to copy the file “file.txt” from the node named master to the

Flash memory of the local node, use the commands:

awplus# atmf working-set group all

network-name[80]# copy master.atmf/flash:/file.txt flash:

Commands

copy zmodem

copy buffered-log

copy permanent-log

edit (filename)

show file systems

C613-50228-01 Rev A Command Reference for AR2050V 127

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

COPY CURRENT-SOFTWARE

copy current-software

Overview This command copies the AlliedWare Plus™ OS software that the device has

booted from, to a destination file.

Syntax copy current-software <destination-name>

Mode Privileged Exec

Example To copy the current software as installed in the working directory with the file

name my-release.rel, use the command:

awplus# copy current-software my-release.rel

Commands

boot system backup

show boot

Parameter Description

<destination-name> The filename and path where you would like the current

running-release saved. This command creates a file if no file

exists with the specified filename. If a file already exists,

then the CLI prompts you before overwriting the file. See

Introduction on page 115 for valid syntax.

C613-50228-01 Rev A Command Reference for AR2050V 128

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

COPY DEBUG

copy debug

Overview This command copies a specified debug file to a destination file.

Syntax copy debug {<destination-name>|debug|flash|nvs|scp|tftp|usb}

{<source-name>|debug|flash|nvs|scp|tftp|usb}

Mode Privileged Exec

Example To copy debug output to a file on flash called “my-debug”, use the following

command:

awplus# copy debug flash:my-debug

To copy debug output to a USB storage device with a filename “my-debug”, use

the following command:

awplus# copy debug usb:my-debug

Output Figure 2-2: CLI prompt after entering the copy debug command

Commands

delete debug

move debug

Parameter Description

<destination-name> The filename and path where you would like the debug

output saved. See Introduction on page 115 for valid

syntax.

<source-name> The filename and path where the debug output originates.

See the Introduction to this chapter for valid syntax.

Enter source file name []:

C613-50228-01 Rev A Command Reference for AR2050V 129

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

COPY RUNNING-CONFIG

copy running-config

Overview This command copies the running-config to a destination file, or copies a source

file into the running-config. Commands entered in the running-config do not

survive a device reboot unless they are saved in a configuration file.

Syntax copy <source-name> running-config

copy running-config [<destination-name>]

copy running-config startup-config

Mode Privileged Exec

Examples To copy the running-config into the startup-config, use the command:

awplus# copy running-config startup-config

To copy the file layer3.cfg into the running-config, use the command:

awplus# copy layer3.cfg running-config

To use SCP to copy the running-config as current.cfg to the remote server

listening on TCP port 2000, use the command:

awplus# copy running-config

scp://user@server:2000/config_files/current.cfg

Commands

copy startup-config

write file

write memory

Parameter Description

<source-name>The filename and path of a configuration file. This must be

a valid configuration file with a . cfg filename extension.

Specify this when you want the script in the file to become

the new running-config. See Introduction on page 115 for

valid syntax.

<destination-name>The filename and path where you would like the current

running-config saved. This command creates a file if no file

exists with the specified filename. If a file already exists,

then the CLI prompts you before overwriting the file. See

Introduction on page 115 for valid syntax. If you do not

specify a file name, the device saves the running-config to

a file called default.cfg.

startup-config Copies the running-config into the file set as the current

startup-config file.

C613-50228-01 Rev A Command Reference for AR2050V 130

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

COPY STARTUP-CONFIG

copy startup-config

Overview This command copies the startup-config script into a destination file, or

alternatively copies a configuration script from a source file into the startup-config

file.

Syntax copy <source-name> startup-config

copy startup-config <destination-name>

Mode Privileged Exec

Examples To copy the file Layer3.cfg to the startup-config, use the command:

awplus# copy Layer3.cfg startup-config

To copy the startup-config as the file oldconfig.cfg in the current

directory, use the command:

awplus# copy startup-config oldconfig.cfg

Commands

copy running-config

Parameter Description

<source-name> The filename and path of a configuration file. This must be

a valid configuration file with a . cfg filename extension.

Specify this to copy the script in the file into the startup-

config file. Note that this does not make the copied file the

new startup file, so any further changes made in the

configuration file are not added to the startup-config file

unless you reuse this command. See Introduction on page

115 for valid syntax.

<destination-name> The destination and filename that you are saving the

startup- config as. This command creates a file if no file

exists with the specified filename. If a file already exists,

then the CLI prompts you before overwriting the file. See

Introduction on page 115 for valid syntax.

C613-50228-01 Rev A Command Reference for AR2050V 131

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

COPY ZMODEM

copy zmodem

Overview This command allows you to copy files using ZMODEM using Minicom. ZMODEM

works over a serial connection and does not need any interfaces configured to do

a file transfer.

Syntax copy <source-name> zmodem

copy zmodem

Mode Privileged Exec

Example To copy the local file asuka.key using ZMODEM, use the command:

awplus# copy asuka.key zmodem

Commands

copy (filename)

show file systems

Parameter Description

<source-name> The filename and path of the source file. See Introduction on

page 115 for valid syntax.

C613-50228-01 Rev A Command Reference for AR2050V 132

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

CREATE AUTOBOOT

create autoboot

Overview Use this command to create an autoboot.txt file on an external storage device. This

command will automatically ensure that the keys and values that are expected in

this file are correct. After the file is created the create autoboot command will

copy the current release and configuration files across to the external storage

device. The external storage device is then available to restore a release file and/or

a configuration file to the device.

Syntax create autoboot usb

Mode Privileged Exec

Example To create an autoboot.txt file on a USB storage device, use the command:

awplus# create autoboot usb

Commands

autoboot enable

show autoboot

show boot

C613-50228-01 Rev A Command Reference for AR2050V 133

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

DELETE

delete

Overview This command deletes files or directories.

Syntax delete [force] [recursive] <filename>

Mode Privileged Exec

Examples To delete the file temp.cfg from the current directory, use the command:

awplus# delete temp.cfg

To delete the read-only file one.cfg from the current directory, use the

command:

awplus# delete force one.cfg

To delete the directory old_configs, which is not empty, use the command:

awplus# delete recursive old_configs

To delete the directory new_configs, which is not empty, without prompting if

any read-only files are being deleted, use the command:

awplus# delete force recursive new_configs

Commands

erase startup-config

rmdir

Parameter Description

force Ignore nonexistent filenames and never prompt before deletion.

recursive Remove the contents of directories recursively.

<filename>The filename and path of the file to delete. See Introduction on page

115 for valid syntax.

C613-50228-01 Rev A Command Reference for AR2050V 134

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

DELETE DEBUG

delete debug

Overview Use this command to delete a specified debug output file.

Syntax delete debug <source-name>

Mode Privileged Exec

Example To delete debug output, use the following command:

awplus# delete debug

Output Figure 2-3: CLI prompt after entering the delete debug command

Commands

copy debug

move debug

Parameter Description

<source-name> The filename and path where the debug output originates.

See Introduction on page 115 for valid URL syntax.

Enter source file name []:

C613-50228-01 Rev A Command Reference for AR2050V 135

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

DIR

dir

Overview This command lists the files on a filesystem. If you don’t specify a directory or file,

then this command lists the files in the current directory.

Syntax dir [all] [recursive] [sort [reverse] [name|size|time]]

[<filename>|debug|flash|nvs|usb]

Mode Privileged Exec

Examples To list the files in the current working directory, use the command:

awplus# dir

To list the non-hidden files in the root of the Flash filesystem, use the command:

awplus# dir flash

To list all the files in the root of the Flash filesystem, use the command:

awplus# dir all flash:

To list recursively the files in the Flash filesystem, use the command:

awplus# dir recursive flash:

To list the files in alphabetical order, use the command:

awplus# dir sort name

Parameter Description

all List all files.

recursive List the contents of directories recursively.

sort Sort directory listing.

reverse Sort using reverse order.

name Sort by name.

size Sort by size.

time Sort by modification time (default).

<filename>The name of the directory or file. If you don’t specify a

directory or file, then this command lists the files in the

current directory.

debug Debug root directory

flash Flash memory root directory

nvs NVS memory root directory

usb USB storage device root directory

C613-50228-01 Rev A Command Reference for AR2050V 136

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

DIR

To list the files by size, smallest to largest, use the command:

awplus# dir sort reverse size

To sort the files by modification time, oldest to newest, use the command:

awplus# dir sort reverse time

Output Figure 2-4: Example output from the dir command

Commands

pwd

awplus#dir

630 -rw- May 19 2016 23:36:31 example.cfg

23652123 -rw- May 17 2016 03:41:18 

149 -rw- Feb 9 2016 00:40:35 exception.log

C613-50228-01 Rev A Command Reference for AR2050V 137

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

EDIT

edit

Overview This command opens a text file in the AlliedWare Plus™ text editor. Once opened

you can use the editor to alter to the file.

If a filename is specified and it already exists, then the editor opens it in the text

editor.

If no filename is specified, the editor prompts you for one when you exit it.

Before starting the editor make sure your terminal, terminal emulation program, or

Telnet client is 100% compatible with a VT100 terminal. The editor uses VT100

control sequences to display text on the terminal.

For more information about using the editor, including control sequences, see the

File Management Feature Overview and Configuration Guide.

Syntax edit [<filename>]

Mode Privileged Exec

Examples To create and edit a new text file, use the command:

awplus# edit

To edit the existing configuration file myconfig.cfg stored on your device’s

Flash memory, use the command:

awplus# edit myconfig.cfg

Commands

edit (filename)

show file

Parameter Description

<filename> Name of a file in the local Flash filesystem.

C613-50228-01 Rev A Command Reference for AR2050V 138

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

EDIT (FILENAME)

edit (filename)

Overview This command opens a remote text file as read-only in the AlliedWare Plus™ text

editor.

Before starting the editor make sure your terminal, terminal emulation program, or

Telnet client is 100% compatible with a VT100 terminal. The editor uses VT100

control sequences to display text on the terminal.

Syntax edit <filename>

Mode Privileged Exec

Example To view the file bob.key stored in the security directory of a TFTP server, use the

command:

awplus# edit tftp://security/bob.key

Commands

copy (filename)

edit

show file

Parameter Description

<filename> The filename and path of the remote file. See Introduction on

page 115 for valid syntax.

C613-50228-01 Rev A Command Reference for AR2050V 139

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

ERASE FACTORY-DEFAULT

erase factory-default

Overview This command erases all data from NVS and all data from Flash excluding the

following:

• the current release file

• the backup release file

•license files

The device is then rebooted and returned to its factory default condition. The

device can then be used for AMF automatic node recovery.

Syntax erase factory-default

Mode Privileged Exec.

Usage This command is an alias to the atmf cleanup command.

Example To erase data, use the command:

Node_1# erase factory-default

This command will erase all NVS, all flash contents except for

the boot release, and any license files, and then reboot the

switch. Continue? (y/n):y

Commands

atmf cleanup

C613-50228-01 Rev A Command Reference for AR2050V 140

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

ERASE STARTUP-CONFIG

erase startup-config

Overview This command deletes the file that is set as the startup-config file, which is the

configuration file that the system runs when it boots up.

At the next restart, the device loads the default configuration file, default.cfg. If

default.cfg no longer exists, then the device loads with the factory default

configuration. This provides a mechanism for you to return the device to the

factory default settings.

Syntax erase startup-config

Mode Privileged Exec

Example To delete the file currently set as the startup-config, use the command:

awplus# erase startup-config

Commands

boot config-file backup

copy running-config

copy startup-config

show boot

C613-50228-01 Rev A Command Reference for AR2050V 141

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

IP TFTP SOURCE-INTERFACE

ip tftp source-interface

Overview Use this command to manually specify the IP address that all TFTP requests

originate from. This is useful in network configurations where TFTP servers only

accept requests from certain devices, or where the server cannot dynamically

determine the source of the request.

Use the no variant of this command to stop specifying a source.

Syntax ip tftp source-interface [<interface>|<ip-add>]

no ip tftp source-interface

Default There is no default source specified.

Mode Global Configuration

Usage This command is helpful in network configurations where TFTP traffic needs to

traverse point-to-point links or subnets within your network, and you do not want

to propagate those point-to-point links through your routing tables.

In those circumstances, the TFTP server cannot dynamically determine the source

of the TFTP request, and therefore cannot send the requested data to the correct

device. Specifying a source interface or address enables the TFTP server to send the

data correctly.

Example To specify that TFTP requests originate from the IP address 192.0.2.1, use the

following commands:

awplus# configure terminal

awplus(config)# ip tftp source-interface 192.0.2.1

Commands

copy (filename)

Parameter Description

<interface> The interface that TFTP requests originate from. The device will

use the IP address of this interface as its source IP address.

You can specify any interface that can have an IP address attached

to it (e.g. a VLAN, PPP or Eth interface).

<ip-add> The IP address that TFTP requests originate from, in dotted

decimal format

C613-50228-01 Rev A Command Reference for AR2050V 142

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

IPV6 TFTP SOURCE-INTERFACE

ipv6 tftp source-interface

Overview Use this command to manually specify the IPv6 address that all TFTP requests

originate from. This is useful in network configurations where TFTP servers only

accept requests from certain devices, or where the server cannot dynamically

determine the source of the request.

Use the no variant of this command to stop specifying a source.

Syntax ipv6 tftp source-interface [<interface>|<ipv6-add>]

no ipv6 tftp source-interface

Default There is no default source specified.

Mode Global Configuration

Usage This command is helpful in network configurations where TFTP traffic needs to

traverse point-to-point links or subnets within your network, and you do not want

to propagate those point-to-point links through your routing tables.

In those circumstances, the TFTP server cannot dynamically determine the source

of the TFTP request, and therefore cannot send the requested data to the correct

device. Specifying a source interface or address enables the TFTP server to send the

data correctly.

Example To specify that TFTP requests originate from the IPv6 address 2001:db8::8a2e:7334,

use the following commands:

awplus# configure terminal

awplus(config)# ipv6 tftp source-interface 2001:db8::8a2e:7334

Commands

copy (filename)

Parameter Description

<interface> The interface that TFTP requests originate from. The device will

use the IPv6 address of this interface as its source IPv6 address.

You can specify any interface that can have an IPv6 address

attached to it (e.g. a VLAN, PPP or Eth interface).

<ipv6-add> The IPv6 address that TFTP requests originate from, in the format

x:x::x:x, for example, 2001:db8::8a2e:7334.

C613-50228-01 Rev A Command Reference for AR2050V 143

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

MKDIR

mkdir

Overview This command makes a new directory.

Syntax mkdir <name>

Mode Privileged Exec

Usage You cannot name a directory or subdirectory flash, nvs, usb, card, tftp, scp, sftp

or http. These keywords are reserved for tab completion when using various file

commands.

Example To make a new directory called images in the current directory, use the

command:

awplus# mkdir images

Commands

dir

pwd

Parameter Description

<name> The name and path of the directory that you are creating.

C613-50228-01 Rev A Command Reference for AR2050V 144

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

MOVE

move

Overview This command renames or moves a file.

Syntax move <source-name> <destination-name>

Mode Privileged Exec

Examples To rename the file temp.cfg to startup.cfg, use the command:

awplus# move temp.cfg startup.cfg

To move the file temp.cfg from the root of the Flash filesystem to the directory

myconfigs, use the command:

awplus# move temp.cfg myconfigs/temp.cfg

Commands

delete

edit

show file

show file systems

Parameter Description

<source-name> The filename and path of the source file. See Introduction

on page 115 for valid syntax.

<destination-name> The filename and path of the destination file. See

Introduction on page 115 for valid syntax.

C613-50228-01 Rev A Command Reference for AR2050V 145

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

MOVE DEBUG

move debug

Overview This command moves a specified debug file to a destination debug file.

Syntax move debug {<destination-name>|debug|nvs|flash|usb}

Mode Privileged Exec

Example To move debug output into Flash memory with a filename “my-debug”, use the

following command:

awplus# move debug flash:my-debug

To move debug output onto a USB storage device with a filename “my-debug”, use

the following command:

awplus# move debug usb:my-debug

Output Figure 2-5: CLI prompt after entering the move debug command

Commands

copy debug

delete debug

Parameter Description

<destination-name> The filename and path where you would like the debug

output moved to. See Introduction on page 115 for valid

syntax.

Enter source file name []:

C613-50228-01 Rev A Command Reference for AR2050V 146

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

PWD

pwd

Overview This command prints the current working directory.

Syntax pwd

Mode Privileged Exec

Example To print the current working directory, use the command:

awplus# pwd

Commands

C613-50228-01 Rev A Command Reference for AR2050V 147

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

RMDIR

rmdir

Overview This command removes a directory. This command only works on empty

directories, unless you specify the optional force keyword.

Syntax rmdir [force] <name>

Mode Privileged Exec

Usage You can use the CLI to access filesystems on a specific external memory device. See

the Introduction on page 115 for syntax details.

Examples To remove the directory “images” from the top level of the Flash filesystem, use the

command:

awplus# rmdir flash:/images

To create a directory called “level1” containing a subdirectory called “level2”, and

then force the removal of both directories, use the commands:

awplus# mkdir level1

awplus# mkdir level1/level2

awplus# rmdir force level1

Commands

dir

mkdir

pwd

Parameter Description

force Optional keyword that allows you to delete directories that

are not empty and contain files or subdirectories.

<name>The name and path of the directory.

C613-50228-01 Rev A Command Reference for AR2050V 148

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

SHOW AUTOBOOT

show autoboot

Overview This command displays the Autoboot configuration and status.

Syntax show autoboot

Mode Privileged Exec

Example To show the Autoboot configuration and status, use the command:

awplus# show autoboot

Output Figure 2-6: Example output from the show autoboot command

Figure 2-7: Example output from the show autoboot command when an

external media source is not present

Commands

autoboot enable

create autoboot

show boot

awplus#show autoboot

Autoboot configuration

--------------------------------------------------------------------------------

Autoboot status : enabled

USB file autoboot.txt exists : yes



Restore information on USB

Autoboot enable in autoboot.txt : yes

Restore release file : AR2050V-5.4.8-0.2.rel (file exists)

Restore configuration file : network_1.cfg (file exists)

awplus#show autoboot

Autoboot configuration

--------------------------------------------------------------------------------

Autoboot status : enabled

External media source : USB not found.

C613-50228-01 Rev A Command Reference for AR2050V 149

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

SHOW BOOT

show boot

Overview This command displays the current boot configuration. We recommend that the

currently running release is set as the current boot image.

Syntax show boot

Mode Privileged Exec

Example To show the current boot configuration, use the command:

awplus# show boot

Output Figure 2-8: Example output from show boot when the current boot config is

on a USB storage device



awplus#show boot

Boot configuration

----------------------------------------------------------------

Current software : AR2050V-5.4.8-0.2.rel

Current boot image : usb:/AR2050V-5.4.8-0.2.rel

Backup boot image : flash:/AR2050V-5.4.7-2.1.rel

Default boot config: flash:/default.cfg

Current boot config: usb:/my.cfg (file exists)

Backup boot config: flash:/backup.cfg (file not found)

Autoboot status : enabled

Table 2-1: Parameters in the output from show boot

Parameter Description

Current software The current software release that the device is using.

Current boot image The boot image currently configured for use during the

next boot cycle.

Backup boot image The boot image to use during the next boot cycle if the

device cannot load the main image.

Default boot

config

The default startup configuration file. The device loads

this configuration script if no file is set as the startup-

config file.

Current boot

config

The configuration file currently configured as the

startup-config file. The device loads this configuration file

during the next boot cycle if this file exists.

C613-50228-01 Rev A Command Reference for AR2050V 150

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

SHOW BOOT

Commands

autoboot enable

boot config-file backup

boot system backup

show autoboot

Backup boot config The configuration file to use during the next boot cycle if

the main configuration file cannot be loaded.

Autoboot status The status of the Autoboot feature; either enabled or

disabled.

Table 2-1: Parameters in the output from show boot (cont.)

Parameter Description

C613-50228-01 Rev A Command Reference for AR2050V 151

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

SHOW FILE

show file

Overview This command displays the contents of a specified file.

Syntax show file <filename>

Mode Privileged Exec

Example To display the contents of the file oldconfig.cfg, which is in the current

directory, use the command:

awplus# show file oldconfig.cfg

Commands

edit

edit (filename)

show file systems

Parameter Description

<filename> Name of a file on the local Flash filesystem, or name and

directory path of a file.

C613-50228-01 Rev A Command Reference for AR2050V 152

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

SHOW FILE SYSTEMS

show file systems

Overview This command lists the filesystems and their utilization information where

appropriate.

Syntax show file systems

Mode Privileged Exec

Examples To display the filesystems, use the command:

awplus# show file systems

Output Figure 2-9: Example output from the show file systems command

awplus#show file systems

Size(b) Free(b) Type Flags Prefixes S/D/V Lcl/Ntwk Avail

-------------------------------------------------------------------

63.0M 28.5M flash rw flash: static local Y

- - system rw system: virtual local -

10.0M 9.8M debug rw debug: static local Y

499.0K 431.0K nvs rw nvs: static local Y

- - tftp rw tftp: - network -

- - scp rw scp: - network -

- - sftp ro sftp: - network -

- - http ro http: - network -

- - rsync rw rsync: - network -

Table 3: Parameters in the output of the show file systems command

Parameter Description

Size (B)

Available

The total memory available to this filesystem. The units are given

after the value and are M for Megabytes or k for kilobytes.

Free (B) The total memory free within this filesystem. The units are given

after the value and are M for Megabytes or k for kilobytes.

Type The memory type used for this filesystem; one of:

flash

system

tftp

scp

sftp

http.

Flags The file setting options: rw (read write), ro (read only).

C613-50228-01 Rev A Command Reference for AR2050V 153

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

SHOW FILE SYSTEMS

Commands

edit

edit (filename)

show file

Prefixes The prefixes used when entering commands to access the

filesystems; one of:

flash

system

tftp

scp

sftp

http.

S/V/D The memory type: static, virtual, dynamic.

Lcl / Ntwk Whether the memory is located locally or via a network

connection.

Avail Whether the memory is accessible: Y (yes), N (no), - (not applicable)

Table 3: Parameters in the output of the show file systems command (cont.)

Parameter Description

C613-50228-01 Rev A Command Reference for AR2050V 154

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

SHOW RUNNING-CONFIG

show running-config

Overview This command displays the current configuration of your device. Its output

includes all non-default configuration. The default settings are not displayed.

NOTE: You can control the output by entering | or > at the end of the command:

• To display only lines that contain a particular word, enter:

| include <word>

• To start the display at the first line that contains a particular word, enter:

| begin <word>

• To save the output to a file, enter:

> <filename>

Syntax show running-config [full|<feature>]

Parameter Description

full Display the running-config for all features. This is the default setting, so

it is the same as entering show running-config.

<feature>Display only the configuration for a single feature. The features

available depend on your device and will be some of the following list:

access-list ACL configuration

antivirus Antivirus configuration

application Application configuration

as-path Autonomous system path filter

configuration

as-path access-list Configuration of ACLs for AS path filtering

atmf Allied Telesis Management Framework

configuration

bgp Border Gateway Protocol (BGP)

configuration

community-list Community-list configuration

crypto Security-specific configuration

dhcp DHCP configuration

dpi Deep Packet Inspection configuration

entity Entity configuration

firewall Firewall configuration

interface Interface configuration. See show

running-config interface for further

options.

C613-50228-01 Rev A Command Reference for AR2050V 155

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

SHOW RUNNING-CONFIG

ip Internet Protocol (IP) configuration

ip pim dense-mode PIM-DM configuration

ip pim sparse-mode PIM-SM configuration

ip route IP static route configuration

ip-reputation IP Reputation configuration

ips IPS configuration

ipsec Internet Protocol Security (IPsec)

configuration

ipv6 Internet Protocol version 6 (IPv6)

configuration

ipv6 access-list IPv6 ACL configuration

ipv6 mroute IPv6 multicast route configuration

ipv6 prefix-list IPv6 prefix list configuration

ipv6 route IPv6 static route configuration

isakmp Internet Security Association Key

Management Protocol (ISAKMP)

configuration

key chain Authentication key management

configuration

l2tp-profile L2TP tunnel profile configuration

lldp LLDP configuration

log Logging utility configuration

malware-protection Malware protection configuration

nat Network Address Translation configuration

power-inline Power over Ethernet (PoE) configuration

policy-based-routing Policy-based routing (PBR) configuration

pppoe-ac PPPoE access concentrator configuration

prefix-list Prefix-list configuration

route-map Route-map configuration

router Router configuration

router-id Configuration of the router identifier for

this system

security-password Strong password security configuration

snmp SNMP configuration

ssh Secure Shell configuration

Parameter Description

C613-50228-01 Rev A Command Reference for AR2050V 156

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

SHOW RUNNING-CONFIG

Mode Privileged Exec and Global Configuration

Example To display the current configuration of your device, use the command:

awplus# show running-config

Output Figure 2-10: Example output from show running-config

switch Switch configuration

web-control Web Control configuration

Parameter Description

awplus#show running-config

!

service password-encryption

!

no banner motd

!

username manager privilege 15 password 8 $1$bJoVec4D$JwOJGPr7YqoExA0GVasdE0

!

log host source eth2

!

no service ssh

!

service telnet

!

no service http

!

no clock timezone

!

snmp-server

!

aaa authentication enable default local

aaa authentication login default local

!

ip domain-lookup

!

service dhcp-server

bridge 1

!

lacp global-passive-mode enable

!

l2tp tunnel test1

version 2

ip-version 4

!

interface eth1

encapsulation ppp 0

encapsulation dot1q 1

bridge-group 1

ip address dhcp

C613-50228-01 Rev A Command Reference for AR2050V 157

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

SHOW RUNNING-CONFIG

Commands

copy running-config

show running-config interface

interface eth2

ip address 192.168.0.20/16

!

interface ppp0

ipv6 address 2001:db9::a3/64

ipv6 enable

snmp trap link-status

!

trigger 1

type cpu 90

day monday tuesday wednesday thursday friday

!

line con 0

line vty 0 4

!

end

C613-50228-01 Rev A Command Reference for AR2050V 158

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

SHOW RUNNING-CONFIG INTERFACE

show running-config interface

Overview This command displays the current configuration of one or more interfaces on the

device.

Syntax show running-config interface [<interface-list>] [ip igmp|ip

multicast|ip pim dense-mode|ip pim sparse-mode|ipv6

rip|lacp|mstp|ospf|rip|rstp|stp]

Parameter Description

<interface-list>The interfaces or ports to display information about. An

interface-list can be:

• a PPP interface (e.g. ppp0), an Eth interface (e.g. eth1), a

VLAN (e.g. vlan2), a LAN port (e.g. port1.0.4), a static

channel group (e.g. sa2) or a dynamic (LACP) channel

group (e.g. po2)

• a continuous range of interfaces, ports, static channel

groups or dynamic (LACP) channel groups, separated by

a hyphen (e.g. vlan2-8, or port1.0.1-1.0.4, or sa1-2, or

po1-2)

• a comma-separated list of the above (e.g.

vlan2,vlan20-30). Do not mix interface types in a list.

The specified interfaces must exist.

lacp Displays running configuration for LACP (Link Aggregation

Control Protocol) for the specified interfaces.

ip igmp Displays running configuration for IGMP (Internet Group

Management Protocol) for the specified interfaces.

ip multicast Displays running configuration for general multicast

settings for the specified interfaces.

ip pim sparse-mode Displays running configuration for PIM-SM (Protocol

Independent Multicast - Sparse Mode) for the specified

interfaces.

ip pim dense-mode Displays running configuration for PIM-DM (Protocol

Independent Multicasting - Dense Mode) for the specified

interfaces.

mstp Displays running configuration for MSTP (Multiple

Spanning Tree Protocol) for the specified interfaces.

ospf Displays running configuration for OSPF (Open Shortest

Path First) for the specified interfaces.

rip Displays running configuration for RIP (Routing Information

Protocol) for the specified interfaces.

ipv6 rip Displays running configuration for RIPng (RIP for IPv6) for

the specified interfaces.

C613-50228-01 Rev A Command Reference for AR2050V 159

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

SHOW RUNNING-CONFIG INTERFACE

Mode Privileged Exec and Global Configuration

Default Displays information for all protocols on all interfaces

Examples To display the current running configuration of your device for ports 1 to 4, use the

command:

awplus# show running-config interface port1.0.1-port1.0.4

To display the current running configuration of a device for VLAN 1, use the

command:

awplus# show running-config interface vlan1

To display the current running configuration of a device for VLANs 1 and 3-5, use

the command:

awplus# show running-config interface vlan1,vlan3-vlan5

To display the current OSPF configuration of your device for ports 1 to 6, use the

command:

awplus# show running-config interface port1.0.1-port1.0.6 ospf

Output Figure 2-11: Example output from a show running-config interface ppp0

command

Commands

copy running-config

show running-config

rstp Displays running configuration for RSTP (Rapid Spanning

Tree Protocol) for the specified interfaces.

stp Displays running configuration for STP (Spanning Tree

Protocol) for the specified interfaces.

Parameter Description

awplus#show running-config interface ppp0

!

interface ppp0

ipv6 address 2001:db9::a3/64

ipv6 enable

snmp trap link-status

C613-50228-01 Rev A Command Reference for AR2050V 160

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

SHOW STARTUP-CONFIG

show startup-config

Overview This command displays the contents of the start-up configuration file, which is the

file that the device runs on start-up.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide.

Syntax show startup-config

Mode Privileged Exec

Example To display the contents of the current start-up configuration file, use the

command:

awplus# show startup-config

Output Figure 2-12: Example output from the show startup-config command

Commands

boot config-file backup

copy running-config

copy startup-config

erase startup-config

show boot

awplus#show startup-config

!

service password-encryption

!

no banner motd

!

username manager privilege 15 password 8 $1$bJoVec4D$JwOJGPr7YqoExA0GVasdE0

!

no service ssh

!

service telnet

!

no clock timezone

.

line con 0

line vty 0 4

!

end

C613-50228-01 Rev A Command Reference for AR2050V 161

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

SHOW VERSION

show version

Overview This command displays the version number and copyright details of the current

AlliedWare Plus™ OS your device is running.

Syntax show version

Mode User Exec and Privileged Exec

Example To display the version details of your currently installed software, use the

command:

awplus# show version

Output Figure 2-13: Example output from show version

awplus#show version



AlliedWare Plus (TM) 5.4.5 03/19/15 21:15:14



Build name : AR3050S-5.4.5-0.1.rel

Build date : Thu Mar 19 21:15:30 UTC 2015

Build type : RELEASE



Application Interface Specification Framework

Command Line Option Parsing Library

Corosync Cluster Engine

DHCP Bind

This version of this module is part of RFC 4178; see the RFC itself

full legal notices.

(Royal Institute of Technology, Stockholm, Sweden).

C613-50228-01 Rev A Command Reference for AR2050V 162

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

SHOW VERSION

DHCP Library

Embedded GNU C Library

DNS Resolver from BIND 4.9.5

Sun RPC Support

Mach Operating System

EventLog

2002, 2003, 2004, 2005 Free Software Foundation, Inc.

Author: Balazs Scheidler

Expat

and Clark Cooper.

Fast Lexical Analyser Generator

File Utility Library

Software written by Ian F. Darwin and others;

maintained 1994- Christos Zoulas.

FreeRADIUS

2009 The FreeRADIUS Server Project

2009 Alan DeKok <aland@deployingradius.com>.

Free Software Foundation, Inc.

C613-50228-01 Rev A Command Reference for AR2050V 163

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

SHOW VERSION

Hardware Platform Interface Library

IPSec Tools

Contributed by: Michal Ludvig <mludvig@suse.cz>, SUSE Labs.

Free Software Foundation, Inc.

libcap2 - Support for getting/setting POSIX.1e capabilities

LibHTP - A security-aware parser for the HTTP protocol

Libnet - An API for construction and handling of network packets

http://www.packetfactory.net/libnet

libpcap - An API for user-level packet capture

Linux Utilities

675 Mass Ave, Cambridge, MA 02139, USA

MD5 Message Digest Algorithm

C613-50228-01 Rev A Command Reference for AR2050V 164

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

SHOW VERSION

NET-SNMP SNMP agent software

Center of Beijing University of Posts and Telecommunications.

Network Time Protocol

OpenSSL Library

PCI Bus Utilities

PCRE - Perl Compatible Regular Expressions

ProL2TP

protobuf - Protocol Buffers

Protocol Buffers, Google's data interchange format - C implementation

pppd - Point-to-Point Protocol Daemon

Racoon2 - A key management system for IPsec

Contributed by: Michal Ludvig <mludvig@suse.cz>, SUSE Labs

C613-50228-01 Rev A Command Reference for AR2050V 165

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

SHOW VERSION

Commands

boot system backup

show boot

RSA Data Security, Inc. MD5 Message-Digest Algorithm

Secure Shell

OpenSSH

Cryptographic attack detector

Ssh-keyscan

sFlow(R) Agent Software

Sudo

Todd C. Miller <Todd.Miller@courtesan.com>

System Call Trace

Michael Elizabeth Chastain <mec@duracef.shout.net>

TCP Dump Utility

Telnet

TIPC Utilities



Portions of this product are covered by the GNU (L)GPL, source code may be

downloaded from: http://www.alliedtelesis.co.nz/support/gpl/awp.html

C613-50228-01 Rev A Command Reference for AR2050V 166

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

UNMOUNT

unmount

Overview Use this command to unmount an external storage device. We recommend you

unmount storage devices before removing them, to avoid file corruption. This is

especially important if files may be automatically written to the storage device,

such as external log files or AMF backup files.

Syntax unmount usb

Mode Privileged Exec

Example To unmount a USB storage device and safely remove it from the device, use the

command:

awplus# unmount usb

Commands

clear log external

log external

show file systems

show log config

show log external

Command

changes

Version 5.4.7-1.1: command added

Parameter Description

usb Unmount the USB storage device.

C613-50228-01 Rev A Command Reference for AR2050V 167

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

WRITE FILE

write file

Overview This command copies the running-config into the file that is set as the current

startup-config file. This command is a synonym of the write memory and copy

running-config startup-config commands.

Syntax write [file]

Mode Privileged Exec

Example To write configuration data to the start-up configuration file, use the command:

awplus# write file

Commands

copy running-config

write memory

show running-config

C613-50228-01 Rev A Command Reference for AR2050V 168

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

WRITE MEMORY

write memory

Overview This command copies the running-config into the file that is set as the current

startup-config file. This command is a synonym of the write file and copy

running-config startup-config commands.

Syntax write [memory]

Mode Privileged Exec

Example To write configuration data to the start-up configuration file, use the command:

awplus# write memory

Commands

copy running-config

write file

show running-config

C613-50228-01 Rev A Command Reference for AR2050V 169

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

FILE AND CONFIGURATION MANAGEMENT COMMANDS

WRITE TERMINAL

write terminal

Overview This command displays the current configuration of the device. This command is a

synonym of the show running-config command.

Syntax write terminal

Mode Privileged Exec

Example To display the current configuration of your device, use the command:

awplus# write terminal

Commands

show running-config

C613-50228-01 Rev A Command Reference for AR2050V 170

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

User Access

Commands

Introduction

Overview This chapter provides an alphabetical reference of commands used to configure

user access.

Command List •“clear line console” on page 172

•“clear line vty” on page 173

•“enable password” on page 174

•“enable secret” on page 177

•“exec-timeout” on page 180

•“flowcontrol hardware (asyn/console)” on page 182

•“length (asyn)” on page 184

•“line” on page 185

•“privilege level” on page 187

•“security-password history” on page 188

•“security-password forced-change” on page 189

•“security-password lifetime” on page 190

•“security-password min-lifetime-enforce” on page 191

•“security-password minimum-categories” on page 192

•“security-password minimum-length” on page 193

•“security-password reject-expired-pwd” on page 194

•“security-password warning” on page 195

•“service advanced-vty” on page 196

•“service password-encryption” on page 197

•“service telnet” on page 198

C613-50228-01 Rev A Command Reference for AR2050V 171

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USER ACCESS COMMANDS

•“show privilege” on page 199

•“show security-password configuration” on page 200

•“show security-password user” on page 201

•“show telnet” on page 202

•“show users” on page 203

•“telnet” on page 204

•“telnet server” on page 205

•“terminal length” on page 206

•“terminal resize” on page 207

•“username” on page 208

C613-50228-01 Rev A Command Reference for AR2050V 172

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USER ACCESS COMMANDS

CLEAR LINE CONSOLE

clear line console

Overview This command resets a console line. If a terminal session exists on the line then the

terminal session is terminated. If console line settings have changed then the new

settings are applied.

Syntax clear line console 0

Mode Privileged Exec

Example To reset the console line (asyn), use the command:

awplus# clear line console 0

awplus# % The new settings for console line 0 have been applied

Commands

clear line vty

flowcontrol hardware (asyn/console)

line

show users

C613-50228-01 Rev A Command Reference for AR2050V 173

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USER ACCESS COMMANDS

CLEAR LINE VTY

clear line vty

Overview This command resets a VTY line. If a session exists on the line then it is closed.

Syntax clear line vty <0-32>

Mode Privileged Exec

Example To reset the first VTY line, use the command:

awplus# clear line vty 1

Commands

privilege level

line

show telnet

show users

Parameter Description

<0-32>Line number

C613-50228-01 Rev A Command Reference for AR2050V 174

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USER ACCESS COMMANDS

ENABLE PASSWORD

enable password

Overview To set a local password to control access to various privilege levels, use the enable

password Global Configuration command. Use the enable password command to

modify or create a password to be used, and use the no enable password

command to remove the password.

Note that the enable secret command is an alias for the enable password

command, and the no enable secret command is an alias for the no enable

password command. Issuing a no enable password command removes a password

configured with the enable secret command. The enable password command is

shown in the running and startup configurations. Note that if the enable secret

command is entered then enable password is shown in the configuration.

Syntax enable password [<plain>|8 <hidden>|level <1-15> 8 <hidden>]

no enable password [level <1-15>]

Default The privilege level for enable password is level 15 by default. Previously the default

was level 1.

Mode Global Configuration

Usage This command enables the Network Administrator to set a password for entering

the Privileged Exec mode when using the enable (Privileged Exec mode)

command. There are three methods to enable a password. In the examples below,

for each method, note that the configuration is different and the configuration file

output is different, but the password string to be used to enter the Privileged Exec

mode with the enable command is the same (mypasswd).

A user can now have an intermediate CLI security level set with this command for

privilege level 7 to access all the show commands in Privileged Exec mode and all

the commands in User Exec mode, but not any configuration commands in

Privileged Exec mode.

Parameter Description

<plain>Specifies the unencrypted password.

8Specifies a hidden password will follow.

<hidden>Specifies the hidden encrypted password. Use an encrypted

password for better security where a password crosses the network

or is stored on a TFTP server.

level Privilege level <1-15>. Level for which the password applies. You can

specify up to 16 privilege levels, using numbers 1 through 15. Level 1

is normal EXEC-mode user privileges for User Exec mode. If this

argument is not specified in the command or the no variant of the

command, the privilege level defaults to 15 (enable mode privileges)

for Privileged Exec mode. A privilege level of 7 can be set for

intermediate CLI security.

C613-50228-01 Rev A Command Reference for AR2050V 175

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USER ACCESS COMMANDS

ENABLE PASSWORD

Note that the enable password command is an alias for the enable secret

command and one password per privilege level is allowed using these commands.

Do not assign one password to a privilege level with enable password and another

password to a privilege level with enable secret. Use enable password or enable

secret commands. Do not use both on the same level.

Using plain

passwords

The plain password is a clear text string that appears in the configuration file as

configured.

awplus# configure terminal

awplus(config)# enable password mypasswd

awplus(config)# end

This results in the following show output:

Using encrypted

passwords

You can configure an encrypted password using the service password-encryption

command. First, use the enable password command to specify the string that you

want to use as a password (mypasswd). Then, use the service

password-encryption command to encrypt the specified string (mypasswd). The

advantage of using an encrypted password is that the configuration file does not

show mypasswd, it will only show the encrypted string fU7zHzuutY2SA.

awplus# configure terminal

awplus(config)# enable password mypasswd

awplus(config)# service password-encryption

awplus(config)# end

This results in the following show output:

Using hidden

passwords

You can configure an encrypted password using the HIDDEN parameter (8) with

the enable password command. Use this method if you already know the

encrypted string corresponding to the plain text string that you want to use as a

password. It is not required to use the service password-encryption command for

awplus#show run

Current configuration:

hostname awplus

enable password mypasswd

!

interface lo

awplus#show run

Current configuration:

hostname awplus

enable password 8 fU7zHzuutY2SA

service password-encryption

!

interface lo

C613-50228-01 Rev A Command Reference for AR2050V 176

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USER ACCESS COMMANDS

ENABLE PASSWORD

this method. The output in the configuration file will show only the encrypted

string, and not the text string.

awplus# configure terminal

awplus(config)# enable password 8 fU7zHzuutY2SA

awplus(config)# end

This results in the following show output:

Commands

enable (Privileged Exec mode)

enable secret

service password-encryption

privilege level

show privilege

username

show running-config

awplus#show run

Current configuration:

hostname awplus

enable password 8 fU7zHzuutY2SA

!

interface lo

C613-50228-01 Rev A Command Reference for AR2050V 177

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USER ACCESS COMMANDS

ENABLE SECRET

enable secret

Overview To set a local password to control access to various privilege levels, use the enable

secret Global Configuration command. Use the enable secret command to modify

or create a password to be used, and use the no enable secret command to remove

the password.

Note that the enable secret command is an alias for the enable password

command, and the no enable secret command is an alias for the no enable

password command. Issuing a no enable password command removes a password

configured with the enable secret command. The enable password command is

shown in the running and startup configurations. Note that if the enable secret

command is entered then enable password is shown in the configuration

Syntax enable secret [<plain>|8 <hidden>|level <0-15> 8 <hidden>]

no enable secret [level <1-15>]

Default The privilege level for enable secret is level 15 by default.

Mode Global Configuration

Usage This command enables the Network Administrator to set a password for entering

the Privileged Exec mode when using the enable (Privileged Exec mode)

command. There are three methods to enable a password. In the examples below,

for each method, note that the configuration is different and the configuration file

output is different, but the password string to be used to enter the Privileged Exec

mode with the enable command is the same (mypasswd).

A user can have an intermediate CLI security level set with this command for

privilege level 7 to access all the show commands in Privileged Exec mode and all

the commands in User Exec mode, but not any configuration commands in

Privileged Exec mode.

Parameter Description

<plain>Specifies the unencrypted password.

8Specifies a hidden password will follow.

<hidden>Specifies the hidden encrypted password. Use an encrypted

password for better security where a password crosses the network

or is stored on a TFTP server.

level Privilege level <1-15>. Level for which the password applies. You can

specify up to 16 privilege levels, using numbers 1 through 15. Level 1

is normal EXEC-mode user privileges for User Exec mode. If this

argument is not specified in the command or the no variant of the

command, the privilege level defaults to 15 (enable mode privileges)

for Privileged Exec mode. A privilege level of 7 can be set for

intermediate CLI security.

C613-50228-01 Rev A Command Reference for AR2050V 178

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USER ACCESS COMMANDS

ENABLE SECRET

Note that the enable secret command is an alias for the enable password

command and one password per privilege level is allowed using these commands.

Do not assign one password to a privilege level with enable password and another

password to a privilege level with enable secret. Use enable password or enable

secret commands. Do not use both on the same level.

Using plain

passwords

The plain password is a clear text string that appears in the configuration file as

configured.

awplus# configure terminal

awplus(config)# enable secret mypasswd

awplus(config)# end

This results in the following show output:

Using encrypted

passwords

Configure an encrypted password using the service password-encryption

command. First, use the enable password command to specify the string that you

want to use as a password (mypasswd). Then, use the service

password-encryption command to encrypt the specified string (mypasswd). The

advantage of using an encrypted password is that the configuration file does not

show mypasswd, it will only show the encrypted string fU7zHzuutY2SA.

awplus# configure terminal

awplus(config)# enable secret mypasswd

awplus(config)# service password-encryption

awplus(config)# end

This results in the following show output:

Using hidden

passwords

Configure an encrypted password using the HIDDEN parameter (8) with the

enable password command. Use this method if you already know the encrypted

string corresponding to the plain text string that you want to use as a password. It

is not required to use the service password-encryption command for this method.

awplus#show run

Current configuration:

hostname awplus

enable password mypasswd

!

interface lo

awplus#show run

Current configuration:

hostname awplus

enable password 8 fU7zHzuutY2SA

service password-encryption

!

interface lo

C613-50228-01 Rev A Command Reference for AR2050V 179

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USER ACCESS COMMANDS

ENABLE SECRET

The output in the configuration file will show only the encrypted string, and not

the text string:

awplus# configure terminal

awplus(config)# enable secret 8 fU7zHzuutY2SA

awplus(config)# end

This results in the following show output:

Commands

enable (Privileged Exec mode)

enable secret

service password-encryption

privilege level

show privilege

username

show running-config

awplus#show run

Current configuration:

hostname awplus

enable password 8 fU7zHzuutY2SA

!

interface lo

C613-50228-01 Rev A Command Reference for AR2050V 180

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USER ACCESS COMMANDS

EXEC-TIMEOUT

exec-timeout

Overview This command sets the interval your device waits for user input from either a

console or VTY connection. Once the timeout interval is reached, the connection is

dropped. This command sets the time limit when the console or VTY connection

automatically logs off after no activity.

The no variant of this command removes a specified timeout and resets to the

default timeout (10 minutes).

Syntax exec-timeout {<minutes>} [<seconds>]

no exec-timeout

Default The default for the exec-timeout command is 10 minutes and 0 seconds

(exec-timeout 10 0).

Mode Line Configuration

Usage This command is used set the time the telnet session waits for an idle VTY session,

before it times out. An exec-timeout 0 0 setting will cause the telnet session to

wait indefinitely. The command exec-timeout 0 0 is useful while configuring a

device, but reduces device security.

If no input is detected during the interval then the current connection resumes. If

no connections exist then the terminal returns to an idle state and disconnects

incoming sessions.

Examples To set VTY connections to timeout after 2 minutes, 30 seconds if there is no

response from the user, use the following commands:

awplus# configure terminal

awplus(config)# line vty 0 32

awplus(config-line)# exec-timeout 2 30

To reset the console connection to the default timeout of 10 minutes 0 seconds if

there is no response from the user, use the following commands:

awplus# configure terminal

awplus(config)# line console 0

awplus(config-line)# no exec-timeout

Validation

Commands

show running-config

Parameter Description

<minutes> <0-35791> Required integer timeout value in minutes

<seconds> <0-2147483> Optional integer timeout value in seconds

C613-50228-01 Rev A Command Reference for AR2050V 181

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USER ACCESS COMMANDS

EXEC-TIMEOUT

Commands

line

service telnet

C613-50228-01 Rev A Command Reference for AR2050V 182

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USER ACCESS COMMANDS

FLOWCONTROL HARDWARE (ASYN/CONSOLE)

flowcontrol hardware (asyn/console)

Overview Use this command to enable RTS/CTS (Ready To Send/Clear To Send) hardware

flow control on a terminal console line (asyn port) between the DTE (Data Terminal

Equipment) and the DCE (Data Communications Equipment).

Syntax flowcontrol hardware

no flowcontrol hardware

Mode Line Configuration

Default Hardware flow control is disabled by default.

Usage Hardware flow control makes use of the RTS and CTS control signals between the

DTE and DCE where the rate of transmitted data is faster than the rate of received

data. Flow control is a technique for ensuring that a transmitting entity does not

overwhelm a receiving entity with data. When the buffers on the receiving device

are full, a message is sent to the sending device to suspend the transmission until

the data in the buffers has been processed.

Hardware flow control can be configured on terminal console lines (e.g. asyn0). For

Reverse Telnet connections, hardware flow control must be configured to match

on both the Access Server and the Remote Device. For terminal console sessions,

hardware flow control must be configured to match on both the DTE and the DCE.

Settings are saved in the running configuration. Changes are applied after reboot,

clear line console, or after closing the session.

Use show running-config and show startup-config commands to view hardware

flow control settings that take effect after reboot for a terminal console line. See

the show running-config command output:

Note that line configuration commands do not take effect immediately. Line

configuration commands take effect after one of the following commands or

events:

•issuing a clear line console command

•issuing a reboot command

• logging out of the current session

awplus#show running-config

!

line con 1

speed 9600

mode out 2001

flowcontrol hardware

C613-50228-01 Rev A Command Reference for AR2050V 183

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USER ACCESS COMMANDS

FLOWCONTROL HARDWARE (ASYN/CONSOLE)

Examples To enable hardware flow control on terminal console line asyn0, use the

commands:

awplus# configure terminal

awplus(config)# line console 0

awplus(config-line)# flowcontrol hardware

To disable hardware flow control on terminal console line asyn0, use the

commands:

awplus# configure terminal

awplus(config)# line console 0

awplus(config-line)# no flowcontrol hardware

Commands

clear line console

show running-config

speed (asyn)

C613-50228-01 Rev A Command Reference for AR2050V 184

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USER ACCESS COMMANDS

LENGTH (ASYN)

length (asyn)

Overview Use this command to specify the number of rows of output that the device will

display before pausing, for the console or VTY line that you are configuring.

The no variant of this command restores the length of a line (terminal session)

attached to a console port or to a VTY to its default length of 22 rows.

Syntax length <0-512>

no length

Mode Line Configuration

Default The length of a terminal session is 22 rows. The no length command restores the

default.

Usage If the output from a command is longer than the length of the line the output will

be paused and the ‘–More–’ prompt allows you to move to the next screen full of

data.

A length of 0 will turn off pausing and data will be displayed to the console as long

as there is data to display.

Examples To set the terminal session length on the console to 10 rows, use the command:

awplus# configure terminal

awplus(config)# line console 0

awplus(config-line)# length 10

To reset the terminal session length on the console to the default (22 rows), use the

command:

awplus# configure terminal

awplus(config)# line console 0

awplus(config-line)# no length

To display output to the console continuously, use the command:

awplus# configure terminal

awplus(config)# line console 0

awplus(config-line)# length 0

Commands

terminal resize

terminal length

Parameter Description

<0-512> Number of lines on screen. Specify 0 for no pausing.

C613-50228-01 Rev A Command Reference for AR2050V 185

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USER ACCESS COMMANDS

LINE

line

Overview Use this command to enter line configuration mode for the specified VTYs or the

console. The command prompt changes to show that the device is in Line

Configuration mode.

Syntax line vty <first-line> [<last-line>]

line console 0

Mode Global Configuration

Usage This command puts you into Line Configuration mode. Once in Line Configuration

mode, you can configure console and virtual terminal settings, including setting

speed (asyn), length (asyn), privilege level, and authentication (login

authentication) or accounting (accounting login) method lists.

To change the console (asyn) port speed, use this line command to enter Line

Configuration mode before using the speed (asyn)command. Set the console

speed (Baud rate) to match the transmission rate of the device connected to the

console (asyn) port on your device.

Note that line configuration commands do not take effect immediately. Line

configuration commands take effect after one of the following commands or

events:

•issuing a clear line console command

•issuing a reboot command

• logging out of the current session

Examples To enter Line Configuration mode in order to configure all VTYs, use the

commands:

awplus# configure terminal

awplus(config)# line vty 0 32

awplus(config-line)#

Parameter Description

<first-line> <0-32> Specify the first line number.

<last-line> <0-32> Specify the last line number.

console The console terminal line(s) for local access.

vty Virtual terminal for remote console access.

C613-50228-01 Rev A Command Reference for AR2050V 186

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USER ACCESS COMMANDS

LINE

To enter Line Configuration mode to configure the console (asyn 0) port terminal

line, use the commands:

awplus# configure terminal

awplus(config)# line console 0

awplus(config-line)#

Commands

accounting login

clear line console

clear line vty

flowcontrol hardware (asyn/console)

length (asyn)

privilege level

speed (asyn)

C613-50228-01 Rev A Command Reference for AR2050V 187

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USER ACCESS COMMANDS

PRIVILEGE LEVEL

privilege level

Overview This command sets a privilege level for VTY or console connections. The

configured privilege level from this command overrides a specific user’s initial

privilege level at the console login.

Syntax privilege level <1-15>

Mode Line Configuration

Usage You can set an intermediate CLI security level for a console user with this command

by applying privilege level 7 to access all show commands in Privileged Exec and

all User Exec commands. However, intermediate CLI security will not show

configuration commands in Privileged Exec.

Examples To set the console connection to have the maximum privilege level, use the

following commands:

awplus# configure terminal

awplus(config)# line console 0

awplus(config-line)# privilege level 15

To set all VTY connections to have the minimum privilege level, use the following

commands:

awplus# configure terminal

awplus(config)# line vty 0 5

awplus(config-line)# privilege level 1

To set all VTY connections to have an intermediate CLI security level, to access all

show commands, use the following commands:

awplus# configure terminal

awplus(config)# line vty 0 5

awplus(config-line)# privilege level 7

Commands

enable password

line

show privilege

username

C613-50228-01 Rev A Command Reference for AR2050V 188

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USER ACCESS COMMANDS

SECURITY-PASSWORD HISTORY

security-password history

Overview This command specifies the number of previous passwords that are unable to be

reused. A new password is invalid if it matches a password retained in the

password history.

The no variant of the command disables this feature.

Syntax security-password history <0-15>

no security-password history

Default The default history value is 0, which will disable the history functionality.

Mode Global Configuration

Examples To restrict reuse of the three most recent passwords, use the command:

awplus# configure terminal

awplus(config)# security-password history 3

To allow the reuse of recent passwords, use the command:

awplus# configure terminal

awplus(config)# no security-password history

Commands

security-password forced-change

security-password lifetime

security-password min-lifetime-enforce

security-password minimum-categories

security-password minimum-length

security-password reject-expired-pwd

security-password warning

show running-config security-password

show security-password configuration

show security-password user

Parameter Description

<0-15> The allowable range of previous passwords to match against. A

value of 0 will disable the history functionality and is equivalent to

the no security-password history command. If the history

functionality is disabled, all users’ password history is reset and all

password history is lost.

C613-50228-01 Rev A Command Reference for AR2050V 189

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USER ACCESS COMMANDS

SECURITY-PASSWORD FORCED-CHANGE

security-password forced-change

Overview This command specifies whether or not a user is forced to change an expired

password at the next login. If this feature is enabled, users whose passwords have

expired are forced to change to a password that must comply with the current

password security rules at the next login.

Note that to use this command, the lifetime feature must be enabled with the

security-password lifetime command and the reject-expired-pwd feature must be

disabled with the security-password reject-expired-pwd command.

The no variant of the command disables this feature.

Syntax security-password forced-change

no security-password forced-change

Default The forced-change feature is disabled by default.

Mode Global Configuration

Example To force a user to change their expired password at the next login, use the

command:

awplus# configure terminal

awplus(config)# security-password forced-change

Commands

security-password history

security-password lifetime

security-password min-lifetime-enforce

security-password minimum-categories

security-password minimum-length

security-password reject-expired-pwd

security-password warning

show running-config security-password

show security-password configuration

show security-password user

C613-50228-01 Rev A Command Reference for AR2050V 190

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USER ACCESS COMMANDS

SECURITY-PASSWORD LIFETIME

security-password lifetime

Overview This command enables password expiry by specifying a password lifetime in days.

Note that when the password lifetime feature is disabled, it also disables the

security-password forced-change command and the security-password warning

command.

The no variant of the command disables this feature.

Syntax security-password lifetime <0-1000>

no security-password lifetime

Default The default password lifetime is 0, which will disable the lifetime functionality.

Mode Global Configuration

Example To configure the password lifetime to 10 days, use the command:

awplus# configure terminal

awplus(config)# security-password lifetime 10

Commands

security-password forced-change

security-password history

security-password min-lifetime-enforce

security-password minimum-categories

security-password minimum-length

security-password reject-expired-pwd

security-password warning

show running-config security-password

show security-password configuration

show security-password user

Parameter Description

<0-1000> Password lifetime specified in days. A value of 0 will disable lifetime

functionality and the password will never expire. This is equivalent

to the no security-password lifetime command.

C613-50228-01 Rev A Command Reference for AR2050V 191

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USER ACCESS COMMANDS

SECURITY-PASSWORD MIN-LIFETIME-ENFORCE

security-password min-lifetime-enforce

Overview Use this command to configure a minimum number of days before a password can

be changed by a user. With this feature enabled, once a user sets the password, the

user cannot change it again until the minimum lifetime has passed.

Use the no variant of this command to remove the minimum lifetime.

Syntax security-password min-lifetime-enforce <0-1000>

no security-password min-lifetime-enforce

Default By default, no minimum lifetime is enforced.

Mode Global Configuration

Usage The minimum lifetime is helpful in conjunction with a security policy that prevents

people from re-using old passwords. For example, if you do not allow people to

re-use any of their last 5 passwords, a person can bypass that restriction by

changing their password 5 times in quick succession and then re-setting it to their

previous password. The minimum lifetime prevents that by preventing people

from changing their password in quick succession.

Example To force users to wait at least 2 days between changing passwords, use the

command:

awplus(config)# security-password min-lifetime-enforce 2

Commands

security-password forced-change

security-password history

security-password lifetime

security-password minimum-categories

security-password minimum-length

security-password reject-expired-pwd

security-password warning

show running-config security-password

show security-password configuration

show security-password user

Command

changes

Version 5.4.7-0.2: command added

Parameter Description

<0-1000> The minimum number of days before a password can be changed

C613-50228-01 Rev A Command Reference for AR2050V 192

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USER ACCESS COMMANDS

SECURITY-PASSWORD MINIMUM-CATEGORIES

security-password minimum-categories

Overview This command specifies the minimum number of categories that the password

must contain in order to be considered valid. The password categories are:

• uppercase letters: A to Z

• lowercase letters: a to z

• digits: 0 to 9

• special symbols: all printable ASCII characters not included in the previous

three categories. The question mark (?) cannot be used as it is reserved for

help functionality.

Note that to ensure password security, the minimum number of categories should

align with the lifetime selected, i.e. the fewer categories specified the shorter the

lifetime specified.

Syntax security-password minimum-categories <1-4>

Default The default number of categories that the password must satisfy is 1.

Mode Global Configuration

Example To configure the required minimum number of character categories to be 3, use

the command:

awplus# configure terminal

awplus(config)# security-password minimum-categories 3

Commands

security-password forced-change

security-password history

security-password lifetime

security-password min-lifetime-enforce

security-password minimum-length

security-password reject-expired-pwd

security-password warning

show running-config security-password

show security-password configuration

show security-password user

Parameter Description

<1-4> Number of categories the password must satisfy, in the range 1 to 4.

C613-50228-01 Rev A Command Reference for AR2050V 193

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USER ACCESS COMMANDS

SECURITY-PASSWORD MINIMUM-LENGTH

security-password minimum-length

Overview This command specifies the minimum allowable password length. This value is

checked against when there is a password change or a user account is created.

Syntax security-password minimum-length <1-23>

Default The default minimum password length is 1.

Mode Global Configuration

Example To configure the required minimum password length as 8, use the command:

awplus# configure terminal

awplus(config)# security-password minimum-length 8

Commands

security-password forced-change

security-password history

security-password lifetime

security-password min-lifetime-enforce

security-password minimum-categories

security-password reject-expired-pwd

security-password warning

show running-config security-password

show security-password configuration

show security-password user

Parameter Description

<1-23> Minimum password length in the range from 1 to 23.

C613-50228-01 Rev A Command Reference for AR2050V 194

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USER ACCESS COMMANDS

SECURITY-PASSWORD REJECT-EXPIRED-PWD

security-password reject-expired-pwd

Overview This command specifies whether or not a user is allowed to login with an expired

password. Users with expired passwords are rejected at login if this functionality is

enabled. Users then have to contact the Network Administrator to change their

password.

CAUTION: Once all users’ passwords are expired you are unable to login to the device

again if the security-password reject-expired-pwd command has been executed. You

will have to reboot the device with a default configuration file, or load an earlier

software version that does not have the security password feature.

We recommend you never have the command line “security-password

reject-expired-pwd” in a default config file.

Note that when the reject-expired-pwd functionality is disabled and a user logs on

with an expired password, if the forced-change feature is enabled with

security-password forced-change command, a user may have to change the

password during login depending on the password lifetime specified by the

security-password lifetime command.

The no variant of the command disables this feature.

Syntax security-password reject-expired-pwd

no security-password reject-expired-pwd

Default The reject-expired-pwd feature is disabled by default.

Mode Global Configuration

Example To configure the system to reject users with an expired password, use the

command:

awplus# configure terminal

awplus(config)# security-password reject-expired-pwd

Commands

security-password forced-change

security-password history

security-password lifetime

security-password min-lifetime-enforce

security-password minimum-categories

security-password minimum-length

security-password warning

show running-config security-password

show security-password configuration

show security-password user

C613-50228-01 Rev A Command Reference for AR2050V 195

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USER ACCESS COMMANDS

SECURITY-PASSWORD WARNING

security-password warning

Overview This command specifies the number of days before the password expires that the

user will receive a warning message specifying the remaining lifetime of the

password.

Note that the warning period cannot be set unless the lifetime feature is enabled

with the security-password lifetime command.

The no variant of the command disables this feature.

Syntax security-password warning <0-1000>

no security-password warning

Default The default warning period is 0, which disables warning functionality.

Mode Global Configuration

Example To configure a warning period of three days, use the command:

awplus# configure terminal

awplus(config)# security-password warning 3

Commands

security-password forced-change

security-password history

security-password lifetime

security-password min-lifetime-enforce

security-password minimum-categories

security-password minimum-length

security-password reject-expired-pwd

show running-config security-password

show security-password configuration

show security-password user

Parameter Description

<0-1000> Warning period in the range from 0 to 1000 days. A value 0 disables

the warning functionality and no warning message is displayed for

expiring passwords. This is equivalent to the no security-password

warning command. The warning period must be less than, or equal

to, the password lifetime set with the security-password lifetime

command.

C613-50228-01 Rev A Command Reference for AR2050V 196

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USER ACCESS COMMANDS

SERVICE ADVANCED-VTY

service advanced-vty

Overview This command enables the advanced-vty help feature. This allows you to use TAB

completion for commands. Where multiple options are possible, the help feature

displays the possible options.

The no service advanced-vty command disables the advanced-vty help feature.

Syntax service advanced-vty

no service advanced-vty

Default The advanced-vty help feature is enabled by default.

Mode Global Configuration

Examples To disable the advanced-vty help feature, use the command:

awplus# configure terminal

awplus(config)# no service advanced-vty

To re-enable the advanced-vty help feature after it has been disabled, use the

following commands:

awplus# configure terminal

awplus(config)# service advanced-vty

C613-50228-01 Rev A Command Reference for AR2050V 197

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USER ACCESS COMMANDS

SERVICE PASSWORD-ENCRYPTION

service password-encryption

Overview Use this command to enable password encryption. This is enabled by default.

When password encryption is enabled, the device displays passwords in the

running config in encrypted form instead of in plain text.

Use the no service password-encryption command to stop the device from

displaying newly-entered passwords in encrypted form. This does not change the

display of existing passwords.

Syntax service password-encryption

no service password-encryption

Mode Global Configuration

Example awplus# configure terminal

awplus(config)# service password-encryption

Validation

Commands

show running-config

Commands

enable password

C613-50228-01 Rev A Command Reference for AR2050V 198

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USER ACCESS COMMANDS

SERVICE TELNET

service telnet

Overview Use this command to enable the telnet server. The server is enabled by default.

Enabling the telnet server starts the device listening for incoming telnet sessions

on the configured port.

The server listens on port 23, unless you have changed the port by using the

privilege level command.

Use the no variant of this command to disable the telnet server. Disabling the

telnet server will stop the device listening for new incoming telnet sessions.

However, existing telnet sessions will still be active.

Syntax service telnet [ip|ipv6]

no service telnet [ip|ipv6]

Default The IPv4 and IPv6 telnet servers are enabled by default.

The configured telnet port is TCP port 23 by default.

Mode Global Configuration

Examples To enable both the IPv4 and IPv6 telnet servers, use the following commands:

awplus# configure terminal

awplus(config)# service telnet

To enable the IPv6 telnet server only, use the following commands:

awplus# configure terminal

awplus(config)# service telnet ipv6

To disable both the IPv4 and IPv6 telnet servers, use the following commands:

awplus# configure terminal

awplus(config)# no service telnet

To disable the IPv6 telnet server only, use the following commands:

awplus# configure terminal

awplus(config)# no service telnet ipv6

Commands

clear line vty

show telnet

telnet server

C613-50228-01 Rev A Command Reference for AR2050V 199

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USER ACCESS COMMANDS

SHOW PRIVILEGE

show privilege

Overview This command displays the current user privilege level, which can be any privilege

level in the range <1-15>. Privilege levels <1-6> allow limited user access (all User

Exec commands), privilege levels <7-14> allow restricted user access (all User Exec

commands plus Privileged Exec show commands). Privilege level 15 gives full user

access to all Privileged Exec commands.

Syntax show privilege

Mode User Exec and Privileged Exec

Usage A user can have an intermediate CLI security level set with this command for

privilege levels <7-14> to access all show commands in Privileged Exec mode and

all commands in User Exec mode, but no configuration commands in Privileged

Exec mode.

Example To show the current privilege level of the user, use the command:

awplus# show privilege

Output Figure 3-1: Example output from the show privilege command

Commands

privilege level

awplus#show privilege

Current privilege level is 15

awplus#disable

awplus>show privilege

Current privilege level is 1

C613-50228-01 Rev A Command Reference for AR2050V 200

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USER ACCESS COMMANDS

SHOW SECURITY-PASSWORD CONFIGURATION

show security-password configuration

Overview This command displays the configuration settings for the various security

password rules.

Syntax show security-password configuration

Mode Privileged Exec

Example To display the current security-password rule configuration settings, use the

command:

awplus# show security-password configuration

Output Figure 3-2: Example output from the show security-password configuration

command

Commands

security-password forced-change

security-password history

security-password lifetime

security-password min-lifetime-enforce

security-password minimum-categories

security-password minimum-length

security-password reject-expired-pwd

security-password warning

show security-password user

Security Password Configuration

Minimum password length ............................ 8

Minimum password character categories to match ..... 3

Number of previously used passwords to restrict..... 4

Password lifetime .................................. 30 day(s)

Warning period before password expires ........... 3 day(s)

Reject expired password at login ................... Disabled

Force changing expired password at login ......... Enabled

C613-50228-01 Rev A Command Reference for AR2050V 201

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USER ACCESS COMMANDS

SHOW SECURITY-PASSWORD USER

show security-password user

Overview This command displays user account and password information for all users.

Syntax show security-password user

Mode Privileged Exec

Example To display the system users’ remaining lifetime or last password change, use the

command:

awplus# show security-password user

Output Figure 3-3: Example output from the show security-password user command

Commands

security-password forced-change

security-password history

security-password lifetime

security-password min-lifetime-enforce

security-password minimum-categories

security-password minimum-length

security-password reject-expired-pwd

security-password warning

show security-password configuration

User account and password information



UserName Privilege Last-PWD-Change Remaining-lifetime

----------------------------------------------------------------

manager 15 4625 day(s) ago No Expiry

bob15 15 0 day(s) ago 30 days

ted7 7 0 day(s) ago No Expiry

mike1 1 0 day(s) ago No Expiry

C613-50228-01 Rev A Command Reference for AR2050V 202

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USER ACCESS COMMANDS

SHOW TELNET

show telnet

Overview This command shows the Telnet server settings.

Syntax show telnet

Mode User Exec and Privileged Exec

Example To show the Telnet server settings, use the command:

awplus# show telnet

Output Figure 3-4: Example output from the show telnet command

Commands

clear line vty

service telnet

show users

telnet server

Telnet Server Configuration

------------------------------------------------------------

Telnet server : Enabled

Protocol : IPv4,IPv6

Port : 23

C613-50228-01 Rev A Command Reference for AR2050V 203

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USER ACCESS COMMANDS

SHOW USERS

show users

Overview This command shows information about the users who are currently logged into

the device.

Syntax show users

Mode User Exec and Privileged Exec

Example To show the users currently connected to the device, use the command:

awplus# show users

Output Figure 3-5: Example output from the show users command

Line User Host(s) Idle Location Priv Idletime Timeout

con 0 manager idle 00:00:00 ttyS0 15 10 N/A

vty 0 bob idle 00:00:03 172.16.11.3 1 0 5

Table 1: Parameters in the output of the show users command

Parameter Description

Line Console port user is connected to.

User Login name of user.

Host(s) Status of the host the user is connected to.

Idle How long the host has been idle.

Location URL location of user.

Priv The privilege level in the range 1 to 15, with 15 being the highest.

Idletime The time interval the device waits for user input from either a

console or VTY connection.

Timeout The time interval before a server is considered unreachable.

C613-50228-01 Rev A Command Reference for AR2050V 204

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USER ACCESS COMMANDS

TELNET

telnet

Overview Use this command to open a telnet session to a remote device.

Syntax telnet {<hostname>|[ip] <ipv4-addr>|[ipv6] <ipv6-addr>}

[<port>]

Syntax (VRF-lite) telnet [vrf <vrf-name>] {<hostname>|[ip] <ipv4-addr>|[ipv6]

<ipv6-addr>} [<port>]

Mode User Exec and Privileged Exec

Examples To connect to TCP port 2602 on the device at 10.2.2.2, use the command:

awplus# telnet 10.2.2.2 2602

To connect to the telnet server host.example, use the command:

awplus# telnet host.example

To connect to the telnet server host.example on TCP port 100, use the

command:

awplus# telnet host.example 100

Example

(VRF-lite)

To open a telnet session to a remote host 192.168.0.1 associated with VRF

instance red, use the command:

awplus# telnet vrf red ip 192.168.0.1

Command

changes

Version 5.4.6-2.1: VRF-lite support added.

Parameter Description

vrf Apply this command to a VRF instance.

<vrf-name>The name of the VRF instance.

<hostname>The host name of the remote system.

ip Keyword used to specify the IPv4 address or host name of a remote

system.

<ipv4-addr> An IPv4 address of the remote system.

ipv6 Keyword used to specify the IPv6 address of a remote system

<ipv6-addr> Placeholder for an IPv6 address in the format x:x::x:x, for

example, 2001:db8::8a2e:7334

<port>Specify a TCP port number (well known ports are in the range 1-

1023, registered ports are 1024-49151, and private ports are 49152-

65535).

C613-50228-01 Rev A Command Reference for AR2050V 205

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USER ACCESS COMMANDS

TELNET SERVER

telnet server

Overview This command enables the telnet server on the specified TCP port. If the server is

already enabled then it will be restarted on the new port. Changing the port

number does not affect the port used by existing sessions.

Syntax telnet server {<1-65535>|default}

Mode Global Configuration

Example To enable the telnet server on TCP port 2323, use the following commands:

awplus# configure terminal

awplus(config)# telnet server 2323

Commands

show telnet

Parameter Description

<1-65535> The TCP port to listen on.

default Use the default TCP port number 23.

C613-50228-01 Rev A Command Reference for AR2050V 206

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USER ACCESS COMMANDS

TERMINAL LENGTH

terminal length

Overview Use the terminal length command to specify the number of rows of output that

the device will display before pausing, for the currently-active terminal only.

Use the terminal no length command to remove the length specified by this

command. The default length will apply unless you have changed the length for

some or all lines by using the length (asyn) command.

Syntax terminal length <length>

terminal no length [<length>]

Mode User Exec and Privileged Exec

Examples The following example sets the number of lines to 15:

awplus# terminal length 15

The following example removes terminal length set previously:

awplus# terminal no length

Commands

terminal resize

length (asyn)

Parameter Description

<length><0-512> Number of rows that the device will display on the

currently-active terminal before pausing.

C613-50228-01 Rev A Command Reference for AR2050V 207

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USER ACCESS COMMANDS

TERMINAL RESIZE

terminal resize

Overview Use this command to automatically adjust the number of rows of output on the

console, which the device will display before pausing, to the number of rows

configured on the user’s terminal.

Syntax terminal resize

Mode User Exec and Privileged Exec

Usage When the user’s terminal size is changed, then a remote session via SSH or TELNET

adjusts the terminal size automatically. However, this cannot normally be done

automatically for a serial or console port. This command automatically adjusts the

terminal size for a serial or console port.

Examples The following example automatically adjusts the number of rows shown on the

console:

awplus# terminal resize

Commands

length (asyn)

terminal length

C613-50228-01 Rev A Command Reference for AR2050V 208

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USER ACCESS COMMANDS

USERNAME

username

Overview This command creates or modifies a user to assign a privilege level and a password.

NOTE: The default username privilege level of 1 is not shown in running-config output.

Any username privilege level that has been modified from the default is shown.

Syntax username <name> privilege <1-15> [password [8] <password>]

username <name> password [8] <password>

no username <name>

Mode Global Configuration

Default The privilege level is 1 by default. Note the default is not shown in running-config

output.

Parameter Description

<name>The login name for the user. Do not use punctuation marks such as single quotes (‘ ‘),

double quotes (“ “), or colons ( : ) with the user login name.

privilege The user’s privilege level. Use the privilege levels to set the access rights for each user.

<1-15> A privilege level: either 1-14 (limited access) or 15 (full access). A user

with privilege level 1-14 can only access higher privilege levels if an

enable password has been configured for the level the user tries to

access and the user enters that password.

A user at privilege level 1 can access the majority of show

commands. A user at privilege level 7 can access the majority of

show commands including platform show commands. Privilege

Level 15 (to access the Privileged Exec command mode) is required

to access configuration commands as well as show commands in

Privileged Exec.

password A password that the user must enter when logging in.

8Specifies that you are entering a password as a string that has

already been encrypted, instead of entering a plain-text password.

The running-config displays the new password as an encrypted

string even if password encryption is turned off.

Note that the user enters the plain-text version of the password

when logging in.

<password>The user’s password. The password can be up to 23 characters in

length and include characters from up to four categories. The

password categories are:

• uppercase letters: A to Z

• lowercase letters: a to z

• digits: 0 to 9

• special symbols: all printable ASCII characters not included in the

previous three categories. The question mark ? cannot be used as

it is reserved for help functionality.

C613-50228-01 Rev A Command Reference for AR2050V 209

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USER ACCESS COMMANDS

USERNAME

Usage An intermediate CLI security level (privilege level 7 to privilege level 14) allows a

CLI user access to the majority of show commands, including the platform show

commands that are available at privilege level 1 to privilege level 6. Note that some

show commands, such as show running-configuration and show

startup-configuration, are only available at privilege level 15.

Examples To create the user “bob” with a privilege level of 15, for all show commands

including show running-configuration and show startup-configuration and to

access configuration commands in Privileged Exec command mode, and the

password “bobs_secret”, use the commands:

awplus# configure terminal

awplus(config)# username bob privilege 15 password bobs_secret

To create a user “junior_admin” with a privilege level of 7, which will have

intermediate CLI security level access for most show commands, and the password

“show_only”, use the commands:

awplus# configure terminal

awplus(config)# username junior_admin privilege 7 password

show_only

Commands

enable password

security-password minimum-categories

security-password minimum-length

C613-50228-01 Rev A Command Reference for AR2050V 210

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

GUI Commands

Introduction

Overview This chapter provides an alphabetical reference of commands used to configure

the GUI.

For more information, see Getting Started with the Device GUI on VPN Routers.

Command List •“atmf topology-gui enable” on page 211

•“http port” on page 212

•“http secure-port” on page 213

•“log event-host” on page 214

•“service http” on page 215

•“show http” on page 216

•“update webgui now” on page 217

C613-50228-01 Rev A Command Reference for AR2050V 211

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

GUI COMMANDS

ATMF TOPOLOGY-GUI ENABLE

atmf topology-gui enable

Overview Use this command to enable the operation of Vista Manager EX on the Master

device.

Vista Manager EX delivers state-of-the-art monitoring and management for your

Autonomous Management Framework™ (AMF) network, by automatically creating

a complete topology map of switches, firewalls and wireless access points (APs).

An expanded view includes third-party devices such as security cameras.

Use the no variant of this command to disable operation of Vista Manager EX.

Syntax atmf topology-gui enable

no atmf topology-gui enable

Default Disabled by default on AMF Master and member nodes. Enabled by default on

Controllers.

Mode Global Configuration mode

Usage To use Vista Manager EX, you must also enable the HTTP service on all AMF nodes,

including all AMF masters and controllers. The HTTP service is enabled by default

on AlliedWare Plus switches and disabled by default on AR-Series firewalls. To

enable it, use the commands:

Node1# configure terminal

Node1(config)# service http

On one master in each AMF area in your network, you also need to configure the

master to send event notifications to Vista Manager EX. To do this, use the

commands:

Node1# configure terminal

Node1(config)# log event-host <ip-address> atmf-topology-event

Example To enable Vista Manager EX on Node1, use the following commands:

Node1# configure terminal

Node1(config)# atmf topology-gui enable

To disable Vista Manager EX on Node1, use the following commands:

Node1# configure terminal

Node1(config)# no atmf topology-gui enable

Commands

atmf enable

log event-host

service http

C613-50228-01 Rev A Command Reference for AR2050V 212

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

GUI COMMANDS

HTTP PORT

http port

Overview Use this command to change the HTTP port used to access the web-based device

GUI, or to disable HTTP management.

Use the no variant of this command to return to using the default port, which is 80.

Syntax http port {<1-65535>|none}

no http port

Default The default port for accessing the GUI is port 80.

Mode Global Configuration

Usage Do not configure the HTTP port to be the same as the HTTPS port.

Note that the device will redirect from HTTP to HTTPS unless you have disabled

HTTPS access, which we do not recommend doing.

Example To set the port to 8080, use the commands:

awplus# configure terminal

awplus(config)# http port 8080

To return to using the default port of 80, use the commands:

awplus# configure terminal

awplus(config)# no http port

To stop users from accessing the GUI via HTTP, use the commands:

awplus# configure terminal

awplus(config)# http port none

Commands

http secure-port

service http

show http

Command

changes

Version 5.4.7-2.4: command added on AR-Series devices

Version 5.4.8-0.2: command added on AlliedWare Plus switches

Parameter Description

<1-65535> The HTTP port number

none Disable HTTP management. You may want to do this if you need

to use port 80 for a different service or you do not need to use

HTTP at all.

C613-50228-01 Rev A Command Reference for AR2050V 213

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

GUI COMMANDS

HTTP SECURE-PORT

http secure-port

Overview Use this command to change the HTTPS port used to access the web-based device

GUI, or to disable HTTPS management.

Use the no variant of this command to return to using the default port, which is

443.

Syntax http secure-port {<1-65535>|none}

no http secure-port

Default The default port for accessing the GUI is port 443.

