Layer 2

Link-Aggregation Control Protocol (LACP) is a control protocol for dynamically managing the member ports in a channel. The peers on both ends of the channel use LACP to exchange information about member ports; the peers can automatically remove or replace member links if configuration changes disqualify/re-qualify them for channel membership.

By default, the ARX uses a Fast_Periodic_Time for its transmissions (1 LACPDU each second), and a Short_Timeout_Time (time out if the peer takes longer than 3 seconds to respond). If the peer has different LACP timer settings, the peers may periodically disconnect from each other. Use the lacp rate command to lengthen the rate to one LACPDU every 30 seconds, and to lengthen the timeout to 90 seconds.

Use no lacp rate to return the timeout to its faster defaults.

cfg-channel

lacp rate long-timeout

no lacp rate

Fast_Periodic_Time - transmit an LACPDU once per second.

no lacp rate -

Short_Timeout_Time - time out after 3 seconds.

The LACP timer settings should be the same at both ends of the channel.

This command is irrelevant unless you also use lacp active or lacp passive to enable LACP on the current channel.

This command disables and re-enables the channel to activate the change. The CLI prompts you with a warning about the temporary connection loss; enter yes to proceed.

LACP is defined in IEEE 802.3ad, and later in IEEE 802.1AX-2008. Channel peers configured with LACP can exchange Link Aggregation Control Protocol Data Units (LACPDUs) over each member port. The peers can use the state information in these LACPDUs to dynamically react to configuration or topology changes. For example, if a configuration change disqualifies one of the channels member ports for aggregation, the ARX and its peer can use LACP to automatically remove the ports link from the channel. If another configuration change makes the link suitable for aggregation again, the LACP processes can automatically restore it to the channel.

These LACP timer settings are also defined in IEEE 802.1AX-2008. This command toggles between Fast_Periodic_Time/Short_Timeout_Time and Slow_Periodic_Time/Long_Timeout_Time.

Use the channel command to create a channel, and use the members (cfg-channel) command to add a port to the channel. The show channel ... lacp command shows the current configuration and status of LACP on a given channel. For LACP statistics, use the show channel ... lacp stats command (see the documentation for show channel ... stats).

Sample

bstnA(cfg-channel[1])# lacp rate long-timeout

Warning: Changing the LACP Rate will result in temporarily loss of network connectivity for all members of this channel.

Are you sure? [yes/no] yes

sets a 30-second interval (and a 90-second timeout) for LACP transmissions on channel 1.

show channel ... lacp

show channel ... stats

load-balance


Purpose	A channel balances out-bound load amongst its ports by hashing packet IPs together and choosing a port based on the hash. Use the load-balance command to change the IP(s) used in the hash.
Mode	cfg-channel
Security Role(s)	network-engineer or crypto-officer
Syntax	load-balance {src-ip \| dst-ip \| src-dst-ip} no load-balance src-ip uses only the packets source-IP address in the hash. This may not produce the best hash: the source IPs are limited to a small set of VIPs (see virtual server), proxy IPs (see ip proxy-address), and management IPs (see ip address (cfg-if-vlan) and ip address (cfg-mgmt)). dst-ip uses the packets destination-IP address, ignoring the source address. Destination addresses are those of clients, filers, and management stations, so this is typically a better hash than one that uses the limited set of source IPs. src-dst-ip combines the source and destination IPs with a bit-wise XOR operation. This hash typically produces the best traffic distribution within the channel.
Default(s)	src-dst-ip
Valid Platforms	ARX-2000 or ARX-4000
Guidelines	This stops and restarts the channel to reset the traffic-distribution hash. The CLI therefore prompts for confirmation before stopping traffic; type yes to confirm. This is relevant to outbound traffic only. Use show channel [load-balance] to view the current load-balancing configuration for all channels. To find the results of the hash for a packet with a particular source and destination IP, use show load-balancing.
Samples	bstnA(cfg-channel[9])# load-balance src-ip Changing the load-balancing algorithm will cause the channel to disrupt traffic. Are you sure? [yes/no] yes uses source-IP addresses to choose outbound ports in channel 9. This ignores destination-IP addresses for the hash. bstnA(cfg-channel[2])# no load-balance Changing the load-balancing algorithm will cause the channel to disrupt traffic. Are you sure? [yes/no] yes returns channel 2 to the default; choose an outbound port based on an XOR of the packets source and destination IPs.
Related Commands	channel show load-balancing show channel

mac-address aging-time


Purpose	The ARX learns the MAC addresses of neighboring bridges by examining the source MACs in the frames that it receives. Each MAC address is added to (or updated in) an internal table of MAC addresses. If no new updates are received for a MAC address over the aging time, the switch erases a MAC address from the table. Use the mac-address aging time command to set the aging time. Use the no form of the command to revert to the default aging time.
Mode	cfg-stp
Security Role(s)	network-engineer or crypto-officer
Syntax	mac-address aging-time seconds no mac-address aging-time seconds is a number from 300 to 1,000,000.
Default(s)	300 (seconds, or 5 minutes)
Valid Platforms	ARX-2000 and ARX-4000
Guidelines	The MAC address aging time is defined in IEEE 802.1D. Use the show mac-address-table summary command to see the current aging time.
Samples	bstnA(cfg-stp)# mac-address aging-time 600 sets the aging time to 600 (seconds), or 10 minutes. bstnA(cfg-stp)# no mac-address aging-time reverts the aging time to the default.
Related Commands	spanning-tree show mac-address-table summary

max-age


Purpose	The Max Age is the time (in seconds) to keep BPDU information from a neighboring bridge before declaring the port information stale. If the Max Age is reached for a port, it is considered disconnected by the other bridges in the spanning tree. Use the max-age command to set the Max Age. Use the no form to revert to the default Max Age.
Mode	cfg-stp
Security Role(s)	network-engineer or crypto-officer
Syntax	max-age seconds no max-age seconds is a number from 6 to 40.
Default(s)	20 (seconds)
Valid Platforms	ARX-2000 and ARX-4000
Guidelines	The Spanning-Tree protocol is defined in IEEE 802.1D. The Max Age is typically three times the Hello Time; it must be at least 2 * (Hello Time + 1). Use the hello-time command to set the Hello Time.
Samples	bstnA(cfg-stp)# max-age 15 sets the Max Age to 15 (seconds). bstnA(cfg-stp)# no max-age reverts the Max Age to the default.
Related Commands	spanning-tree hello-time


Purpose	From cfg-channel mode, use the members command to add a single port or a range of ports to the current channel. Use the no members command to remove a port(s) from the channel.
Mode	cfg-channel
Security Role(s)	network-engineer or crypto-officer
Syntax	members slot/port [to slot/port ] no members slot/port [to slot/port ] slot/port (2/1-14 on ARX-4000; 1/1-4 or 2/1-2 on ARX-2500; 1/1-12 on ARX-2000; 1/1-8 on ARX-1500) is the first (or only) Ethernet port. to slot/port (optional) is the last port in a range of ports. Use the show interface summary command to locate the slot(s) for these ports. ARX-4000 and ARX-2500 devices have ten-gigabit interfaces at ports 2/1 and 2/2 and one-gigabit interfaces at the remaining ports.
Default(s)	None
Valid Platforms	ARX-1500, ARX-2000, ARX-2500, and ARX-4000
Guidelines	A channel can have up to 8 ports. All of the ports must be shut down before you add them with this command (see shutdown (cfg-if-gig) or shutdown (cfg-if-ten-gig)). The ARX can support different speeds amongst the channel members; confirm that the peer at the other end of the channel can support this before you configure your channel this way. For a channel to be used as a redundant-pair link, use the redundancy protocol (cfg-channel) command instead of this command. You cannot use the no members command on the last port in the channel; instead, use no channel to remove the entire channel.
Guidelines: Confirmation Prompt on an ARX-1500 and ARX-2500	The ARX-1500 and ARX-2500 do not support the same VLAN on two physical interfaces, where a physical interface is either a port or a channel. Each VLAN can be carried by only one port or channel. Therefore, the system removes all VLANs from any member port you choose before adding the port to the channel. The port then carries the same VLAN(s) as the other ports in the same channel (with vlan (cfg-channel) or vlan-tag). The CLI prompts for confirmation before taking the port off of any VLANs; enter yes to continue.
Guidelines: Port 1/1 on an ARX-1500 and ARX-2500	On the ARX-1500 and ARX-2500, port 1/1 is the out-of-band management interface by default, and cannot be included in any client/server channel. If you prefer to use an in-band (VLAN) management interface (see interface vlan) for accessing the CLI or GUI, you can use interface mgmt and shutdown (cfg-mgmt) to stop using port 1/1 for out-of-band management. Then you can use this command to include port 1/1 in a client/server channel.
Samples	bstnA(cfg-channel[2])# members 2/7 to 2/10 adds ports 2/7-2/10 to channel 2. bstnA(cfg-channel[5])# members 2/2 adds port 2/2 (a ten-gigabit port) to channel 5. bstnA(cfg-channel[4])# no members 2/13 to 2/14 removes ports 2/13-2/14 from channel 4.
Related Commands	channel shutdown (cfg-if-gig) shutdown (cfg-if-ten-gig) redundancy protocol (cfg-channel) show interface summary