Mode Global Configuration

Usage Do not configure the HTTPS port to be the same as the HTTP port.

Note that if you are using Vista Manager EX and need to change the HTTPS port,

you must use certificate-based authorization in Vista Manager EX. See the Vista

Manager EX Installation and User Guide for instructions.

Example To set the port to 8443, use the commands:

awplus# configure terminal

awplus(config)# http secure-port 8443

To return to using the default port of 443, use the commands:

awplus# configure terminal

awplus(config)# no http secure-port

To stop users from accessing the GUI via HTTPS, use the commands:

awplus# configure terminal

awplus(config)# http secure-port none

Commands

http port

service http

show http

Command

changes

Version 5.4.7-1.1: command added on AR-Series devices

Version 5.4.7-2.4: none parameter added

Version 5.4.8-0.2: command added on AlliedWare Plus switches

Parameter Description

<1-65535> The HTTPS port number

none Disable HTTPS management. Do not do this if you want to use

Vista Manager EX or the GUI.

C613-50228-01 Rev A Command Reference for AR2050V 214

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

GUI COMMANDS

LOG EVENT-HOST

log event-host

Overview Use this command to set up an external host to log AMF topology events through

Vista Manager. This command is run on the Master device.

Use the no variant of this command to disable log events through Vista Manager.

Syntax log event-host [<ipv4-addr>|<ipv6-addr>] atmf-topology-event

no log event-host [<ipv4-addr>|<ipv6-addr>] atmf-topology-event

Default Log events are disabled by default.

Mode Global Configuration

Usage Event hosts are set so syslog sends the messages out as they come.

Note that there is a difference between log event and log host messages:

• Log event messages are sent out as they come by syslog

• Log host messages are set to wait for a number of messages (20) to send

them out together for traffic optimization.

Example To enable Node 1 to log event messages from host IP address 192.0.2.31, use the

following commands:

Node1# configure terminal

Node1(config)# log event-host 192.0.2.31 atmf-topology-event

To disable Node 1 to log event messages from host IP address 192.0.2.31, use the

following commands:

Node1# configure terminal

Node1(config)# no log event-host 192.0.2.31 atmf-topology-event

Commands

atmf topology-gui enable

Parameter Description

<ipv4-addr> ipv4 address of the event host

<ipv6-addr> ipv6 address of the event host

C613-50228-01 Rev A Command Reference for AR2050V 215

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

GUI COMMANDS

SERVICE HTTP

service http

Overview Use this command to enable the HTTP (Hypertext Transfer Protocol) service.

This service is required to support Vista Manager EX™ and the device GUI.

Use the no variant of this command to disable the HTTP feature.

Syntax service http

no service http

Default Enabled if your device came from the factory with the GUI pre-installed. Otherwise

disabled.

Mode Global Configuration

Example To enable the HTTP service, use the following commands:

awplus# configure terminal

awplus(config)# service http

To disable the HTTP service, use the following commands:

awplus# configure terminal

awplus(config)# no service http

Commands

http port

http secure-port

show http

C613-50228-01 Rev A Command Reference for AR2050V 216

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

GUI COMMANDS

SHOW HTTP

show http

Overview This command shows the HTTP server settings.

Syntax show http

Mode User Exec and Privileged Exec

Example To show the HTTP server settings, use the command:

awplus# show http

Output Figure 4-1: Example output from the show http command

Commands

clear line vty

service http

awplus#show http

HTTP Server Configuration

------------------------------------------------------------

HTTP server : Enabled

Port : 80

Web GUI Information

------------------------------------------------------------

GUI file in use : webgui

GUI version: : 3.1

C613-50228-01 Rev A Command Reference for AR2050V 217

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

GUI COMMANDS

UPDATE WEBGUI NOW

update webgui now

Overview Use this command to check whether you have the latest version of the device’s GUI

and update it if a newer version is available.

Syntax update webgui now

Mode Privileged Exec

Usage This command applies since software version 5.4.6-1.1. Prior to 5.4.6-1.1, users

used the copy command to copy GUI files onto the AR-series firewall instead. If you

did that, you need to delete all GUI files from Flash memory before you run the

“update webgui now” command. To delete all GUI files, use the command:

awplus#del *gui_*.tar.gz

Examples To check for GUI updates, use the following command:

awplus#update webgui now

Commands

show resource

C613-50228-01 Rev A Command Reference for AR2050V 218

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

Update Manager

Commands

Introduction

This chapter provides an alphabetical reference of commands used to update a

resource. For more information, see the Update Manager Feature Overview and

Configuration_Guide.

Command List •“show resource” on page 219

•“update webgui now” on page 220

C613-50228-01 Rev A Command Reference for AR2050V 219

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

UPDATE MANAGER COMMANDS

SHOW RESOURCE

show resource

Overview Use this command to show information about the resources of features that have

been enabled.

Syntax show resource [<resource_name>]

Mode Privileged Exec

Examples To show information about the resources of features that have been enabled, use

the following command:

awplus#show resource

Output Figure 5-1: Example output for the show resource command

The parameters in the example output are explained in the following table.

Commands

update webgui now

Parameter Description

<resource_name>Specific resource to show

Table 5-1:

awplus#show resource 

---------------------------------------------------------------------------- 

Resource Name Status Version Interval Last Download 

Next Download Check 

---------------------------------------------------------------------------- 

iprep_et_rules Checking 1.1 4 Wed Dec 31 23:59:00 2013 

hours Thu Jan 1 01:00:00 2014

Parameter Description

Resource Name Name of the updatable resource

Status Resource status. There are five types of status: Sleeping, Checking,

Starting, Downloading, Stopping.

Version Current version of the resource

Interval Configured update check interval for the resource

Last Download Time stamp of last resource downloaded

Next Download

Check

Time stamp of next download check for the resource

C613-50228-01 Rev A Command Reference for AR2050V 220

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

UPDATE MANAGER COMMANDS

UPDATE WEBGUI NOW

update webgui now

Overview Use this command to check whether you have the latest version of the device’s GUI

and update it if a newer version is available.

Syntax update webgui now

Mode Privileged Exec

Usage This command applies since software version 5.4.6-1.1. Prior to 5.4.6-1.1, users

used the copy command to copy GUI files onto the AR-series firewall instead. If you

did that, you need to delete all GUI files from Flash memory before you run the

“update webgui now” command. To delete all GUI files, use the command:

awplus#del *gui_*.tar.gz

Examples To check for GUI updates, use the following command:

awplus#update webgui now

Commands

show resource

C613-50228-01 Rev A Command Reference for AR2050V 221

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

System

Configuration and

Monitoring

Commands

Introduction

Overview This chapter provides an alphabetical reference of commands for configuring and

monitoring the system.

Command List •“banner exec” on page 223

•“banner login (system)” on page 225

•“banner motd” on page 227

•“clock set” on page 229

•“clock summer-time date” on page 230

•“clock summer-time recurring” on page 232

•“clock timezone” on page 234

•“hostname” on page 235

•“max-fib-routes” on page 237

•“max-static-routes” on page 239

•“no debug all” on page 240

•“reboot” on page 242

•“reload” on page 243

•“show clock” on page 244

•“show cpu” on page 246

•“show cpu history” on page 249

•“show debugging” on page 251

•“show interface memory” on page 252

•“show memory” on page 254

•“show memory allocations” on page 256

C613-50228-01 Rev A Command Reference for AR2050V 222

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

•“show memory history” on page 258

•“show memory pools” on page 259

•“show memory shared” on page 260

•“show process” on page 261

•“show reboot history” on page 263

•“show router-id” on page 264

•“show system” on page 265

•“show system environment” on page 266

•“show system interrupts” on page 267

•“show system mac” on page 268

•“show system pci device” on page 269

•“show system pci tree” on page 270

•“show system serialnumber” on page 271

•“show tech-support” on page 272

•“speed (asyn)” on page 274

•“terminal monitor” on page 276

•“undebug all” on page 277

C613-50228-01 Rev A Command Reference for AR2050V 223

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

BANNER EXEC

banner exec

Overview This command configures the User Exec mode banner that is displayed on the

console after you login. The banner exec default command restores the User Exec

banner to the default banner. Use the no banner exec command to disable the

User Exec banner and remove the default User Exec banner.

Syntax banner exec <banner-text>

banner exec default

no banner exec

Default By default, the AlliedWare Plus™ version and build date is displayed at console

Mode Global Configuration

Examples To configure a User Exec mode banner after login (in this example, to tell people to

use the enable command to move to Privileged Exec mode), enter the following

commands:

To restore the default User Exec mode banner after login, enter the following

commands:

AlliedWare Plus (TM) 5.4.7 01/03/17 12:00:00

awplus#configure terminal

awplus(config)#banner exec Use enable to move to Priv Exec mode

awplus(config)#exit

awplus#exit



awplus login: manager

Password:



Use enable to move to Priv Exec mode



awplus>

awplus#configure terminal

awplus(config)#banner exec default

awplus(config)#exit

awplus#exit



awplus login: manager

Password:



AlliedWare Plus (TM) 5.4.7 01/03/17 12:00:00



awplus>

C613-50228-01 Rev A Command Reference for AR2050V 224

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

BANNER EXEC

To remove the User Exec mode banner after login, enter the following commands:

Commands

banner login (system)

banner motd

awplus#configure terminal

awplus(config)#no banner exec

awplus(config)#exit

awplus#exit



awplus login: manager

Password:



awplus>

C613-50228-01 Rev A Command Reference for AR2050V 225

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

BANNER LOGIN (SYSTEM)

banner login (system)

Overview This command configures the login banner that is displayed on the console when

you login. The login banner is displayed on all connected terminals. The login

banner is displayed after the MOTD (Message-of-the-Day) banner and before the

Use the no banner login command to disable the login banner.

Syntax banner login

no banner login

Default By default, no login banner is displayed at console login.

Mode Global Configuration

Examples To configure a login banner of “Authorised users only” to be displayed when you

To remove the login banner, enter the following commands:

awplus#configure terminal

awplus(config)#banner login

Type CNTL/D to finish.



Authorised users only



awplus(config)#exit

awplus#exit



Authorised users only



awplus login: manager

Password:



AlliedWare Plus (TM) 5.4.7 01/03/17 12:00:00



awplus>

awplus#configure terminal

awplus(config)#no banner login

awplus(config)#exit

awplus#exit



awplus login: manager

Password:



AlliedWare Plus (TM) 5.4.7 01/03/17 12:00:00



awplus>

C613-50228-01 Rev A Command Reference for AR2050V 226

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

BANNER LOGIN (SYSTEM)

Commands

banner exec

banner motd

C613-50228-01 Rev A Command Reference for AR2050V 227

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

BANNER MOTD

banner motd

Overview Use this command to create or edit the text MotD (Message-of-the-Day) banner

displayed before login. The MotD banner is displayed on all connected terminals.

The MotD banner is useful for sending messages that affect all network users, for

example, any imminent system shutdowns.

Use the no variant of this command to delete the MotD banner.

Syntax banner motd <motd-text>

no banner motd

Default By default, the device displays the AlliedWare Plus™ OS version and build date

when you login.

Mode Global Configuration

Examples To configure a MotD banner of “System shutdown at 6pm today” to be displayed

when you log in, enter the following commands:

To delete the login banner, enter the following commands:

Parameter Description

<motd-text> The text to appear in the Message of the Day banner.

awplus>enable

awplus#configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

awplus(config)#banner motd System shutdown at 6pm today

awplus(config)#exit

awplus#exit



System shutdown at 6pm today

awplus login: manager

Password:



AlliedWare Plus (TM) 5.4.7 01/03/17 12:00:00



awplus>

C613-50228-01 Rev A Command Reference for AR2050V 228

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

BANNER MOTD

Commands

banner exec

banner login (system)

awplus>enable

awplus#configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

awplus(config)#no banner motd

awplus(config)#exit

awplus#exit



awplus login: manager

Password:



AlliedWare Plus (TM) 5.4.7 01/03/17 12:00:00



awplus>

C613-50228-01 Rev A Command Reference for AR2050V 229

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

CLOCK SET

clock set

Overview This command sets the time and date for the system clock.

Syntax clock set <hh:mm:ss> <day> <month> <year>

Mode Privileged Exec

Usage Configure the timezone before setting the local time. Otherwise, when you change

the timezone, the device applies the new offset to the local time.

NOTE: If Network Time Protocol (NTP) is enabled, then you cannot change the time or

date using this command. NTP maintains the clock automatically using an external

time source. If you wish to manually alter the time or date, you must first disable NTP.

Example To set the time and date on your system to 2pm on the 2nd of October 2016, use

the command:

awplus# clock set 14:00:00 2 oct 2016

Commands

clock timezone

Parameter Description

<hh:mm:ss> Local time in 24-hour format

<day> Day of the current month, from 1 to 31

<month> The first three letters of the current month

<year> Current year, from 2000 to 2035

C613-50228-01 Rev A Command Reference for AR2050V 230

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

CLOCK SUMMER-TIME DATE

clock summer-time date

Overview This command defines the start and end of summertime for a specific year only,

and specifies summertime’s offset value to Standard Time for that year.

The no variant of this command removes the device’s summertime setting. This

clears both specific summertime dates and recurring dates (set with the clock

summer-time recurring command).

By default, the device has no summertime definitions set.

Syntax clock summer-time <timezone-name> date <start-day>

<start-month> <start-year> <start-time> <end-day> <end-month>

<end-year> <end-time> <1-180>

no clock summer-time

Mode Global Configuration

Examples To set a summertime definition for New Zealand using NZST (UTC+12:00) as the

standard time, and NZDT (UTC+13:00) as summertime, with the summertime set to

begin on the 25th of September 2016 and end on the 2nd of April 2017:

awplus(config)# clock summer-time NZDT date 25 sep 2:00 2016 2

apr 2:00 2017 60

To remove any summertime settings on the system, use the command:

awplus(config)# no clock summer-time

Parameter Description

<timezone-name> A description of the summertime zone, up to 6 characters long.

date Specifies that this is a date-based summertime setting for just

the specified year.

<start-day> Day that the summertime starts, from 1 to 31.

<start-month> First three letters of the name of the month that the

summertime starts.

<start-year> Year that summertime starts, from 2000 to 2035.

<start-time> Time of the day that summertime starts, in the 24-hour time

format HH:MM.

<end-day> Day that summertime ends, from 1 to 31.

<end-month> First three letters of the name of the month that the

summertime ends.

<end-year> Year that summertime ends, from 2000 to 2035.

<end-time> Time of the day that summertime ends, in the 24-hour time

format HH:MM.

<1-180> The offset in minutes.

C613-50228-01 Rev A Command Reference for AR2050V 231

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

CLOCK SUMMER-TIME DATE

Commands

clock summer-time recurring

clock timezone

C613-50228-01 Rev A Command Reference for AR2050V 232

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

CLOCK SUMMER-TIME RECURRING

clock summer-time recurring

Overview This command defines the start and end of summertime for every year, and

specifies summertime’s offset value to Standard Time.

The no variant of this command removes the device’s summertime setting. This

clears both specific summertime dates (set with the clock summer-time date

command) and recurring dates.

By default, the device has no summertime definitions set.

Syntax clock summer-time <timezone-name> recurring <start-week>

<start-day> <start-month> <start-time> <end-week> <end-day>

<end-month> <end-time> <1-180>

no clock summer-time

Parameter Description

<timezone-

name>

A description of the summertime zone, up to 6 characters long.

recurring Specifies that this summertime setting applies every year from

now on.

<start-week> Week of the month when summertime starts, in the range 1-5. The

value 5 indicates the last week that has the specified day in it for

the specified month. For example, to start summertime on the last

Sunday of the month, enter 5 for <start-week> and sun for

<start-day>.

<start-day> Day of the week when summertime starts. Valid values are mon,

tue, wed, thu, fri, sat or sun.

<start-month> First three letters of the name of the month that summertime

starts.

<start-time> Time of the day that summertime starts, in the 24-hour time

format HH:MM.

<end-week> Week of the month when summertime ends, in the range 1-5. The

value 5 indicates the last week that has the specified day in it for

the specified month. For example, to end summertime on the last

Sunday of the month, enter 5 for <end-week> and sun for <end-

day>.

<end-day> Day of the week when summertime ends. Valid values are mon,

tue, wed, thu, fri, sat or sun.

<end-month> First three letters of the name of the month that summertime

ends.

<end-time> Time of the day that summertime ends, in the 24-hour time format

HH:MM.

<1-180> The offset in minutes.

C613-50228-01 Rev A Command Reference for AR2050V 233

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

CLOCK SUMMER-TIME RECURRING

Mode Global Configuration

Examples To set a summertime definition for New Zealand using NZST (UTC+12:00) as the

standard time, and NZDT (UTC+13:00) as summertime, with summertime set to

start on the last Sunday in September, and end on the 1st Sunday in April, use the

command:

awplus(config)# clock summer-time NZDT recurring 5 sun sep 2:00

1 sun apr 2:00 60

To remove any summertime settings on the system, use the command:

awplus(config)# no clock summer-time

Commands

clock summer-time date

clock timezone

C613-50228-01 Rev A Command Reference for AR2050V 234

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

CLOCK TIMEZONE

clock timezone

Overview This command defines the device’s clock timezone. The timezone is set as a offset

to the UTC.

The no variant of this command resets the system time to UTC.

By default, the system time is set to UTC.

Syntax clock timezone <timezone-name> {minus|plus}

[<0-13>|<0-12>:<00-59>]

no clock timezone

Mode Global Configuration

Usage Configure the timezone before setting the local time. Otherwise, when you change

the timezone, the device applies the new offset to the local time.

Examples To set the timezone to New Zealand Standard Time with an offset from UTC of +12

hours, use the command:

awplus(config)# clock timezone NZST plus 12

To set the timezone to Indian Standard Time with an offset from UTC of +5:30

hours, use the command:

awplus(config)# clock timezone IST plus 5:30

To set the timezone back to UTC with no offsets, use the command:

awplus(config)# no clock timezone

Commands

clock set

clock summer-time date

clock summer-time recurring

Parameter Description

<timezone-name> A description of the timezone, up to 6 characters long.

minusorplus The direction of offset from UTC. The minus option

indicates that the timezone is behind UTC. The plus option

indicates that the timezone is ahead of UTC.

<0-13> The offset in hours or from UTC.

<0-12>:<00-59> The offset in hours or from UTC.

C613-50228-01 Rev A Command Reference for AR2050V 235

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

HOSTNAME

hostname

Overview This command sets the name applied to the device as shown at the prompt. The

hostname is:

• displayed in the output of the show system command

• displayed in the CLI prompt so you know which device you are configuring

• stored in the MIB object sysName

Use the no variant of this command to revert the hostname setting to its default.

For devices that are not part of an AMF network, the default is “awplus”.

Syntax hostname <hostname>

no hostname [<hostname>]

Default awplus

Mode Global Configuration

Usage Within an AMF network, any device without a user-defined hostname will

automatically be assigned a name based on its MAC address.

To efficiently manage your network using AMF, we strongly advise that you devise

a naming convention for your network devices and apply an appropriate

hostname to each device.

The name must also follow the rules for ARPANET host names. The name must start

with a letter, end with a letter or digit, and use only letters, digits, and hyphens.

Refer to RFC 1035.

Example To set the system name to HQ-Sales, use the command:

awplus# configure terminal

awplus(config)# hostname HQ-Sales

This changes the prompt to:

HQ-Sales(config)#

To revert to the default hostname awplus, use the command:

HQ-Sales(config)# no hostname

This changes the prompt to:

awplus(config)#

Parameter Description

<hostname> Specifies the name given to a specific device.

C613-50228-01 Rev A Command Reference for AR2050V 236

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

HOSTNAME

NOTE: When AMF is configured, running the no hostname command will apply a

hostname that is based on the MAC address of the device node, for example,

node_0000_5e00_5301.

Commands

show system

C613-50228-01 Rev A Command Reference for AR2050V 237

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

MAX-FIB-ROUTES

max-fib-routes

Overview This command enables you to control the maximum number of FIB routes

configured. It operates by providing parameters that enable you to configure

preset maximums and warning message thresholds.

NOTE: When using VRF-lite, this command applies to the Global VRF instance; to set

the max-fib-routes for a user-defined VRF instance use the max-fib-routes (VRF)

command. For static routes use the max-static-routes command for the Global VRF

instance and the max-static-routes (VRF) command for a user-defined VRF instance.

Use the no variant of this command to set the maximum number of FIB routes to

the default of 4294967294 FIB routes.

Syntax max-fib-routes <1-4294967294> [<1-100>|warning-only]

no max-fib-routes

Default The default number of FIB routes is the maximum number of FIB routes

(4294967294).

Mode Global Configuration

Examples To set the maximum number of dynamic routes to 2000 and warning threshold of

75%, use the following commands:

awplus# config terminal

awplus(config)# max-fib-routes 2000 75

Parameter Description

max-fib-routes This is the maximum number of routes that can be stored in the

device’s Forwarding Information dataBase. In practice, other

practical system limits would prevent this maximum being

reached.

<1-4294967294>The allowable configurable range for setting the maximum

number of FIB-routes.

<1-100>This parameter enables you to optionally apply a percentage

value. This percentage will be based on the maximum number

of FIB routes you have specified. This will cause a warning

message to appear when your routes reach your specified

percentage value. Routes can continue to be added until your

configured maximum value is reached.

warning-only This parameter enables you to optionally apply a warning

message. If you set this option a warning message will appear if

your maximum configured value is reached. Routes can

continue to be added until your device reaches either the

maximum capacity value of 4294967294, or a practical system

limit.

C613-50228-01 Rev A Command Reference for AR2050V 238

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

MAX-FIB-ROUTES

Commands

max-fib-routes (VRF)

C613-50228-01 Rev A Command Reference for AR2050V 239

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

MAX-STATIC-ROUTES

max-static-routes

Overview Use this command to set the maximum number of static routes, excluding FIB

(Forwarding Information Base) routes.

NOTE: For FIB routes use the max-fib-routes command.

Use the no variant of this command to set the maximum number of static routes

to the default of 1024 static routes.

Syntax max-static-routes <1-1024>

no max-static-routes

Default The default number of static routes is the maximum number of static routes (1024).

Mode Global Configuration

Example To reset the maximum number of static routes to the default maximum, use the

command:

awplus# configure terminal

awplus(config)# no max-static-routes

NOTE: Static routes are applied before adding routes to the RIB (Routing Information

Base). Therefore, rejected static routes will not appear in the running config.

Commands

max-fib-routes

C613-50228-01 Rev A Command Reference for AR2050V 240

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

NO DEBUG ALL

no debug all

Overview This command disables the debugging facility for all features on your device. This

stops the device from generating any diagnostic debugging messages.

The debugging facility is disabled by default.

Syntax no debug all [bgp|ipv6|nsm|ospf|pim sparse-mode|rip|vrrp]

Mode Global Configuration and Privileged Exec

Example To disable debugging for all features, use the command:

awplus# no debug all

To disable all BGP debugging, use the command:

awplus# no debug all bgp

To disable all IPv6 debugging, use the command:

awplus# no debug all ipv6

To disable all NSM debugging, use the command:

awplus# no debug all nsm

To disable all OSPF debugging, use the command:

awplus# no debug all ospf

To disable all PIM Sparse Mode debugging, use the command:

awplus# no debug all pim sparse-mode

To disable all RIP debugging, use the command:

awplus# no debug all rip

Parameter Description

bgp Turns off all debugging for BGP (Border Gateway Protocol).

ipv6 Turns off all debugging for IPv6 (Internet Protocol version 6).

nsm Turns off all debugging for the NSM (Network Services

Module).

ospf Turns off all debugging for OSPF (Open Shortest Path First).

pim sparse-mode Turns off all debugging for PIM (Protocol Independent

Multicast) Sparse Mode.

rip Turns off all debugging for RIP (Routing Information Protocol).

vrrp Turns off all debugging for VRRP (Virtual Router Redundancy

Protocol).

C613-50228-01 Rev A Command Reference for AR2050V 241

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

NO DEBUG ALL

To disable all VRRP debugging, use the command:

awplus# no debug all vrrp

Commands

undebug all

Command

changes

Version 5.4.7-1.1: PIM Sparse Mode parameter added

Version 5.4.7-1.1: RIP parameter added

C613-50228-01 Rev A Command Reference for AR2050V 242

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

REBOOT

reboot

Overview This command halts the device and performs a cold restart (also known as reload).

It displays a confirmation request before restarting.

Syntax reboot

reload

Mode Privileged Exec

Usage The reboot and reload commands perform the same action.

Examples To restart the device, use the command:

awplus# reboot

reboot system? (y/n): y

C613-50228-01 Rev A Command Reference for AR2050V 243

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

RELOAD

reload

Overview This command performs the same function as the reboot command.

C613-50228-01 Rev A Command Reference for AR2050V 244

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

SHOW CLOCK

show clock

Overview This command displays the system’s current configured local time and date. It also

displays other clock related information such as timezone and summertime

configuration.

Syntax show clock

Mode User Exec and Privileged Exec

Example To display the system’s current local time, use the command:

awplus# show clock

Output Figure 6-1: Example output from the show clock command for a device using

New Zealand time

Local Time: Mon, 17 Oct 2016 13:56:06 +1200

UTC Time: Mon, 17 Oct 2016 01:56:06 +0000

Timezone: NZST

Timezone Offset: +12:00

Summer time zone: NZDT

Summer time starts: Last Sunday in September at 02:00:00

Summer time ends: First Sunday in April at 02:00:00

Summer time offset: 60 mins

Summer time recurring: Yes

Table 1: Parameters in the output of the show clock command

Parameter Description

Local Time Current local time.

UTC Time Current UTC time.

Timezone The current configured timezone name.

Timezone Offset Number of hours offset to UTC.

Summer time zone The current configured summertime zone name.

Summer time starts Date and time set as the start of summer time.

Summer time ends Date and time set as the end of summer time.

Summer time offset Number of minutes that summer time is offset from the

system’s timezone.

Summer time

recurring

Whether the device will apply the summer time settings

every year or only once.

C613-50228-01 Rev A Command Reference for AR2050V 245

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

SHOW CLOCK

Commands

clock set

clock summer-time date

clock summer-time recurring

clock timezone

C613-50228-01 Rev A Command Reference for AR2050V 246

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

SHOW CPU

show cpu

Overview This command displays a list of running processes with their CPU utilization.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide.

Syntax show cpu [sort {thrds|pri|sleep|runtime}]

Mode User Exec and Privileged Exec

Examples To show the CPU utilization of current processes, sorting them by the number of

threads the processes are using, use the command:

awplus# show cpu sort thrds

Parameter Description

sort Changes the sorting order using the following fields. If you do not

specify a field, then the list is sorted by percentage CPU

utilization.

thrds Sort by the number of threads.

pri Sort by the process priority.

sleep Sort by the average time sleeping.

runtime Sort by the runtime of the process.

C613-50228-01 Rev A Command Reference for AR2050V 247

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

SHOW CPU

Output Figure 6-2: Example output from show cpu

awplus#show cpu

CPU averages:

1 second: 0%, 20 seconds: 0%, 60 seconds: 0%

System load averages:

1 minute: 0.16, 5 minutes: 0.13, 15 minutes: 0.13

Current CPU load:

userspace: 2%, kernel: 6%, interrupts: 0% iowaits: 0%



user processes

==============

pid name thrds cpu% pri state sleep% runtime

763 hostd 1 2.9 20 run 0 128

803 diag_monitor 1 0.4 20 sleep 0 3292

768 hsl 14 0.4 20 sleep 0 3912

1 init 1 0.0 20 sleep 0 686

478 rtccludge 1 0.0 20 sleep 0 9

504 portmap 1 0.0 20 sleep 0 2

17555 sh 1 0.0 20 sleep 0 1

17556 console_log_ale 1 0.0 20 sleep 0 1

515 syslog-ng 1 0.0 20 sleep 0 153

521 dbus-daemon 1 0.0 20 sleep 0 2

532 automount 1 0.0 20 sleep 0 453

571 appmond 1 0.0 20 sleep 0 41

587 crond 1 0.0 20 sleep 0 17

589 openhpid 9 0.0 20 sleep 0 284

609 inetd 1 0.0 20 sleep 0 2

761 nsm 1 0.0 20 sleep 0 260

765 imi 1 0.0 20 sleep 0 616

799 almond 1 0.0 20 sleep 0 52

805 cntrd 1 0.0 20 sleep 0 45

807 poehw 3 0.0 20 sleep 0 207

820 authd 1 0.0 20 sleep 0 76

...



kernel threads

==============

pid name cpu% pri state sleep% runtime

144 aio 0.0 0 sleep 0 0

95 bdi-default 0.0 20 sleep 0 0

149 crypto 0.0 0 sleep 0 0

474 flush-31:4 0.0 20 sleep 0 1

143 fsnotify_mark 0.0 20 sleep 0 0

426 jffs2_gcd_mtd0 0.0 30 sleep 0 353

96 kblockd 0.0 0 sleep 0 0

12 khelper 0.0 0 sleep 0 0

105 khubd 0.0 20 sleep 0 0

3 ksoftirqd/0 0.0 20 sleep 0 0

142 kswapd0 0.0 20 sleep 0 0

2 kthreadd 0.0 20 sleep 0 0

4 kworker/0:0 0.0 20 sleep 0 29

6 linkwatch 0.0 0 sleep 0 0

466 loop0 0.0 0 sleep 0 801

7 migration/0 0.0 -100 sleep 0 0

244 mtdblock0 0.0 20 sleep 0 5

93 sync_supers 0.0 20 sleep 0 1

C613-50228-01 Rev A Command Reference for AR2050V 248

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

SHOW CPU

Commands

show memory

show memory allocations

show memory history

show memory pools

show process

Table 2: Parameters in the output of the show cpu command

Parameter Description

CPU averages Average CPU utilization for the periods stated.

System load

averages

The average number of processes waiting for CPU time for the

periods stated.

Current CPU

load

Current CPU utilization specified by load types.

pid Identifier number of the process.

name A shortened name for the process

thrds Number of threads in the process.

cpu% Percentage of CPU utilization that this process is consuming.

pri Process priority state.

state Process state; one of “run”, “sleep”, “zombie”, and “dead”.

sleep% Percentage of time that the process is in the sleep state.

runtime The time that the process has been running for, measured in

jiffies. A jiffy is the duration of one tick of the system timer

interrupt.

C613-50228-01 Rev A Command Reference for AR2050V 249

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

SHOW CPU HISTORY

show cpu history

Overview This command prints a graph showing the historical CPU utilization.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide.

Syntax show cpu history

Mode User Exec and Privileged Exec

Usage This command’s output displays three graphs of the percentage CPU utilization:

• per second for the last minute, then

• per minute for the last hour, then

• per 30 minutes for the last 30 hours.

Examples To display a graph showing the historical CPU utilization of the device, use the

command:

awplus# show cpu history

Output Figure 6-3: Example output from the show cpu history command

Per second CPU load history



100

90

80

70

60

50

40

30

20 *

10 ******************************************* ****************

|....|....|....|....|....|....|....|....|....|....|....|....

Oldest Newest

CPU load% per second (last 60 seconds)

* = average CPU load%

C613-50228-01 Rev A Command Reference for AR2050V 250

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

SHOW CPU HISTORY

Commands

show memory

show memory allocations

show memory pools

show process

Per minute CPU load history



100

90

80

70

60 +

50

40

30

20 ++ +++++++++ +++++++ ++++ + ++++++ ++++ +++ +++++ +++++++++

10 ************************************************************

|....|....|....|....|....|....|....|....|....|....|....|....

Oldest Newest

CPU load% per minute (last 60 minutes)

* = average CPU load%, + = maximum

Per (30) minute CPU load history



100

90

80

70 +

60

50

40

30

20

10 ***

|....|....|....|....|....|....|....|....|....|....|....|....

Oldest Newest

CPU load% per 30 minutes (last 60 values / 30 hours)

* = average, - = minimum, + = maximum

C613-50228-01 Rev A Command Reference for AR2050V 251

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

SHOW DEBUGGING

show debugging

Overview This command displays all debugging options in alphabetical order, indicating

whether debugging is enabled or disabled for each feature.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide.

Syntax show debugging

Mode User Exec and Privileged Exec

Example To find out what debugging is enabled, use the command:

awplus# show debugging

Output Figure 6-4: Example output from the show debugging command

awplus#show debugging

AAA debugging status:

Authentication debugging is off

Authorization debugging is off

Accounting debugging is off

Antivirus Debugging Status: off

% Error: ATMF is not configured.

BGP debugging status:

BGP debugging is off

BGP nht debugging is off

BGP nsm debugging is off

BGP events debugging is off

BGP keepalives debugging is off

BGP updates debugging is off

BGP fsm debugging is off

BGP filter debugging is off

BGP Route Flap Dampening debugging is off



Firewall Debugging Status: off

Traffic shaping debugging status: off

IGMP Debugging status:

IGMP Decoder debugging is off

IGMP Encoder debugging is off

IGMP Events debugging is off

IGMP FSM debugging is off

IGMP Tree-Info-Base (TIB) debugging is off

DNS Relay debugging status:

debugging is off

IP packet debugging status:

OSPFv3 debugging status:

...

C613-50228-01 Rev A Command Reference for AR2050V 252

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

SHOW INTERFACE MEMORY

show interface memory

Overview This command displays the shared memory used by either all interfaces, or the

specified interface or interfaces. The output is useful for diagnostic purposes by

Allied Telesis authorized service personnel.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide.

Syntax show interface memory

show interface <port-list> memory

Mode User Exec and Privileged Exec

Example To display the shared memory used by all interfaces, use the command:

awplus# show interface memory

To display the shared memory used by port1.0.1 and port1.0.5 to port1.0.6, use the

command:

awplus# show interface port1.0.1,port1.0.5-1.0.6 memory

Output Figure 6-5: Example output from the show interface memory command

Parameter Description

<port-list> Display information about only the specified port or ports. The port

list can be:

• an Eth (e.g. eth1) or switch port (e.g. port1.0.4), a static channel

group (e.g. sa2) or a dynamic (LACP) channel group (e.g. po2)

• a continuous range of ports separated by a hyphen (e.g.

port1.0.1-1.0.4, or sa1-2, or po1-2)

• a comma-separated list of ports and port ranges (e.g.

port1.0.1,port1.0.4-1.0.6). Do not mix port types in the same list.

awplus#show interface memory

Vlan blocking state shared memory usage

---------------------------------------------

Interface shmid Bytes Used nattch Status

port1.0.1 294921 512 1

port1.0.2 491535 512 1

port1.0.3 458766 512 1

port1.0.4 524304 512 1

port1.0.5 425997 512 1

port1.0.6 589842 512 1

port1.0.7 557073 512 1

port1.0.8 622611 512 1

eth2 327690 512 1

eth1 393228 512 1

lo 360459 512 1

C613-50228-01 Rev A Command Reference for AR2050V 253

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

SHOW INTERFACE MEMORY

Figure 6-6: Example output from show interface <port-list> memory for a list

of interfaces

Commands

show interface brief

show interface status

show interface switchport

awplus#show interface port1.0.1,port1.0.5-1.0.6 memory

Vlan blocking state shared memory usage

---------------------------------------------

Interface shmid Bytes Used nattch Status

port1.0.1 294921 512 1

port1.0.5 425997 512 1

port1.0.6 589842 512 1

C613-50228-01 Rev A Command Reference for AR2050V 254

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

SHOW MEMORY

show memory

Overview This command displays the memory used by each process that is currently running

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide.

Syntax show memory [sort {size|peak|stk}]

Mode User Exec and Privileged Exec

Example To display the memory used by the current running processes, use the command:

awplus# show memory

Output Figure 6-7: Example output from show memory

Parameter Description

sort Changes the sorting order for the list of processes. If you do not

specify this, then the list is sorted by percentage memory

utilization.

size Sort by the amount of memory the process is

currently using.

peak Sort by the amount of memory the process is

currently using.

stk Sort by the stack size of the process.

awplus#show memory



RAM total: 824680 kB; free: 635032 kB; buffers: 20272 kB



user processes

==============

pid name mem% size(kB) peak(kB) data(kB) stk(kB) virt(kB)

1443 squid 1.9 16408 299768 23568 264 299768

1441 squid 1.9 16416 299776 23568 272 299776

1440 squid 1.9 16416 299776 23568 272 299776

1439 squid 1.9 16416 299776 23568 272 299776

1438 squid 1.9 16152 298928 23568 264 298864

1226 imi 1.3 10968 23104 2760 160 22912

1228 hsl 1.2 10512 692944 608160 144 631856

2156 imish 1.0 8856 158456 75904 160 94696

1221 nsm 1.0 9008 21696 1968 152 21632

1296 ospfd 0.8 6936 19144 1016 144 19080

1293 bgpd 0.8 7264 19184 1168 152 19120

1291 pimd 0.8 6600 20992 2944 144 20928

1283 ripd 0.8 6640 18328 944 152 18256

...

C613-50228-01 Rev A Command Reference for AR2050V 255

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

SHOW MEMORY

Commands

show memory allocations

show memory history

show memory pools

show memory shared

Table 3: Parameters in the output of the show memory command

Parameter Description

RAM total Total amount of RAM memory free.

free Available memory size.

buffers Memory allocated kernel buffers.

pid Identifier number for the process.

name Short name used to describe the process.

mem% Percentage of memory utilization the process is currently using.

size Amount of memory currently used by the process.

peak Greatest amount of memory ever used by the process.

data Amount of memory used for data.

stk The stack size.

C613-50228-01 Rev A Command Reference for AR2050V 256

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

SHOW MEMORY ALLOCATIONS

show memory allocations

Overview This command displays the memory allocations used by processes.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide.

Syntax show memory allocations [<process>]

Mode User Exec and Privileged Exec

Example To display the memory allocations used by all processes on your device, use the

command:

awplus# show memory allocations

Output Figure 6-8: Example output from the show memory allocations command

Parameter Description

<process> Displays the memory allocation used by the specified process.

awplus#show memory allocations

Memory allocations for imi

-----------------------------



Current 15093760 (peak 15093760)



Statically allocated memory:

- binary/exe : 1675264

- libraries : 8916992

- bss/global data : 2985984

- stack : 139264



Dynamically allocated memory (heap):

- total allocated : 1351680

- in use : 1282440

- non-mmapped : 1351680

- maximum total allocated : 1351680

- total free space : 69240

- releasable : 68968

- space in freed fastbins : 16



Context

filename:line allocated freed

+ lib.c:749 484

.

C613-50228-01 Rev A Command Reference for AR2050V 257

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

SHOW MEMORY ALLOCATIONS

Commands

show memory

show memory history

show memory pools

show memory shared

show tech-support

C613-50228-01 Rev A Command Reference for AR2050V 258

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

SHOW MEMORY HISTORY

show memory history

Overview This command prints a graph showing the historical memory usage.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide.

Syntax show memory history

Mode User Exec and Privileged Exec

Usage This command’s output displays three graphs of the percentage memory

utilization:

• per second for the last minute, then

• per minute for the last hour, then

• per 30 minutes for the last 30 hours.

Examples To show a graph displaying the historical memory usage, use the command:

awplus# show memory history

Output Figure 6-9: Example output from the show memory history command

Commands

show memory allocations

show memory pools

show memory shared

show tech-support

Per minute memory utilization history



100

90

80

70

60

50

40*************************************************************

30

20

10

|....|....|....|....|....|....|....|....|....|....|....|....

Oldest Newest

Memory utilization% per minute (last 60 minutes)

* = average memory utilisation%.

...

C613-50228-01 Rev A Command Reference for AR2050V 259

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

SHOW MEMORY POOLS

show memory pools

Overview This command shows the memory pools used by processes.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide.

Syntax show memory pools [<process>]

Mode User Exec and Privileged Exec

Example To shows the memory pools used by processes, use the command:

awplus# show memory pools

Output Figure 6-10: Example output from the show memory pools command

Commands

show memory allocations

show memory history

show tech-support

Parameter Description

<process> Displays the memory pools used by the specified process.

awplus#show memory pools

Memory pools for imi

----------------------



Current 15290368 (peak 15290368)



Statically allocated memory:

- binary/exe : 1675264

- libraries : 8916992

- bss/global data : 2985984

- stack : 139264



Dynamically allocated memory (heap):

- total allocated : 1548288

- in use : 1479816

- non-mmapped : 1548288

- maximum total allocated : 1548288

- total free space : 68472

- releasable : 68200

- space in freed fastbins : 16

.

C613-50228-01 Rev A Command Reference for AR2050V 260

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

SHOW MEMORY SHARED

show memory shared

Overview This command displays shared memory allocation information. The output is

useful for diagnostic purposes by Allied Telesis authorized service personnel.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide.

Syntax show memory shared

Mode User Exec and Privileged Exec

Example To display information about the shared memory allocation used on the device,

use the command:

awplus# show memory shared

Output Figure 6-11: Example output from the show memory shared command

Commands

show memory allocations

show memory history

show memory

awplus#show memory shared

Shared Memory Status

--------------------------

Segment allocated = 39

Pages allocated = 39

Pages resident = 11



Shared Memory Limits

--------------------------

Maximum number of segments = 4096

Maximum segment size (kbytes) = 32768

Maximum total shared memory (pages) = 2097152

Minimum segment size (bytes) = 1

C613-50228-01 Rev A Command Reference for AR2050V 261

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

SHOW PROCESS

show process

Overview This command lists a summary of the current running processes.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide.

Syntax show process [sort {cpu|mem}]

Mode User Exec and Privileged Exec

Usage This command displays a snapshot of currently-running processes. If you want to

see CPU or memory utilization history instead, use the commands show cpu

history or show memory history.

Example To display a summary of the current running processes, use the command:

awplus# show process

Output Figure 6-12: Example output from the show process command

Parameter Description

sort Changes the sorting order for the list of processes.

cpu Sorts the list by the percentage of CPU utilization.

mem Sorts the list by the percentage of memory

utilization.

CPU averages:

1 second: 8%, 20 seconds: 5%, 60 seconds: 5%

System load averages:

1 minute: 0.04, 5 minutes: 0.08, 15 minutes: 0.12

Current CPU load:

userspace: 9%, kernel: 9%, interrupts: 0% iowaits: 0%

RAM total: 514920 kB; free: 382600 kB; buffers: 16368 kB



user processes

==============

pid name thrds cpu% mem% pri state sleep% 

962 pss 12 0 6 25 sleep 5 

1 init 1 0 0 25 sleep 0 

797 syslog-ng 1 0 0 16 sleep 88 

...

kernel threads

==============

pid name cpu% pri state sleep% 

71 aio/0 0 20 sleep 0 

3 events/0 0 10 sleep 98 

...

C613-50228-01 Rev A Command Reference for AR2050V 262

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

SHOW PROCESS

Commands

show cpu

show cpu history

Table 4: Parameters in the output from the show process command

Parameter Description

CPU averages Average CPU utilization for the periods stated.

System load

averages

The average number of processes waiting for CPU time for the

periods stated.

Current CPU

load

Current CPU utilization specified by load types

RAM total Total memory size.

free Available memory.

buffers Memory allocated to kernel buffers.

pid Identifier for the process.

name Short name to describe the process.

thrds Number of threads in the process.

cpu% Percentage of CPU utilization that this process is consuming.

mem% Percentage of memory utilization that this process is consuming.

pri Process priority.

state Process state; one of “run”, “sleep”, “stop”, “zombie”, or “dead”.

sleep% Percentage of time the process is in the sleep state.

C613-50228-01 Rev A Command Reference for AR2050V 263

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

SHOW REBOOT HISTORY

show reboot history

Overview Use this command to display the device’s reboot history.

Syntax show reboot history

Mode User Exec and Privileged Exec

Example To show the reboot history, use the command:

awplus# show reboot history

Output Figure 6-13: Example output from the show reboot history command

Commands

show tech-support

awplus#show reboot history



<date> <time> <type> <description>

-----------------------------------------------

2016-10-10 01:42:04 Expected User Request

2016-10-10 01:35:31 Expected User Request

2016-10-10 01:16:25 Unexpected Rebooting due to critical process (network/nsm) 

failure!

2016-10-10 01:11:04 Unexpected Rebooting due to critical process (network/nsm) 

failure!

2016-10-09 19:56:16 Expected User Request

2016-10-09 19:51:20 Expected User Request

Table 5: Parameters in the output from the show reboot history command

Parameter Description

Unexpected A non-intended reboot.

Expected A planned or user-triggered reboot.

User request User initiated reboot via the CLI.

C613-50228-01 Rev A Command Reference for AR2050V 264

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

SHOW ROUTER-ID

show router-id

Overview Use this command to show the Router ID of the current system.

Syntax show router-id

Mode User Exec and Privileged Exec

Example To display the Router ID of the current system, use the command:

awplus# show router-id

Output Figure 6-14: Example output from the show router-id command

awplus>show router-id

Router ID: 10.55.0.2 (automatic)

C613-50228-01 Rev A Command Reference for AR2050V 265

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

SHOW SYSTEM

show system

Overview This command displays general system information about the device, including

the hardware, memory usage, and software version. It also displays location and

contact details when these have been set.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide.

Syntax show system

Mode User Exec and Privileged Exec

Example To display configuration information, use the command:

awplus# show system

Output Figure 6-15: Example output from show system

Commands

show system environment

System Status Mon Nov 16 08:42:16 2015



Board ID Bay Board Name Rev Serial number

--------------------------------------------------------------------------------

Base 425 AR2050V X1-0 A05049G27NE2004

--------------------------------------------------------------------------------

RAM: Total: 824680 kB Free: 634632 kB

Flash: 3.6GB Used: 109.1MB Available: 3.3GB

--------------------------------------------------------------------------------

Environment Status : ***Fault***

Uptime : 0 days 23:11:05

Bootloader version : 5.0.6



Current software : AR2050V-5.4.7-2.1.rel

Software version : 5.4.7-2.1

Build date : Thu Nov 12 12:11:29 NZDT 2017



Current boot config: flash:/default.cfg (file exists)



System Name

awplus

System Contact

System Location

C613-50228-01 Rev A Command Reference for AR2050V 266

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

SHOW SYSTEM ENVIRONMENT

show system environment

Overview This command displays the current environmental status of your device and any

attached PSU, XEM, or other expansion option. The environmental status covers

information about temperatures, fans, and voltage.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide.

Syntax show system environment

Mode User Exec and Privileged Exec

Example To display the system’s environmental status, use the command:

awplus# show system environment

Output Figure 6-16: Example output from show system environment

Commands

show system

awplus#show system environment

Environment Monitoring Status



Overall Status: ***Fault***



Resource ID: 1 Name: AR2050V

ID Sensor (Units) Reading Low Limit High Limit Status

1 Fan: Fan (Rpm) 3516 2411 - Ok

2 Voltage: 2.5V (Volts) 2.461 2.344 2.865 Ok

3 Voltage: Battery (Volts) 1.181 2.700 3.586 FAULT

4 Voltage: 3.3V (Volts) 3.266 2.973 3.627 Ok

5 Voltage: 5.0V (Volts) 4.974 4.505 5.495 Ok

6 Voltage: 12V (Volts) 11.563 10.813 13.188 Ok

7 Voltage: 0.92V (Volts) 0.844 0.872 0.970 FAULT

8 Temp: Internal (Degrees C) 32 58(Hyst) 65 Ok

C613-50228-01 Rev A Command Reference for AR2050V 267

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

SHOW SYSTEM INTERRUPTS

show system interrupts

Overview Use this command to display the number of interrupts for each IRQ (Interrupt

Request) used to interrupt input lines on a PIC (Programmable Interrupt Controller)

on your device.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide.

Syntax show system interrupts

Mode User Exec and Privileged Exec

Example To display information about the number of interrupts for each IRQ in your device,

use the command:

awplus# show system interrupts

Output Figure 6-17: Example output from the show system interrupts command

Commands

show system environment

awplus#show system interrupts



CPU0 CPU1

8: 151378 152020 Core Enabled 0 timer

16: 0 0 CIU Enabled 0 Ethernet

25: 256 0 CIU-W Enabled 0 octeon_wdt

26: 0 256 CIU-W Enabled 0 octeon_wdt

41: 946096 947120 CIU-M Enabled 0 SMP-IPI

51: 0 0 CIU Enabled 0 RGMII

53: 0 0 CIU Enabled 0 Ethernet

59: 1025 0 CIU Enabled 0 serial

60: 5825 0 CIU Enabled 0 i2c-octeon

61: 3 0 CIU Enabled 0 i2c-octeon

63: 0 0 CIB Enabled 0 xhci-hcd:usb1

65: 0 0 CIU-GPIO Enabled 0 0-0021

...

C613-50228-01 Rev A Command Reference for AR2050V 268

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

SHOW SYSTEM MAC

show system mac

Overview This command displays the physical MAC address of the device.

Syntax show system mac

Mode User Exec and Privileged Exec

Example To display the physical MAC address enter the following command:

awplus# show system mac

Output Figure 6-18: Example output from the show system mac command

awplus#show system mac

0200.0034.5682

0200.0034.5683

0200.0034.5684

C613-50228-01 Rev A Command Reference for AR2050V 269

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

SHOW SYSTEM PCI DEVICE

show system pci device

Overview Use this command to display the PCI devices on your device.

Syntax show system pci device

Mode User Exec and Privileged Exec

Example To display information about the PCI devices on your device, use the command:

awplus# show system pci device

Commands

show system environment

show system pci tree

C613-50228-01 Rev A Command Reference for AR2050V 270

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

SHOW SYSTEM PCI TREE

show system pci tree

Overview Use this command to display the PCI tree on your device.

Syntax show system pci tree

Mode User Exec and Privileged Exec

Example To display information about the PCI tree on your device, use the command:

awplus# show system pci tree

Commands

show system environment

show system pci device

C613-50228-01 Rev A Command Reference for AR2050V 271

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

SHOW SYSTEM SERIALNUMBER

show system serialnumber

Overview This command shows the serial number information for the device.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide.

Syntax show system serialnumber

Mode User Exec and Privileged Exec

Example To display the serial number information for the device, use the command:

awplus# show system serialnumber

Output Figure 6-19: Example output from the show system serial number command

awplus#show system serialnumber

45AX5300X

C613-50228-01 Rev A Command Reference for AR2050V 272

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

SHOW TECH-SUPPORT

show tech-support

Overview This command generates system and debugging information for the device and

saves it to a file.

This command is useful for collecting a large amount of information so that it can

then be analyzed for troubleshooting purposes. The output of this command can

be provided to technical support staff when reporting a problem.

You can optionally limit the command output to display only information for a

given protocol or feature. The features available depend on your device and will be

a subset of the features listed in the table below.

Syntax show tech-support

{[all|atmf|auth|bgp|card|dhcpsn|epsr|firewall|igmp|ip|ipv6|mld

update]} [outfile <filename>]

Parameter Description

all Display full information

atmf Display ATMF-specific information

auth Display authentication-related information

bgp Display BGP-related information

card Display Chassis Card specific information

dhcpsn Display DHCP Snooping specific information

epsr Display EPSR specific information

firewall Display firewall specific information

igmp Display IGMP specific information

ip Display IP specific information

ipv6 Display IPv6 specific information

mld Display MLD specific information

openflow Display information related to OpenFlow

ospf Display OSPF related information

ospf6 Display OSPF6 specific information

pim Display PIM related information

rip RIP related information

ripng Display RIPNG specific information

stack Display stacking device information

stp Display STP specific information

system Display general system information

C613-50228-01 Rev A Command Reference for AR2050V 273

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

SHOW TECH-SUPPORT

Default Captures all information for the device.

By default the output is saved to the file ‘tech-support.txt.gz’ in the current

directory. If this file already exists in the current directory then a new file is

generated with the time stamp appended to the file name, for example

‘tech-support20161009.txt.gz’, so the previous file is retained.

Usage The command generates a large amount of output, which is saved to a file in

compressed format. The output file name can be specified by outfile option. If the

output file already exists, a new file name is generated with the current time stamp.

If the output filename does not end with “.gz”, then “.gz” is appended to the

filename. Since output files may be too large for Flash on the device we

recommend saving files to external memory or a TFTP server whenever possible to

avoid device lockup. This method is not likely to be appropriate when running the

working set option of AMF across a range of physically separated devices.

Mode Privileged Exec

Examples To produce the output needed by technical support staff, use the command:

awplus# show tech-support

tacacs+ Display TACACS+ information

update Display resource update specific information

|Output modifier

>Output redirection

>> Output redirection (append)

outfile Output file name

<filename>Specifies a name for the output file. If no name is specified, this file

will be saved as: tech-support.txt.gz.

Parameter Description

C613-50228-01 Rev A Command Reference for AR2050V 274

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

SPEED (ASYN)

speed (asyn)

Overview This command changes the console speed from the device. Note that a change in

console speed is applied for subsequent console sessions. Exit the current session

to enable the console speed change using the clear line console command.

Syntax speed <console-speed-in-bps>

Default The default console speed baud rate is 9600 bps.

Mode Line Configuration

Usage This command is used to change the console (asyn) port speed. Set the console

speed to match the transmission rate of the device connected to the console (asyn)

port on your device.

Example To set the terminal console (asyn0) port speed from the device to 57600 bps, then

exit the session, use the commands:

awplus# configure terminal

awplus(config)# line console 0

awplus(config-line)# speed 57600

awplus(config-line)# exit

awplus(config)# exit

awplus# exit

Then log in again to enable the change:

awplus login:

Password:

awplus>

Parameter Description

<console-speed-in-bps>Console speed Baud rate in bps (bits per second).

1200 1200 Baud

2400 2400 Baud

9600 9600 Baud

19200 19200 Baud

38400 38400 Baud

57600 57600 Baud

115200 115200 Baud

C613-50228-01 Rev A Command Reference for AR2050V 275

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

SPEED (ASYN)

Commands

clear line console

line

show running-config

show startup-config

speed

C613-50228-01 Rev A Command Reference for AR2050V 276

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

TERMINAL MONITOR

terminal monitor

Overview Use this command to display debugging output on a terminal.

To display the cursor after a line of debugging output, press the Enter key.

Use the command terminal no monitor or no terminal monitor to stop

displaying debugging output on the terminal. Alternatively, you can use the

timeout option to stop displaying debugging output on the terminal after a set

time.

Syntax terminal monitor [<1-60>]

terminal no monitor

no terminal monitor

Default Disabled

Mode User Exec and Privileged Exec

Examples To display debugging output on a terminal, enter the command:

awplus# terminal monitor

To display debugging on the terminal for 60 seconds, enter the command:

awplus# terminal monitor 60

To stop displaying debugging output on the terminal, use the command:

awplus# no terminal monitor

Commands

All debug commands

Command

changes

Version 5.4.8-0.2: no terminal monitor added as an alias for terminal no monitor

Parameter Description

<1-60>Set a timeout between 1 and 60 seconds for terminal output.

C613-50228-01 Rev A Command Reference for AR2050V 277

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SYSTEM CONFIGURATION AND MONITORING COMMANDS

UNDEBUG ALL

undebug all

Overview This command applies the functionality of the no debug all command.

C613-50228-01 Rev A Command Reference for AR2050V 278

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

Logging Commands

Introduction

Overview This chapter provides an alphabetical reference of commands used to configure

logging. See the Logging Feature Overview and Configuration Guide for more

information about the different types of log and how to filter log messages.

Command List •“clear exception log” on page 281

•“clear log” on page 282

•“clear log buffered” on page 283

•“clear log external” on page 284

•“clear log permanent” on page 285

•“connection-log events” on page 286

•“copy buffered-log” on page 287

•“copy permanent-log” on page 288

•“default log buffered” on page 289

•“default log console” on page 290

•“default log email” on page 291

•“default log external” on page 292

•“default log host” on page 293

•“default log monitor” on page 294

•“default log permanent” on page 295

•“log buffered” on page 296

•“log buffered (filter)” on page 297

•“log buffered exclude” on page 300

•“log buffered size” on page 303

C613-50228-01 Rev A Command Reference for AR2050V 279

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

•“log console” on page 304

•“log console (filter)” on page 305

•“log console exclude” on page 308

•“log date-format” on page 311

•“log email” on page 312

•“log email (filter)” on page 313

•“log email exclude” on page 316

•“log email time” on page 319

•“log external” on page 321

•“log external (filter)” on page 323

•“log external exclude” on page 326

•“log external rotate” on page 329

•“log external size” on page 331

•“log facility” on page 332

•“log host” on page 334

•“log host (filter)” on page 336

•“log host exclude” on page 339

•“log host source” on page 342

•“log host time” on page 343

•“log monitor (filter)” on page 345

•“log monitor exclude” on page 348

•“log permanent” on page 351

•“log permanent (filter)” on page 352

•“log permanent exclude” on page 355

•“log permanent size” on page 358

•“log-rate-limit nsm” on page 359

•“log trustpoint” on page 360

•“log url-requests” on page 361

•“show connection-log events” on page 362

•“show counter log” on page 363

•“show exception log” on page 364

•“show log” on page 365

•“show log config” on page 367

•“show log external” on page 369

•“show log permanent” on page 370

C613-50228-01 Rev A Command Reference for AR2050V 280

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

•“show running-config log” on page 371

•“unmount” on page 372

C613-50228-01 Rev A Command Reference for AR2050V 281

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

CLEAR EXCEPTION LOG

clear exception log

Overview This command resets the contents of the exception log, but does not remove the

associated core files.

Syntax clear exception log

Mode Privileged Exec

Example awplus# clear exception log

C613-50228-01 Rev A Command Reference for AR2050V 282

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

CLEAR LOG

clear log

Overview This command removes the contents of the buffered and permanent logs.

Syntax clear log

Mode Privileged Exec

Example To delete the contents of the buffered and permanent log use the command:

awplus# clear log

Commands

clear log buffered

clear log permanent

show log

C613-50228-01 Rev A Command Reference for AR2050V 283

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

CLEAR LOG BUFFERED

clear log buffered

Overview This command removes the contents of the buffered log.

Syntax clear log buffered

Mode Privileged Exec

Example To delete the contents of the buffered log use the following commands:

awplus# clear log buffered

Commands

default log buffered

log buffered

log buffered (filter)

log buffered size

log buffered exclude

show log

show log config

C613-50228-01 Rev A Command Reference for AR2050V 284

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

CLEAR LOG EXTERNAL

clear log external

Overview Use this command to delete the external log file from the USB storage device it is

stored on.

If the external log is rotating between multiple files, this command deletes all

those files, not just the most recent one.

Syntax clear log external

Mode Privileged Exec

Example To delete the external log file, use the command:

awplus# clear log external

Commands

default log external

log external

log external (filter)

log external exclude

log external rotate

log external size

show log config

show log external

unmount

Command

changes

Version 5.4.7-1.1: command added

C613-50228-01 Rev A Command Reference for AR2050V 285

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

CLEAR LOG PERMANENT

clear log permanent

Overview This command removes the contents of the permanent log.

Syntax clear log permanent

Mode Privileged Exec

Example To delete the contents of the permanent log use the following commands:

awplus# clear log permanent

Commands

default log permanent

log permanent

log permanent (filter)

log permanent exclude

log permanent size

show log config

show log permanent

C613-50228-01 Rev A Command Reference for AR2050V 286

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

CONNECTION-LOG EVENTS

connection-log events

Overview Use this command to enable extra logging for indicating the start and the end of

connections passing through the firewall.

Use the no variant of this command to turn off the extra logging of connections

passing through the firewall.

Syntax connection-log events [new|end|all]

no connection-log events [new|end|all]

Default Connection logging is not enabled by default.

Mode Global Configuration.

Usage There are two types of messages you can log: new connections and connections

that ended. You can control the amount of messages you log by choosing to log

either type of message or all of the message types.

Messages contain the following information:

•time

• source and destination addresses (NATed and unNATed)

•protocol

• source and destination ports (NATed and unNATed)

• bytes and packets passed (found in the connection end message)

Example To log all of the new connections and all of the closed connections, use the

commands:

awplus# configure terminal

awplus(config)# connection-log events all

Commands

show connection-log events

Command

changes

Version 5.4.7-1.1: command added.

Parameter Description

new New connection

end Connections closed

all All new connections and connections closed. Default.

C613-50228-01 Rev A Command Reference for AR2050V 287

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

COPY BUFFERED-LOG

copy buffered-log

Overview Use this command to copy the buffered log to an internal or external destination.

Syntax copy buffered-log <destination-name>

Mode Privileged Exec

Example To copy the buffered log file into a folder in Flash named “buffered-log” and name

the file “buffered-log.log”, use the command:

awplus# copy buffered-log flash:/buffered-log/buffered-log.log

To copy the buffered log file onto a USB storage device and name the file

“buffered-log.log”, use the command:

awplus# copy buffered-log usb:/buffered-log.log

Commands

log buffered

show file systems

show log

Command

changes

Version 5.4.7-1.1: command added

Parameter Description

<destination-name> The filename and path for the destination file. See

Introduction on page 115 for valid syntax.

C613-50228-01 Rev A Command Reference for AR2050V 288

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

COPY PERMANENT-LOG

copy permanent-log

Overview Use this command to copy the permanent log to an internal or external

destination.

Syntax copy permanent-log <destination-name>

Mode Privileged Exec

Example To copy the permanent log file into a folder in Flash named “perm-log” and name

the file “permanent-log.log”, use the command:

awplus# copy permanent-log flash:/perm-log/permanent-log.log

To copy the permanent log file onto a USB storage device and name the file

“permanent-log.log”, use the command:

awplus# copy permanent-log usb:/permanent-log.log

Commands

log permanent

show file systems

show log permanent

Command

changes

Version 5.4.7-1.1: command added

Parameter Description

<destination-name> The filename and path for the destination file. See

Introduction on page 115 for valid syntax.

C613-50228-01 Rev A Command Reference for AR2050V 289

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

DEFAULT LOG BUFFERED

default log buffered

Overview This command restores the default settings for the buffered log stored in RAM. By

default the size of the buffered log is 50 kB and it accepts messages with the

severity level of “warnings” and above.

Syntax default log buffered

Default The buffered log is enabled by default.

Mode Global Configuration

Example To restore the buffered log to its default settings use the following commands:

awplus# configure terminal

awplus(config)# default log buffered

Commands

clear log buffered

log buffered

log buffered (filter)

log buffered size

log buffered exclude

show log

show log config

C613-50228-01 Rev A Command Reference for AR2050V 290

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

DEFAULT LOG CONSOLE

default log console

Overview This command restores the default settings for log messages sent to the terminal

when a log console command is issued. By default all messages are sent to the

console when a log console command is issued.

Syntax default log console

Mode Global Configuration

Example To restore the log console to its default settings use the following commands:

awplus# configure terminal

awplus(config)# default log console

Commands

log console

log console (filter)

log console exclude

show log config

C613-50228-01 Rev A Command Reference for AR2050V 291

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

DEFAULT LOG EMAIL

default log email

Overview This command restores the default settings for log messages sent to an email

address. By default no filters are defined for email addresses. Filters must be

defined before messages will be sent. This command also restores the remote

syslog server time offset value to local (no offset).

Syntax default log email <email-address>

Mode Global Configuration

Example To restore the default settings for log messages sent to the email address

admin@alliedtelesis.com use the following commands:

awplus# configure terminal

awplus(config)# default log email admin@alliedtelesis.com

Commands

log email

log email (filter)

log email exclude

log email time

show log config

Parameter Description

<email-address> The email address to send log messages to

C613-50228-01 Rev A Command Reference for AR2050V 292

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

DEFAULT LOG EXTERNAL

default log external

Overview Use this command to restore the default settings for the external log. By default,

the size of the external log is 50 kB, it rotates through 1 additional file, and it

accepts messages with a severity level of notices and above.

Note that this command does not clear the configured filename for the external

log.

Syntax default log external

Mode Global Configuration

Example To restore the default settings for the external log, use the commands:

awplus# configure terminal

awplus(config)# default log external

Commands

clear log external

log external

log external (filter)

log external exclude

log external rotate

log external size

show log config

show log external

unmount

Command

changes

Version 5.4.7-1.1: command added

C613-50228-01 Rev A Command Reference for AR2050V 293

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

DEFAULT LOG HOST

default log host

Overview This command restores the default settings for log sent to a remote syslog server.

By default no filters are defined for remote syslog servers. Filters must be defined

before messages will be sent. This command also restores the remote syslog server

time offset value to local (no offset).

Syntax default log host <ip-addr>

Mode Global Configuration

Example To restore the default settings for messages sent to the remote syslog server with

IP address 10.32.16.21 use the following commands:

awplus# configure terminal

awplus(config)# default log host 10.32.16.21

Commands

log host

log host (filter)

log host exclude

log host source

log host time

show log config

Parameter Description

<ip-addr>The IP address of a remote syslog server

C613-50228-01 Rev A Command Reference for AR2050V 294

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

DEFAULT LOG MONITOR

default log monitor

Overview This command restores the default settings for log messages sent to the terminal

when a terminal monitor command is used.

Syntax default log monitor

Default All messages are sent to the terminal when a terminal monitor command is used.

Mode Global Configuration

Example To restore the log monitor to its default settings use the following commands:

awplus# configure terminal

awplus(config)# default log monitor

Commands

log monitor (filter)

log monitor exclude

show log config

terminal monitor

C613-50228-01 Rev A Command Reference for AR2050V 295

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

DEFAULT LOG PERMANENT

default log permanent

Overview This command restores the default settings for the permanent log stored in NVS.

By default, the size of the permanent log is 50 kB and it accepts messages with the

severity level of warnings and above.

Syntax default log permanent

Default The permanent log is enabled by default.

Mode Global Configuration

Example To restore the permanent log to its default settings use the following commands:

awplus# configure terminal

awplus(config)# default log permanent

Commands

clear log permanent

log permanent

log permanent (filter)

log permanent exclude

log permanent size

show log config

show log permanent

C613-50228-01 Rev A Command Reference for AR2050V 296

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG BUFFERED

log buffered

Overview This command configures the device to store log messages in RAM. Messages

stored in RAM are not retained on the device over a restart. Once the buffered log

reaches its configured maximum allowable size old messages will be deleted to

make way for new ones.

Syntax log buffered

no log buffered

Default The buffered log is configured by default.

Mode Global Configuration

Examples To configured the device to store log messages in RAM use the following

commands:

awplus# configure terminal

awplus(config)# log buffered

To configure the device to not store log messages in a RAM buffer use the

following commands:

awplus# configure terminal

awplus(config)# no log buffered

Commands

clear log buffered

copy buffered-log

default log buffered

log buffered (filter)

log buffered size

log buffered exclude

show log

show log config

C613-50228-01 Rev A Command Reference for AR2050V 297

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG BUFFERED (FILTER)

log buffered (filter)

Overview Use this command to create a filter to select messages to be sent to the buffered

log. Selection can be based on the priority/ severity of the message, the program

that generated the message, the logging facility used, a sub-string within the

message or a combination of some or all of these.

The no variant of this command removes the corresponding filter, so that the

specified messages are no longer sent to the buffered log.

Syntax log buffered [level <level>] [program <program-name>] [facility

<facility>] [msgtext <text-string>]

no log buffered [level <level>] [program <program-name>]

[facility <facility>] [msgtext <text-string>]

Parameter Description

level Filter messages to the buffered log by severity level.

<level>The minimum severity of message to send to the buffered log. The level can be specified as

one of the following numbers or level names, where 0 is the highest severity and 7 is the

lowest severity:

0|emergencies System is unusable

1|alerts Action must be taken immediately

2|critical Critical conditions

3|errors Error conditions

4|warnings Warning conditions

5|notices Normal, but significant, conditions

6|informational Informational messages

7|debugging Debug-level messages

program Filter messages to the buffered log by program. Include messages from a specified program in

the buffered log.

<program-

name>

The name of a program to log messages from, either one of the following predefined program

names (not case-sensitive), or another program name (case-sensitive) that you find in the log

output:

rip Routing Information Protocol (RIP)

ripng Routing Information Protocol - next generation (RIPng)

ospf Open Shortest Path First (OSPF)

ospfv3 Open Shortest Path First (OSPF) version 3 (OSPFv3)

bgp Border Gateway Protocol (BGP)

rsvp Resource Reservation Protocol (RSVP)

pim-sm Protocol Independent Multicast - Sparse Mode (PIM-SM)

C613-50228-01 Rev A Command Reference for AR2050V 298

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG BUFFERED (FILTER)

Default By default the buffered log has a filter to select messages whose severity level is

“notices (5)” or higher. This filter may be removed using the no variant of this

command.

Mode Global Configuration

Examples To add a filter to send all messages containing the text “Bridging initialization” to

the buffered log, use the following commands:

awplus# configure terminal

awplus(config)# log buffered msgtext Bridging initialization

pim-smv6 PIM-SM version 6 (PIM-SMv6)

lacp Link Aggregation Control Protocol (LACP)

stp Spanning Tree Protocol (STP)

rstp Rapid Spanning Tree Protocol (RSTP)

mstp Multiple Spanning Tree Protocol (MSTP)

imi Integrated Management Interface (IMI)

imish Integrated Management Interface Shell (IMISH)

facility Filter messages to the buffered log by syslog facility.

<facility>Specify one of the following syslog facilities to include messages from in the buffered log:

kern Kernel messages

user Random user-level messages

mail Mail system

daemon System daemons

auth Security/authorization messages

syslog Messages generated internally by syslogd

lpr Line printer subsystem

news Network news subsystem

uucp UUCP subsystem

cron Clock daemon

authpriv Security/authorization messages (private)

ftp FTP daemon

msgtext Select messages containing a certain text string.

<text-

string>

A text string to match (maximum 128 characters). This is case sensitive, and must be the last

text on the command line.

Parameter Description

C613-50228-01 Rev A Command Reference for AR2050V 299

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG BUFFERED (FILTER)

To remove a filter that sends all messages containing the text “Bridging

initialization” to the buffered log, use the following commands:

awplus# configure terminal

awplus(config)# no log buffered msgtext Bridging initialization

Commands

clear log buffered

default log buffered

log buffered

log buffered size

log buffered exclude

show log

show log config

C613-50228-01 Rev A Command Reference for AR2050V 300

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG BUFFERED EXCLUDE

log buffered exclude

Overview Use this command to exclude specified log messages from the buffered log. You

can exclude messages on the basis of:

• the priority/severity of the message

• the program that generated the message

• the logging facility used

• a sub-string within the message, or

• a combination of some or all of these.

Use the no variant of this command to stop excluding the specified messages.

Syntax log buffered exclude [level <level>] [program <program-name>]

[facility <facility>] [msgtext <text-string>]

no log buffered exclude [level <level>] [program

<program-name>] [facility <facility>] [msgtext <text-string>]

Parameter Description

level Exclude messages of the specified severity level.

<level>The severity level to exclude. The level can be specified as one of the following numbers or

level names, where 0 is the highest severity and 7 is the lowest severity:

0|emergencies System is unusable

1|alerts Action must be taken immediately

2|critical Critical conditions

3|errors Error conditions

4|warnings Warning conditions

5|notices Normal, but significant, conditions

6|informational Informational messages

7|debugging Debug-level messages

program Exclude messages from a specified program.

<program-

name>

The name of a program. Either one of the following predefined program names (not

case-sensitive), or another program name (case-sensitive) that you find in the log output.

rip Routing Information Protocol (RIP)

ripng Routing Information Protocol - next generation (RIPng)

ospf Open Shortest Path First (OSPF)

ospfv3 Open Shortest Path First (OSPF) version 3 (OSPFv3)

bgp Border Gateway Protocol (BGP)

rsvp Resource Reservation Protocol (RSVP)

C613-50228-01 Rev A Command Reference for AR2050V 301

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG BUFFERED EXCLUDE

Default No log messages are excluded

Mode Global configuration

Example To remove messages that contain the string “example of irrelevant message”, use

the following commands:

awplus# configure terminal

awplus(config)# log buffered exclude msgtext example of

irrelevant message

pim-sm Protocol Independent Multicast - Sparse Mode (PIM-SM)

pim-smv6 PIM-SM version 6 (PIM-SMv6)

lacp Link Aggregation Control Protocol (LACP)

stp Spanning Tree Protocol (STP)

rstp Rapid Spanning Tree Protocol (RSTP)

mstp Multiple Spanning Tree Protocol (MSTP)

imi Integrated Management Interface (IMI)

imish Integrated Management Interface Shell (IMISH)

facility Exclude messages from a syslog facility.

<facility>Specify one of the following syslog facilities to exclude messages from:

kern Kernel messages

user Random user-level messages

mail Mail system

daemon System daemons

auth Security/authorization messages

syslog Messages generated internally by syslogd

lpr Line printer subsystem

news Network news subsystem

uucp UUCP subsystem

cron Clock daemon

authpriv Security/authorization messages (private)

ftp FTP daemon

msgtext Exclude messages containing a certain text string.

<text-

string>

A text string to match (maximum 128 characters). This is case sensitive, and must be the last

text on the command line.

Parameter Description

C613-50228-01 Rev A Command Reference for AR2050V 302

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG BUFFERED EXCLUDE

Commands

clear log buffered

default log buffered

log buffered

log buffered (filter)

log buffered size

show log

show log config

C613-50228-01 Rev A Command Reference for AR2050V 303

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG BUFFERED SIZE

log buffered size

Overview This command configures the amount of memory that the buffered log is

permitted to use. Once this memory allocation has been filled old messages will be

deleted to make room for new messages.

Syntax log buffered size <50-250>

Mode Global Configuration

Example To allow the buffered log to use up to 100 kB of RAM use the following commands:

awplus# configure terminal

awplus(config)# log buffered size 100

Commands

clear log buffered

copy buffered-log

default log buffered

log buffered

log buffered (filter)

log buffered exclude

show log

show log config

Parameter Description

<50-250>Size of the RAM log in kilobytes

C613-50228-01 Rev A Command Reference for AR2050V 304

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG CONSOLE

log console

Overview This command configures the device to send log messages to consoles. The

console log is configured by default to send messages to the device’s main console

port.

Use the no variant of this command to configure the device not to send log

messages to consoles.

Syntax log console

no log console

Mode Global Configuration

Examples To configure the device to send log messages use the following commands:

awplus# configure terminal

awplus(config)# log console

To configure the device not to send log messages in all consoles use the following

commands:

awplus# configure terminal

awplus(config)# no log console

Commands

default log console

log console (filter)

log console exclude

show log config

C613-50228-01 Rev A Command Reference for AR2050V 305

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG CONSOLE (FILTER)

log console (filter)

Overview This command creates a filter to select messages to be sent to all consoles when

the log console command is given. Selection can be based on the priority/severity

of the message, the program that generated the message, the logging facility

used, a sub-string within the message or a combination of some or all of these.

Syntax log console [level <level>] [program <program-name>] [facility

<facility>] [msgtext <text-string>]

no log console [level <level>] [program <program-name>]

[facility <facility>] [msgtext <text-string>]

Parameter Description

level Filter messages by severity level.

<level>The minimum severity of message to send. The level can be specified as one of the following

numbers or level names, where 0 is the highest severity and 7 is the lowest severity:

0|emergencies System is unusable

1|alerts Action must be taken immediately

2|critical Critical conditions

3|errors Error conditions

4|warnings Warning conditions

5|notices Normal, but significant, conditions

6|informational Informational messages

7|debugging Debug-level messages

program Filter messages by program. Include messages from a specified program.

<program-

name>

The name of a program to log messages from, either one of the following predefined program

names (not case-sensitive), or another program name (case-sensitive) that you find in the log

output:

rip Routing Information Protocol (RIP)

ripng Routing Information Protocol - next generation (RIPng)

ospf Open Shortest Path First (OSPF)

ospfv3 Open Shortest Path First (OSPF) version 3 (OSPFv3)

bgp Border Gateway Protocol (BGP)

rsvp Resource Reservation Protocol (RSVP)

pim-sm Protocol Independent Multicast - Sparse Mode (PIM-SM)

pim-smv6 PIM-SM version 6 (PIM-SMv6)

lacp Link Aggregation Control Protocol (LACP)

stp Spanning Tree Protocol (STP)

C613-50228-01 Rev A Command Reference for AR2050V 306

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG CONSOLE (FILTER)

Default By default the console log has a filter to select messages whose severity level is

critical or higher. This filter may be removed using the no variant of this

command. This filter may be removed and replaced by filters that are more

selective.

Mode Global Configuration

Examples To create a filter to send all messages containing the text “Bridging initialization”

to console instances where the log console command has been entered, use the

following commands:

awplus# configure terminal

awplus(config)# log console msgtext "Bridging initialization"

To remove a default filter that includes sending critical, alert and emergency

level messages to the console, use the following commands:

awplus# configure terminal

awplus(config)# no log console level critical

rstp Rapid Spanning Tree Protocol (RSTP)

mstp Multiple Spanning Tree Protocol (MSTP)

imi Integrated Management Interface (IMI)

imish Integrated Management Interface Shell (IMISH)

facility Filter messages by syslog facility.

<facility>Specify one of the following syslog facilities to include messages from:

kern Kernel messages

user Random user-level messages

mail Mail system

daemon System daemons

auth Security/authorization messages

syslog Messages generated internally by syslogd

lpr Line printer subsystem

news Network news subsystem

uucp UUCP subsystem

cron Clock daemon

authpriv Security/authorization messages (private)

ftp FTP daemon

msgtext Select messages containing a certain text string.

<text-

string>

A text string to match (maximum 128 characters). This is case sensitive, and must be the last

text on the command line.

Parameter Description

C613-50228-01 Rev A Command Reference for AR2050V 307

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG CONSOLE (FILTER)

Commands

default log console

log console

log console exclude

show log config

C613-50228-01 Rev A Command Reference for AR2050V 308

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG CONSOLE EXCLUDE

log console exclude

Overview Use this command to prevent specified log messages from being sent to the

console, when console logging is turned on. You can exclude messages on the

basis of:

• the priority/severity of the message

• the program that generated the message

• the logging facility used

• a sub-string within the message, or

• a combination of some or all of these.

Use the no variant of this command to stop excluding the specified messages.

Syntax log console exclude [level <level>] [program <program-name>]

[facility <facility>] [msgtext <text-string>]

no log console exclude [level <level>] [program <program-name>]

[facility <facility>] [msgtext <text-string>]

Parameter Description

level Exclude messages of the specified severity level.

<level>The severity level to exclude. The level can be specified as one of the following numbers or

level names, where 0 is the highest severity and 7 is the lowest severity:

0|emergencies System is unusable

1|alerts Action must be taken immediately

2|critical Critical conditions

3|errors Error conditions

4|warnings Warning conditions

5|notices Normal, but significant, conditions

6|informational Informational messages

7|debugging Debug-level messages

program Exclude messages from a specified program.