members (cfg-vlan)

Use the members command to add a single port or a range of ports to the current VLAN.

Use no members to remove a port(s).

cfg-vlan

members slot/port [to slot/port ]

no members slot/port [to slot/port ]

slot/port (2/1-14 on ARX-4000; 1/1-4 or 2/1-2 on ARX-2500; 1/1-12 on ARX-2000; 1/1-8 on ARX-1500) is the first (or only) Ethernet port.

to slot/port (optional) is the last port in a range of ports. You cannot use this option on the ARX-2500 or ARX-1500, which allow only a single port to carry each VLAN.

Use the show interface summary command to locate the slot(s) for these ports.

IEEE 802.1Q defines VLANs.

This command adds ports to the VLAN with tagging disabled. A port with tagging disabled does not tag any outgoing frames with the VLAN ID (VID) for this VLAN. Use the tag command to add ports with tagging enabled, or to enable tagging for existing VLAN ports.

On the ARX-1500 and the ARX-2500, only a single port (interface gigabit or interface ten-gigabit) or channel can carry any given VLAN. That is, you can only select a single member port with this command. This includes VLAN 1; if multiple channels or ports default to VLAN 1, all but one of them must be disabled (with shutdown (cfg-if-gig), shutdown (cfg-if-ten-gig), or shutdown (cfg-channel)).

To assign a channel to carry the VLAN, use the vlan (cfg-channel) command. On the ARX-2500 or ARX-1500, this is the method for carrying a VLAN on multiple ports; aggregate the ports into a channel, then assign the desired VLAN to that channel.

Guidelines: Removing the Last Port from the Redundancy Link

In the following circumstances, the no members command causes the backup ARX peer to reboot:

the interface vlan command establishes an in-band (VLAN) management address for this VLAN,

the redundancy (cfg-if-vlan) command establishes the above management address as the local end of the redundancy link,

redundancy is active between the ARX peers, and

the no members command is removing the last port(s) from the VLAN.

The reboot does not disrupt any storage services, but the ARX peers cannot function as a redundant pair while the link is shut down. Additionally, a quorum-disk failure or disconnection would cause the active peer to reboot, too. If you proceed with shutting down the link, you should establish a new one as soon as possible: use the redundancy protocol, redundancy protocol (cfg-channel), or redundancy (cfg-if-vlan) command on another port, channel, or VLAN interface to establish a new redundant-pair link.

adds ports 2/3-2/6 to VLAN 1.

bstnA(cfg-vlan[1])# members 2/3 to 2/6

bstnA(cfg-vlan[5])# members 2/1

adds port 2/1 to VLAN 5.

bstnA(cfg-vlan[1])# no members 2/5 to 2/6

removes ports 2/5-2/6 from VLAN 1.

bstnA(cfg-vlan[7])# no members 2/11

removes port 2/11 from VLAN 7.

vlan

tag

priority (cfg-channel)


Purpose	LACP (IEEE 802.1AX-2008) defines a System Priority parameter for the stations at either end of a link-aggregation channel. From cfg-channel mode, use the priority command to set the System Priority for the current channel. Use no priority to revert to the default System Priority.
Mode	cfg-channel
Security Role(s)	network-engineer or crypto-officer
Syntax	priority number no priority number (0-65536) is System Priority that you choose for this channel.
Default(s)	32,767
Valid Platforms	ARX-2000 and ARX-4000
Guidelines	This command is only relevant in a channel with lacp passive enabled. A lower number indicates higher priority. The station with the highest priority initiates all changes to member-port status in the channel. As an example of a change in member-port status: a port could change from a standby state to active use in the channel due to a configuration change. Each channel can have a different priority setting. You cannot run this command on the ARX-1500 or ARX-2500; the System Priority on those platforms is fixed at 65535 (lowest priority).
Samples	bstnA(cfg-channel[1])# priority 1 sets the System Priority to 1 (a very high priority) at channel 1. bstnA(cfg-channel[10])# no priority sets the default System Priority at channel 10.
Related Commands	channel show channel lacp passive

priority (cfg-stp)


Purpose	In a spanning tree topology, the bridge with the lowest Bridge Priority is elected as the spanning-tree root. From cfg-stp mode, use the priority command to set the Bridge Priority for the ARX. Use no priority to revert to the default Bridge Priority.
Mode	cfg-stp
Security Role(s)	network-engineer or crypto-officer
Syntax	priority number no priority number (0-61440) is Bridge Priority that you choose for the ARX. Use a multiple of 4096 (such as 0, 4096, 8192, or 12288).
Default(s)	61,440
Valid Platforms	ARX-2000 and ARX-4000
Guidelines	The Spanning-Tree protocol and Bridge Priority are defined in IEEE 802.1D. A lower number indicates higher priority. If all bridges have the same priority, the bridge with the lowest MAC address is elected as the root bridge.
Samples	bstnA(cfg-stp)# priority 0 sets the Bridge Priority to 0. The ARX will likely be elected as the root bridge. bstnA(cfg-stp)# no priority sets the default Bridge Priority.
Related Commands	spanning-tree

protocol (cfg-stp)

From cfg-stp mode, use the protocol command to choose the spanning-tree protocol: the original Spanning Tree Protocol (STP), or Rapid Spanning Tree (RST) protocol.

Use no protocol to revert to the default.

cfg-stp

protocol {dot1d | rst}

no protocol

dot1d | rst is a required choice:

dot1d runs the original STP (IEEE 802.1D), ignoring RST-based BPDUs.

rst runs RST from IEEE 802.1w, but is compatible with bridges that run the original STP (above).

RST

RST improves on the original STP implementation by more-rapidly converging on a new spanning-tree topology after a bridge or port failure. Conforming bridges (including the ARX) agree on the most-modern supported version of the protocol and use that version for all spanning-tree communication.

For an RST implementation, use the cfg-if-gig spanning-tree edgeport command to identify all the Edge Ports on the ARX.

selects the earliest version of spanning-tree.

bstnA(cfg-stp)# protocol dot1d

bstnA(cfg-stp)# no protocol

sets the protocol to the default, RST.

spanning-tree

spanning-tree edgeport

redundancy protocol

Use the redundancy protocol command to designate the current interface as one end of a redundant-pair link.

Use the no redundancy protocol command to remove support for a redundant-pair link. This causes the standby peer to reboot; see

redundancy protocol

no redundancy protocol

In cfg-if-ten-gig mode: ARX-4000 only.

Guidelines: Shutting Down the Redundant-Pair Link

At the layer-2 level, this establishes one end of the link between redundant peers. For best performance, a gigabit or ten-gigabit connection is strongly recommended; use the speed (cfg-if-gig) command to set the speed on a single-gigabit interface. We also recommend that the connection be direct (without any intervening bridges or routers), and that the switches are co-located. If the latency is low, an intervening Gigabit L2 switch is permissible.