<program-

name>

The name of a program. Either one of the following predefined program names (not

case-sensitive), or another program name (case-sensitive) that you find in the log output.

rip Routing Information Protocol (RIP)

ripng Routing Information Protocol - next generation (RIPng)

ospf Open Shortest Path First (OSPF)

ospfv3 Open Shortest Path First (OSPF) version 3 (OSPFv3)

bgp Border Gateway Protocol (BGP)

C613-50228-01 Rev A Command Reference for AR2050V 309

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG CONSOLE EXCLUDE

Default No log messages are excluded

Mode Global configuration

Example To remove messages that contain the string “example of irrelevant message”, use

the following commands:

awplus# configure terminal

awplus(config)# log console exclude msgtext example of

irrelevant message

rsvp Resource Reservation Protocol (RSVP)

pim-sm Protocol Independent Multicast - Sparse Mode (PIM-SM)

pim-smv6 PIM-SM version 6 (PIM-SMv6)

lacp Link Aggregation Control Protocol (LACP)

stp Spanning Tree Protocol (STP)

rstp Rapid Spanning Tree Protocol (RSTP)

mstp Multiple Spanning Tree Protocol (MSTP)

imi Integrated Management Interface (IMI)

imish Integrated Management Interface Shell (IMISH)

facility Exclude messages from a syslog facility.

<facility>Specify one of the following syslog facilities to exclude messages from:

kern Kernel messages

user Random user-level messages

mail Mail system

daemon System daemons

auth Security/authorization messages

syslog Messages generated internally by syslogd

lpr Line printer subsystem

news Network news subsystem

uucp UUCP subsystem

cron Clock daemon

authpriv Security/authorization messages (private)

ftp FTP daemon

msgtext Exclude messages containing a certain text string.

<text-

string>

A text string to match (maximum 128 characters). This is case sensitive, and must be the last

text on the command line.

Parameter Description

C613-50228-01 Rev A Command Reference for AR2050V 310

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG CONSOLE EXCLUDE

Commands

default log console

log console

log console (filter)

show log config

C613-50228-01 Rev A Command Reference for AR2050V 311

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG DATE-FORMAT

log date-format

Overview Use this command to change the date format for log messages to an ISO 8601

compliant format, or to return to the default date format.

Syntax log date-format {iso|default}

Default The default option of YYYY MMM DD HH:MM:SS (except when using terminal

monitor, when it is HH:MM:SS)

Mode Global Configuration

Usage In the ISO 8601 compliant format, a T separates the date from the time, and the

time is followed by the timezone offset from UTC time. For example, this is a log

message with an ISO 8601 compliant date:

2016-09-29T08:55:43+13:00 user.notice Gateway IMISH[1983]:

[manager@ttyS0]show run

This is a log message with the default date format:

2016 Sep 29 08:55:43 user.notice Gateway IMISH[1983]:

[manager@ttyS0]show run

The date format setting affects all log messages, no matter where the messages are

stored or displayed.

Examples To set the date format to the ISO 8601 compliant format, use the commands:

awplus# configure terminal

awplus(config)# log date-format iso

To return to the default date format of YYYY MMM DD HH:MM:SS, use the

commands:

awplus# configure terminal

awplus(config)# log date-format default

Commands

show exception log

show log

show log permanent

Command

changes

Version 5.4.6-2.1: command added

Parameter Description

iso Display the date and time in the ISO 8601 compliant format of:

YYYY-MM-DDThh:mm:ssTZD

default Display the date and time in the default date format of 

YYYY MMM DD HH:MM:SS

C613-50228-01 Rev A Command Reference for AR2050V 312

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG EMAIL

log email

Overview This command configures the device to send log messages to an email address.

The email address is specified in this command.

Syntax log email <email-address>

Default By default no filters are defined for email log targets. Filters must be defined before

messages will be sent.

Mode Global Configuration

Example To have log messages emailed to the email address

admin@alliedtelesis.com use the following commands:

awplus# configure terminal

awplus(config)# log email admin@alliedtelesis.com

Commands

default log email

log email (filter)

log email exclude

log email time

show log config

Parameter Description

<email-address> The email address to send log messages to

C613-50228-01 Rev A Command Reference for AR2050V 313

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG EMAIL (FILTER)

log email (filter)

Overview This command creates a filter to select messages to be sent to an email address.

Selection can be based on the priority/ severity of the message, the program that

generated the message, the logging facility used, a sub-string within the message

or a combination of some or all of these.

The no variant of this command configures the device to no longer send log

messages to a specified email address. All configuration relating to this log target

will be removed.

Syntax log email <email-address> [level <level>] [program

<program-name>] [facility <facility>] [msgtext <text-string>]

no log email <email-address> [level <level>] [program

<program-name>] [facility <facility>] [msgtext <text-string>]

Parameter Description

<email-

address>

The email address to send logging messages to

level Filter messages by severity level.

<level>The minimum severity of message to send. The level can be specified as one of the following

numbers or level names, where 0 is the highest severity and 7 is the lowest severity:

0|emergencies System is unusable

1|alerts Action must be taken immediately

2|critical Critical conditions

3|errors Error conditions

4|warnings Warning conditions

5|notices Normal, but significant, conditions

6|informational Informational messages

7|debugging Debug-level messages

program Filter messages by program. Include messages from a specified program.

<program-

name>

The name of a program to log messages from, either one of the following predefined program

names (not case-sensitive), or another program name (case-sensitive) that you find in the log

output:

rip Routing Information Protocol (RIP)

ripng Routing Information Protocol - next generation (RIPng)

ospf Open Shortest Path First (OSPF)

ospfv3 Open Shortest Path First (OSPF) version 3 (OSPFv3)

bgp Border Gateway Protocol (BGP)

rsvp Resource Reservation Protocol (RSVP)

C613-50228-01 Rev A Command Reference for AR2050V 314

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG EMAIL (FILTER)

Mode Global Configuration

Examples To create a filter to send all messages containing the text “Bridging initialization”,

to the email address admin@homebase.com, use the following commands:

awplus# configure terminal

awplus(config)# log email admin@homebase.com msgtext "Bridging

initialization"

pim-sm Protocol Independent Multicast - Sparse Mode (PIM-SM)

pim-smv6 PIM-SM version 6 (PIM-SMv6)

lacp Link Aggregation Control Protocol (LACP)

stp Spanning Tree Protocol (STP)

rstp Rapid Spanning Tree Protocol (RSTP)

mstp Multiple Spanning Tree Protocol (MSTP)

imi Integrated Management Interface (IMI)

imish Integrated Management Interface Shell (IMISH)

facility Filter messages by syslog facility.

<facility>Specify one of the following syslog facilities to include messages from:

kern Kernel messages

user Random user-level messages

mail Mail system

daemon System daemons

auth Security/authorization messages

syslog Messages generated internally by syslogd

lpr Line printer subsystem

news Network news subsystem

uucp UUCP subsystem

cron Clock daemon

authpriv Security/authorization messages (private)

ftp FTP daemon

msgtext Select messages containing a certain text string.

<text-

string>

A text string to match (maximum 128 characters). This is case sensitive, and must be the last

text on the command line.

Parameter Description

C613-50228-01 Rev A Command Reference for AR2050V 315

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG EMAIL (FILTER)

To create a filter to send messages with a severity level of informational and

above to the email address admin@alliedtelesis.com, use the following

commands:

awplus# configure terminal

awplus(config)# log email admin@alliedtelesis.com level

informational

To stop the device emailing log messages emailed to the email address

admin@alliedtelesis.com, use the following commands:

awplus# configure terminal

awplus(config)# no log email admin@homebase.com

To remove a filter that sends messages with a severity level of informational and

above to the email address admin@alliedtelesis.com, use the following

commands:

awplus# configure terminal

awplus(config)# no log email admin@alliedtelesis.com level

informational

Commands

default log email

log email

log email exclude

log email time

show log config

C613-50228-01 Rev A Command Reference for AR2050V 316

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG EMAIL EXCLUDE

log email exclude

Overview Use this command to prevent specified log messages from being emailed, when

the device is configured to send log messages to an email address. You can

exclude messages on the basis of:

• the priority/severity of the message

• the program that generated the message

• the logging facility used

• a sub-string within the message, or

• a combination of some or all of these.

Use the no variant of this command to stop excluding the specified messages.

Syntax log email exclude [level <level>] [program <program-name>]

[facility <facility>] [msgtext <text-string>]

no log email exclude [level <level>] [program <program-name>]

[facility <facility>] [msgtext <text-string>]

Parameter Description

level Exclude messages of the specified severity level.

<level>The severity level to exclude. The level can be specified as one of the following numbers or

level names, where 0 is the highest severity and 7 is the lowest severity:

0|emergencies System is unusable

1|alerts Action must be taken immediately

2|critical Critical conditions

3|errors Error conditions

4|warnings Warning conditions

5|notices Normal, but significant, conditions

6|informational Informational messages

7|debugging Debug-level messages

program Exclude messages from a specified program.

<program-

name>

The name of a program. Either one of the following predefined program names (not

case-sensitive), or another program name (case-sensitive) that you find in the log output.

rip Routing Information Protocol (RIP)

ripng Routing Information Protocol - next generation (RIPng)

ospf Open Shortest Path First (OSPF)

ospfv3 Open Shortest Path First (OSPF) version 3 (OSPFv3)

bgp Border Gateway Protocol (BGP)

C613-50228-01 Rev A Command Reference for AR2050V 317

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG EMAIL EXCLUDE

Default No log messages are excluded

Mode Global configuration

Example To remove messages that contain the string “example of irrelevant message”, use

the following commands:

awplus# configure terminal

awplus(config)# log email exclude msgtext example of irrelevant

message

rsvp Resource Reservation Protocol (RSVP)

pim-sm Protocol Independent Multicast - Sparse Mode (PIM-SM)

pim-smv6 PIM-SM version 6 (PIM-SMv6)

lacp Link Aggregation Control Protocol (LACP)

stp Spanning Tree Protocol (STP)

rstp Rapid Spanning Tree Protocol (RSTP)

mstp Multiple Spanning Tree Protocol (MSTP)

imi Integrated Management Interface (IMI)

imish Integrated Management Interface Shell (IMISH)

facility Exclude messages from a syslog facility.

<facility>Specify one of the following syslog facilities to exclude messages from:

kern Kernel messages

user Random user-level messages

mail Mail system

daemon System daemons

auth Security/authorization messages

syslog Messages generated internally by syslogd

lpr Line printer subsystem

news Network news subsystem

uucp UUCP subsystem

cron Clock daemon

authpriv Security/authorization messages (private)

ftp FTP daemon

msgtext Exclude messages containing a certain text string.

<text-

string>

A text string to match (maximum 128 characters). This is case sensitive, and must be the last

text on the command line.

Parameter Description

C613-50228-01 Rev A Command Reference for AR2050V 318

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG EMAIL EXCLUDE

Commands

default log email

log email

log email (filter)

log email time

show log config

C613-50228-01 Rev A Command Reference for AR2050V 319

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG EMAIL TIME

log email time

Overview This command configures the time used in messages sent to an email address. If

the syslog server is in a different time zone to your device then the time offset can

be configured using either the utc-offset parameter option keyword or the

local-offset parameter option keyword, where utc-offset is the time difference

from UTC (Universal Time, Coordinated) and local-offset is the difference from

local time.

Syntax log email <email-address> time {local|local-offset|utc-offset

{plus|minus}<0-24>}

Default The default is local time.

Mode Global Configuration

Usage Use the local option if the email recipient is in the same time zone as this device.

Messages will display the time as on the local device when the message was

generated.

Use the offset option if the email recipient is in a different time zone to this device.

Specify the time offset of the email recipient in hours. Messages will display the

time they were generated on this device but converted to the time zone of the

email recipient.

Parameter Description

<email-address> The email address to send log messages to

time Specify the time difference between the email recipient and the

device you are configuring.

local The device is in the same time zone as the email recipient

local-offset The device is in a different time zone to the email recipient. Use

the plus or minus keywords and specify the difference (offset)

from local time of the device to the email recipient in hours.

utc-offset The device is in a different time zone to the email recipient. Use

the plus or minus keywords and specify the difference (offset)

from UTC time of the device to the email recipient in hours.

plus Negative offset (difference) from the device to the email

recipient.

minus Positive offset (difference) from the device to the email

recipient.

<0-24> World Time zone offset in hours

C613-50228-01 Rev A Command Reference for AR2050V 320

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG EMAIL TIME

Examples To send messages to the email address test@home.com in the same time zone

as the device’s local time zone, use the following commands:

awplus# configure terminal

awplus(config)# log email admin@base.com time local 0

To send messages to the email address admin@base.com with the time

information converted to the time zone of the email recipient, which is 3 hours

ahead of the device’s local time zone, use the following commands:

awplus# configure terminal

awplus(config)# log email admin@base.com time local-offset plus

To send messages to the email address user@remote.com with the time

information converted to the time zone of the email recipient, which is 3 hours

behind the device’s UTC time zone, use the following commands:

awplus# configure terminal

awplus(config)# log email user@remote.com time utc-offset minus

Commands

default log email

log email

log email (filter)

log email exclude

show log config

C613-50228-01 Rev A Command Reference for AR2050V 321

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG EXTERNAL

log external

Overview Use this command to enable external logging. External logging sends syslog

messages to a file on a USB storage device.

If the file does not already exist on the storage device, it (and any specified

subdirectory) will be automatically created. If the file already exists, messages are

appended to it.

Use the no variant of this command to disable external logging.

Syntax log external <filename>

no log external

Default External logging is disabled by default.

Mode Global Configuration

Usage We strongly recommend using ext3 or ext4 as the file system on the external

storage device. These file systems have a lower risk of file corruption occurring if

the switch or firewall loses power.

You should also unmount the storage device before removing it from the switch

or firewall, to avoid corrupting the log file. To unmount the device, use the

unmount command.

Example To save messages to a file called “messages.log” in a directory called “log” on a USB

storage device, use the command:

awplus# configure terminal

awplus(config)# log external usb:/log/messages.log

Commands

clear log external

default log external

log external (filter)

log external exclude

log external rotate

log external size

show log config

show log external

unmount

Parameter Description

<filename> The file and optionally directory path to store the log messages in.

See Introduction on page 115 for valid syntax.

C613-50228-01 Rev A Command Reference for AR2050V 322

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG EXTERNAL

Command

changes

Version 5.4.7-1.1: command added

C613-50228-01 Rev A Command Reference for AR2050V 323

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG EXTERNAL (FILTER)

log external (filter)

Overview Use this command to create a filter to select messages to be sent to the external

log. You can include messages based on:

• the priority/severity of the message

• the program that generated the message

• the logging facility used

• a sub-string within the message, or

• a combination of some or all of these.

The no variant of this command removes the corresponding filter, so that the

specified messages are no longer sent to the external log.

Syntax log external [level <level>] [program <program-name>] [facility

<facility>] [msgtext <text-string>]

no log external [level <level>] [program <program-name>]

[facility <facility>] [msgtext <text-string>]

Parameter Description

level Filter messages to the external log by severity level.

<level>The minimum severity of message to send to the external log. The level can be specified as

one of the following numbers or level names, where 0 is the highest severity and 7 is the

lowest severity:

0|emergencies System is unusable

1|alerts Action must be taken immediately

2|critical Critical conditions

3|errors Error conditions

4|warnings Warning conditions

5|notices Normal, but significant, conditions

6|informational Informational messages

7|debugging Debug-level messages

program Filter messages to the external log by program. Include messages from a specified program in

the external log.

<program-

name>

The name of a program to log messages from, either one of the following predefined program

names (not case-sensitive), or another program name (case-sensitive) that you find in the log

output:

rip Routing Information Protocol (RIP)

ripng Routing Information Protocol - next generation (RIPng)

ospf Open Shortest Path First (OSPF)

C613-50228-01 Rev A Command Reference for AR2050V 324

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG EXTERNAL (FILTER)

Default By default the external log has a filter to select messages whose severity level is

“notices (5)” or higher. This filter may be removed using the no variant of this

command.

Mode Global Configuration

ospfv3 Open Shortest Path First (OSPF) version 3 (OSPFv3)

bgp Border Gateway Protocol (BGP)

rsvp Resource Reservation Protocol (RSVP)

pim-sm Protocol Independent Multicast - Sparse Mode (PIM-SM)

pim-smv6 PIM-SM version 6 (PIM-SMv6)

lacp Link Aggregation Control Protocol (LACP)

stp Spanning Tree Protocol (STP)

rstp Rapid Spanning Tree Protocol (RSTP)

mstp Multiple Spanning Tree Protocol (MSTP)

imi Integrated Management Interface (IMI)

imish Integrated Management Interface Shell (IMISH)

facility Filter messages to the external log by syslog facility.

<facility>Specify one of the following syslog facilities to include messages from in the log:

kern Kernel messages

user Random user-level messages

mail Mail system

daemon System daemons

auth Security/authorization messages

syslog Messages generated internally by syslogd

lpr Line printer subsystem

news Network news subsystem

uucp UUCP subsystem

cron Clock daemon

authpriv Security/authorization messages (private)

ftp FTP daemon

msgtext Select messages containing a certain text string.

<text-

string>

A text string to match (maximum 128 characters). This is case sensitive, and must be the last

text on the command line.

Parameter Description

C613-50228-01 Rev A Command Reference for AR2050V 325

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG EXTERNAL (FILTER)

Examples To add a filter to send all messages containing the text “Bridging initialization” to

the external log, use the following commands:

awplus# configure terminal

awplus(config)# log external msgtext Bridging initialization

To remove a filter that sends all messages containing the text “Bridging

initialization” to the external log, use the following commands:

awplus# configure terminal

awplus(config)# no log external msgtext Bridging initialization

Commands

clear log external

default log external

log external

log external exclude

log external rotate

log external size

show log config

show log external

unmount

Command

changes

Version 5.4.7-1.1: command added

C613-50228-01 Rev A Command Reference for AR2050V 326

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG EXTERNAL EXCLUDE

log external exclude

Overview Use this command to exclude specified log messages from the external log. You

can exclude messages on the basis of:

• the priority/severity of the message

• the program that generated the message

• the logging facility used

• a sub-string within the message, or

• a combination of some or all of these.

Use the no variant of this command to stop excluding the specified messages.

Syntax log external exclude [level <level>] [program <program-name>]

[facility <facility>] [msgtext <text-string>]

no log external exclude [level <level>] [program

<program-name>] [facility <facility>] [msgtext <text-string>]

Parameter Description

level Exclude messages of the specified severity level.

<level>The severity level to exclude. The level can be specified as one of the following numbers or

level names, where 0 is the highest severity and 7 is the lowest severity:

0|emergencies System is unusable

1|alerts Action must be taken immediately

2|critical Critical conditions

3|errors Error conditions

4|warnings Warning conditions

5|notices Normal, but significant, conditions

6|informational Informational messages

7|debugging Debug-level messages

program Exclude messages from a specified program.

<program-

name>

The name of a program. Either one of the following predefined program names (not

case-sensitive), or another program name (case-sensitive) that you find in the log output.

rip Routing Information Protocol (RIP)

ripng Routing Information Protocol - next generation (RIPng)

ospf Open Shortest Path First (OSPF)

ospfv3 Open Shortest Path First (OSPF) version 3 (OSPFv3)

bgp Border Gateway Protocol (BGP)

rsvp Resource Reservation Protocol (RSVP)

C613-50228-01 Rev A Command Reference for AR2050V 327

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG EXTERNAL EXCLUDE

Default No log messages are excluded

Mode Global Configuration

Example To remove messages that contain the string “example of irrelevant message”, use

the following commands:

awplus# configure terminal

awplus(config)# log external exclude msgtext example of

irrelevant message

Commands

clear log external

pim-sm Protocol Independent Multicast - Sparse Mode (PIM-SM)

pim-smv6 PIM-SM version 6 (PIM-SMv6)

lacp Link Aggregation Control Protocol (LACP)

stp Spanning Tree Protocol (STP)

rstp Rapid Spanning Tree Protocol (RSTP)

mstp Multiple Spanning Tree Protocol (MSTP)

imi Integrated Management Interface (IMI)

imish Integrated Management Interface Shell (IMISH)

facility Exclude messages from a syslog facility.

<facility>Specify one of the following syslog facilities to exclude messages from:

kern Kernel messages

user Random user-level messages

mail Mail system

daemon System daemons

auth Security/authorization messages

syslog Messages generated internally by syslogd

lpr Line printer subsystem

news Network news subsystem

uucp UUCP subsystem

cron Clock daemon

authpriv Security/authorization messages (private)

ftp FTP daemon

msgtext Exclude messages containing a certain text string.

<text-

string>

A text string to match (maximum 128 characters). This is case sensitive, and must be the last

text on the command line.

Parameter Description

C613-50228-01 Rev A Command Reference for AR2050V 328

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG EXTERNAL EXCLUDE

default log external

log external

log external (filter)

log external rotate

log external size

show log config

show log external

unmount

Command

changes

Version 5.4.7-1.1: command added

C613-50228-01 Rev A Command Reference for AR2050V 329

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG EXTERNAL ROTATE

log external rotate

Overview Use this command to configure the number of files that the external log can rotate

through.

Use the no variant of this command to return to the default.

Syntax log external rotate <0-255>

no log external rotate

Default The default is 1, which rotates between the initial file and 1 additional file (for

example, rotates between messages.log and messages.log.1)

Mode Global Configuration

Usage The device rotates between the initial file and the number of additional files

specified by this command. For example, the diagram below shows how setting

rotate to 2 makes the device rotate through 3 files.

Note that if you set rotate to 0, and the external log file becomes full, then the

device deletes the full log file and creates a new (empty) file of the same name to

save messages into. For this reason, we recommend setting rotate to at least 1.

Example To set the rotation value to 2, and therefore rotate between 3 files, use the

commands:

awplus# configure terminal

awplus(config)# log external rotate 2

Parameter Description

<0-255> The number of additional files to rotate through. Note that the

device rotates between the initial file and the number of

additional files specified by this value - see the Usage section

below.

3UBSEQUENTROTATION3ECONDROTATION&IRSTROTATION3TARTOFLOGGING

MESSAGESLOG MESSAGESLOG MESSAGESLOGMESSAGESLOG

MESSAGESLOG MESSAGESLOG MESSAGESLOG

MESSAGESLOG MESSAGESLOG

LOG

EXTERNAL

SIZE

RENAMEDTO

DELETED

RENAMEDTO

C613-50228-01 Rev A Command Reference for AR2050V 330

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG EXTERNAL ROTATE

Commands

clear log external

default log external

log external

log external (filter)

log external exclude

log external size

show log config

show log external

unmount

Command

changes

Version 5.4.7-1.1: command added

C613-50228-01 Rev A Command Reference for AR2050V 331

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG EXTERNAL SIZE

log external size

Overview Use this command to configure the total amount of size that the external log is

permitted to use, in kilobytes. The maximum possible depends on the storage

device’s file system.

Note that if you are rotating between multiple files, this is the maximum size of all

files, not of each individual file. For example, if you are rotating between 2 files (log

external rotate 1), each file will have a maximum size of 25 kBytes by default.

Use the no variant of this command to return to the default size.

Syntax log external size [<50-4194304>]

no log external size

Default 50 kBytes

Mode Global Configuration

Example To configure a total log size of 100 kBytes, use the commands:

awplus# configure terminal

awplus(config)# log external size 100

Commands

clear log external

default log external

log external

log external (filter)

log external exclude

log external rotate

log external size

show log config

show log external

unmount

Command

changes

Version 5.4.7-1.1: command added

Parameter Description

<50-4194304> The total amount of size that the external log is permitted to use,

in kilobytes.

C613-50228-01 Rev A Command Reference for AR2050V 332

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG FACILITY

log facility

Overview Use this command to assign a facility to all log messages generated on this device.

This facility overrides any facility that is automatically generated as part of the log

message.

Use the no variant of this command to remove the configured facility.

Syntax log facility {kern|user|mail|daemon|auth|syslog|lpr|news|uucp|

local6|local7}

no log facility

Default None. The outgoing syslog facility depends on the log message.

Mode Global Configuration

Usage Specifying different facilities for log messages generated on different devices can

allow messages from multiple devices sent to a common server to be

distinguished from each other.

Ordinarily, the facility values generated in log messages have meanings as shown

in the following table. Using this command will override these meanings, and the

new meanings will depend on the use you put them to.

Table 7-1: Ordinary meanings of the facility parameter in log messages

Facility Description

kern Kernel messages

user User-level messages

mail Mail system

daemon System daemons

auth Security/authorization messages

syslog Messages generated internally by the syslog daemon

lpr Line printer subsystem

news Network news subsystem

uucp UNIX-to-UNIX Copy Program subsystem

cron Clock daemon

authpriv Security/authorization (private) messages

C613-50228-01 Rev A Command Reference for AR2050V 333

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG FACILITY

Example To specify a facility of local6, use the following commands:

awplus# configure terminal

awplus(config)# log facility local6

Commands

show log config

ftp FTP daemon

local<0..7>The facility labels above have specific meanings, while the

local facility labels are intended to be put to local use. In

AlliedWare Plus, some of these local facility labels are used

in log messages. In particular, local5 is assigned to log

messages generated by UTM Firewall security features.

Table 7-1: Ordinary meanings of the facility parameter in log messages (cont.)

Facility Description

C613-50228-01 Rev A Command Reference for AR2050V 334

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG HOST

log host

Overview This command configures the device to send log messages to a remote syslog

server via UDP port 514. The IP address of the remote server must be specified. By

default no filters are defined for remote syslog servers. Filters must be defined

before messages will be sent.

Use the no variant of this command to stop sending log messages to the remote

syslog server.

Syntax log host <ipv4-addr> [secure]

log host <ipv6-addr>

no log host <ipv4-addr>|<ipv6-addr>

Mode Global Configuration

Usage Use the optional secure parameter to configure a secure IPv4 syslog host. For

secure hosts, syslog over TLS is used to encrypt the logs. The certificate received

from the remote log server must have an issuer chain that terminates with the root

CA certificate for any of the trustpoints that are associated with the application.

The remote server may also request that a certificate is transmitted from the local

device. In this situation the first trustpoint added to the syslog application will be

transmitted to the remote server.

For detailed information about securing syslog, see the PKI Feature Overview_and

Configuration Guide.

Examples To configure the device to send log messages to a remote secure syslog server with

IP address 10.32.16.99, use the following commands:

awplus# configure terminal

awplus(config)# log host 10.32.16.99 secure

To stop the device from sending log messages to the remote syslog server with IP

address 10.32.16.99, use the following commands:

awplus# configure terminal

awplus(config)# no log host 10.32.16.99

Commands

default log host

log host (filter)

Parameter Description

<ipv4-addr>Specify the source IPv4 address, in dotted decimal notation (A.B.C.D).

<ipv6-addr> Specify the source IPv6 address, in X:X::X:X notation.

secure Optional value to create a secure log destination. This option is only

valid for IPv4 hosts.

C613-50228-01 Rev A Command Reference for AR2050V 335

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG HOST

log host exclude

log host source

log host time

log trustpoint

show log config

C613-50228-01 Rev A Command Reference for AR2050V 336

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG HOST (FILTER)

log host (filter)

Overview This command creates a filter to select messages to be sent to a remote syslog

server. Selection can be based on the priority/severity of the message, the program

that generated the message, the logging facility used, a substring within the

message or a combination of some or all of these.

The no variant of this command configures the device to no longer send log

messages to a remote syslog server. The IP address of the syslog server must be

specified. All configuration relating to this log target will be removed.

Syntax log host <ip-addr> [level <level>] [program <program-name>]

[facility <facility>] [msgtext <text-string>]

no log host <ip-addr> [level <level>] [program <program-name>]

[facility <facility>] [msgtext <text-string>]

Parameter Description

<ip-addr> The IP address of a remote syslog server.

level Filter messages by severity level.

<level>The minimum severity of message to send. The level can be specified as one of the following

numbers or level names, where 0 is the highest severity and 7 is the lowest severity:

0|emergencies System is unusable

1|alerts Action must be taken immediately

2|critical Critical conditions

3|errors Error conditions

4|warnings Warning conditions

5|notices Normal, but significant, conditions

6|informational Informational messages

7|debugging Debug-level messages

program Filter messages by program. Include messages from a specified program.

<program-

name>

The name of a program to log messages from, either one of the following predefined program

names (not case-sensitive), or another program name (case-sensitive) that you find in the log

output:

rip Routing Information Protocol (RIP)

ripng Routing Information Protocol - next generation (RIPng)

ospf Open Shortest Path First (OSPF)

ospfv3 Open Shortest Path First (OSPF) version 3 (OSPFv3)

bgp Border Gateway Protocol (BGP)

rsvp Resource Reservation Protocol (RSVP)

pim-sm Protocol Independent Multicast - Sparse Mode (PIM-SM)

C613-50228-01 Rev A Command Reference for AR2050V 337

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG HOST (FILTER)

Mode Global Configuration

Examples To create a filter to send all messages containing the text “Bridging initialization”,

to a remote syslog server with IP address 10.32.16.21, use the following

commands:

awplus# configure terminal

awplus(config)# log host 10.32.16.21 msgtext "Bridging

initialization"

pim-smv6 PIM-SM version 6 (PIM-SMv6)

lacp Link Aggregation Control Protocol (LACP)

stp Spanning Tree Protocol (STP)

rstp Rapid Spanning Tree Protocol (RSTP)

mstp Multiple Spanning Tree Protocol (MSTP)

imi Integrated Management Interface (IMI)

imish Integrated Management Interface Shell (IMISH)

facility Filter messages by syslog facility.

<facility>Specify one of the following syslog facilities to include messages from:

kern Kernel messages

user Random user-level messages

mail Mail system

daemon System daemons

auth Security/authorization messages

syslog Messages generated internally by syslogd

lpr Line printer subsystem

news Network news subsystem

uucp UUCP subsystem

cron Clock daemon

authpriv Security/authorization messages (private)

ftp FTP daemon

msgtext Select messages containing a certain text string.

<text-

string>

A text string to match (maximum 128 characters). This is case sensitive, and must be the last

text on the command line.

Parameter Description

C613-50228-01 Rev A Command Reference for AR2050V 338

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG HOST (FILTER)

To create a filter to send messages with a severity level of informational and

above to the syslog server with IP address 10.32.16.21, use the following

commands:

awplus# configure terminal

awplus(config)# log host 10.32.16.21 level informational

To remove a filter that sends all messages containing the text “Bridging

initialization”, to a remote syslog server with IP address 10.32.16.21, use the

following commands:

awplus# configure terminal

awplus(config)# no log host 10.32.16.21 msgtext "Bridging

initialization"

To remove a filter that sends messages with a severity level of informational and

above to the syslog server with IP address 10.32.16.21, use the following

commands:

awplusawpluls# configure terminal

awplus(config)# no log host 10.32.16.21 level informational

Commands

default log host

log host

log host exclude

log host source

log host time

show log config

C613-50228-01 Rev A Command Reference for AR2050V 339

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG HOST EXCLUDE

log host exclude

Overview Use this command to prevent specified log messages from being sent to the

remote syslog server, when log host is enabled. You can exclude messages on the

basis of:

• the priority/severity of the message

• the program that generated the message

• the logging facility used

• a sub-string within the message, or

• a combination of some or all of these.

Use the no variant of this command to stop excluding the specified messages.

Syntax log host exclude [level <level>] [program <program-name>]

[facility <facility>] [msgtext <text-string>]

no log host exclude [level <level>] [program <program-name>]

[facility <facility>] [msgtext <text-string>]

Parameter Description

level Exclude messages of the specified severity level.

<level>The severity level to exclude. The level can be specified as one of the following numbers or

level names, where 0 is the highest severity and 7 is the lowest severity:

0|emergencies System is unusable

1|alerts Action must be taken immediately

2|critical Critical conditions

3|errors Error conditions

4|warnings Warning conditions

5|notices Normal, but significant, conditions

6|informational Informational messages

7|debugging Debug-level messages

program Exclude messages from a specified program.

<program-

name>

The name of a program. Either one of the following predefined program names (not

case-sensitive), or another program name (case-sensitive) that you find in the log output.

rip Routing Information Protocol (RIP)

ripng Routing Information Protocol - next generation (RIPng)

ospf Open Shortest Path First (OSPF)

ospfv3 Open Shortest Path First (OSPF) version 3 (OSPFv3)

bgp Border Gateway Protocol (BGP)

C613-50228-01 Rev A Command Reference for AR2050V 340

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG HOST EXCLUDE

Default No log messages are excluded

Mode Global configuration

Example To remove messages that contain the string “example of irrelevant message”, use

the following commands:

awplus# configure terminal

awplus(config)# log host exclude msgtext example of irrelevant

message

rsvp Resource Reservation Protocol (RSVP)

pim-sm Protocol Independent Multicast - Sparse Mode (PIM-SM)

pim-smv6 PIM-SM version 6 (PIM-SMv6)

lacp Link Aggregation Control Protocol (LACP)

stp Spanning Tree Protocol (STP)

rstp Rapid Spanning Tree Protocol (RSTP)

mstp Multiple Spanning Tree Protocol (MSTP)

imi Integrated Management Interface (IMI)

imish Integrated Management Interface Shell (IMISH)

facility Exclude messages from a syslog facility.

<facility>Specify one of the following syslog facilities to exclude messages from:

kern Kernel messages

user Random user-level messages

mail Mail system

daemon System daemons

auth Security/authorization messages

syslog Messages generated internally by syslogd

lpr Line printer subsystem

news Network news subsystem

uucp UUCP subsystem

cron Clock daemon

authpriv Security/authorization messages (private)

ftp FTP daemon

msgtext Exclude messages containing a certain text string.

<text-

string>

A text string to match (maximum 128 characters). This is case sensitive, and must be the last

text on the command line.

Parameter Description

C613-50228-01 Rev A Command Reference for AR2050V 341

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG HOST EXCLUDE

Commands

default log host

log host

log host (filter)

log host source

log host time

show log config

C613-50228-01 Rev A Command Reference for AR2050V 342

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG HOST SOURCE

log host source

Overview Use this command to specify a source interface or IP address for the device to send

syslog messages from. You can specify any one of an interface name, an IPv4

address or an IPv6 address.

This is useful if the device can reach the syslog server via multiple interfaces or

addresses and you want to control which interface/address the device uses.

Use the no variant of this command to stop specifying a source interface or

address.

Syntax log host source {<interface-name>|<ipv4-addr>|<ipv6-addr>}

no log host source

Default None (no source is configured)

Mode Global Configuration

Example To send syslog messages from 192.168.1.1, use the commands:

awplus# configure terminal

awplus(config)# log host source 192.168.1.1

Commands

default log host

log host

log host (filter)

log host exclude

log host time

show log config

Parameter Description

<interface-name> Specify the source interface name. You can enter a VLAN, eth

interface or loopback interface.

<ipv4-add> Specify the source IPv4 address, in dotted decimal notation

(A.B.C.D).

<ipv6-add> Specify the source IPv6 address, in X:X::X:X notation.

C613-50228-01 Rev A Command Reference for AR2050V 343

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG HOST TIME

log host time

Overview This command configures the time used in messages sent to a remote syslog

server. If the syslog server is in a different time zone to your device then the time

offset can be configured using either the utc-offset parameter option keyword or

the local-offset parameter option keyword, where utc-offset is the time

difference from UTC (Universal Time, Coordinated) and local-offset is the

difference from local time.

Syntax log host <email-address> time {local|local-offset|utc-offset

{plus|minus} <0-24>}

Default The default is local time.

Mode Global Configuration

Usage Use the local option if the remote syslog server is in the same time zone as the

device. Messages will display the time as on the local device when the message

was generated.

Use the offset option if the email recipient is in a different time zone to this device.

Specify the time offset of the remote syslog server in hours. Messages will display

the time they were generated on this device but converted to the time zone of the

remote syslog server.

Examples To send messages to the remote syslog server with the IP address 10.32.16.21

in the same time zone as the device’s local time zone, use the following

commands:

awplus# configure terminal

awplus(config)# log host 10.32.16.21 time local 0

Parameter Description

<email-address> The email address to send log messages to

time Specify the time difference between the email recipient and the

device you are configuring.

local The device is in the same time zone as the email recipient

local-offset The device is in a different time zone to the email recipient. Use

the plus or minus keywords and specify the difference (offset)

from local time of the device to the email recipient in hours.

utc-offset The device is in a different time zone to the email recipient. Use

the plus or minus keywords and specify the difference (offset)

from UTC time of the device to the email recipient in hours.

plus Negative offset (difference) from the device to the syslog server.

minus Positive offset (difference) from the device to the syslog server.

<0-24> World Time zone offset in hours

C613-50228-01 Rev A Command Reference for AR2050V 344

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG HOST TIME

To send messages to the remote syslog server with the IP address 10.32.16.12

with the time information converted to the time zone of the remote syslog server,

which is 3 hours ahead of the device’s local time zone, use the following

commands:

awplus# configure terminal

awplus(config)# log host 10.32.16.12 time local-offset plus 3

To send messages to the remote syslog server with the IP address 10.32.16.02

with the time information converted to the time zone of the email recipient, which

is 3 hours behind the device’s UTC time zone, use the following commands:

awplus# configure terminal

awplus(config)# log host 10.32.16.02 time utc-offset minus 3

Commands

default log host

log host

log host (filter)

log host exclude

log host source

show log config

C613-50228-01 Rev A Command Reference for AR2050V 345

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG MONITOR (FILTER)

log monitor (filter)

Overview This command creates a filter to select messages to be sent to the terminal when

the terminal monitor command is given. Selection can be based on the

priority/severity of the message, the program that generated the message, the

logging facility used, a sub-string within the message or a combination of some or

all of these.

Syntax log monitor [level <level>] [program <program-name>] [facility

<facility>] [msgtext <text-string>]

no log monitor [level <level>] [program <program-name>]

[facility <facility>] [msgtext <text-string>]

Parameter Description

level Filter messages by severity level.

<level>The minimum severity of message to send. The level can be specified as one of the following

numbers or level names, where 0 is the highest severity and 7 is the lowest severity:

0|emergencies System is unusable

1|alerts Action must be taken immediately

2|critical Critical conditions

3|errors Error conditions

4|warnings Warning conditions

5|notices Normal, but significant, conditions

6|informational Informational messages

7|debugging Debug-level messages

program Filter messages by program. Include messages from a specified program.

<program-

name>

The name of a program to log messages from, either one of the following predefined program

names (not case-sensitive), or another program name (case-sensitive) that you find in the log

output:

rip Routing Information Protocol (RIP)

ripng Routing Information Protocol - next generation (RIPng)

ospf Open Shortest Path First (OSPF)

ospfv3 Open Shortest Path First (OSPF) version 3 (OSPFv3)

bgp Border Gateway Protocol (BGP)

rsvp Resource Reservation Protocol (RSVP)

pim-sm Protocol Independent Multicast - Sparse Mode (PIM-SM)

pim-smv6 PIM-SM version 6 (PIM-SMv6)

lacp Link Aggregation Control Protocol (LACP)

C613-50228-01 Rev A Command Reference for AR2050V 346

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG MONITOR (FILTER)

Default By default there is a filter to select all messages. This filter may be removed and

replaced by filters that are more selective.

Mode Global Configuration

Examples To create a filter to send all messages that are generated by authentication and

have a severity of info or higher to terminal instances where the terminal monitor

command has been given, use the following commands:

awplus# configure terminal

awplus(config)# log monitor level info program auth

To remove a default filter that includes sending everything to the terminal, use the

following commands:

awplus# configure terminal

awplus(config)# no log monitor level debugging

stp Spanning Tree Protocol (STP)

rstp Rapid Spanning Tree Protocol (RSTP)

mstp Multiple Spanning Tree Protocol (MSTP)

imi Integrated Management Interface (IMI)

imish Integrated Management Interface Shell (IMISH)

facility Filter messages by syslog facility.

<facility>Specify one of the following syslog facilities to include messages from:

kern Kernel messages

user Random user-level messages

mail Mail system

daemon System daemons

auth Security/authorization messages

syslog Messages generated internally by syslogd

lpr Line printer subsystem

news Network news subsystem

uucp UUCP subsystem

cron Clock daemon

authpriv Security/authorization messages (private)

ftp FTP daemon

msgtext Select messages containing a certain text string.

<text-

string>

A text string to match (maximum 128 characters). This is case sensitive, and must be the last

text on the command line.

Parameter Description

C613-50228-01 Rev A Command Reference for AR2050V 347

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG MONITOR (FILTER)

Commands

default log monitor

log monitor exclude

show log config

terminal monitor

C613-50228-01 Rev A Command Reference for AR2050V 348

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG MONITOR EXCLUDE

log monitor exclude

Overview Use this command to prevent specified log messages from being displayed on a

terminal, when terminal monitor is enabled. You can exclude messages on the

basis of:

• the priority/severity of the message

• the program that generated the message

• the logging facility used

• a sub-string within the message, or

• a combination of some or all of these.

Use the no variant of this command to stop excluding the specified messages.

Syntax log console exclude [level <level>] [program <program-name>]

[facility <facility>] [msgtext <text-string>]

no log console exclude [level <level>] [program <program-name>]

[facility <facility>] [msgtext <text-string>]

Parameter Description

level Exclude messages of the specified severity level.

<level>The severity level to exclude. The level can be specified as one of the following numbers or

level names, where 0 is the highest severity and 7 is the lowest severity:

0|emergencies System is unusable

1|alerts Action must be taken immediately

2|critical Critical conditions

3|errors Error conditions

4|warnings Warning conditions

5|notices Normal, but significant, conditions

6|informational Informational messages

7|debugging Debug-level messages

program Exclude messages from a specified program.

<program-

name>

The name of a program. Either one of the following predefined program names (not

case-sensitive), or another program name (case-sensitive) that you find in the log output.

rip Routing Information Protocol (RIP)

ripng Routing Information Protocol - next generation (RIPng)

ospf Open Shortest Path First (OSPF)

ospfv3 Open Shortest Path First (OSPF) version 3 (OSPFv3)

bgp Border Gateway Protocol (BGP)

C613-50228-01 Rev A Command Reference for AR2050V 349

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG MONITOR EXCLUDE

Default No log messages are excluded

Mode Global configuration

Example To remove messages that contain the string “example of irrelevant message”, use

the following commands:

awplus# configure terminal

awplus(config)# log monitor exclude msgtext example of

irrelevant message

rsvp Resource Reservation Protocol (RSVP)

pim-dm Protocol Independent Multicast - Dense Mode (PIM-DM)

pim-sm Protocol Independent Multicast - Sparse Mode (PIM-SM)

pim-smv6 PIM-SM version 6 (PIM-SMv6)

stp Spanning Tree Protocol (STP)

rstp Rapid Spanning Tree Protocol (RSTP)

mstp Multiple Spanning Tree Protocol (MSTP)

imi Integrated Management Interface (IMI)

imish Integrated Management Interface Shell (IMISH)

facility Exclude messages from a syslog facility.

<facility>Specify one of the following syslog facilities to exclude messages from:

kern Kernel messages

user Random user-level messages

mail Mail system

daemon System daemons

auth Security/authorization messages

syslog Messages generated internally by syslogd

lpr Line printer subsystem

news Network news subsystem

uucp UUCP subsystem

cron Clock daemon

authpriv Security/authorization messages (private)

ftp FTP daemon

msgtext Exclude messages containing a certain text string.

<text-

string>

A text string to match (maximum 128 characters). This is case sensitive, and must be the last

text on the command line.

Parameter Description

C613-50228-01 Rev A Command Reference for AR2050V 350

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG MONITOR EXCLUDE

Commands

default log monitor

log monitor (filter)

show log config

terminal monitor

C613-50228-01 Rev A Command Reference for AR2050V 351

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG PERMANENT

log permanent

Overview This command configures the device to send permanent log messages to

non-volatile storage (NVS) on the device. The content of the permanent log is

retained over a reboot. Once the permanent log reaches its configured maximum

allowable size old messages will be deleted to make way for new messages.

The no variant of this command configures the device not to send any messages

to the permanent log. Log messages will not be retained over a restart.

Syntax log permanent

no log permanent

Mode Global Configuration

Examples To enable permanent logging use the following commands:

awplus# configure terminal

awplus(config)# log permanent

To disable permanent logging use the following commands:

awplus# configure terminal

awplus(config)# no log permanent

Commands

clear log permanent

copy permanent-log

default log permanent

log permanent (filter)

log permanent exclude

log permanent size

show log config

show log permanent

C613-50228-01 Rev A Command Reference for AR2050V 352

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG PERMANENT (FILTER)

log permanent (filter)

Overview This command creates a filter to select messages to be sent to the permanent log.

Selection can be based on the priority/ severity of the message, the program that

generated the message, the logging facility used, a sub-string within the message

or a combination of some or all of these.

The no variant of this command removes the corresponding filter, so that the

specified messages are no longer sent to the permanent log.

Syntax log permanent [level <level>] [program <program-name>]

[facility <facility>] [msgtext <text-string>]

no log permanent [level <level>] [program <program-name>]

[facility <facility>] [msgtext <text-string>]

Parameter Description

level Filter messages sent to the permanent log by severity level.

<level>The minimum severity of message to send. The level can be specified as one of the following

numbers or level names, where 0 is the highest severity and 7 is the lowest severity:

0|emergencies System is unusable

1|alerts Action must be taken immediately

2|critical Critical conditions

3|errors Error conditions

4|warnings Warning conditions

5|notices Normal, but significant, conditions

6|informational Informational messages

7|debugging Debug-level messages

program Filter messages by program. Include messages from a specified program.

<program-

name>

The name of a program to log messages from, either one of the following predefined program

names (not case-sensitive), or another program name (case-sensitive) that you find in the log

output:

rip Routing Information Protocol (RIP)

ripng Routing Information Protocol - next generation (RIPng)

ospf Open Shortest Path First (OSPF)

ospfv3 Open Shortest Path First (OSPF) version 3 (OSPFv3)

bgp Border Gateway Protocol (BGP)

rsvp Resource Reservation Protocol (RSVP)

pim-sm Protocol Independent Multicast - Sparse Mode (PIM-SM)

pim-smv6 PIM-SM version 6 (PIM-SMv6)

C613-50228-01 Rev A Command Reference for AR2050V 353

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG PERMANENT (FILTER)

Default By default the buffered log has a filter to select messages whose severity level is

notices (5) or higher. This filter may be removed using the no variant of this

command.

Mode Global Configuration

Examples To create a filter to send all messages containing the text “Bridging

initialization”, to the permanent log use the following commands:

awplus# configure terminal

awplus(config)# log permanent msgtext Bridging initialization

Commands

clear log permanent

default log permanent

log permanent

lacp Link Aggregation Control Protocol (LACP)

stp Spanning Tree Protocol (STP)

rstp Rapid Spanning Tree Protocol (RSTP)

mstp Multiple Spanning Tree Protocol (MSTP)

imi Integrated Management Interface (IMI)

imish Integrated Management Interface Shell (IMISH)

facility Filter messages by syslog facility.

<facility>Specify one of the following syslog facilities to include messages from:

kern Kernel messages

user Random user-level messages

mail Mail system

daemon System daemons

auth Security/authorization messages

syslog Messages generated internally by syslogd

lpr Line printer subsystem

news Network news subsystem

uucp UUCP subsystem

cron Clock daemon

authpriv Security/authorization messages (private)

ftp FTP daemon

msgtext Select messages containing a certain text string.

<text-

string>

A text string to match (maximum 128 characters). This is case sensitive, and must be the last

text on the command line.

Parameter Description

C613-50228-01 Rev A Command Reference for AR2050V 354

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG PERMANENT (FILTER)

log permanent exclude

log permanent size

show log config

show log permanent

C613-50228-01 Rev A Command Reference for AR2050V 355

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG PERMANENT EXCLUDE

log permanent exclude

Overview Use this command to prevent specified log messages from being sent to the

permanent log. You can exclude messages on the basis of:

• the priority/severity of the message

• the program that generated the message

• the logging facility used

• a sub-string within the message, or

• a combination of some or all of these.

Use the no variant of this command to stop excluding the specified messages.

Syntax log permanent exclude [level <level>] [program <program-name>]

[facility <facility>] [msgtext <text-string>]

no log permanent exclude [level <level>] [program

<program-name>] [facility <facility>] [msgtext <text-string>]

Parameter Description

level Exclude messages of the specified severity level.

<level>The severity level to exclude. The level can be specified as one of the following numbers or

level names, where 0 is the highest severity and 7 is the lowest severity:

0|emergencies System is unusable

1|alerts Action must be taken immediately

2|critical Critical conditions

3|errors Error conditions

4|warnings Warning conditions

5|notices Normal, but significant, conditions

6|informational Informational messages

7|debugging Debug-level messages

program Exclude messages from a specified program.

<program-

name>

The name of a program. Either one of the following predefined program names (not

case-sensitive), or another program name (case-sensitive) that you find in the log output.

rip Routing Information Protocol (RIP)

ripng Routing Information Protocol - next generation (RIPng)

ospf Open Shortest Path First (OSPF)

ospfv3 Open Shortest Path First (OSPF) version 3 (OSPFv3)

bgp Border Gateway Protocol (BGP)

rsvp Resource Reservation Protocol (RSVP)

C613-50228-01 Rev A Command Reference for AR2050V 356

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG PERMANENT EXCLUDE

Default No log messages are excluded

Mode Global configuration

Example To remove messages that contain the string “example of irrelevant message”, use

the following commands:

awplus# configure terminal

awplus(config)# log permanent exclude msgtext example of

irrelevant message

Commands

clear log permanent

pim-sm Protocol Independent Multicast - Sparse Mode (PIM-SM)

pim-smv6 PIM-SM version 6 (PIM-SMv6)

lacp Link Aggregation Control Protocol (LACP)

stp Spanning Tree Protocol (STP)

rstp Rapid Spanning Tree Protocol (RSTP)

mstp Multiple Spanning Tree Protocol (MSTP)

imi Integrated Management Interface (IMI)

imish Integrated Management Interface Shell (IMISH)

facility Exclude messages from a syslog facility.

<facility>Specify one of the following syslog facilities to exclude messages from:

kern Kernel messages

user Random user-level messages

mail Mail system

daemon System daemons

auth Security/authorization messages

syslog Messages generated internally by syslogd

lpr Line printer subsystem

news Network news subsystem

uucp UUCP subsystem

cron Clock daemon

authpriv Security/authorization messages (private)

ftp FTP daemon

msgtext Exclude messages containing a certain text string.

<text-

string>

A text string to match (maximum 128 characters). This is case sensitive, and must be the last

text on the command line.

Parameter Description

C613-50228-01 Rev A Command Reference for AR2050V 357

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG PERMANENT EXCLUDE

default log permanent

log permanent

log permanent (filter)

log permanent size

show log config

show log permanent

C613-50228-01 Rev A Command Reference for AR2050V 358

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG PERMANENT SIZE

log permanent size

Overview This command configures the amount of memory that the permanent log is

permitted to use. Once this memory allocation has been filled old messages will be

deleted to make room for new messages.

Syntax log permanent size <50-250>

Mode Global Configuration

Example To allow the permanent log to use up to 100 kB of NVS use the following

commands:

awplus# configure terminal

awplus(config)# log permanent size 100

Commands

clear log permanent

copy permanent-log

default log permanent

log permanent

log permanent (filter)

log permanent exclude

show log config

show log permanent

Parameter Description

<50-250>Size of the permanent log in kilobytes

C613-50228-01 Rev A Command Reference for AR2050V 359

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG-RATE-LIMIT NSM

log-rate-limit nsm

Overview This command limits the number of log messages generated by the device for a

given interval.

Use the no variant of this command to revert to the default number of log

messages generated by the device of up to 200 log messages per second.

Syntax log-rate-limit nsm messages <message-limit> interval

<time-interval>

no log-rate-limit nsm

Default By default, the device will allow 200 log messages to be generated per second.

Mode Global Configuration

Usage This log rate limiting feature constrains the rate that log messages are generated

by the device. This makes sure that the device does not run out of memory from

generating a lot of log messages in extreme circumstances, such as if a packet

storm occurs.

Note that if within the given time interval, the number of log messages exceeds the

limit, then any excess log messages are discarded. At the end of the time interval,

a single log message is generated indicating that log messages were discarded

due to the log rate limit being exceeded.

If you expect that there will be a lot of discarded log messages due to log rate

limiting, then we recommend setting the time interval to no less than 100, which

means that there would only be one log message, indicating excessive log

messages have been discarded.

Examples To limit the device to generate up to 300 log messages per second, use the

following commands:

awplus# configure terminal

awplus(config)# log-rate-limit nsm messages 300 interval 100

To return the device the default setting, to generate up to 200 log messages per

second, use the following commands:

awplus# configure terminal

awplus(config)# no log-rate-limit nsm

Parameter Description

<message-limit><1-65535>

The number of log messages generated by the device.

<time-interval><0-65535>

The time period for log message generation in 1/100 seconds.

If an interval of 0 is specified then no log message rate limiting

is applied.

C613-50228-01 Rev A Command Reference for AR2050V 360

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG TRUSTPOINT

log trustpoint

Overview This command adds one or more trustpoints to be used with the syslog

application. Multiple trustpoints may be specified, or the command may be

executed multiple times, to add multiple trustpoints to the application.

The no version of this command removes one or more trustpoints from the list of

trustpoints associated with the application.

Syntax log trustpoint [<trustpoint-list>]

no log trustpoint [<trustpoint-list>]

Default No trustpoints are created by default.

Mode Global Configuration

Usage The device certificate associated with first trustpoint added to the application will

be transmitted to remote servers. The certificate received from the remote server

must have an issuer chain that terminates with the root CA certificate for any of the

trustpoints that are associated with the application.

If no trustpoints are specified in the command, the trustpoint list will be

unchanged.

If no log trustpoint is issued without specifying any trustpoints, then all

trustpoints will be disassociated from the application.

Example You can add multiple trustpoints by executing the command multiple times:

awplus# configure terminal

awplus(config)# log trustpoint trustpoint_1

awplus(config)# log trustpoint trustpoint_2

Alternatively, add multiple trustpoints with a single command:

awplus(config)# log trustpoint trustpoint_2 trustpoint_3

Disassociate all trustpoints from the syslog application using the command:

awplus(config)# log trustpoint trustpoint_2 trustpoint_3

Commands

log host

show log config

Parameter Description

<trustpoint-list> Specify one or more trustpoints to be added or deleted.

C613-50228-01 Rev A Command Reference for AR2050V 361

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

LOG URL-REQUESTS

log url-requests

Overview If URL Filtering is enabled, then by default, black list hits and issues with match

criteria and list files are logged.

Use this command to enable logging of all HTTP and HTTPS URL requests (both

permitted and denied) passing through the firewall.

Use the no variant of this command to disable extra logging of HTTP and HTTPS

URL requests passing through the firewall.

Syntax log url-requests

no log url-requests

Default Disabled by default.

Mode URL Filter Configuration

Usage When enabled, additional log messages for HTTP and HTTPS URL requests passing

through the firewall contain the:

• URL being accessed

• IP address of the user that requested the URL

Example To configure logging of all HTTP and HTTPS URL requests passing through the

firewall (permitted as well as denied), use the following commands:

awplus# configure terminal

awplus(config)# url-filter

awplus(config-url-filter)# log url-requests

Commands

url-filter

Command

changes

Version 5.4.7-1.1: command added

C613-50228-01 Rev A Command Reference for AR2050V 362

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

SHOW CONNECTION-LOG EVENTS

show connection-log events

Overview This command displays the configuration state (enabled or disabled) for the

logging of connections passing through the firewall, as configured by the

connection-log events command.

Syntax show connection-log events

Mode User Exec

Example To show the logging configuration state for the connections passing through the

firewall, use the command:

awplus# show connection-log events

Output Figure 7-1: Example output from show connection-log events

Commands

connection-log events

Command

changes

Version 5.4.7-1.1: command added.

awplus#show connection-log events 

Log new connection events: Disabled

Log connection end events: Enabled

C613-50228-01 Rev A Command Reference for AR2050V 363

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

SHOW COUNTER LOG

show counter log

Overview This command displays log counter information.

Syntax show counter log

Mode User Exec and Privileged Exec

Example To display the log counter information, use the command:

awplus# show counter log

Output Figure 7-2: Example output from the show counter log command

Commands

show log config

Log counters

Total Received ......... 2328

Total Received P0 ......... 0

Total Received P1 ......... 0

Total Received P2 ......... 1

Total Received P3 ......... 9

Total Received P4 ......... 32

Total Received P5 ......... 312

Total Received P6 ......... 1602

Total Received P7 ......... 372

Table 8: Parameters in output of the show counter log command

Parameter Description

Total Received Total number of messages received by the log

Total Received P0 Total number of Priority 0 (Emergency) messages

received

Total Received P1 Total number of Priority 1 (Alert) messages received

Total Received P2 Total number of Priority 2 (Critical) messages received

Total Received P3 Total number of Priority 3 (Error) messages received

Total Received P4 Total number of Priority 4 (Warning) messages received

Total Received P5 Total number of Priority 5 (Notice) messages received

Total Received P6 Total number of Priority 6 (Info) messages received

Total Received P7 Total number of Priority 7 (Debug) messages received

C613-50228-01 Rev A Command Reference for AR2050V 364

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

SHOW EXCEPTION LOG

show exception log

Overview This command displays the contents of the exception log.

Syntax show exception log

Mode User Exec and Privileged Exec

Example To display the exception log, use the command:

awplus# show exception log

Output Figure 7-3: Example output from the show exception log command on a

device

awplus#show exception log 

<date> <time> <facility>.<severity> <program[<pid>]>: <message>

-------------------------------------------------------------------------

2017 Jul 19 05:14:16 local7.debug awplus corehandler : Process hsl (PID:745) sig

nal 11, core dumped to /flash/hsl-IE200-test_2017_07-20170718-1-2-1500441256-1

227.tgz

-------------------------------------------------------------------------

C613-50228-01 Rev A Command Reference for AR2050V 365

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

SHOW LOG

show log

Overview This command displays the contents of the buffered log.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare_Plus” Feature Overview and Configuration Guide.

Syntax show log [tail [<10-250>]]

Default By default the entire contents of the buffered log is displayed.

Mode User Exec, Privileged Exec and Global Configuration

Usage If the optional tail parameter is specified, only the latest 10 messages in the

buffered log are displayed. A numerical value can be specified after the tail

parameter to select how many of the latest messages should be displayed.

The show log command is only available to users at privilege level 7 and above. To

set a user’s privilege level, use the command:

awplus(config)# username <name> privilege <1-15>

Examples To display the contents of the buffered log use the command:

awplus# show log

To display the 10 latest entries in the buffered log use the command:

awplus# show log tail 10

Parameter Description

tail Display only the latest log entries.

<10-250>Specify the number of log entries to display.

C613-50228-01 Rev A Command Reference for AR2050V 366

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

SHOW LOG

Output Figure 7-4: Example output from show log

Commands

clear log buffered

copy buffered-log

default log buffered

log buffered

log buffered (filter)

log buffered size

log buffered exclude

show log config

awplus#show log



<date> <time> <facility>.<severity> <program[<pid>]>: <message>

--------------------------------------------------------------------

2017 Aug 29 07:55:22 kern.notice awplus kernel: Linux version 2.6.32.12-at1 (mak

er@awpmaker03-dl) (gcc version 4.3.3 (Gentoo 4.3.3-r3 p1.2, pie-10.1.5) ) #1 Wed

Dec 8 11:53:40 NZDT 2010

2017 Aug 29 07:55:22 kern.warning awplus kernel: No pci config register base in

dev tree, using default

2017 Aug 29 07:55:23 kern.notice awplus kernel: Kernel command line: console=tty

S0,9600 releasefile=AR2050V-5.4.8-0.2.rel ramdisk=14688 bootversion=1.1.0-rc12

loglevel=1 extraflash=00000000

2017 Aug 29 07:55:25 kern.notice awplus kernel: RAMDISK: squashfs filesystem fou

nd at block 0

2017 Aug 29 07:55:28 kern.warning awplus kernel: ipifwd: module license 'Proprie

tary' taints kernel.

...

C613-50228-01 Rev A Command Reference for AR2050V 367

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

SHOW LOG CONFIG

show log config

Overview This command displays information about the logging system. This includes the

configuration of the various log destinations, such as buffered, permanent, syslog

servers (hosts) and email addresses. This also displays the latest status information

for each log destination.

Syntax show log config

Mode User Exec, Privileged Exec and Global Configuration

Example To display the logging configuration use the command:

awplus# show log config

Output Figure 7-5: Example output from show log config

Facility: default



PKI trustpoints: example_trustpoint



Buffered log:

Status ......... enabled

Maximum size ... 100kb

Filters:

*1 Level ........ notices

Program ...... any

Facility ..... any

Message text . any

2 Level ........ informational

Program ...... auth

Facility ..... daemon

Message text . any

Statistics ..... 1327 messages received, 821 accepted by filter (2016 Oct 11 

10:36:16)

Permanent log:

Status ......... enabled

Maximum size ... 60kb

Filters:

1 Level ........ error

Program ...... any

Facility ..... any

Message text . any

*2 Level ........ warnings

Program ...... dhcp

Facility ..... any

Message text . "pool exhausted"

Statistics ..... 1327 messages received, 12 accepted by filter (2016 Oct 11 

10:36:16)

C613-50228-01 Rev A Command Reference for AR2050V 368

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

SHOW LOG CONFIG

In the above example the ’*’ next to filter 1 in the buffered log configuration

indicates that this is the default filter. The permanent log has had its default filter

removed, so none of the filters are marked with ‘*’.

NOTE: Terminal log and console log cannot be set at the same time. If console logging

is enabled then the terminal logging is turned off.

Commands

show counter log

show log

show log permanent

Host 10.32.16.21:

Time offset .... +2:00

Offset type .... UTC

Source ......... -

Secured ........ enabled

Filters:

1 Level ........ critical

Program ...... any

Facility ..... any

Message text . any

Statistics ..... 1327 messages received, 1 accepted by filter (2016 Oct 11 

10:36:16)

Email admin@alliedtelesis.com:

Time offset .... +0:00

Offset type .... Local

Filters:

1 Level ........ emergencies

Program ...... any

Facility ..... any

Message text . any

Statistics ..... 1327 messages received, 0 accepted by filter (2016 Oct 11 

10:36:16)

...

C613-50228-01 Rev A Command Reference for AR2050V 369

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

SHOW LOG EXTERNAL

show log external

Overview Use this command to display the contents of the external log, which is stored on a

USB storage device.

Syntax show log external [tail [<10-250>]]

Mode Global Configuration

Privileged Exec

User Exec

Usage If the optional tail parameter is specified, only the latest 10 messages in the

permanent log are displayed. A numerical value can be specified after the tail

parameter to change how many of the latest messages should be displayed.

Example To display the last 5 entries in the external log, use the command:

awplus# show log external tail 5

Commands

clear log external

default log external

log external

log external (filter)

log external exclude

log external rotate

log external size

show log config

unmount

Command

changes

Version 5.4.7-1.1: command added

Parameter Description

tail Display only the latest log entries.

<10-250>Specify the number of log entries to display.

C613-50228-01 Rev A Command Reference for AR2050V 370

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

SHOW LOG PERMANENT

show log permanent

Overview This command displays the contents of the permanent log.

Syntax show log permanent [tail [<10-250>]]

Usage If the optional tail parameter is specified only, the latest 10 messages in the

permanent log are displayed. A numerical value can be specified after the tail

parameter to change how many of the latest messages should be displayed.

Mode User Exec, Privileged Exec and Global Configuration

Example To display the permanent log, use the command:

awplus# show log permanent

Output Figure 7-6: Example output from show log permanent

Commands

clear log permanent

copy permanent-log

default log permanent

log permanent

log permanent (filter)

log permanent exclude

log permanent size

show log config

Parameter Description

tail Display only the latest log entries.

<10-250>Specify the number of log entries to display.

awplus#show log permanent



<date> <time> <facility>.<severity> <program[<pid>]>: <message>

------------------------------------------------------------------------

2014 Jun 10 09:30:09 syslog.notice syslog-ng[67]: syslog-ng starting up; 

version=\’2.0rc3\’

2014 Jun 10 09:30:09 auth.warning portmap[106]: user rpc not found, reverting to 

user bin

2014 Jun 10 09:30:09 cron.notice crond[116]: crond 2.3.2 dillon, started, log 

level 8

2014 Jun 10 09:30:14 daemon.err snmpd[181]: /flash/.configs/snmpd.conf: line 20: 

Error: bad SUBTREE object 

2014 Jun 10 09:30:14 user.info HSL[192]: HSL: INFO: Registering port port1.0.1

C613-50228-01 Rev A Command Reference for AR2050V 371

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

SHOW RUNNING-CONFIG LOG

show running-config log

Overview This command displays the current running configuration of the Log utility.

Syntax show running-config log

Mode Privileged Exec and Global Configuration

Example To display the current configuration of the log utility, use the command:

awplus# show running-config log

Commands

show log

show log config

C613-50228-01 Rev A Command Reference for AR2050V 372

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LOGGING COMMANDS

UNMOUNT

unmount

Overview Use this command to unmount an external storage device. We recommend you

unmount storage devices before removing them, to avoid file corruption. This is

especially important if files may be automatically written to the storage device,

such as external log files or AMF backup files.

Syntax unmount usb

Mode Privileged Exec

Example To unmount a USB storage device and safely remove it from the device, use the

command:

awplus# unmount usb

Commands

clear log external

log external

show file systems

show log config

show log external

Command

changes

Version 5.4.7-1.1: command added

Parameter Description

usb Unmount the USB storage device.

C613-50228-01 Rev A Command Reference for AR2050V 373

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

Scripting

Commands

Introduction

Overview This chapter provides commands used for command scripts.

Command List •“activate” on page 374

•“echo” on page 375

•“wait” on page 376

C613-50228-01 Rev A Command Reference for AR2050V 374

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SCRIPTING COMMANDS

ACTIVATE

activate

Overview This command activates a script file.

Syntax activate [background] <script>

Mode Privileged Exec

Usage When a script is activated, the privilege level is set to 1 enabling User Exec

commands to run in the script. If you need to run Privileged Exec commands in

your script you need to add an enable (Privileged Exec mode) command to the

start of your script. If you need to run Global Configuration commands in your

script you need to add a configure terminal command after the enable command

at the start of your script.

The activate command executes the script in a new shell. A terminal length shell

command, such as terminal length 0 may also be required to disable a delay that

would pause the display.

A script must be a text file with a filename extension of either . sh or . scp only for

the AlliedWare Plus™ CLI to activate the script file. The . sh filename extension

indicates the file is an ASH script, and the . scp filename extension indicates the file

is an AlliedWare Plus™ script.

Examples To activate a command script to run as a background process, use the command:

awplus# activate background test.scp

Commands

configure terminal

echo

enable (Privileged Exec mode)

wait

Parameter Description

background Activate a script to run in the background. A process that is running in

the background will operate as a separate task, and will not interrupt

foreground processing. Generally, we recommend running short,

interactive scripts in the foreground and longer scripts in the

background. The default is to run the script in the foreground.

consisting of commands documented in this software reference.

Note that you must use either a . scp or a . sh filename extension for a

valid script text file, as described below in the usage section for this

command.

C613-50228-01 Rev A Command Reference for AR2050V 375

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SCRIPTING COMMANDS

ECHO

echo

Overview This command echoes a string to the terminal, followed by a blank line.

Syntax echo <line>

Mode User Exec and Privileged Exec

Usage This command may be useful in CLI scripts, to make the script print user-visible

comments.

Example To echo the string Hello World to the console, use the command:

awplus# echo Hello World

Output

Commands

activate

wait

Parameter Description

<line>The string to echo

Hello World

C613-50228-01 Rev A Command Reference for AR2050V 376

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SCRIPTING COMMANDS

WAIT

wait

Overview This command pauses execution of the active script for the specified period of

time.

Syntax wait <delay>

Default No wait delay is specified by default to pause script execution.

Mode Privileged Exec (when executed from a script not directly from the command line)

Usage Use this command to pause script execution in an .scp (AlliedWare Plus™ script) or

an .sh (ASH script) file executed by the activate command. The script must contain

an enable command, because the wait command is only executed in the

Privileged Exec mode.

Example See an .scp script file extract below that will show port counters for interface

port1.0.1 over a 10 second interval:

Commands

activate

echo

enable (Privileged Exec mode)

Parameter Description

<delay><1-65335> Specify the time delay in seconds

enable



show interface port1.0.1



wait 10



show interface port1.0.1

C613-50228-01 Rev A Command Reference for AR2050V 377

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

Interface

Commands

Introduction

Overview This chapter provides an alphabetical reference of commands used to configure

and display interfaces.

Command List •“description (interface)” on page 378

•“interface (to configure)” on page 379

•“ip tcp adjust-mss” on page 381

•“ipv6 tcp adjust-mss” on page 383

•“mru jumbo” on page 385

•“mtu” on page 386

•“service statistics interfaces counter” on page 388

•“show interface” on page 389

•“show interface brief” on page 393

•“show interface memory” on page 394

•“show interface status” on page 396

•“shutdown” on page 398

C613-50228-01 Rev A Command Reference for AR2050V 378

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

INTERFACE COMMANDS

DESCRIPTION (INTERFACE)

description (interface)

Overview Use this command to add a description to a specific port or interface.

Syntax description <description>

Mode Interface Configuration

Example The following example uses this command to describe the device that a switch

port is connected to.

awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# description Boardroom PC

Command

changes

Version 5.4.7-1.1: valid character set changed to printable ASCII characters

Parameter Description

<description>Text describing the specific interface. Descriptions can contain any

printable ASCII characters (ASCII 32-126).

C613-50228-01 Rev A Command Reference for AR2050V 379

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

INTERFACE COMMANDS

INTERFACE (TO CONFIGURE)

interface (to configure)

Overview Use this command to select one or more interfaces to configure.

Syntax interface <interface-list>

interface lo

Usage A local loopback interface is one that is always available for higher layer protocols

to use and advertise to the network. Although a local loopback interface is

assigned an IP address, it does not have the usual requirement of connecting to a

lower layer physical entity. This lack of physical attachment creates the perception

of a local loopback interface always being accessible via the network.

Local loopback interfaces can be utilized by a number of protocols for various

purposes. They can be used to improve access to the device and also increase its

reliability, security, scalability and protection. In addition, local loopback interfaces

can add flexibility and simplify management, information gathering and filtering.

One example of this increased reliability is for OSPF to advertise a local loopback

interface as an interface-route into the network irrespective of the physical links

that may be “up” or “down” at the time. This provides a higher probability that the

routing traffic will be received and subsequently forwarded.

Mode Global Configuration

Parameter Description

<interface-list>The interfaces or ports to configure.

An interface-list can be:

• an interface such as a VLAN (e.g. vlan1), a switch port (e.g.

port1.0.1), a static channel group (e.g. sa3), a dynamic

(LACP) channel group (e.g. po4), a PPP interface (e.g.

ppp0), an Ethernet interface, (e.g. eth1), a tunnel interface

(e.g. tunnel0) or a bridge interface (e.g. br2).

• a continuous range of interfaces, ports, static channel

groups or dynamic (LACP) channel groups separated by a

hyphen; e.g. vlan2-8, or port1.0.1-1.0.6, or

sa1-2, or po1-2

• a comma-separated list of the above; e.g.

port1.0.1,port1.0.4-1.0.6. Do not mix interface

types in a list

The specified interfaces must exist.

lo The local loopback interface.

C613-50228-01 Rev A Command Reference for AR2050V 380

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

INTERFACE COMMANDS

INTERFACE (TO CONFIGURE)

Example The following example shows how to enter Interface mode to configure vlan1.

Note how the prompt changes.

awplus# configure terminal

awplus(config)# interface vlan1

awplus(config-if)#

The following example shows how to enter Interface mode to configure PPP

interface, PPP0.

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)#

The following example shows how to enter Interface mode to configure the local

loopback interface.

awplus# configure terminal

awplus(config)# interface lo

awplus(config-if)#

The following example shows how to enter interface mode to configure bridge

br2.

awplus# configure terminal

awplus(config)# interface br2

awplus(config-if)#

Commands

ip address (IP Addressing and Protocol)

show interface

show interface brief

C613-50228-01 Rev A Command Reference for AR2050V 381

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

INTERFACE COMMANDS

IP TCP ADJUST-MSS

ip tcp adjust-mss

Overview Use this command to set the Maximum Segment Size (MSS) size for an interface,

where MSS is the maximum TCP data packet size that the interface can transmit

before fragmentation.

Use the no variant of this command to remove a previously specified MSS size for

a PPP interface, and restore the default MSS size.

Syntax ip tcp adjust-mss {<mss-size>|pmtu}

no ip tcp adjust-mss

Default The default setting allows a TCP server or a TCP client to set the MSS value for itself.

Mode Interface Configuration

Usage When a host initiates a TCP session with a server it negotiates the IP segment size

by using the MSS option field in the TCP packet. The value of the MSS option field

is determined by the Maximum Transmission Unit (MTU) configuration on the host.

You can set a feasible MSS value on the following interfaces:

•PPP

• Ethernet

• VTI Tunnels (IPsec, GRE, IPv6, L2TP, OpenVPN)

•VLAN

• DS-Lite (see the command ds-lite adjust-mss)

Examples To configure an MSS size of 1452 bytes on PPP interface ppp0, use the commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# ip tcp adjust-mss 1452

To configure an MSS size of 1452 bytes on Ethernet interface eth1, use the

commands:

awplus# configure terminal

awplus(config)# interface eth1

awplus(config-if)# ip tcp adjust-mss 1452

Parameter Description

<mss-size><64-1460> Specifies the MSS size in bytes.

pmtu Adjust TCP MSS automatically with respect to the MTU on the

interface.

C613-50228-01 Rev A Command Reference for AR2050V 382

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

INTERFACE COMMANDS

IP TCP ADJUST-MSS

To restore the MSS size to the default size on PPP interface ppp0, use the

commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# no ip tcp adjust-mss

Commands

mtu (PPP)

show interface

show interface (PPP)

show interface tunnel (GRE)

C613-50228-01 Rev A Command Reference for AR2050V 383

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

INTERFACE COMMANDS

IPV6 TCP ADJUST-MSS

ipv6 tcp adjust-mss

Overview Use this command to set the IPv6 Maximum Segment Size (MSS) size for an

interface, where MSS is the maximum TCP data packet size that the interface can

transmit before fragmentation.

Use the no variant of this command to remove a previously specified MSS size for

a PPP interface, and restore the default MSS size.

Syntax ip tcp adjust-mss {<mss-size>|pmtu}

no ip tcp adjust-mss

Default The default setting allows a TCP server or a TCP client to set the MSS value for itself.

Mode Interface Configuration

Usage When a host initiates a TCP session with a server it negotiates the IP segment size

by using the MSS option field in the TCP packet. The value of the MSS option field

is determined by the Maximum Transmission Unit (MTU) configuration on the host.

You can set a feasible MSS value on the following interfaces:

•PPP

• Ethernet

• VTI Tunnels (IPsec, GRE, IPv6, L2TP, OpenVPN)

•VLAN

• DS-Lite (see the command ds-lite adjust-mss)

Examples To configure an IPv6 MSS size of 1452 bytes on PPP interface ppp0, use the

commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# ipv6 tcp adjust-mss 1452

To configure an IPv6 MSS size of 1452 bytes on Ethernet interface eth1, use the

commands:

awplus# configure terminal

awplus(config)# interface eth1

awplus(config-if)# ip tcp adjust-mss 1452

Parameter Description

<mss-size><64-1460> Specifies the MSS size in bytes.

pmtu Adjust TCP MSS automatically with respect to the MTU on the

interface.

C613-50228-01 Rev A Command Reference for AR2050V 384

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

INTERFACE COMMANDS

IPV6 TCP ADJUST-MSS

To restore the MSS size to the default size on PPP interface ppp0, use the

commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# no ip tcp adjust-mss

Commands

mtu (PPP)

show interface

show interface (PPP)

show interface tunnel (GRE)

C613-50228-01 Rev A Command Reference for AR2050V 385

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

INTERFACE COMMANDS

MRU JUMBO

mru jumbo

Overview Use this command to enable the device to forward jumbo frames. For more

information, see the Switching Feature Overview and Configuration Guide.

When jumbo frame support is enabled, the maximum size of packets that the

device can forward is 9710 bytes of payload.

Use the no variant of this command to remove jumbo frame support, and restore

the default MRU size (1500 bytes) for switch ports.

NOTE:

The figure of 1500 or 9710 bytes specifies the payload only. For an IEEE 802.1q frame,

provision is made (internally) for the following additional components:

• Source and Destination addresses

• EtherType field

• Priority and VLAN tag fields

•FCS

These additional components increase the frame size internally (to 1522 bytes in

the default case).

Syntax mru jumbo

no mru

Default By default, jumbo frame support is not enabled.

Mode Interface Configuration for switch ports.

Usage Note that show interface output will only show MRU size for switch ports.

We recommend limiting the number of ports with jumbo frames support enabled

to two.

Examples To enable the device to forward jumbo frames on port1.0.2, use the

commands:

awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# mru jumbo

To remove the jumbo frame support, and therefore restore the MRU size of 1500

bytes on port1.0.2, use the commands:

awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# no mru

Commands

show interface

C613-50228-01 Rev A Command Reference for AR2050V 386

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

INTERFACE COMMANDS

MTU

mtu

Overview Use this command to set the Maximum Transmission Unit (MTU) size for interfaces,

where MTU is the maximum packet size that interfaces can transmit. The MTU size

setting is applied to both IPv4 and IPv6 packet transmission.

Use the no variant of this command to remove a previously specified Maximum

Transmission Unit (MTU) size, and restore the default MTU size. For example the

VLAN interface default is 1500 bytes.

Syntax mtu <68-1582>

no mtu

Default The default MTU size, for example 1500 bytes for VLAN interfaces.

Mode Interface Configuration

Usage If a device receives an IPv4 packet for Layer 3 switching to another interface with

an MTU size smaller than the packet size, and if the packet has the ‘don’t

fragment’ bit set, then the device will send an ICMP ‘destination unreachable’ (3)

packet type and a ‘fragmentation needed and DF set’ (4) code back to the source.

For IPv6 packets bigger than the MTU size of the transmitting interface, an ICMP

‘packet too big’ (ICMP type 2 code 0) message is sent to the source.

You can set a feasible MTU value on the following interfaces:

•PPP

• Ethernet

• VTI Tunnels (IPsec, GRE, IPv6, L2TP, OpenVPN)

•VLAN

• DS-Lite (see the command ds-lite mtu)

Note that you cannot configure MTU on bridge interfaces. The MTU of the bridge

interface is determined by the member interface of the bridge which has the

lowest MTU. For example, if you attach eth1 with MTU 1200, ppp1 with MTU 1400,

and vlan1 with MTU 1500 to a bridge interface, the MTU for that interface will be

1200.