Alternatively, you can configure a multi-port channel as the redundant-pair link. Use channel to create the channel, then use redundancy protocol (cfg-channel) to add member ports to it. (The ARX-1500 and ARX-2500 use different commands to establish the redundancy link over a channel, described in the documentation for redundancy protocol (cfg-channel).)

For cases where low latency between the peers is impossible, you may need to increase a timeout value when you set up the redundant pair. When you set up redundancy between the peers later, you can use the resilver-timeout command to increase this timeout value. You can also use the show redundancy metalog command to monitor the latency between the peers.

The no redundancy protocol command disables the redundant-pair link (see redundancy protocol), and therefore causes the standby peer to reboot if redundancy is enabled (enable (cfg-redundancy)). The reboot does not disrupt any storage services, but the ARX peers cannot function as a redundant pair while the link is shut down. Additionally, a quorum-disk failure or disconnection would cause the active peer to reboot, too. If you proceed with shutting down the link, you should establish a new one as soon as possible: use the redundancy protocol or redundancy protocol (cfg-channel) command on another port or channel to establish a new redundant-pair link.

The CLI prompts for confirmation before shutting down a redundant-pair link; enter yes to proceed with the interface shutdown and the reboot.

Guidelines: ARX-1500 and ARX-2500

The ARX-1500 and ARX-2500 use layer-3 (IP) networking software for exchanging heartbeats and important metalog data between the peers, so they require layer-3 configuration for their redundancy link. Instead of the layer-2 redundancy protocol command described here, you can use the following commands to set up a layer-3 redundancy link over the current interface:

Establish a new VLAN for this link. Use the vlan command to create a new VLAN, then use members (cfg-vlan) to assign the current interface to that VLAN.

Use the interface vlan to create a management-IP interface on the VLAN; this puts you into cfg-if-vlan mode.

From cfg-if-vlan mode, use the ip address (cfg-if-vlan) command to establish an in-band (VLAN) IP address. You later use this VLAN-management IP address to identify this ARX to its peer, as described below.

From the same mode, use redundancy (cfg-if-vlan) to designate the interface for exchanging metalog data and heartbeats.

From the same mode, use no shutdown (cfg-if-vlan) to enable the management interface.

uses interface 2/1 as one end of a redundant-pair link.

prtlndA(cfg-if-gig[2/1])# redundancy protocol

bstnA(cfg-if-gig[2/13])# no redundancy protocol

Removing redundancy protocol for this interface will cause the peer to reboot.

Are you sure? [yes/no] yes

stops using interface 2/13 as one end of a redundant-pair link. If the redundant pair has already formed (see the enable (cfg-redundancy) documentation), this causes the peer to reboot.

bstnA(cfg-if-ten-gig[2/2])# redundancy protocol

uses a ten-gigabit interface, 2/2, as one end of a redundant-pair link.

redundancy protocol (cfg-channel)

interface gigabit

interface ten-gigabit

speed (cfg-if-gig)

redundancy

resilver-timeout

show redundancy metalog

From cfg-channel mode, use the redundancy protocol command to add a single port or a range of ports to the current redundancy-link channel. This command performs two tasks at once: it adds ports to the channel, and prepares the channel for use as a redundant-pair link.

Use the no redundancy protocol command to remove redundancy-link support along with one or more ports.

cfg-channel

redundancy protocol slot/port [to slot/port ]

no redundancy protocol slot/port [to slot/port ]

slot/port (2/1-14 on ARX-4000; 1/1-12 on ARX-2000) is a single port or the first port in a range.

to slot/port (optional) is the last port in a range of ports.

Use the show interface summary command to locate the slot(s) for these ports.

A channel can have up to 8 ports. All ports must belong to the same VLAN(s) and they must run at the same speed.

Redundancy requires a reliable and fast channel for best performance. We recommend that you enable LACP on the channel to increase its reliability in high packet traffic: use lacp passive or lacp active to enable LACP, depending on your platform. For best performance, a gigabit (or higher-bandwidth) connection is strongly recommended. Use the cfg-if-gig speed (cfg-if-gig) command to set the speed on each port. We also recommend that the connection be direct (without any intervening bridges or routers), and that the switches are co-located. If the latency is low, an intervening Gigabit L2 switch is permissible.

A port cannot be a member of a channel if it has an auto speed.

Use the members (cfg-channel) command to add ports to a standard (non-redundancy-link) channel.

You cannot use the no redundancy protocol command on the last port in the channel; instead, use no channel to remove the entire channel.

Guidelines: ARX-1500 and ARX-2500

Establish a new VLAN for this link. Use the vlan (cfg-channel) command to assign the channel to the VLAN.

Use the interface vlan to create a management-IP interface on the VLAN; this puts you into cfg-if-vlan mode.

From the same mode, use redundancy (cfg-if-vlan) to designate the interface for exchanging metalog data and heartbeats.

From the same mode, use no shutdown (cfg-if-vlan) to enable the management interface.

adds ports 2/1-2/2 to channel 2, a channel to be used as a link between redundant peers.

bstnA(cfg-channel[2])# redundancy protocol 2/1 to 2/2

prtlndA(cfg-channel[4])# no redundancy protocol 2/3

removes port 2/3 from channel 4.

channel

show interface summary

speed (cfg-if-gig)

redundancy

resilver-timeout

show redundancy metalog

show channel

A channel is a group of Ethernet ports aggregated into a single flow, as specified in IEEE 802.3ad. Use the show channel command to show the configuration of one channel.

(any)

crypto-officer, storage-engineer, network-engineer, network-technician, or operator

show channel {summary | load-balance | channel-id [lacp]}

summary | load-balance | channel-id is a required choice.

summary shows a summary for all channels.

load-balance shows the load-balancing algorithm for all channels.

channel-id (1-8) identifies one channel; use this option to show detailed parameters for one channel.

lacp (optional, if you choose a channel-id) displays the configuration and state of the Link Aggregation Control Protocol (LACP) on the given channel.

ARX-1500, ARX-2000, ARX-2500, or ARX-4000

This command shows the configuration and running state of a channel. Its various outputs are described below. For channel statistics (such as packet counts), use show channel ... stats.

Guidelines: Summary

The show channel summary command outputs one line per channel. Each line contains the following fields:

Ch Id identifies the channel.

* indicates that the channel is used as a redundancy link with the switchs redundant peer (see redundancy protocol (cfg-channel)).

Admin State is set by the shutdown (cfg-channel) command.

Oper Status is Up if the channel has at least one operational port. This is Down if all of the member ports are down.

Speed is the speed of each port in the channel. Before ports can be aggregated into a channel, their speeds must match (see speed (cfg-if-gig) to set a ports speed).

Load-Balancing Algorithm shows the IP address(es) (source and/or destination) that are hashed to choose a port for an outbound packet. This is set by the load-balance command.

LACP is Active, Passive, or Disabled, depending on the lacp active setting (on the ARX-1500 or ARX-2500), or the lacp passive setting (on other platforms that support channels).

Description is set by the description (cfg-channel) command.

Guidelines: Load-Balance

The show channel load-balance command shows the load-balancing algorithm for each channel.

Guidelines: channel-id (Detailed)

The show channel channel-id command shows details about the given channel:

Channel Id identifies the channel.

Description is set by the description (cfg-channel) command.

Load Balancing Algorithm shows the IP address(es) or MAC address(es) (source and/or destination) that are hashed to choose a port for an outbound packet. This is set by the load-balance command.

LACP State is Active, Passive, or Disabled. LACP (Link Aggregation Control Protocol) is a control protocol for dynamically adapting member usage to topology changes. On some platforms, you can enable LACP Passive mode with the lacp passive command; on other platforms, you can use the lacp active command to enable LACP Active mode.

LACP Rate is either Short Timeout or Long Timeout. The rate should be the same at both ends of the channel, or the channel may periodically drop out of service. You can set this with the lacp rate command.

Members(Slot/Interface) lists the interfaces (ports) in this channel. Use the members (cfg-channel) command or the redundancy protocol (cfg-channel) command to add members to the channel.

Number of Members counts the ports from the above field.

Admin State is set by the shutdown (cfg-channel) command.

Channel Oper Status is Up if the channel has at least one operational port. This is Down if all of the member ports are down.

Trap Status is set by the trap shutdown command.

These spanning-tree fields only appear on systems that support the spanning-tree command.

Spanning-Tree Forwarding State is discard, forward, or disabled. The channel is typically in discard state when the Spanning-Tree Role is alternate, and it is typically in forward state when the role is designated or root.

Spanning-Tree State is enabled if the channel participates in the spanning tree. You can use the spanning-tree shutdown command to disable spanning tree for the channel.

Spanning-Tree Role is the channels Port Role in the spanning tree: root, designated, or alternate.

Accept Frames is All or Tagged Only. If this is the latter, the channel rejects all ingress frames unless they are tagged for one of the channels VLANs. Tagged Only appears if (and only if) the channel is used in a link between redundant peers; see redundancy protocol (cfg-channel).

Total Vlans Configured counts all VLANs in which this channel participates.

A small table of VLANs appears next, with one row for each VLAN on this channel. The table contains two columns:

Members VLAN ID is the VLAN (if any) where this channel is a member. The channel does not tag any outgoing frames with the VLAN ID (VID) for this VLAN.

Tag VLAN ID lists one or more VLANs (if any) where this channel is a tagging member; that is, this channel tags its outgoing frames with the VLAN ID (VID) for the destination VLAN.

Guidelines: channel-id (Detailed), Cont.

The next table contains the status of each member port, one per row. Slot/Port identifies each member port, and Link Status its status (up or down).

Spanning-Tree Statistics is a table of counters for the Bridge Protocol Data Units (BPDUs) transmitted and received. The counters are shown for two versions of spanning-tree BPDU: original spanning tree (STP) or rapid spanning-tree (RST).

Guidelines: lacp

If you use the optional lacp argument in the command, the output shows LACP parameters and status for the chosen channel.

Three summary fields appear at the top of the output:

Channel ID identifies this channel

LACP is Active, Passive, or Disabled, depending on the lacp active setting (on the ARX-1500 or ARX-2500), or the lacp passive setting (on other platforms that support channels).

Time since last state change shows the time that has passed since the last change in channel membership or status.

This is followed by a table of LACP Channel Parameters. This table shows the channel-level configuration for LACP. It is divided into two columns: Local (for the ARX end of the channel) and Peer (for the remote end of the channel):

Admin Key is the numeric key for the channel that was set by its administrative configuration. A channels key is a number used by LACP software to identify the relevant configuration parameters of the channel. This is the same as the Oper Key, below, until or unless a configuration and/or topology change triggers a change in member-port usage. This field only appears in the Local column.

Oper Key is the numeric key that is currently in use for the channel. This key appears in both columns. The peers operational key is the one that was reported in the most-recent Link Aggregation Control Protocol Data Unit (LACPDU) from the peer.

System Priority shows the System Priority of the ARX and its peer. A lower number is considered a higher priority. The system with the higher priority initiates all port-membership changes in the channel, such as putting a port in standby status due to a configuration change. You can use the priority (cfg-channel) command to set the priority for the ARX end of the channel.

System ID is the MAC address used to identify the ARX and its peer.

The final section of the output, LACP Port Parameters, contains one table per channel member. Each table describes one port with its port-level LACP parameters and status. As above, these tables contain one Local column (for the ARX port) and a Peer column (for the corresponding port at the remote end of the channel). On the ARX-1500 and ARX-2500, this table contains the following fields:

Slot/Port identifies the ARX port. This information does not appear for the Peer port.

Oper Key is the key that is currently in use for this port. This number is a code that is only meaningful to the LACP software. It appears for both the local port and the peer port.

Link Status is either up or down. If this link is down, it is not being used for the channels traffic.

Link Failure Count shows the number of transmissions failures on this link, if any.

Guidelines: LACP Output (Cont.)

On all other platforms, the LACP Port Parameters table contains the following fields:

Slot/Port identifies the ARX port. This information does not appear for the Peer port.

Admin Status shows the administratively-set status of the member port. This only appears for an ARX port. Each port may have one or more of the following codes to signify its status:

A or P - A (Active) means that the port is actively running LACP, and P (Passive) indicates that the port is sending LACPDUs but has not yet received proper responses from the peer.

T or L - indicates the timeout between LACPDU transmissions. T is a short timeout (typically, 1 second) and L is a long timeout (typically 30 seconds).

a - means that the port is eligible for Aggregation, or active use in the channel. Ports without this flag cannot be used in the channel; check the configuration at both ends for possible differences that make them incompatible.

S - shows that the LACP process considers this port in Sync with its usage in the channel. If this flag is missing, it may indicate that the LACP software is in the process of changing the port from a standby state to an active one, or from active to standby.

C - indicates that the port is Collecting packets. That is, it can accept incoming traffic.

D - means that the port is Distributing packets. That is, it can send outbound packets to its peer.

d - indicates that the port is using Default information for its peers operational key. This means that the peers configuration information on the ARX does not contradict the latest learned information from LACPDUs.

E - indicates that the latest LACPDU has expired, and the LACP process is waiting for the next one.

Oper State is the current status of the port. This appears for both the Local port and its Peer. This has the same possible values as the Admin Status, described above.

Admin Key is a numeric key used by the LACP software as a code to represent the ports capabilities. This key is based on administrative (CLI) settings. The LACP software may choose a different operational key (described below) for the port based on L2-topology changes or configuration changes at the peer port. This only appears for the ARX port, where administrative parameters are known.

Oper Key is the key that is currently in use for this port. This number is a code that is only meaningful to the LACP software. It appears for both the local port and the peer port.

Port Priority is a number that represents the ports eligibility for use in the channel. A lower priority number represents a higher priority. If ports are excluded from active use in the channel, the LACP software prefers low-priority ports (that is, ports with higher-priority numbers). This appears for both the local and peer ports, and it may be different at both ends.

stoweA# show channel summary

shows a one-line summary for each channel. See Figure 9.1 for sample output.

prtlndA# show channel load-balance

shows the load-balancing algorithm for all channels on the prtlndA switch. See Figure 9.2 on page 9-48 for sample output.

prtlndA# show channel 1

shows the configuration for channel 1 on the same switch. See Figure 9.3 on page 9-48 for sample output.

bstnA# show channel 1 lacp

shows the LACP configuration for channel 1 on the bstnA switch. See Figure 9.4 on page 9-49 for sample output.

description (cfg-channel)

redundancy protocol (cfg-channel)

shutdown (cfg-channel)

lacp passive

lacp rate

priority (cfg-channel)

trap shutdown

Figure 9.1 Sample Output: show channel summary

stoweA# show channel summary

Ch Admin Oper Speed Load-Balance LACP Description

Id State Status Algorithm

--- -------- ------ ------- ------------ -------- -----------------------

1 Enabled Up 10 Gb/s src-dst-ip Passive default

Channel Id Load-Balance Algorithm

Figure 9.2 Sample Output: show channel load-balance

prtlndA# show channel load-balance

---------- --------------------------

1 Source and Destination Ip

2 Source and Destination Ip

Load Balancing Algorithm : Source and Destination Ip

Figure 9.3 Sample Output: show channel

prtlndA# show channel 1

Channel ID : 1

Description : default

LACP State : Passive

LACP Rate : Short Timeout

Members(Slot/Interface) : 2/3,2/4

Number of Members : 2

Admin State : Enabled

Channel Oper Status : Up

Trap Status : Disabled

Spanning-Tree Forwarding State: Manual Forwarding

Spanning-Tree State : Disabled

Spanning-Tree Role : Disabled

Accept Frames : All

Total VLANs Configured : 2

Slot/Port Link Status

-------------------------

2/3 Up

2/4 Up

Spanning Tree Statistics

------------------------

STP BPDU Transmitted 0

STP BPDU Received 0

RST BPDU Transmitted 0

RST BPDU Received 7975

MST BPDU Transmitted 0

MST BPDU Received 0

Time since last state change : 13:32:38 05/20/2008

Figure 9.4 Sample Output: show channel 1 lacp

bstnA# show channel 1 lacp

Channel ID : 1

LACP : Passive

LACP Channel Parameters :