Note that show interface output will only show MTU size for VLAN interfaces.

Examples To configure an MTU size of 1500 bytes on interface “vlan2”, use the commands:

awplus# configure terminal

awplus(config)# interface vlan2

awplus(config-if)# mtu 1500

C613-50228-01 Rev A Command Reference for AR2050V 387

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

INTERFACE COMMANDS

MTU

To configure an MTU size of 1500 bytes on interfaces “vlan2” to “vlan4”, use the

commands:

awplus# configure terminal

awplus(config)# interface vlan2-vlan4

awplus(config-if)# mtu 1500

To restore the MTU size to the default MTU size of 1500 bytes on “vlan2”, use the

commands

awplus# configure terminal

awplus(config)# interface vlan2

awplus(config-if)# no mtu

To restore the MTU size to the default MTU size of 1500 bytes on “vlan2” to “vlan4”,

use the commands

awplus# configure terminal

awplus(config)# interface vlan2-vlan4

awplus(config-if)# no mtu

Commands

show interface

C613-50228-01 Rev A Command Reference for AR2050V 388

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

INTERFACE COMMANDS

SERVICE STATISTICS INTERFACES COUNTER

service statistics interfaces counter

Overview Use this command to enable the interface statistics counter.

Use the no variant of this command to disable the interface statistics counter.

Syntax service statistics interfaces counter

no service statistics interfaces counter

Default The interface statistics counter is enabled by default.

Mode Global Configuration

Example To enable the interface statistics counter, use the following commands:

awplus# configure terminal

awplus(config)# service statistics interfaces counter

To disable the interface statistics counter, use the following commands:

awplus# configure terminal

awplus(config)# no service statistics interfaces counter

Command

changes

Version 5.4.7-2.1: command added

C613-50228-01 Rev A Command Reference for AR2050V 389

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

INTERFACE COMMANDS

SHOW INTERFACE

show interface

Overview Use this command to display interface configuration and status.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide.

Syntax show interface [<interface-list>]

show interface lo

Mode User Exec and Privileged Exec

Usage Note that the output displayed with this command will show MTU (Maximum

Transmission Unit) size for VLAN interfaces, and MRU (Maximum Received Unit)

size for switch ports.

Example To display configuration and status information for all interfaces, use the

command:

awplus# show interface

Parameter Description

<interface-list>The interfaces or ports to configure. An interface-list can be:

• an interface such as a VLAN (e.g. vlan1), a switch port (e.g.

port1.0.1), a static channel group (e.g. sa3), a dynamic

(LACP) channel group (e.g. po4), a PPP interface (e.g. ppp0),

an Ethernet interface (e.g. eth1), a tunnel interface (e.g.

tunnel0), a bridge interface (e.g. br2), or a cellular

interface (e.g. cellular0)

• a continuous range of interfaces, ports, static channel

groups or dynamic (LACP) channel groups separated by a

hyphen; e.g. vlan2-8, or port1.0.1-1.0.6, or sa1-2,

or po1-2

• a comma-separated list of the above; e.g.

port1.0.1,port1.0.4-1.0.6. Do not mix interface

types in a list

The specified interfaces must exist.

lo The local loopback interface.

C613-50228-01 Rev A Command Reference for AR2050V 390

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

INTERFACE COMMANDS

SHOW INTERFACE

Figure 9-1: Example output from the show interface command

To display configuration and status information for interface lo, use the

command:

awplus# show interface lo

Figure 9-2: Example output from the show interface lo command

To display configuration and status information for interfaces vlan1 and vlan2,

use the command:

awplus# show interface vlan1,vlan2

awplus#show interface

Interface port1.0.1

Link is UP, administrative state is UP

Hardware is Ethernet, address is 0000.cd38.026c

index 5001 metric 1 mru 1500

current duplex full, current speed 1000, current polarity mdix

configured duplex auto, configured speed auto, configured polarity auto

<UP,BROADCAST,RUNNING,MULTICAST>

SNMP link-status traps: Disabled

input packets 2927667, bytes 224929311, dropped 0, multicast packets 1242629

output packets 378084, bytes 54372424, multicast packets 1, broadcast packets 10

input average rate : 30 seconds 5.19 Kbps, 5 minutes 8.16 Kbps

output average rate: 30 seconds 6.04 Kbps, 5 minutes 73.89 Kbps

input peak rate 268.60 Kbps at 2018/04/10 17:46:43

output peak rate 6.81 Mbps at 2018/04/10 18:15:44

Time since last state change: 7 days 01:58:10

...

awplus#show interface lo

Interface lo

Link is UP, administrative state is UP

Hardware is Loopback

index 1 metric 1

<UP,LOOPBACK,RUNNING>

VRF Binding: Not bound

SNMP link-status traps: Disabled

Router Advertisement is disabled

Router Advertisement default routes are accepted

Router Advertisement prefix info is accepted

Time since last state change: 8 days 19:41:47

C613-50228-01 Rev A Command Reference for AR2050V 391

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

INTERFACE COMMANDS

SHOW INTERFACE

Figure 9-3: Example output from the show interface vlan1,vlan2 command

To display configuration and status information for br1, use the command:

awplus# show interface br1

AR4050S#show interface vlan1,vlan2

Interface vlan1

Link is UP, administrative state is UP

Hardware is VLAN, address is 0000.cd38.026c

IPv4 address 192.168.1.1/24 broadcast 192.168.1.255

index 301 metric 1 mtu 1500

arp ageing timeout 300

<UP,BROADCAST,RUNNING,MULTICAST>

VRF Binding: Not bound

SNMP link-status traps: Disabled

Router Advertisement is disabled

Router Advertisement default routes are accepted

Router Advertisement prefix info is accepted

input packets 0, bytes 0, dropped 0, multicast packets 0

output packets 9, bytes 612, multicast packets 0, broadcast packets 0

input average rate : 30 seconds 0 bps, 5 minutes 0 bps

output average rate: 30 seconds 0 bps, 5 minutes 0 bps

output peak rate 140 bps at 2018/04/10 16:40:56

Time since last state change: 8 days 19:09:19

Interface vlan2

Link is UP, administrative state is UP

Hardware is VLAN, address is 0000.cd38.026c

IPv4 address 192.168.2.21/24 broadcast 192.168.2.255

index 302 metric 1 mtu 1500

arp ageing timeout 300

<UP,BROADCAST,RUNNING,MULTICAST>

VRF Binding: Not bound

SNMP link-status traps: Disabled

Router Advertisement is disabled

Router Advertisement default routes are accepted

Router Advertisement prefix info is accepted

input packets 59, bytes 3540, dropped 0, multicast packets 0

output packets 9, bytes 612, multicast packets 0, broadcast packets 0

input average rate : 30 seconds 0 bps, 5 minutes 0 bps

output average rate: 30 seconds 0 bps, 5 minutes 0 bps

input peak rate 511 bps at 2018/04/10 16:41:01

output peak rate 140 bps at 2018/04/10 16:40:56

Time since last state change: 8 days 19:09:19

C613-50228-01 Rev A Command Reference for AR2050V 392

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

INTERFACE COMMANDS

SHOW INTERFACE

To display configuration and status information for eth1, use the command:

awplus# show interface eth1

Figure 9-4: Example output from the show interface eth1 command:

Commands

mru jumbo

mtu

show interface brief

Command

changes

Version 5.4.7-2.1: average rate and peak rate added to output

awplus#show interface br1

Interface br1

Link is UP, administrative state is UP

Hardware is Bridge

IPv6 address fe80::200:cdff:fe38:f7/64

index 33555969 metric 1 

MAC ageing time 300

<UP,BROADCAST,RUNNING,MULTICAST>

SNMP link-status traps: Disabled

input packets 1328, bytes 143605, dropped 0, multicast packets 0

output packets 1847, bytes 218999, multicast packets 1 broadcast packets 3

input average rate : 30 seconds 3.00 Kbps, 5 minutes 1.02 Kbps

output average rate: 30 seconds 5.32 Kbps, 5 minutes 2.06 Kbps

input peak rate 8.19 Kbps at 2017/11/13 05:09:59

output peak rate 17.05 Kbps at 2017/11/13 05:11:23

Time since last state change: 0 days 00:00:09

awplus#show interface eth1

Interface eth1

Link is DOWN, administrative state is UP

Hardware is Ethernet, address is 0000.cd38.026a

index 12 metric 1 mtu 1500

configured duplex auto, configured speed auto, configured polarity auto

<UP,BROADCAST,MULTICAST>

VRF Binding: Not bound

SNMP link-status traps: Disabled

Bandwidth 1g

Router Advertisement is disabled

Router Advertisement default routes are accepted

Router Advertisement prefix info is accepted

input packets 0, bytes 0, dropped 0, multicast packets 0

output packets 11, bytes 5848

input average rate : 30 seconds 0 bps, 5 minutes 0 bps

output average rate: 30 seconds 0 bps, 5 minutes 0 bps

output peak rate 2.48 Kbps at 2018/04/10 18:22:14

Time since last state change: 7 days 22:56:59

C613-50228-01 Rev A Command Reference for AR2050V 393

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

INTERFACE COMMANDS

SHOW INTERFACE BRIEF

show interface brief

Overview Use this command to display brief interface, configuration, and status information,

including provisioning information.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide.

Syntax show interface brief

Mode User Exec and Privileged Exec

Output Figure 9-5: Example output from show interface brief

Commands

show interface

show interface memory

awplus#show interface brief

Interface Status Protocol

port1.0.1 admin up down

port1.0.2 admin up down

port1.0.3 admin up down

port1.0.4 admin up down

port1.0.5 admin up down

port1.0.6 admin up down

port1.0.7 admin up down

port1.0.8 admin up down

eth2 admin up down

eth1 admin up down

lo admin up running

vlan1 admin up down

vlan2 admin up down

ppp1 admin up down

Table 9-1: Parameters in the output of show interface brief

Parameter Description

Interface The name or type of interface.

Status The administrative state. This can be either admin up or admin

down.

Protocol The link state. This can be either down, running, or provisioned.

C613-50228-01 Rev A Command Reference for AR2050V 394

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

INTERFACE COMMANDS

SHOW INTERFACE MEMORY

show interface memory

Overview This command displays the shared memory used by either all interfaces, or the

specified interface or interfaces. The output is useful for diagnostic purposes by

Allied Telesis authorized service personnel.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide.

Syntax show interface memory

show interface <port-list> memory

Mode User Exec and Privileged Exec

Example To display the shared memory used by all interfaces, use the command:

awplus# show interface memory

To display the shared memory used by port1.0.1 and port1.0.5 to port1.0.6, use the

command:

awplus# show interface port1.0.1,port1.0.5-1.0.6 memory

Output Figure 9-6: Example output from the show interface memory command

Parameter Description

<port-list> Display information about only the specified port or ports. The port

list can be:

• an Eth (e.g. eth1) or switch port (e.g. port1.0.4), a static channel

group (e.g. sa2) or a dynamic (LACP) channel group (e.g. po2)

• a continuous range of ports separated by a hyphen (e.g.

port1.0.1-1.0.4, or sa1-2, or po1-2)

• a comma-separated list of ports and port ranges (e.g.

port1.0.1,port1.0.4-1.0.6). Do not mix port types in the same list.

awplus#show interface memory

Vlan blocking state shared memory usage

---------------------------------------------

Interface shmid Bytes Used nattch Status

port1.0.1 294921 512 1

port1.0.2 491535 512 1

port1.0.3 458766 512 1

port1.0.4 524304 512 1

port1.0.5 425997 512 1

port1.0.6 589842 512 1

port1.0.7 557073 512 1

port1.0.8 622611 512 1

eth2 327690 512 1

eth1 393228 512 1

lo 360459 512 1

C613-50228-01 Rev A Command Reference for AR2050V 395

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

INTERFACE COMMANDS

SHOW INTERFACE MEMORY

Figure 9-7: Example output from show interface <port-list> memory for a list

of interfaces

Commands

show interface brief

show interface status

show interface switchport

awplus#show interface port1.0.1,port1.0.5-1.0.6 memory

Vlan blocking state shared memory usage

---------------------------------------------

Interface shmid Bytes Used nattch Status

port1.0.1 294921 512 1

port1.0.5 425997 512 1

port1.0.6 589842 512 1

C613-50228-01 Rev A Command Reference for AR2050V 396

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

INTERFACE COMMANDS

SHOW INTERFACE STATUS

show interface status

Overview Use this command to display the status of the specified interface or interfaces.

Note that when no interface or interfaces are specified then the status of all

interfaces on the device are shown.

Syntax show interface [<port-list>] status

Examples To display the status of ports 1.0.1 to 1.0.4, use the commands:

awplus# show interface port1.0.1-1.0.4 status

To display the status of all ports, use the commands:

awplus# show interface status

Parameter Description

<port-list> The ports to display information about. The port list can be:

• a switch port (e.g. port1.0.6), a static channel group (e.g. sa2) or a

dynamic (LACP) channel group (e.g. po2)

• a continuous range of ports separated by a hyphen, e.g.

port1.0.1-1.0.6, or sa1-2, or po1-2

• a comma-separated list of ports and port ranges, e.g.

port1.0.1,port1.0.4-1.0.6. Do not mix switch ports, static channel

groups, and dynamic (LACP) channel groups in the same list

Table 10: Example output from the show interface <port-list> status command

awplus#show interface port1.0.1-1.0.4 status

Port Name Status Vlan Duplex Speed Type

port1.0.1 notconnect 1 auto auto 1000BASE-T

port1.0.2 notconnect 1 auto auto 1000BASE-T

port1.0.3 notconnect 1 auto auto 1000BASE-T

port1.0.4 notconnect 1 auto auto 1000BASE-T

Table 11: Example output from the show interface status command

awplus#sho int status

Port Name Status Vlan Duplex Speed Type

port1.0.1 Trunk_Net connected trunk a-full a-1000 1000BaseTX

port1.0.2 Access_Net1 connected 5 full 1000 1000BaseTX

port1.0.3 Access_Net1 disabled 5 auto auto 1000BaseTX

port1.0.4 Access_Net2 connected 6 auto auto 1000BaseTX

...

eth2 notconnect none auto auto 1000BASE-T

eth1 notconnect none auto auto 1000BASE-T

C613-50228-01 Rev A Command Reference for AR2050V 397

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

INTERFACE COMMANDS

SHOW INTERFACE STATUS

Commands

show interface

show interface memory

Table 12: Parameters in the output from the show interface status command

Parameter Description

Port Name/Type of the interface.

Name Description of the interface.

Status The administrative and operational status of the interface; one of:

• disabled: the interface is administratively down.

• connect: the interface is operationally up.

• notconnect: the interface is operationally down.

Vlan VLAN type or VLAN IDs associated with the port:

• When the VLAN mode is trunk, it displays trunk (it does not

display the VLAN IDs).

• When the VLAN mode is access, it displays the VLAN ID.

• When the VLAN mode is private promiscuous, it displays the

primary VLAN ID if it has one, and promiscuous if it does not

have a VLAN ID.

• When the VLAN mode is private host, it displays the primary

and secondary VLAN IDs.

• When the port is an Eth port, it displays none: there is no VLAN

associated with it.

• When the VLAN is dynamically assigned, it displays the current

dynamically assigned VLAN ID (not the access VLAN ID), or

dynamic if it has multiple VLANs dynamically assigned.

Duplex The actual duplex mode of the interface, preceded by a- if it has

autonegotiated this duplex mode. If the port is disabled or not

connected, it displays the configured duplex setting.

Speed The actual link speed of the interface, preceded by a- if it has

autonegotiated this speed. If the port is disabled or not

connected, it displays the configured speed setting.

Type The type of interface, e.g. 1000BaseTX. For SFP bays, it displays

Unknown if it does not recognize the type of SFP installed, or Not

present if an SFP is not installed or is faulty.

C613-50228-01 Rev A Command Reference for AR2050V 398

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

INTERFACE COMMANDS

SHUTDOWN

shutdown

Overview This command shuts down the selected interface. This administratively disables

the link and takes the link down at the physical (electrical) layer.

Use the no variant of this command to disable this function and therefore to bring

the link back up again.

Syntax shutdown

no shutdown

Mode Interface Configuration

Usage If you shutdown an aggregator, the device shows the admin status of the

aggregator and its component ports as “admin down”. While the aggregator is

down, the device accepts shutdown and no shutdown commands on

component ports, but these have no effect on port status. Ports will not come up

again while the aggregator is down.

Example To shut down port1.0.2, use the commands:

awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# shutdown

To bring up port1.0.2, use the commands:

awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# no shutdown

To shut down vlan2, use the commands:

awplus# configure terminal

awplus(config)# interface vlan2

awplus(config-if)# shutdown

To bring up vlan2, use the commands:

awplus# configure terminal

awplus(config)# interface vlan2

awplus(config-if)# no shutdown

C613-50228-01 Rev A Command Reference for AR2050V 399

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USB Cellular Modem

Commands

Introduction

Overview This chapter provides an alphabetical reference of commands used to configure

USB Cellular Modems.

For more information, see the USB Cellular Modem Feature Overview and

Configuration Guide.

Command List •“apn” on page 400

•“chat-script” on page 402

•“encapsulation ppp” on page 403

•“show cellular” on page 405

•“show system usb” on page 408

•“usb mode-switch” on page 410

C613-50228-01 Rev A Command Reference for AR2050V 400

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USB CELLULAR MODEM COMMANDS

APN

apn

Overview Use this command to set the Access Point Name (APN) to use to connect to a 3G

serial cellular network.

Use the no variant of this command to unset the APN.

Syntax apn <access-point-name>

no apn <access-point-name>

Default No APN is set

Mode Interface Configuration (Cellular)

Usage The APN has to be set in order to initiate the cellular network connection. Some

mobile network operators do not require a specific APN to be specified, in this case

any APN can be used.

Examples To set the APN to www.example.com for a cellular interface, use the commands:

awplus# configure terminal

awplus(config)# int cellular0

awplus(config-if)# apn www.example.com

Output Figure 10-1: Example output from the apn command

To unset the APN, use the commands:

awplus# configure terminal

awplus(config)# int cellular0

awplus(config-if)# no apn

Output Figure 10-2: Example output from the no apn command

Commands

chat-script

Parameter Description

<access-point-name> The APN to use to connect to a cellular network (for

example, www.example.com).

awplus#configure terminal

awplus(config)#int cellular0

awplus(config-if)#apn www.example.com

awplus#configure terminal

awplus(config)#int cellular0

awplus(config-if)#no apn

C613-50228-01 Rev A Command Reference for AR2050V 401

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USB CELLULAR MODEM COMMANDS

APN

show cellular

show system usb

usb mode-switch

C613-50228-01 Rev A Command Reference for AR2050V 402

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USB CELLULAR MODEM COMMANDS

CHAT-SCRIPT

chat-script

Overview Use this command to set a chat-script, instead of the default chat-script, to connect

to a 3G serial cellular network.

Use the no variant of this command to set the chat-script back to the default.

Syntax chat-script <file-name>

no chat-script <file-name>

Default The default chat-script is a built in chat-script that in most cases is sufficient for

connecting to a cellular network.

Mode Interface Configuration (Cellular)

Usage The chat-script file must have the file extension “.chat”. The chat-script consists of

a sequence of expect-send pairs of strings. The send strings are AT (Hayes)

commands. Any occurrence of the string $APN in the chat-script will be

substituted with the Access Point Name (APN) configured on a cellular interface.

Examples To use a non-default chat-script, “connect.chat”, use the commands:

awplus# configure terminal

awplus(config)# interface cellular0

awplus(config-if)# #chat-script connect.chat

To use the default chat-script, use the commands:

awplus# configure terminal

awplus(config)# interface cellular0

awplus(config-if)# #no chat-script

Commands

apn

show cellular

show system usb

usb mode-switch

Parameter Description

<file-name> The path to the chat-script file (this file has to have a “.chat”

extension).

C613-50228-01 Rev A Command Reference for AR2050V 403

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USB CELLULAR MODEM COMMANDS

ENCAPSULATION PPP

encapsulation ppp

Overview Use this command to enable PPP encapsulation and create one or more PPP

interfaces over Ethernet, a cellular interface, or a L2TPv2 managed VPN.

Use the no variant of this command to disable PPP encapsulation and remove the

specified PPP interface.

Syntax encapsulation ppp <index>

no encapsulation ppp <index>

Default No PPP encapsulation or interfaces are configured by default.

Mode Interface Configuration mode for an Ethernet interface (e.g. interface eth1), or an

Ethernet sub-interface (e.g. interface eth1.1), or a cellular interface (e.g. interface

cellular0).

L2TP Tunnel Configuration mode for an L2TP tunnel (e.g. l2tp tunnel tunnel0).

Examples To configure a PPP interface with index 0 for Ethernet interface eth1, use the

commands:

awplus# configure terminal

awplus(config)# interface eth1

awplus(config-if)# encapsulation ppp 0

To shut down the ppp0 interface and remove it from Ethernet interface eth1, use

the commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# shutdown

awplus(config-if)# interface eth1

awplus(config-if)# no encapsulation ppp 0

To set the L2TP tunnel tunnel1 to encapsulate the PPP interface with index 1, use

the commands:

awplus# configure terminal

awplus(config)# l2tp tunnel tunnel1

awplus(config-l2tp-tunnel)# encapsulation ppp 1

Parameter Description

<index>The PPP interface index number in the range from 0 to 255.

C613-50228-01 Rev A Command Reference for AR2050V 404

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USB CELLULAR MODEM COMMANDS

ENCAPSULATION PPP

To remove the PPP interface with index 1 from L2TP tunnel tunnel1, use the

commands:

awplus# configure terminal

awplus(config)# l2tp tunnel tunnel1

awplus(config-l2tp-tunnel)# no encapsulation ppp 1

Commands

l2tp tunnel

ppp service-name (PPPoE)

show interface (PPP)

C613-50228-01 Rev A Command Reference for AR2050V 405

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USB CELLULAR MODEM COMMANDS

SHOW CELLULAR

show cellular

Overview Use this command to display status information about 3G serial USB cellular

modems currently plugged into your AR-Series Firewall.

Syntax show cellular <cellular-interface-name>

Default None

Mode Privileged Exec

Usage If a cellular interface is specified, then the command only shows information for

the cellular modem associated with that interface. Different vendors, and models

of cellular modems often provide different sets of information:

• Vendor-specific information will not be displayed if the information is unable

to be obtained from the cellular modem.

• For information that is common to most cellular modems, “(unknown)” will

be displayed if the information was not obtained successfully.

Examples To show status information about all cellular modems, use the command:

awplus# show cellular

Output Figure 10-3: Example output from show cellular

Parameter Description

<cellular-interface-name> Specify the name of a cellular interface. This option displays status

information for the cellular modem associated with that interface.

awplus#show cellular

Interface cellular0

Manufacturer: huawei

Model ID: E1762

Revision ID: 11.126.10.00.74

Serial ID: 351553036840711

IMSI: 530011104647258

Signal Quality:

RSSI: -71 dBm

Bit Error Rate: (unknown)

Service Center Address:

Phone Number: +6421600600

Number Type: International

GPRS Mobile Station Class: Class A

Serial Port Configuration:

Baud rate: 115200

Character Format: 8-N-1

Parity: Space

C613-50228-01 Rev A Command Reference for AR2050V 406

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USB CELLULAR MODEM COMMANDS

SHOW CELLULAR

Terminal Equipment Character Set: IRA

Cable interface DTE-DCE local flow control:

To DTE: RTS

To DCE: CTS

System Time: 1980/01/06,03:37:39

GPRS Network Registration Status: Registered, home network

PIN Request Status: READY

Functionality Level: Full functionality (power-saving disabled)

Facility Lock Status:

SIM card lock: Not active

SIM fixed dialling memory feature: Not active

Network personalization: Not active

Network subset personalization: Not active

Service provider personalization: Not active

Corporate personalization: Not active

Lock phone to first SIM card: Not active

Call Mode: Single mode

Wireless Data Service: 3GPP systems (GERAN, UTRAN and E-UTRAN)

GPRS Service Status: Mobile station is attached to a GPRS service

Dialling Number Type: National

Bearer Service Type:

Autobauding: Enabled

Service: Data circuit asynchronous (UDI or 3.1 kHz modem)

Connection Element: Non-transparent

Automatic time and time zone update via NITS: Not enabled

PPP support between TE and MT: Supported

Last Error Report: No cause information available

PLMN selection method: User controlled PLMN selected from Access Technology

PDP Contexts:

Context ID: 1

Type: IP

APN: www.vodafone.net.nz

Address: 0.0.0.0

Header Compression: Off

Status: Not active

Primary DNS: 0.0.0.0

Secondary DNS: 0.0.0.0

Diagnostic mode baud rate: 115200

TE-DCE baud rate: 115200

Tolerance to long delays in PDP call setup: Enabled

Hardware Version: CD25TCPV

System Info:

System Service State: Valid service

System Service Domain: CS and PS service

Roaming Status: Not roaming

System Mode: WCDMA mode

SIM card state: Valid USIM card state

System Sub-mode: WCDMA mode

System Config:

Supported System Mode: Auto-select

Network Acquisition Order: WCDMA, then GSM

Service Domain Support: CS and PS

Card-Lock:

Lock Status: Unlock code does not need to be provided

Remaining Unlock Attempts: 10

PLMN ID of the operator who has locked this device: None

C613-50228-01 Rev A Command Reference for AR2050V 407

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USB CELLULAR MODEM COMMANDS

SHOW CELLULAR

To show status information about the cellular modem associated with interface

‘cellular0’ only, use the command:

awplus# show cellular cellular0

Commands

apn

chat-script

show system usb

usb mode-switch

Signal Strength:

RSSI (dBm): -64

ECIO (dBm): -5

RSCP (dBm): -69

ICCID: 984610411061462785F5

Software Version: E1762 11.126.10.00.74,CD25TCPV,Ver.B

HSUPA status: Enabled

HSDPA status: Enabled

Card Mode: USIM

Device Mode:

Mode ID: 20

Port Modes:

Port 0: MDM

Port 1: NDIS

Port 2: DIAG

Port 3: PCUI

Port 4: CDROM

Data Service Traffic:

Last Connection Time (s): 5134

Last Bytes Transmitted: 0

Last Bytes Received: 168

Total Connection Time (s): 64354

Total Bytes Transmitted: 910

Total Bytes Received: 3168

PIN Status:

Status: READY

Remaining input attempts:

PUK: 10

PIN: 3

PUK2: 10

PIN2: 3

C613-50228-01 Rev A Command Reference for AR2050V 408

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USB CELLULAR MODEM COMMANDS

SHOW SYSTEM USB

show system usb

Overview Use this command to display technical information about connected USB devices.

Syntax show system usb [detail]

Default None

Mode Privileged Exec

Examples To show information about USB devices connected to your AR-Series Firewall, use

the command:

awplus# show system usb

Output Figure 10-4: Example output from show system usb

To show greater detail of information about USB devices connected to your

AR-Series Firewall, use the command:

awplus# show system usb detail

Output Figure 10-5: Example output from show system usb detail

Parameter Description

detail This option provides greater detail about the USB device, such as

descriptors for the device, configuration and Interface.

awplus#show system usb

Bus 001 Device 003: ID 12d1:140c Huawei Technologies Co., Ltd. E180v modem

awplus#show system usb detail



Bus 001 Device 002: ID 12d1:1001 Huawei Technologies Co., Ltd. E169/E620/E800 HS

DPA Modem

Device Descriptor:

bLength 18

bDescriptorType 1

bcdUSB 2.00

bDeviceClass 0 (Defined at Interface level)

bDeviceSubClass 0 

bDeviceProtocol 0 

bMaxPacketSize0 64

C613-50228-01 Rev A Command Reference for AR2050V 409

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USB CELLULAR MODEM COMMANDS

SHOW SYSTEM USB

Commands

apn

chat-script

show cellular

usb mode-switch

idVendor 0x12d1 Huawei Technologies Co., Ltd.

idProduct 0x1001 E169/E620/E800 HSDPA Modem

bcdDevice 0.00

iManufacturer 3 HUAWEI Technology

iProduct 2 HUAWEI Mobile

iSerial 0 

bNumConfigurations 1

Configuration Descriptor:

bLength 9

bDescriptorType 2

wTotalLength 85

bNumInterfaces 3

bConfigurationValue 1

iConfiguration 1 Huawei Configuration

bmAttributes 0xe0

Self Powered

Remote Wakeup

MaxPower 500mA

Interface Descriptor:

bLength 9

bDescriptorType 4

bInterfaceNumber 0

bAlternateSetting 0

bNumEndpoints 3

bInterfaceClass 255 Vendor Specific Class

bInterfaceSubClass 255 Vendor Specific Subclass

bInterfaceProtocol 255 Vendor Specific Protocol

iInterface 0 

...

C613-50228-01 Rev A Command Reference for AR2050V 410

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USB CELLULAR MODEM COMMANDS

USB MODE-SWITCH

usb mode-switch

Overview Use this command to map a specific USB device to a mode-switch configuration

file.

The no variant of this command removes the configuration corresponding to a

specific ID.

Syntax usb mode-switch id <1-16> vendor-id <vendor-id> product-id

<product-id> [manufacturer <manufacturer>|product

<product>|serial <serial>|vendor <vendor>|model

<model>|revision <revision>] file <file-name>

no usb mode-switch id <1-16>

Parameter

Descriptio

id mode switch configuration ID.

<1-16> Configuration ID number (from 1 through 16).

vendor-id Specify the USB device's vendor ID.

<vendor-id> 4 digit hexadecimal value representing the device’s vendor ID.

product-id Specify the USB device’s product ID.

<product-id> 4 digit hexadecimal value representing the device’s product ID.

manufacturer Specify the USB product descriptor.

<manufacturer>All or part of the USB manufacturer string descriptor (with

spaces replaced by underscores).

product Specify the USB product descriptor.

<product>All or part of the USB product string descriptor (with spaces

replaced by underscores).

serial Specify the USB serial descriptor.

<serial> All or part of the USB serial string descriptor (with spaces

replaced by underscores).

vendor Specify the SCSI vendor descriptor.

<vendor> All or part of the SCSI model descriptor (with spaces replaced by

underscores).

model Specify the SCSI model descriptor.

<model> All or part of the SCSI revision descriptor (with spaces replaced

by underscores).

revision Specify the SCSI revision descriptor.

<revision> All or part of the SCSI revision descriptor (with spaces replaced

by underscores).

C613-50228-01 Rev A Command Reference for AR2050V 411

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

USB CELLULAR MODEM COMMANDS

USB MODE-SWITCH

Default Some USB devices will use a default mode switch configuration file if one is not

specified.

Mode Global Configuration

Usage Some USB devices must be explicitly told to switch to a compatible mode. The usb

mode-switch command does this by matching on a target device by its USB

vendor and product IDs, and executing a specified configuration file.

Additional parameters can be defined which specify other USB and SCSI

descriptors. These are useful if there are multiple devices that have the same

product and vendor IDs, but differ in the other parameters. The mode switch

configuration files must have the extension “.conf”.

Examples To add a mode switch configuration for a USB device, use the commands:

awplus# configure terminal

awplus(config)# usb mode-switch id 1 vendor-id 12d1 product-id

140c manufacturer HUAWEI file switch.conf

To remove a mode switch configuration for a USB device, use the commands:

awplus# configure terminal

awplus(config)# no usb mode-switch id 1

Commands

apn

chat-script

show cellular

show system usb

usb mode-switch

file Specify the mode switch config file to be used instead of the

default when the target device is inserted.

<file> Mode switch configuration file URL with extension .conf.

Parameter

Descriptio

C613-50228-01 Rev A Command Reference for AR2050V 412

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

Port Mirroring

Commands

Introduction

Overview This chapter provides an alphabetical reference of commands used to configure

Port Mirroring.

For more information, see the Mirroring Feature Overview and Configuration

Guide.

Command List •“mirror interface” on page 413

•“show mirror” on page 415

•“show mirror interface” on page 416

C613-50228-01 Rev A Command Reference for AR2050V 413

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PORT MIRRORING COMMANDS

MIRROR INTERFACE

mirror interface

Overview Use this command to define a mirror port and mirrored (monitored) ports and

direction of traffic to be mirrored. The port for which you enter interface mode will

be the mirror port.

The destination port is removed from all VLANs, and no longer participates in other

switching.

Use the no variant of this command to disable port mirroring by the destination

port on the specified source port.

Syntax mirror interface <source-port-list> direction

{both|receive|transmit}

no mirror interface <source-port-list>

Mode Interface Configuration

Usage Use this command to send traffic to another device connected to the mirror port

for monitoring.

For more information, see the Mirroring Feature Overview and Configuration

Guide.

A mirror port cannot be associated with a VLAN. If a switch port is configured to be

a mirror port, it is automatically removed from any VLAN it was associated with.

This command can only be applied to a single mirror (destination) port, not to a

range of ports, nor to a static or dynamic channel group. Do not apply multiple

interfaces with an interface command before issuing the mirror interface

command. One interface may have multiple mirror interfaces.

Parameter Description

<source-port-list> The source switch ports to mirror. A port-list can be:

• a port (e.g. port1.0.2)

• a continuous range of ports separated by a hyphen, e.g.

port1.0.1-1.0.2

• a comma-separated list of ports and port ranges, e.g.

port1.0.1,port1.0.4-1.0.6

The source port list cannot include dynamic or static

channel groups (link aggregators).

direction Specifies whether to mirror traffic that the source port

receives, transmits, or both.

both Mirroring traffic both received and transmitted by the

source port.

receive Mirroring traffic received by the source port.

transmit Mirroring traffic transmitted by the source port.

C613-50228-01 Rev A Command Reference for AR2050V 414

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PORT MIRRORING COMMANDS

MIRROR INTERFACE

Example To mirror traffic received and transmitted on port1.0.4 and port1.0.5 to destination

port1.0.3, use the commands:

awplus# configure terminal

awplus(config)# interface port1.0.3

awplus(config-if)# mirror interface port1.0.4,port1.0.5

direction both

C613-50228-01 Rev A Command Reference for AR2050V 415

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PORT MIRRORING COMMANDS

SHOW MIRROR

show mirror

Overview Use this command to display the status of all mirrored ports.

Syntax show mirror

Mode User Exec and Privileged Exec

Example To display the status of all mirrored ports, use the following command:

awplus# show mirror

Output Figure 11-1: Example output from the show mirror command

Mirror Test Port Name: port1.0.1

Mirror option: Enabled

Mirror direction: both

Monitored Port Name: port1.0.2

Mirror Test Port Name: port1.0.3

Mirror option: Enabled

Mirror direction: receive

Monitored Port Name: port1.0.4

Mirror Test Port Name: port1.0.3

Mirror option: Enabled

Mirror direction: receive

Monitored Port Name: port1.0.1

Mirror Test Port Name: port1.0.1

Mirror option: Enabled

Mirror direction: receive

Monitored Port Name: port1.0.3

Mirror Test Port Name: port1.0.1

Mirror option: Enabled

Mirror direction: transmit

Monitored Port Name: port1.0.4

C613-50228-01 Rev A Command Reference for AR2050V 416

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PORT MIRRORING COMMANDS

SHOW MIRROR INTERFACE

show mirror interface

Overview Use this command to display port mirroring configuration for a mirrored

(monitored) switch port.

Syntax show mirror interface <port>

Mode User Exec, Privileged Exec and Interface Configuration

Example To display port mirroring configuration for the port1.0.4, use the following

commands:

awplus# configure terminal

awplus(config)# interface port1.0.4

awplus(config-if)# show mirror interface port1.0.4

Output Figure 11-2: Example output from the show mirror interface command

Parameter Description

<port>The monitored switch port to display information about.

Mirror Test Port Name: port1.0.3

Mirror option: Enabled

Mirror direction: both

Monitored Port Name: port1.0.4

C613-50228-01 Rev A Command Reference for AR2050V 417

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

Part 2: Interfaces and Layer 2

C613-50228-01 Rev A Command Reference for AR2050V 418

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

Switching

Commands

Introduction

Overview This chapter provides an alphabetical reference of commands used to configure

switching.

For more information, see the Switching Feature Overview and Configuration

Guide.

Command List •“backpressure” on page 420

•“clear mac address-table dynamic” on page 422

•“clear mac address-table static” on page 424

•“clear port counter” on page 425

•“debug platform packet” on page 426

•“duplex” on page 428

•“flowcontrol (switch port)” on page 430

•“linkflap action” on page 432

•“mac address-table acquire” on page 433

•“mac address-table ageing-time” on page 434

•“mac address-table static” on page 435

•“platform load-balancing” on page 436

•“polarity” on page 437

•“show debugging platform packet” on page 438

•“show flowcontrol interface” on page 439

•“show interface err-disabled” on page 440

•“show interface switchport” on page 441

•“show mac address-table” on page 442

C613-50228-01 Rev A Command Reference for AR2050V 419

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SWITCHING COMMANDS

•“show platform” on page 444

•“show platform port” on page 445

•“show storm-control” on page 447

•“speed” on page 448

•“storm-control level” on page 450

•“undebug platform packet” on page 451

C613-50228-01 Rev A Command Reference for AR2050V 420

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SWITCHING COMMANDS

BACKPRESSURE

backpressure

Overview This command provides a method of applying flow control to ports running in half

duplex mode. The setting will only apply when the link is in the half-duplex state.

You can disable backpressure on an interface using the off parameter or the no

variant of this command.

Syntax backpressure {on|off}

no backpressure

Default Backpressure is turned off by default. You can determine whether an interface has

backpressure enabled by viewing the running-config output; backpressure on is

shown for interfaces if this feature is enabled.

Mode Interface Configuration

Usage The backpressure feature enables half duplex Ethernet ports to control traffic flow

during congestion by preventing further packets arriving. Back pressure utilizes a

pre-802.3x mechanism in order to apply Ethernet flow control to switch ports that

are configured in the half duplex mode.

The flow control applied by the flowcontrol (switch port) command operates only

on full-duplex links, whereas back pressure operates only on half-duplex links.

If a port has insufficient capacity to receive further frames, the device will simulate

a collision by transmitting a CSMACD jamming signal from this port until the buffer

empties. The jamming signal causes the sending device to stop transmitting and

wait a random period of time, before retransmitting its data, thus providing time

for the buffer to clear. Although this command is only valid for switch ports

operating in half-duplex mode the remote device (the one sending the data) can

be operating in the full duplex mode.

To see the currently-negotiated duplex mode for ports whose links are up, use the

command show interface. To see the configured duplex mode (when different

from the default), use the command show running-config.

Examples To enable back pressure flow control on interfaces port1.0.1-port1.0.2

enter the following commands:

awplus# configure terminal

awplus(config)# interface port1.0.1-port1.0.2

awplus(config-if)# backpressure on

Parameters Description

on Enables half-duplex flow control.

off Disables half-duplex flow control.

C613-50228-01 Rev A Command Reference for AR2050V 421

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SWITCHING COMMANDS

BACKPRESSURE

To disable back pressure flow control on interface port1.0.2 enter the following

commands:

awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# backpressure off

Validation

Commands

show running-config

show interface

Commands

duplex

C613-50228-01 Rev A Command Reference for AR2050V 422

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SWITCHING COMMANDS

CLEAR MAC ADDRESS-TABLE DYNAMIC

clear mac address-table dynamic

Overview Use this command to clear the filtering database of all entries learned for a selected

MAC address, an MSTP instance, a switch port interface or a VLAN interface.

Syntax clear mac address-table dynamic [address

<mac-address>|interface <port> [instance <inst>]|vlan <vid>]

Mode Privileged Exec

Usage Use this command with options to clear the filtering database of all entries learned

for a given MAC address, interface or VLAN. Use this command without options to

clear any learned entries.

Use the optional instance parameter to clear the filtering database entries

associated with a specified MSTP instance Note that you must first specify a switch

port interface before you can specify an MSTP instance.

Compare this usage and operation with the clear mac address-table static

command. Note that an MSTP instance cannot be specified with the command

clear mac address-table static.

Examples This example shows how to clear all dynamically learned filtering database entries

for all interfaces, addresses, VLANs.

awplus# clear mac address-table dynamic

This example shows how to clear all dynamically learned filtering database entries

when learned through device operation for the MAC address 0000.5E00.5302.

awplus# clear mac address-table dynamic address 0000.5E00.5302

Parameter Description

address Specify a MAC (Media Access Control) address to be cleared from

the filtering database.

<mac-address> Enter a MAC address to be cleared from the database in the format

HHHH.HHHH.HHHH.

interface Specify a switch port to be cleared from the filtering database.

instance Specify an MSTP (Multiple Spanning Tree) instance to be cleared

from the filtering database.

<inst> Enter an MSTP instance in the range 1 to 63 to be cleared from the

filtering database.

vlan Specify a VLAN to be cleared from the filtering database.

<vid> Enter a VID (VLAN ID) in the range 1 to 4094 to be cleared from the

filtering database.

C613-50228-01 Rev A Command Reference for AR2050V 423

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SWITCHING COMMANDS

CLEAR MAC ADDRESS-TABLE DYNAMIC

This example shows how to clear all dynamically learned filtering database entries

when learned through device operation for a given MSTP instance 1 on switch port

interface port1.0.2.

awplus# clear mac address-table dynamic interface port1.0.2

instance 1

Commands

clear mac address-table static

show mac address-table

C613-50228-01 Rev A Command Reference for AR2050V 424

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SWITCHING COMMANDS

CLEAR MAC ADDRESS-TABLE STATIC

clear mac address-table static

Overview Use this command to clear the filtering database of all statically configured entries

for a selected MAC address, interface, or VLAN.

Syntax clear mac address-table static [address <mac-address>|interface

<port>|vlan <vid>]

Mode Privileged Exec

Usage Use this command with options to clear the filtering database of all entries made

from the CLI for a given MAC address, interface or VLAN. Use this command

without options to clear any entries made from the CLI.

Compare this usage with clear mac address-table dynamic command.

Examples This example shows how to clear all filtering database entries configured through

the CLI.

awplus# clear mac address-table static

This example shows how to clear all filtering database entries for a specific

interface configured through the CLI.

awplus# clear mac address-table static interface port1.0.3

This example shows how to clear filtering database entries configured through the

CLI for the mac address 0000.5E00.5302.

awplus# clear mac address-table static address 0000.5E00.5302

Commands

clear mac address-table dynamic

mac address-table static

show mac address-table

Parameter Description

address The MAC address whose entries are to be cleared from the filtering

database.

<mac-address> Specifies the MAC (Media Access Control) address to be cleared

from. Enter this address in the format HHHH.HHHH.HHHH.

interface Specify the interface from which statically configured entries are

to be cleared.

<port> Specify the switch port from which address entries will be cleared.

This can be a single switch port, (e.g. port1.0.4), a static channel

group (e.g. sa2), or a dynamic (LACP) channel group (e.g. po2).

vlan A VLAN whose statically configured entries are to be cleared.

<vid> Specifies the VLAN ID whose statically configured entries are to be

cleared.

C613-50228-01 Rev A Command Reference for AR2050V 425

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SWITCHING COMMANDS

CLEAR PORT COUNTER

clear port counter

Overview Use this command to clear the packet counters of the port.

Syntax clear port counter [<port>]

Mode Privileged Exec

Example To clear the packet counter for port1.0.1, use the command:

awplus# clear port counter port1.0.1

Commands

show platform port

Parameter Description

<port> The port number or range

C613-50228-01 Rev A Command Reference for AR2050V 426

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SWITCHING COMMANDS

DEBUG PLATFORM PACKET

debug platform packet

Overview This command enables platform to CPU level packet debug functionality on the

device.

Use the no variant of this command to disable platform to CPU level packet debug.

If the result means both send and receive packet debug are disabled, then any

active timeout will be canceled.

Syntax debug platform packet [recv] [send] [timeout <timeout>] [vlan

<vlan-id>|all]

no debug platform packet [recv] [send]

Default A 5 minute timeout is configured by default if no other timeout duration is

specified.

Mode Privileged Exec and Global Configuration

Usage This command can be used to trace packets sent and received by the CPU. If a

timeout is not specified, then a default 5 minute timeout will be applied.

If a timeout of 0 is specified, packet debug will be generated until the no variant of

this command is used or another timeout value is specified. The timeout value

applies to both send and receive debug and is updated whenever the debug

platform packet command is used.

Examples To enable both receive and send packet debug for the default timeout of 5

minutes, enter:

awplus# debug platform packet

To enable receive packet debug for 10 seconds, enter:

awplus# debug platform packet recv timeout 10

To enable send packet debug with no timeout, enter:

awplus# debug platform packet send timeout 0

Parameter Description

recv Debug packets received.

send Debug packets sent.

timeout Stop debug after a specified time.

<timeout><0-3600>The timeout period, specified in seconds.

vlan Limit debug to a single VLAN ID specified.

<vlan-id><1-4094> The VLAN ID to limit the debug output on.

all Debug all VLANs (default setting).

C613-50228-01 Rev A Command Reference for AR2050V 427

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SWITCHING COMMANDS

DEBUG PLATFORM PACKET

To enable VLAN packet debug for VLAN 2 with a timeout duration of 3 minutes,

enter:

awplus# debug platform packet vlan 2 timeout 150

To disable receive packet debug, enter:

awplus# no debug platform packet recv

Commands

show debugging platform packet

undebug platform packet

C613-50228-01 Rev A Command Reference for AR2050V 428

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SWITCHING COMMANDS

DUPLEX

duplex

Overview This command changes the duplex mode for the specified port.

To see the currently-negotiated duplex mode for ports whose links are up, use the

command show interface. To see the configured duplex mode (when different

from the default), use the command show running-config.

Syntax duplex {auto|full|half}

Default By default, ports auto-negotiate duplex mode (except for 100Base-FX ports which

do not support auto-negotiation, so default to full duplex mode).

Mode Interface Configuration

Usage Switch ports in a static or dynamic (LACP) channel group must have the same port

speed and be in full duplex mode. Once switch ports have been aggregated into a

channel group, you can set the duplex mode of all the switch ports in the channel

group by applying this command to the channel group.

Examples To specify full duplex for port1.0.4, enter the following commands:

awplus# configure terminal

awplus(config)# interface port1.0.4

awplus(config-if)# duplex full

To specify half duplex for port1.0.4, enter the following commands:

awplus# configure terminal

awplus(config)# interface port1.0.4

awplus(config-if)# duplex half

To auto-negotiate duplex mode for port1.0.4, enter the following commands:

awplus# configure terminal

awplus(config)# interface port1.0.4

awplus(config-if)# duplex auto

Parameter Description

auto Auto-negotiate duplex mode.

full Operate in full duplex mode only.

half Operate in half duplex mode only.

C613-50228-01 Rev A Command Reference for AR2050V 429

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SWITCHING COMMANDS

DUPLEX

Commands

backpressure

polarity

speed

show interface

C613-50228-01 Rev A Command Reference for AR2050V 430

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SWITCHING COMMANDS

FLOWCONTROL (SWITCH PORT)

flowcontrol (switch port)

Overview Use this command to enable flow control, and configure the flow control mode for

the switch port.

Use the no variant of this command to disable flow control for the specified switch

port.

Syntax flowcontrol both

flowcontrol {send|receive} {off|on}

no flowcontrol

Default By default, flow control is disabled.

Mode Interface Configuration

Usage The flow control mechanism specified by 802.3x is only for full duplex links. It

operates by sending PAUSE frames to the link partner to temporarily suspend

transmission on the link.

Flow control enables connected Ethernet ports to control traffic rates during

congestion by allowing congested nodes to pause link operation at the other end.

If one port experiences congestion, and cannot receive any more traffic, it notifies

the other port to stop sending until the condition clears. When the local device

detects congestion at its end, it notifies the remote device by sending a pause

frame. On receiving a pause frame, the remote device stops sending data packets,

which prevents loss of data packets during the congestion period.

For half-duplex links, an older form of flow control known as backpressure is

supported. See the related backpressure command.

For flow control on async serial (console) ports, see the flowcontrol hardware

(asyn/console) command.

Parameter Description

both Use this parameter to specify send and receive flow control for the

port.

receive When the port receives pause frames, it temporarily stops (pauses)

sending traffic.

on Enable the specified flow control.

off Disable the specified flow control.

send When the port is congested (receiving too much traffic), it sends

pause frames to request the other end to temporarily stop (pause)

sending traffic.

C613-50228-01 Rev A Command Reference for AR2050V 431

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SWITCHING COMMANDS

FLOWCONTROL (SWITCH PORT)

Examples To enable flow control on port1.0.2, use the commands:

awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# flowcontrol both

To disable flow control on port1.0.2, use the commands:

awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# no flowcontrol

To enable flow control on port1.0.2 (receive only), use the commands:

awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# flowcontrol receive on

To enable flow control on port1.0.2 (send only), use the commands:

awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# flowcontrol send on

To disable flow control on port1.0.2 (receive only), use the commands:

awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# flowcontrol receive off

To disable flow control on port1.0.2 (send only), use the commands:

awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# flowcontrol send off

Commands

backpressure

show running-config

C613-50228-01 Rev A Command Reference for AR2050V 432

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SWITCHING COMMANDS

LINKFLAP ACTION

linkflap action

Overview Use this command to detect flapping on all ports. If more than 15 flaps occur in less

than 15 seconds the flapping port will shut down.

Use the no variant of this command to disable flapping detection at this rate.

Syntax linkflap action [shutdown]

no linkflap action

Default Linkflap action is disabled by default.

Mode Global Configuration

Example To enable the linkflap action command on the device, use the following

commands:

awplus# configure terminal

awplus(config)# linkflap action shutdown

Parameter Description

linkflap Global setting for link flapping.

action Specify the action for port.

shutdown Shutdown the port.

C613-50228-01 Rev A Command Reference for AR2050V 433

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SWITCHING COMMANDS

MAC ADDRESS-TABLE ACQUIRE

mac address-table acquire

Overview Use this command to enable MAC address learning on the device.

Use the no variant of this command to disable learning.

Syntax mac address-table acquire

no mac address-table acquire

Default Learning is enabled by default for all instances.

Mode Global Configuration

Example awplus# configure terminal

awplus(config)# mac address-table acquire

C613-50228-01 Rev A Command Reference for AR2050V 434

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SWITCHING COMMANDS

MAC ADDRESS-TABLE AGEING-TIME

mac address-table ageing-time

Overview Use this command to specify an ageing-out time for a learned MAC address. The

learned MAC address will persist for at least the specified time.

The no variant of this command will reset the ageing-out time back to the default

of 300 seconds (5 minutes).

Syntax mac address-table ageing-time <ageing-timer> none

no mac address-table ageing-time

Default The default ageing time is 300 seconds.

Mode Global Configuration

Examples The following commands specify various ageing timeouts on the device:

awplus# configure terminal

awplus(config)# mac address-table ageing-time 1000

awplus# configure terminal

awplus(config)# mac address-table ageing-time none

awplus# configure terminal

awplus(config)# no mac address-table ageing-time

Parameter Description

<ageing-timer> <10-1000000> The number of seconds of persistence.

none Disable learned MAC address timeout.

C613-50228-01 Rev A Command Reference for AR2050V 435

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SWITCHING COMMANDS

MAC ADDRESS-TABLE STATIC

mac address-table static

Overview Use this command to statically configure the MAC address-table to forward or

discard frames with a matching destination MAC address.

Syntax mac address-table static <mac-addr> {forward|discard} interface

<port> [vlan <vid>]

no mac address-table static <mac-addr> {forward|discard}

interface <port> [vlan <vid>]

Mode Global Configuration

Usage The mac address-table static command is only applicable to Layer 2 switched

traffic within a single VLAN. Do not apply the mac address-table static command

to Layer 3 switched traffic passing from one VLAN to another VLAN. Frames will not

be discarded across VLANs because packets are routed across VLANs. This

command only works on Layer 2 traffic.

Example awplus# configure terminal

awplus(config)# mac address-table static 2222.2222.2222 forward

interface port1.0.4 vlan 3

Commands

clear mac address-table static

show mac address-table

Parameter Description

<mac-addr> The destination MAC address in HHHH.HHHH.HHHH format.

<port>The port to display information about. The port may be a switch port

(e.g. port1.0.4), a static channel group (e.g. sa2), or a dynamic

(LACP) channel group (e.g. po2).

<vid> The VLAN ID. If you do not specify a VLAN, its value defaults to vlan 1.

C613-50228-01 Rev A Command Reference for AR2050V 436

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SWITCHING COMMANDS

PLATFORM LOAD-BALANCING

platform load-balancing

Overview This command selects which address fields are used as inputs into the load

balancing algorithm for aggregated links. The output from this algorithm is used

to select which individual path a given packet will traverse within an aggregated

link.

The no variant of this command applies its default setting.

Syntax platform load-balancing {src-dst-mac|src-dst-ip}

no platform load-balancing

Default The default is src-dst-ip.

Mode Global configuration

Examples To set the load balancing algorithm to include only Layer 2 MAC addresses, use the

commands:

awplus# configure terminal

awplus(config)# platform load-balancing src-dst-mac

To set the load balancing algorithm to include only Layer 3 IP addresses and L4

ports, use the commands:

awplus# configure terminal

awplus(config)# platform load-balancing src-dst-ip

Commands

show platform

Parameter Description

src-dst-mac Include the source and destination MAC addresses (Layer 2)

src-dst-ip Include the source and destination IP addresses (Layer 3) and

UDP/TCP source and destination ports.

If you choose this option, the algorithm will use MAC addresses

to calculate load balancing for Layer 2 and non-IP packets.

C613-50228-01 Rev A Command Reference for AR2050V 437

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SWITCHING COMMANDS

POLARITY

polarity

Overview This command sets the MDI/MDIX polarity on a copper-based switch port.

Syntax polarity {auto|mdi|mdix}

Default By default, switch ports set the polarity automatically (auto).

Mode Interface Configuration

Usage We recommend the default auto setting for MDI/MDIX polarity. Polarity applies to

copper 10BASE-T, 100BASE-T, and 1000BASE-T switch ports; it does not apply to

fiber ports. See the “MDI/MDIX Connection Modes” section in the Switching

Feature Overview and Configuration Guide for more information.

Example To set the polarity for port1.0.6 to fixed MDI mode, use the following

commands:

awplus# configure terminal

awplus(config)# interface port1.0.6

awplus(config-if)# polarity mdi

Parameter Description

mdi Sets the polarity to MDI (medium dependent interface).

mdix Sets the polarity to MDI-X (medium dependent interface crossover).

auto The switch port sets the polarity automatically. This is the default option.

C613-50228-01 Rev A Command Reference for AR2050V 438

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SWITCHING COMMANDS

SHOW DEBUGGING PLATFORM PACKET

show debugging platform packet

Overview This command shows platform to CPU level packet debugging information.

Syntax show debugging platform packet

Mode User Exec and Privileged Exec

Example To display the platform packet debugging information, use the command:

awplus# show debugging platform packet

Commands

debug platform packet

undebug platform packet

C613-50228-01 Rev A Command Reference for AR2050V 439

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SWITCHING COMMANDS

SHOW FLOWCONTROL INTERFACE

show flowcontrol interface

Overview Use this command to display flow control information.

Syntax show flowcontrol interface <port>

Mode User Exec and Privileged Exec

Example To display the flow control for the port1.0.5, use the command:

awplus# show flowcontrol interface port1.0.5

Output Figure 12-1: Example output from the show flowcontrol interface command

for a specific interface

Parameter Description

<port> Specifies the name of the port to be displayed.

Port Send FlowControl Receive FlowControl RxPause TxPause

admin oper admin oper

----- ------- -------- ------- -------- ------- -------

port1.0.5 on on on on 0 0

C613-50228-01 Rev A Command Reference for AR2050V 440

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SWITCHING COMMANDS

SHOW INTERFACE ERR-DISABLED

show interface err-disabled

Overview Use this command to show the ports which have been dynamically shut down by

protocols running on the device and the protocols responsible for the shutdown.

Syntax show interface [<interface-range> err-disabled]

Mode User Exec and Privileged Exec

Example To show which protocols have shut down ports, use the commands:

awplus# show interface err-disabled

Parameter Description

<interface-range> Interface range

err-disabled Brief summary of interfaces shut down by protocols

C613-50228-01 Rev A Command Reference for AR2050V 441

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SWITCHING COMMANDS

SHOW INTERFACE SWITCHPORT

show interface switchport

Overview Use this command to show VLAN information about each switch port.

Syntax show interface switchport

Mode User Exec and Privileged Exec

Example To display VLAN information about each switch port, enter the command:

awplus# show interface switchport

Output Figure 12-2: Example output from the show interface switchport command

Commands

show interface memory

Interface name : port1.0.1

Switchport mode : access

Ingress filter : enable

Acceptable frame types : all

Default Vlan : 2

Configured Vlans : 2

Dynamic Vlans :



Interface name : port1.0.2

Switchport mode : trunk

Ingress filter : enable

Acceptable frame types : all

Default Vlan : 1

Configured Vlans : 1 4 5 6 7 8

Dynamic Vlans :

...

C613-50228-01 Rev A Command Reference for AR2050V 442

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SWITCHING COMMANDS

SHOW MAC ADDRESS-TABLE

show mac address-table

Overview Use this command to display the mac address-table for all configured VLANs.

Syntax show mac address-table

Mode User Exec and Privileged Exec

Usage The show mac address-table command is only applicable to view a mac

address-table for Layer 2 switched traffic within VLANs.

Example To display the mac address-table, use the following command:

awplus# show mac address-table

Output See the below sample output captured when there was no traffic being switched:

See the sample output captured when packets were switched and mac addresses

were learned:

Note the new mac addresses learned for port1.0.4 and port1.0.6 added as

dynamic entries.

Note the first column of the output below shows VLAN IDs if multiple VLANs are

configured:

Also note manually configured static mac-addresses are shown to the right of the

type column:

awplus#show mac address-table



VLAN Port MAC State

1 unknown 0000.cd28.0752 static

ARP - 0000.cd00.0000 static

awplus#show mac address-table



VLAN Port MAC State

1 unknown 0000.cd28.0752 static

1 port1.0.6 0030.846e.9bf4 dynamic

1 port1.0.4 0030.846e.bac7 dynamic

ARP - 0000.cd00.0000 static

awplus#show mac address-table



VLAN Port MAC State

1 unknown 0000.cd28.0752 static

1 port1.0.4 0030.846e.bac7 dynamic

2 unknown 0000.cd28.0752 static

2 port1.0.6 0030.846e.9bf4 dynamic 

ARP - 0000.cd00.0000 static

C613-50228-01 Rev A Command Reference for AR2050V 443

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SWITCHING COMMANDS

SHOW MAC ADDRESS-TABLE

Commands

clear mac address-table dynamic

clear mac address-table static

mac address-table static

awplus(config)#mac address-table static 0000.1111.2222 for int 

port1.0.3 vlan 2

awplus(config)#end

awplus#

awplus#show mac address-table



VLAN Port MAC State

1 unknown 0000.cd28.0752 static

1 port1.0.2 0030.846e.bac7 dynamic

2 port1.0.3 0000.1111.2222 static

2 unknown 0000.cd28.0752 static

2 port1.0.5 0030.846e.9bf4 dynamic

ARP - 0000.cd00.0000 static

C613-50228-01 Rev A Command Reference for AR2050V 444

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SWITCHING COMMANDS

SHOW PLATFORM

show platform

Overview This command displays the settings configured by using the platform commands.

Syntax show platform

Mode Privileged Exec

Usage This command displays the settings in the running config. For changes in some of

these settings to take effect, the device must be rebooted with the new settings in

the startup config.

Example To check the settings configured with platform commands on the device, use the

following command:

awplus# show platform

Output Figure 12-3: Example output from the show platform command

awplus#show platform

MAC vlan hashing algorithm unknown

Table 1: Parameters in the output of the show platform command

Parameter Description

MAC vlan hashing

algorithm

The MAC VLAN hash-key-generating algorithm. This

setting is unused.

C613-50228-01 Rev A Command Reference for AR2050V 445

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SWITCHING COMMANDS

SHOW PLATFORM PORT

show platform port

Overview This command displays the various port registers or platform counters for

specified switchports.

Syntax show platform port [<port-list>|counters]

Mode Privileged Exec

Examples To display port registers for port1.0.1 and port1.0.2 use the following command:

awplus# show platform port port1.0.1-port1.0.2

To display platform counters for port1.0.1 and port1.0.2 use the following

command:

awplus# show platform port port1.0.1-port1.0.2 counters

Output Figure 12-4: Example output from the show platform port command

Parameter Description

<port-list> The ports to display information about. A port-list can be:

• a continuous range of ports separated by a hyphen, e.g.

port1.0.1-1.0.6

• a comma-separated list of ports and port ranges, e.g.

port1.0.1,port1.0.4-1.0.6.

counters Show the platform counters.

C613-50228-01 Rev A Command Reference for AR2050V 446

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SWITCHING COMMANDS

SHOW PLATFORM PORT

awplus#show platform port port1.0.1

Phy register value for port1.0.1 (ifindex: 5001)



00:1140 01:7949 02:0362 03:5e14 04:01e1 05:0000 06:0064 07:2001

08:0000 09:0600 0a:0000 0b:0000 0c:0000 0d:4007 0e:0000 0f:3000

10:0020 11:0000 12:0000 13:0000 14:0000 15:0000 16:0000 17:0000

18:7277 19:1000 1a:0000 1b:ffff 1c:6cc7 1d:0000 1e:0000 1f:0000

sfp phy

00:1140 01:7949 02:0362 03:5e14 04:01e1 05:0000 06:0064 07:2001

08:0000 09:0600 0a:0000 0b:0000 0c:0000 0d:4007 0e:0000 0f:3000

10:0020 11:0000 12:0000 13:0000 14:0000 15:0000 16:0000 17:0000

18:7277 19:1000 1a:0000 1b:ffff 1c:6cc7 1d:0000 1e:0000 1f:0000



Port configuration for lport 0x08000000:

Phy Driver: 54680 Gigabit PHY Driver

enabled: 1

loopback: 0

link: 0

speed: 0 max speed: 1000

duplex: 0

linkscan: 1

autonegotiate: 1

master: 2

tx pause: 0 rx pause: 0

untagged vlan: 1

vlan filter: 1

stp state: 1

learn: 5

discard: 0

jam: 0

max frame size: 1518

MC Disable SA: no

MC Disable TTL: no

MC egress untag: 0

MC egress vid: 0

MC TTL threshold: 0

C613-50228-01 Rev A Command Reference for AR2050V 447

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SWITCHING COMMANDS

SHOW STORM-CONTROL

show storm-control

Overview Use this command to display storm-control information for all interfaces or a

particular interface.

Syntax show storm-control [<port>]

Mode User Exec and Privileged Exec

Example To display storm-control information for port1.0.2, use the following command:

awplus# show storm-control port1.0.2

Output Figure 12-5: Example output from the show storm-control command for

port1.0.2

Commands

storm-control level

Parameter Description

<port>The port to display information about. The port may be a switch port

(e.g. port1.0.4), a static channel group (e.g. sa2), or a dynamic (LACP)

channel group (e.g. po2).

Port BcastLevel McastLevel DlfLevel

port1.0.2 40. 0% 100. 0% 100. 0%

C613-50228-01 Rev A Command Reference for AR2050V 448

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SWITCHING COMMANDS

SPEED

speed

Overview This command changes the speed of the specified port. You can optionally specify

the speed or speeds that get autonegotiated, so autonegotiation is only

attempted at the specified speeds.

To see the currently-negotiated speed for ports whose links are up, use the show

interface command. To see the configured speed (when different from the

default), use the show running-config command.

Syntax speed {10|100|1000}

speed auto [10] [100] [1000]

The following table shows the speed options for each type of port.

Mode Interface Configuration

Default By default, ports autonegotiate speed.

Usage We recommend having autonegotiation enabled for link speeds of 1000 Mbps and

above. For example, to apply a fixed speed of 1000 Mbps use the command speed

auto 1000.

Switch ports in a static or dynamic (LACP) channel group must have the same port

speed and be in full duplex mode. Once switch ports have been aggregated into a

channel group, you can set the speed of all the switch ports in the channel group

by applying this command to the channel group.

NOTE: If multiple speeds are specified after the auto option to autonegotiate speeds,

then the device only attempts autonegotiation at those specified speeds.

Examples To set the speed of a tri-speed port to 100 Mbps, enter the following commands:

awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# speed 100

To return the port to auto-negotiating its speed, enter the following commands:

awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# speed auto

Port type Speed Options (units are Mbps)

RJ-45 copper ports auto (default)

100

1000

C613-50228-01 Rev A Command Reference for AR2050V 449

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SWITCHING COMMANDS

SPEED

To set the port to auto-negotiate its speed at 100 Mbps and 1000 Mbps, enter the

following commands:

awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# speed auto 100 1000

To set the port to auto-negotiate its speed at 1000 Mbps only, which will fix this

port speed to 1000 Mbps, enter the following commands:

awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# speed auto 1000

Commands

duplex

polarity

show interface

speed (asyn)

C613-50228-01 Rev A Command Reference for AR2050V 450

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SWITCHING COMMANDS

STORM-CONTROL LEVEL

storm-control level

Overview Use this command to specify the speed limiting level for broadcasting, multicast,

or destination lookup failure (DLF) traffic for the port. Storm-control limits the

selected traffic type to the specified percentage of the maximum port speed.

Use the no variant of this command to disable storm-control for broadcast,

multicast or DLF traffic.

Syntax storm-control {broadcast|multicast|dlf} level <level>

no storm-control {broadcast|multicast|dlf} level

Default By default, storm-control is disabled.

Mode Interface Configuration

Usage Flooding techniques are used to block the forwarding of unnecessary flooded

traffic. A packet storm occurs when a large number of broadcast packets are

received on a port. Forwarding these packets can cause the network to slow down

or time out.

Example To limit broadcast traffic on port1.0.2 to 30% of the maximum port speed, use the

following commands:

awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# storm-control broadcast level 30

Commands

show storm-control

Parameter Description

<level> <0-100> Specifies the percentage of the maximum port speed

allowed for broadcast, multicast or destination lookup failure traffic.

broadcast Applies the storm-control to broadcast frames.

multicast Applies the storm-control to multicast frames.

dlf Applies the storm-control to destination lookup failure traffic.

C613-50228-01 Rev A Command Reference for AR2050V 451

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SWITCHING COMMANDS

UNDEBUG PLATFORM PACKET

undebug platform packet

Overview This command applies the functionality of the no debug platform packet

command.

C613-50228-01 Rev A Command Reference for AR2050V 452

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

Bridging

Commands

Introduction

Overview This chapter provides an alphabetical reference of commands used to configure

bridging. For more information, see the Bridging Commands Feature Overview

and Configuration Guide.

Command List •“ageing-time” on page 454

•“bridge” on page 455

•“bridge-group” on page 456

•“clear mac-filter counter” on page 457

•“default-action” on page 458

•“default-protocol-action” on page 460

•“l3-filtering enable” on page 461

•“mac-filter-group egress” on page 462

•“mac-filter” on page 463

•“mac-filter-group” on page 464

•“mac-learning” on page 465

•“protocol ethii (macfilter)” on page 466

•“protocol novell (macfilter)” on page 468

•“protocol sap (macfilter)” on page 470

•“protocol snap (macfilter)” on page 472

•“rule (macfilter)” on page 474

•“rule ip (macfilter)” on page 476

•“rule ipv6 (macfilter)” on page 478

•“show bridge” on page 480

C613-50228-01 Rev A Command Reference for AR2050V 453

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

BRIDGING COMMANDS

•“show bridge macaddr” on page 482

•“show mac-filter” on page 483

C613-50228-01 Rev A Command Reference for AR2050V 454

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

BRIDGING COMMANDS

AGEING-TIME

ageing-time

Overview This command specifies the time period that a learned MAC address will remain

defined within the bridge’s MAC address table.

Use the no variant of this command to set the ageing out time back to the default.

Syntax ageing-time <10-1000000>

no ageing-time

Default 300 seconds (5 minutes)

Mode Interface Configuration

Examples To change the ageing time on br2 to 60 seconds (1 minute), use the following

commands:

awplus#configure terminal

awplus(config)#interface br2

awplus(config-if)#ageing-time 60

To reset the ageing time back to its default, use the following commands:

awplus#configure terminal

awplus(config-if)#no ageing-time

To reset the ageing time back to its default, you can also use the following

commands:

awplus#configure terminal

awplus(config-if)#ageing-time 300

Output None

Commands

bridge

bridge-group

show bridge

show bridge macaddr

Parameter Description

<10-1000000>The number of seconds that the MAC addresses will remain in

the table.

C613-50228-01 Rev A Command Reference for AR2050V 455

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

BRIDGING COMMANDS

BRIDGE

bridge

Overview Use this command to create a software bridge.

Use the no variant of this command to remove the specified bridge.

Syntax bridge [<bridge-id>]

no bridge [<bridge-id>]

Default No configured bridges

Mode Global Configuration

Usage The bridge interface name will be prefixed with ‘br’ followed by the bridge ID.

If interfaces exist on a bridge, then the bridge cannot be removed. For example if

interface eth1 exists on bridge 2, then the no bridge 2 command will give you the

following message:

% failed to remove interface br2, there are still configured

sub-interfaces.

Example To create a bridge with the ID of 2, use the following commands:

awplus#configure terminal

awplus(config)#bridge 2

To remove the bridge with the ID of 2, use the following commands:

awplus#configure terminal

awplus(config)##no bridge 2

Commands

ageing-time

bridge-group

show bridge

show bridge macaddr

Parameter Description

<bridge-id>The bridge ID (from 1 to 64). This is made up of the bridge priority

and the bridge’s MAC address.

C613-50228-01 Rev A Command Reference for AR2050V 456

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

BRIDGING COMMANDS

BRIDGE-GROUP

bridge-group

Overview Use this command to add an interface to a bridge.

Use the no variant of this command to remove an interface from a bridge.

Syntax bridge-group <1-64>

no bridge-group

Default An interface is not part of any bridge by default.

Mode Interface configuration.

Usage Interfaces can only be part of one bridge, so when removing the bridge no

parameters are required.

Interfaces that have been added to a bridge will lose their Layer 3 properties. The

bridge will act as the Layer 3 interface. The bridge will provide Layer 2 connectivity

between interfaces that are a part of the bridge.

You can only add eth, VLAN, OpenVPN (TAP only), and L2TPv3 ethernet pseudowire

interfaces to your bridge.

Examples To add eth1 to bridge 2, use the following commands:

awplus#configure terminal

awplus(config)#interface eth1

awplus(config-if)#bridge-group 2

To remove eth1 from your bridge, use the following commands:

awplus#configure terminal

awplus(config)#interface eth1

awplus(config-if)#bridge-group

Commands

ageing-time

bridge

show bridge

show bridge macaddr

Parameter Description

<1-64>The ID of the bridge that you are adding the interface to.

C613-50228-01 Rev A Command Reference for AR2050V 457

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

BRIDGING COMMANDS

CLEAR MAC-FILTER COUNTER

clear mac-filter counter

Overview This command clears all the mac-filter counters on a bridge interface.

Syntax clear mac-filter counter

clear mac-filter counter ingress

clear mac-filter counter egress

clear mac-filter counter {ingress|egress} <interface-name>

Default None

Mode Privileged Exec

Examples To clear all ingress counters on eth1, use the following command:

awplus#clear mac-filter counter ingress eth1

To clear all ingress counters, use the following command:

awplus#clear mac-filter counter ingress

To clear all mac-filter counters, use the following command:

awplus#clear mac-filter counter

Commands

mac-filter

mac-filter-group

show mac-filter

rule (macfilter)

Command

changes

Version 5.4.8-0.2: command updated

Parameter Description

ingress Clear only the ingress counters

egress Clear only the egress counters

<interface-name>Clear counters on the specified interface

C613-50228-01 Rev A Command Reference for AR2050V 458

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

BRIDGING COMMANDS

DEFAULT-ACTION

default-action

Overview Use this command to set the default action for packets not hitting a particular

mac-filter.

Use the no variant of this command to remove the configured default action. See

the third example below for more information.

Syntax default-action [permit|deny|none]

no default-action

Default Deny.

Mode MAC Filter Configuration

Example1 To set the default action to none for the mac-filter named: filter1, use the following

commands:

awplus# configure terminal

awplus(config)# mac-filter filter1

awplus(config-macfilter)# default-action none

This means that if this filter is set on ingress traffic for eth1 and that traffic doesn’t

hit any rules in the filter, then the traffic will progress to any other filters present.

For example, there could be a filter on bridge1 that eth1 is a part of. If bridge1 also

has mac filters, then those filters have a chance to examine that traffic ingressing

eth1.

Example 2 To set the default action to permit for the mac-filter named: filter1, use the

following commands:

awplus# configure terminal

awplus(config)# mac-filter filter1

awplus(config-macfilter)# default-action permit

This means that if this filter is set on ingress traffic for eth1 and that traffic doesn’t

hit any rules in the filter, then the traffic will not progress to any other filters

present, and will not undergo any more filtering.

Parameter Description

permit Accept the traffic which didn’t match any rule in the mac-filter.

This means the traffic will not pass through any other mac-filters.

deny Drop the traffic which didn’t hit any rule in the mac-filter.

none Allow the traffic (which didn’t hit any rule in the mac-filter) to

traverse the next mac-filter, if any are configured.

C613-50228-01 Rev A Command Reference for AR2050V 459

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

BRIDGING COMMANDS

DEFAULT-ACTION

Example 3 To set the default action to deny for the mac-filter named: filter1, use the following

commands:

awplus# configure terminal

awplus(config)# mac-filter filter1

awplus(config-macfilter)# default-action deny

This means that if this filter is set on ingress traffic for eth1 and that traffic doesn’t

hit any rules in the filter, then the traffic will be dropped. This is the same as setting

the command no default-action.

Commands

mac-filter

Command

changes

Version 5.4.7-2.1: command added

C613-50228-01 Rev A Command Reference for AR2050V 460

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

BRIDGING COMMANDS

DEFAULT-PROTOCOL-ACTION

default-protocol-action

Overview Use this command to set the default behavior (permit or deny) when a packet does

not match any configured protocol filter. Permit means to continue to the rules (if

rules exist). If there are no rules or no rules match, then continue to the default

action.

Use the no variant of this command to revert to the default filtering action of

‘permit’.

Syntax default-protocol-action {permit|deny}

no default-protocol-action

Default Permit.

Mode MAC Filter Configuration

Example To designate ATL-router1 to deny all packets that do not match the configured

protocol filters, use the following commands:

awplus# configure terminal

awplus(config)# mac-filter ATL-router1

awplus(config-macfilter)# default-protocol-action deny

Commands

protocol ethii (macfilter)

protocol novell (macfilter)

protocol sap (macfilter)

protocol snap (macfilter)

Command

changes

Version 5.4.8-0.2: command added

Parameter Description

permit Allow the packet

deny Drop the packet

C613-50228-01 Rev A Command Reference for AR2050V 461

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

BRIDGING COMMANDS

L3-FILTERING ENABLE

l3-filtering enable

Overview Use this command to enable traffic control for bridged traffic on a bridge interface.

Use the no variant of this command to disable traffic control for bridged traffic on

a bridge interface.

Syntax l3-filtering enable

no l3-filtering enable

Default Traffic control is disabled by default for bridged traffic.

Mode Interface mode for a bridge interface

Example To enable traffic control for bridged traffic on br1, use the commands:

awplus# configure terminal

awplus(config)# interface br1

awplus(config-if)# l3-filtering enable

Commands

traffic-control

Command

changes

Version 5.4.7-0.1: command added. Previously, traffic control was enabled by

default on all bridge interfaces.

C613-50228-01 Rev A Command Reference for AR2050V 462

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

BRIDGING COMMANDS

MAC-FILTER-GROUP EGRESS

mac-filter-group egress

Overview Use this command to apply an egress MAC-filter to a bridge interface, bridge port,

or potential bridge port.

Use the no variant of this command to remove an egress MAC-filter on a specific

bridge interface or bridge port.

Syntax mac-filter-group egress <mac-filter-name>

no mac-filter-group egress

Default No mac-filter.

Mode Interface Configuration

Example To configure MAC-filter ‘filter1’ to operate on traffic egressing tunnel2, use the

following commands:

awplus# configure terminal

awplus(config)# int tunnel2

awplus(config-if)# mac-filter-group egress filter1

To remove that same filter, use the following commands:

awplus# configure terminal

awplus(config)# int tunnel2

awplus(config-if)# no mac-filter-group egress

Commands

mac-filter

show mac-filter

clear mac-filter counter

Command

changes

Version 5.4.8-0.2 command updated.

Parameter Description

<mac-filter-name> The name of the MAC-filter that is applied to the bridge

interface or bridge port on egress.

C613-50228-01 Rev A Command Reference for AR2050V 463

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

BRIDGING COMMANDS

MAC-FILTER

mac-filter

Overview This command creates a Layer 2 MAC filter that can be applied on a bridge.

Use the no variant of this command to remove the MAC filter.

Syntax mac-filter [<mac-filter-name>]

no mac-filter [<mac-filter-name>]

Default None

Mode Interface Configuration

Usage You can only create one MAC filter at one time.

Examples To create a mac-filter with the name of ATL-router1,use the following commands:

awplus#configure terminal

awplus(config)#mac-filter ATL-router1

To delete a mac-filter, use the following commands:

awplus#configure terminal

awplus(config)#no mac-filter ATL-router1

Output None

Commands

clear mac-filter counter

mac-filter-group

show mac-filter

Parameter Description

<mac-filter-name> The name of the mac-filter (maximum of 16 characters).

C613-50228-01 Rev A Command Reference for AR2050V 464

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

BRIDGING COMMANDS

MAC-FILTER-GROUP

mac-filter-group

Overview This command applies a Layer two MAC filter on a bridge.

Use the no variant of this command to remove the mac-filter on a bridge.

Syntax mac-filter-group [<mac-filter-name>]

no mac-filter-group

Default None

Mode Interface Configuration

Usage You can only apply one MAC filter at one time.