Local Peer

-------------------------------- --------------------------------------

System Priority: 100 System Priority: 32768

System ID: 00:0a:49:17:70:40 System ID: 00:0a:49:17:72:40

LACP Port Parameters:

Local Peer

-------------------------------- --------------------------------------

Slot/Port: 2/7

Oper State: * A,T,a,S,C,D Oper State: * A,T,a,S,C,D

Slot/Port: 2/8

Oper State: * A,T,a,S,C,D Oper State: * A,T,a,S,C,D

Slot/Port: 2/9

Oper State: * A,T,a,S,C,D Oper State: * A,T,a,S,C,D

Slot/Port: 2/10

Oper State: * A,T,a,S,C,D Oper State: * A,T,a,S,C,D

* A - Active, a - Aggregating, C - Collecting, D - Distributing,

d - Defaulted, E - Expired, L - Long Timeout, P - Passive,

T - Short Timeout, S - Synchronizing

show channel ... stats

A channel is a group of Ethernet ports aggregated into a single flow, as specified in IEEE 802.3ad. Use the show channel ... stats command to show traffic statistics for one channel.

(any)

crypto-officer, storage-engineer, network-engineer, network-technician, or operator

show channel channel-id [lacp] stats

channel-id (1-8) identifies the channel to show.

lacp (optional) focuses the output on the Link Aggregation Control Protocol (LACP) statistics for the channel.

stats is a required keyword.

This command shows traffic statistics or Link Aggregation Control Protocol (LACP) statistics for a given channel. The sections below describe the two outputs from this command.

For configuration information about the channel, use show channel. To clear the channel statistics in the default output, use clear counters channel. To clear the LACP statistics, use clear counters lacp.

Guidelines: Traffic Statistics

If you omit the optional lacp keyword, the output focuses on frame counts for the overall channel.

Channel Id identifies the channel.

The statistics are divided into three tables:

Basic Ingress and Egress statistics (primarily packet counts and error counts.)

Statistics for MIB values from RFC 1493.

Ethernet statistics.

Guidelines: LACP Statistics

If you use the lacp keyword, a table appears with LACP statistics. To enable LACP on a channel, you use the lacp active command on the ARX-1500 or ARX-2500, or the lacp passive command on other platforms that support channels.

Each table has a separate row for every member port in the channel, with the following columns:

S/P identifies the channel member in slot/port format.

LACP Packets are the numbers of Link Aggregation Control Protocol Data Units (LACPDUs) transmitted from and received on this member port.

Marker Response counts the LACP-marker frames transmitted and received. The LACP software sometimes injects marker frames to find the ends of one or more frame conversations. A marker response frame from the peer indicates that the conversation(s) is/are finished. Once the LACP software receives this marker, it can migrate future conversations to another link in the channel. For details on the Marker Protocol, see EEE802.3ad, Section 43.5.

Illegal is the number of illegal Slow-Protocol PDUs (see IEEE802.3ad, Section 43B.4) received on this member port.

Unknown is the number of unknown Slow-Protocol PDUs received on this member port.

prtlndA# show channel 1 stats

shows the statistics for channel 1. See Figure 9.5 for sample output.

bstnB# show channel 1 lacp stats

shows the LACP statistics for channel 1 on a different switch. See Figure 9.6 on page 9-53 for sample output.

------------------------------------------------------------------

show channel

clear counters lacp

clear counters channel

Figure 9.5 Sample Output: show channel 1 stats

prtlndA# show channel 1 stats

Channel Id : 1

------------------------------------------------------------------

Octets 1564310788 1906062907

Total Frames 3246593 3149307

Unicast Frames 3229634 3138606

Multicast Frames 9709 0

Broadcast Frames 7250 10701

If Unknown Protocol 0

Alignment Errors 0

CRC Errors 0

Single Collisions 0

-------------------------------------------------------------------

Frames Too Long 0

RFC 1493

-------------------------------------------------------------------

TpPortDelayExceed 0

TpPortMTUExceed 0

TpPortInDis 0

-------------------------------------------------------------------

-------------------------------------------------------------------

Packet Size:64 1229163

Multicast Packets 9709

Broadcast Packets 17951

Total Octets 3470373695

Good Oversize Frames 0

CRC+Alignment Errors 0

S/P LACP Packets Marker Response Illegal Unknown

Figure 9.6 Sample Output: show channel 1 lacp stats

bstnB# show channel 1 lacp stats

LACP Statistics:

Tx Rx Tx Rx Rx Rx

---- ---------- ---------- ---------- ---------- ---------- ----------

2/7 1336 1315 0 0 0 0

2/8 1339 1317 0 0 0 0

2/9 1334 1313 0 0 0 0

2/10 1338 1318 0 0 0 0

show interface gigabit


Purpose	Use the show interface gigabit command to show the configuration of one Gigabit interface. Add the stats keyword to the end of the command to show the interfaces traffic statistics.
Mode	(any)
Security Role(s)	crypto-officer, storage-engineer, network-engineer, network-technician, or operator
Syntax	show interface gigabit slot/port [stats] slot/port (2/3-14 on ARX-4000; 1/1-4 on ARX-2500; 1/1-12 on ARX-2000; 1/1-8 on ARX-1500; 1/2 on ARX-500; 1/1 on ARX-VE) specifies the interface. stats (optional) displays statistics for this interface. Use the show interface summary command to locate slots and ports.
Guidelines	The default command shows a table of configuration settings. The stats output is a table of counters, separated into Ingress and Egress counts. Use the clear counters gigabit command to clear and restart the statistics count. PAUSE Frames are notices to control traffic flow: the flowcontrol command determines whether the interface sends or receives these. These outputs are abbreviated for the ARX-VE platform. For example, on an ARX-VE the output does not include any references to flow control or storm control, which are managed at the hypervisors VNIC.
Samples	bstnA> show interface gigabit 2/6 shows the configuration for slot 2, port 6. See Figure 9.7 for sample output. bstnA> show interface gigabit 2/6 stats shows the statistics for the same slot and port. See Figure 9.8 on page 9-55 for sample output. stoweA> show interface gigabit 1/2 shows the configuration for port 1/2 on an ARX-2500. See Figure 9.9 on page 9-56 for sample output. stkbrgA# show interface gigabit 1/1 stats shows the statistics for the only interface on an ARX-VE. As mentioned above, the statistics are abbreviated on this chassis type. See Figure 9.9 on page 9-56 for sample output.
Related Commands	clear counters gigabit show interface summary

Figure 9.7 Sample Output: show interface gigabit

bstnA> show interface gigabit 2/6

Auto Negotiation(Admin) Enabled

Flow Control(Admin)

Receive Off

Send Off

MAC Address 00:0a:49:17:92:37

Storm Control:Broadcast 1000 packets/sec

Multicast 1000 packets/sec

Unknown DA 1000 packets/sec

Port VLAN ID

Accept Frames Admit All

Figure 9.8 Sample Output: show interface gigabit stats

bstnA> show interface gigabit 2/6 stats

Slot 2

Interface Id 6

------------------------------------------------------------------

------------------------------------------------------------------

Octets 730594224 648324230

Total Frames 1045187 1153090

Unicast Frames 1037623 1152780

Multicast Frames 2479 0

Broadcast Frames 25 5 310

-------------------------------------------------------------------

-------------------------------------------------------------------

Packet Size:64 108120

Figure 9.9 Sample Output: show interface gigabit on ARX-2500

stoweA> show interface gigabit 1/2

Auto Negotiation(Admin) Enabled

Flow Control(Admin)

Receive Off

Send Off

MAC Address 00:90:fb:33:2e:1d

Accept Frames Admit All

Figure 9.10 Sample Output: show interface gigabit stats on ARX-VE

stkbrgA# show interface gigabit 1/1 stats

Slot 1

Interface Id 1

------------------------------------------------------------------

------------------------------------------------------------------

Octets 48624230 34815281

Total Frames 503544 302010

-------------------------------------------------------------------

-------------------------------------------------------------------

Total Collisions 0

show interface ten-gigabit


Purpose	Use the show interface ten-gigabit command to show the configuration of one ten-Gigabit interface. Add the stats keyword to the end of the command to show the interfaces traffic statistics.
Mode	(any)
Security Role(s)	crypto-officer, storage-engineer, network-engineer, network-technician, or operator
Syntax	show interface ten-gigabit slot/port [stats] slot/port (2/1-2) specifies the interface. Use the show interface summary command to locate all slots and ports. stats (optional) displays statistics for this interface.
Valid Platforms	ARX-2500 and ARX-4000 only
Guidelines	The default command shows a table of configuration settings. The stats output is a table of counters, separated into Ingress and Egress counts. Use the clear counters ten-gigabit command to clear and restart the statistics count. PAUSE Frames are notices to control traffic flow: the flowcontrol command determines whether the interface sends or receives these.
Samples	bstnA(cfg)# show interface ten-gigabit 2/2 shows the configuration for the ten-gigabit interface in slot 2, port 2. See Figure 9.11 for sample output. bstnA(cfg)# show interface ten-gigabit 2/1 stats shows the statistics for the interface at 2/1. See Figure 9.12 for sample output.
Related Commands	clear counters ten-gigabit show interface summary

Figure 9.11 Sample Output: show interface ten-gigabit

bstnA(cfg)# show interface ten-gigabit 2/2

Auto Negotiation(Admin) Disabled

Flow Control(Admin)

Receive Off

Send Off

MAC Address 00:0a:49:17:92:33

Storm Control:Broadcast 1000 packets/sec

Multicast 1000 packets/sec

Unknown DA 1000 packets/sec

Port VLAN ID 25

Accept Frames Admit All

Figure 9.12 Sample Output: show interface ten-gigabit stats

bstnA(cfg)# show interface ten-gigabit 2/1 stats

Slot 2

Interface Id 1

------------------------------------------------------------------

------------------------------------------------------------------

-------------------------------------------------------------------

-------------------------------------------------------------------


Purpose	A channel is a group of Ethernet ports aggregated into a single flow, as specified in IEEE 802.3ad. Each channel uses a hash algorithm to balance the traffic load between its member ports; for each packet, the hash uses some combination of the source and destination IPs to choose a port. Use show load-balancing to show which port is used for a given source and destination IP.
Mode	(any)
Security Role(s)	crypto-officer, storage-engineer, network-engineer, network-technician, or operator
Syntax	show load-balancing source-ip src destination-ip dest channel chnl-id src is the source-IP address. dest is the destination-IP address. chnl-id (1-8) identifies the channel.
Valid Platforms	ARX-1500, ARX-2000, ARX-2500, and ARX-4000
Guidelines	Use the load-balance command to change the algorithm for load-balancing a channel. Use this command to test the channels current hash. The output shows the Slot Id and Interface (port) that would be chosen for the source and destination IP that you provided.
Sample	prtlndA# show load-balancing source-ip 172.16.100.98 destination-ip 192.168.25.23 channel 1 shows the port that channel 1 uses for a packet with the given source and destination IPs. See Figure 9.13 for sample output.
Related Commands	load-balance

Figure 9.13 Sample Output: show load-balancing

prtlndA# show load-balancing source-ip 172.16.100.98 destination-ip 192.168.25.23 channel 1

Report for source-ip 172.16.100.98 and destination Ip 192.168.25.23

Channel Id :1

Slot Id :4

Interface :2

show mac-address-table

Use the show mac-address-table command for a list of MAC addresses used by the ARX.

(any)

crypto-officer, storage-engineer, network-engineer, network-technician, or operator

show mac-address-table

an address associated with the out-of-band interface (refer to the documentation for interface mgmt), or

Slot and

Port show the port where the MAC address is used.

MAC Address is address.

VLAN ID is the VLAN for this MAC, if any.

Channel ID is the 802.3ad channel for this MAC, if any.

Mode is the method by which the MAC was added to the table:

Learned is an address learned from a neighboring bridge.

Management is one of two addresses:

the management address advertised through the spanning-tree protocol (spanning-tree).

Inband is associated with an in-band (VLAN) management interface, created with the interface vlan command.

Self is an internally-assigned address.

Figure 9.14 Sample Output: show mac-address-table

bstnA> show mac-address-table

Slot Port MAC Address VLAN ID Channel ID Mode

------------------------------------------------------------------

00:0a:49:17:78:ff 25 Inband

00:0a:49:17:78:fe 25 Inband

00:0a:49:17:78:40 1 Management

2 5 00:01:e8:5e:ea:1f 25 Learned

2 5 00:0a:49:17:74:c0 25 Learned

2 5 00:0a:49:17:74:ff 25 Learned

2 5 00:0a:49:17:7c:c0 25 Learned

2 5 00:0a:49:17:7c:ff 25 Learned

2 5 00:0a:49:17:80:c0 25 Learned

2 5 00:0a:49:17:80:ff 25 Learned

2 5 00:0a:49:17:81:c0 25 Learned

2 5 00:0a:49:17:81:ff 25 Learned

2 5 00:0a:49:17:86:c0 25 Learned

2 5 00:0a:49:17:86:ff 25 Learned

2 5 00:0a:49:17:8c:c0 25 Learned

2 5 00:0a:49:17:8c:ff 25 Learned

2 5 00:0a:49:17:92:ff 25 Learned

2 5 00:0a:49:17:a1:ff 25 Learned

2 5 00:0a:49:17:aa:ff 25 Learned

2 5 00:0a:49:17:af:c0 25 Learned

...

2 6 00:0a:49:17:cb:fe 25 Learned

2 6 00:0d:ec:d0:10:1b 25 Learned

2 6 00:1e:2a:3b:9f:a7 25 Learned

show mac-address-table summary


Purpose	Use the show mac-address-table summary command for a high-level view of the MAC-address table.
Mode	(any)
Security Role(s)	crypto-officer, storage-engineer, network-engineer, network-technician, or operator
Syntax	show mac-address-table summary
Valid Platforms	ARX-2000 and ARX-4000
Guidelines	Mac Address Learning Mode is always IVL. MAC Address High Count and: Active MAC Addresses in FDB are counts of addresses in the Forwarding DataBase (FDB), the table that holds all MAC addresses. Maximum MAC Address Supported is fixed at 12,000. Configured Aging Time is the maximum time a learned MAC address is kept in the FDB without any updates; if a MAC address is not re-learned for this many seconds, it is deleted. Use the mac-address aging-time command to set the aging time. Use the show mac-address-table command to see all the MAC addresses in the FDB.
Related Commands	mac-address aging-time show mac-address-table

Figure 9.15 Sample Output: show mac-address-table summary

bstnA> show mac-address-table summary

Mac Address Learning Mode IVL (Independent Vlan Learning)