Examples To apply a mac-filter with the name of ATL-router1 on bridge interface br1,use the

following commands:

awplus#configure terminal

awplus(config)#interface br1

awplus(config-if)#mac-filter-group ATL-router1

To remove the mac-filter on a bridge, use the following commands:

awplus#configure terminal

awplus(config)#interface br1

awplus(config-if)#no mac-filter-group

Output Figure 13-1: Example output from the mac-filter-group command displaying

information about all bridges:

Commands

clear mac-filter counter

mac-filter

show mac-filter

Parameter Description

<mac-filter-name>The name of the mac-filter (maximum 16 characters).

mac-filter "ATL-router1" will be applied to the bridge interface

br1

C613-50228-01 Rev A Command Reference for AR2050V 465

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

BRIDGING COMMANDS

MAC-LEARNING

mac-learning

Overview Use this command to enable FDB MAC address learning on a bridge interface. In

some circumstances, FDB MAC address learning on a software-based router bridge

is not useful, and it is better to flood the traffic within interfaces associated with the

bridge instance, to ensure the traffic reaches its destination.

Use the no variant of this command to disable or enable FDB MAC address learning

on a bridge.

Syntax mac-learning

no mac-learning

Default Learning is enabled by default.

Mode Interface mode for a bridge interface

Example To turn off learning on bridge 2, use the following commands:

awplus# configure terminal

awplus(config)# interface br2

awplus(config-if)# no mac-learning

To turn learning on bridge 2 back on, use the following commands:

awplus# configure terminal

awplus(config)# interface br2

awplus(config-if)# mac-learning

Command

changes

Version 5.4.7-0.1: command added

C613-50228-01 Rev A Command Reference for AR2050V 466

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

BRIDGING COMMANDS

PROTOCOL ETHII (MACFILTER)

protocol ethii (macfilter)

Overview Use this command to add a bridge protocol filter for Ethernet ll packets. If

ether-type is not specified, then all Ethernet ll packets match the rule.

If ether-type is specified, then only packets having the specified ether-type

matches the rule.

Use the no variant of this command to remove the protocol filter.

Syntax protocol <filter-name> {permit|deny} ethii

protocol <filter-name> {permit|deny} ethii ether-type

<ether-type>

protocol <filter-name> {permit|deny} ethii {after|before}

protocol <filter-name>

protocol <filter-name> {permit|deny} ethii ether-type

<ether-type> {after|before} protocol <filter-name>

no protocol <filter-name>

Parameter Description

<filter-name> Protocol filter name.

permit Allow the matched frame

deny Drop the matched frame

ethii Ethernet type ll frame

ether-type Ethertype of Ethernet ll frame

<ether-type> Ethertype (2 bytes in hexadecimal, e.g. 0800) or any of the well-

known names..

arp ARP (Address Resolution Protocol), 0806

atmf ATMF (Allied Telesis Management Framework),

fbae

atmf-agent ATMF Agent, fbaf

ip IPv4 (Internet Protocol version 4), 0800

ipv6 IPv6 (Internet Protocol version 6), 86dd

loop Loopback (Ethernet Configuration Testing

Protocol), 9000

ppp PPP (Point-to-Point Protocol), 880b

pppoe-disc PPPoE Discovery, 8863

pppoe-sess PPPoE Session, 8864

after Add after the following protocol filter name

before Add before the following protocol filter name.

C613-50228-01 Rev A Command Reference for AR2050V 467

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

BRIDGING COMMANDS

PROTOCOL ETHII (MACFILTER)

Default The default action is permit.

Mode MAC Filter Configuration

Usage This command adds or deletes a protocol filter for bridged traffic in Mac filter

mode.

By default all protocols are permitted, but this can be changed by using the

command: default-protocol-action.

This command, examines packets for each protocol filter in the configured order.

• If a denied protocol filter is matched, then the packet is immediately

dropped without examining the rest of protocol filters and rules

• If a permitted protocol filter is matched, then the packet skips the rest of

protocol filters and continues to examine rules.

Example To allow all IPv4 packets, use the commands:

awplus# configure terminal

awplus(config)# mac-filter ATL-router1

awplus(config-macfilter)# protcol 1 permit ethii ether-type ip

Commands

rule (macfilter)

rule ip (macfilter)

rule ipv6 (macfilter)

default-protocol-action

show mac-filter

clear mac-filter counter

Command

changes

Version 5.4.8-0.2: command added

C613-50228-01 Rev A Command Reference for AR2050V 468

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

BRIDGING COMMANDS

PROTOCOL NOVELL (MACFILTER)

protocol novell (macfilter)

Overview Use this command to add a bridge protocol filter for Novell raw IEEE 802.3 packets..

Use the no variant of this command to remove the protocol filter.

Syntax protocol <filter-name> {permit|deny} novell

protocol <filter-name> {permit|deny} novell {after|before}

protocol <filter-name>

no protocol <filter-name>

Default The default action is permit.

Mode MAC Filter Configuration

Usage This command adds or deletes a protocol filter for bridged traffic in Mac filter

mode.

By default all protocols are permitted, but this can be changed by using the

command: default-protocol-action.

This command, examines packets for each protocol filter in the configured order.

• If a denied protocol filter is matched, then the packet is immediately

dropped without examining the rest of protocol filters and rules

• If a permitted protocol filter is matched, then the packet skips the rest of

protocol filters and continues to examine rules.

Example To allow all Novell IEEE 802.3 packets, use the commands:

awplus# configure terminal

awplus(config)# mac-filter ATL-router1

awplus(config-macfilter)# protcol 1 permit novell

Commands

rule (macfilter)

rule ip (macfilter)

rule ipv6 (macfilter)

Parameter Description

<filter-name> Protocol filter name.

permit Allow the matched frame

deny Drop the matched frame

novell Novell raw IEEE 802.3

after Add after the following protocol filter name

before Add before the following protocol filter name.

C613-50228-01 Rev A Command Reference for AR2050V 469

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

BRIDGING COMMANDS

PROTOCOL NOVELL (MACFILTER)

default-protocol-action

show mac-filter

clear mac-filter counter

Command

changes

Version 5.4.8-0.2: command added

C613-50228-01 Rev A Command Reference for AR2050V 470

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

BRIDGING COMMANDS

PROTOCOL SAP (MACFILTER)

protocol sap (macfilter)

Overview Use this command to add a bridge protocol filter for IEEE 802.3 packets. If sap-type

is not specified, then all IEEE 802.3 packets (including Novell raw IEEE 802.3, IEEE

802.3 with 802.2 LLC and IEEE 802.3 with 802.2 SNAP) match the rule.

If sap-type is specified, then only packets having the specified sap-type matches

the rule.

Use the no variant of this command to remove the protocol filter.

Syntax protocol <filter-name> {permit|deny} sap

protocol <filter-name> {permit|deny} sap sap-type <sap-type>

protocol <filter-name> {permit|deny} sap {after|before}

protocol <filter-name>

protocol <filter-name> {permit|deny} sap sap-type <sap-type>

{after|before} protocol <filter-name>

no protocol <filter-name>

Default The default action is permit. You can change the default by using the command:

default-protocol-action.

Mode MAC Filter Configuration

Usage This command adds or deletes a protocol filter for bridged traffic in Mac filter

mode.

This command, examines packets for each protocol filter in the configured order.

• If a denied protocol filter is matched, then the packet is immediately

dropped without examining the rest of protocol filters and rules

• If a permitted protocol filter is matched, then the packet skips the rest of

protocol filters and continues to examine rules.

Parameter Description

<filter-name>Protocol filter name.

permit Allow the matched frame

deny Drop the matched frame

sap SAP (IEEE 802.3)

sap-type SAP type

<sap-type> SAP type value (1 byte in hexadecimal, e.g. e0)

after Add after the following protocol filter name

before Add before the following protocol filter name.

C613-50228-01 Rev A Command Reference for AR2050V 471

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

BRIDGING COMMANDS

PROTOCOL SAP (MACFILTER)

Example To allow Novell Netware SAP type of 802.2 packets, use the commands:

awplus# configure terminal

awplus(config)# mac-filter ATL-router1

awplus(config-macfilter)# protcol 2 permit sap sap-type e0

Commands

rule (macfilter)

rule ip (macfilter)

rule ipv6 (macfilter)

default-protocol-action

show mac-filter

clear mac-filter counter

Command

changes

Version 5.4.8-0.2: command added

C613-50228-01 Rev A Command Reference for AR2050V 472

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

BRIDGING COMMANDS

PROTOCOL SNAP (MACFILTER)

protocol snap (macfilter)

Overview Use this command to add a bridge protocol filter for SNAP (IEEE 802.3 with 802.2

SNAP) packets. If snap-type is not specified, then all snap packets match the rule.

If snap-type is specified, then only packets having the specified snap-type matches

the rule.

Use the no variant of this command to remove the protocol filter.

Syntax protocol <filter-name> {permit|deny} snap

protocol <filter-name> {permit|deny} snap-type <snap-type>

protocol <filter-name> {permit|deny} snap {after|before}

protocol <filter-name>

protocol <filter-name> {permit|deny} snap snap-type <snap-type>

{after|before} protocol <filter-name>

no protocol <filter-name>

Default The default action is permit.

Mode MAC Filter Configuration

Usage This command adds or deletes a protocol filter for bridged traffic in Mac filter

mode.

By default all protocols are permitted, but this can be changed by using the

command: default-protocol-action.

This command, examines packets for each protocol filter in the configured order.

• If a denied protocol filter is matched, then the packet is immediately

dropped without examining the rest of protocol filters and rules

• If a permitted protocol filter is matched, then the packet skips the rest of

protocol filters and continues to examine rules.

Parameter Description

<filter-name>Protocol filter name.

permit Allow the matched frame

deny Drop the matched frame

snap IEEE 802.2 SNAP

snap-type SNAP type

<snap-type> SNAP protocol ID (2 bytes in hexadecimal, e.g. 0800)

after Add after the following protocol filter name

before Add before the following protocol filter name.

C613-50228-01 Rev A Command Reference for AR2050V 473

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

BRIDGING COMMANDS

PROTOCOL SNAP (MACFILTER)

Example To allow all SNAP packets, use the commands:

awplus# configure terminal

awplus(config)# mac-filter ATL-router1

awplus(config-macfilter)# protcol 3 permit snap

Commands

rule (macfilter)

rule ip (macfilter)

rule ipv6 (macfilter)

default-protocol-action

show mac-filter

clear mac-filter counter

Command

changes

Version 5.4.8-0.2: command added

C613-50228-01 Rev A Command Reference for AR2050V 474

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

BRIDGING COMMANDS

RULE (MACFILTER)

rule (macfilter)

Overview Use this command to add a filter rule to a specified mac-filter. The filter rule can

also be configured to run after or before the specified rule.

Use the no variant of this command to remove a filter rule.

Syntax rule <rule-name> {deny|permit} [dmac {<mac-addr>|any}] [smac

{<mac-addr>|any}] [proto {<ether-type>|any}] [offset <0-1499>

hex-string <match-string>] [{after|before} rule <rule-name>]

no rule <rule-name>

Mode MAC Filter Configuration

Usage The filter rule can specify any combination of the following:

• destination MAC address

• source MAC address

• Ethernet protocol type

• string match from a specific offset of Ethernet data

Parameter Description

<rule-name> The name of the rule (maximum of 16 characters)

deny Drop the matched frame

permit Allow the matched frame

dmac Destination MAC address

smac Source MAC address

<mac-addr>MAC address in HHHH.HHHH.HHHH format

<ether-type>Ethernet protocol type

offset Offset of Ethernet data to match

<0-1499>Offset value (0 is the beginning of the Ethernet data)

hex-string Match with the specified hexadecimal string

<match-string>String to match in hexadecimal (e.g. 01ab)

after Add after the following rule name

before Add before the following rule name

rule <rule-name> Mac Filter rule

C613-50228-01 Rev A Command Reference for AR2050V 475

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

BRIDGING COMMANDS

RULE (MACFILTER)

Example To configure a bridge filter rule (RULE1) that permits any destination MAC address

with the source address of 00c4.6d20.c0f4 with any protocol, use the following

commands:

awplus# configure terminal

awplus(config)# mac-filter ATL-router1

awplus(config-macfilter)# rule RULE1 permit dmac any smac

00c4.6d20.c0f4 proto any

Example To configure a bridge filter rule (RULE2) that permits any broadcast traffic with

0xF2 at the offset of 28 (29th byte) in the Ethernet data, use the following

commands:

awplus# configure terminal

awplus(config)# mac-filter ATL-router1

awplus(config-macfilter)# rule RULE2 permit dmac ffff.ffff.ffff

offset 28 hex-string f2

Commands

show mac-filter

clear mac-filter counter

rule ip (macfilter)

rule ipv6 (macfilter)

Command

changes

Version 5.4.8-0.2: command added

C613-50228-01 Rev A Command Reference for AR2050V 476

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

BRIDGING COMMANDS

RULE IP (MACFILTER)

rule ip (macfilter)

Overview Use this command to add a bridge filter rule based on the IP protocol.

Use the no variant of this command to remove a bridge IP protocol filter.

Syntax rule <name> {deny|permit} ip [src {<ip-addr>|<ip-subnet>}]

[dst {<ip-addr>|<ip-subnet>}] [proto <1-255>] [{after|before}

rule <name>]

rule <name> {deny|permit} ip [src {<ip-addr>|<ip-subnet>}]

[dst {<ip-addr>|<ip-subnet>}] [proto {tcp|udp} [sport

<1-65535>] [dport <1-65535>]] [{after|before} rule <name>]

no rule <name>

Mode MAC Filter Configuration

Example To add a bridge filter rule that permits IP packets with a source address of

192.168.1.1 and a destination address of 10.0.0.0/8 using the TCP protocol to

destination port 23, use the following commands:

awplus# configure terminal

awplus(config)# mac-filter ATL-router1

awplus(config-macfilter)# rule 1 permit ip scr 192.168.1.1 dst

10.0.0.0/8 proto tcp dport 23

Parameter Description

<name>Rule name

deny Drop the matched frame

permit Permit the matched frame

src <ip-addr> Source IP address

src <ip-subnet>Source IP address with subnet prefix length

dst <ip-addr>Destination IP address

dst <ip-subnet>Destination IP address with subnet prefix length

proto <1-255>IP protocol number

proto tcp TCP protocol

proto udp UDP protocol

sport <1-65535>TCP or UDP source port number

dport <1-65535>TCP or UDP destination port number

after Add after the following rule name

before Add before the following rule name

rule <name>MAC Filter rule name

C613-50228-01 Rev A Command Reference for AR2050V 477

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

BRIDGING COMMANDS

RULE IP (MACFILTER)

Commands

show mac-filter

rule (macfilter)

default-protocol-action

Command

changes

Version 5.4.8-0.2: command added

C613-50228-01 Rev A Command Reference for AR2050V 478

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

BRIDGING COMMANDS

RULE IPV6 (MACFILTER)

rule ipv6 (macfilter)

Overview Use this command to add a bridge filter rule based on the IPv6 protocol.

Use the no variant of this command to remove a bridge IPv6 protocol filter.

Syntax rule <name> {deny|permit} ipv6 [src

{<ipv6-addr>|<ipv6-addr/prefix-length>}]

[dst {<ipv6-addr>|<ipv6-addr/prefix-length>}] [proto <1-255>]

[{after|before} rule <name>]

rule <name> {deny|permit} ipv6 [src

{<ipv6-addr>|<ipv6-addr/prefix-length>}]

[dst {<ipv6-addr>|<ipv6-addr/prefix-length>}] [proto {tcp|udp}

[sport <1-65535>] [dport <1-65535>]] [{after|before} rule

<name>]

no rule <name>

Mode MAC Filter Configuration

Parameter Description

<name>Rule name

deny Drop the matched frame

permit Permit the matched frame

src <ipv6-addr> Source IPv6 address

src

<ipv6-addr/prefix-length>

Source IPv6 address with subnet prefix length

dst <ipv6-addr> Destination IPv6 address

dst

<ipv6-addr/prefix-length>

Destination IPv6 address with subnet prefix

length

proto <1-255>IPv6 protocol number

proto tcp TCP protocol

proto udp UDP protocol

sport <1-65535>TCP or UDP source port number

dport <1-65535>TCP or UDP destination port number

after Add after the following rule name

before Add before the following rule name

rule <name>MAC Filter rule name

C613-50228-01 Rev A Command Reference for AR2050V 479

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

BRIDGING COMMANDS

RULE IPV6 (MACFILTER)

Example To add a bridge filter rule that permits IPv6 packets with a source address of

2001: :1 and a destination address of 3001: : /64 using the TCP protocol to

destination port 23, use the following commands:

awplus# configure terminal

awplus(config)# mac-filter ATL-router1

awplus(config-macfilter)# rule 1 permit ipv6 scr 2001::1 dst

3001::/64 proto tcp dport 23

Commands

show mac-filter

rule (macfilter)

protocol sap (macfilter)

Command

changes

Version 5.4.8-0.2: command added

C613-50228-01 Rev A Command Reference for AR2050V 480

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

BRIDGING COMMANDS

SHOW BRIDGE

show bridge

Syntax Use this command to display detailed information about your bridge(s).

Syntax show bridge [<bridge-list>]

Default Displays detailed information about all bridges, if no <bridge-list> is specified.

Mode Privileged Exec

Examples To display information about all bridges, use the following command:

awplus#show bridge

To display information about bridge 2, use the following command:

awplus#show bridge br2

To display information about bridge in the range 1 to 3, use the following

command:

awplus#show bridge br1-3

To display information about bridges 1, and from 3 to 5, use the following

command:

awplus#show bridge br1,br3-5

Output Figure 13-2: Example output from the show bridge command displaying

information about all bridges:

Parameter Description

<bridge-list>The bridge/s to display the information about.

The <bridge-list> can be:

• a single bridge(e.g. br2)

• a continuous range of bridges (e.g. br1-3)

• a comma separated list of bridges and/or ranges (e.g.

br1,br2,br3-br5)

awplus#show bridge 

Bridge Name Aging Timer Interfaces 

------------------------------------------ 

br1 300 eth1 

br2 300 vlan1 

eth2 

br3 300 

br4 300 

br5 300

C613-50228-01 Rev A Command Reference for AR2050V 481

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

BRIDGING COMMANDS

SHOW BRIDGE

Figure 13-3: Example output from the show bridge command displaying

information about bridge 2.

Commands

ageing-time

bridge

bridge-group

show bridge macaddr

awplus#show bridge br2 

Bridge Name Aging Timer Interfaces 

------------------------------------------ 

br2 300 vlan1 

eth2

C613-50228-01 Rev A Command Reference for AR2050V 482

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

BRIDGING COMMANDS

SHOW BRIDGE MACADDR

show bridge macaddr

Overview Use this command to display the MAC entries learned in the MAC table for your

bridge.

Syntax show bridge macaddr <bridge-list>

Mode Global Configuration

Example To display the learned MAC entries for bridge 2, use the following commands:

awplus#configure terminal

awplus(config)#show bridge macaddr br2

Output Figure 13-4: Example output from the show bridge macaddr command

displaying information about bridge 2:

Commands

ageing-time

bridge

bridge-group

show bridge

Parameter Description

<bridge-list>The bridge interfaces to display the information about.

The <bridge-list> can be:

• a single bridge(e.g. br2)

• a continuous range of bridges (e.g. br1-3)

• a comma separated list of bridges and/or ranges (e.g.

br1,br2,br3-br5)

awplus#show bridge macaddr br2 

Bridge Name Interface mac addr is local? ageing 

------------------------------------------------------------------------- 

br2 vlan10 ec:cd:6d:20:c0:fb no 41 

br2 vlan50 00:c4:6d:20:c0:e6 no 0 

br2 vlan50 00:c4:6d:20:c0:e7 no 1 

br2 vlan50 00:c4:6d:20:c0:e8 no 2 

br2 vlan50 00:c4:6d:20:c0:f2 no 12 

br2 vlan50 00:c4:6d:20:c0:f3 no 13 

br2 vlan50 00:c4:6d:20:c0:f4 no 14 

br2 vlan50 ec:cd:6d:20:c0:bd yes 0 

br2 vlan50 ec:cd:6d:48:e4:72 no 41

C613-50228-01 Rev A Command Reference for AR2050V 483

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

BRIDGING COMMANDS

SHOW MAC-FILTER

show mac-filter

Overview This command displays configured protocol filters and rules along with packet and

byte counts on a bridge or an interface that is a member of a bridge.

Syntax show mac-filter [<interface-name>]

Default Displays all MAC filters, rules, and counters for all interfaces on a bridge.

Mode Privileged Exec

Examples To display all MAC filters, rules, and counters for all interfaces on a bridge, use the

following command:

awplus#show mac-filter

Output Figure 13-5: Example output from show mac-filter

Commands

mac-filter

Parameter Description

<interface-name>The interface name. Mac-filters applied to this interface will be

displayed.

awplus#show mac-filter 

Iface Rule Options Pkt Count

Dir / Action Byte Count

-------------------------------------------------------------------------------

br1 a Protocol : Ethernet II 0

in / deny Ether-type : ip 0

br1 Protocol (default action) 0

in / permit 0

br1 Rule (default action) 0

in / permit 0

vlan1 1 IPv4 Src : any 0

out / deny Dst : 192.168.1.20 0

Proto: any 

vlan1 2 IPv6 Src : any 0

out / deny Dst : 2001::20 0

Proto: any 

vlan1 20 DMAC : any 0

out / permit SMAC : any 0

Proto : 0x0800 

vlan1 30 DMAC : any 

out / permit SMAC : any 0

Proto : any 0

Offset: 10 

String: 010203abcd 

vlan1 Rule (default action) 0

out / deny 0

C613-50228-01 Rev A Command Reference for AR2050V 484

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

BRIDGING COMMANDS

SHOW MAC-FILTER

mac-filter-group

Command

changes

Version 5.4.8-0.2: command updated

C613-50228-01 Rev A Command Reference for AR2050V 485

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

VLAN Commands

Introduction

Overview This chapter provides an alphabetical reference of commands used to configure

VLANs. For more information see the VLAN Feature Overview and Configuration

Guide.

Command List •“show vlan” on page 486

•“switchport access vlan” on page 487

•“switchport mode access” on page 488

•“switchport mode trunk” on page 489

•“switchport trunk allowed vlan” on page 490

•“switchport trunk native vlan” on page 493

•“vlan” on page 494

•“vlan database” on page 495

C613-50228-01 Rev A Command Reference for AR2050V 486

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

VLAN COMMANDS

SHOW VLAN

show vlan

Overview Use this command to display information about a particular VLAN by specifying its

VLAN ID. Selecting all will display information for all the VLANs configured.

Syntax show vlan

{all|brief|dynamic|static|auto|static-ports|<1-4094>}

Mode User Exec and Privileged Exec

Example To display information about VLAN 2, use the command:

awplus# show vlan 2

Output Figure 14-1: Example output from the show vlan command

Commands

vlan

Parameter Description

<1-4094> Display information about the VLAN specified by the VLAN ID.

all Display information about all VLANs on the device.

brief Display information about all VLANs on the device.

dynamic Display information about all VLANs learned dynamically.

static Display information about all statically configured VLANs.

auto Display information about all auto-configured VLANs.

static-ports Display static egress/forbidden ports.

VLAN ID Name Type State Member ports

(u)-Untagged, (t)-Tagged

======= ================ ======= ======= ====================================

2 VLAN0002 STATIC ACTIVE port1.0.3(u) port1.0.4(u) port1.0.5(u)

port1.0.6(u)

...

C613-50228-01 Rev A Command Reference for AR2050V 487

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

VLAN COMMANDS

SWITCHPORT ACCESS VLAN

switchport access vlan

Overview Use this command to change the port-based VLAN of the current port.

Use the no variant of this command to change the port-based VLAN of this port to

the default VLAN, vlan1.

Syntax switchport access vlan <vlan-id>

no switchport access vlan

Default Reset the default VLAN 1 to specified switchports using the negated form of this

command.

Mode Interface Configuration

Usage Any untagged frame received on this port will be associated with the specified

VLAN.

Examples To change the port-based VLAN to VLAN 3 for port1.0.2, use the commands:

awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# switchport access vlan 3

To reset the port-based VLAN to the default VLAN 1 for port1.0.2, use the

commands:

awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# no switchport access vlan

Commands

show interface switchport

show vlan

Parameter Description

<vlan-id><1-4094> The port-based VLAN ID for the port.

C613-50228-01 Rev A Command Reference for AR2050V 488

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

VLAN COMMANDS

SWITCHPORT MODE ACCESS

switchport mode access

Overview Use this command to set the switching characteristics of the port to access mode.

Received frames are classified based on the VLAN characteristics, then accepted or

discarded based on the specified filtering criteria.

Syntax switchport mode access [ingress-filter {enable|disable}]

Default By default, ports are in access mode with ingress filtering on.

Usage Use access mode to send untagged frames only.

Mode Interface Configuration

Example awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# switchport mode access ingress-filter enable

Validation

Command

show interface switchport

Parameter Description

ingress-filter Set the ingress filtering for the received frames.

enable Turn on ingress filtering for received frames. This is the default.

disable Turn off ingress filtering to accept frames that do not meet the

classification criteria.

C613-50228-01 Rev A Command Reference for AR2050V 489

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

VLAN COMMANDS

SWITCHPORT MODE TRUNK

switchport mode trunk

Overview Use this command to set the switching characteristics of the port to trunk.

Received frames are classified based on the VLAN characteristics, then accepted or

discarded based on the specified filtering criteria.

Syntax switchport mode trunk [ingress-filter {enable|disable}]

Default By default, ports are in access mode, are untagged members of the default VLAN

(vlan1), and have ingress filtering on.

Mode Interface Configuration

Usage A port in trunk mode can be a tagged member of multiple VLANs, and an untagged

member of one native VLAN.

To configure which VLANs this port will trunk for, use the switchport trunk allowed

vlan command.

Example awplus# configure terminal

awplus(config)# interface port1.0.3

awplus(config-if)# switchport mode trunk ingress-filter enable

Validation

Command

show interface switchport

Parameter Description

ingress-filter Set the ingress filtering for the frames received.

enable Turn on ingress filtering for received frames. This is the default.

disable Turn off ingress filtering to accept frames that do not meet the

classification criteria.

C613-50228-01 Rev A Command Reference for AR2050V 490

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

VLAN COMMANDS

SWITCHPORT TRUNK ALLOWED VLAN

switchport trunk allowed vlan

Overview Use this command to add VLANs to be trunked over this switch port. Traffic for

these VLANs can be sent and received on the port.

Use the no variant of this command to reset switching characteristics of a specified

interface to negate a trunked configuration specified with switchport trunk

allowed vlan command.

Syntax switchport trunk allowed vlan all

switchport trunk allowed vlan none

switchport trunk allowed vlan add <vid-list>

switchport trunk allowed vlan remove <vid-list>

switchport trunk allowed vlan except <vid-list>

no switchport trunk

Default By default, ports are untagged members of the default VLAN (vlan1).

Mode Interface Configuration

Parameter Description

all Allow all VLANs to transmit and receive through the port.

none Allow no VLANs to transmit and receive through the port.

add Add a VLAN to the list of VLANs that are allowed to transmit and

receive through the port. Only use this parameter if a list of VLANs is

already configured on a port.

remove Remove a VLAN from the list of VLANs that are allowed to transmit

and receive through the port. Only use this parameter if a list of

VLANs is already configured on a port.

If you are removing VLAN port membership for a large number of

switchports and VLANs, note that this command may take a number

of minutes to run.

except All VLANs, except the VLAN for which the VID is specified, are part of

its port member set. Only use this parameter to remove VLANs after

either this parameter or the all parameter have added VLANs to a

port.

<vid-list><2-4094> The ID of the VLAN or VLANs that will be added to, or

removed from, the port. A single VLAN, VLAN range, or comma-

separated VLAN list can be set.

For a VLAN range, specify two VLAN numbers: lowest, then highest

number in the range, separated by a hyphen.

For a VLAN list, specify the VLAN numbers separated by commas.

Do not enter spaces between hyphens or commas when setting

parameters for VLAN ranges or lists.

C613-50228-01 Rev A Command Reference for AR2050V 491

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

VLAN COMMANDS

SWITCHPORT TRUNK ALLOWED VLAN

Usage The all parameter sets the port to be a tagged member of all the VLANs configured

on the device. The none parameter removes all VLANs from the port’s tagged

member set. The add and remove parameters will add and remove VLANs to and

from the port’s member set. The except parameter creates an exception to the list.

If you use the all parameter, and then you want to remove VLANs from the port’s

member list, you must use the except parameter to remove the unwanted VLANs.

Similarly, if you use the except parameter to remove a list of VLANs, and you want

to change that list, you must use the except parameter to make that change (not

the add and remove parameters).

For example, if you want to remove VLAN3-5 from a port and the port’s

configuration is currently switchport trunk allowed vlan all, then you should

remove VLAN3-5 by entering the except parameter, instead of using the remove

parameter. This means using the following commands:

awplus# configure terminal

awplus(config)# interface port1.0.6

awplus(config-if)# switchport trunk allowed vlan except 3-5

If you do this, then the configuration changes to:

For example, if you want to add VLAN4 back in again, and the port configuration is

currently switchport trunk allowed vlan except 3-5, then you should add VLAN4

by re-entering the except parameter with the list of VLANs to remove, instead of

using the add parameter. This means using the following commands:

awplus# configure terminal

awplus(config)# interface port1.0.5

awplus(config-if)# switchport trunk allowed vlan except 3,5

If you do this, then the configuration changes to:

awplus#show running-config



interface port1.0.6

switchport

switchport mode trunk

switchport trunk allowed vlan except 3-5

awplus#show running-config



interface port1.0.5

switchport

switchport mode trunk

switchport trunk allowed vlan except 3,5

C613-50228-01 Rev A Command Reference for AR2050V 492

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

VLAN COMMANDS

SWITCHPORT TRUNK ALLOWED VLAN

Examples The following shows adding a single VLAN to the port’s member set.

awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# switchport trunk allowed vlan add 2

The following shows adding a range of VLANs to the port’s member set.

awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# switchport trunk allowed vlan add 2-4

The following shows adding a list of VLANs to the port’s member set.

awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# switchport trunk allowed vlan add 2,3,4

C613-50228-01 Rev A Command Reference for AR2050V 493

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

VLAN COMMANDS

SWITCHPORT TRUNK NATIVE VLAN

switchport trunk native vlan

Overview Use this command to configure the native VLAN for this port. The native VLAN is

used for classifying the incoming untagged packets. Use the none parameter with

this command to remove the native VLAN from the port and set the acceptable

frame types to vlan-tagged only.

Use the no variant of this command to revert the native VLAN to the default VLAN

ID 1. Command negation removes tagged VLANs, and sets the native VLAN to the

default VLAN.

Syntax switchport trunk native vlan {<vid>|none}

no switchport trunk native vlan

Default VLAN 1 (the default VLAN), which is reverted to using the no form of this

command.

Mode Interface Configuration

Examples The following commands show configuration of VLAN 2 as the native VLAN for

port1.0.2:

awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# switchport trunk native vlan 2

The following commands show the removal of the native VLAN for interface

port1.0.2:

awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# switchport trunk native vlan none

The following commands revert the native VLAN to the default VLAN 1 for interface

port1.0.2:

awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# no switchport trunk native vlan

Parameter Description

<vid>The ID of the VLAN that will be used to classify the incoming

untagged packets, in the range 2-2094. The VLAN ID must be a part of

the VLAN member set of the port.

none No native VLAN specified. This option removes the native VLAN from

the port and sets the acceptable frame types to vlan-tagged only.

Note: Use the no variant of this command to revert to the default

VLAN 1 as the native VLAN for the specified interface switchport - not

none.

C613-50228-01 Rev A Command Reference for AR2050V 494

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

VLAN COMMANDS

VLAN

vlan

Overview This command creates VLANs, assigns names to them, and enables or disables

them. Disabling the VLAN causes all forwarding over the specified VLAN ID to

cease. Enabling the VLAN allows forwarding of frames on the specified VLAN.

The no variant of this command destroys the specified VLANs or returns their MTU

to the default.

Syntax vlan <vid> [name <vlan-name>] [state {enable|disable}]

vlan <vid-range> [state {enable|disable}]

vlan {<vid>|<vlan-name>} [mtu <mtu-value>]

no vlan {<vid>|<vid-range>} [mtu]

Default By default, VLANs are enabled when they are created.

Mode VLAN Configuration

Examples To enable vlan 45, use the commands:

awplus# configure terminal

awplus(config)# vlan database

awplus(config-vlan)# vlan 45 name accounts state enable

To destroy vlan 45, use the commands:

awplus# configure terminal

awplus(config)# vlan database

awplus(config-vlan)# no vlan 45

Commands

mtu

vlan database

show vlan

Parameter Description

<vid>The VID of the VLAN to enable or disable, in the range 1-4094.

<vlan-name>The ASCII name of the VLAN. Maximum length: 32 characters.

<vid-range>Specifies a range of VLAN identifiers.

<mtu-value>Specifies the Maximum Transmission Unit (MTU) size in bytes, in the

range 68 to 1500 bytes, for the VLAN.

enable Puts the VLAN into an enabled state.

disable Puts the VLAN into a disabled state.

C613-50228-01 Rev A Command Reference for AR2050V 495

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

VLAN COMMANDS

VLAN DATABASE

vlan database

Overview Use this command to enter the VLAN Configuration mode.

Syntax vlan database

Mode Global Configuration

Usage Use this command to enter the VLAN configuration mode. You can then add or

delete a VLAN, or modify its values.

Example In the following example, note the change to VLAN configuration mode from

Configure mode:

awplus# configure terminal

awplus(config)# vlan database

awplus(config-vlan)#

Commands

vlan

C613-50228-01 Rev A Command Reference for AR2050V 496

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

Spanning Tree

Commands

Introduction

Overview This chapter provides an alphabetical reference for commands used to configure

RSTP, STP or MSTP. For information about spanning trees, including configuration

procedures, see the STP Feature Overview and Configuration Guide.

Command List •“clear spanning-tree statistics” on page 498

•“clear spanning-tree detected protocols (RSTP and MSTP)” on page 499

•“debug mstp (RSTP and STP)” on page 500

•“instance priority (MSTP)” on page 504

•“instance vlan (MSTP)” on page 506

•“region (MSTP)” on page 508

•“revision (MSTP)” on page 509

•“show debugging mstp” on page 510

•“show spanning-tree” on page 511

•“show spanning-tree brief” on page 514

•“show spanning-tree mst” on page 515

•“show spanning-tree mst config” on page 516

•“show spanning-tree mst detail” on page 517

•“show spanning-tree mst detail interface” on page 519

•“show spanning-tree mst instance” on page 521

•“show spanning-tree mst instance interface” on page 522

•“show spanning-tree mst interface” on page 523

•“show spanning-tree mst detail interface” on page 524

•“show spanning-tree statistics” on page 526

C613-50228-01 Rev A Command Reference for AR2050V 497

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

•“show spanning-tree statistics instance” on page 528

•“show spanning-tree statistics instance interface” on page 529

•“show spanning-tree statistics interface” on page 531

•“show spanning-tree vlan range-index” on page 533

•“spanning-tree autoedge (RSTP and MSTP)” on page 534

•“spanning-tree cisco-interoperability (MSTP)” on page 535

•“spanning-tree edgeport (RSTP and MSTP)” on page 536

•“spanning-tree enable” on page 537

•“spanning-tree errdisable-timeout enable” on page 539

•“spanning-tree errdisable-timeout interval” on page 540

•“spanning-tree force-version” on page 541

•“spanning-tree forward-time” on page 542

•“spanning-tree guard root” on page 543

•“spanning-tree hello-time” on page 544

•“spanning-tree link-type” on page 545

•“spanning-tree max-age” on page 546

•“spanning-tree max-hops (MSTP)” on page 547

•“spanning-tree mode” on page 548

•“spanning-tree mst configuration” on page 549

•“spanning-tree mst instance” on page 550

•“spanning-tree mst instance path-cost” on page 551

•“spanning-tree mst instance priority” on page 553

•“spanning-tree mst instance restricted-role” on page 554

•“spanning-tree mst instance restricted-tcn” on page 556

•“spanning-tree path-cost” on page 557

•“spanning-tree portfast (STP)” on page 558

•“spanning-tree portfast bpdu-filter” on page 560

•“spanning-tree portfast bpdu-guard” on page 562

•“spanning-tree priority (bridge priority)” on page 564

•“spanning-tree priority (port priority)” on page 565

•“spanning-tree restricted-role” on page 566

•“spanning-tree restricted-tcn” on page 567

•“spanning-tree transmit-holdcount” on page 568

•“

undebug mstp” on page 569

C613-50228-01 Rev A Command Reference for AR2050V 498

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

CLEAR SPANNING-TREE STATISTICS

clear spanning-tree statistics

Overview Use this command to clear all the STP BPDU (Bridge Protocol Data Unit) statistics.

Syntax clear spanning-tree statistics

clear spanning-tree statistics [instance <mstp-instance>]

clear spanning-tree statistics [interface <port> [instance

<mstp-instance>]]

Mode User Exec and Privileged Exec

Usage Use this command with the instance parameter in MSTP mode. Specifying this

command with the interface parameter only not the instance parameter will work

in STP and RSTP mode.

Examples awplus# clear spanning-tree statistics

awplus# clear spanning-tree statistics instance 1

awplus# clear spanning-tree statistics interface port1.0.2

instance 1

Parameter Description

<port>The port to clear STP BPDU statistics for. The port may be a switch

port (e.g. port1.0.4), a static channel group (e.g. sa2), or a

dynamic (LACP) channel group (e.g. po2).

<mstp-

instance>

The MSTP instance (MSTI - Multiple Spanning Tree Instance) to clear

MSTP BPDU statistics.

C613-50228-01 Rev A Command Reference for AR2050V 499

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

CLEAR SPANNING-TREE DETECTED PROTOCOLS (RSTP AND MSTP)

clear spanning-tree detected protocols

(RSTP and MSTP)

Overview Use this command to clear the detected protocols for a specific port, or all ports.

Use this command in RSTP or MSTP mode only.

Syntax clear spanning-tree detected protocols [interface <port>]

Mode Privileged Exec

Example awplus# clear spanning-tree detected protocols

Parameter Description

<port>The port to clear detected protocols for. The port may be a switch

port (e.g. port1.0.4), a static channel group (e.g. sa2), or a

dynamic (LACP) channel group (e.g. po2).

C613-50228-01 Rev A Command Reference for AR2050V 500

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

DEBUG MSTP (RSTP AND STP)

debug mstp (RSTP and STP)

Overview Use this command to enable debugging for the configured spanning tree mode,

and echo data to the console, at various levels. Note that although this command

uses the keyword mstp it displays debugging output for RSTP and STP protocols

as well the MSTP protocol.

Use the no variant of this command to disable spanning tree debugging.

Syntax debug mstp {all|cli|protocol [detail]|timer [detail]}

debug mstp {packet {rx|tx} [decode] [interface <interface>]}

debug mstp {topology-change [interface <interface>]}

no debug mstp {all|cli|protocol [detail]|timer [detail]}

no debug mstp {packet {rx|tx} [decode] [interface <interface>]}

no debug mstp {topology-change [interface <interface>]}

Mode Privileged Exec and Global Configuration mode

Usage 1 Use the debug mstp topology-change interface command to generate

debugging messages when the device receives an indication of a topology change

in a BPDU from another device. The debugging can be activated on a per-port

basis. Although this command uses the keyword mstp, it displays debugging

output for RSTP and STP protocols as well as the MSTP protocol.

Due to the likely volume of output, these debug messages are best viewed using

the terminal monitor command before issuing the relevant debug mstp

Parameter Description

all Echoes all spanning tree debugging levels to the console.

cli Echoes spanning tree commands to the console.

packet Echoes spanning tree packets to the console.

rx Received packets.

tx Transmitted packets.

protocol Echoes protocol changes to the console.

timer Echoes timer information to the console.

detail Detailed output.

decode Interprets packet contents

topology-change Interprets topology change messages

interface Keyword before <interface> placeholder to specify an

interface to debug

<interface>Placeholder used to specify the name of the interface to

debug.

C613-50228-01 Rev A Command Reference for AR2050V 501

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

DEBUG MSTP (RSTP AND STP)

command. The default terminal monitor filter will select and display these

messages. Alternatively, the messages can be directed to any of the other log

outputs by adding a filter for the MSTP application using log buffered (filter)

command:

awplus# configure terminal

awplus(config)# log buffered program mstp

Output 1

Usage 2 Use the debug mstp packet rx|tx decode interface command to generate

debugging messages containing the entire contents of a BPDU displayed in

readable text for transmitted and received xSTP BPDUs. The debugging can be

activated on a per-port basis and transmit and receive debugging is controlled

independently. Although this command uses the keyword mstp, it displays

debugging output for RSTP and STP protocols as well as the MSTP protocol.

Due to the likely volume of output, these debug messages are best viewed using

the terminal monitor command before issuing the relevant debug mstp

command. The default terminal monitor filter will select and display these

messages. Alternatively, the messages can be directed to any of the other log

outputs by adding a filter for the MSTP application using the log buffered (filter)

command:

awplus(config)# log buffered program mstp

Output 2 In MSTP mode - an MSTP BPDU with 1 MSTI:

awplus#terminal monitor

awplus#debug mstp topology-change interface port1.0.4

10:09:09 awplus MSTP[1409]: Topology change rcvd on port1.0.4 (internal)

10:09:09 awplus MSTP[1409]: Topology change rcvd on MSTI 1 port1.0.4

aawplus#debug mstp topology-change interface port1.0.6

10:09:29 awplus MSTP[1409]: Topology change rcvd on port1.0.6 (external)

10:09:29 awplus MSTP[1409]: Topology change rcvd on MSTI 1 port1.0.6

C613-50228-01 Rev A Command Reference for AR2050V 502

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

DEBUG MSTP (RSTP AND STP)

In STP mode transmitting a TCN BPDU:

In STP mode receiving an STP BPDU:

In RSTP mode receiving an RSTP BPDU:

awplus#terminal monitor

awplus#debug mstp packet rx decode interface port1.0.4

17:23:42 awplus MSTP[1417]: port1.0.4 xSTP BPDU rx - start

17:23:42 awplus MSTP[1417]: Protocol version: MSTP, BPDU type: RST

17:23:42 awplus MSTP[1417]: CIST Flags: Agree Forward Learn role=Desig

17:23:42 awplus MSTP[1417]: CIST root id : 0000:0000cd1000fe

17:23:42 awplus MSTP[1417]: CIST ext pathcost : 0

17:23:42 awplus MSTP[1417]: CIST reg root id : 0000:0000cd1000fe

17:23:42 awplus MSTP[1417]: CIST port id : 8001 (128:1)

17:23:42 awplus MSTP[1417]: msg age: 0 max age: 20 hellotime: 2 fwd delay: 15

17:23:42 awplus MSTP[1417]: Version 3 length : 80

17:23:42 awplus MSTP[1417]: Format id : 0

17:23:42 awplus MSTP[1417]: Config name : test

17:23:42 awplus MSTP[1417]: Revision level : 0

17:23:42 awplus MSTP[1417]: Config digest : 3ab68794d602fdf43b21c0b37ac3bca8

17:23:42 awplus MSTP[1417]: CIST int pathcost : 0

17:23:42 awplus MSTP[1417]: CIST bridge id : 0000:0000cd1000fe

17:23:42 awplus MSTP[1417]: CIST hops remaining : 20

17:23:42 awplus MSTP[1417]: MSTI flags : Agree Forward Learn role=Desig

17:23:42 awplus MSTP[1417]: MSTI reg root id : 8001:0000cd1000fe

17:23:42 awplus MSTP[1417]: MSTI pathcost : 0

17:23:42 awplus MSTP[1417]: MSTI bridge priority : 32768 port priority : 128

17:23:42 awplus MSTP[1417]: MSTI hops remaining : 20

17:23:42 awplus MSTP[1417]: port1.0.4 xSTP BPDU rx - finish

awplus#terminal monitor

awplus#debug mstp packet tx decode interface port1.0.4

17:28:09 awplus MSTP[1417]: port1.0.4 xSTP BPDU tx - start

17:28:09 awplus MSTP[1417]: Protocol version: STP, BPDU type: TCN

17:28:09 awplus MSTP[1417]: port1.0.4 xSTP BPDU tx - finish

awplus#terminal monitor

awplus#debug mstp packet rx decode interface port1.0.4

17:31:36 awplus MSTP[1417]: port1.0.4 xSTP BPDU rx - start

17:31:36 awplus MSTP[1417]: Protocol version: STP, BPDU type: Config

17:31:36 awplus MSTP[1417]: Flags: role=none

17:31:36 awplus MSTP[1417]: Root id : 8000:0000cd1000fe

17:31:36 awplus MSTP[1417]: Root pathcost : 0

17:31:36 awplus MSTP[1417]: Bridge id : 8000:0000cd1000fe

17:31:36 awplus MSTP[1417]: Port id : 8001 (128:1)

17:31:36 awplus MSTP[1417]: msg age: 0 max age: 20 hellotime: 2 fwd delay: 15

17:31:36 awplus MSTP[1417]: ort1.0.4 xSTP BPDU rx - finish



C613-50228-01 Rev A Command Reference for AR2050V 503

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

DEBUG MSTP (RSTP AND STP)

Examples awplus# debug mstp all

awplus# debug mstp cli

awplus# debug mstp packet rx

awplus# debug mstp protocol detail

awplus# debug mstp timer

awplus# debug mstp packet rx decode interface port1.0.2

awplus# debug mstp packet tx decode interface port1.0.6

Commands

log buffered (filter)

show debugging mstp

terminal monitor

undebug mstp

awplus#terminal monitor

awplus#debug mstp packet rx decode interface port1.0.4

awplus#17:30:17 awplus MSTP[1417]: port1.0.4 xSTP BPDU rx - start

17:30:17 awplus MSTP[1417]: Protocol version: RSTP, BPDU type: RST

17:30:17 awplus MSTP[1417]: CIST Flags: Forward Learn role=Desig

17:30:17 awplus MSTP[1417]: CIST root id : 8000:0000cd1000fe

17:30:17 awplus MSTP[1417]: CIST ext pathcost : 0

17:30:17 awplus MSTP[1417]: CIST reg root id : 8000:0000cd1000fe

17:30:17 awplus MSTP[1417]: CIST port id : 8001 (128:1)

17:30:17 awplus MSTP[1417]: msg age: 0 max age: 20 hellotime: 2 fwd delay: 15

17:30:17 awplus MSTP[1417]: port1.0.4 xSTP BPDU rx - finish

C613-50228-01 Rev A Command Reference for AR2050V 504

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

INSTANCE PRIORITY (MSTP)

instance priority (MSTP)

Overview Use this command to set the priority for this device to become the root bridge for

the specified MSTI (Multiple Spanning Tree Instance).

Use this command for MSTP only.

Use the no variant of this command to restore the root bridge priority of the device

for the instance to the default.

Syntax instance <instance-id> priority <priority>

no instance <instance-id> priority

Default The default priority value for all instances is 32768.

Mode MST Configuration

Usage MSTP lets you distribute traffic more efficiently across a network by blocking

different links for different VLANs. You do this by making different devices into the

root bridge for each MSTP instance, so that each instance blocks a different link.

If all devices have the same root bridge priority for the instance, MSTP selects the

device with the lowest MAC address to be the root bridge. Give the device a higher

priority for becoming the root bridge for a particular instance by assigning it a

lower priority number, or vice versa.

Examples To set the root bridge priority for MSTP instance 2 to be the highest (0), so that it

will be the root bridge for this instance when available, use the commands:

awplus# configure terminal

awplus(config)# spanning-tree mst configuration

awplus(config-mst)# instance 2 priority 0

To reset the root bridge priority for instance 2 to the default (32768), use the

commands:

awplus# configure terminal

awplus(config)# spanning-tree mst configuration

awplus(config-mst)# no instance 2 priority

Parameter Description

<instance-id>Specify an MSTP instance in the range 1-5.

<priority> Specify the root bridge priority for the device for the MSTI in the

range <0-61440>. Note that a lower priority number indicates a

greater likelihood of the device becoming the root bridge. The

priority values can be set only in increments of 4096. If you

specify a number that is not a multiple of 4096, it will be rounded

down. The default priority is 32768.

C613-50228-01 Rev A Command Reference for AR2050V 505

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

INSTANCE PRIORITY (MSTP)

Commands

region (MSTP)

revision (MSTP)

show spanning-tree mst config

spanning-tree mst instance

spanning-tree mst instance priority

C613-50228-01 Rev A Command Reference for AR2050V 506

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

INSTANCE VLAN (MSTP)

instance vlan (MSTP)

Overview Use this command to create an MST Instance (MSTI), and associate the specified

VLANs with it. An MSTI is a spanning tree instance that exists within an MST region

(MSTR).

When a VLAN is associated with an MSTI the member ports of the VLAN are

automatically configured to send and receive spanning-tree information for the

associated MSTI. You can disable this automatic configuration of member ports of

the VLAN to the associated MSTI by using a no spanning-tree mst instance

command to remove the member port from the MSTI.

Use the instance vlan command for MSTP only.

Use the no variant of this command to remove the specified VLANs from the MSTI.

Syntax instance <instance-id> vlan <vid-list>

no instance <instance-id> vlan <vid-list>

Mode MST Configuration

Usage The VLANs must be created before being associated with an MST instance (MSTI).

If the VLAN range is not specified, the MSTI will not be created.

This command removes the specified VLANs from the CIST and adds them to the

specified MSTI. If you use the no variant of this command to remove the VLAN from

the MSTI, it returns it to the CIST. To move a VLAN from one MSTI to another, you

must first use the no variant of this command to return it to the CIST.

Ports in these VLANs will remain in the control of the CIST until you associate the

ports with the MSTI using the spanning-tree mst instance command.

Example To associate VLAN 30 with MSTI 2, use the commands:

awplus# configure terminal

awplus(config)# spanning-tree mode mstp

awplus(config)# spanning-tree mst configuration

awplus(config-mst)# instance 2 vlan 30

Parameter Description

<instance-id>Specify an MSTP instance in the range 1-5.

<vid-list> Specify one or more VLAN identifiers (VID) to be associated with

the MSTI specified. This can be a single VID in the range 1-4094,

or a hyphen-separated range or a comma-separated list of VLAN

IDs.

C613-50228-01 Rev A Command Reference for AR2050V 507

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

INSTANCE VLAN (MSTP)

Commands

region (MSTP)

revision (MSTP)

show spanning-tree mst config

spanning-tree mst instance

vlan

C613-50228-01 Rev A Command Reference for AR2050V 508

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

REGION (MSTP)

region (MSTP)

Overview Use this command to assign a name to the device’s MST Region. MST Instances

(MSTI) of a region form different spanning trees for different VLANs.

Use this command for MSTP only.

Use the no variant of this command to remove this region name and reset it to the

default.

Syntax region <region-name>

no region

Default By default, the region name is My Name.

Mode MST Configuration

Usage The region name, the revision number, and the digest of the VLAN to MSTI

configuration table must be the same on all devices that are intended to be in the

same MST region.

Example awplus# configure terminal

awplus(config)# spanning-tree mst configuration

awplus(config-mst)# region ATL

Commands

revision (MSTP)

show spanning-tree mst config

Parameter Description

<region-name>Specify the name of the region, up to 32 characters. Valid

characters are upper-case, lower-case, digits, underscore.

C613-50228-01 Rev A Command Reference for AR2050V 509

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

REVISION (MSTP)

revision (MSTP)

Overview Use this command to specify the MST revision number to be used in the

configuration identifier.

Use this command for MSTP only.

Syntax revision <revision-number>

Default The default of revision number is 0.

Mode MST Configuration

Usage The region name, the revision number, and the digest of the VLAN to MSTI

configuration table must be the same on all devices that are intended to be in the

same MST region.

Example awplus# configure terminal

awplus(config)# spanning-tree mst configuration

awplus(config-mst)# revision 25

Commands

region (MSTP)

show spanning-tree mst config

instance vlan (MSTP)

Parameter Description

<revision-number><0-65535> Revision number.

C613-50228-01 Rev A Command Reference for AR2050V 510

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SHOW DEBUGGING MSTP

show debugging mstp

Overview Use this command to show the MSTP debugging options set.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide.

Syntax show debugging mstp

Mode User Exec and Privileged Exec mode

Example To display the MSTP debugging options set, enter the command:

awplus# show debugging mstp

Output Figure 15-1: Example output from show debugging mstp

Commands

debug mstp (RSTP and STP)

MSTP debugging status:

MSTP receiving packet debugging is on

C613-50228-01 Rev A Command Reference for AR2050V 511

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SHOW SPANNING-TREE

show spanning-tree

Overview Use this command to display detailed spanning tree information on the specified

port or on all ports. Use this command for RSTP, MSTP or STP.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide.

Syntax show spanning-tree [interface <port-list>]

Mode User Exec and Privileged Exec

Usage Note that any list of interfaces specified must not span any interfaces that are not

installed.

A topology change counter has been included for RSTP and MSTP. You can see the

topology change counter for RSTP by using the show spanning-tree command.

You can see the topology change counter for MSTP by using the show

spanning-tree mst instance command.

Example To display spanning tree information about port1.0.3, use the command:

awplus# show spanning-tree interface port1.0.3

Parameter Description

interface Display information about the following port only.

<port-list>The ports to display information about. A port-list can be:

• a switch port (e.g. port1.0.6) a static channel group (e.g. sa2) or a

dynamic (LACP) channel group (e.g. po2)

• a continuous range of ports separated by a hyphen, e.g.

port1.0.1-1.0.4, or sa1-2, or po1-2

• a comma-separated list of ports and port ranges, e.g.

port1.0.1,port1.0.4-1.0.6. Do not mix switch ports, static channel

groups, and dynamic (LACP) channel groups in the same list

C613-50228-01 Rev A Command Reference for AR2050V 512

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SHOW SPANNING-TREE

Output Figure 15-2: Example output from show spanning-tree in RSTP mode

Output Figure 15-3: Example output from show spanning-tree

awplus#show spanning-tree

% 1: Bridge up - Spanning Tree Enabled

% 1: Root Path Cost 0 - Root Port 0 - Bridge Priority 32768

% 1: Forward Delay 15 - Hello Time 2 - Max Age 20

% 1: Root Id 80000000cd24ff2d

% 1: Bridge Id 80000000cd24ff2d

% 1: last topology change Mon Oct 3 02:06:26 2016

% 1: portfast bpdu-filter disabled

% 1: portfast bpdu-guard disabled

% 1: portfast errdisable timeout disabled

% 1: portfast errdisable timeout interval 300 sec

% port1.0.1: Port 5001 - Id 8389 - Role Disabled - State Discarding

% port1.0.1: Designated Path Cost 0

% port1.0.1: Configured Path Cost 20000000 - Add type Explicit ref count 1

% port1.0.1: Designated Port Id 8389 - Priority 128 -

% port1.0.1: Root 80000000cd24ff2d

% port1.0.1: Designated Bridge 80000000cd24ff2d

% port1.0.1: Message Age 0 - Max Age 20

% port1.0.1: Hello Time 2 - Forward Delay 15

% port1.0.1: Forward Timer 0 - Msg Age Timer 0 - Hello Timer 0 - topo change 

timer 0

% port1.0.1: forward-transitions 0

% port1.0.1: Version Rapid Spanning Tree Protocol - Received None - Send STP

% port1.0.1: No portfast configured - Current portfast off

% port1.0.1: portfast bpdu-guard default - Current portfast bpdu-guard off

% port1.0.1: portfast bpdu-filter default - Current portfast bpdu-filter off

% port1.0.1: no root guard configured - Current root guard off

% port1.0.1: Configured Link Type point-to-point - Current shared

%

% port1.0.2: Port 5002 - Id 838a - Role Disabled - State Discarding

% port1.0.2: Designated Path Cost 0

% port1.0.2: Configured Path Cost 20000000 - Add type Explicit ref count 1

% port1.0.2: Designated Port Id 838a - Priority 128 -

% port1.0.2: Root 80000000cd24ff2d

% port1.0.2: Designated Bridge 80000000cd24ff2d

% port1.0.2: Message Age 0 - Max Age 20

% port1.0.2: Hello Time 2 - Forward Delay 15

% port1.0.2: Forward Timer 0 - Msg Age Timer 0 - Hello Timer 0 - topo change 

timer 0

% port1.0.2: forward-transitions 0

% port1.0.2: Version Rapid Spanning Tree Protocol - Received None - Send STP

% port1.0.2: No portfast configured - Current portfast off

% port1.0.2: portfast bpdu-guard default - Current portfast bpdu-guard off

% port1.0.2: portfast bpdu-filter default - Current portfast bpdu-filter off

% port1.0.2: no root guard configured - Current root guard off

% port1.0.2: Configured Link Type point-to-point - Current shared

C613-50228-01 Rev A Command Reference for AR2050V 513

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SHOW SPANNING-TREE

% 1: Bridge up - Spanning Tree Enabled

% 1: Root Path Cost 0 - Root Port 0 - Bridge Priority 32768

% 1: Forward Delay 15 - Hello Time 2 - Max Age 20

% 1: Root Id 80000000cd20f093

% 1: Bridge Id 80000000cd20f093

% 1: last topology change Mon Oct 3 02:06:26 2016

% 1: portfast bpdu-filter disabled

% 1: portfast bpdu-guard disabled

% 1: portfast errdisable timeout disabled

% 1: portfast errdisable timeout interval 300 sec

% port1.0.3: Port 5023 - Id 839f - Role Designated - State Forwarding

% port1.0.3: Designated Path Cost 0

% port1.0.3: Configured Path Cost 200000 - Add type Explicit ref count 1

% port1.0.3: Designated Port Id 839f - Priority 128 -

% port1.0.3: Root 80000000cd20f093

% port1.0.3: Designated Bridge 80000000cd20f093

% port1.0.3: Message Age 0 - Max Age 20

% port1.0.3: Hello Time 2 - Forward Delay 15

% port1.0.3: Forward Timer 0 - Msg Age Timer 0 - Hello Timer 1 - topo change 

timer 0

% port1.0.3: forward-transitions 32

% port1.0.3: Version Rapid Spanning Tree Protocol - Received None - Send RSTP

% port1.0.3: No portfast configured - Current portfast off

% port1.0.3: portfast bpdu-guard default - Current portfast bpdu-guard off

% port1.0.3: portfast bpdu-filter default - Current portfast bpdu-filter off

% port1.0.3: no root guard configured - Current root guard off

% port1.0.3: Configured Link Type point-to-point - Current point-to-point

...

C613-50228-01 Rev A Command Reference for AR2050V 514

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SHOW SPANNING-TREE BRIEF

show spanning-tree brief

Overview Use this command to display a summary of spanning tree status information on all

ports. Use this command for RSTP, MSTP or STP.

Syntax show spanning-tree brief

Mode User Exec and Privileged Exec

Usage Note that any list of interfaces specified must not span any interfaces that are not

installed.

A topology change counter has been included for RSTP and MSTP. You can see the

topology change counter for RSTP by using the show spanning-tree command.

You can see the topology change counter for MSTP by using the show

spanning-tree mst instance command.

Example To display a summary of spanning tree status information, use the command:

awplus# show spanning-tree brief

Output Figure 15-4: Example output from show spanning-tree brief

Commands

show spanning-tree

Parameter Description

brief A brief summary of spanning tree information.

Default: Bridge up - Spanning Tree Enabled

Default: Root Path Cost 40000 - Root Port 4501 - Bridge Priority 32768

Default: Root Id 8000:0000cd250001

Default: Bridge Id 8000:0000cd296eb1



Port Designated Bridge Port Id Role State

sa1 8000:001577c9744b 8195 Rootport Forwarding

po1 8000:0000cd296eb1 81f9 Designated Forwarding

port1.0.1 8000:0000cd296eb1 8389 Disabled Discarding

port1.0.2 8000:0000cd296eb1 838a Disabled Discarding

port1.0.3 8000:0000cd296eb1 838b Disabled Discarding

...

C613-50228-01 Rev A Command Reference for AR2050V 515

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SHOW SPANNING-TREE MST

show spanning-tree mst

Overview This command displays bridge-level information about the CIST and VLAN to MSTI

mappings.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide.

Syntax show spanning-tree mst

Mode User Exec, Privileged Exec and Interface Configuration

Example To display bridge-level information about the CIST and VLAN to MSTI mappings,

enter the command:

awplus# show spanning-tree mst

Output Figure 15-5: Example output from show spanning-tree mst

Commands

show spanning-tree mst interface

% 1: Bridge up - Spanning Tree Enabled

% 1: CIST Root Path Cost 0 - CIST Root Port 0 - CIST Bridge 

Priority 32768

% 1: Forward Delay 15 - Hello Time 2 - Max Age 20 - Max-hops 20

% 1: CIST Root Id 8000000475e93ffe

% 1: CIST Reg Root Id 8000000475e93ffe

% 1: CST Bridge Id 8000000475e93ffe

% 1: portfast bpdu-filter disabled

% 1: portfast bpdu-guard disabled

% 1: portfast errdisable timeout disabled

% 1: portfast errdisable timeout interval 300 sec

%

% Instance VLAN

% 0: 1

% 2: 4

C613-50228-01 Rev A Command Reference for AR2050V 516

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SHOW SPANNING-TREE MST CONFIG

show spanning-tree mst config

Overview Use this command to display MSTP configuration identifier for the device.

Syntax show spanning-tree mst config

Mode User Exec, Privileged Exec and Interface Configuration

Usage The region name, the revision number, and the digest of the VLAN to MSTI

configuration table must be the same on all devices that are intended to be in the

same MST region.

Example To display MSTP configuration identifier information, enter the command:

awplus# show spanning-tree mst config

Output Figure 15-6: Example output from show spanning-tree mst config

Commands

instance vlan (MSTP)

region (MSTP)

revision (MSTP)

awplus#show spanning-tree mst config

%

% MSTP Configuration Information:

%------------------------------------------------------

% Format Id : 0

% Name : My Name

% Revision Level : 0

% Digest : 0x80DEE46DA92A98CF21C603291B22880A

%------------------------------------------------------

C613-50228-01 Rev A Command Reference for AR2050V 517

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SHOW SPANNING-TREE MST DETAIL

show spanning-tree mst detail

Overview This command displays detailed information about each instance, and all

interfaces associated with that particular instance.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide.

Syntax show spanning-tree mst detail

Mode User Exec, Privileged Exec and Interface Configuration

Example To display detailed information about each instance, and all interfaces associated

with them, enter the command:

awplus# show spanning-tree mst detail

Output Figure 15-7: Example output from show spanning-tree mst detail

% 1: Bridge up - Spanning Tree Enabled

% 1: CIST Root Path Cost 0 - CIST Root Port 0 - CIST Bridge Priority 32768

% 1: Forward Delay 15 - Hello Time 2 - Max Age 20 - Max-hops 20

% 1: CIST Root Id 80000000cd24ff2d

% 1: CIST Reg Root Id 80000000cd24ff2d

% 1: CIST Bridge Id 80000000cd24ff2d

% 1: portfast bpdu-filter disabled

% 1: portfast bpdu-guard disabled

% 1: portfast errdisable timeout disabled

% 1: portfast errdisable timeout interval 300 sec

% port1.0.1: Port 5001 - Id 8389 - Role Disabled - State Discarding

% port1.0.1: Designated External Path Cost 0 -Internal Path Cost 0

% port1.0.1: Configured Path Cost 20000000 - Add type Explicit ref count 1

% port1.0.1: Designated Port Id 8389 - CIST Priority 128 -

% port1.0.1: CIST Root 80000000cd24ff2d

% port1.0.1: Regional Root 80000000cd24ff2d

% port1.0.1: Designated Bridge 80000000cd24ff2d

% port1.0.1: Message Age 0 - Max Age 20

% port1.0.1: CIST Hello Time 2 - Forward Delay 15

% port1.0.1: CIST Forward Timer 0 - Msg Age Timer 0 - Hello Timer 0 - topo 

change timer 0

...

% port1.0.2: forward-transitions 0

% port1.0.2: Version Multiple Spanning Tree Protocol - Received None - Send STP

% port1.0.2: No portfast configured - Current portfast off

% port1.0.2: portfast bpdu-guard default - Current portfast bpdu-guard off

% port1.0.2: portfast bpdu-filter default - Current portfast bpdu-filter off

% port1.0.2: no root guard configured - Current root guard off

% port1.0.2: Configured Link Type point-to-point - Current shared

C613-50228-01 Rev A Command Reference for AR2050V 518

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SHOW SPANNING-TREE MST DETAIL

% port1.0.3: Port 5003 - Id 838b - Role Disabled - State Discarding

% port1.0.3: Designated External Path Cost 0 -Internal Path Cost 0

% port1.0.3: Configured Path Cost 20000000 - Add type Explicit ref count 1

% port1.0.3: Designated Port Id 838b - CIST Priority 128 -

% port1.0.3: CIST Root 80000000cd24ff2d

% port1.0.3: Regional Root 80000000cd24ff2d

% port1.0.3: Designated Bridge 80000000cd24ff2d

% port1.0.3: Message Age 0 - Max Age 20

% port1.0.3: CIST Hello Time 2 - Forward Delay 15

% port1.0.3: CIST Forward Timer 0 - Msg Age Timer 0 - Hello Timer 0 - topo 

change timer 0

% port1.0.3: forward-transitions 0

% port1.0.3: Version Multiple Spanning Tree Protocol - Received None - Send STP

% port1.0.3: No portfast configured - Current portfast off

% port1.0.3: portfast bpdu-guard default - Current portfast bpdu-guard off

% port1.0.3: portfast bpdu-filter default - Current portfast bpdu-filter off

% port1.0.3: no root guard configured - Current root guard off

% port1.0.3: Configured Link Type point-to-point - Current shared

C613-50228-01 Rev A Command Reference for AR2050V 519

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SHOW SPANNING-TREE MST DETAIL INTERFACE

show spanning-tree mst detail interface

Overview This command displays detailed information about the specified switch port, and

the MST instances associated with it.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide.

Syntax show spanning-tree mst detail interface <port>

Mode User Exec, Privileged Exec and Interface Configuration

Example To display detailed information about port1.0.3 and the instances associated

with it, enter the command:

awplus# show spanning-tree mst detail interface port1.0.3

Output Figure 15-8: Example output from show spanning-tree mst detail interface

Parameter Description

<port>The port to display information about. The port may be a switch port

(e.g. port1.0.4), a static channel group (e.g. sa2), or a dynamic

(LACP) channel group (e.g. po2).

% 1: Bridge up - Spanning Tree Enabled

% 1: CIST Root Path Cost 0 - CIST Root Port 0 - CIST Bridge Priority 32768

% 1: Forward Delay 15 - Hello Time 2 - Max Age 20 - Max-hops 20

% 1: CIST Root Id 80000000cd24ff2d

% 1: CIST Reg Root Id 80000000cd24ff2d

% 1: CIST Bridge Id 80000000cd24ff2d

% 1: portfast bpdu-filter disabled

% 1: portfast bpdu-guard disabled

% 1: portfast errdisable timeout disabled

% 1: portfast errdisable timeout interval 300 sec

% port1.0.2: Port 5002 - Id 838a - Role Disabled - State Discarding

% port1.0.2: Designated External Path Cost 0 -Internal Path Cost 0

% port1.0.2: Configured Path Cost 20000000 - Add type Explicit ref count 2

% port1.0.2: Designated Port Id 838a - CIST Priority 128 -

% port1.0.2: CIST Root 80000000cd24ff2d

% port1.0.2: Regional Root 80000000cd24ff2d

% port1.0.2: Designated Bridge 80000000cd24ff2d

% port1.0.2: Message Age 0 - Max Age 20

% port1.0.2: CIST Hello Time 2 - Forward Delay 15

% port1.0.2: CIST Forward Timer 0 - Msg Age Timer 0 - Hello Timer 0 - topo 

change timer 0

% port1.0.2: forward-transitions 0

% port1.0.2: Version Multiple Spanning Tree Protocol - Received None - Send STP

C613-50228-01 Rev A Command Reference for AR2050V 520

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SHOW SPANNING-TREE MST DETAIL INTERFACE

% port1.0.2: No portfast configured - Current portfast off

% port1.0.2: portfast bpdu-guard default - Current portfast bpdu-guard off

% port1.0.2: portfast bpdu-filter default - Current portfast bpdu-filter off

% port1.0.2: no root guard configured - Current root guard off

% port1.0.2: Configured Link Type point-to-point - Current shared

%

% Instance 2: Vlans: 2

% 1: MSTI Root Path Cost 0 -MSTI Root Port 0 - MSTI Bridge Priority 32768

% 1: MSTI Root Id 80020000cd24ff2d

% 1: MSTI Bridge Id 80020000cd24ff2d

% port1.0.2: Port 5002 - Id 838a - Role Disabled - State Discarding

% port1.0.2: Designated Internal Path Cost 0 - Designated Port Id 838a

% port1.0.2: Configured Internal Path Cost 20000000

% port1.0.2: Configured CST External Path cost 20000000

% port1.0.2: CST Priority 128 - MSTI Priority 128

% port1.0.2: Designated Root 80020000cd24ff2d

% port1.0.2: Designated Bridge 80020000cd24ff2d

% port1.0.2: Message Age 0 - Max Age 0

% port1.0.2: Hello Time 2 - Forward Delay 15

% port1.0.2: Forward Timer 0 - Msg Age Timer 0 - Hello Timer 0

C613-50228-01 Rev A Command Reference for AR2050V 521

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SHOW SPANNING-TREE MST INSTANCE

show spanning-tree mst instance

Overview This command displays detailed information for the specified instance, and all

switch ports associated with that instance.

A topology change counter has been included for RSTP and MSTP. You can see the

topology change counter for RSTP by using the show spanning-tree command.

You can see the topology change counter for MSTP by using the show

spanning-tree mst instance command.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide.

Syntax show spanning-tree mst instance <instance-id>

Mode User Exec, Privileged Exec, and Interface Configuration

Example To display detailed information for instance 2, and all switch ports associated with

that instance, use the command:

awplus# show spanning-tree mst instance 2

Output Figure 15-9: Example output from show spanning-tree mst instance

Parameter Description

<instance-id>Specify an MSTP instance in the range 1-5.

% 1: MSTI Root Path Cost 0 - MSTI Root Port 0 - MSTI Bridge Priority 32768

% 1: MSTI Root Id 80020000cd24ff2d

% 1: MSTI Bridge Id 80020000cd24ff2d

% port1.0.2: Port 5002 - Id 838a - Role Disabled - State Discarding

% port1.0.2: Designated Internal Path Cost 0 - Designated Port Id 838a

% port1.0.2: Configured Internal Path Cost 20000000

% port1.0.2: Configured CST External Path cost 20000000

% port1.0.2: CST Priority 128 - MSTI Priority 128

% port1.0.2: Designated Root 80020000cd24ff2d

% port1.0.2: Designated Bridge 80020000cd24ff2d

% port1.0.2: Message Age 0 - Max Age 0

% port1.0.2: Hello Time 2 - Forward Delay 15

% port1.0.2: Forward Timer 0 - Msg Age Timer 0 - Hello Timer 0

C613-50228-01 Rev A Command Reference for AR2050V 522

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SHOW SPANNING-TREE MST INSTANCE INTERFACE

show spanning-tree mst instance interface

Overview This command displays detailed information for the specified MST (Multiple

Spanning Tree) instance, and the specified switch port associated with that MST

instance.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide.

Syntax show spanning-tree mst instance <instance-id> interface <port>

Mode User Exec, Privileged Exec, and Interface Configuration

Example To display detailed information for instance 2, interface port1.0.2, use the

command:

awplus# show spanning-tree mst instance 2 interface port1.0.2

Output Figure 15-10: Example output from show spanning-tree mst instance

Parameter Description

<instance-id>Specify an MSTP instance in the range 1-5.

<port>The port to display information about. The port may be a switch

port (e.g. port1.0.4), a static channel group (e.g. sa2), or a dynamic

(LACP) channel group (e.g. po2).

% 1: MSTI Root Path Cost 0 - MSTI Root Port 0 - MSTI Bridge Priority 32768

% 1: MSTI Root Id 80020000cd24ff2d

% 1: MSTI Bridge Id 80020000cd24ff2d

% port1.0.2: Port 5002 - Id 838a - Role Disabled - State Discarding

% port1.0.2: Designated Internal Path Cost 0 - Designated Port Id 838a

% port1.0.2: Configured Internal Path Cost 20000000

% port1.0.2: Configured CST External Path cost 20000000

% port1.0.2: CST Priority 128 - MSTI Priority 128

% port1.0.2: Designated Root 80020000cd24ff2d

% port1.0.2: Designated Bridge 80020000cd24ff2d

% port1.0.2: Message Age 0 - Max Age 0

% port1.0.2: Hello Time 2 - Forward Delay 15

% port1.0.2: Forward Timer 0 - Msg Age Timer 0 - Hello Timer 0

C613-50228-01 Rev A Command Reference for AR2050V 523

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SHOW SPANNING-TREE MST INTERFACE

show spanning-tree mst interface

Overview This command displays the number of instances created, and VLANs associated

with it for the specified switch port.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide.

Syntax show spanning-tree mst interface <port>

Mode User Exec, Privileged Exec, and Interface Configuration

Example To display detailed information about each instance, and all interfaces associated

with them, for port1.0.4, use the command:

awplus# show spanning-tree mst interface port1.0.4

Output Figure 15-11: Example output from show spanning-tree mst interface

Parameter Description

<port>The port to display information about. The port may be a switch port

(e.g. port1.0.4), a static channel group (e.g. sa2), or a dynamic

(LACP) channel group (e.g. po2).

% 1: Bridge up - Spanning Tree Enabled

% 1: CIST Root Path Cost 0 - CIST Root Port 0 - CIST Bridge Priority 32768

% 1: Forward Delay 15 - Hello Time 2 - Max Age 20 - Max-hops 20

% 1: CIST Root Id 80000008c73a2b22

% 1: CIST Reg Root Id 80000008c73a2b22

% 1: CST Bridge Id 80000008c73a2b22

% 1: portfast bpdu-filter disabled

% 1: portfast bpdu-guard disabled

% 1: portfast errdisable timeout disabled

% 1: portfast errdisable timeout interval 1 sec

%

% Instance VLAN

% 0: 1

% 1: 2-3

% 2: 4-5

C613-50228-01 Rev A Command Reference for AR2050V 524

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SHOW SPANNING-TREE MST DETAIL INTERFACE

show spanning-tree mst detail interface

Overview This command displays detailed information about the specified switch port, and

the MST instances associated with it.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide.

Syntax show spanning-tree mst detail interface <port>

Mode User Exec, Privileged Exec and Interface Configuration

Example To display detailed information about port1.0.3 and the instances associated

with it, enter the command:

awplus# show spanning-tree mst detail interface port1.0.3

Output Figure 15-12: Example output from show spanning-tree mst detail interface

Parameter Description

<port>The port to display information about. The port may be a switch port

(e.g. port1.0.4), a static channel group (e.g. sa2), or a dynamic

(LACP) channel group (e.g. po2).

% 1: Bridge up - Spanning Tree Enabled

% 1: CIST Root Path Cost 0 - CIST Root Port 0 - CIST Bridge Priority 32768

% 1: Forward Delay 15 - Hello Time 2 - Max Age 20 - Max-hops 20

% 1: CIST Root Id 80000000cd24ff2d

% 1: CIST Reg Root Id 80000000cd24ff2d

% 1: CIST Bridge Id 80000000cd24ff2d

% 1: portfast bpdu-filter disabled

% 1: portfast bpdu-guard disabled

% 1: portfast errdisable timeout disabled

% 1: portfast errdisable timeout interval 300 sec

% port1.0.2: Port 5002 - Id 838a - Role Disabled - State Discarding

% port1.0.2: Designated External Path Cost 0 -Internal Path Cost 0

% port1.0.2: Configured Path Cost 20000000 - Add type Explicit ref count 2

% port1.0.2: Designated Port Id 838a - CIST Priority 128 -

% port1.0.2: CIST Root 80000000cd24ff2d

% port1.0.2: Regional Root 80000000cd24ff2d

% port1.0.2: Designated Bridge 80000000cd24ff2d

% port1.0.2: Message Age 0 - Max Age 20

% port1.0.2: CIST Hello Time 2 - Forward Delay 15

% port1.0.2: CIST Forward Timer 0 - Msg Age Timer 0 - Hello Timer 0 - topo 

change timer 0

% port1.0.2: forward-transitions 0

% port1.0.2: Version Multiple Spanning Tree Protocol - Received None - Send STP

C613-50228-01 Rev A Command Reference for AR2050V 525

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SHOW SPANNING-TREE MST DETAIL INTERFACE

% port1.0.2: No portfast configured - Current portfast off

% port1.0.2: portfast bpdu-guard default - Current portfast bpdu-guard off

% port1.0.2: portfast bpdu-filter default - Current portfast bpdu-filter off

% port1.0.2: no root guard configured - Current root guard off

% port1.0.2: Configured Link Type point-to-point - Current shared

%

% Instance 2: Vlans: 2

% 1: MSTI Root Path Cost 0 -MSTI Root Port 0 - MSTI Bridge Priority 32768

% 1: MSTI Root Id 80020000cd24ff2d

% 1: MSTI Bridge Id 80020000cd24ff2d

% port1.0.2: Port 5002 - Id 838a - Role Disabled - State Discarding

% port1.0.2: Designated Internal Path Cost 0 - Designated Port Id 838a

% port1.0.2: Configured Internal Path Cost 20000000

% port1.0.2: Configured CST External Path cost 20000000

% port1.0.2: CST Priority 128 - MSTI Priority 128

% port1.0.2: Designated Root 80020000cd24ff2d

% port1.0.2: Designated Bridge 80020000cd24ff2d

% port1.0.2: Message Age 0 - Max Age 0

% port1.0.2: Hello Time 2 - Forward Delay 15

% port1.0.2: Forward Timer 0 - Msg Age Timer 0 - Hello Timer 0

C613-50228-01 Rev A Command Reference for AR2050V 526

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SHOW SPANNING-TREE STATISTICS

show spanning-tree statistics

Overview This command displays BPDU (Bridge Protocol Data Unit) statistics for all

spanning-tree instances, and all switch ports associated with all spanning-tree

instances.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide.

Syntax show spanning-tree statistics

Mode Privileged Exec

Usage To display BPDU statistics for all spanning-tree instances, and all switch ports

associated with all spanning-tree instances, use the command:

awplus# show spanning-tree statistics

Output Figure 15-13: Example output from show spanning-tree statistics

================================

% BPDU Related Parameters

% -----------------------

% Port Spanning Tree : Disable

% Spanning Tree Type : Rapid Spanning Tree Protocol

% Current Port State : Discarding

% Port ID : 8393

% Port Number : 393

% Path Cost : 20000000

% Message Age : 0

% Designated Root : ec:cd:6d:20:c0:ed

% Designated Cost : 0

% Designated Bridge : ec:cd:6d:20:c0:ed

% Designated Port Id : 8393

% Top Change Ack : FALSE

% Config Pending : FALSE

% PORT Based Information & Statistics

% -----------------------------------

% Config Bpdu's xmitted : 0

% Config Bpdu's received : 0

% TCN Bpdu's xmitted : 0

% TCN Bpdu's received : 0

% Forward Trans Count : 0

C613-50228-01 Rev A Command Reference for AR2050V 527

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SHOW SPANNING-TREE STATISTICS

% STATUS of Port Timers

% ---------------------

% Hello Time Configured : 2

% Hello timer : INACTIVE

% Hello Time Value : 0

% Forward Delay Timer : INACTIVE

% Forward Delay Timer Value : 0

% Message Age Timer : INACTIVE

% Message Age Timer Value : 0

% Topology Change Timer : INACTIVE

% Topology Change Timer Value : 0

% Hold Timer : INACTIVE

% Hold Timer Value : 0

% Other Port-Specific Info

------------------------

% Max Age Transitions : 1

% Msg Age Expiry : 0

% Similar BPDUS Rcvd : 0

% Src Mac Count : 0

% Total Src Mac Rcvd : 0

% Next State : Learning

% Topology Change Time : 0

C613-50228-01 Rev A Command Reference for AR2050V 528

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SHOW SPANNING-TREE STATISTICS INSTANCE

show spanning-tree statistics instance

Overview This command displays BPDU (Bridge Protocol Data Unit) statistics for the specified

MST (Multiple Spanning Tree) instance, and all switch ports associated with that

MST instance.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide.

Syntax show spanning-tree statistics instance <instance-id>

Mode Privileged Exec

Example To display BPDU statistics information for MST instance 2, and all switch ports

associated with that MST instance, use the command:

awplus# show spanning-tree statistics instance 2

Output Figure 15-14: Example output from show spanning-tree statistics instance

Commands

show spanning-tree statistics

Parameter Description

<instance-id>Specify an MSTP instance in the range 1-5.

% % INST_PORT port1.0.3 Information & Statistics

% ----------------------------------------

% Config Bpdu's xmitted (port/inst) : (0/0)

% Config Bpdu's received (port/inst) : (0/0)

% TCN Bpdu's xmitted (port/inst) : (0/0)

% TCN Bpdu's received (port/inst) : (0/0)

% Message Age(port/Inst) : (0/0)

% port1.0.3: Forward Transitions : 0

% Next State : Learning

% Topology Change Time : 0

...

C613-50228-01 Rev A Command Reference for AR2050V 529

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SHOW SPANNING-TREE STATISTICS INSTANCE INTERFACE

show spanning-tree statistics instance

interface

Overview This command displays BPDU (Bridge Protocol Data Unit) statistics for the specified

MST (Multiple Spanning Tree) instance and the specified switch port associated

with that MST instance.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide.

Syntax show spanning-tree statistics instance <instance-id> interface

<port>

Mode Privileged Exec

Example To display BPDU statistics for MST instance 2, interface port1.0.2, use the

command:

awplus# show spanning-tree statistics instance 2 interface

port1.0.2

Parameter Description

<instance-id>Specify an MSTP instance in the range 1-5.

<port>The port to display information about. The port may be a switch

port (e.g. port1.0.4), a static channel group (e.g. sa2), or a

dynamic (LACP) channel group (e.g. po2).

C613-50228-01 Rev A Command Reference for AR2050V 530

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SHOW SPANNING-TREE STATISTICS INSTANCE INTERFACE

Output Figure 15-15: Example output from show spanning-tree statistics instance

interface

Commands

show spanning-tree statistics

awplus#sh spanning-tree statistics interface port1.0.2 instance 1

Spanning Tree Enabled for Instance : 1

==================================

% INST_PORT port1.0.2 Information & Statistics

% ----------------------------------------

% Config Bpdu's xmitted (port/inst) : (0/0)

% Config Bpdu's received (port/inst) : (0/0)

% TCN Bpdu's xmitted (port/inst) : (0/0)

% TCN Bpdu's received (port/inst) : (0/0)

% Message Age(port/Inst) : (0/0)

% port1.0.2: Forward Transitions : 0

% Next State : Learning

% Topology Change Time : 0



% Other Inst/Vlan Information & Statistics

% ----------------------------------------

% Bridge Priority : 0

% Bridge Mac Address : ec:cd:6d:20:c0:ed

% Topology Change Initiator : 5023

% Last Topology Change Occured : Mon Oct 3 05:42:06 2016

% Topology Change : FALSE

% Topology Change Detected : FALSE

% Topology Change Count : 1

% Topology Change Last Recvd from : 00:00:00:00:00:00

C613-50228-01 Rev A Command Reference for AR2050V 531

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SHOW SPANNING-TREE STATISTICS INTERFACE

show spanning-tree statistics interface

Overview This command displays BPDU (Bridge Protocol Data Unit) statistics for the specified

switch port, and all MST instances associated with that switch port.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide.

Syntax show spanning-tree statistics interface <port>

Mode Privileged Exec

Example To display BPDU statistics about each MST instance for port1.0.2, use the

command:

awplus# show spanning-tree statistics interface port1.0.2

Output Figure 15-16: Example output from show spanning-tree statistics interface

Parameter Description

<port>The port to display information about. The port may be a switch port

(e.g. port1.0.4), a static channel group (e.g. sa2), or a dynamic (LACP)

channel group (e.g. po2).



awplus#show spanning-tree statistics interface port1.0.2



Port number = 906 Interface = port1.0.2

================================

% BPDU Related Parameters

% -----------------------

% Port Spanning Tree : Disable

% Spanning Tree Type : Multiple Spanning Tree Protocol

% Current Port State : Discarding

% Port ID : 838a

% Port Number : 38a

% Path Cost : 20000000

% Message Age : 0

% Designated Root : ec:cd:6d:20:c0:ed

% Designated Cost : 0

% Designated Bridge : ec:cd:6d:20:c0:ed

% Designated Port Id : 838a

% Top Change Ack : FALSE

% Config Pending : FALSE

C613-50228-01 Rev A Command Reference for AR2050V 532

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SHOW SPANNING-TREE STATISTICS INTERFACE

Commands

show spanning-tree statistics

% PORT Based Information & Statistics

% -----------------------------------

% Config Bpdu's xmitted : 0

% Config Bpdu's received : 0

% TCN Bpdu's xmitted : 0

% TCN Bpdu's received : 0

% Forward Trans Count : 0

% STATUS of Port Timers

% ---------------------

% Hello Time Configured : 2

% Hello timer : INACTIVE

% Hello Time Value : 0

% Forward Delay Timer : INACTIVE

% Forward Delay Timer Value : 0

% Message Age Timer : INACTIVE

% Message Age Timer Value : 0

% Topology Change Timer : INACTIVE

% Topology Change Timer Value : 0

% Hold Timer : INACTIVE

% Hold Timer Value : 0

% Other Port-Specific Info

------------------------

% Max Age Transitions : 1

% Msg Age Expiry : 0

% Similar BPDUS Rcvd : 0

% Src Mac Count : 0

% Total Src Mac Rcvd : 0

% Next State : Learning

% Topology Change Time : 0

% Other Bridge information & Statistics

--------------------------------------

% STP Multicast Address : 01:80:c2:00:00:00

% Bridge Priority : 32768

% Bridge Mac Address : ec:cd:6d:20:c0:ed

% Bridge Hello Time : 2

% Bridge Forward Delay : 15

% Topology Change Initiator : 5023

% Last Topology Change Occured : Mon Oct 3 05:41:20 2016

% Topology Change : FALSE

% Topology Change Detected : TRUE

% Topology Change Count : 1

% Topology Change Last Recvd from : 00:00:00:00:00:00

C613-50228-01 Rev A Command Reference for AR2050V 533

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SHOW SPANNING-TREE VLAN RANGE-INDEX

show spanning-tree vlan range-index

Overview Use this command to display information about MST (Multiple Spanning Tree)

instances and the VLANs associated with them including the VLAN range-index

value for the device.

Syntax show spanning-tree vlan range-index

Mode Privileged Exec

Example To display information about MST instances and the VLANs associated with them

for the device, including the VLAN range-index value, use the following command:

awplus# show spanning-tree vlan range-index

Output Figure 15-17: Example output from show spanning-tree vlan range-index

Commands

show spanning-tree statistics

awplus#show spanning-tree vlan range-index

% MST Instance VLAN RangeIdx

% 1 1 1%

C613-50228-01 Rev A Command Reference for AR2050V 534

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SPANNING-TREE AUTOEDGE (RSTP AND MSTP)

spanning-tree autoedge (RSTP and MSTP)

Overview Use this command to enable the autoedge feature on the port.

The autoedge feature allows the port to automatically detect that it is an edge

port. If it does not receive any BPDUs in the first three seconds after linkup,

enabling, or entering RSTP or MSTP mode, it sets itself to be an edgeport and

enters the forwarding state.

Use this command for RSTP or MSTP.

Use the no variant of this command to disable this feature.

Syntax spanning-tree autoedge

no spanning-tree autoedge

Default Disabled

Mode Interface Configuration

Example awplus# configure terminal

awplus(config)# interface port1.0.3

awplus(config-if)# spanning-tree autoedge

Commands

spanning-tree edgeport (RSTP and MSTP)

C613-50228-01 Rev A Command Reference for AR2050V 535

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SPANNING-TREE CISCO-INTEROPERABILITY (MSTP)

spanning-tree cisco-interoperability (MSTP)

Overview Use this command to enable/disable Cisco-interoperability for MSTP.

Use this command for MSTP only.

Syntax spanning-tree cisco-interoperability {enable|disable}

Default If this command is not used, Cisco interoperability is disabled.

Mode Global Configuration

Usage For compatibility with certain Cisco devices, all devices in the switched LAN

running the AlliedWare Plus™ Operating System must have Cisco-interoperability

enabled. When the AlliedWare Plus Operating System is interoperating with Cisco,

the only criteria used to classify a region are the region name and revision level.

VLAN to instance mapping is not used to classify regions when interoperating with

Cisco.

Examples To enable Cisco interoperability on a Layer 2 device:

awplus# configure terminal

awplus(config)# spanning-tree cisco-interoperability enable

To disable Cisco interoperability on a Layer 2 device:

awplus# configure terminal

awplus(config)# spanning-tree cisco-interoperability disable

Parameter Description

enable Enable Cisco interoperability for MSTP.

disable Disable Cisco interoperability for MSTP.

C613-50228-01 Rev A Command Reference for AR2050V 536

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SPANNING-TREE EDGEPORT (RSTP AND MSTP)

spanning-tree edgeport (RSTP and MSTP)

Overview Use this command to set a port as an edge-port.

Use this command for RSTP or MSTP.

This command has the same effect as the spanning-tree portfast (STP) command,

but the configuration displays differently in the output of some show commands.

Use the no variant of this command to set a port to its default state (not an

edge-port).

Syntax spanning-tree edgeport

no spanning-tree edgeport

Default Not an edge port.

Mode Interface Configuration

Usage Use this command on a switch port connected to a LAN that has no other bridges

attached. If a BPDU is received on the port that indicates that another bridge is

connected to the LAN, then the port is no longer treated as an edge port.

Example awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# spanning-tree edgeport

Commands

spanning-tree autoedge (RSTP and MSTP)

C613-50228-01 Rev A Command Reference for AR2050V 537

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SPANNING-TREE ENABLE

spanning-tree enable

Overview Use this command in Global Configuration mode to enable the specified spanning

tree protocol for all switch ports. Note that this must be the spanning tree protocol

that is configured on the device by the spanning-tree mode command.

Use the no variant of this command to disable the configured spanning tree

protocol. This places all switch ports in the forwarding state.

Syntax spanning-tree {mstp|rstp|stp} enable

no spanning-tree {mstp|rstp|stp} enable

Default RSTP is enabled by default for all switch ports.

Mode Global Configuration

Usage With no configuration, spanning tree is enabled, and the spanning tree mode is set

to RSTP. To change the mode, see spanning-tree mode command.

Examples To enable STP in Global Configuration mode, enter the below commands:

awplus# configure terminal

awplus(config)# spanning-tree stp enable

To disable STP in Global Configuration mode, enter the below commands:

awplus# configure terminal

awplus(config)# no spanning-tree stp enable

To enable MSTP in Global Configuration mode, enter the below commands:

awplus# configure terminal

awplus(config)# spanning-tree mstp enable

To disable MSTP in Global Configuration mode, enter the below commands:

awplus# configure terminal

awplus(config)# no spanning-tree mstp enable

To enable RSTP in Global Configuration mode, enter the below commands:

awplus# configure terminal

awplus(config)# spanning-tree rstp enable

Parameter Description

mstp Enables or disables MSTP (Multiple Spanning Tree Protocol).

rstp Enables or disables RSTP (Rapid Spanning Tree Protocol).

stp Enables or disables STP (Spanning Tree Protocol).

C613-50228-01 Rev A Command Reference for AR2050V 538

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SPANNING-TREE ENABLE

To disable RSTP in Global Configuration mode, enter the below commands:

awplus# configure terminal

awplus(config)# no spanning-tree rstp enable

Commands

spanning-tree mode

C613-50228-01 Rev A Command Reference for AR2050V 539

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SPANNING-TREE ERRDISABLE-TIMEOUT ENABLE

spanning-tree errdisable-timeout enable

Overview Use this command to enable the errdisable-timeout facility, which sets a timeout

for ports that are disabled due to the BPDU guard feature.

Use this command for RSTP or MSTP.

Use the no variant of this command to disable the errdisable-timeout facility.

Syntax spanning-tree errdisable-timeout enable

no spanning-tree errdisable-timeout enable

Default By default, the errdisable-timeout is disabled.

Mode Global Configuration

Usage The BPDU guard feature shuts down the port on receiving a BPDU on a

BPDU-guard enabled port. This command associates a timer with the feature such

that the port is re- enabled without manual intervention after a set interval. This

interval can be configured by the user using the spanning-tree errdisable-timeout

interval command.

Example awplus# configure terminal

awplus(config)# spanning-tree errdisable-timeout enable

Commands

show spanning-tree

spanning-tree errdisable-timeout interval

spanning-tree portfast bpdu-guard

C613-50228-01 Rev A Command Reference for AR2050V 540

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SPANNING-TREE ERRDISABLE-TIMEOUT INTERVAL

spanning-tree errdisable-timeout interval

Overview Use this command to specify the time interval after which a port is brought back

up when it has been disabled by the BPDU guard feature.

Use this command for RSTP or MSTP.

Syntax spanning-tree errdisable-timeout interval <10-1000000>

no spanning-tree errdisable-timeout interval

Default By default, the port is re-enabled after 300 seconds.

Mode Global Configuration

Example awplus# configure terminal

awplus(config)# spanning-tree errdisable-timeout interval 34

Commands

show spanning-tree

spanning-tree errdisable-timeout enable

spanning-tree portfast bpdu-guard

Parameter Description

<10-1000000> Specify the errdisable-timeout interval in seconds.

C613-50228-01 Rev A Command Reference for AR2050V 541

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SPANNING-TREE FORCE-VERSION

spanning-tree force-version

Overview Use this command in Interface Configuration mode for a switch port interface only

to force the protocol version for the switch port. Use this command for RSTP or

MSTP only.

Syntax spanning-tree force-version <version>

no spanning-tree force-version

Default By default, no version is forced for the port. The port is in the spanning tree mode

configured for the device, or a lower version if it automatically detects one.

Mode Interface Configuration mode for a switch port interface only.

Examples Set the value to enforce the spanning tree protocol (STP):

awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# spanning-tree force-version 0

Set the default protocol version:

awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# no spanning-tree force-version

Commands

show spanning-tree

Parameter Description

<version> <0-3> Version identifier.

0Forces the port to operate in STP mode.

1Not supported.

2Forces the port to operate in RSTP mode. If it receives STP

BPDUs, it can automatically revert to STP mode.

3Forces the port to operate in MSTP mode (this option is only

available if MSTP mode is configured). If it receives RSTP or

STP BPDUs, it can automatically revert to RSTP or STP mode.

C613-50228-01 Rev A Command Reference for AR2050V 542

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SPANNING-TREE FORWARD-TIME

spanning-tree forward-time

Overview Use this command to set the forward delay value. Use the no variant of this

command to reset the forward delay value to the default setting of 15 seconds.

The forward delay sets the time (in seconds) to control how fast a port changes its

spanning tree state when moving towards the forwarding state. If the mode is set

to STP, the value determines how long the port stays in each of the listening and

learning states which precede the forwarding state. If the mode is set to RSTP or

MSTP, this value determines the maximum time taken to transition from

discarding to learning and from learning to forwarding.

This value is used only when the device is acting as the root bridge. Devices not

acting as the Root Bridge use a dynamic value for the forward delay set by the root

bridge. The forward delay, max-age, and hello time parameters are interrelated.

Syntax spanning-tree forward-time <forward-delay>

no spanning-tree forward-time

Default The default is 15 seconds.

Mode Global Configuration

Usage The allowable range for forward-time is 4-30 seconds.

The forward delay, max-age, and hello time parameters should be set according

to the following formula, as specified in IEEE Standard 802.1d:

2 x (forward delay - 1.0 seconds) >= max-age

max-age >= 2 x (hello time + 1.0 seconds)

Example awplus# configure terminal

awplus(config)# spanning-tree forward-time 6

Commands

show spanning-tree

spanning-tree forward-time

spanning-tree hello-time

spanning-tree mode

Parameter Description

<forward-delay> <4-30> The forwarding time delay in seconds.

C613-50228-01 Rev A Command Reference for AR2050V 543

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SPANNING-TREE GUARD ROOT

spanning-tree guard root

Overview Use this command in Interface Configuration mode for a switch port only to enable

the Root Guard feature for the switch port. The root guard feature disables

reception of superior BPDUs. You can use this command for RSTP, STP or MSTP.

Use the no variant of this command to disable the root guard feature for the port.

Syntax spanning-tree guard root

no spanning-tree guard root

Mode Interface Configuration mode for a switch port interface only.

Usage The Root Guard feature makes sure that the port on which it is enabled is a

designated port. If the Root Guard enabled port receives a superior BPDU, it goes

to a Listening state (for STP) or discarding state (for RSTP and MSTP).

Example awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# spanning-tree guard root

C613-50228-01 Rev A Command Reference for AR2050V 544

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SPANNING-TREE HELLO-TIME

spanning-tree hello-time

Overview Use this command to set the hello-time. This sets the time in seconds between the

transmission of device spanning tree configuration information when the device is

the Root Bridge of the spanning tree or is trying to become the Root Bridge.

Use this command for RSTP, STP or MSTP.

Use the no variant of this command to restore the default of the hello time.

Syntax spanning-tree hello-time <hello-time>

no spanning-tree hello-time

Default Default is 2 seconds.

Mode Global Configuration and Interface Configuration for switch ports.

Usage The allowable range of values is 1-10 seconds.

The forward delay, max-age, and hello time parameters should be set according to

the following formula, as specified in IEEE Standard 802.1d:

2 x (forward delay - 1.0 seconds) >= max-age

max-age>= 2 x (hello time + 1.0 seconds)

Example awplus# configure terminal

awplus(config)# spanning-tree hello-time 3

Commands

spanning-tree forward-time

spanning-tree max-age

show spanning-tree

Parameter Description

<hello-time><1-10> The hello BPDU interval in seconds.

C613-50228-01 Rev A Command Reference for AR2050V 545

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SPANNING-TREE LINK-TYPE

spanning-tree link-type

Overview Use this command in Interface Configuration mode for a switch port interface only

to enable or disable point-to-point or shared link types on the switch port.

Use this command for RSTP or MSTP only.

Use the no variant of this command to return the port to the default link type.

Syntax spanning-tree link-type {point-to-point|shared}

no spanning-tree link-type

Default The default link type is point-to-point.

Mode Interface Configuration mode for a switch port interface only.

Usage You may want to set link type to shared if the port is connected to a hub with

multiple devices connected to it.

Examples awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# spanning-tree link-type point-to-point

Parameter Description

shared Disable rapid transition.

point-to-point Enable rapid transition.

C613-50228-01 Rev A Command Reference for AR2050V 546

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SPANNING-TREE MAX-AGE

spanning-tree max-age

Overview Use this command to set the max-age. This sets the maximum age, in seconds, that

dynamic spanning tree configuration information is stored in the device before it

is discarded.

Use this command for RSTP, STP or MSTP.

Use the no variant of this command to restore the default of max-age.

Syntax spanning-tree max-age <max-age>

no spanning-tree max-age

Default The default of spanning-tree max-age is 20 seconds.

Mode Global Configuration

Usage Max-age is the maximum time in seconds for which a message is considered valid.

Configure this value sufficiently high, so that a frame generated by the root bridge

can be propagated to the leaf nodes without exceeding the max-age.

The forward delay, max-age, and hello time parameters should be set according

to the following formula, as specified in IEEE Standard 802.1d:

2 x (forward delay - 1.0 seconds) >= max-age

max-age >= 2 x (hello time + 1.0 seconds)

Example awplus# configure terminal

awplus(config)# spanning-tree max-age 12

Commands

show spanning-tree

spanning-tree forward-time

spanning-tree hello-time

Parameter Description

<max-age><6-40> The maximum time, in seconds.

C613-50228-01 Rev A Command Reference for AR2050V 547

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SPANNING-TREE MAX-HOPS (MSTP)

spanning-tree max-hops (MSTP)

Overview Use this command to specify the maximum allowed hops for a BPDU in an MST

region. This parameter is used by all the instances of the MST region.

Use the no variant of this command to restore the default.

Use this command for MSTP only.

Syntax spanning-tree max-hops <hop-count>

no spanning-tree max-hops <hop-count>

Default The default max-hops in a MST region is 20.

Mode Global Configuration

Usage Specifying the max hops for a BPDU prevents the messages from looping

indefinitely in the network. The hop count is decremented by each receiving port.

When a device receives an MST BPDU that has a hop count of zero, it discards the

BPDU.

Examples awplus# configure terminal

awplus(config)# spanning-tree max-hops 25

awplus# configure terminal

awplus(config)# no spanning-tree max-hops

Parameter Description

<hop-count> Specify the maximum hops the BPDU will be valid for in the range

<1-40>.

C613-50228-01 Rev A Command Reference for AR2050V 548

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SPANNING-TREE MODE

spanning-tree mode

Overview Use this command to change the spanning tree protocol mode on the device. The

spanning tree protocol mode on the device can be configured to either STP, RSTP

or MSTP.

Syntax spanning-tree mode {stp|rstp|mstp}

Default The default spanning tree protocol mode on the device is RSTP.

Mode Global Configuration

Usage With no configuration, the device will have spanning tree enabled, and the

spanning tree mode will be set to RSTP. Use this command to change the spanning

tree protocol mode on the device. MSTP is VLAN aware, but RSTP and STP are not

VLAN aware. To enable or disable spanning tree operation, see the spanning-tree

enable command.

Examples To change the spanning tree mode from the default of RSTP to MSTP, use the

following commands:

awplus# configure terminal

awplus(config)# spanning-tree mode mstp

Commands

spanning-tree enable

C613-50228-01 Rev A Command Reference for AR2050V 549

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SPANNING-TREE MST CONFIGURATION

spanning-tree mst configuration

Overview Use this command to enter the MST Configuration mode to configure the Multiple

Spanning-Tree Protocol.

Syntax spanning-tree mst configuration

Mode Global Configuration

Examples The following example uses this command to enter MST Configuration mode. Note

the change in the command prompt.

awplus# configure terminal

awplus(config)# spanning-tree mst configuration

awplus(config-mst)#

C613-50228-01 Rev A Command Reference for AR2050V 550

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SPANNING-TREE MST INSTANCE

spanning-tree mst instance

Overview Use this command to assign a Multiple Spanning Tree instance (MSTI) to a switch

port or channel group.

Note that ports are automatically configured to send and receive spanning-tree

information for the associated MSTI when VLANs are assigned to MSTIs using the

instance vlan (MSTP) command.

Use the no variant of this command in Interface Configuration mode to remove the

MSTI from the specified switch port or channel group.

Syntax spanning-tree mst instance <instance-id>

no spanning-tree mst instance <instance-id>

Default A port automatically becomes a member of an MSTI when it is assigned to a VLAN.

Mode Interface Configuration mode for a switch port or channel group.

Usage You can disable automatic configuration of member ports of a VLAN to an

associated MSTI by using a no spanning-tree mst instance command to remove

the member port from the MSTI. Use the spanning-tree mst instance command

to add a VLAN member port back to the MSTI.

Examples To assign instance 3 to a switch port, use the commands:

awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# spanning-tree mst instance 3

To remove instance 3 from a switch port, use the commands:

awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# no spanning-tree mst instance 3

Commands

instance vlan (MSTP)

spanning-tree mst instance path-cost

spanning-tree mst instance priority

spanning-tree mst instance restricted-role

spanning-tree mst instance restricted-tcn

Parameter Description

<instance-id>Specify an MSTP instance in the range 1-5. The MST instance must

have already been created using the instance vlan (MSTP)

command.

C613-50228-01 Rev A Command Reference for AR2050V 551

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SPANNING-TREE MST INSTANCE PATH-COST

spanning-tree mst instance path-cost

Overview Use this command to set the cost of a path associated with a switch port, for the

specified MSTI.

This specifies the switch port’s contribution to the cost of a path to the MSTI

regional root via that port. This applies when the port is the root port for the MSTI.

Use the no variant of this command to restore the default cost value of the path.

Syntax spanning-tree mst instance <instance-id> path-cost <path-cost>

no spanning-tree mst instance <instance-id> path-cost

Default The default path cost values and the range of recommended path cost values

depend on the port speed, as shown in the following table from the IEEE

802.1q-2003 standard.

Mode Interface Configuration mode for a switch port interface only.

Usage Before you can use this command to set a path-cost in a VLAN configuration, you

must explicitly add an MST instance to a port using the spanning-tree mst instance

command.

Examples To set a path cost of 1000 on instance 3, use the commands:

awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# spanning-tree mst instance 3 path-cost 1000

Parameter Description

<instance-id>Specify an MSTP instance in the range 1-5.

<path-cost> Specify the cost of path in the range of <1-200000000>, where

a lower path-cost indicates a greater likelihood of the specific

interface becoming a root.

Port speed Default path cost Recommended path cost range

Less than 100 Kb/s

1Mbps

10Mbps

100 Mbps

1 Gbps

10 Gbps

100 Gbps

1Tbps

10 Tbps

200,000,000

20,000,000

2,000,000

200,000

20,000

2,000

200

20,000,000-200,000,000

2,000,000-20,000,000

200,000-2,000,000

20,000-200,000

2,000-20,000

200-2,000

20-200

2-200

2-20

C613-50228-01 Rev A Command Reference for AR2050V 552

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SPANNING-TREE MST INSTANCE PATH-COST

To return the path cost to its default value on instance 3, use the commands:

awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# no spanning-tree mst instance 3 path-cost

Commands

instance vlan (MSTP)

spanning-tree mst instance

spanning-tree mst instance priority

spanning-tree mst instance restricted-role

spanning-tree mst instance restricted-tcn

C613-50228-01 Rev A Command Reference for AR2050V 553

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SPANNING-TREE MST INSTANCE PRIORITY

spanning-tree mst instance priority

Overview Use this command in Interface Configuration mode for a switch port interface only

to set the port priority for an MST instance (MSTI).

Use the no variant of this command to restore the default priority value (128).

Syntax spanning-tree mst instance <instance-id> priority <priority>

no spanning-tree mst instance <instance-id> [priority]

Default The default is 128.

Mode Interface Configuration mode for a switch port interface.

Usage This command sets the value of the priority field contained in the port identifier.

The MST algorithm uses the port priority when determining the root port for the

switch in the MSTI. The port with the lowest value has the highest priority, so it will

be chosen as root port over a port that is equivalent in all other aspects but with a

higher priority value.

Examples To set the priority to 112 on instance 3, use the commands:

awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# spanning-tree mst instance 3 priority 112

To return the priority to its default value of 128 on instance 3, use the commands:

awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# no spanning-tree mst instance 3 priority

Commands

instance vlan (MSTP)

spanning-tree priority (port priority)

spanning-tree mst instance

spanning-tree mst instance path-cost

spanning-tree mst instance restricted-role

spanning-tree mst instance restricted-tcn

Parameter Description

<instance-id>Specify an MSTP instance in the range 1-5.

<priority>This must be a multiple of 16 and within the range <0-240>. A

lower priority indicates greater likelihood of the port becoming

the root port.

C613-50228-01 Rev A Command Reference for AR2050V 554

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SPANNING-TREE MST INSTANCE RESTRICTED-ROLE

spanning-tree mst instance restricted-role

Overview Use this command in Interface Configuration mode for a switch port interface only

to enable the restricted role for an MSTI (Multiple Spanning Tree Instance) on a

switch port. Configuring the restricted role for an MSTI on a switch port prevents

the switch port from becoming the root port in a spanning tree topology.

Use the no variant of this command to disable the restricted role for an MSTI on a

switch port. Removing the restricted role for an MSTI on a switch port allows the

switch port to become the root port in a spanning tree topology.

Syntax spanning-tree mst instance <instance-id> restricted-role

no spanning-tree mst instance <instance-id> restricted-role

Default The restricted role for an MSTI instance on a switch port is disabled by default.

Mode Interface Configuration mode for a switch port interface only.

Usage The root port is the port providing the best path from the bridge to the root bridge.

Use this command to disable a port from becoming a root port. Use the no variant

of this command to enable a port to become a root port. See the STP Feature

Overview and Configuration Guide for root port information.

Examples To prevent a switch port from becoming the root port, use the commands:

awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# spanning-tree mst instance 3 restricted-role

To stop preventing the switch port from becoming the root port, use the

commands:

awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# no spanning-tree mst instance 3

restricted-role

Parameter Description

<instance-id>Specify an MSTP instance in the range 1-5. The MST instance must

have already been created using the instance vlan (MSTP)

command.

C613-50228-01 Rev A Command Reference for AR2050V 555

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SPANNING-TREE MST INSTANCE RESTRICTED-ROLE

Commands

instance vlan (MSTP)

spanning-tree priority (port priority)

spanning-tree mst instance

spanning-tree mst instance path-cost

spanning-tree mst instance restricted-tcn

C613-50228-01 Rev A Command Reference for AR2050V 556

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SPANNING-TREE MST INSTANCE RESTRICTED-TCN

spanning-tree mst instance restricted-tcn

Overview Use this command to prevent a switch port from propagating received topology

change notifications and topology changes to other switch ports. This is named

restricted TCN (Topology Change Notification). A TCN is a simple Bridge Protocol

Data Unit (BPDU) that a bridge sends out to its root port to signal a topology

change.

Use the no variant of this command to stop preventing the switch port from

propagating received topology change notifications and topology changes to

other switch ports for the specified MSTI (Multiple Spanning Tree Instance).

The restricted TCN setting applies only to the specified MSTI (Multiple Spanning

Tree Instance).

Syntax spanning-tree mst instance <instance-id> restricted-tcn

no spanning-tree mst instance <instance-id> restricted-tcn

Default Disabled. By default, switch ports propagate TCNs.

Mode Interface Configuration mode for a switch port interface only.

Examples To prevent a switch port from propagating received topology change notifications

and topology changes to other switch ports, use the commands:

awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# spanning-tree mst instance 3 restricted-tcn

To stop preventing a switch port from propagating received topology change

notifications and topology changes to other switch ports, use the commands:

awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# no spanning-tree mst instance 3

restricted-tcn

Commands

instance vlan (MSTP)

spanning-tree priority (port priority)

spanning-tree mst instance

spanning-tree mst instance path-cost

spanning-tree mst instance restricted-role

Parameter Description

<instance-id>Specify an MSTP instance in the range 1-5. The MST instance must

have already been created using the instance vlan (MSTP)

command.

C613-50228-01 Rev A Command Reference for AR2050V 557

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SPANNING-TREE PATH-COST

spanning-tree path-cost

Overview Use this command in Interface Configuration mode for a switch port interface only

to set the cost of a path for the specified port. This value then combines with others

along the path to the root bridge in order to determine the total cost path value

from the particular port, to the root bridge. The lower the numeric value, the

higher the priority of the path. This applies when the port is the root port.

Use this command for RSTP, STP or MSTP. When MSTP mode is configured, this will

apply to the port’s path cost for the CIST.

Syntax spanning-tree path-cost <pathcost>

no spanning-tree path-cost

Default The default path cost values and the range of recommended path cost values

depend on the port speed, as shown in the following table from the IEEE

802.1q-2003 and IEEE 802.1d-2004 standards.

Mode Interface Configuration mode for switch port interface only.

Example awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# spanning-tree path-cost 123

Parameter Description

<pathcost><1-200000000> The cost to be assigned to the port.

Port speed Default path cost Recommended path cost range

Less than 100 Kb/s

1Mbps

10Mbps

100 Mbps

1 Gbps

10 Gbps

100 Gbps

1Tbps

10 Tbps

200,000,000

20,000,000

2,000,000

200,000

20,000

2,000

200

20,000,000-200,000,000

2,000,000-20,000,000

200,000-2,000,000

20,000-200,000

2,000-20,000

200-2, 000

20-200

2-200

2-20

C613-50228-01 Rev A Command Reference for AR2050V 558

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SPANNING-TREE PORTFAST (STP)

spanning-tree portfast (STP)

Overview Use this command in Interface Configuration mode for a switch port interface only

to set a port as an edge-port. The portfast feature enables a port to rapidly move

to the forwarding state, without having first to pass through the intermediate

spanning tree states. This command has the same effect as the spanning-tree

edgeport (RSTP and MSTP) command, but the configuration displays differently in

the output of some show commands.

NOTE: You can run either of two additional parameters with this command. To simplify

the syntax these are documented as separate commands. See the following additional

portfast commands:

•spanning-tree portfast bpdu-filter command

•spanning-tree portfast bpdu-guard command.

You can obtain the same effect by running the spanning-tree edgeport (RSTP and

MSTP) command. However, the configuration output may display differently in

some show commands.

Use the no variant of this command to set a port to its default state (not an

edge-port).

Syntax spanning-tree portfast

no spanning-tree portfast

Default Not an edge port.

Mode Interface Configuration mode for a switch port interface only.

Usage Portfast makes a port move from a blocking state to a forwarding state, bypassing

both listening and learning states. The portfast feature is meant to be used for

ports connected to end-user devices. Enabling portfast on ports that are

connected to a workstation or server allows devices to connect to the network

without waiting for spanning-tree to converge.

For example, you may need hosts to receive a DHCP address quickly and waiting

for STP to converge would cause the DHCP request to time out. Ensure you do not

use portfast on any ports connected to another device to avoid creating a

spanning-tree loop on the network.

Use this command on a switch port that connects to a LAN with no other bridges

attached. An edge port should never receive BPDUs. Therefore if an edge port

receives a BPDU, the portfast feature takes one of three actions.

• Cease to act as an edge port and pass BPDUs as a member of a spanning tree

network (spanning-tree portfast (STP) command disabled).

• Filter out the BPDUs and pass only the data and continue to act as a edge

port (spanning-tree portfast bpdu-filter command enabled).

• Block the port to all BPDUs and data (spanning-tree portfast bpdu-guard

command enabled).

C613-50228-01 Rev A Command Reference for AR2050V 559

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SPANNING-TREE PORTFAST (STP)

Example awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# spanning-tree portfast

Commands

spanning-tree edgeport (RSTP and MSTP)

show spanning-tree

spanning-tree portfast bpdu-filter

spanning-tree portfast bpdu-guard

C613-50228-01 Rev A Command Reference for AR2050V 560

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SPANNING-TREE PORTFAST BPDU-FILTER

spanning-tree portfast bpdu-filter

Overview This command sets the bpdu-filter feature and applies a filter to any BPDUs (Bridge

Protocol Data Units) received. Enabling this feature ensures that configured ports

will not transmit any BPDUs and will ignore (filter out) any BPDUs received. BPDU

Filter is not enabled on a port by default.

Using the no variant of this command to turn off the bpdu-filter, but retain the

port’s status as an enabled port. If the port then receives a BPDU it will change its

role from an edge-port to a non edge-port.

Syntax (Global

Configuration)

spanning-tree portfast bpdu-filter

no spanning-tree portfast bpdu-filter

Syntax (Interface

Configuration)

spanning-tree portfast bpdu-filter {default|disable|enable}

no spanning-tree portfast bpdu-filter

Default BPDU Filter is not enabled on any ports by default.

Mode Global Configuration and Interface Configuration

Usage This command filters the BPDUs and passes only data to continue to act as an edge

port. Using this command in Global Configuration mode applies the portfast

bpdu-filter feature to all ports on the device. Using it in Interface mode applies the

feature to a specific port, or range of ports.The command will operate in both RSTP

and MSTP networks.

Use the show spanning-tree command to display status of the bpdu-filter

parameter for the switch ports.

Example To enable STP BPDU filtering in Global Configuration mode, enter the commands:

awplus# configure terminal

awplus(config)# spanning-tree portfast bpdu-filter

Parameter Description

bpdu-filter A port that has bpdu-filter enabled will not transmit any BPDUs and

will ignore any BPDUs received. This port type has one of the

following parameters (in Interface Configuration mode):

default Takes the setting that has been configured for the whole

device, i.e. the setting made from the Global

configuration mode.

disable Turns off BPDU filter.

enable Turns on BPDU filter.

C613-50228-01 Rev A Command Reference for AR2050V 561

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SPANNING-TREE PORTFAST BPDU-FILTER

To enable STP BPDU filtering in Interface Configuration mode, enter the

commands:

awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# spanning-tree portfast bpdu-filter enable

Commands

spanning-tree edgeport (RSTP and MSTP)

show spanning-tree

spanning-tree portfast (STP)

spanning-tree portfast bpdu-guard

C613-50228-01 Rev A Command Reference for AR2050V 562

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SPANNING-TREE PORTFAST BPDU-GUARD

spanning-tree portfast bpdu-guard

Overview The AR3050S and AR4050S devices don’t support BPDU protection in 5.4.5-0.1

release.

This command applies a BPDU (Bridge Protocol Data Unit) guard to the port. A port

with the bpdu-guard feature enabled will block all traffic (BPDUs and user data), if

it starts receiving BPDUs.

Use this command in Global Configuration mode to apply BPDU guard to all ports

on the device. Use this command in Interface mode for an individual interface or a

range of interfaces specified. BPDU Guard is not enabled on a port by default.

Use the no variant of this command to disable the BPDU Guard feature on a device

in Global Configuration mode or to disable the BPDU Guard feature on a port in

Interface mode.

Syntax (Global

Configuration)

spanning-tree portfast bpdu-guard

no spanning-tree portfast bpdu-guard

Syntax (Interface

Configuration)

spanning-tree portfast bpdu-guard {default|disable|enable}

no spanning-tree portfast bpdu-guard

Default BPDU Guard is not enabled on any ports by default.

Mode Global Configuration or Interface Configuration

Usage This command blocks the port(s) to all devices and data when enabled. BPDU

Guard is a port-security feature that changes how a portfast-enabled port behaves

if it receives a BPDU. When bpdu-guard is set, then the port shuts down if it

receives a BPDU. It does not process the BPDU as it is considered suspicious. When

bpdu-guard is not set, then the port will negotiate spanning-tree with the device

sending the BPDUs. By default, bpdu- guard is not enabled on a port.

You can configure a port disabled by the bpdu-guard to re-enable itself after a

specific time interval. This interval is set with the spanning-tree errdisable-timeout

Parameter Description

bpdu-guard A port that has bpdu-guard turned on will enter the STP blocking state

if it receives a BPDU. This port type has one of the following

parameters (in Interface Configuration mode):

default Takes the setting that has been configured for the whole

device, i.e. the setting made from the Global configuration

mode.

disable Turns off BPDU guard.

enable Turns on BPDU guard and will also set the port as an edge

port.

C613-50228-01 Rev A Command Reference for AR2050V 563

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SPANNING-TREE PORTFAST BPDU-GUARD

interval command. If you do not use the errdisable-timeout feature, then you will

need to manually re-enable the port by using the no shutdown command.

Use the show spanning-tree command to display the device and port

configurations for the BPDU Guard feature. It shows both the administratively

configured and currently running values of bpdu-guard.

Example To enable STP BPDU guard in Global Configuration mode, enter the below

commands:

awplus# configure terminal

awplus(config)# spanning-tree portfast bpdu-guard

To enable STP BPDU guard in Interface Configuration mode, enter the below

commands:

awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# spanning-tree portfast bpdu-guard enable

Commands

spanning-tree edgeport (RSTP and MSTP)

show spanning-tree

spanning-tree portfast (STP)

spanning-tree portfast bpdu-filter

C613-50228-01 Rev A Command Reference for AR2050V 564

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SPANNING-TREE PRIORITY (BRIDGE PRIORITY)

spanning-tree priority (bridge priority)

Overview Use this command to set the bridge priority for the device. A lower priority value

indicates a greater likelihood of the device becoming the root bridge.

Use this command for RSTP, STP or MSTP. When MSTP mode is configured, this will

apply to the CIST.

Use the no variant of this command to reset it to the default.

Syntax spanning-tree priority <priority>

no spanning-tree priority

Default The default priority is 32678.

Mode Global Configuration

Usage To force a particular device to become the root bridge use a lower value than other

devices in the spanning tree.

Example awplus# configure terminal

awplus(config)# spanning-tree priority 4096

Commands

spanning-tree mst instance priority

show spanning-tree

Parameter Description

<priority><0-61440> The bridge priority, which will be rounded to a multiple of

4096.

C613-50228-01 Rev A Command Reference for AR2050V 565

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SPANNING-TREE PRIORITY (PORT PRIORITY)

spanning-tree priority (port priority)

Overview Use this command in Interface Configuration mode for a switch port interface only

to set the port priority for port. A lower priority value indicates a greater likelihood

of the port becoming part of the active topology.

Use this command for RSTP, STP, or MSTP. When the device is in MSTP mode, this

will apply to the CIST.

Use the no variant of this command to reset it to the default.

Syntax spanning-tree priority <priority>

no spanning-tree priority

Default The default priority is 128.

Mode Interface Configuration mode for a switch port interface only.

Usage To force a port to be part of the active topology (for instance, become the root port

or a designated port) use a lower value than other ports on the device. (This

behavior is subject to network topology, and more significant factors, such as

bridge ID.)

Example awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# spanning-tree priority 16

Commands

spanning-tree mst instance priority

spanning-tree priority (bridge priority)

show spanning-tree

Parameter Description

<priority><0-240>, in increments of 16. The port priority, which will be rounded

down to a multiple of 16.

C613-50228-01 Rev A Command Reference for AR2050V 566

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SPANNING-TREE RESTRICTED-ROLE

spanning-tree restricted-role

Overview Use this command in Interface Configuration mode for a switch port interface only

to restrict the port from becoming a root port.

Use the no variant of this command to disable the restricted role functionality.

Syntax spanning-tree restricted-role

no spanning-tree restricted-role

Default The restricted role is disabled.

Mode Interface Configuration mode for a switch port interface only.

Example awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# spanning-tree restricted-role

C613-50228-01 Rev A Command Reference for AR2050V 567

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SPANNING-TREE RESTRICTED-TCN

spanning-tree restricted-tcn

Overview Use this command in Interface Configuration mode for a switch port interface only

to prevent TCN (Topology Change Notification) BPDUs (Bridge Protocol Data

Units) from being sent on a port. If this command is enabled, after a topology

change a bridge is prevented from sending a TCN to its designated bridge.

Use the no variant of this command to disable the restricted TCN functionality.

Syntax spanning-tree restricted-tcn

no spanning-tree restricted-tcn

Default The restricted TCN is disabled.

Mode Interface Configuration mode for a switch port interface only.

Example awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# spanning-tree restricted-tcn

C613-50228-01 Rev A Command Reference for AR2050V 568

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

SPANNING-TREE TRANSMIT-HOLDCOUNT

spanning-tree transmit-holdcount

Overview Use this command to set the maximum number of BPDU transmissions that are

held back.

Use the no variant of this command to restore the default transmit hold-count

value.

Syntax spanning-tree transmit-holdcount

no spanning-tree transmit-holdcount

Default Transmit hold-count default is 3.

Mode Global Configuration

Example awplus# configure terminal

awplus(config)# spanning-tree transmit-holdcount

C613-50228-01 Rev A Command Reference for AR2050V 569

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

SPANNING TREE COMMANDS

UNDEBUG MSTP

undebug mstp

Overview This command applies the functionality of the no debug mstp (RSTP and STP)

command.

C613-50228-01 Rev A Command Reference for AR2050V 570

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

Link Aggregation

Commands

Introduction

Overview This chapter provides an alphabetical reference of commands used to configure a

static channel group (static aggregator) and dynamic channel group (LACP

channel group, etherchannel or LACP aggregator). Link aggregation is also

sometimes referred to as channeling.

NOTE: AlliedWare Plus™ supports IEEE 802.3ad link aggregation and uses the Link

Aggregation Control Protocol (LACP). LACP does not interoperate with devices that use

Port Aggregation Protocol (PAgP).

Link aggregation does not necessarily achieve exact load balancing across the links.

The load sharing algorithm is designed to ensure that any given data flow always goes

down the same link. It also aims to spread data flows across the links as evenly as

possible.

For example, for a 2 Gbps LAG that is a combination of two 1 Gbps ports, any one flow

of traffic can only ever reach a maximum throughput of 1 Gbps. However, the hashing

algorithm should spread the flows across the links so that when many flows are

operating, the full 2 Gbps can be utilized.

For a description of static and dynamic link aggregation (LACP), and configuration

examples, see the Link Aggregation Feature Overview and Configuration Guide.

Command List •“channel-group” on page 572

•“clear lacp counters” on page 574

•“debug lacp” on page 575

•“lacp global-passive-mode enable” on page 576

•“lacp port-priority” on page 577

•“lacp system-priority” on page 578

•“lacp timeout” on page 579

•“show debugging lacp” on page 581

•“show diagnostic channel-group” on page 582

C613-50228-01 Rev A Command Reference for AR2050V 571

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LINK AGGREGATION COMMANDS

•“show etherchannel” on page 583

•“show etherchannel detail” on page 584

•“show etherchannel summary” on page 585

•“show lacp sys-id” on page 586

•“show lacp-counter” on page 587

•“show port etherchannel” on page 588

•“show static-channel-group” on page 589

•“static-channel-group” on page 590

•“undebug lacp” on page 592

C613-50228-01 Rev A Command Reference for AR2050V 572

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LINK AGGREGATION COMMANDS

CHANNEL-GROUP

channel-group

Overview Use this command to either create a new dynamic channel group while at the

same time adding a port to it, or to add a port to an existing dynamic channel

group. Note that you must also set the LACP mode to be either active or passive.

You can create up to 2 dynamic (LACP) channel groups (or up to 2 static channel

groups).

Use the no variant of this command to turn off link aggregation on the device port.

You will be returned to Global Configuration mode from Interface Configuration

mode.

Syntax channel-group <dynamic-channel-group-number> mode

{active|passive}

no channel-group

Mode Interface Configuration

Usage All the device ports in a channel-group must belong to the same VLANs, have the

same tagging status, and can only be operated on as a group. All device ports

within a channel group must have the same port speed and be in full duplex mode.

Once the LACP channel group has been created, it is treated as a device port, and

can be referred to in most other commands that apply to device ports.

To refer to an LACP channel group in other LACP commands, use the channel

group number. To specify an LACP channel group (LACP aggregator) in other

commands, prefix the channel group number with po. For example, ‘po2’ refers to

the LACP channel group with channel group number 2.

For more information about LACP, see the Link Aggregation Feature Overview and

Configuration Guide which is available on our website at alliedtelesis.com.

Parameter Description

<dynamic-channel-

group-number>

<1-32> Specify a dynamic channel group number for an

LACP link. You can create up to 2 dynamic (LACP) channel

groups (in addition to up to 2 static channel groups). Each

channel group can include up to 4 ports.

active Enables initiation of LACP negotiation on a port. The port

will transmit LACP dialogue messages whether or not it

receives them from the partner device.

passive Disables initiation of LACP negotiation on a port. The port

will only transmit LACP dialogue messages if the partner

device is transmitting them, i.e., the partner is in the active

mode.

C613-50228-01 Rev A Command Reference for AR2050V 573

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LINK AGGREGATION COMMANDS

CHANNEL-GROUP

Examples To add device port1.0.6 to a newly created LACP channel group 2 use the

commands below:

awplus# configure terminal

awplus(config)# interface port1.0.6

awplus(config-if)# channel-group 2 mode active

To remove device port1.0.6 from any created LACP channel groups use the

command below:

awplus# configure terminal

awplus(config)# interface port1.0.6

awplus(config-if)# no channel-group

To reference channel group 2 as an interface, use the following commands:

awplus# configure terminal

awplus(config)# interface po2

awplus(config-if)#

Commands

show etherchannel

show etherchannel detail

show etherchannel summary

show port etherchannel

C613-50228-01 Rev A Command Reference for AR2050V 574

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LINK AGGREGATION COMMANDS

CLEAR LACP COUNTERS

clear lacp counters

Overview Use this command to clear all counters of all present LACP aggregators (channel

groups) or a given LACP aggregator.

Syntax clear lacp [<1-32>] counters

Mode Privileged Exec

Example awplus# clear lacp 2 counters

Parameter Description

<1-32>Channel-group number.

C613-50228-01 Rev A Command Reference for AR2050V 575

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LINK AGGREGATION COMMANDS

DEBUG LACP

debug lacp

Overview Use this command to enable all LACP troubleshooting functions.

Use the no variant of this command to disable this function.

Syntax debug lacp {all|cli|event|ha|packet|sync|timer[detail]}

no debug lacp {all|cli|event|ha|packet|sync|timer[detail]}

Mode Privileged Exec and Global Configuration

Examples awplus# debug lacp timer detail

awplus# debug lacp all

Commands

show debugging lacp

undebug lacp

Parameter Description

all Turn on all debugging for LACP.

cli Specifies debugging for CLI messages.

Echoes commands to the console.

event Specifies debugging for LACP events.

Echoes events to the console.

ha Specifies debugging for HA (High Availability) events.

Echoes High Availability events to the console.

packet Specifies debugging for LACP packets.

Echoes packet contents to the console.

sync Specified debugging for LACP synchronization.

Echoes synchronization to the console.

timer Specifies debugging for LACP timer.

Echoes timer expiry to the console.

detail Optional parameter for LACP timer-detail.

Echoes timer start/stop details to the console.

C613-50228-01 Rev A Command Reference for AR2050V 576

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LINK AGGREGATION COMMANDS

LACP GLOBAL-PASSIVE-MODE ENABLE

lacp global-passive-mode enable

Overview Use this command to enable LACP channel-groups to dynamically self-configure

when they are connected to another device that has LACP channel-groups

configured with Active Mode.

Syntax lacp global-passive-mode enable

no lacp global-passive-mode enable

Default Enabled

Mode Global Configuration

Usage Do not mix LACP configurations (manual and dynamic). When LACP global passive

mode is turned on (by using the lacp global-passive-mode enable command),

we do not recommend using a mixed configuration in a LACP channel-group; i.e.

some links are manually configured (by the channel-group command) and others

are dynamically learned in the same channel-group.

Example To enable global passive mode for LACP channel groups, use the command:

awplus(config)# lacp global-passive-mode enable

To disable global passive mode for LACP channel groups, use the command:

awplus(config)# no lacp global-passive-mode enable

Commands

show etherchannel

show etherchannel detail

C613-50228-01 Rev A Command Reference for AR2050V 577

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LINK AGGREGATION COMMANDS

LACP PORT-PRIORITY

lacp port-priority

Overview Use this command to set the priority of a device port. Ports are selected for

aggregation based on their priority, with the higher priority (numerically lower)

ports selected first.

Use the no variant of this command to reset the priority of port to the default.

Syntax lacp port-priority <1-65535>

no lacp port-priority

Default The default is 32768.

Mode Interface Configuration

Example awplus# configure terminal

awplus(config)# interface port1.0.5

awplus(config-if)# lacp port-priority 34

Parameter Description

<1-65535> Specify the LACP port priority.

C613-50228-01 Rev A Command Reference for AR2050V 578

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LINK AGGREGATION COMMANDS

LACP SYSTEM-PRIORITY

lacp system-priority

Overview Use this command to set the system priority of a local system. This is used in

determining the system responsible for resolving conflicts in the choice of

aggregation groups.

Use the no variant of this command to reset the system priority of the local system

to the default.

Syntax lacp system-priority <1-65535>

no lacp system-priority

Default The default is 32768.

Mode Global Configuration

Example awplus# configure terminal

awplus(config)# lacp system-priority 6700

Parameter Description

<1-65535> LACP system priority. Lower numerical values have higher priorities.

C613-50228-01 Rev A Command Reference for AR2050V 579

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LINK AGGREGATION COMMANDS

LACP TIMEOUT

lacp timeout

Overview Use this command to set the short or long timeout on a port. Ports will time out of

the aggregation if three consecutive updates are lost.

Syntax lacp timeout {short|long}

Default The default is long timeout (30 seconds).

Mode Interface Configuration

Usage This command enables the device to indicate the rate at which it expects to receive

LACPDUs from its neighbor.

If the timeout is set to long, then the device expects to receive an update every 30

seconds, and this will time a port out of the aggregation if no updates are seen for

90 seconds (i.e. 3 consecutive updates are lost).

If the timeout is set to short, then the device expects to receive an update every

second, and this will time a port a port out of the aggregation if no updates are

seen for 3 seconds (i.e. 3 consecutive updates are lost).

The device indicates its preference by means of the Timeout field in the Actor

section of its LACPDUs. If the Timeout field is set to 1, then the device has set the

short timeout. If the Timeout field is set to 0, then the device has set the long

timeout.

Setting the short timeout enables the device to be more responsive to

communication failure on a link, and does not add too much processing overhead

to the device (1 packet per second).

NOTE: It is not possible to configure the rate that the device sends LACPDUs; the device

must send at the rate which the neighbor indicates it expects to receive LACPDUs.

Examples The following commands set the LACP long timeout period for 30 seconds on

port1.0.2.

awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# lacp timeout long

Parameter Description

timeout Number of seconds before invalidating a received LACP data unit

(DU).

short LACP short timeout. The short timeout value is 1 second.

long LACP long timeout. The long timeout value is 30 seconds.

C613-50228-01 Rev A Command Reference for AR2050V 580

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LINK AGGREGATION COMMANDS

LACP TIMEOUT

The following commands set the LACP short timeout for 1 second on port1.0.2.

awplus# configure terminal

awplus(config)# interface port1.0.2

awplus(config-if)# lacp timeout short

C613-50228-01 Rev A Command Reference for AR2050V 581

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LINK AGGREGATION COMMANDS

SHOW DEBUGGING LACP

show debugging lacp

Overview Use this command to display the LACP debugging option set.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide.

Syntax show debugging lacp

Mode User Exec and Privileged Exec

Example awplus# show debugging lacp

Output Figure 16-1: Example output from the show debugging lacp command

Commands

debug lacp

LACP debugging status:

LACP timer debugging is on

LACP timer-detail debugging is on

LACP cli debugging is on

LACP packet debugging is on

LACP event debugging is on

LACP sync debugging is on

C613-50228-01 Rev A Command Reference for AR2050V 582

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LINK AGGREGATION COMMANDS

SHOW DIAGNOSTIC CHANNEL-GROUP

show diagnostic channel-group

Overview This command displays dynamic and static channel group interface status

information. The output of this command is useful for Allied Telesis authorized

service personnel for diagnostic purposes.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide.

Syntax show diagnostic channel-group

Mode User Exec and Privileged Exec

Example awplus# show diagnostic channel-group

Output Figure 16-2: Example output from the show diagnostic channel-group

command

Commands

show tech-support



awplus# show diagnostic channel-group



Channel Group Info based on NSM:

Note: Pos - position in hardware table

-------------------------------------------------------------

Dev Interface IfIndex Member port IfIndex Active Pos

-------------------------------------------------------------

po1 4601 port1.0.4 5004 No

po1 4601 port1.0.5 5005 No



Channel Group Info based on HSL:

Note: Pos - position in hardware table

-------------------------------------------------------------

Dev Interface IfIndex Member port IfIndex Active Pos

-------------------------------------------------------------

po1 4601 N/a



Channel Group Info based on IPIFWD:

Note: Pos - position in hardware table

-------------------------------------------------------------

Dev Interface IfIndex Member port IfIndex Active Pos

-------------------------------------------------------------

po1 4601 N/a



No error found

C613-50228-01 Rev A Command Reference for AR2050V 583

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LINK AGGREGATION COMMANDS

SHOW ETHERCHANNEL

show etherchannel

Overview Use this command to display information about a LACP channel specified by the

channel group number.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide, which is

available on our website at alliedtelesis.com.

Syntax show etherchannel [<1-32>]

Mode User Exec and Privileged Exec

Example awplus# show etherchannel

Output Figure 16-3: Example output from show etherchannel

Example awplus# show etherchannel 1

Output Figure 16-4: Example output from show etherchannel for a particular channel

Parameter Description

<1-32>Channel-group number.

awplus#show etherchannel 

LAG Maximum : 2

LAG Static Maximum: 2

LAG Dynamic Maximum: 2

LAG Static Count : 0

LAG Dynamic Count : 1

LAG Total Count : 1

Lacp Aggregator: po1

Member:

port1.0.1

port1.0.2

awplus#show etherchannel 1

Aggregator po1 (4601)

Mac address: 00:00:00:00:00:00

Admin Key: 0001 - Oper Key 0000

Receive link count: 0 - Transmit link count: 0

Individual: 0 - Ready: 0

Partner LAG: 0x0000,00-00-00-00-00-00

Link: port1.0.1 (5001) disabled

Link: port1.0.2 (5002) disabled

C613-50228-01 Rev A Command Reference for AR2050V 584

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LINK AGGREGATION COMMANDS

SHOW ETHERCHANNEL DETAIL

show etherchannel detail

Overview Use this command to display detailed information about all LACP channels.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide, which is

available on our website at alliedtelesis.com.

Syntax show etherchannel detail

Mode User Exec and Privileged Exec

Example awplus# show etherchannel detail

Output Example output from show etherchannel detail

awplus#show etherchannel detail

Aggregator po1 (IfIndex: 4601)

Mac address: 00:00:cd:37:05:17

Admin Key: 0001 - Oper Key 0001

Receive link count: 2 - Transmit link count: 2

Individual: 0 - Ready: 1

Partner LAG: 0x8000,00-00-cd-37-02-9a,0x0001

Link: port1.0.1 (IfIndex: 8002) synchronized

Link: port1.0.2 (IfIndex: 20002) synchronized

Aggregator po2 (IfIndex: 4602)

Mac address: 00:00:cd:37:05:17

Admin Key: 0002 - Oper Key 0002

Receive link count: 2 - Transmit link count: 2

Individual: 0 - Ready: 1

Partner LAG: 0x8000,ec-cd-6d-aa-c8-56,0x0002

Link: port1.0.3 (IfIndex: 8001) synchronized

Link: port1.0.4 (IfIndex: 20001) synchronized

C613-50228-01 Rev A Command Reference for AR2050V 585

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LINK AGGREGATION COMMANDS

SHOW ETHERCHANNEL SUMMARY

show etherchannel summary

Overview Use this command to display a summary of all LACP channels.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide, which is

available on our website at alliedtelesis.com.

Syntax show etherchannel summary

Mode User Exec and Privileged Exec

Example awplus# show etherchannel summary

Output Example output from show etherchannel summary



awplus#show etherchannel summary

Aggregator po10 (IfIndex: 4610)

Admin Key: 0010 - Oper Key 0010

Link: port1.0.1 (IfIndex: 7007) synchronized

Link: port1.0.2 (IfIndex: 8007) synchronized

Link: port1.0.3 (IfIndex: 11007) synchronized

C613-50228-01 Rev A Command Reference for AR2050V 586

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LINK AGGREGATION COMMANDS

SHOW LACP SYS-ID

show lacp sys-id

Overview Use this command to display the LACP system ID and priority.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide, which is

available on our website at alliedtelesis.com.

Syntax show lacp sys-id

Mode User Exec and Privileged Exec

Example awplus# show lacp sys-id

Output Example output from show lacp sys-id

System Priority: 0x8000 (32768)

MAC Address: 0200.0034.5684

C613-50228-01 Rev A Command Reference for AR2050V 587

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LINK AGGREGATION COMMANDS

SHOW LACP-COUNTER

show lacp-counter

Overview Use this command to display the packet traffic on all ports of all present LACP

aggregators, or a given LACP aggregator.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide, which is

available on our website at alliedtelesis.com.

Syntax show lacp-counter [<1-32>]

Mode User Exec and Privileged Exec

Example awplus# show lacp-counter 2

Output Example output from show lacp-counter

Parameter Description

<1-32>Channel-group number.

% Traffic statistics

Port LACPDUs Marker Pckt err

Sent Recv Sent Recv Sent Recv

% Aggregator po2 (IfIndex: 4604)

port1.0.2 0 0 0 0 0 0

C613-50228-01 Rev A Command Reference for AR2050V 588

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LINK AGGREGATION COMMANDS

SHOW PORT ETHERCHANNEL

show port etherchannel

Overview Use this command to show LACP details of the device port specified.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide, which is

available on our website at alliedtelesis.com.

Syntax show port etherchannel <port>

Mode User Exec and Privileged Exec

Example awplus# show port etherchannel port1.0.2

Output Example output from show port etherchannel

Parameter Description

<port> Name of the device port to display LACP information about.

awplus#show port etherchannel port1.0.2

LACP link info: port1.0.2 - 7007

Link: port1.0.2 (IfIndex: 7007)

Aggregator: po10 (IfIndex: 4610)

Receive machine state: Current

Periodic Transmission machine state: Slow periodic

Mux machine state: Collecting/Distributing

Actor Information: Partner Information:

Selected ................. Selected Partner Sys Priority ....... 0x8000

Physical Admin Key .............. 2 Partner System .. ec-cd-6d-d1-64-d0

Port Key ....................... 10 Port Key ....................... 10

Port Priority ............... 32768 Port Priority ............... 32768

Port Number .................. 7007 Port Number .................. 5001

Mode ....................... Active Mode ....................... Active

Timeout ...................... Long Timeout ...................... Long

Individual .................... Yes Individual .................... Yes

Synchronised .................. Yes Synchronised .................. Yes

Collecting .................... Yes Collecting .................... Yes

Distributing .................. Yes Distributing .................. Yes

Defaulted ...................... No Defaulted ...................... No

Expired ........................ No Expired ........................ No

C613-50228-01 Rev A Command Reference for AR2050V 589

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LINK AGGREGATION COMMANDS

SHOW STATIC-CHANNEL-GROUP

show static-channel-group

Overview Use this command to display all configured static channel groups and their

corresponding member ports. Note that a static channel group is the same as a

static aggregator.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide, which is

available on our website at alliedtelesis.com.

Syntax show static-channel-group

Mode User Exec and Privileged Exec

Example awplus# show static-channel-group

Output Example output from show static-channel-group

Commands

static-channel-group

awplus#show static-channel-group

LAG Maximum : 2

LAG Static Maximum: 2

LAG Dynamic Maximum: 2

LAG Static Count : 0

LAG Dynamic Count : 1

LAG Total Count : 1

C613-50228-01 Rev A Command Reference for AR2050V 590

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LINK AGGREGATION COMMANDS

STATIC-CHANNEL-GROUP

static-channel-group

Overview Use this command to create a static channel group, or add a member port to an

existing static channel group. Static channel groups are also known as static

aggregators.

You can create up to 2 static channel groups (or up to 2 dynamic channel groups).

Use the no variant of this command to remove the device port from the static

channel group.

Syntax static-channel-group <static-channel-group-number>

no static-channel-group

Mode Interface Configuration

Usage This command adds the device port to the static channel group with the specified

channel group number. If the channel group does not exist, it is created, and the

port is added to it. The no prefix detaches the port from the static channel group.

If the port is the last member to be removed, the static channel group is deleted.

All the ports in a channel group must have the same VLAN configuration: they

must belong to the same VLANs and have the same tagging status, and can only

be operated on as a group.

Once the static channel group has been created, it is treated as a device port, and

can be referred to in other commands that apply to device ports.

To refer to a static channel group in other static channel group commands, use the

channel group number. To specify a static channel group in other commands,

prefix the channel group number with sa. For example, ‘sa2’ refers to the static

channel group with channel group number 2.

Examples To define static channel group 2 on a device port, use the commands:

awplus# configure terminal

awplus(config)# interface port1.0.4

awplus(config-if)# static-channel-group 2

To reference static channel group 2 as an interface, use the commands:

awplus# configure terminal

awplus(config)# interface sa2

awplus(config-if)#

Parameter Description

<static-channel-

group-number>

<1-96> Static channel group number.

C613-50228-01 Rev A Command Reference for AR2050V 591

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LINK AGGREGATION COMMANDS

STATIC-CHANNEL-GROUP

Commands

show static-channel-group

C613-50228-01 Rev A Command Reference for AR2050V 592

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

LINK AGGREGATION COMMANDS

UNDEBUG LACP

undebug lacp

Overview This command applies the functionality of the no debug lacp command.

C613-50228-01 Rev A Command Reference for AR2050V 593

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

802.1Q

Encapsulation

Commands

Introduction

This chapter provides an alphabetical reference of commands used to configure

802.1Q Encapsulation. For more information, see the AAA and Port Authentication

Feature Overview and Configuration Guide.

Command List •“encapsulation dot1q” on page 594

C613-50228-01 Rev A Command Reference for AR2050V 594

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

802.1Q ENCAPSULATION COMMANDS

ENCAPSULATION DOT1Q

encapsulation dot1q

Overview Use this command to enable 802.1Q encapsulation on Ethernet interfaces or L2

tunnel interfaces—OpenVPN and L2TPv3 Ethernet pseudowire.

Use the no variant of this command to disable 802.1Q encapsulation for the VLAN

identified by the VLAN ID (VID).

Syntax encapsulation dot1q <vid>

no encapsulation dot1q <vid>

Default 802.1Q encapsulation is disabled by default on any Ethernet interface or Layer 2

tunnel interface.

Mode Interface Configuration

Usage You should enter the Ethernet interface or tunnel interface configuration mode to

enable 802.1Q encapsulation and configure the VID first. Then you can use the VID

to configure the subinterface associated with the Ethernet interface or tunnel

interface. Subinterfaces are logical interfaces. The subinterface index must be the

same as the VID. For example, if you configure VID 1 for eth1, then the subinterface

for eth1 is eth1.1. If you configure VID 2 for tunnel20, then the subinterface for

tunnel20 is tunnel20.2.

Examples To enable 802.1Q encapsulation on Ethernet interface eth1, use the commands:

awplus#configure terminal

awuplus(config)#interface eth1

awplus(config-if)#encapsulation dot1q 1

To enable 802.1Q encapsulation on tunnel interface tunnel20, use the commands:

awplus#configure terminal

awuplus(config)#interface tunnel20

awplus(config-if)#encapsulation dot1q 2

Parameter Description

<vid>Enter a VLAN ID in the range from 1 through 4094. The VLAN ID

identifies the VLAN to which the frames belong. It also identifies

the index of the subinterface of the Ethernet interface or Layer 2

tunnel interface.

C613-50228-01 Rev A Command Reference for AR2050V 595

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

802.1Q ENCAPSULATION COMMANDS

ENCAPSULATION DOT1Q

To enable multiple 802.1Q encapsulation on Ethernet interface eth2, use the

commands:

awplus#configure terminal

awuplus(config)#interface eth2

awplus(config-if)#encapsulation dot1q 1

awplus(config-if)#encapsulation dot1q 2

awplus(config-if)#encapsulation dot1q 3

To disable 802.1Q encapsulation on eth1, use the commands:

awplus#configure terminal

awuplus(config)#interface eth1

awuplus(config-if)#no encapsulation dot1q 1

Commands

interface (to configure)

Validation

Commands

show interface

C613-50228-01 Rev A Command Reference for AR2050V 596

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP Commands

Introduction

Overview This chapter provides an alphabetical reference of commands used to configure

and validate the PPP (Point-To-Point) protocol. For more information about PPP,

see the Point-to-Point Protocol (PPP) Feature Overview and_Configuration Guide.

Command List •“debug ppp” on page 598

•“encapsulation ppp” on page 601

•“interface (PPP)” on page 603

•“ip address negotiated” on page 604

•“ip tcp adjust-mss” on page 606

•“ip unnumbered” on page 608

•“ipv6 tcp adjust-mss” on page 610

•“keepalive (PPP)” on page 612

•“mtu (PPP)” on page 614

•“peer default ip address” on page 615

•“peer neighbor-route” on page 617

•“ppp authentication” on page 619

•“ppp authentication refuse” on page 621

•“ppp hostname” on page 623

•“ppp ipcp dns” on page 625

•“ppp ipcp dns suffix-list” on page 627

•“ppp ipcp ip-override” on page 629

•“ppp password” on page 630

•“ppp service-name (PPPoE)” on page 631

C613-50228-01 Rev A Command Reference for AR2050V 597

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

•“ppp timeout idle” on page 632

•“ppp username” on page 633

•“show debugging ppp” on page 634

•“show interface (PPP)” on page 635

•“undebug ppp” on page 639

C613-50228-01 Rev A Command Reference for AR2050V 598

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

DEBUG PPP

debug ppp

Overview Use this command to enable PPP protocol debugging on an optionally specified

PPP interface or range of PPP interfaces to analyze PPP behavior when diagnosing

PPP connectivity issues. If no interface is specified then debugging for all PPP

interfaces is enabled.

Use the no variant of this command to disable PPP protocol debugging on the

specified PPP interface. If no PPP interface is specified then PPP debugging for all

PPP interfaces is disabled.

Syntax debug ppp [interface <ppp-interface-list>]

no debug ppp [interface <ppp-interface-list>]

Default No diagnostic messages are enabled for PPP debugging. PPP debugging is

disabled by default.

Mode Global Configuration and Privileged Exec

Usage Debugging messages are sent to the logging system and can be viewed in log

output, filtered in permanent or buffered logs, and viewed on the terminal using

the terminal monitor command. See the status of PPP debugging with the show

debugging ppp command.

Note that debugging output for PPP shows packet debugging and events

debugging, see output below.

Note that disabling all debugging with the no debug all or the undebug all

commands also disables PPP debugging configured with this command.

Note that the negated form of this command is an alias of the undebug ppp

command.

Examples To enable PPP debugging on all PPP interfaces and send diagnostic messages to

the system log, use the below command:

awplus# debug ppp

To enable PPP debugging on PPP interfaces ppp0 through ppp2 and display them

on the console, use the below commands:

awplus# terminal monitor

awplus# debug ppp interface ppp0-ppp2

Parameter Description

<ppp-interface- list>Specify a PPP interface or a range of PPP interfaces in

the range ppp<0-255>. Use a hyphen between PPP

interfaces to include all PPP interfaces in a given range,

or use commas between PPP interfaces to specify

non-contiguous PPP interfaces.

C613-50228-01 Rev A Command Reference for AR2050V 599

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

DEBUG PPP

Output of packet

debugging

Figure 18-1: Example output from the debug ppp command on the console

awplus#terminal monitor 

awplus#debug ppp 



05:35:46 awplus pppd[24767]: [ppp0] [05:35:46.901] sent [IPCP

ConfReq id=0x1 <addr 

0.0.0.0> <ms-dns1 0.0.0.0> <ms-dns2 0.0.0.0>] 

05:35:46 awplus pppd[24767]: [ppp0] [05:35:46.901] sent [IPV6CP

ConfReq id=0x1 

<addr fe80::eecd:6dff:fe3a:0d23>] 

05:35:46 awplus pppd[24767]: [ppp0] [05:35:46.901] rcvd [LCP

ConfAck id=0x1 <magic 

0xd9153444>] 

05:35:46 awplus pppd[24767]: [ppp0] [05:35:46.919] rcvd [IPCP

ConfReq id=0x1 <addr 

192.168.1.1>] 

05:35:46 awplus pppd[24767]: [ppp0] [05:35:46.919] sent [IPCP

ConfAck id=0x1 <addr 

192.168.1.1>] 

05:35:46 awplus pppd[24767]: [ppp0] [05:35:46.919] rcvd [IPCP

ConfNak id=0x1 <addr 

192.168.1.2> <ms-dns1 1.1.1.1> <ms-dns2 2.2.2.2>] 

05:35:46 awplus pppd[24767]: [ppp0] [05:35:46.920] sent [IPCP

ConfReq id=0x2 <addr 

192.168.1.2> <ms-dns1 1.1.1.1> <ms-dns2 2.2.2.2>] 

05:35:46 awplus pppd[24767]: [ppp0] [05:35:46.921] rcvd [LCP

ProtRej id=0x2 80 57 

01 01 00 0e 01 0a ee cd 6d ff fe 3a 0d 23] 

05:35:46 awplus pppd[24767]: [ppp0] [05:35:46.921] Protocol-Reject

for 'IPv6 

Control Protocol' (0x8057) received 

05:35:46 awplus pppd[24767]: [ppp0] [05:35:46.922] rcvd [IPCP

ConfAck id=0x2 <addr 

192.168.1.2> <ms-dns1 1.1.1.1> <ms-dns2 2.2.2.2>] 

02:25:35 awplus pppd[2388]: [ppp1] [02:25:35.990] sent [LCP

EchoReq id=0x3b 

magic=0xe1e041db] 

02:25:35 awplus pppd[2388]: [ppp1] [02:25:35.991] rcvd [LCP

EchoReq id=0x3b 

magic=0xe3e331b1] 

02:25:35 awplus pppd[2388]: [ppp1] [02:25:35.991] sent [LCP

EchoRep id=0x3b 

magic=0xe1e041db] 

02:25:35 awplus pppd[2388]: [ppp1] [02:25:35.992] rcvd [LCP

EchoRep id=0x3b 

magic=0xe3e331b1]

C613-50228-01 Rev A Command Reference for AR2050V 600

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

DEBUG PPP

Output of event

debugging

Figure 18-2: Example output from the debug ppp command for a PPP interface

To record messages relating to PPP packets in the buffered log, first configure a

buffered log filter to select the messages using the commands:

awplus# configure terminal

awplus(config)# log buffered level debug program pppd

awplus(config)# end

Then configure PPP debugging, using the below command:

awplus# debug ppp

To disable PPP debugging for all PPP interfaces, use the below command:

awplus# no debug ppp

Commands

terminal monitor

encapsulation ppp

no debug all

ppp authentication

show debugging ppp

show interface (PPP)

undebug all

awplus#terminal monitor 

awplus#debug ppp interface ppp0 



05:35:43 awplus pppd[24767]: [ppp0] [05:35:43.710] using channel 1 

05:35:43 awplus pppd[24767]: [ppp0] [05:35:43.712] Using interface

ppp0 

05:35:43 awplus pppd[24767]: [ppp0] [05:35:43.712] Connect: ppp0

<--> hdlc0 

05:35:46 awplus PPP: IP is up on interface ppp0 [local-IP:

192.168.1.2, remote-IP: 

192.168.1.1] 

05:35:46 awplus PPP: IPCP [ppp0]: add IP interface [IP-addr:

192.168.1.2, mask: ] 

05:35:46 awplus PPP: IPCP [ppp0]: add host route [peer-IP:

192.168.1.1] 

05:35:47 awplus PPP: IPCP [ppp0]: add domain name server [DNS:

1.1.1.1] 

05:35:47 awplus PPP: IPCP [ppp0]: add domain name server [DNS:

2.2.2.2]

C613-50228-01 Rev A Command Reference for AR2050V 601

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

ENCAPSULATION PPP

encapsulation ppp

Overview Use this command to enable PPP encapsulation and create one or more PPP

interfaces over Ethernet, a cellular interface, or a L2TPv2 managed VPN.

Use the no variant of this command to disable PPP encapsulation and remove the

specified PPP interface.

Syntax encapsulation ppp <index>

no encapsulation ppp <index>

Default No PPP encapsulation or interfaces are configured by default.

Mode Interface Configuration mode for an Ethernet interface (e.g. interface eth1), or an

Ethernet sub-interface (e.g. interface eth1.1), or a cellular interface (e.g. interface

cellular0).

L2TP Tunnel Configuration mode for an L2TP tunnel (e.g. l2tp tunnel tunnel0).

Examples To configure a PPP interface with index 0 for Ethernet interface eth1, use the

commands:

awplus# configure terminal

awplus(config)# interface eth1

awplus(config-if)# encapsulation ppp 0

To shut down the ppp0 interface and remove it from Ethernet interface eth1, use

the commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# shutdown

awplus(config-if)# interface eth1

awplus(config-if)# no encapsulation ppp 0

To set the L2TP tunnel tunnel1 to encapsulate the PPP interface with index 1, use

the commands:

awplus# configure terminal

awplus(config)# l2tp tunnel tunnel1

awplus(config-l2tp-tunnel)# encapsulation ppp 1

Parameter Description

<index>The PPP interface index number in the range from 0 to 255.

C613-50228-01 Rev A Command Reference for AR2050V 602

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

ENCAPSULATION PPP

To remove the PPP interface with index 1 from L2TP tunnel tunnel1, use the

commands:

awplus# configure terminal

awplus(config)# l2tp tunnel tunnel1

awplus(config-l2tp-tunnel)# no encapsulation ppp 1

Commands

l2tp tunnel

ppp service-name (PPPoE)

show interface (PPP)

C613-50228-01 Rev A Command Reference for AR2050V 603

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

INTERFACE (PPP)

interface (PPP)

Overview Use this command to select a PPP interface to configure.

You need to use the encapsulation ppp command to enable PPP encapsulation

and create PPP interfaces first.

Syntax interface <PPP-interface-list>

Mode Global Configuration

Example The following example shows how to enter Interface mode to configure a PPP

interface.

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)#

Commands

ip address (IP Addressing and Protocol)

show interface

show interface brief

Parameter Description

<PPP-interface-list>The PPP interfaces or ports to configure. An interface-list

can be:

• a PPP interface (e.g. ppp0)

• a continuous range of PPP interfaces, separated by a

hyphen (e.g. ppp0-ppp2)

• a comma-separated non-continuous list of PPP

interfaces (e.g. ppp0,ppp2)

The specified interfaces must exist.

C613-50228-01 Rev A Command Reference for AR2050V 604

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

IP ADDRESS NEGOTIATED

ip address negotiated

Overview Use this command to obtain an IP address with the peer for a PPP interface via IPCP

(Internet Protocol Control Protocol) address negotiation when configuring a PPP

link for IP traffic.