MAC Address High Count 183

Active MAC Addresses in FDB 183

Maximum MAC Addresses Supported 12000

Configured Aging Time 300 secs

show redundancy network


Purpose	Use the show redundancy network command to show the layer-2 status of the redundant-pair link.
Mode	(any)
Security Role(s)	crypto-officer, storage-engineer, network-engineer, network-technician, or operator
Syntax	show redundancy network
Valid Platforms	ARX-2000 and ARX-4000
Guidelines	This command shows an error unless at least one port has the redundancy protocol setting, or one channel has ports added with the redundancy protocol (cfg-channel) command. Network is Client, Server, Private, or Metalog. The redundant-pair link carries the Private and Metalog networks between the redundant peers. VLAN is the VLAN number for this port. This does not appear on the ARX-500. Port(s) are in slot/port format (for example, 2/9). Admin State is Enabled or Disabled. You can set this with the no shutdown (cfg-if-gig) or the no shutdown (cfg-if-ten-gig) command. Link Status is Up or Down: this is the links operational state. Spanning-Tree Status is Discard, Learning, Forward, Disabled, Manual Forwarding, or Not Participating. This is the ports current role in the spanning tree.
	The Link Transitions table tracks any and all state/status transitions for redundancy-related ports: Count is the total number of transitions. Use the clear counters redundancy network command to clear this counter. Last is the date and time of the last transition. Reason explains the nature and cause of the last transition. Last Cleared is the last time someone used the clear counters redundancy network command.
Related Commands	clear counters redundancy network

Figure 9.16 Sample Output: show redundancy network

prtlndA# show redundancy network

Network VLAN Port(s) Admin Link Spanning-Tree

State Status Status

-------- ----- --------- -------- ------ -----------------

External 1 1/1 Enabled Down Disabled

External 1 1/2 Enabled Down Disabled

External 1 1/3 Enabled Down Disabled

External 1 1/4 Enabled Down Disabled

External 1 1/5 Enabled Up Manual Forwarding

External 1 1/6 Enabled Up Manual Forwarding

External 1 1/7 Disabled Down Disabled

External 1 1/8 Disabled Down Disabled

External 1 1/9 Disabled Down Disabled

External 1 1/10 Disabled Down Disabled

External 1 1/11 Disabled Down Disabled

External 74 1/5 Enabled Up Manual Forwarding

External 74 1/6 Enabled Up Manual Forwarding

Private 1008 1/12 Enabled Up Manual Forwarding

Metalog 1009 1/12 Enabled Up Manual Forwarding

Link Transitions:

Count: 3

Last: 07:38:58 03/05/2010

Reason: Port 1/5 link up

Last Cleared: Never

show spanning-tree detailed


Purpose	Use the show spanning-tree detailed command for a detailed view of the spanning-tree configuration.
Mode	(any)
Security Role(s)	crypto-officer, storage-engineer, network-engineer, network-technician, or operator
Syntax	show spanning-tree detailed
Valid Platforms	ARX-2000 and ARX-4000
Guidelines	This command shows detailed spanning-tree configuration parameters along with some BPDU traffic statistics. Use the show spanning-tree summary command to show a summary of this data.
Related Commands	spanning-tree show spanning-tree summary

Figure 9.17 Sample Output: show spanning-tree detailed

bstnA(cfg)# show spanning-tree detailed

Bridge is Executing the IEEE compatible IEEE_Dot1d Spanning Tree protocol

Switch STP Admin State Disabled

Bridge Priority 61440

Bridge Address 00:0a:49:17:78:40

Bridge Max Age 20 sec

Bridge Hello Time 2 sec

Bridge Forward Delay 15 sec

Bridge Hold Time 3 sec

Designated Root: Priority 240

Address 00:0a:49:17:78:40

Root Path Cost 0

Root Port Max Age 20

Root Port Fwd Delay 15

Time Since Topology Change 2719 sec

Topology Change Count 0

Topology Change 0

Slot/ Spanning Tree Port BPDU Packets

Port Forwarding Admin Path Cost Type Rx Tx

---- --------------- -------- ---------- ---- ---------- -----------

2/5 Manual Forward Disabled 20000 gbe 0 0

2/6 Manual Forward Disabled 20000 gbe 0 0

show spanning-tree interface


Purpose	Use the show spanning-tree interface command to show the spanning-tree configuration for a particular port.
Mode	(any)
Security Role(s)	crypto-officer, storage-engineer, network-engineer, network-technician, or operator
Syntax	show spanning-tree interface slot/port slot/port (2/1-14 on ARX-4000 or 1/1-12 on ARX-2000) is the slot and port number. Use the show interface summary command to show all ports in all slots.
Valid Platforms	ARX-2000 and ARX-4000
Guidelines	This command shows the spanning-tree configuration parameters, the ports role in the spanning-tree topology, and some port statistics.
Related Commands	spanning-tree

Figure 9.18 Sample Output: show spanning-tree interface

bstnA(cfg)# show spanning-tree interface 2/3

Bridge is Executing the IEEE compatible Spanning Tree protocol

Forwarding State Disabled

STP State Disabled

Role N/A

Path cost 20000

Designated: SNMP Port ID 0

STP Port ID 0

Priority 0

Address 00:0a:49:17:78:40

Edge Port: Admin Status Configured

Operational Status Operational

Point to Point Mac Status Auto

Topology Change Ack 0

Port Up Time 2719 sec

STP BPDU Transmitted 0

STP BPDU Received 0

RST BPDU Transmitted 0

RST BPDU Received 0

MST BPDU Transmitted 0

MST BPDU Received 0

show spanning-tree summary


Purpose	Use the show spanning-tree summary command to show high-level information about the spanning-tree configuration.
Mode	(any)
Security Role(s)	crypto-officer, storage-engineer, network-engineer, network-technician, or operator
Syntax	show spanning-tree summary
Valid Platforms	ARX-2000 and ARX-4000
Guidelines	Use the show spanning-tree detailed command to show details.
Sample	bstnA(cfg)# show spanning-tree summary Spanning Tree Admin State is Enabled Configuration: Protocol : IEEE_Dot1w Revision Level : 0 Format Selector : 0 Default : Name : 00-0A-49-00-13-02 Total MST Instances Created : 0
Related Commands	spanning-tree show spanning-tree detailed

show vlan


Purpose	Use the show vlan command to show the configuration of one VLAN.
Mode	(any)
Security Role(s)	crypto-officer, storage-engineer, network-engineer, network-technician, or operator
Syntax	show vlan vlanId vlanId (1-4009) identifies the VLAN to display.
Guidelines	Information from the show vlan command includes: Vlan Id identifies the VLAN. Description is set by the description (cfg-vlan) command. Frame/MTU is the Ethernet packet size: Use jumbo mtu to change this. Members S/P lists the ports in this VLAN. Use the members (cfg-vlan) or tag command to add members to the VLAN. Non-Members (Blocked) S/P lists any ports identified as non-members with the no members command. Tag S/P lists the ports set to tag outgoing packets with a VLAN ID. Use the tag command to enable tagging for one or more ports. Use the show vlan summary command to list all configured VLANs.
Valid Platforms	ARX-1500, ARX-2000, ARX-2500, and ARX-4000
Samples	bstnA# show vlan 1 shows the configuration for VLAN 1. Figure 9.19 shows sample output. stoweA# show vlan 1 shows the configuration for VLAN 1 on an ARX-2500 named stoweA. Figure 9.20 on page 9-69 shows sample output.
Related Commands	show vlan summary description (cfg-vlan) members (cfg-vlan) tag

Figure 9.19 Sample Output: show vlan

bstnA# show vlan 1

Vlan Id : 1

Description : Default VLAN.

Frame/MTU : Standard

Members Non-Members Tag

(Blocked)

S/P S/P S/P

-----------------------------

Figure 9.20 Sample Output: show vlan (ARX-2500)

stoweA# show vlan 1

Vlan Id : 1

Description : Default VLAN.