Use the no variant of this command to remove IP address negotiation settings.

Syntax ip address negotiated [<default-ip-address>]

no ip address negotiated

Default No IP address negotiation with the peer is configured by default.

Mode Interface Configuration for a PPP interface

Usage Use this command to enable the device to automatically negotiate an IP address

for a PPP interface, and to enable all remote hosts to access the device using this IP

address. When the peer does not send an IP address via IPCP negotiation, the

specified default IP address will be used.

Examples To configure the PPP interface ppp0 to use IPCP to negotiate an IP address for

itself, use the below commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# ip address negotiated

To configure the PPP interface ppp0 to a default IP address of 10.9.9.2, for use

when the peer does not send an IP address via IPCP negotiation, use the below

commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# ip address negotiated 10.9.9.2

To stop the PPP interface ppp0 from using IPCP to negotiate an IP address for itself,

use the below commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# no ip address negotiated

Parameter Description

<default-ip-addr>Specify an optional default IP address for use instead of

an IP address assigned from the peer that is otherwise

configured for a PPP interface.

C613-50228-01 Rev A Command Reference for AR2050V 605

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

IP ADDRESS NEGOTIATED

Output To verify IPCP address negotiation is configured on PPP interface ppp0, use the

following command:

awplus# show running-config interface ppp0

Figure 18-3: Example output from a show running-config interface ppp0 to

verify IPCP configuration:

Commands

the show ip interface chapter

encapsulation ppp

peer default ip address

show running-config interface

! 

interface ppp0 

ip address negotiated 

! 

C613-50228-01 Rev A Command Reference for AR2050V 606

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

IP TCP ADJUST-MSS

ip tcp adjust-mss

Overview Use this command to set the Maximum Segment Size (MSS) size for an interface,

where MSS is the maximum TCP data packet size that the interface can transmit

before fragmentation.

Use the no variant of this command to remove a previously specified MSS size for

a PPP interface, and restore the default MSS size.

Syntax ip tcp adjust-mss {<mss-size>|pmtu}

no ip tcp adjust-mss

Default The default setting allows a TCP server or a TCP client to set the MSS value for itself.

Mode Interface Configuration

Usage When a host initiates a TCP session with a server it negotiates the IP segment size

by using the MSS option field in the TCP packet. The value of the MSS option field

is determined by the Maximum Transmission Unit (MTU) configuration on the host.

You can set a feasible MSS value on the following interfaces:

•PPP

• Ethernet

• VTI Tunnels (IPsec, GRE, IPv6, L2TP, OpenVPN)

•VLAN

• DS-Lite (see the command ds-lite adjust-mss)

Examples To configure an MSS size of 1452 bytes on PPP interface ppp0, use the commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# ip tcp adjust-mss 1452

To configure an MSS size of 1452 bytes on Ethernet interface eth1, use the

commands:

awplus# configure terminal

awplus(config)# interface eth1

awplus(config-if)# ip tcp adjust-mss 1452

Parameter Description

<mss-size><64-1460> Specifies the MSS size in bytes.

pmtu Adjust TCP MSS automatically with respect to the MTU on the

interface.

C613-50228-01 Rev A Command Reference for AR2050V 607

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

IP TCP ADJUST-MSS

To restore the MSS size to the default size on PPP interface ppp0, use the

commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# no ip tcp adjust-mss

Commands

mtu (PPP)

show interface

show interface (PPP)

show interface tunnel (GRE)

C613-50228-01 Rev A Command Reference for AR2050V 608

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

IP UNNUMBERED

ip unnumbered

Overview Use this command to borrow an IP address from the specified interface, on an

unnumbered ppp interface.

Use the no variant of this command to remove the borrowed IP address.

Syntax ip unnumbered <interface_name>

no ip unnumbered

Default IP unnumbered is disabled by default.

Mode Interface Configuration for a PPP interface

Usage An unnumbered PPP interface can process IP packets without explicitly assigning

an IP address. This is achieved by borrowing the primary IP address from the

specified interface. Valid interface types from which the IP address can be

borrowed from are: VLAN, ethernet, loopback and bridge.

Examples To borrow an IP address on unnumbered PPP from the vlan2 interface, use the

following commands:

awplus# configure terminal

awplus(config)# interface vlan2

awplus(config-if)# ip address 6.6.6.6/24

awplus(config-if)# exit

awplus(config)# interface ppp0

awplus(config-if)# ip unnumbered

vlan2

To remove the borrowed IP address, use the following commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# no ip unnumbered

To verify borrowed address is configured on PPP interface ppp0, use the following

command:

awplus# show interface ppp0

Parameter Description

<interface_name>Name of the Interface from which the IP address is to be

borrowed. Valid interface types from which the IP address

can be borrowed from are: VLAN, ethernet, loopback and

bridge.

C613-50228-01 Rev A Command Reference for AR2050V 609

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

IP UNNUMBERED

Figure 18-4: Example output from a show interface ppp0 to verify PPP IP

borrow configuration:

Commands

show ip interface

show interface tunnel (L2TPv3)

show running-config interface

awplus#show interface ppp0

Interface ppp0

Link is UP, administrative state is UP

Hardware is PPP

Interface is unnumbered. Using IPv4 address of vlan10 (2.2.2.2)

index 16778240 metric 1 mtu 1492

<UP,POINT-TO-POINT,RUNNING,NOARP,MULTICAST>

PPP is running over interface eth2

LCP Opened IPCP Opened 

MRU(bytes): Local config 1492, Local negotiated 1492, Peer

negotiated 1492

Magic number: Local config ON, Local negotiated ON, Peer

negotiated ON

Authentication: Local config None, Local neg None, Peer neg CHAP

IPv4 addresses: Local config 0.0.0.0

Local neg 2.2.2.2, Peer neg 1.1.1.1

IPv6 Id Local config: 0000:0000:0000:0000

PPPoE is using the default service

SNMP link-status traps: Disabled

input packets 2, bytes 20, dropped 0, multicast packets 0

output packets 2, bytes 20, multicast packets 0 broadcast

packets 0

Time since last state change: 0 days 00:00:13

C613-50228-01 Rev A Command Reference for AR2050V 610

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

IPV6 TCP ADJUST-MSS

ipv6 tcp adjust-mss

Overview Use this command to set the IPv6 Maximum Segment Size (MSS) size for an

interface, where MSS is the maximum TCP data packet size that the interface can

transmit before fragmentation.

Use the no variant of this command to remove a previously specified MSS size for

a PPP interface, and restore the default MSS size.

Syntax ip tcp adjust-mss {<mss-size>|pmtu}

no ip tcp adjust-mss

Default The default setting allows a TCP server or a TCP client to set the MSS value for itself.

Mode Interface Configuration

Usage When a host initiates a TCP session with a server it negotiates the IP segment size

by using the MSS option field in the TCP packet. The value of the MSS option field

is determined by the Maximum Transmission Unit (MTU) configuration on the host.

You can set a feasible MSS value on the following interfaces:

•PPP

• Ethernet

• VTI Tunnels (IPsec, GRE, IPv6, L2TP, OpenVPN)

•VLAN

• DS-Lite (see the command ds-lite adjust-mss)

Examples To configure an IPv6 MSS size of 1452 bytes on PPP interface ppp0, use the

commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# ipv6 tcp adjust-mss 1452

To configure an IPv6 MSS size of 1452 bytes on Ethernet interface eth1, use the

commands:

awplus# configure terminal

awplus(config)# interface eth1

awplus(config-if)# ip tcp adjust-mss 1452

Parameter Description

<mss-size><64-1460> Specifies the MSS size in bytes.

pmtu Adjust TCP MSS automatically with respect to the MTU on the

interface.

C613-50228-01 Rev A Command Reference for AR2050V 611

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

IPV6 TCP ADJUST-MSS

To restore the MSS size to the default size on PPP interface ppp0, use the

commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# no ip tcp adjust-mss

Commands

mtu (PPP)

show interface

show interface (PPP)

show interface tunnel (GRE)

C613-50228-01 Rev A Command Reference for AR2050V 612

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

KEEPALIVE (PPP)

keepalive (PPP)

Overview Use this command to enable LCP (Link Control Protocol) Echo keepalive request

messages and change LCP echo parameters on a given PPP interface in Interface

Configuration mode.

Use the no variant of this command to disable LCP Echo keepalive request

messages on a given PPP interface in Interface Configuration mode. Note that

disabling the sending of LCP Echo keepalive request messages does not stop a

device responding to LCP Echo requests.

Syntax keepalive [[interval <interval>] [attempts

<attempt-limit>]]no keepalive

Default The sending of LCP Echo keepalive messages on a PPP interface is disabled by

default. If no optional interval is specified then the default interval duration is

configured to 10 seconds. If no optional attempts are specified then the default

attempt limit is configured to 3 attempts.

Mode Interface Configuration for a PPP interface

Example To enable the device to send LCP Echo keepalive messages on the PPP interface

ppp0with the default 10 second interval when no interval is specified and the

default 3 attempts when no attempt is specified, enter the below commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# keepalive

To enable the device to send LCP Echo keepalive messages on the PPP interface

ppp0 with double the default values for a 20 second interval and 6 attempts, enter

the below commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# keepalive interval 20 attempts 6

Parameter Description

<interval>Specify the interval in seconds in the range <1-600> seconds

between LCP Echo keepalive request messages, for a PPP

interface.

Default: 10

<attempt-limit>Specify the number of missing LCP Echo keepalive response

messages, in the range <1-10> for a PPP interface, before the

link is considered as being link down and link renegotiation

starts to reestablish the link.

Default: 3

C613-50228-01 Rev A Command Reference for AR2050V 613

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

KEEPALIVE (PPP)

To disable the device from sending LCP Echo keepalive messages on the PPP

interface ppp0, enter the below commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# no keepalive

Commands

show running-config interface

C613-50228-01 Rev A Command Reference for AR2050V 614

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

MTU (PPP)

mtu (PPP)

Overview Use this command to set the Maximum Transmission Unit (MTU) size for a PPP

interface, where MTU is the maximum packet size that PPP interfaces can transmit.

Use the no variant of this command to remove a previously specified MTU size for

a PPP interface, and restore the default MTU size (1492 bytes) for PPP interfaces.

Syntax mtu <mtu-size>

no mtu

NOTE: For PPPoE the minimum MTU value is 128.

Default The default MTU size is 1492 bytes for PPPoE interfaces. The MTU should be greater

than, or equal to, the MSS.

Mode Interface Configuration for PPP interfaces.

Usage If a router receives an IPv4 packet for another PPP interface with an MTU size

smaller than the packet size, and if the packet has the ‘ don’t fragment’ bit set,

then the switch will send an ICMP ‘ destination unreachable’ (3) packet type and

a ‘ fragmentation needed and DF set’ (4) code back to the source.

See the ip tcp adjust-mss command to set the Maximum Segment Size (MSS) after

first setting the MTU size.

Examples To configure an MTU size of 1492 bytes on PPP interface ppp0, use the commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# mtu 1492

To restore the MTU size to the default MTU size of 1492 bytes on PPP interface

ppp0, use the commands

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# no mtu

Commands

ip tcp adjust-mss

show interface (PPP)

Parameter Description

<mtu-size><68-1492> Specifies the Maximum Transmission Unit (MTU) size in

bytes, where 1492 bytes is the default MTU size for a PPPoE interface

and 1500 bytes for PPP via other lower layer interface types. This

allows for the 8-byte PPPoE header that is added to make up the total

of a 1582 byte packet that matches the default MTU size for the

Ethernet link..

C613-50228-01 Rev A Command Reference for AR2050V 615

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

PEER DEFAULT IP ADDRESS

peer default ip address

Overview Use this command to set the default IP address assigned to the peer if required for

a given PPP interface.

Use the optional required keyword with this command to specify that the peer

must use this address for a given PPP interface, or drop the connection.

Use the no variant of this command to remove the previously specified peer

default IP address for a given PPP interface.

Syntax peer default ip address <default-ip-address> [required]

no peer default ip address

Default No default IP address is configured to be assigned to the peer.

Mode Interface Configuration for a PPP interface

Examples To configure the PPP interface ppp0 to assign the IP address of 192.168.0.1 to

its peer upon request, use the below commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# peer default ip address 192.168.0.1

To configure the PPP interface ppp0 to have the default peer IP address of

192.168.0.1, and be required to use it or drop the connection, use the below

commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# peer default ip address 192.168.0.1

required

To remove the default peer IP address of 192.168.0.1 from the PPP interface

ppp0, enter the below commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# no peer default ip address

Parameter Description

<default-ip-

address>

Specify the IPv4 address to be assigned to the peer upon

request.

required Optionally specify the peer to acknowledge the default IP

address, which requires the peer to use the address or drop the

connection.

C613-50228-01 Rev A Command Reference for AR2050V 616

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

PEER DEFAULT IP ADDRESS

To verify the required peer default IP address 192.168.0.1 is configured on PPP

interface ppp0, use the following command:

awplus# show running-config interface ppp0

Output

Commands

ip address negotiated

show running-config interface

Table 1: Example output from the show running-config interface ppp0

command

awplus# show running-config interface ppp0 

! 

interface ppp0 

peer default ip address 192.168.0.1 required 

! 

C613-50228-01 Rev A Command Reference for AR2050V 617

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

PEER NEIGHBOR-ROUTE

peer neighbor-route

Overview Use this command in Interface Configuration mode for a PPP interface to re-enable

the creation of peer neighbor routes after the default behavior has been disabled.

Use the no form of this command in Interface Configuration mode for a PPP

interface to disable the default behavior of creating a neighbor route for the peer.

Syntax peer neighbor-route

no peer neighbor-route

Default A 32-bit host route (with a /32 mask) is created to the peer address on a PPP

interface after PPP IPCP negotiation finishes.

Usage Use the no form of this command if the default behavior creates issues within your

network. Use the show ip route command to validate the route behavior after

issuing this command.

Mode Interface Configuration for a PPP interface

Examples To re-enable the default behavior for the PPP interface ppp1, where a 32-bit host

route (with a /32 mask) is created to the peer address on a PPP interface after PPP

IPCP negotiation finishes, enter the commands:

awplus# configure terminal

awplus(config)# interface ppp1

awplus(config-if)# peer neighbor-route

To disable the default behavior for the PPP interface ppp0, to prevent a 32-bit host

route being added to the IP router table, enter the commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# no peer neighbor-route

Commands

show interface (PPP)

show ip route

Output Figure 18-5: Example validation output from the show interface and show ip

route commands issued before and after the no peer

neighbor-route command (see IPv4 address in show interface

output and see connected routes show ip route output):

C613-50228-01 Rev A Command Reference for AR2050V 618

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

PEER NEIGHBOR-ROUTE

awplus#show interface ppp1 

Interface ppp1 

Scope: both 

Link is UP, administrative state is UP 

Hardware is PPP 

IPv4 address 4.1.1.2/32 pointopoint 4.1.1.1 

index 16778241 metric 1 mtu 1460 

<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> 

VRF Binding: Not bound 

PPP is running over interface tunnel1 

LCP Opened IPCP Opened 

L2TP session ID is 59451 

SNMP link-status traps: Disabled 

input packets 5, bytes 66, dropped 0, multicast packets 0 

output packets 4, bytes 46, multicast packets 0 broadcast packets 0 

Time since last state change: 0 days 00:02:24 

awplus#show ip route 

Codes: C - connected, S - static, R - RIP, B - BGP 

O - OSPF, IA - OSPF inter area 

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 

E1 - OSPF external type 1, E2 - OSPF external type 2 

* - candidate default 



C 4.1.1.1/32 is directly connected, ppp1 

C 4.1.1.2/32 is directly connected, ppp1 

C 192.168.10.0/24 is directly connected, vlan1 

awplus#configure terminal 

Enter configuration commands, one per line. End with CNTL/Z. 

awplus(config)#interface ppp1 

awplus(config-if)#no peer neighbor-route 

awplus(config-if)#exit 

awplus(config)#exit 

awplus#show interface ppp1 

Interface ppp1 

Scope: both 

Link is UP, administrative state is UP 

Hardware is PPP 

IPv4 address 4.1.1.2/32 

index 16778241 metric 1 mtu 1460 

<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> 

VRF Binding: Not bound 

PPP is running over interface tunnel1 

LCP Opened IPCP Opened 

L2TP session ID is 6262 

SNMP link-status traps: Disabled 

input packets 5, bytes 66, dropped 0, multicast packets 0 

output packets 4, bytes 46, multicast packets 0 broadcast packets 0 

Time since last state change: 0 days 00:00:09 

awplus#show ip route 

Codes: C - connected, S - static, R - RIP, B - BGP 

O - OSPF, IA - OSPF inter area 

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 

E1 - OSPF external type 1, E2 - OSPF external type 2 

* - candidate default 



C 4.1.1.2/32 is directly connected, ppp1 

C 192.168.10.0/24 is directly connected, vlan1

C613-50228-01 Rev A Command Reference for AR2050V 619

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

PPP AUTHENTICATION

ppp authentication

Overview Use this command in Interface Configuration mode for a PPP interface to configure

PAP (Password Authentication Protocol), CHAP (Challenge Authentication

Protocol), or EAP (Extensible Authentication Protocol).

Use the no form of this command in Interface Configuration mode for a PPP

interface to disable all PAP, CHAP, and EAP authentication for a specified PPP

interface.

Syntax ppp authentication {eap|chap|pap}

no ppp authentication

Default There is no PPP authentication protocol defined or configured to a PPP interface

by default.

Mode Interface Configuration for a PPP interface

Examples To enable PPP PAP authentication on the PPP interface ppp0, enter the

commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# ppp authentication pap

To enable PPP CHAP authentication on the PPP interface ppp0, enter the

commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# ppp authentication chap

To enable PPP EAP authentication on the PPP interface ppp0, enter the

commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# ppp authentication eap

Parameter Description

eap Specify this parameter to enable EAP on a PPP interface

chap Specify this parameter to enable CHAP on a PPP interface.

pap Specify this parameter to enable PAP on a PPP interface.

C613-50228-01 Rev A Command Reference for AR2050V 620

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

PPP AUTHENTICATION

To attempt PPP EAP authentication, then fall back to PPP CHAP authentication if

the attempt to enable PPP EAP authentication fails on the PPP interface ppp0,

enter the commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# ppp authentication eap chap

To attempt PPP CHAP authentication, then fall back to PPP PAP authentication if

the attempt to enable PPP CHAP authentication fails on the PPP interface ppp0,

enter the commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# ppp authentication chap pap

To disable all PPP authentication on the PPP interface ppp0, enter the commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# no ppp authentication

Commands

ppp authentication refuse

ppp hostname

ppp password

ppp username

C613-50228-01 Rev A Command Reference for AR2050V 621

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

PPP AUTHENTICATION REFUSE

ppp authentication refuse

Overview Use this command in Interface Configuration mode for a PPP interface to refuse

EAP, CHAP (Challenge Handshake Authentication Protocol) or PAP (Password

Authentication Protocol) authentication from peers requesting it.

Use the no form of this command in Interface Configuration mode for a PPP

interface to allow authentication from peers requesting it.

Syntax ppp authentication refuse {eap|chap|pap}

no ppp authentication refuse

Mode Interface Configuration for a PPP interface

Usage This command specifies that EAP, CHAP or PAP authentication is disabled, so all

requests by the peer for the user to authenticate using EAP, CHAP or PAP are

refused.

Examples To refuse the use of PAP authentication if a peer requests PAP authentication,

enter the commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# ppp authentication refuse pap

To refuse the use of CHAP authentication if a peer requests CHAP authentication,

enter the commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# ppp authentication refuse chap

Parameter Description

eap Use this parameter to specify the router will refuse LCP

configuration requests containing the authentication protocol

option with EAP received on this PPP interface.

chap Use this parameter to specify the router will refuse LCP

configuration requests containing the authentication protocol

option with CHAP received on this PPP interface.

pap Use this parameter to specify the router will refuse LCP

configuration requests containing the authentication protocol

option with PAP on this PPP interface.

C613-50228-01 Rev A Command Reference for AR2050V 622

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

PPP AUTHENTICATION REFUSE

To refuse the use of EAP authentication if a peer requests EAP authentication, enter

the commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# ppp authentication refuse eap

To allow the use of EAP, CHAP or PAP authentication if a peer requests EAP, CHAP

or PAP authentication, enter the commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# no ppp authentication refuse

Commands

ppp authentication

C613-50228-01 Rev A Command Reference for AR2050V 623

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

PPP HOSTNAME

ppp hostname

Overview Use this command in Interface Configuration mode for a PPP interface to configure

a unique identifier for that PPP authenticator. This is used by the authenticator to

fill the Name field in a CHAP challenge packet, or is used to fill the Server Name field

in an EAP SRP-SHA1 (Subtype 1 Request) packet. The hostname sent with PPP

packet exchanges is normally the hostname of the router, as configured with the

hostname command.

Use the no form of this command in Interface Configuration mode for a PPP

interface to disable a configured alternate hostname and revert to using the

hostname, as configured with the hostname command.

See the Usage section below for information about when you may want to specify

another hostname, instead of the system hostname configured from the

hostname command, using this command.

Syntax ppp hostname <hostname>

no ppp hostname <hostname>

Default The default PPP hostname is the system hostname as specified with the hostname

command.

Mode Interface Configuration for a PPP interface

Usage This command allows the PPP username that is sent to be independent of the

router hostname for a specific PPP interface.

Examples To enable the use of the alternate hostname remote_router for PPP

authentication, enter the commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# ppp hostname remote_router

Parameter Description

<hostname>Specify this parameter to use an alternate hostname for PPP EAP

and CHAP authentication instead of the hostname specified by the

hostname command. The name can contain up to 255 characters.

The name can contain any printable ASCII characters (ASCII

32-126). If the name contains the special characters backslash,

double-quote or space, those characters should be escaped with a

backslash.

C613-50228-01 Rev A Command Reference for AR2050V 624

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

PPP HOSTNAME

To disable the use of the alternate hostname remote_router for PPP

authentication, enter the commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# no ppp hostname remote_router

Commands

hostname

ppp authentication

C613-50228-01 Rev A Command Reference for AR2050V 625

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

PPP IPCP DNS

ppp ipcp dns

Overview Use this command to configure the primary and secondary DNS (Domain Name

System) IP addresses for IPCP (Internet Protocol Control Protocol) on a given PPP

interface.

Use the no variant of this command to remove the primary and secondary DNS IP

addresses for IPCP on a given PPP interface, and remove any optional parameters

configured for DNS.

Syntax ppp ipcp dns [<primary> [<secondary>]][required|reject|request]

no ppp ipcp dns

Default By default no IPCP DNS server request is sent to the peer.

Mode Interface Configuration

Usage Use the optional parameters to configure PPP IPCP DNS options for accepting,

rejecting or requesting DNS addresses from the peer. Use the optional primary and

secondary or primary only DNS server address placeholders to specify DNS server

addresses to the peer.

The no variant of this command also stops IPCP DNS request messages being sent

to the peer.

Examples To configure the PPP interface ppp0 to require a DNS IP address from the peer, and

close the link if a DNS IP address is not given, enter the below commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# ppp ipcp dns required

Parameter Description

<primary>Specify the primary DNS address for a given PPP interface to the

peer.

<secondary>Specify the secondary DNS address for a given PPP interface to the

peer.

required Request DNS addresses from the peer, and close the link if none is

given.

reject Reject negotiations with the peer (default).

request Request DNS addresses from the peer.

C613-50228-01 Rev A Command Reference for AR2050V 626

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

PPP IPCP DNS

To configure the PPP interface ppp0 to require a DNS IP address from the peer,

enter the below commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# ppp ipcp dns request

To configure the PPP interface ppp0 to reject a DNS IP address from the peer, enter

the below commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# ppp ipcp dns reject

To configure the PPP interface ppp0 to supply primary and secondary DNS server

addresses to the peer, enter the below commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# ppp ipcp dns 10.1.1.2 10.1.1.3

To configure the PPP interface ppp0 to supply a primary but not a secondary DNS

server address to the peer, enter the below commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# ppp ipcp dns 10.1.1.2

Commands

ip address negotiated

peer default ip address

peer neighbor-route

show running-config interface

C613-50228-01 Rev A Command Reference for AR2050V 627

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

PPP IPCP DNS SUFFIX-LIST

ppp ipcp dns suffix-list

Overview Use this command to configure a suffix-list to be associated with DNS

name-servers learned over the PPP connection.

Use the no variant of this command to remove the suffix-list.

Syntax ppp ipcp dns suffix-list <domain-list-name>

no ppp ipcp dns suffix-list

Mode Interface Configuration

Usage A PPP connection can be configured to learn DNS servers from the remote peer by

using the command ppp ipcp dns command.

This command allows a user to associate a domain-list to be used to match against

the suffixes of incoming DNS requests. For example, a customer branch office may

have a router that is used to give remote-access to their head office, over which

they learn the IP address of the head office's DNS server. A domain list can be

created that contains a suffix used for services internal to that company, for

example, "example.lc". This domain-list is associated as a suffix-list to the PPP

connection. So when the PPP connection is completed with the head office, users

at the branch office that browse to "intranet.example.lc" will have the DNS request

forwarded to the DNS server learned over the PPP connection. Without having the

suffix-list configured, the DNS request for "intranet.example.lc" would instead be

sent to the primary DNS server, which is likely to be the branch office's ISP, and they

will simply respond with a negative reply, because .example.lc is not a globally

routable domain.

Examples At a branch office, to direct DNS lookups for domains with suffixes of

"engineering.acme" or "intranet.acme" to an internal corporate name-server run at

head-office that was learned over a PPP connection, use the commands:

awplus# configure terminal

awplus(config)# ip dns forwarding domain-list corporatedomains

host(config-domain-list)# description Our internal network

domains; do not send DNS requests to internet

host(config-domain-list)# domain engineering.acme

host(config-domain-list)# domain intranet.acme

awplus(config)# interface ppp0

awplus(config-if)# ppp ipcp dns required

awplus(config-if)# ppp ipcp dns suffix-list corporatedomains

Parameter Description

<domain-list-name>The name of the DNS domain-list

C613-50228-01 Rev A Command Reference for AR2050V 628

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

PPP IPCP DNS SUFFIX-LIST

Commands

ip dns forwarding domain-list

ppp ipcp dns

C613-50228-01 Rev A Command Reference for AR2050V 629

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

PPP IPCP IP-OVERRIDE

ppp ipcp ip-override

Overview Use this command to override the IP address negotiated via IPCP with peer and use

the statically configured address on a given PPP interface.

Use the no variant of this command to use any address negotiated with the peer

via IPCP on a given PPP interface.

Syntax ppp ipcp ip-override

no ppp ipcp ip-override

Default By default the address is negotiated with the peer via IPCP.

Mode Interface Configuration

Examples To override the IP address negotiated with the peer via IPCP and use statically

configured address on interface ppp0, use the commands below:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# ip address 192.168.1.100/24

awplus(config-if)# ppp ipcp ip-override

Commands

show running-config interface

C613-50228-01 Rev A Command Reference for AR2050V 630

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

PPP PASSWORD

ppp password

Overview Use this command in Interface Configuration mode for a PPP interface to configure

a PPP secret password to be used in response to a challenge from an unknown

remote peer.

Use the no form of this command in Interface Configuration mode for a PPP

interface to disable a configured PPP secret password.

Syntax ppp password <password>

no ppp password

Default There is no PPP password defined or configured to a PPP interface by default.

Mode Interface Configuration for a PPP interface

Examples To enable the use of the PPP secret password bobs_secret for PPP

authentication, enter the commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# ppp password bobs_secret

To disable the use of the PPP secret password bobs_secret for PPP

authentication, enter the commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# no ppp password

Commands

ppp authentication

ppp username

Parameter Description

<password>Specify this parameter to configure a PPP secret password to be used

in response to an unknown remote peer. You can use any printable

characters, including spaces. A password can contain up to 255

printable characters.

C613-50228-01 Rev A Command Reference for AR2050V 631

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

PPP SERVICE-NAME (PPPOE)

ppp service-name (PPPoE)

Overview This command configures the PPPoE service name used to select a service from an

access concentrator. This can only be applied when the PPP interface has been

configured over an underlying eth interface.

Use the no variant of this command to set the service name for the connection

back to the default (unset).

Syntax ppp service-name <service-name>

no ppp service-name

Default The default option is not to specify a service name. This results in a connection to

the default service specified by the access concentrator.

Mode Interface Configuration for a PPP interface

Usage You can only apply a single service name to each PPPoE interface.

Examples To connect to a service called “Internet”, use the command:

awplus(config)# interface ppp0

awplus(config-if)# ppp service-name Internet

Commands

encapsulation ppp

show interface (PPP)

Parameter Description

<service-name>Specifies the PPPoE service name to select from an access

concentrator. The service-name is 1 to 18 characters long, is

case-sensitive, and for a PPPoE client is usually supplied by the

ISP.

The name can contain any printable ASCII characters (ASCII

32-126). If the name contains the special characters backslash,

double-quote or space, those characters should be escaped

with a backslash.

The default is no service name.

C613-50228-01 Rev A Command Reference for AR2050V 632

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

PPP TIMEOUT IDLE

ppp timeout idle

Overview Use this command to specify an idle time when a PPP connection is disconnected.

Use the no variant of this command to reset the idle time to the default of 60

seconds.

Syntax ppp timeout idle <0-99999>

no ppp timeout idle

Default PPP timeout idle is not set and the PPP Dial on Demand feature is disabled. If no

idle time is set, the default value of 60 seconds is used.

Mode Interface Configuration

Usage This command allows an idle timer to disconnect a PPP connection after a

specified time. The timer is reset upon either ingress or regress user traffic.

Non-user traffic such as Link Control Protocol (LCP) keepalives and Network

Control Protocol (NCP) negotiation packets do not reset the idle timer.

Examples To set the idle time to 30 seconds, enter the below commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# ppp timeout idle

To disable the use of the timer and disable the PPP Dial on Demand feature, enter

the below commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# no ppp timeout

idle 30

Validation

Commands

show running-config interface

Parameter Description

<0-99999>The time in seconds before the idle timeout disconnects. If this is

not specified the default value of 60 seconds is used.

C613-50228-01 Rev A Command Reference for AR2050V 633

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

PPP USERNAME

ppp username

Overview This command creates or modifies a username for a PPP user on a configured PPP

interface.

Syntax ppp username <username>

no ppp username

Default There is no default PPP username defined or configured to a PPP interface.

Mode Interface Configuration for a PPP interface.

Examples To create the PPP username bob, for the PPP interface ppp0, use the commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# ppp username bob

To remove the PPP username bob, for the PPP interface ppp0, use the commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# no ppp username

Commands

ppp authentication

ppp password

Parameter Description

<username>Specify a login name for the user. The name can contain up to 255

characters.

The name can contain any printable ASCII characters (ASCII 32-126). If

the name contains the special characters backslash, double-quote or

space, those characters should be escaped with a backslash.

C613-50228-01 Rev A Command Reference for AR2050V 634

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

SHOW DEBUGGING PPP

show debugging ppp

Overview Use this command to display PPP debug settings for optionally specified PPP

interfaces. If no PPP interfaces are specified then PPP debug settings are shown for

all available PPP interfaces.

Syntax show debugging ppp [interface <0-255>]

Mode Privileged Exec

Examples The following example shows how to display PPP debug information for PPP

interface ppp0:

awplus# show debugging ppp interface ppp0

The following example shows how to display PPP debug information for PPP

interface ppp0 through ppp2:

awplus# show debugging ppp interface ppp0-ppp2

The following example shows how to display PPP debug information for PPP

interface ppp0 and ppp2:

awplus# show debugging ppp interface ppp0,ppp2

The following example shows how to display PPP debug information for all

available PPP interfaces:

awplus# show debugging ppp

Figure 18-6: Example output from the show debugging ppp command

Commands

debug ppp

no debug all

undebug all

show interface (PPP)

Parameter Description

<0-255>Specify a PPP interface or a range of PPP interfaces in the

range ppp<0-255>. Use a hyphen between PPP

interfaces to include all PPP interfaces in a given range,

or use commas between PPP interfaces to specify

non-contiguous PPP interfaces.

awplus# show debugging ppp 

PPP debugging status: 

PPP debug on interface ppp0: enabled 

PPP debug on interface ppp1: disabled 

C613-50228-01 Rev A Command Reference for AR2050V 635

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

SHOW INTERFACE (PPP)

show interface (PPP)

Overview Use this command to display configuration and status information for a configured

PPP (Point-to-Point) interface.

Syntax show interface ppp<ppp_index>

Mode User Exec and Privileged Exec

Usage See the show interface brief command for brief interface, configuration and status

information.

Note the negotiated options, including those for DNS addresses, are shown in

console output:

•Local DNS addresses as displayed in console output are provided from

the peer.

•Peer DNS addresses as displayed in console output are provided to the

peer.

•Only Peer DNS addresses or Local DNS addresses are shown, but

not both.

•Echo Request Timer value as displayed in console output is the local

setting.

Example The following example shows how to display the configuration and status

information for a configured PPP interface named ppp0.

awplus# show interface ppp0

Parameter Description

<ppp_index> Display configuration and status information for the specified

and configured PPP interface (0 to 255).

C613-50228-01 Rev A Command Reference for AR2050V 636

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

SHOW INTERFACE (PPP)

Figure 18-7: Example output from the show interface command for a PPPoE

interface

awplus#show interface ppp0 



Interface ppp0 

Scope: both 

Link is UP, administrative state is UP 

Hardware is PPP 

IPv4 address 10.1.0.2/32 

IPv6 address fe80::200:cdff:fe28:8a1/10 

index 16778440 metric 1 

<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> 

VRF Binding: Not bound 

PPP is running over interface eth0 

PPPoE is using the default service 

SNMP link-status traps: Disabled 

input packets 12, bytes 458, dropped 0, multicast packets 0 

output packets 6, bytes 122, multicast packets 0 broadcast

packets 0 

Time since last state change: 0 days 00:01:57 

C613-50228-01 Rev A Command Reference for AR2050V 637

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

SHOW INTERFACE (PPP)

Figure 18-8: Example output from the show interface ppp1 command showing

negotiated DNS addresses, where the peer provided the DNS

information (see the Local DNS addresses field output below):

awplus#sh interface ppp1 

Interface ppp1 

Scope: both 

Link is UP, administrative state is UP 

Hardware is PPP 

IPv4 address 192.168.1.1/30 pointopoint 192.168.1.2 

IPv6 address fe80::200:cdff:fe28:89f/10 

index 16778241 metric 1 mtu 1460 

<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> 

VRF Binding: Not bound 

PPP is running over interface tunnel1 

LCP Opened IPCP Opened IPV6CP Opened 

MRU(bytes): Local config 1460, Local negotiated 1460, Peer

negotiated 1460 

Magic number: Local config ON, Local negotiated ON, Peer

negotiated ON 

Authentication: Local config None, Local neg None, Peer neg None 

Echo Request Timer (seconds): 10 

IPv4 addresses: Local config 192.168.1.1, Peer neg 192.168.1.2 

IPv6 interface ID: Local eecd:6dff:fe3a:0d18, Peer neg

eecd:6dff:fe3a:0d18 

Local DNS addresses: 192.168.60.1, 192.168.60.2 

L2TP session ID is 15288 

SNMP link-status traps: Disabled 

input packets 5, bytes 96, dropped 0, multicast packets 0 

output packets 5, bytes 96, multicast packets 0 broadcast

packets 0 

Time since last state change: 0 days 00:06:29 

awplus# 

C613-50228-01 Rev A Command Reference for AR2050V 638

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

SHOW INTERFACE (PPP)

Figure 18-9: Example output from the show interface ppp1 command showing

negotiated DNS addresses, where the peer was provided with DNS

information (see the Peer DNS addresses field output below):

Commands

encapsulation ppp

ppp service-name (PPPoE)

show interface

show interface brief

awplus#sh interface ppp1 

Interface ppp1 

Scope: both 

Link is UP, administrative state is UP 

Hardware is PPP 

IPv4 address 192.168.1.1/30 pointopoint 192.168.1.2 

IPv6 address fe80::200:cdff:fe28:89f/10 

index 16778241 metric 1 mtu 1460 

<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> 

VRF Binding: Not bound 

PPP is running over interface tunnel1 

LCP Opened IPCP Opened IPV6CP Opened 

MRU(bytes): Local config 1460, Local negotiated 1460, Peer

negotiated 1460 

Magic number: Local config ON, Local negotiated ON, Peer

negotiated ON 

Authentication: Local config None, Local neg None, Peer neg None 

Echo Request Timer (seconds): 10 

IPv4 addresses: Local config 192.168.1.1, Peer neg 192.168.1.2 

IPv6 interface ID: Local eecd:6dff:fe3a:0d18, Peer neg

eecd:6dff:fe3a:0d18 

Peer DNS addresses: 1.1.1.1, 2.2.2.2 

L2TP session ID is 15288 

SNMP link-status traps: Disabled 

input packets 5, bytes 96, dropped 0, multicast packets 0 

output packets 5, bytes 96, multicast packets 0 broadcast

packets 0 

Time since last state change: 0 days 00:06:29 

awplus# 



C613-50228-01 Rev A Command Reference for AR2050V 639

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP COMMANDS

UNDEBUG PPP

undebug ppp

Overview Use this command to disable PPP protocol debugging on the specified PPP

interface or interfaces. If no PPP interface is specified then PPP debugging for all

PPP interfaces is disabled.

This command has the same functionality as the no variant of the debug ppp

command.

Syntax undebug ppp [interface <ppp-interface-list>]

Default No diagnostic messages are enabled for PPP debugging. PPP debugging is

disabled by default.

Mode Privileged Exec

Usage Note that this command is an alias of the negated form of the debug ppp

command.

Examples To disable PPP debugging for all PPP interfaces, enter the below command:

awplus# undebug ppp

To disable PPP debugging for PPP interfaces ppp0, enter the below command:

awplus# undebug ppp interface ppp0

To disable PPP debugging for PPP interfaces ppp0 through ppp2, enter the below

command:

awplus# undebug ppp interface ppp0-ppp2

To disable PPP debugging for PPP interfaces ppp0 and ppp2, enter the below

command:

awplus# undebug ppp interface ppp0,ppp2

Commands

debug ppp

no debug all

show debugging ppp

undebug all

Parameter Description

<ppp-interface-list>Specify a PPP interface or a range of PPP interfaces in

the range ppp<0-255>. Use a hyphen between PPP

interfaces to include all PPP interfaces in a given range,

or use commas between PPP interfaces to specify

non-contiguous PPP interfaces.

C613-50228-01 Rev A Command Reference for AR2050V 640

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP over Ethernet

(PPPoE) Commands

Introduction

Overview This chapter provides an alphabetical reference of commands used to configure a

PPP over Ethernet (PPPoE) Access Concentrator (AC).

For more information, see the L2TPv2 Tunneling of PPP Feature Overview and

Configuration Guide.

Command List •“clear pppoe-ac statistics” on page 641

•“debug pppoe-ac” on page 642

•“destination l2tp” on page 643

•“l2tp peer-address dns-lookup” on page 644

•“l2tp peer-address radius-lookup group” on page 646

•“l2tp peer-address static” on page 647

•“l2tp profile” on page 649

•“ppp-auth-protocol” on page 651

•“pppoe-ac” on page 652

•“pppoe-ac-service” on page 653

•“proxy-auth” on page 654

•“service-name” on page 655

•“show debugging pppoe ac” on page 657

•“show pppoe-ac config-check” on page 658

•“show pppoe-ac connections” on page 660

•“show pppoe-ac statistics” on page 662

•“show running-config pppoe-ac” on page 665

C613-50228-01 Rev A Command Reference for AR2050V 641

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP OVER ETHERNET (PPPOE) COMMANDS

CLEAR PPPOE-AC STATISTICS

clear pppoe-ac statistics

Overview Use this command to zero all the PPPoE Access Concentrator statistics counters,

and restart the counters incrementing from zero.

To see the affected counter values, use the command show pppoe-ac statistics.

Syntax clear pppoe-ac statistics

Default n/a

Mode Privileged Exec

Example To set all the PPPoE Access Concentrator statistics counters to zero, use the

command:

awplus# clear pppoe-ac statistics

Commands

show pppoe-ac statistics

C613-50228-01 Rev A Command Reference for AR2050V 642

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP OVER ETHERNET (PPPOE) COMMANDS

DEBUG PPPOE-AC

debug pppoe-ac

Overview Use this command to enable debugging of the PPPoE Access Concentrator.

Use the no variant of this command to disable debugging of the PPPoE Access

Concentrator.

Syntax debug pppoe-ac

no debug pppoe-ac

Default PPPoE Access Concentrator debugging is disabled by default.

Mode Privileged Exec

Example To enable PPPoE AC debugging, use the commands:

awplus# debug pppoe-ac

awplus# terminal monitor

% Warning: Console logging enabled

Commands

debug l2tp

show debugging pppoe ac

Parameter Description

<varname> Description of varname

C613-50228-01 Rev A Command Reference for AR2050V 643

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP OVER ETHERNET (PPPOE) COMMANDS

DESTINATION L2TP

destination l2tp

Overview Use this command to set the destination to forward all PPPoE packets to the peer

over L2TP.

Use the no variant of this command to unset the destination for PPPoE packets.

Syntax destination l2tp

no destination

Default This command is not configured by default.

Mode PPPoE Access Concentrator Configuration

Example To sets the destination to forward all PPPoE packets for the service ‘ISP-service’ to

the peer over L2TP, use the commands:

awplus# configure terminal

awplus(config)# pppoe-ac ISP-service

awplus(config-pppoe-ac)# destination l2tp

To unset the destination for PPPoE packets for the service ‘ISP-service’, use the

commands:

awplus# configure terminal

awplus(config)# pppoe-ac ISP-service

awplus(config-pppoe-ac)# no destination

Commands

l2tp peer-address dns-lookup

l2tp peer-address radius-lookup group

l2tp peer-address static

l2tp profile

pppoe-ac

ppp-auth-protocol

service-name

show running-config pppoe-ac

C613-50228-01 Rev A Command Reference for AR2050V 644

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP OVER ETHERNET (PPPOE) COMMANDS

L2TP PEER-ADDRESS DNS-LOOKUP

l2tp peer-address dns-lookup

Overview Use this command to set the LNS address to use via a DNS lookup from the

username email domain for this PPPoE Access Concentrator service.

Use the no variant of this command to remove the DNS lookup setting for this

PPPoE AC service.

Syntax l2tp peer-address dns-lookup [prefix <prefix>|]

no l2tp peer-address

Default This command is not set by default.

Mode PPPoE Access Concentrator Configuration

Example To set the LNS address to use via a DNS lookup for the PPPoE AC service

‘ISP-service’, use the commands:

awplus# configure terminal

awplus(config)# pppoe-ac ISP-service

awplus(config-pppoe-ac)# l2tp peer-address dns-lookup

To set the LNS address to use via a DNS lookup and prepend "lns" to the domain

name portion of the username, use the commands:

awplus# configure terminal

awplus(config)# pppoe-ac ISP-service

awplus(config-pppoe-ac)# l2tp peer-address dns-lookup prefix

lns

To remove the DNS lookup setting for the PPPoE AC service ‘ISP-service’, use the

commands:

awplus# configure terminal

awplus(config)# pppoe-ac ISP-service

awplus(config-pppoe-ac)# no l2tp peer-address

Commands

destination l2tp

l2tp peer-address radius-lookup group

l2tp peer-address static

l2tp profile

pppoe-ac

ppp-auth-protocol

Parameter Description

<prefix> A string to prepend to the domain name portion of the username.

C613-50228-01 Rev A Command Reference for AR2050V 645

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP OVER ETHERNET (PPPOE) COMMANDS

L2TP PEER-ADDRESS DNS-LOOKUP

service-name

show running-config pppoe-ac

C613-50228-01 Rev A Command Reference for AR2050V 646

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP OVER ETHERNET (PPPOE) COMMANDS

L2TP PEER-ADDRESS RADIUS-LOOKUP GROUP

l2tp peer-address radius-lookup group

Overview Use this command to set this PPPoE Access Concentrator (AC) service to get the

LNS address by a RADIUS lookup.

Use the no variant of this command to remove the L2TP peer address setting.

Syntax l2tp peer-address radius-lookup group <radius-group-name>

no l2tp peer-address

Default No L2TP peer address is set by default.

Mode PPPoE Access Concentrator Configuration

Example To find peer address via RADIUS lookup from Radius server group called "GROUP1",

use the commands:

awplus# configure terminal

awplus(config)# pppoe-ac ISP-service

awplus(config-pppoe-ac)# l2tp peer-address radius-lookup group

GROUP1

To remove the RADIUS lookup setting for the PPPoE AC service ‘ISP-service’, use

the commands:

awplus# configure terminal

awplus(config)# pppoe-ac ISP-service

awplus(config-pppoe-ac)# no l2tp peer-address

Commands

aaa group server

destination l2tp

l2tp peer-address dns-lookup

l2tp peer-address static

l2tp profile

pppoe-ac

ppp-auth-protocol

service-name

show running-config pppoe-ac

Parameter Description

<radius-group-name> The name of the RADIUS group to lookup.

C613-50228-01 Rev A Command Reference for AR2050V 647

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP OVER ETHERNET (PPPOE) COMMANDS

L2TP PEER-ADDRESS STATIC

l2tp peer-address static

Overview Use this command to set the IP address or fully qualified domain name of the L2TP

peer (LNS) to which the L2TP tunnel should be established for this PPPoE Access

Concentrator route.

Use the no variant of this command to remove the configured L2TP peer (LNS)

address.

Syntax l2tp peer-address static

{<l2tp-peer-ip-address>|<l2tp-peer-domain-name>}

no l2tp peer-address

Default No L2TP peer address is configured by default.

Mode PPPoe Access Concentrator Configuration

Example To configure L2TP to tunnel all users to the LNS located at IP address 192.168.11.2,

use the commands:

awplus# configure terminal

awplus(config)# pppoe-ac ISP-service

awplus(cinfig-pppoe-ac)# l2tp peer-address static 192.168.11.2

To configure L2TP to tunnel all users to the LNS located at domain

foo.mydomain.org, use the commands:

awplus# configure terminal

awplus(config)# pppoe-ac ISP-service

awplus(config-pppoe-ac)# l2tp peer-address static

foo.mydomain.org

To remove the configured peer (LNS) address, use the commands:

awplus# configure terminal

awplus(config)# pppoe-ac ISP-service

awplus(cinfig-pppoe-ac)# no l2tp peer-address

Commands

destination l2tp

l2tp peer-address dns-lookup

l2tp peer-address radius-lookup group

Parameter Description

<l2tp-peer-ip-address> The IPv4 address of the L2TP peer (LNS) for this

PPPoE AC route, in dotted-decimal format.

<l2tp-peer-domain-name> The fully-qualified domain name of the L2TP peer

(LNS) for this PPPoE AC route.

C613-50228-01 Rev A Command Reference for AR2050V 648

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP OVER ETHERNET (PPPOE) COMMANDS

L2TP PEER-ADDRESS STATIC

l2tp profile

ppp-auth-protocol

service-name

show running-config pppoe-ac

C613-50228-01 Rev A Command Reference for AR2050V 649

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP OVER ETHERNET (PPPOE) COMMANDS

L2TP PROFILE

l2tp profile

Overview Use this command to set the profile to use for L2TP traffic for this PPPoE Access

Concentrator (AC).

Use the no variant of this command to remove L2TP profile setting from this PPPoE

AC.

Syntax l2tp profile <l2tp-profile-name>

no l2tp profile <l2tp-profile-name>

Default This command is not configured by default.

Mode PPPoE Access Concentrator Configuration

Usage The L2TP profile name used in this command is created by the l2tp-profile

command.

Example To allow AC service "ISP-service" to use the L2TP profile called "PUBLIC", use the

commands:

awplus# configure terminal

awplus(config)# pppoe-ac ISP-service

awplus(config-pppoe-ac)# l2tp profile PUBLIC

To unset the L2TP profile for the AC service "ISP-service", use the commands:

awplus# configure terminal

awplus(config)# pppoe-ac ISP-service

awplus(config-pppoe-ac)# no l2tp profile PUBLIC

Commands

destination l2tp

l2tp-profile

l2tp peer-address dns-lookup

l2tp peer-address radius-lookup group

l2tp peer-address static

l2tp-profile

pppoe-ac

ppp-auth-protocol

service-name

Parameter Description

<l2tp-profile-name> The name of the L2TP profile that the PPPoE AC is to use.

to use.

C613-50228-01 Rev A Command Reference for AR2050V 650

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP OVER ETHERNET (PPPOE) COMMANDS

L2TP PROFILE

show running-config pppoe-ac

C613-50228-01 Rev A Command Reference for AR2050V 651

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP OVER ETHERNET (PPPOE) COMMANDS

PPP-AUTH-PROTOCOL

ppp-auth-protocol

Overview Use this command to set the authentication protocol to be used for this PPPoE

Access Concentrator (AC) service.

Use the no variant of this command to reset the authentication protocol to the

default.

Syntax ppp-auth-protocol {chap|pap|eap}

no ppp-auth-protocol

Default Default PPP authentication protocol is CHAP.

Mode PPPoE Access Concentrator Configuration

Example To set PPP authentication for the PPPoE AC service ‘ISP-service’ to use PAP, use the

commands:

awplus# configure terminal

awplus(config)# pppoe-ac ISP-service

awplus(config-pppoe-ac)# ppp-auth-protocol pap

To set PPP authentication to use the default (CHAP), use the commands:

awplus# configure terminal

awplus(config)# pppoe-ac ISP-service

awplus(config-pppoe-ac)# no ppp-auth-protocol

Commands

destination l2tp

l2tp peer-address dns-lookup

l2tp peer-address radius-lookup group

l2tp peer-address static

l2tp profile

pppoe-ac

service-name

show running-config pppoe-ac

Parameter Description

chap Set the PPP authentication protocol to Challenge Handshake

Authentication Protocol (default).

pap Set the PPP authentication protocol to Password Authentication

Protocol.

eap Set the PPP authentication protocol to Extensible Authentication

Protocol.

C613-50228-01 Rev A Command Reference for AR2050V 652

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP OVER ETHERNET (PPPOE) COMMANDS

PPPOE-AC

pppoe-ac

Overview Use this command to create a PPPoE Access Concentrator (AC) and put the device

into PPPoE Access Concentrator Configuration mode, in which subsequent

commands can be entered.

Use the no variant of this command to remove the PPPoE AC and all its

configuration.

Syntax pppoe-ac <label>

no pppoe-ac <label>

Default No PPPoE AC services are configured by default.

Mode Global Configuration

Example To configure a PPPoE AC called "ISP-service", use the commands:

awplus# configure terminal

awplus(config)# pppoe-ac ISP-service

awplus(config-pppoe-ac)#

To remove a PPPoE AC called "ISP-service" and its configuration, use the

commands:

awplus# configure terminal

awplus(config)# no pppoe-ac ISP-service

Commands

destination l2tp

l2tp peer-address dns-lookup

l2tp peer-address radius-lookup group

l2tp peer-address static

l2tp profile

pppoe-ac

ppp-auth-protocol

pppoe-ac-service

service-name

show running-config pppoe-ac

Parameter Description

<label> A unique label for the PPPoE AC service.

C613-50228-01 Rev A Command Reference for AR2050V 653

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP OVER ETHERNET (PPPOE) COMMANDS

PPPOE-AC-SERVICE

pppoe-ac-service

Overview Use this command to attach the specified PPPoE Access Concentrator (AC) service

to the interface. An AC service can be offered on several interfaces. Up to six PPPoE

AC services can be set for one interface. Only ETH and VLAN interfaces accept this

command.

Use the no variant of this command to remove the AC service from the interface.

Syntax pppoe-ac-service <label>

no pppoe-ac-service <label>

Default No PPPoE AC service is attached to an interface by default.

Mode Interface Configuration

Usage The label of the PPPoE AC service specified in this command is created by the

pppoe-ac command.

Example To provide a PPPoE AC service labeled ‘ISP-service’ for client requests received on

interface eth1, use the commands:

awplus# configure terminal

awplus(config)# interface eth1

awplus(config-if)# pppoe-ac-service ISP-service

To remove the PPPoE AC service ‘isp1’ from interface eth1, use the commands:

awplus# configure terminal

awplus(config)# interface eth1

awplus(config-if)# no pppoe-ac-service isp1

Commands

pppoe-ac

Parameter Description

<label> The name (label) of the PPPoE AC service to be attached to the

interface.

C613-50228-01 Rev A Command Reference for AR2050V 654

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP OVER ETHERNET (PPPOE) COMMANDS

PROXY-AUTH

proxy-auth

Overview Use this command to enable the proxy authentication to allow PPP authentication

data to be collected and sent to an L2TP peer in additional L2TP AVPs when the

L2TP session is established.

Use the no variant of this command to disable the proxy authentication.

Syntax proxy-auth

no proxy-auth

Default Proxy authentication is enabled by default.

Mode PPPoE Access Concentrator Configuration

Example To enable proxy authentication for the PPPoE AC service "ISP-service", use the

commands:

awplus# configure terminal

awplus(config)# pppoe-ac ISP-service

awplus(config-pppoe-ac)# proxy-auth

Disable proxy authentication for PPPoE AC service "ISP-service:

awplus# configure terminal

awplus(config)# pppoe-ac ISP-service

awplus(config-pppoe-ac)# no proxy-auth

Commands

destination l2tp

l2tp peer-address dns-lookup

l2tp peer-address radius-lookup group

ppp-auth-protocol

pppoe-ac-service

service-name

show running-config pppoe-ac

C613-50228-01 Rev A Command Reference for AR2050V 655

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP OVER ETHERNET (PPPOE) COMMANDS

SERVICE-NAME

service-name

Overview Use this command to configure the PPPoE service name offered by the Access

Concentrator (AC).

Use the no variant of this command to remove the service offered by the AC.

Syntax service-name {any|<service-name> [advertised]}

no service-name {any|<service-name>}

Default No PPPoE service is configured by default.

Mode PPPoE Access Concentrator Configuration

Example To set the PPPoE AC labelled ‘ISP-service’ to provide service to any client

requesting it, regardless of the service name they request, use the commands:

awplus# configure terminal

awplus(config)# pppoe-ac ISP-service

awplus(config-pppoe-ac# service-name any

To offer a private (unadvertised) PPPoE service "internet" and an advertised PPPoE

service "remote-office" to a client, use the commands:

awplus# configure terminal

awplus(config)# pppoe-ac ISP-service

awplus(config-pppoe-ac)# service-name internet

awplus(config-pppoe-ac)# service-name remote-office advertised

To remove the non-matching (any) PPPoE service so that it is no longer offered to

a client, use the commands:

awplus# configure terminal

awplus(config)# pppoe-ac ISP-service

awplus(config-pppoe-ac)# no service-name any

Parameter Description

<service-name> The name of the service to be offered.

any The service should be provided to any client requesting it,

regardless of the service name they request.

advertised Whether the service is advertised to other clients.

C613-50228-01 Rev A Command Reference for AR2050V 656

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP OVER ETHERNET (PPPOE) COMMANDS

SERVICE-NAME

To remove the private PPPoE service "internet" and advertised service

"remote-office", so they are no longer offered to a client, use the commands:

awplus# configure terminal

awplus(config)# pppoe-ac ISP-service

awplus(config-pppoe-ac)# no service-name internet

awplus(config-pppoe-ac)# no service-name remote-office

Commands

destination l2tp

l2tp peer-address dns-lookup

l2tp peer-address radius-lookup group

l2tp peer-address static

l2tp profile

pppoe-ac

ppp-auth-protocol

show running-config pppoe-ac

C613-50228-01 Rev A Command Reference for AR2050V 657

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP OVER ETHERNET (PPPOE) COMMANDS

SHOW DEBUGGING PPPOE AC

show debugging pppoe ac

Overview Use this command to display the status of the PPPoE AC debugging.

Syntax show debugging pppoe ac

Mode Privileged Exec

Usage Enable PPPoE AC debugging with the debug pppoe-ac command.

Example To display the status of PPPoE AC debugging, use the command:

awplus# show debugging pppoe ac

Output Figure 19-1: Example output from show debugging pppoe ac

Commands

debug pppoe-ac

awplus#show debugging pppoe ac 

PPPoE-AC Debugging is on

C613-50228-01 Rev A Command Reference for AR2050V 658

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP OVER ETHERNET (PPPOE) COMMANDS

SHOW PPPOE-AC CONFIG-CHECK

show pppoe-ac config-check

Overview Use this command to display information about the validity of the configurations

for PPPoE AC routes.

Syntax show pppoe-ac [<label>] config-check

Mode Privileged Exec

Example To display the validity of the configurations for all PPPoE AC services, use the

command:

awplus# show pppoe-ac config-check

To display the validity of the configurations for the PPPoE AC labelled "ac1" only,

use the command:

awplus# show pppoe-ac ac1 config-check

Output Figure 19-2: Example output from show pppoe-ac config-check

Parameter Description

<label> The label for the PPPoE AC service.

awplus#sh pppoe-ac config-check 



PPPoE Access Concentrator ac: 

Incomplete Configuration 

Required: add pppoe-ac-service to one or more interfaces

Required: destination 

Required: service-name 

Required: l2tp peer-address 

Required: l2tp profile 



PPPoE Access Concentrator ac1: 

Incomplete Configuration 

Required: add pppoe-ac-service to one or more interfaces 



PPPoE Access Concentrator pppoeservice: 

Complete Configuration

Table 19-1: Parameters in the output from show pppoe-ac config-check

Parameter Description

Incomplete

configuration

Further configuration is required to create a valid PPPoE

AC service.

C613-50228-01 Rev A Command Reference for AR2050V 659

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP OVER ETHERNET (PPPOE) COMMANDS

SHOW PPPOE-AC CONFIG-CHECK

Commands

pppoe-ac

show running-config pppoe-ac

Complete

configuration

There is sufficient configuration of this PPPoE AC service

to be valid.

Required Parameters that still need to be configured for this PPPoE

AC service.

Table 19-1: Parameters in the output from show pppoe-ac config-check (cont.)

Parameter Description

C613-50228-01 Rev A Command Reference for AR2050V 660

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP OVER ETHERNET (PPPOE) COMMANDS

SHOW PPPOE-AC CONNECTIONS

show pppoe-ac connections

Overview Use this command to display information about current routes for the specified

PPPoE Access Concentrator (AC) service or for all PPPoE AC services.

Syntax show pppoe-ac [<label>] connections

Mode User Exec/Privileged Exec

Example To display current routes information for all PPPoE AC services, use the command:

awplus# show pppoe-ac connections

To display information about connected routes for the PPPoE AC service

"pppoeservice" only, use the command:

awplus# show pppoe-ac pppoeservice connections

Output Figure 19-3: Example output from show pppoe-ac connections

Parameter Description

<label> The label for the PPPoE AC service.

awplus#show pppoe-ac connections 

PPPoE Access Concentrator Connection Status

------------------------------------------------------------------

Route Name: pppoeservice-eth1 

Route ID: 29785 

Source Information 

Interface: eth1 

Session ID: 14204 

Service Name: test 

State: Open 

Peer MAC: 00:00:cd:38:01:4f 

Destination Information 

Type: L2TP 

Tunnel ID: 11223 

Session ID: 57309 



Route Name: ac1-eth2 

Route ID: 34409 

Source Information 

Interface: eth2 

Session ID: 14108 

Service Name: my_isp 

State: Open 

Peer MAC: 00:00:cd:38:01:4d 

Destination Information 

Type L2TP 

Tunnel ID 47432 

Session ID 10056

C613-50228-01 Rev A Command Reference for AR2050V 661

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP OVER ETHERNET (PPPOE) COMMANDS

SHOW PPPOE-AC CONNECTIONS

Commands

pppoe-ac

Table 19-2: Parameters in the output from show pppoe-ac connections

Parameter Description

Route Name The name of the route.

Route ID The ID of the route.

Source Information Information about the source of the PPPoE route.

Interface The incoming interface name.

Session ID The PPPoE session ID.

Service Name The service name that this PPPoE AC is offering. This is the

service name assigned by the service-name command.

State The state of the PPPoE connection; e.g. open.

peer MAC The MAC address of the LNS.

Destination

information

Information about the destination for this PPPoE route.

Type The type of destination of the this PPPoE connection, for

example, L2TP.

Tunnel ID The ID of the L2TP tunnel.

Session ID The ID of the PPPoE session.

C613-50228-01 Rev A Command Reference for AR2050V 662

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP OVER ETHERNET (PPPOE) COMMANDS

SHOW PPPOE-AC STATISTICS

show pppoe-ac statistics

Overview Use this command to displays the statistics for the PPPoE Access Concentrator

(AC).

Syntax show pppoe-ac statistics

Mode Privileged Exec

Example To display statistics for PPPoE AC, use the command:

awplus# show pppoe-ac statistics

Output Figure 19-4: Example output from show pppoe-ac statistics

awplus#sh pppoe-ac statistics

PPPoE Access Concentrator Statistics 

Name Value

--------------------------------------------------------------

lnsLookupSuccessfulRequests 0

lnsLookupFailedRequests 0

lnsLookupDnsFailures 0

lnsLookupRadiusFailures 0

l2tpTunnelsOpened 2

l2tpSessionsOpened 2

l2tpSessionsClosed 0

l2tpDnsFailures 0

pppoePadiReceived 2

pppoeInvalidPadi 0

pppoePadoSent 2

pppoePadsSent 2

pppoePadrReceived 2

pppoeInvalidPadr 0

pppoeResentPadr 0

pppoePadtReceived 0

pppoeInvalidPadt 0

pppoePadtSent 0

routesCreated 2

routesCreateFail 0

routesDeleted 0

routesDeleteFail 0

routesDstOpenFail 0

routesDestCloseFail 0

routesSourceCloseFail 0

routesClosedByDest 0

routesClosedBySource 0

C613-50228-01 Rev A Command Reference for AR2050V 663

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP OVER ETHERNET (PPPOE) COMMANDS

SHOW PPPOE-AC STATISTICS

Table 19-3: Parameters in the output from show pppoe-ac statistic

Parameter Description

lnsLookupSuccessfulRequests The number of successful LNS address

lookup requests.

lnsLookupFailedRequests The number of failed LNS address lookup

requests.

lnsLookupDnsFailures The number of LNS address DNS lookup

failures.

lnsLookupRadiusFailures The number of LNS address RADIUS lookup

failures.

l2tpTunnelsOpened The number of L2TP tunnels opened.

l2tpSessionsOpened The number of L2TP sessions opened.

l2tpSessionsClosed The number of L2TP sessions closed.

l2tpDnsFailures The number of L2TP DNS lookup failures.

pppoePadiReceived The number of PADI packets received.

pppoeInvalidPadi The number of invalid PADI packets received.

pppoePadoSent The number of PADO packets sent.

pppoePadsSent The number of PADS packets sent.

pppoePadrReceived The number of PADR packets received.

pppoeInvalidPadr The number of invalid PADR packets

received.

pppoeResentPadr The number of resent PADR packets received.

pppoePadtReceived The number of PADT packets received.

pppoeInvalidPadt The number of invalid PADT packets

received.

pppoePadtSent The number of PADT packets sent.

routesCreated The number of routes created.

routesCreateFail The number of route create failures.

routesDeleted The number of routes deleted.

routesDeleteFail The number of route delete failures.

routesDstOpenFail The number of destination open failures.

C613-50228-01 Rev A Command Reference for AR2050V 664

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP OVER ETHERNET (PPPOE) COMMANDS

SHOW PPPOE-AC STATISTICS

Commands

clear pppoe-ac statistics

pppoe-ac

routesDestCloseFail The number of destination close failures.

routesSourceCloseFail The number of source close failures.

routesClosedByDest The number of routes closed by the

destination.

routesClosedBySource The number of routes closed by the source.

Table 19-3: Parameters in the output from show pppoe-ac statistic (cont.)

Parameter Description

C613-50228-01 Rev A Command Reference for AR2050V 665

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

PPP OVER ETHERNET (PPPOE) COMMANDS

SHOW RUNNING-CONFIG PPPOE-AC

show running-config pppoe-ac

Overview Use this command to display the PPPoE Access Concentrator (AC) running

configuration.

Syntax show running-config pppoe-ac

Mode Privileged Exec

Example To display the running configuration for the PPPoE AC, use the command:

awplus# running-config pppoe-ac

Output Figure 19-5: Example output from show running-config pppoe-ac

Commands

destination l2tp

l2tp peer-address dns-lookup

l2tp peer-address radius-lookup group

l2tp peer-address static

l2tp profile

pppoe-ac

ppp-auth-protocol

proxy-auth

service-name

show pppoe-ac config-check

awplus#show running-config pppoe-ac

pppoe-ac-service ISP-service

service-name remote-office advertised

ppp-auth-protocols pap

destination l2tp

l2tp peer-address static 192.168.11.2

l2tp profile PUBLIC

C613-50228-01 Rev A Command Reference for AR2050V 666

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

Part 3: Routing

C613-50228-01 Rev A Command Reference for AR2050V 667

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP Addressing and

Protocol Commands

Introduction

Overview This chapter provides an alphabetical reference of commands used to configure

various IP features, including the following protocols:

• Address Resolution Protocol (ARP)

For more information, see the IP Feature Overview and Configuration Guide.

Command List •“arp-aging-timeout” on page 669

•“arp (IP address MAC)” on page 670

•“arp log” on page 672

•“arp opportunistic-nd” on page 675

•“arp-reply-bc-dmac” on page 677

•“clear arp-cache” on page 678

•“debug ip packet interface” on page 680

•“ip address (IP Addressing and Protocol)” on page 682

•“ip directed-broadcast” on page 684

•“ip forward-protocol udp” on page 686

•“ip gratuitous-arp-link” on page 688

•“ip helper-address” on page 690

•“ip limited-local-proxy-arp” on page 692

•“ip local-proxy-arp” on page 694

•“ip proxy-arp” on page 695

•“ip redirects” on page 696

•“ip tcp synack-retries” on page 697

•“ip tcp timeout established” on page 698

C613-50228-01 Rev A Command Reference for AR2050V 668

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

•“ip unreachables” on page 699

•“local-proxy-arp” on page 701

•“optimistic-nd” on page 702

•“ping” on page 703

•“show arp” on page 705

•“show debugging ip packet” on page 708

•“show ip forwarding” on page 710

•“show ip interface” on page 711

•“show ip interface vrf” on page 712

•“show ip sockets” on page 714

•“show ip traffic” on page 717

•“tcpdump” on page 719

•“traceroute” on page 720

•“undebug ip packet interface” on page 721

C613-50228-01 Rev A Command Reference for AR2050V 669

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

ARP-AGING-TIMEOUT

arp-aging-timeout

Overview This command sets a timeout period on dynamic ARP entries associated with a

specific interface. If your device stops receiving traffic for the host specified in a

dynamic ARP entry, it deletes the ARP entry from the ARP cache after this timeout

is reached.

Your device times out dynamic ARP entries to ensure that the cache does not fill

with entries for hosts that are no longer active. Static ARP entries are not aged or

automatically deleted.

By default the time limit for dynamic ARP entries is 300 seconds on all interfaces.

The no variant of this command sets the time limit to the default of 300 seconds.

Syntax arp-aging-timeout <0-432000>

no arp-aging timeout

Default 300 seconds (5 minutes)

Mode Interface Configuration for a VLAN interface.

Example To set the ARP entries on interface vlan30 to time out after two minutes, use the

commands:

awplus# configure terminal

awplus(config)# interface vlan30

awplus(config-if)# arp-aging-timeout 120

Commands

clear arp-cache

show arp

Parameter Description

<0-432000> The timeout period in seconds.

C613-50228-01 Rev A Command Reference for AR2050V 670

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

ARP (IP ADDRESS MAC)

arp (IP address MAC)

Overview This command adds a static ARP entry to the ARP cache. This is typically used to

add entries for hosts that do not support ARP or to speed up the address resolution

function for a host. The ARP entry must not already exist. Use the alias parameter

to allow your device to respond to ARP requests for this IP address.

If VRF-lite is configured, you can add ARP entries to either the global cache or for a

specific VRF instance.

The no variant of this command removes the static ARP entry. Use the clear

arp-cache command to remove the dynamic ARP entries in the ARP cache.

Syntax arp <ip-addr> <mac-address> [<port-number>] [alias]

no arp <ip-addr>

Syntax (VRF-lite) arp [vrf <vrf-name>] <ip-addr> <mac-address> [<port-number>]

[alias]

no arp [vrf <vrf-name>] <ip-addr>

Mode Global Configuration

Examples To add the IP address 10.10.10.9 with the MAC address 0010.2533.4655 into the

ARP cache, and have your device respond to ARP requests for this address, use the

commands:

awplus# configure terminal

awplus(config)# arp 10.10.10.9 0010.2355.4566 alias

Parameter Description

<ip-addr> The IPv4 address of the device you are adding as a static ARP

entry.

<mac-address> The MAC address of the device you are adding as a static ARP

entry, in hexadecimal notation with the format

HHHH.HHHH.HHHH.

<port-number> The port number associated with the IP address. Specify this

when the IP address is part of a VLAN.

alias Allows your device to respond to ARP requests for the IP

address. Proxy ARP must be enabled on the interface before

using this parameter.

vrf Apply this command to a VRF instance.

<vrf-name>The name of the VRF instance.

C613-50228-01 Rev A Command Reference for AR2050V 671

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

ARP (IP ADDRESS MAC)

Example

(VRF-lite)

To apply the above example within a VRF instance called red use the following

commands:

awplus# configure terminal

awplus(config)# arp vrf red 10.10.10.9 0010.2355.4566 alias

Commands

clear arp-cache

ip proxy-arp

show arp

Command

changes

Version 5.4.6-2.1: VRF-lite support added.

C613-50228-01 Rev A Command Reference for AR2050V 672

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

ARP LOG

arp log

Overview This command enables the logging of dynamic and static ARP entries in the ARP

cache. The ARP cache contains mappings of device ports, VLAN IDs, and IP

addresses to physical MAC addresses for hosts.

This command can display the MAC addresses in the ARP log either using the

notation HHHH.HHHH.HHHH, or using the IEEE standard hexadecimal notation

(HH-HH-HH-HH-HH-HH).

Use the no variant of this command to disable the logging of ARP entries.

Syntax arp log [mac-address-format ieee]

no arp log [mac-address-format ieee]

Default The ARP logging feature is disabled by default.

Mode Global Configuration

Usage You have the option to change how the MAC address is displayed in the ARP log

message. The output can either use the notation HHHH.HHHH.HHHH or

HH-HH-HH-HH-HH-HH.

Enter arp log to use HHHH.HHHH.HHHH notation.

Enter arp log mac-address-format ieee to use HH-HH-HH-HH-HH-HH notation.

Enter no arp log mac-address-format ieee to revert from HH-HH-HH-HH-HH-HH

to HHHH.HHHH.HHHH.

Enter no arp log to disable ARP logging.

To display ARP log messages use the command show log | include ARP_LOG.

Examples To enable ARP logging and specify that the MAC address in the log message is

displayed in HHHH.HHHH.HHHH notation, use the following commands:

awplus# configure terminal

awplus(config)# arp log

To disable ARP logging on the device, use the following commands:

awplus# configure terminal

awplus(config)# no arp log

Parameter Description

mac-address-format ieee Display the MAC address in the standard IEEE

format (HH-HH-HH-HH-HH-HH), instead of

displaying the MAC address with the format

HHHH.HHHH.HHHH.

C613-50228-01 Rev A Command Reference for AR2050V 673

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

ARP LOG

To enable ARP logging and specify that the MAC address in the log message is

displayed in the standard IEEE format hexadecimal notation

(HH-HH-HH-HH-HH-HH), use the following commands:

awplus# configure terminal

awplus(config)# arp log mac-address-format ieee

To leave ARP logging enabled, but stop using HH-HH-HH-HH-HH-HH format and

use HHHH.HHHH.HHHH format instead, use the following commands:

awplus# configure terminal

awplus(config)# no arp log mac-address-format ieee

To display ARP log messages, use the following command:

awplus# show log | include ARP_LOG

Output Figure 20-1: Output from show log | include ARP_LOG after enabling ARP

logging using arp log. Note that this output uses

HHHH.HHHH.HHHH format.

Figure 20-2: Output from show log | include ARP_LOG after enabling ARP

logging using arp log mac-address format ieee. Note that this

output uses HH-HH-HH-HH-HH-HH format.

awplus#configure terminal

awplus(config)#arp log

awplus(config)#exit

awplus#show log | include ARP_LOG

2016 Oct 6 06:21:01 user.notice awplus HSL[1007]: ARP_LOG port1.0.1 vlan1 add 

0013.4078.3b98 (192.168.2.4)

2016 Oct 6 06:22:30 user.notice awplus HSL[1007]: ARP_LOG port1.0.1 vlan1 del 

0013.4078.3b98 (192.168.2.4)

2016 Oct 6 06:23:26 user.notice awplus HSL[1007]: ARP_LOG port1.0.1 vlan1 add 

0030.940e.136b (192.168.2.20)

2016 Oct 6 06:23:30 user.notice awplus IMISH[1830]: show log | include ARP_LOG

awplus#configure terminal

awplus(config)#arp log mac-address-format ieee

awplus(config)#exit

awplus#show log | include ARP_LOG

2016 Oct 6 06:25:28 user.notice awplus HSL[1007]: ARP_LOG port1.0.1 vlan1 add

00-17-9a-b6-03-69 (192.168.2.12)

2016 Oct 6 06:25:30 user.notice awplus HSL[1007]: ARP_LOG port1.0.1 vlan1 add

00-03-37-6b-a6-a5 (192.168.2.10)

2016 Oct 6 06:26:53 user.notice awplus HSL[1007]: ARP_LOG port1.0.1 vlan1 del

00-30-94-0e-13-6b (192.168.2.20)

2016 Oct 6 06:27:31 user.notice awplus HSL[1007]: ARP_LOG port1.0.1 vlan1 del

00-17-9a-b6-03-69 (192.168.2.12)

2016 Oct 6 06:28:09 user.notice awplus HSL[1007]: ARP_LOG port1.0.1 vlan1 del

00-03-37-6b-a6-a5 (192.168.2.10)

2016 Oct 6 06:28:14 user.notice awplus IMISH[1830]: show log | include ARP_LOG

C613-50228-01 Rev A Command Reference for AR2050V 674

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

ARP LOG

The following table lists the parameters in output of the show log | include

ARP_LOG command. The ARP log message format is:

<date> <time> <severity> <hostname> <program-name> 

ARP_LOG <port-number> <vid> <operation> <MAC> <IP>

Commands

show log

show running-config

Table 20-1: Parameters in the output from show log | include ARP_LOG

Parameter Description

ARP_LOG Indicates that ARP log entry information follows.

<port-number>Indicates device port number for the ARP log entry.

<vid>Indicates the VLAN ID for the ARP log entry.

<operation>Indicates “add” if the ARP log entry displays an ARP addition.

Indicates “del” if the ARP log entry displays an ARP deletion.

<MAC>Indicates the MAC address for the ARP log entry, either in the

default hexadecimal notation (HHHH.HHHH.HHHH) or in the

IEEE standard format hexadecimal notation

(HH-HH-HH-HH-HH-HH) as specified with the arp log or the arp

log mac-address-format ieee command.

<IP>Indicates the IP address for the ARP log entry.

C613-50228-01 Rev A Command Reference for AR2050V 675

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

ARP OPPORTUNISTIC-ND

arp opportunistic-nd

Overview Use this command to enable opportunistic neighbor discovery for the global ARP

cache. This command changes the behavior for unsolicited ARP packet forwarding

on the device.

When using VRF-lite, you can use this command to enable opportunistic neighbor

discovery for a named VRF instance.

Use the no variant of this command to disable opportunistic neighbor discovery

for the global ARP cache.

Syntax arp opportunistic-nd

no arp opportunistic-nd

Syntax (VRF-lite) arp opportunistic-nd [vrf <vrf-name>]

no arp opportunistic-nd [vrf <vrf-name>]

Default Opportunistic neighbor discovery is disabled by default.

Mode Global Configuration

Usage When opportunistic neighbor discovery is enabled, the device will reply to any

received unsolicited ARP packets (but not gratuitous ARP packets). The source

MAC address for the unsolicited ARP packet is added to the ARP cache, so the

device forwards the ARP packet. When opportunistic neighbor discovery is

disabled, the source MAC address for the ARP packet is not added to the ARP

cache, so the ARP packet is not forwarded by the device.

Note this command enables or disables opportunistic neighbor discovery for a VRF

instance if the vrf parameter and an instance name are applied. If a VRF instance is

not specified, then opportunistic neighbor discovery is enabled or disabled for

device ports configured for IPv4.

Examples To enable opportunistic neighbor discovery for the global ARP cache, enter:

awplus# configure terminal

awplus(config)# arp opportunistic-nd

To disable opportunistic neighbor discovery for the global ARP cache, enter:

awplus# configure terminal

awplus(config)# no arp opportunistic-nd

Parameter Description

vrf Apply this command to a VRF instance.

<vrf-name>The name of the VRF instance.

C613-50228-01 Rev A Command Reference for AR2050V 676

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

ARP OPPORTUNISTIC-ND

Example

(VRF-lite)

To enable opportunistic neighbor discovery for the VRF instance ‘blue’, enter:

awplus# configure terminal

awplus(config)# arp opportunistic-nd vrf blue

To disable opportunistic neighbor discovery for the VRF instance ‘blue’, enter:

awplus# configure terminal

awplus(config)# no arp opportunistic-nd vrf blue

Commands

ipv6 opportunistic-nd

show arp

show running-config interface

Command

changes

Version 5.4.6-2.1: VRF-lite support added.

C613-50228-01 Rev A Command Reference for AR2050V 677

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

ARP-REPLY-BC-DMAC

arp-reply-bc-dmac

Overview Use this command to allow processing of ARP replies that arrive with a broadcast

destination MAC (ffff.ffff.ffff). This makes neighbors reachable if they send ARP

responses that contain a broadcast destination MAC.

Use the no variant of this command to turn off processing of ARP replies that arrive

with a broadcast destination MAC.

Syntax arp-reply-bc-dmac

no arp-reply-bc-dmac

Default By default, this functionality is disabled.

Mode Interface Configuration for VLAN, Eth and bridge interfaces

Example To allow processing of ARP replies that arrive on VLAN2 with a broadcast

destination MAC, use the commands:

awplus# configure terminal

awplus(config)# interface vlan2

awplus(config-if)# arp-reply-bc-dmac

Commands

clear arp-cache

show arp

C613-50228-01 Rev A Command Reference for AR2050V 678

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

CLEAR ARP-CACHE

clear arp-cache

Overview This command deletes dynamic ARP entries from the ARP cache. You can

optionally specify the IPv4 address of an ARP entry to be cleared from the ARP

cache.

When running VRF-lite, this command deletes dynamic ARP entries either from the

ARP cache of a specific VRF instance, or from the ARP cache of the Global VRF

instance. To delete all ARP entries from both the Global VRF instance and all VRF

instances, use the command with no parameters. You can optionally specify the

IPv4 address for the VRF instance to clear an ARP entry from the ARP cache.

Syntax clear arp-cache [<ip-address>]

Syntax (VRF-lite) clear arp-cache [vrf <vrf-name>|global] [<ip-address>]

Mode Privileged Exec

Usage To display the entries in the ARP cache, use the show arp command. To remove

static ARP entries, use the no variant of the arp (IP address MAC) command.

Example To clear all dynamic ARP entries, use the command:

awplus# clear arp-cache

To clear all dynamic ARP entries associated with the IPv4 address 192.168.1.1, use

the command:

awplus# clear arp-cache 192.168.1.1

Example

(VRF-lite)

To clear the dynamic ARP entries from the VRF instance named blue, use the

commands:

awplus# clear arp-cache vrf blue

To clear the dynamic ARP entries from the VRF instance named blue with the IPv4

address 192.168.1.1, use the commands:

awplus# clear arp-cache vrf blue 192.168.1.1

Parameter Description

<ip-address> Specifies a specific IPv4 address for a VRF instance whose

entries are to be cleared from the ARP cache.

global When VRF-lite is configured, apply this command to the

global routing and forwarding table.

vrf Apply this command to the specified VRF instance.

<vrf-name>The VRF instance name

C613-50228-01 Rev A Command Reference for AR2050V 679

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

CLEAR ARP-CACHE

When running VRF-lite, to clear the dynamic ARP entries from the global VRF-lite

and all VRF instances, use the command:

awplus# clear arp-cache

Commands

arp (IP address MAC)

show arp

C613-50228-01 Rev A Command Reference for AR2050V 680

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

DEBUG IP PACKET INTERFACE

debug ip packet interface

Overview The debug ip packet interface command enables IP packet debug and is

controlled by the terminal monitor command.

If the optional icmp keyword is specified then ICMP packets are shown in the

output.

The no variant of this command disables the debug ip interface command.

Syntax debug ip packet interface {<interface-name>|all} [address

<ip-address>|verbose|hex|arp|udp|tcp|icmp]

no debug ip packet interface [<interface-name>]

Mode Privileged Exec and Global Configuration

Parameter Description

<interface> Specify a single Layer 3 interface name (not a range of interfaces)

This keyword can be specified as either all or as a single Layer 3

interface to show debugging for either all interfaces or a single

interface.

all Specify all Layer 3 interfaces on the device.

<ip-address> Specify an IPv4 address.

If this keyword is specified, then only packets with the specified IP

address as specified in the ip-address placeholder are shown in the

output.

verbose Specify verbose to output more of the IP packet.

If this keyword is specified then more of the packet is shown in the

output.

hex Specify hex to output the IP packet in hexadecimal.

If this keyword is specified, then the output for the packet is shown

in hex.

arp Specify arp to output ARP protocol packets.

If this keyword is specified, then ARP packets are shown in the

output.

udp Specify udp to output UDP protocol packets.

If this keyword is specified then UDP packets are shown in the

output.

tcp Specify tcp to output TCP protocol packets.

If this keyword is specified, then TCP packets are shown in the

output.

icmp Specify icmp to output ICMP protocol packets.

If this keyword is specified, then ICMP packets are shown in the

output.

C613-50228-01 Rev A Command Reference for AR2050V 681

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

DEBUG IP PACKET INTERFACE

Examples To turn on ARP packet debugging on vlan1, use the command:

awplus# debug ip packet interface vlan1 arp

To turn on all packet debugging on all interfaces on the device, use the command:

awplus# debug ip packet interface all

To turn on TCP packet debugging on vlan1 and IP address 192.168.2.4, use

the command:

awplus# debug ip packet interface vlan1 address 192.168.2.4 tcp

To turn off IP packet interface debugging on all interfaces, use the command:

awplus# no debug ip packet interface

To turn off IP packet interface debugging on interface vlan2, use the command:

awplus# no debug ip packet interface vlan2

Commands

no debug all

show debugging ip dns forwarding

tcpdump

terminal monitor

undebug ip packet interface

C613-50228-01 Rev A Command Reference for AR2050V 682

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

IP ADDRESS (IP ADDRESSING AND PROTOCOL)

ip address (IP Addressing and Protocol)

Overview This command sets a static IP address on an interface.

The no variant of this command removes the IP address from the interface. You

cannot remove the primary address when a secondary address is present.

Syntax ip address <ip-addr/prefix-length> [secondary] [label <label>]

no ip address [<ip-addr/prefix-length>] [secondary]

Mode Interface Configuration for a VLAN interface, a local loopback interface, or a PPP

interface.

Usage To set the primary IP address on the interface, specify only ip address

<ip-address/m>. This overwrites any configured primary IP address. To add

additional IP addresses on this interface, use the secondary parameter. You must

configure a primary address on the interface before configuring a secondary

address.

NOTE: Use show running-config interface not show ip interface brief when you

need to view a secondary address configured on an interface. show ip interface brief

will only show the primary address not a secondary address for an interface.

Examples To add the primary IP address 10.10.10.50/24 to the interface vlan3, use the

following commands:

awplus# configure terminal

awplus(config)# interface vlan3

awplus(config-if)# ip address 10.10.10.50/24

To add the secondary IP address 10.10.11.50/24 to the same interface, use the

following commands:

awplus# configure terminal

awplus(config)# interface vlan3

awplus(config-if)# ip address 10.10.11.50/24 secondary

Parameter Description

<ip-addr/prefix-

length>

The IPv4 address and prefix length you are assigning to the

interface.

secondary Secondary IP address.

label Adds a user-defined description of the secondary IP address.

<label> A user-defined description of the secondary IP address. Valid

characters are any printable character and spaces.

C613-50228-01 Rev A Command Reference for AR2050V 683

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

IP ADDRESS (IP ADDRESSING AND PROTOCOL)

To add the IP address 10.10.11.50/24 to the local loopback interface lo, use

the following commands:

awplus# configure terminal

awplus(config)# interface lo

awplus(config-if)# ip address 10.10.11.50/24

To add the IP address 10.10.11.50/24 to the PPP interface ppp0, use the

following commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# ip address 10.10.11.50/24

Commands

interface (to configure)

show ip interface

show running-config interface

C613-50228-01 Rev A Command Reference for AR2050V 684

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

IP DIRECTED-BROADCAST

ip directed-broadcast

Overview Use this command to enable flooding of directed broadcast packets into a directly

connected subnet. If this command is configured on a VLAN interface, then

directed broadcasts received on other VLAN interfaces, destined for the subnet on

this VLAN, will be flooded to the subnet broadcast address of this VLAN.

Use the no variant of this command to disable ip directed-broadcast. When this

feature is disabled using the no variant of this command, directed broadcasts are

not forwarded.

Syntax ip directed-broadcast

no ip directed-broadcast

Default The ip directed-broadcast command is disabled by default.

Mode Interface Configuration for a VLAN interface, a local loopback interface, or a PPP

interface.

Usage IP directed-broadcast is enabled and disabled per VLAN interface. When enabled a

directed broadcast packet is forwarded to an enabled VLAN interface if received on

another subnet.

An IP directed broadcast is an IP packet whose destination address is a broadcast

address for some IP subnet, but originates from a node that is not itself part of that

destination subnet. When a directed broadcast packet reaches a device that is

directly connected to its destination subnet, that packet is flooded as a broadcast

on the destination subnet.

The ip directed-broadcast c ommand controls the flooding of directed

broadcasts when they reach target subnets. The command affects the final

transmission of the directed broadcast on its destination subnet. It does not affect

the transit unicast routing of IP directed broadcasts. If directed broadcast is

enabled for an interface, incoming directed broadcast IP packets intended for the

subnet assigned to interface will be flooded as broadcasts on that subnet.

If the no ip directed-broadcast command is configured for an interface, directed

broadcasts destined for the subnet where the interface is attached will be dropped

instead of broadcast.

Examples To enable the flooding of broadcast packets out via the PPP interface ppp0, use the

following commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# ip directed-broadcast

C613-50228-01 Rev A Command Reference for AR2050V 685

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

IP DIRECTED-BROADCAST

To disable the flooding of broadcast packets via PPP interface ppp0, use the

following commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# no ip directed-broadcast

Commands

ip forward-protocol udp

ip helper-address

show running-config

C613-50228-01 Rev A Command Reference for AR2050V 686

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

IP FORWARD-PROTOCOL UDP

ip forward-protocol udp

Overview This command enables you to control which UDP broadcasts will be forwarded to

the helper address(es). A UDP broadcast will only be forwarded if the destination

UDP port number in the packet matches one of the port numbers specified using

this command.

Refer to the IANA site (www.iana.org) for a list of assigned UDP port numbers for

protocols to forward using ip forward-protocol udp.

Use the no variant of this command to remove a port number from the list of

destination port numbers that are used as the criterion for deciding if a given UDP

broadcast should be forwarded to the IP helper address(es).

Syntax ip forward-protocol udp <port>

no ip forward-protocol udp <port>

Default The ip forward-protocol udp command is not enabled by default.

Mode Global Configuration

Usage Combined with the ip helper-address command in interface mode, the ip

forward-protocol udp command in Global Configuration mode allows control of

which protocols (destination port numbers) are forwarded. The ip

forward-protocol udp command configures protocols for forwarding, and the ip

helper-address command configures the destination address(es).

NOTE:

The types of UDP broadcast packets that the device will forward are ONLY those

specified by the ip forward-protocol command(s). There are no other UDP packet

types that the IP helper process forwards by default.

Examples To configure forwarding of packets on a UDP port, use the following commands:

awplus# configure terminal

awplus(config)# ip forward-protocol udp <port>

To delete a UDP port from the UDP ports that the device forwards, use the

following commands:

awplus# configure terminal

awplus(config)# no ip forward-protocol udp <port>

Parameter Description

<port>UDP Port Number.

C613-50228-01 Rev A Command Reference for AR2050V 687

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

IP FORWARD-PROTOCOL UDP

Commands

ip helper-address

ip directed-broadcast

show running-config

C613-50228-01 Rev A Command Reference for AR2050V 688

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

IP GRATUITOUS-ARP-LINK

ip gratuitous-arp-link

Overview This command sets the Gratuitous ARP time limit for all switchports. The time limit

restricts the sending of Gratuitous ARP packets to one Gratuitous ARP packet

within the time in seconds.

NOTE: This command specifies time between sequences of Gratuitous ARP packets,

and time between individual Gratuitous ARP packets occurring in a sequence, to allow

legacy support for older devices and interoperation between other devices that are not

ready to receive and forward data until several seconds after linkup.

Additionally, jitter has been applied to the delay following linkup, so Gratuitous ARP

packets applicable to a given port are spread over a period of 1 second so are not all

sent at once. Remaining Gratuitous ARP packets in the sequence occur after a fixed

delay from the first one.

Syntax ip gratuitous-arp-link <0-300>

no ip gratuitous-arp-link

Default The default Gratuitous ARP time limit for all switchports is 8 seconds.

Mode Global Configuration

Usage Every switchport will send a sequence of 3 Gratuitous ARP packets to each VLAN

that the switchport is a member of, whenever the switchport moves to the

forwarding state. The first Gratuitous ARP packet is sent 1 second after the

switchport becomes a forwarding switchport. The second and third Gratuitous

ARP packets are each sent after the time period specified by the Gratuitous ARP

time limit.

Additionally, the Gratuitous ARP time limit specifies the minimum time between

the end of one Gratuitous ARP sequence and the start of another Gratuitous ARP

sequence. When a link is flapping, the switchport’s state is set to forwarding several

times. The Gratuitous ARP time limit is imposed to prevent Gratuitous ARP packets

from being sent undesirably often.

Examples To disable the sending of Gratuitous ARP packets, use the commands :

awplus# configure terminal

awplus(config)# ip gratuitous-arp-link 0

Parameter Description

<0-300>Specify the minimum time between sequences of Gratuitous ARPs and

the fixed time between Gratuitous ARPs occurring in a sequence, in

seconds.

0 disables the sending of Gratuitous ARP packets.

The default is 8 seconds.

C613-50228-01 Rev A Command Reference for AR2050V 689

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

IP GRATUITOUS-ARP-LINK

To restrict the sending of Gratuitous ARP packets to one every 20 seconds, use the

commands:

awplus# configure terminal

awplus(config)# ip gratuitous-arp-link 20

Validation

Commands

show running-config

C613-50228-01 Rev A Command Reference for AR2050V 690

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

IP HELPER-ADDRESS

ip helper-address

Overview This command adds a forwarding destination address for IP Helper to enable

forwarding of User Datagram Protocol (UDP) broadcasts on an interface.

Use the no variant of this command to disable the forwarding of broadcast packets

to specific addresses.

Syntax ip helper-address <ip-addr>

no ip helper-address <ip-addr>

Default The destination address for the ip helper-address command is not configured by

default.

Mode Interface Configuration for a VLAN interface, a local loopback interface, or a PPP

interface.

Usage Combined with the ip forward-protocol udp command in global configuration

mode, the ip helper-address command in interface mode allows control of which

protocols (destination port numbers) are forwarded. The ip forward-protocol

udp command configures protocols for forwarding, and the ip helper-address

command configures the destination address(es).

The destination address can be a unicast address or a subnet broadcast address.

The UDP destination port is configured separately with the ip forward-protocol

udp command. If multiple destination addresses are registered then UDP packets

are forwarded to each IP address added to an IP Helper. Up to 32 destination

addresses may be added using IP Helper.

The device will only forward the types of UDP broadcast packets that are specified

by the ip forward-protocol command(s). The device does not forward any other

UDP packet types by default.

The ip helper-address command does not support BOOTP / DHCP Relay. The

service dhcp-relay command must be used instead. For this reason, you may not

configure UDP ports 67 and 68 with the ip forward-protocol command.

See the IP Feature Overview and Configuration Guide for more information about

DHCP Relay.

Examples The following example defines IPv4 address 192.168.1.100 as an IP Helper

destination address to which to forward UDP broadcasts received on ppp0:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# ip helper-address 192.168.1.100

Parameter Description

<ip-addr>Forwarding destination IP address for IP Helper.

C613-50228-01 Rev A Command Reference for AR2050V 691

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

IP HELPER-ADDRESS

The following example removes IPv4 address 192.168.1.100 as an IP Helper

destination address to which to forward UDP broadcasts received on ppp0:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# no ip helper-address 192.168.1.100

Commands

ip forward-protocol udp

ip directed-broadcast

show running-config

C613-50228-01 Rev A Command Reference for AR2050V 692

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

IP LIMITED-LOCAL-PROXY-ARP

ip limited-local-proxy-arp

Overview Use this command to enable local proxy ARP, but only for a specified set of IP

addresses. This makes the device respond to ARP requests for those IP addresses

when the addresses are reachable via the interface you are configuring.

To specify the IP addresses, use the command local-proxy-arp.

Use the no variant of this command to disable limited local proxy ARP. This stops

your device from intercepting and responding to ARP requests for the specified

hosts. This allows the hosts to use MAC address resolution to communicate directly

with one another.

Syntax ip limited-local-proxy-arp

no ip limited-local-proxy-arp

Default Limited local proxy ARP is disabled by default.

Mode Interface Configuration

Usage Limited local proxy ARP supports Static NAT configurations in which the NAT

configuration’s public address is different to the ethernet interface’s address.

On such ethernet interfaces, the device needs to respond to ARP requests for the

public address so that it will receive packets targeted at that address.

Limited local proxy ARP makes this possible. It is especially useful when you have

a number of 1-1 NAT configurations and each public address falls within the public

interface’s subnet. If you enable limited local proxy ARP on the public interface and

specify suitable addresses, the device will respond to ARP requests for those

addresses, as long as the addresses are routed out the interface the ARP requests

are received on. The device responds with its own MAC address.

Example The following configuration snippet shows how to use limited local proxy ARP, if

you are using NAT for an HTTP server with an address of 172.22.0.3 connected via

eth1, and eth1 has an address of 172.22.0.1:

C613-50228-01 Rev A Command Reference for AR2050V 693

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

IP LIMITED-LOCAL-PROXY-ARP

Commands

ip local-proxy-arp

local-proxy-arp

! Create a private zone for the HTTP server with address 172.22.200.3:

zone private

network vlan1

ip subnet 172.22.200.0/24

host http_server

ip address 172.22.200.3

!

! Create a public zone for the HTTP server with address 172.22.0.3:

zone public

network eth1

ip subnet 0.0.0.0/0 interface eth1

host http_server

ip address 172.22.0.3

! 

! Create a NAT rule to map from the public to the private zone:

nat

rule 10 portfwd http from public.eth1 to public.eth1.http_server with dst

private.vlan1.http_server

enable

!

! Configure eth1. It has a different public address than the HTTP server:

interface eth1

ip limited local-proxy-arp

ip address 172.22.0.1/24

!

! Configure vlan1: 

interface vlan1

ip address 172.22.200.5/24

!

! Tell the device to respond to ARPs for the HTTP server public address:

local-proxy-arp 172.22.0.3/32

C613-50228-01 Rev A Command Reference for AR2050V 694

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

IP LOCAL-PROXY-ARP

ip local-proxy-arp

Overview This command allows you to stop MAC address resolution between hosts within a

private VLAN edge interface. Local Proxy ARP works by intercepting ARP requests

between hosts within a subnet and responding with your device’s own MAC

address details instead of the destination host’s details. This stops hosts from

learning the MAC address of other hosts within its subnet through ARP requests.

Local Proxy ARP ensures that devices within a subnet cannot send traffic that

bypasses Layer 3 routing on your device. This lets you monitor and filter traffic

between hosts in the same subnet, and enables you to have control over which

hosts may communicate with one another.

When Local Proxy ARP is operating on an interface, your device does not generate

or forward any ICMP-Redirect messages on that interface. This command does not

enable proxy ARP on the interface; see the ip proxy-arp command for more

information on enabling proxy ARP.

The no variant of this command disables Local Proxy ARP to stop your device from

intercepting and responding to ARP requests between hosts within a subnet. This

allows the hosts to use MAC address resolution to communicate directly with one

another. Local Proxy ARP is disabled by default.

Syntax ip local-proxy-arp

no ip local-proxy-arp

Default Local proxy ARP is disabled by default

Mode Interface Configuration for a VLAN interface or a local loopback interface.

Examples To enable your device to apply Local Proxy ARP on the interface vlan7, use the

following commands:

awplus# configure terminal

awplus(config)# interface vlan7

awplus(config-if)# ip local-proxy-arp

To disable your device to apply Local Proxy ARP on the interface vlan7, use the

following commands:

awplus# configure terminal

awplus(config)# interface vlan7

awplus(config-if)# no ip local-proxy-arp

Commands

ip proxy-arp

show arp

show running-config

C613-50228-01 Rev A Command Reference for AR2050V 695

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

IP PROXY-ARP

ip proxy-arp

Overview This command enables Proxy ARP responses to ARP requests on an interface.

When enabled, your device intercepts ARP broadcast packets and substitutes its

own physical address for that of the remote host. By responding to the ARP

request, your device ensures that subsequent packets from the local host are

directed to its physical address, and it can then forward these to the remote host.

Your device responds only when it has a specific route to the address being

requested, excluding the interface route that the ARP request arrived from. It

ignores all other ARP requests. See the ip local-proxy-arp command about

enabling your device to respond to other ARP messages.

The no variant of this command disables Proxy ARP responses on an interface.

Proxy ARP is disabled by default.

Syntax ip proxy-arp

no ip proxy-arp

Default Proxy ARP is disabled by default.

Mode Interface Configuration for a VLAN interface or a local loopback interface.

Examples To enable your device to Proxy ARP on the interface vlan13, use the following

commands:

awplus# configure terminal

awplus(config)# interface vlan13

awplus(config-if)# ip proxy-arp

To disable your device to Proxy ARP on the interface vlan13, use the following

commands:

awplus# configure terminal

awplus(config)# interface vlan13

awplus(config-if)# no ip proxy-arp

Commands

arp (IP address MAC)

ip local-proxy-arp

show arp

show running-config

C613-50228-01 Rev A Command Reference for AR2050V 696

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

IP REDIRECTS

ip redirects

Overview This command enables the device to send ICMP redirects.

Use the no variant of this command to stop the device from sending ICMP

redirects.

Syntax ip redirects

no ip redirects

Default ICMP redirects are disabled by default.

Mode Global Configuration.

Usage ICMP redirect messages are used to notify hosts that a better route is available to a

destination.

ICMP redirects are used when a packet is routed into the device on the same

interface that the packet is routed out of the device. ICMP redirects are only sent to

packet sources that are directly connected to the device.

Examples To enable the switch to send ICMP redirects, use the following commands:

awplus# configure terminal

awplus(config)# ip redirects

To stop the switch from sending ICMP redirects, use the following commands:

awplus# configure terminal

awplus(config)# no ip redirects

C613-50228-01 Rev A Command Reference for AR2050V 697

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

IP TCP SYNACK-RETRIES

ip tcp synack-retries

Overview Use this command to specify how many times the switch will retry sending a SYN

ACK for a TCP connection for which it has received a SYN but not an ACK. Such

connections are called half-open TCP connections. This command allows you to

influence how long half-open TCP connections take to time out.

Use the no variant of this command to return to the default setting of 5 retries.

Syntax ip tcp synack-retries <0-255>

no ip tcp synack-retries

Default 5 retries

Mode Global Configuration

Usage The following table shows the approximate correlation between the number of

retries and the time half-open TCP connections take to time out.

Example To retry twice, which leads to a timeout of approximately 7 seconds, use the

commands:

awplus# configure terminal

awplus(config)# ip tcp synack-retries 2

Commands

show running-config

Command

changes

Version 5.4.7-0.2: command added

Parameter Description

<0-255> Number of times to retry sending the SYN ACK

Number of retries Approximate lower bound for the timeout

0 retries 1 second

1 retry 3 seconds

2 retries 7 seconds

3 retries 15 seconds

4 retries 31 seconds

5 retries 63 seconds

C613-50228-01 Rev A Command Reference for AR2050V 698

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

IP TCP TIMEOUT ESTABLISHED

ip tcp timeout established

Overview Use this command to set the idle timeout for all established TCP connections.

Use the no variant of this command to set the idle timeout back to the default of

3600 seconds.

Syntax ip tcp timeout established <1-31536000>

no ip tcp timeout established

Default 3600 seconds (1 hour)

Mode Global Configuration

Usage By default, when a TCP session is successfully established through the firewall,

when the session goes idle, it automatically times out of the firewall connection

tracking table after 3600 seconds. In some situations it may be beneficial to time

out unused established TCP sessions earlier.

For example, in a busy environment where there is an excessive number of

sessions being established, the firewall connection tracking table could become

oversubscribed, with new connections being blocked until older sessions are

timed out.

Example To set a non-default TCP session timeout for established idle sessions of 1800

seconds (30 minutes), use the commands:

awplus# configure terminal

awplus(config)# ip tcp timeout established 1800

Example To set the TCP session timeout for established idle sessions back to the default

setting of 3600 seconds, use the commands:

awplus# configure terminal

awplus(config)# no ip tcp timeout established

Commands

show running-config

Command

changes

Version 5.4.6-1.1: command added

Parameter Description

<1-31536000> Idle timeout for established TCP connections in seconds from 1 to

3153600.

C613-50228-01 Rev A Command Reference for AR2050V 699

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

IP UNREACHABLES

ip unreachables

Overview Use this command to enable ICMP (Internet Control Message Protocol) type 3,

destination unreachable, messages.

Use the no variant of this command to disable destination unreachable messages.

This prevents an attacker from using these messages to discover the topology of a

network.

Syntax ip unreachables

no ip unreachables

Default Destination unreachable messages are enabled by default.

Mode Global Configuration

Usage When a device receives a packet for a destination that is unreachable it returns an

ICMP type 3 message, this message includes a reason code, as per the table below.

An attacker can use these messages to obtain information regarding the topology

of a network. Disabling destination unreachable messages, using the no ip

unreachables command, secures your network against this type of probing.

NOTE: Disabling ICMP destination unreachable messages breaks applications such as

traceroute and Path MTU Discovery (PMTUD), which depend on these messages to

operate correctly.

Table 20-2: ICMP type 3 reason codes and description

Code Description [RFC]

0Network unreachable [RFC792]

1Host unreachable [RFC792]

2Protocol unreachable [RFC792]

3Port unreachable [RFC792]

4Fragmentation required, and DF flag set [RFC792]

5Source route failed [RFC792]

6Destination network unknown [RFC1122]

7Destination host unknown [RFC1122]

8Source host isolated [RFC1122]

9Network administratively prohibited [RFC768]

10 Host administratively prohibited [RFC869]

11 Network unreachable for Type of Service [RFC908]

12 Host unreachable for Type of Service [RFC938]

13 Communication administratively prohibited [RFC905]

C613-50228-01 Rev A Command Reference for AR2050V 700

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

IP UNREACHABLES

Example To disable destination unreachable messages, use the commands

awplus# configure terminal

awplus(config)# no ip unreachables

To enable destination unreachable messages, use the commands

awplus# configure terminal

awplus(config)# ip unreachables

14 Host Precedence Violation [RFC1812]

15 Precedence cutoff in effect [RFC1812]

Table 20-2: ICMP type 3 reason codes and description (cont.)

Code Description [RFC]

C613-50228-01 Rev A Command Reference for AR2050V 701

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

LOCAL-PROXY-ARP

local-proxy-arp

Overview Use this command to specify an IP subnet for use with limited local proxy ARP.

When limited local proxy ARP is enabled with the command ip

limited-local-proxy-arp, the device will respond to ARP requests for addresses in

that subnet.

Use the no variant of this command to stop specifying a subnet for use with limited

local proxy ARP.

Syntax local-proxy-arp [<ip-add/mask>]

no local-proxy-arp [<ip-add/mask>]

Default No subnets are specified for use with limited local proxy ARP.

Mode Global Configuration

Example To specify limited local proxy ARP for the address 172.22.0.3, use the following

commands:

awplus# configure terminal

awplus(config)# local-proxy-arp 172.22.0.3/32

This is part of a configuration snippet that shows how to use limited local proxy

ARP with static NAT. See the command ip limited-local-proxy-arp for the whole

example.

Commands

ip limited-local-proxy-arp

Parameter Description

<ip-add/mask> The IP subnet to use with limited local proxy ARP, in dotted

decimal format (A.B.C.D/M). To specify a single IP address, use a

32-bit mask.

C613-50228-01 Rev A Command Reference for AR2050V 702

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

OPTIMISTIC-ND

optimistic-nd

Overview Use this command to enable the optimistic neighbor discovery feature for both

IPv4 and IPv6.

Use the no variant of this command to disable the optimistic neighbor discovery

feature.

Syntax optimistic-nd

no optimistic-nd

Default The optimistic neighbor discovery feature is enabled by default.

Mode Interface Configuration for a VLAN interface.

Usage The optimistic neighbor discovery feature allows the device, after learning an IPv4

or IPv6 neighbor, to refresh the neighbor before the neighbor is deleted from the

hardware L3 switching table. The neighbor is put into the “stale” state in the

software switching table if is it not refreshed, then the ‘stale’ neighbors are deleted

from the hardware L3 switching table.

The optimistic neighbor discovery feature enables the device to sustain L3 traffic

switching to a neighbor without interruption. Without the optimistic neighbor

discovery feature enabled L3 traffic is interrupted when a neighbor is “stale” and is

then deleted from the L3 switching table.

If a neighbor receiving optimistic neighbor solicitations does not answer

optimistic neighbor solicitations with neighbor advertisements, then the neighbor

will be put into the “stale” state, and subsequently deleted from both the software

and the hardware L3 switching tables.

Examples To enable the optimistic neighbor discovery feature on vlan100, use the following

commands:

awplus# configure terminal

awplus(config)# interface vlan100

awplus(config-if)# optimistic-nd

To disable the optimistic neighbor discovery feature on vlan100, use the following

commands:

awplus# configure terminal

awplus(config)# interface vlan100

awplus(config-if)# no optimistic-nd

Commands

show running-config

C613-50228-01 Rev A Command Reference for AR2050V 703

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

PING

ping

Overview This command sends a query to another IPv4 host (send Echo Request messages).

Syntax ping [ip] <host> [broadcast] [df-bit {yes|no}] [interval

<0-128>] [pattern <hex-data-pattern>] [repeat

{<1-2147483647>|continuous}] [size <36-18024>] [source

<ip-addr>] [timeout <1-65535>] [tos <0-255>]

Syntax (VRF-lite) ping [vrf <vrf-name>] [ip] <host> [broadcast] [df-bit {yes|no}]

[interval <0-128>] [pattern <hex-data-pattern>] [repeat

{<1-2147483647>|continuous}] [size <36-18024>] [source

<ip-addr>] [timeout <1-65535>] [tos <0-255>]

Mode User Exec and Privileged Exec

Example To ping the IP address 10.10.0.5 use the following command:

awplus# ping 10.10.0.5

Parameter Description

<host>The destination IP address or hostname.

broadcast Allow pinging of a broadcast address.

df-bit Enable or disable the do-not-fragment bit in the IP header.

interval <0-128> Specify the time interval in seconds between sending ping

packets. The default is 1. You can use decimal places to

specify fractions of a second. For example, to ping every

millisecond, set the interval to 0.001.

pattern <hex-

data-pattern>

Specify the hex data pattern.

repeat Specify the number of ping packets to send.

<1-2147483647> Specify repeat count. The default is 5.

continuous Continuous ping

size <36-18024> The number of data bytes to send, excluding the 8 byte ICMP

header. The default is 56 (64 ICMP data bytes).

source <ip-addr> The IP address of a configured IP interface to use as the

source in the IP header of the ping packet.

timeout

<1-65535>

The time in seconds to wait for echo replies if the ARP entry is

present, before reporting that no reply was received. If no

ARP entry is present, it does not wait.

tos <0-255> The value of the type of service in the IP header.

vrf Apply the command to the specified VRF instance.

<vrf-name>The name of the VRF instance.

C613-50228-01 Rev A Command Reference for AR2050V 704

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

PING

Example

(VRF-lite)

To ping the IP address 10.10.0.5 from VRF instance ‘red’, use the following

command:

awplus# ping vrf red 10.10.0.5

NOTE: Unless a cross-domain static or leaked route exists to the destination IP address,

you must run this command from within the same routing domain as the address

being pinged.

Command

changes

Version 5.4.6-2.1: VRF-lite support added.

C613-50228-01 Rev A Command Reference for AR2050V 705

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

SHOW ARP

show arp

Overview Use this command to display entries in the ARP routing and forwarding table—the

ARP cache contains mappings of IP addresses to physical addresses for hosts. To

have a dynamic entry in the ARP cache, a host must have used the ARP protocol to

access another host.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide.

Syntax show arp [security [interface [<interface-list>]]

show arp [statistics [detail][interface [<interface-list>]]

Syntax (VRF-lite) show arp [global|security|vrf <vrf-name>]

Mode User Exec and Privileged Exec

Usage Running this command with no additional parameters will display all entries in the

ARP routing and forwarding table.

With VRF-lite configured, and no additional parameters entered, the command

output displays all entries, listed by their VRF instance. By adding either a specific

VRF instance or global parameter entry, you can selectively list ARP entries by their

membership of a specific VRF instance.

Example To display all ARP entries in the ARP cache, use the following command:

awplus# show arp

Parameter Description

security Specify the DHCP Snooping ARP security output option.

interface Specify an interface list for DHCP Snooping ARP security

output.

<interface-list>Specify a single Layer 3 interface name, or a range of

interfaces.

statistics Specify brief DHCP Snooping ARP security statistics.

detail Specify detailed DHCP Snooping ARP security statistics.

global When VRF-lite is configured, apply this command to the

global routing and forwarding table

vrf Apply this command to the specified VRF instance.

<vrf-name>The VRF instance name

C613-50228-01 Rev A Command Reference for AR2050V 706

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

SHOW ARP

Output Figure 20-3: Example output from the show arp command

Example

(VRF-lite)

To display the dynamic ARP entries in the global routing instance, use the

command:

awplus# show arp global

Output Figure 20-4: Example output from the show arp global command

Example

(VRF-lite)

To display the dynamic ARP entries for a VRF instance ‘red’, use the command:

awplus# show arp vrf red

Output Figure 20-5: Example output from the show arp vrf red command

awplus#show arp



IP Address MAC Address Interface Port Type 

192.168.10.2 0015.77ad.fad8 vlan1 port1.0.1 dynamic

192.168.20.2 0015.77ad.fa48 vlan2 port1.0.2 dynamic

192.168.1.100 00d0.6b04.2a42 vlan2 port1.0.6 static

awplus#show arp global



IP Address MAC Address Interface Port Type

192.168.10.2 0015.77ad.fad8 vlan1 port1.0.1 dynamic

192.168.20.2 0015.77ad.fa48 vlan2 port1.0.2 dynamic

192.168.1.100 00d0.6b04.2a42 vlan2 port1.0.8 static

awplus# show arp vrf red



[VRF: red]

IP Address MAC Address Interface Port Type

192.168.10.2 0015.77ad.fad8 vlan1 port1.0.1 dynamic

Table 21: Parameters in the output of the show arp command

Parameter Meaning

IP Address IP address of the network device this entry maps to.

MAC Address Hardware address of the network device.

Interface Interface over which the network device is accessed.

Port Physical port that the network device is attached to.

Type Whether the entry is a static or dynamic entry. Static

entries are added using the arp (IP address MAC)

command. Dynamic entries are learned from ARP

request/reply message exchanges.

VRF The name of the VRF instance. The VRF-lite components

only display when VRF-lite is configured.

C613-50228-01 Rev A Command Reference for AR2050V 707

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

SHOW ARP

Commands

arp (IP address MAC)

clear arp-cache

Command

changes

Version 5.4.6-2.1: VRF-lite support added.

C613-50228-01 Rev A Command Reference for AR2050V 708

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

SHOW DEBUGGING IP PACKET

show debugging ip packet

Overview Use this command to show the IP interface debugging status. IP interface

debugging is set using the debug ip packet interface command.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide.

Syntax show debugging ip packet

Mode User Exec and Privileged Exec

Example To display the IP interface debugging status when the terminal monitor off, use the

command:

awplus# terminal no monitor

awplus# show debug ip packet

Output Figure 20-6: Example output from the show debugging ip packet command

with terminal monitor off

Example To display the IP interface debugging status when the terminal monitor is on, use

the command:

awplus# terminal monitor

awplus# show debug ip packet

Output Figure 20-7: Example output from the show debugging ip packet command

with terminal monitor on

awplus#terminal no monitor



awplus#show debug ip packet



IP debugging status:



interface all tcp (stopped)



interface vlan1 arp verbose (stopped)

awplus#terminal monitor



awplus#show debug ip packet



IP debugging status:



interface all tcp (running)



interface vlan1 arp verbose (running)

C613-50228-01 Rev A Command Reference for AR2050V 709

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

SHOW DEBUGGING IP PACKET

Commands

debug ip packet interface

terminal monitor

C613-50228-01 Rev A Command Reference for AR2050V 710

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

SHOW IP FORWARDING

show ip forwarding

Overview Use this command to display the IP forwarding status.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide.

Syntax show ip forwarding

Mode User Exec and Privileged Exec

Example awplus# show ip forwarding

Output Figure 20-8: Example output from the show ip forwarding command

awplus#show ip forwarding



IP forwarding is on

C613-50228-01 Rev A Command Reference for AR2050V 711

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

SHOW IP INTERFACE

show ip interface

Overview Use this command to display information about interfaces and the IP addresses

assigned to them. To display information about a specific interface, specify the

interface name with the command.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide.

Syntax show ip interface [<interface-list>] [brief]

Mode User Exec and Privileged Exec

Examples To show brief information for the assigned IP address for interface port1.0.2 use

the command:

awplus# show ip interface port1.0.2 brief

To show the IP addresses assigned to vlan2 and vlan3, use the command:

awplus# show ip interface vlan2-3 brief

To show the IP addresses assigned to ppp0, use the command:

awplus# show ip interface ppp0 brief

Output Figure 20-9: Example output from the show ip interface brief command

Parameter Description

<interface-list> The interfaces to display information about. An interface-list

can be:

•an interface, e.g. vlan2

• a continuous range of interfaces separated by a hyphen, e.g.

vlan2-8 or vlan2-vlan5

• a comma-separated list of interfaces or interface ranges, e.g.

vlan2,vlan5,vlan8-10

The specified interfaces must exist.

Interface IP-Address Status Protocol

port1.0.2 unassigned admin up down

vlan1 192.168.1.1 admin up running

vlan2 192.168.2.1 admin up running

vlan3 192.168.3.1 admin up running

vlan8 unassigned admin up down

C613-50228-01 Rev A Command Reference for AR2050V 712

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

SHOW IP INTERFACE VRF

show ip interface vrf

Overview Use this command to display protocol and status information about configured

interfaces and their assigned IP addresses in VRF instances.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide.

Syntax show ip interface [vrf <vrf-name>|global]

Mode User Exec and Privileged Exec

Examples To display all interfaces and IP addresses associated with a VRF instance ‘red’, use

the command:

awplus# show ip interface vrf red

Output Figure 20-10: Example output from show ip interface vrf red

Example To display all interfaces and IP addresses associated with all VRF instances, use the

command:

awplus# show ip interface

Parameter Description

vrf A VRF instance.

<vrf-name>The name of a specific VRF instance.

global The global routing and forwarding table.

[VRF: red]

Interface IP-Address Status Protocol

lo1 unassigned admin up running

vlan1 192.168.10.1/24 admin up running

C613-50228-01 Rev A Command Reference for AR2050V 713

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

SHOW IP INTERFACE VRF

Output Figure 20-11: Example output from the show ip interface with VRF-lite

configured

Command

changes

Version 5.4.6-2.1: VRF-lite support added.

Interface IP-Address Status Protocol

eth0 unassigned admin up down

lo unassigned admin up running

vlan1 192.168.1.1/24 admin up running

vlan4 172.30.4.43/24 admin up down



[VRF: red]

Interface IP-Address Status 

Protocol

lo1 unassigned admin up running



[VRF: blue]

Interface IP-Address Status 

Protocol

lo2 unassigned admin up running

C613-50228-01 Rev A Command Reference for AR2050V 714

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

SHOW IP SOCKETS

show ip sockets

Overview Use this command to display information about the IP or TCP sockets that are

present on the device. It includes TCP and UDP listen sockets, and displays the

associated IP address and port.

The information displayed for established TCP sessions includes the remote IP

address, port, and session state. Raw IP protocol listen socket information is also

displayed for protocols such as VRRP and ICMP6, which are configured to receive

IP packets with the associated protocol number.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide.

Syntax show ip sockets

Mode Privileged Exec

Usage Use this command to verify that the socket being used is opening correctly. If there

is a local and remote endpoint, a connection is established with the ports

indicated.

Note that this command does not display sockets that are used internally for

exchanging data between the various processes that exist on the device and are

involved in its operation and management. It only displays sockets that are present

for the purposes of communicating with other external devices.

Example To display IP sockets currently present on the device, use the command:

awplus# show ip sockets

Output Figure 20-12: Example output from show ip sockets



Socket information



Not showing 40 local connections

Not showing 7 local listening ports



Typ Local Address Remote Address State

tcp 0.0.0.0:111 0.0.0.0:* LISTEN

tcp 0.0.0.0:80 0.0.0.0:* LISTEN

tcp 0.0.0.0:23 0.0.0.0:* LISTEN

tcp 0.0.0.0:443 0.0.0.0:* LISTEN

tcp 0.0.0.0:4743 0.0.0.0:* LISTEN

tcp 0.0.0.0:873 0.0.0.0:* LISTEN

tcp :::23 :::* LISTEN

udp 0.0.0.0:111 0.0.0.0:*

udp 226.94.1.1:5405 0.0.0.0:*

udp 0.0.0.0:161 0.0.0.0:*

udp :::161 :::*

raw 0.0.0.0:112 0.0.0.0:* 112

raw :::58 :::* 58

raw :::112 :::* 112

C613-50228-01 Rev A Command Reference for AR2050V 715

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

SHOW IP SOCKETS

Table 20-1: Parameters in the output from show ip sockets

Parameter Description

Not showing

local

connections

This field refers to established sessions between processes internal

to the device, that are used in its operation and management.

These sessions are not displayed as they are not useful to the user.

<number> is some positive integer.

Not showing

local

listening

ports

This field refers to listening sockets belonging to processes internal

to the device, that are used in its operation and management. They

are not available to receive data from other devices. These sessions

are not displayed as they are not useful to the user. <number> is

some positive integer.

Typ This column displays the type of the socket. Possible values for this

column are:

tcp : IP Protocol 6

udp : IP Protocol 17

raw : Indicates that socket is for a non port-orientated protocol (i.e.

a protocol other than TCP or UDP) where all packets of a specified IP

protocol type are accepted. For raw socket entries the protocol type

is indicated in subsequent columns.

Local

Address

For TCP and UDP listening sockets this shows the destination IP

address and destination TCP or UDP port number for which the

socket will receive packets. The address and port are separated by ’:’.

If the socket will accept packets addressed to any of the device’s IP

addresses, the IP address will be 0.0.0.0 for IPv4 or :: for IPv6. For

active TCP sessions the IP address will display which of the devices

addresses the session was established with. For raw sockets this

displays the IP address and IP protocol for which the socket will

accept IP packets. The address and protocol are separated by ’:’. If

the socket will accept packets addressed to any of the device’s IP

addresses, the IP address will be 0.0.0.0 for IPv4 and :: for IPv6. IP

Protocol assignments are described

at:www.iana.org/assignments/protocol-numbers

C613-50228-01 Rev A Command Reference for AR2050V 716

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

SHOW IP SOCKETS

Remote

Address

For TCP and UDP listening sockets this shows the source IP address

(either IPv4 or IPv6) and source TCP or UDP port number for which

the socket will accept packets. The address and port are separated

by ’:’. If the socket will accept packets addressed from any IP

address, the IP address will be 0.0.0.0 for IPv4 . This is the usual case

for a listening socket. Normally for a listen socket any source port

will be accepted. This is indicated by “. For active TCP sessions the IP

address will display the remote address and port the session was

established with. For raw sockets the entry in this column will be

0.0.0.0: for IPv4 .

State This column shows the state of the socket. For TCP sockets this

shows the state of the TCP state machine. For UDP sockets this

column is blank. For raw sockets it contains the IP protocol number.

The possible TCP states are:

LISTEN

SYN-SENT

SYN-RECEIVED

ESTABLISHED

FIN-WAIT-1

FIN-WAIT-2

CLOSE-WAIT

CLOSING

LAST-ACK

TIME-WAIT

CLOSED

RFC793 contains the TCP state machine diagram with Section 3.2

describing each of the states.

Table 20-1: Parameters in the output from show ip sockets (cont.)

Parameter Description

C613-50228-01 Rev A Command Reference for AR2050V 717

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

SHOW IP TRAFFIC

show ip traffic

Overview Use this command to display statistics regarding IP traffic sent and received by all

interfaces on the device, showing totals for IP and IPv6 and then broken down into

sub-categories such as TCP, UDP, ICMP and their IPv6 equivalents when

appropriate.

For information on filtering and saving command output, see the “Getting Started

with AlliedWare Plus” Feature Overview and Configuration Guide.

Syntax show ip traffic

Mode Privileged Exec

Example To display IP traffic statistics, use the command:

awplus# show ip traffic

Output Figure 20-13: Example output from the show ip traffic command



IP:

261998 packets received

261998 delivered

261998 sent

69721 multicast packets received

69721 multicast packets sent

23202841 bytes received

23202841 bytes sent

7669296 multicast bytes received

7669296 multicast bytes sent

IPv6:

28 packets discarded on transmit due to no route

ICMP6:

UDP6:

UDPLite6:

TCP:

0 remote connections established

40 local connections established

7 remote listening ports

7 local listening ports

261 active connection openings

247 passive connection openings

14 connection attempts failed

122535 segments received

122535 segments transmitted

14 resets transmitted

227 TCP sockets finished time wait in fast timer

C613-50228-01 Rev A Command Reference for AR2050V 718

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

SHOW IP TRAFFIC

155 delayed acks sent

21187 headers predicted

736 pure ACKs

80497 pure ACKs predicted

UDP:

139468 datagrams received

139468 datagrams sent

UDPLite:

C613-50228-01 Rev A Command Reference for AR2050V 719

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

TCPDUMP

tcpdump

Overview Use this command to start a tcpdump, which gives the same output as the

Unix-like tcpdump command to display TCP/IP traffic. Press <ctrl> + c to stop

a running tcpdump.

Syntax tcpdump <line>

Syntax (VRF-lite) tcpdump [vrf <vrf-name>] <line>

Mode Privileged Exec

Example To start a tcpdump running to capture IP packets, enter the command:

awplus# tcpdump ip

Example

(VRF-lite)

To start a tcpdump on interface vlan2 associated with a VRF instance red, enter the

command:

awplus# tcpdump vrf red vlan2

Output Figure 20-14: Example output from the tcpdump command

Commands

debug ip packet interface

Command

changes

Version 5.4.6-2.1: VRF-lite support added.

Parameter Description

<line>Specify the dump options. For more information on the

options for this placeholder see

http://www.tcpdump.org/tcpdump_man.html

vrf Apply the command to the specified VRF instance.

<vrf-name>The name of the VRF instance.

03:40:33.221337 IP 192.168.1.1 > 224.0.0.13: PIMv2, Hello, 

length: 34

1 packets captured

2 packets received by filter

0 packets dropped by kernel

C613-50228-01 Rev A Command Reference for AR2050V 720

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

TRACEROUTE

traceroute

Overview Use this command to trace the route to the specified IPv4 host.

Syntax traceroute {<ip-addr>|<hostname>}

Syntax (VRF-lite) traceroute [vrf <vrf-name>] {<ip-addr>|<hostname>}

Mode User Exec and Privileged Exec

Example awplus# traceroute 10.10.0.5

Example

(VRF-lite)

awplus# traceroute vrf red 192.168.0.1

Command

changes

Version 5.4.6-2.1: VRF-lite support added.

Parameter Description

<ip-addr> The destination IPv4 address. The IPv4 address uses the

format A.B.C.D.

<hostname>The destination hostname.

vrf Apply the command to the specified VRF instance.

<vrf-name>The name of the VRF instance.

C613-50228-01 Rev A Command Reference for AR2050V 721

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

IP ADDRESSING AND PROTOCOL COMMANDS

UNDEBUG IP PACKET INTERFACE

undebug ip packet interface

Overview This command applies the functionality of the no debug ip packet interface

command.

C613-50228-01 Rev A Command Reference for AR2050V 722

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

Domain Name

Service (DNS)

Commands

Introduction

Overview This chapter provides an alphabetical reference of commands used to configure

Domain Name Service (DNS) features, including the following:

•DNS client

• DNS forwarding (DNS relay)

• Domain lists

• DDNS (Dynamic Domain Name System)

For more information about DNS and DDNS for AR-Series Firewalls, see the Domain

Name System (DNS) for AlliedWare Plus AR-Series Firewalls Feature Overview and

Configuration Guide.

Command List •“clear ip dns forwarding cache” on page 724

•“ddns enable” on page 725

•“ddns-update-method” on page 726

•“ddns-update now” on page 727

•“debug ddns” on page 728

•“debug ip dns forwarding” on page 729

•“description (Domain List)” on page 730

•“domain (Domain List)” on page 731

•“host-name (DDNS)” on page 732

•“ip ddns-update-method” on page 733

•“ip dns forwarding” on page 734

•“ip dns forwarding cache” on page 735

•“ip dns forwarding dead-time” on page 736

•“ip dns forwarding domain-list” on page 737

C613-50228-01 Rev A Command Reference for AR2050V 723

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

DOMAIN NAME SERVICE (DNS) COMMANDS

•“ip dns forwarding retry” on page 738

•“ip dns forwarding source-interface” on page 739

•“ip dns forwarding timeout” on page 740

•“ip domain-list” on page 741

•“ip domain-lookup” on page 742

•“ip domain-name” on page 743

•“ip name-server” on page 744

•“ipv6 ddns-update-method” on page 746

•“password (DDNS)” on page 747

•“ppp ipcp dns” on page 748

•“ppp ipcp dns suffix-list” on page 750

•“retry-interval (DDNS)” on page 752

•“show ddns-update-method status” on page 753

•“show debugging ip dns forwarding” on page 754

•“show hosts” on page 755

•“show ip dns forwarding” on page 756

•“show ip dns forwarding cache” on page 757

•“show ip dns forwarding server” on page 759

•“show ip domain-list” on page 761

•“show ip domain-name” on page 762

•“show ip name-server” on page 763

•“suppress-ipv4-updates (DDNS)” on page 765

•“undebug (DDNS)” on page 766

•“update-interval (DDNS)” on page 767

•“update-url (DDNS)” on page 768

•“use-ipv4-for-ipv6-updates (DDNS)” on page 771

•“username (DDNS)” on page 772

C613-50228-01 Rev A Command Reference for AR2050V 724

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

DOMAIN NAME SERVICE (DNS) COMMANDS

CLEAR IP DNS FORWARDING CACHE

clear ip dns forwarding cache

Overview Use this command to clear the DNS Relay name resolver cache.

When using VRF-lite, use this command to clear the DNS Relay name resolver

cache for either the whole device or for a specific VRF instance.

Syntax clear ip dns forwarding cache

Syntax (VRF-lite) clear ip dns [vrf <name>|global] forwarding cache

Mode Privileged Exec

Examples To clear all cached data, use the command:

awplus# clear ip dns forwarding cache

Example

(VRF-lite)

To clear the cached data for VRF instance red, use the command:

awplus# clear ip dns vrf red forwarding cache

To clear the cached data for the default global VRF instance only, use the

command:

awplus# clear ip dns global forwarding cache

Commands

ip dns forwarding cache

Command

changes

Version 5.4.6-2.1: VRF-lite support added.

Parameter Description

vrf Apply this command to the specified VRF instance.

<name> The name of the specific VRF instance

global When VRF-lite is configured, apply this command to the global

routing and forwarding table.

C613-50228-01 Rev A Command Reference for AR2050V 725

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

DOMAIN NAME SERVICE (DNS) COMMANDS

DDNS ENABLE

ddns enable

Overview Use this command to enable DDNS updates.

Use the no variant of this command to disable DDNS updates.

Syntax ddns enable

no ddns enable

Default Disabled

Mode Global Configuration

Example To globally enable DDNS updates, use the commands:

awplus# configure terminal

awplus(config)# ddns enable

To globally disable DDNS updates, use the commands:

awplus# configure terminal

awplus(config)# no ddns enable

Commands

ddns-update-method

Command

changes

Version 5.4.7-0.1: command added

C613-50228-01 Rev A Command Reference for AR2050V 726

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

DOMAIN NAME SERVICE (DNS) COMMANDS

DDNS-UPDATE-METHOD

ddns-update-method

Overview Use this command to create a new DDNS update method and enter DDNS Update

Method Configuration mode.

Use the no variant of this command to remove a DDNS update method.

Syntax ddns-update-method <method-name>

no ddns-update-method <method-name>

Default None

Mode Global Configuration

Example To create a method named “dyndns”, use the commands:

awplus# configure terminal

awplus(config)# ddns-update-method dyndns

awplus(config-ddns-update-method)#

Commands

ddns enable

ddns-update now

debug ddns

host-name (DDNS)

ip ddns-update-method

ipv6 ddns-update-method

password (DDNS)

retry-interval (DDNS)

show ddns-update-method status

suppress-ipv4-updates (DDNS)

undebug (DDNS)

update-interval (DDNS)

update-url (DDNS)

use-ipv4-for-ipv6-updates (DDNS)

username (DDNS)

Command

changes

Version 5.4.7-0.1: command added

Parameter Description

<method-name> The name of the DDNS method.

C613-50228-01 Rev A Command Reference for AR2050V 727

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

DOMAIN NAME SERVICE (DNS) COMMANDS

DDNS-UPDATE NOW

ddns-update now

Overview Use this command to manually update DDNS methods.

Syntax ddns-update now

ddns-update method <method-name> now

Default None

Mode Privileged Exec

Usage When no method name is entered, all DDNS update methods are updated. If a

method name is specified, then only that method will update.

Example To manually update all DDNS update methods, use the command:

awplus# ddns-update now

To manually update the method “dyndns”, use the command:

awplus# ddns-update method dyndns now

Commands

ddns-update-method

Command

changes

Version 5.4.7-0.1: command added

Parameter Description

<method-name> The DDNS update method name to use for the manual update.

C613-50228-01 Rev A Command Reference for AR2050V 728

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

DOMAIN NAME SERVICE (DNS) COMMANDS

DEBUG DDNS

debug ddns

Overview Use this command to enable debugging for the DDNS process.

Use the no variant of this command to disable debugging for the DDNS process.

Syntax debug ddns

no debug ddns

Default Disabled

Mode Privileged Exec

Example To enable debugging for the DDNS process, use the command:

awplus# debug ddns

To disable debugging for the DDNS process, use the command:

awplus# no debug ddns

Commands

ddns-update-method

undebug (DDNS)

Command

changes

Version 5.4.7-0.1: command added

C613-50228-01 Rev A Command Reference for AR2050V 729

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

DOMAIN NAME SERVICE (DNS) COMMANDS

DEBUG IP DNS FORWARDING

debug ip dns forwarding

Overview Use this command to enable DNS Relay debugging.

Use the no variant of this command to disable DNS Relay debugging.

Syntax debug ip dns forwarding

no debug ip dns forwarding

Default DNS Relay debugging is disabled by default.

Mode Privileged Exec

Examples To enable DNS forwarding debugging, use the commands:

awplus# debug ip dns forwarding

To disable DNS forwarding debugging, use the commands:

awplus# no debug ip dns forwarding

Commands

ip dns forwarding

show debugging ip dns forwarding

C613-50228-01 Rev A Command Reference for AR2050V 730

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

DOMAIN NAME SERVICE (DNS) COMMANDS

DESCRIPTION (DOMAIN LIST)

description (Domain List)

Overview Use this command to give a description to a domain-list.

Use the no variant of this command to delete the description.

Syntax description <text>

no description

Mode Domain List Mode

Usage When creating a domain-list, it is helpful to write a short description of what the list

is to be used for.

Examples To add a description to a domain list:, use the commands:

awplus# configure terminal

awplus(config)# ip dns forwarding domain-list mydomains

awplus(config-domain-list)# description This is a useful

description of my domain list

To delete the description, use the commands:

awplus# configure terminal

awplus(config)# ip dns forwarding domain-list mydomains

awplus(config-domain-list)# no description

Commands

ip dns forwarding domain-list

Parameter Description

<text> Description string, 128 characters maximum. The string may

contain spaces.

C613-50228-01 Rev A Command Reference for AR2050V 731

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

DOMAIN NAME SERVICE (DNS) COMMANDS

DOMAIN (DOMAIN LIST)

domain (Domain List)

Overview Use this command to add a domain to a domain list.

Use the no variant of this command to delete the domain.

Syntax domain <domain-string>

no domain <domain-string>

Mode Domain List Mode

Usage Domain lists are objects that contain unsorted lists of domain names. After a

domain list has been created, you can use this command to add domains to the

domain list. There is no limit on the number of domains that can be added to a

domain list.

Examples To add the domain "acme-solutions.com" to a domain list, use the commands:

awplus# configure terminal

awplus(config)# ip dns forwarding domain-list acme-corporation

awplus(config-domain-list)# domain acme-solutions.com

To delete the domain, use the commands:

awplus# configure terminal

awplus(config)# ip dns forwarding domain-list acme-corporation

awplus(config-domain-list)# no domain acme-solutions.com

Commands

ip dns forwarding domain-list

Parameter Description

<domain-string> • A domain name must only contain a-z, A-Z, 0-9, ‘-' (en-dash)

and ‘.’(period) characters.

• Each sub-section of the domain must not start or end with

the '-' character.

• Each sub-section must have no more than 64 characters

including the '.'.

• The last section must not have a '.' at the end.

• The whole domain must be less than 254 characters long.

C613-50228-01 Rev A Command Reference for AR2050V 732

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

DOMAIN NAME SERVICE (DNS) COMMANDS

HOST-NAME (DDNS)

host-name (DDNS)

Overview Use this command to add a host name for the current DDNS update method.

NOTE: A DDNS update method can only have one host name.

Use the no variant of this command to remove the host name from the current

DDNS update method.

Syntax host-name <host-name>

no host-name

Default None

Mode DDNS Update Method Configuration

Example To add the host name “test.dyndns.org” for the DDNS update method “dyndns”,

use the commands:

awplus# configure terminal

awplus(config)# ddns-update-method dyndns

awplus(config-ddns-update-mthod)# host-name test.dyndns.org

To remove the host name “test.dyndns.org” from the DDNS update method

“dyndns”, use the commands:

awplus# configure terminal

awplus(config)# ddns-update-method dyndns

awplus(config-ddns-update-mthod)# no host-name

Commands

ddns-update-method

Command

changes

Version 5.4.7-0.1: command added

Parameter Description

<host-name> The name of the host to be configured in conjunction with the

user name and password.

C613-50228-01 Rev A Command Reference for AR2050V 733

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

DOMAIN NAME SERVICE (DNS) COMMANDS

IP DDNS-UPDATE-METHOD

ip ddns-update-method

Overview Use this command to enable an IPv4 interface to update DDNS with the specified

DDNS update method.

Use the no variant of this command to disable an IPv4 interface to update DDNS

with the specified DDNS update method.

Syntax ip ddns-update-method <method-name>

no ip ddns-update-method <method-name>

Default None

Mode Interface Configuration

Usage A DDNS update method cannot be attached to multiple interfaces, however

multiple DDNS update methods can be assigned to the same interface.

Example To enable IPv4 DDNS updates for a DDNS update method named “dyndns” using

interface eth1, use the commands:

awplus# configure terminal

awplus(config)# interface eth1

awplus(config-if)# ip ddns-update-method dyndns

To disable IPv4 DDNS updates for a DDNS update method named “dyndns” using

interface eth1, use the commands:

awplus# configure terminal

awplus(config)# interface eth1

awplus(config-if)# no ip ddns-update-method dyndns

Commands

ddns-update-method

Command

changes

Version 5.4.7-0.1: command added

Parameter Description

<method-name> A name given to a DDNS update method.

C613-50228-01 Rev A Command Reference for AR2050V 734

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

DOMAIN NAME SERVICE (DNS) COMMANDS

IP DNS FORWARDING

ip dns forwarding

Overview Use this command to enable DNS Relay, the forwarding of incoming DNS queries

for IP hostname-to-address translation.

Use the no variant of this command to disable the forwarding of incoming DNS

queries for IP hostname-to-address translation.

Syntax ip dns forwarding

no ip dns forwarding

Default The forwarding of incoming DNS query packets is disabled by default.

Mode Global Configuration

Usage DNS Relay requires that IP domain lookup is enabled. IP domain lookup is enabled

by default, but if it has been disabled, you can re-enable it by using the command

ip domain-lookup.

See the ip dns forwarding dead-time command used with this command.

NOTE: When running VRF-lite, the DNS Relay functions will apply separately within

each VRF instance.

Examples To enable the forwarding of incoming DNS query packets, use the commands:

awplus# configure terminal

awplus(config)# ip dns forwarding

To disable the forwarding of incoming DNS query packets, use the commands:

awplus# configure terminal

awplus(config)# no ip dns forwarding

Commands

clear ip dns forwarding cache

debug ip dns forwarding

ip dns forwarding cache

ip dns forwarding dead-time

ip dns forwarding retry

ip dns forwarding source-interface

ip dns forwarding timeout

ip name-server

show ip dns forwarding

show ip dns forwarding cache

show ip dns forwarding server

C613-50228-01 Rev A Command Reference for AR2050V 735

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

DOMAIN NAME SERVICE (DNS) COMMANDS

IP DNS FORWARDING CACHE

ip dns forwarding cache

Overview Use this command to set the DNS Relay name resolver cache size and cache entry

lifetime period. The DNS Relay name resolver cache stores the mappings between

domain names and IP addresses.

Use the no variant of this command to set the default DNS Relay name resolver

cache size and cache entry lifetime period.

Note that the lifetime period of the cache entry can be overwritten by the time-out

period of the DNS reply from the DNS server if the time-out period of the DNS reply

from the DNS server is smaller than the configured time-out period. The time-out

period of the cache entry will only be used when the time-out period of the DNS

reply from the DNS server is bigger than the time-out period configured on the

device.

Syntax ip dns forwarding cache [size <0-1000>] [timeout <60-3600>]

no ip dns forwarding cache [size|timeout]

Default The default cache size is 0 (no entries) and the default lifetime is 1800 seconds.

Mode Global Configuration

Examples To set the cache size to 10 entries and the lifetime to 500 seconds, use the

commands:

awplus# configure terminal

awplus(config)# ip dns forwarding cache size 10 time 500

To set the cache size to the default, use the commands:

awplus# configure terminal

awplus(config)# no ip dns forwarding cache size

Commands

clear ip dns forwarding cache

debug ip dns forwarding

ip dns forwarding

show ip dns forwarding

show ip dns forwarding cache

Parameter Description

<0-1000>Number of entries in the DNS Relay name resolver cache.

<60-3600>Timeout value in seconds.

Note that when running VRF-lite the number of entries configured

will apply to each VRF instance.

C613-50228-01 Rev A Command Reference for AR2050V 736

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

DOMAIN NAME SERVICE (DNS) COMMANDS

IP DNS FORWARDING DEAD-TIME

ip dns forwarding dead-time

Overview Use this command to set the time period in seconds when the device stops

sending any DNS requests to an unresponsive server and all retries set using ip dns

forwarding retry are used. This time period is the DNS forwarding dead-time. The

device stops sending DNS requests at the DNS forwarding dead-time configured

and when all of the retries are used.

Use the no variant of this command to restore the default DNS forwarding

dead-time value of 3600 seconds.

Syntax ip dns forwarding dead-time <60-43200>

no ip dns forwarding retry

Default The default time to stop sending DNS requests to an unresponsive server is 3600

seconds.

Mode Global Configuration

Usage See the ip dns forwarding retry command used with this command.

Examples To set the DNS forwarding retry count to 50 and to set the DNS forwarding

dead-time to 1800 seconds, use the commands:

awplus# configure terminal

awplus(config)# ip dns forwarding dead-time 1800

awplus(config)# ip dns forwarding retry 50

To reset the DNS retry count to the default of 2 and the DNS forwarding dead-time

to the default of 3600, use the commands:

awplus# configure terminal

awplus(config)# no ip dns forwarding dead-time

awplus(config)# no ip dns forwarding retry

Commands

debug ip dns forwarding

ip dns forwarding

ip dns forwarding retry

show ip dns forwarding

show ip dns forwarding server

C613-50228-01 Rev A Command Reference for AR2050V 737

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

DOMAIN NAME SERVICE (DNS) COMMANDS

IP DNS FORWARDING DOMAIN-LIST

ip dns forwarding domain-list

Overview Use this command to create a domain-list that can be used as a suffix-list for DNS

lookups. This command puts the device into a new mode where subsequent

commands can be entered. The new mode is "Domain List Configuration" mode.

Use the no variant of this command to delete the domain-list.

Syntax ip dns forwarding domain-list <domain-list-name>

no ip dns forwarding domain-list <domain-list-name>

Mode Global Configuration

Usage The domain list can be used by features that need to match against domains. A

domain list by itself does nothing; it must be attached to another feature to have

functionality (like a prefix-list).For example, the domain list can be used as a suffix

list on an DNS name-server. The DNS server can be either statically configured, or

learned over a PPP connection.

Note that this command is separate from the ip domain-list command, which is

used by DNS client to append a domain on to the end of a partial hostname to form

a fully-qualified domain.

Examples To create a domain list to include domains that are internal to the company such

as "engineering.acme" or "intranet.acme", use the commands:

awplus# configure terminal

awplus(config)# ip dns forwarding domain-list corporatedomains

awplus(config-domain-list)# description internal network domain

awplus(config-domain-list)# domain engineering.acme

awplus(config-domain-list)# domain intranet.acme

To delete the domain list, use the commands:

awplus# configure terminal

awplus(config)# no ip dns forwarding domain-list

corporatedomains

Commands

description (Domain List)

domain (Domain List)

Parameter Description

<domain-list-name> Name of the list.

C613-50228-01 Rev A Command Reference for AR2050V 738

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

DOMAIN NAME SERVICE (DNS) COMMANDS

IP DNS FORWARDING RETRY

ip dns forwarding retry

Overview Use this command to set the number of times DNS Relay will retry to forward DNS

queries. The device stops sending DNS requests to an unresponsive server at the

time set using the ip dns forwarding dead-time command and when all of the

retries are used.

Use the no variant of this command to set the number of retries to the default of 2.

Syntax ip dns forwarding retry <0-100>

no ip dns forwarding retry

Default The default number of retries is 2 DNS requests to an unresponsive server.

Mode Global Configuration

Usage See the ip dns forwarding dead-time command used with this command.

Examples To set the DNS forwarding retry count to 50 and to set the DNS forwarding

dead-time to 1800 seconds, use the commands:

awplus# configure terminal

awplus(config)# ip dns forwarding retry 50

awplus(config)# ip dns forwarding dead-time 1800

To reset the DNS retry count to the default of 2 and the DNS forwarding dead-time

to the default of 3600 seconds, use the commands:

awplus# configure terminal

awplus(config)# no ip dns forwarding retry

awplus(config)# no ip dns forwarding dead-time

Commands

debug ip dns forwarding

ip dns forwarding

ip dns forwarding dead-time

show ip dns forwarding

C613-50228-01 Rev A Command Reference for AR2050V 739

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

DOMAIN NAME SERVICE (DNS) COMMANDS

IP DNS FORWARDING SOURCE-INTERFACE

ip dns forwarding source-interface

Overview Use this command to set the interface to use for forwarding and receiving DNS

queries.

Use the no variant of this command to unset the interface used for forwarding and

receiving DNS queries.

Syntax ip dns forwarding source-interface <interface-name>

no ip dns forwarding source-interface

Default The default is that no interface is set and the device selects the appropriate source

IP address automatically.

Mode Global Configuration

Examples To set vlan1 as the source interface for relayed DNS queries, use the commands:

awplus# configure terminal

awplus(config)# ip dns forwarding source-interface vlan1

To clear the source interface for relayed DNS queries, use the commands:

awplus# configure terminal

awplus(config)# no ip dns forwarding source-interface

Commands

debug ip dns forwarding

ip dns forwarding

show ip dns forwarding

C613-50228-01 Rev A Command Reference for AR2050V 740

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

DOMAIN NAME SERVICE (DNS) COMMANDS

IP DNS FORWARDING TIMEOUT

ip dns forwarding timeout

Overview Use this command to set the time period for the DNS Relay to wait for a DNS

response.

Use the no variant of this command to set the time period to wait for a DNS

response to the default of 3 seconds.

Syntax ip dns forwarding timeout <0-3600>

no ip dns forwarding timeout

Default The default timeout value is 3 seconds.

Mode Global Configuration

Examples To set the timeout value to 12 seconds, use the commands:

awplus# configure terminal

awplus(config)# ip dns forwarding timeout 12

To set the timeout value to the default of 3 seconds, use the commands:

awplus# configure terminal

awplus(config)# no ip dns forwarding timeout

Commands

debug ip dns forwarding

ip dns forwarding

show ip dns forwarding

C613-50228-01 Rev A Command Reference for AR2050V 741

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

DOMAIN NAME SERVICE (DNS) COMMANDS

IP DOMAIN-LIST

ip domain-list

Overview This command adds a domain to the DNS list. Domains are appended to

incomplete host names in DNS requests. Each domain in this list is tried in turn in

DNS lookups. This list is ordered so that the first entry you create is checked first.

The no variant of this command deletes a domain from the list.

Syntax ip domain-list <domain-name>

no ip domain-list <domain-name>

Mode Global Configuration

Usage If there are no domains in the DNS list, then your device uses the domain specified

with the ip domain-name command. If any domain exists in the DNS list, then the

device does not use the domain set using the ip domain-name command.

Example To add the domain example.net to the DNS list, use the following commands:

awplus# configure terminal

awplus(config)# ip domain-list example.net

Commands

ip domain-lookup

ip domain-name

show ip domain-list

Parameter Description

<domain-name> Domain string, for example “company.com”.

C613-50228-01 Rev A Command Reference for AR2050V 742

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

DOMAIN NAME SERVICE (DNS) COMMANDS

IP DOMAIN-LOOKUP

ip domain-lookup

Overview This command enables the DNS client on your device. This allows you to use

domain names instead of IP addresses in commands. The DNS client resolves the

domain name into an IP address by sending a DNS inquiry to a DNS server,

specified with the ip name-server command.

The no variant of this command disables the DNS client. The client will not attempt

to resolve domain names. You must use IP addresses to specify hosts in

commands.

Syntax ip domain-lookup

no ip domain-lookup

Mode Global Configuration

Usage The client is enabled by default. However, it does not attempt DNS inquiries unless

there is a DNS server configured.

If you are using DNS Relay (see the command ip dns forwarding), you must have IP

domain lookup enabled.

Examples To enable the DNS client on your device, use the following commands:

awplus# configure terminal

awplus(config)# ip domain-lookup

To disable the DNS client on your device, use the following commands:

awplus# configure terminal

awplus(config)# no ip domain-lookup

Commands

ip domain-list

ip domain-name

ip name-server

show hosts

show ip name-server

C613-50228-01 Rev A Command Reference for AR2050V 743

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

DOMAIN NAME SERVICE (DNS) COMMANDS

IP DOMAIN-NAME

ip domain-name

Overview This command sets a default domain for the DNS. The DNS client appends this

domain to incomplete host-names in DNS requests.

The no variant of this command removes the domain-name previously set by this

command.

Syntax ip domain-name <domain-name>

no ip domain-name <domain-name>

Mode Global Configuration

Usage If there are no domains in the DNS list (created using the ip domain-list command)

then your device uses the domain specified with this command. If any domain

exists in the DNS list, then the device does not use the domain configured with this

command.

When your device is using its DHCP client for an interface, it can receive Option 15

from the DHCP server. This option replaces the domain name set with this

command.

Example To configure the domain name, enter the following commands:

awplus# configure terminal

awplus(config)# ip domain-name company.com

Commands

ip domain-list

show ip domain-list

show ip domain-name

C613-50228-01 Rev A Command Reference for AR2050V 744

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

DOMAIN NAME SERVICE (DNS) COMMANDS

IP NAME-SERVER

ip name-server

Overview This command adds IPv4 or IPv6 DNS server addresses. The DNS client on your

device sends DNS queries to IP addresses in this list when trying to resolve a host

name. Host names cannot be resolved until you have added at least one server to

this list. A maximum of three name servers can be added to this list.

If you are running VRF-lite, you can add IPv4 or IPv6 DNS server addresses for either

the global VRF instance or for a specific VRF instance. Host names cannot be

resolved from within a VRF instance until you have added at least one name-server

to that VRF instance.

The no variant of this command removes the specified DNS name-server address.

Syntax ip name-server <ip-addr> [suffix-list <domain-list>]

no ip name-server <ip-addr> [suffix-list]

Syntax (VRF-lite) ip name-server [vrf <name>] <ip-addr>

no ip name-server [vrf <name>] <ip-addr>

Mode Global Configuration

Usage To allow the device to operate as a DNS proxy, your device must have learned

about a DNS name-server to forward requests to. Name-servers can be learned

through the following means:

• Manual configuration, using the ip name-server command

• Learned from DHCP server with Option 6

• Learned over a PPP tunnel if the neighbor advertises the DNS server

This command is used to statically configure a DNS name-server for the device to

use.

For more information about PPP and DNS, see the PPP Feature Overview and

Configuration Guide.

Parameter Description

<ip-addr> The IP address of the DNS server that is being added to the name

server list. The address is entered in the form A.B.C.D for an IPv4

address, or in the form X:X::X:X for an IPv6 address.

vrf Apply this command to the specified VRF instance.

<name> The name of the specific VRF instance

suffix-list Specify domain suffixes that should be directed to this name

server

<domain-list> The name of the DNS domain-list

C613-50228-01 Rev A Command Reference for AR2050V 745

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

DOMAIN NAME SERVICE (DNS) COMMANDS

IP NAME-SERVER

Examples To allow a device to send DNS queries to a DNS server with the IPv4 address

10.10.10.5, use the commands:

awplus# configure terminal

awplus(config)# ip name-server 10.10.10.5

To enable your device to send DNS queries to a DNS server with the IPv6 address

2001:0db8:010d::1, use the commands:

awplus# configure terminal

awplus(config)# ip name-server 2001:0db8:010d::1

For DNS relay, to direct DNS lookups for domains with suffixes of

"engineering.acme" or "intranet.acme" to an internal corporate name-server, use

the commands:

awplus# configure terminal

awplus(config)# ip dns forwarding domain-list corporatedomains

awplus(config-domain-list)# description Our internal network

domains; do not send DNS requests to internet

awplus(config-domain-list)# domain engineering.acme

awplus(config-domain-list)# domain intranet.acme

awplus(config-domain-list)# exit

awplus(config)# ip name-server 172.16.0.1 suffix-list

corporatedomains

Example

(VRF-lite)

To enable your switch to send DNS queries (on VRF instance RED) to a DNS server

with the IPv4 address 10.10.10.5 use the commands:

awplus# configure terminal

awplus(config)# ip name-server vrf RED 10.10.10.5

Commands

ip domain-list

ip domain-lookup

ip domain-name

show ip dns forwarding cache

show ip name-server

Command

changes

Version 5.4.6-2.1: VRF-lite support added.

C613-50228-01 Rev A Command Reference for AR2050V 746

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

DOMAIN NAME SERVICE (DNS) COMMANDS

IPV6 DDNS-UPDATE-METHOD

ipv6 ddns-update-method

Overview Use this command to enable an IPv6 interface to update DDNS with the specified

DDNS update method.

Use the no variant of this command to disable an IPv6 interface to update DDNS

with the specified DDNS update method.

Syntax ipv6 ddns-update-method <method-name>

no ipv6 ddns-update-method <method-name>

Default None

Mode Interface Configuration

Usage A DDNS update method cannot be attached to multiple interfaces, however

multiple DDNS update methods can be assigned to the same interface.

Example To enable IPv6 DDNS updates for a DDNS update method named “dyndns” using

interface eth1, use the following commands:

awplus# configure terminal

awplus(config)# interface eth1

awplus(config-if)# ipv6 ddns-update-method dyndns

To disable IPv6 DDNS updates for a DDNS update method named “dyndns” using

interface eth1, use the following commands:

awplus# configure terminal

awplus(config)# interface eth1

awplus(config-if)# no ipv6 ddns-update-method dyndns

Commands

ddns-update-method

Command

changes

Version 5.4.7-0.1: command added

Parameter Description

<method-name> A name given to a DDNS update method.

C613-50228-01 Rev A Command Reference for AR2050V 747

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

DOMAIN NAME SERVICE (DNS) COMMANDS

PASSWORD (DDNS)

password (DDNS)

Overview Use this command to add a password to the current DDNS update method.

Use the no variant of this command to remove a password from the current DDNS

update method.

Syntax password <password>

no password

Default None

Mode DDNS Update Method Configuration

Example To configure the password “test” for the method “dyndns”, use the following

commands:

awplus# configure terminal

awplus(config)# ddns-update-method dyndns

awplus(config-ddns-update-mthod)# password test

To remove the password “test” from the method “dyndns”, use the following

commands:

awplus# configure terminal

awplus(config)# ddns-update-method dyndns

awplus(config-ddns-update-mthod)# no password

Commands

ddns-update-method

Command

changes

Version 5.4.7-0.1: command added

Parameter Description

<password> The password to be configured in conjunction with the user name

and host name.

C613-50228-01 Rev A Command Reference for AR2050V 748

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

DOMAIN NAME SERVICE (DNS) COMMANDS

PPP IPCP DNS

ppp ipcp dns

Overview Use this command to configure the primary and secondary DNS (Domain Name

System) IP addresses for IPCP (Internet Protocol Control Protocol) on a given PPP

interface.

Use the no variant of this command to remove the primary and secondary DNS IP

addresses for IPCP on a given PPP interface, and remove any optional parameters

configured for DNS.

Syntax ppp ipcp dns [<primary> [<secondary>]][required|reject|request]

no ppp ipcp dns

Default By default no IPCP DNS server request is sent to the peer.

Mode Interface Configuration

Usage Use the optional parameters to configure PPP IPCP DNS options for accepting,

rejecting or requesting DNS addresses from the peer. Use the optional primary and

secondary or primary only DNS server address placeholders to specify DNS server

addresses to the peer.

The no variant of this command also stops IPCP DNS request messages being sent

to the peer.

Examples To configure the PPP interface ppp0 to require a DNS IP address from the peer, and

close the link if a DNS IP address is not given, enter the below commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# ppp ipcp dns required

Parameter Description

<primary>Specify the primary DNS address for a given PPP interface to the

peer.

<secondary>Specify the secondary DNS address for a given PPP interface to the

peer.

required Request DNS addresses from the peer, and close the link if none is

given.

reject Reject negotiations with the peer (default).

request Request DNS addresses from the peer.

C613-50228-01 Rev A Command Reference for AR2050V 749

AlliedWare Plus™ Operating System - Version 5.4.8-0.x

DOMAIN NAME SERVICE (DNS) COMMANDS

PPP IPCP DNS

To configure the PPP interface ppp0 to require a DNS IP address from the peer,

enter the below commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# ppp ipcp dns request

To configure the PPP interface ppp0 to reject a DNS IP address from the peer, enter

the below commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# ppp ipcp dns reject

To configure the PPP interface ppp0 to supply primary and secondary DNS server

addresses to the peer, enter the below commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# ppp ipcp dns 10.1.1.2 10.1.1.3

To configure the PPP interface ppp0 to supply a primary but not a secondary DNS

server address to the peer, enter the below commands:

awplus# configure terminal

awplus(config)# interface ppp0

awplus(config-if)# ppp ipcp dns 10.1.1.2

Commands

ip address negotiated

peer default ip address

peer neighbor-route

show running-config interface

C613-50228-01 Rev A Command Reference for AR2050V 750