Frame/MTU : Standard

Members Non-Members Tag

(Blocked)

S/P S/P S/P

-----------------------------


Purpose	Use the show vlan summary command to list all configured VLANs.
Mode	(any)
Security Role(s)	crypto-officer, storage-engineer, network-engineer, network-technician, or operator
Syntax	show vlan summary
Valid Platforms	any except ARX-VE
Guidelines	The sample output shows a table of configured VLANs: Vlan ID identifies each VLAN. Usage is: External for VLANs used outside the box, Internal for private VLANs inside the box, Private for internal communications and communications with redundant peers, and Metalog for metadata exchange between redundant peers. Channel is set by assigning a channel to this VLAN (with vlan (cfg-channel) or vlan-tag). This is N/A if not set. Frame/MTU is the packet size, set by jumbo mtu. Description is set by the description (cfg-vlan) command. Use the show vlan command to show details about a VLAN.
Sample	bstnA# show vlan summary Total VLANs Configured: 5 VLAN ID Usage Channel Frame/MTU Description ------------------------------------------------------------- 1 External N/A Standard Default VLAN. 25 External N/A Standard personnel dept. 1010 Private N/A Standard Private Subnet VLAN. 1011 Metalog N/A Standard Private Metalog VLAN.
Related Commands	description (cfg-vlan) show vlan

shutdown (cfg-channel)


Purpose	A channel is a group of aggregated Ethernet ports (IEEE 802.3ad). From cfg-channel mode, use the shutdown command to stop traffic on the current channel. Use no shutdown to restart traffic on the channel.
Mode	cfg-channel
Security Role(s)	network-engineer or crypto-officer
Syntax	shutdown no shutdown
Default(s)	no shutdown: link aggregation is enabled on a new channel by default.
Valid Platforms	ARX-1500, ARX-2000, ARX-2500, and ARX-4000
Guidelines	If this channel is used as a redundant-pair link (see redundancy protocol (cfg-channel)) and redundancy is enabled (enable (cfg-redundancy)), this command causes the standby peer to reboot. The reboot does not disrupt any storage services, but the ARX peers cannot function as a redundant pair while the link is shut down. Additionally, a quorum-disk failure or disconnection would cause the active peer to reboot, too. If you proceed with shutting down the link, you should establish a new one as soon as possible: use the redundancy protocol or redundancy protocol (cfg-channel) command on another port or channel to establish a new redundant-pair link. The CLI prompts for confirmation before shutting down a redundant-pair link; enter yes to proceed with the interface shutdown and the reboot.
Samples	bstnA(cfg-channel[4])# shutdown shuts down channel 4. bstnA(cfg-channel[6])# no shutdown restarts channel 6.
Related Commands	channel redundancy protocol (cfg-channel)

shutdown (cfg-if-gig)


Purpose	Use no shutdown to start traffic on the current port. Use the shutdown command to stop the port.
Mode	cfg-if-gig
Security Role(s)	network-engineer or crypto-officer
Syntax	shutdown no shutdown
Default(s)	shutdown
Guidelines	You cannot use this command on a channel member; use the shutdown (cfg-channel) command to stop traffic on the channel. The ARX-1500 and ARX-2500 allow only a single logical interface (port or channel) to carry any given VLAN. That is, any VLAN can only be assigned to one port or channel (interface gigabit, interface ten-gigabit, or channel). The CLI therefore prevents a no shutdown for any port on those chassis types if it carries a VLAN that is already assigned to an active channel or another active port. The CLI returns an error in this case, displaying the VLAN that has the conflict along with the active port(s) that already carry the VLAN. You can use show vlan n to see the port or channel that carries VLAN n.
Guidelines: Shutting Down the Redundant-Pair Link	If this interface is the only one used as a redundant-pair link (through redundancy protocol or redundancy (cfg-if-vlan)) and redundancy is enabled (enable (cfg-redundancy)), this command causes the standby peer to reboot. The reboot does not disrupt any storage services, but the ARX peers cannot function as a redundant pair while the link is shut down. Additionally, a quorum-disk failure or disconnection would cause the active peer to reboot, too. If you proceed with shutting down the link, you should establish a new one as soon as possible: use the redundancy protocol or redundancy protocol (cfg-channel) command on another port or channel to establish a new redundant-pair link. The CLI prompts for confirmation before shutting down a redundant-pair link; enter yes to proceed with the interface shutdown and the reboot.
Samples	bstnA(cfg-if-gig[2/4])# shutdown shuts down the current port, 2/4. bstnA(cfg-if-gig[2/4])# no shutdown restarts the same port.
Related Commands	interface gigabit shutdown (cfg-channel) redundancy protocol redundancy (cfg-if-vlan)

shutdown (cfg-if-ten-gig)


Purpose	Use no shutdown to start traffic on the current ten-gigabit port. Use the shutdown command to stop the port.
Mode	cfg-if-ten-gig
Security Role(s)	network-engineer or crypto-officer
Syntax	shutdown no shutdown
Default(s)	shutdown
Valid Platforms	ARX-2500 and ARX-4000 only
Guidelines	You cannot use this command on a channel member; use the shutdown (cfg-channel) command to stop traffic on the channel. The ARX-2500 allows only a single logical interface (port or channel) to carry any given VLAN. That is, any VLAN can only be assigned to one port or channel (interface gigabit, interface ten-gigabit, or channel). The CLI therefore prevents a no shutdown for any port on those chassis types if it carries a VLAN that is already assigned to an active channel or another active port. The CLI returns an error in this case, displaying the VLAN that has the conflict along with the active port(s) that already carry the VLAN. You can use show vlan n to see the port or channel that carries VLAN n.
Guidelines: Shutting Down the Redundant-Pair Link	If this interface is used as a redundant-pair link (see redundancy protocol) and redundancy is enabled (enable (cfg-redundancy)), this command causes the standby peer to reboot. The reboot does not disrupt any storage services, but the ARX peers cannot function as a redundant pair while the link is shut down. Additionally, a quorum-disk failure or disconnection would cause the active peer to reboot, too. If you proceed with shutting down the link, you should establish a new one as soon as possible: use the redundancy protocol or redundancy protocol (cfg-channel) command on another port or channel to establish a new redundant-pair link. The CLI prompts for confirmation before shutting down a redundant-pair link; enter yes to proceed with the interface shutdown and the reboot.
Samples	bstnA(cfg-if-ten-gig[2/1])# shutdown shuts down the current ten-gigabit port, 2/1. bstnA(cfg-if-ten-gig[2/1])# no shutdown restarts the same port.
Related Commands	interface ten-gigabit shutdown (cfg-channel) redundancy protocol

shutdown (cfg-stp)


Purpose	From cfg-stp mode, use the shutdown command to stop all spanning-tree processing. Use no shutdown to restart spanning tree.
Mode	cfg-stp
Security Role(s)	network-engineer or crypto-officer
Syntax	shutdown no shutdown
Default(s)	shutdown: spanning tree is disabled (along with switch forwarding; see below) by default.
Valid Platforms	ARX-2000 and ARX-4000
Guidelines	Before you can run no shutdown to start spanning-tree processing, you must use the switch-forwarding enable command. This permits the ARX to forward packets from one client/server port to another. By default, the ARX behaves as an end station rather than a bridge. The switch-forwarding enable command runs no shutdown as a side-effect; conversely, no switch-forwarding enable runs shutdown as a side-effect. If you shut down spanning tree, neighboring bridges must adjust the spanning-tree topology as though the ARX had been removed from the network.
Important: Spanning tree is activated along with switch forwarding to protect against possible network loops. You have the option to disable spanning tree while switch forwarding is active (using this command), but this is dangerous. Do not disable spanning tree unless you are confident that the ARX cannot create a loop.
Samples	bstnA(cfg-stp)# shutdown shuts down spanning tree. bstnA(cfg-stp)# no shutdown restarts the spanning tree.
Related Commands	spanning-tree switch-forwarding enable

spanning-tree


Purpose	The Spanning-Tree Protocol (STP) creates a loop-free topology in bridged networks. Use the spanning-tree command to configure the spanning-tree parameters on the ARX. Use the no form of this command to revert the spanning-tree parameters back to their defaults.
Mode	cfg
Security Role(s)	network-engineer or crypto-officer
Syntax	spanning-tree no spanning-tree
Default(s)	None
Valid Platforms	ARX-2000 and ARX-4000
Guidelines	The Spanning-Tree protocol is defined in IEEE 802.1D. Before the ARX can use STP, you must use the switch-forwarding enable command. This permits the ARX to forward packets from one client/server port to another. By default, the ARX behaves as an end station rather than a bridge. The spanning-tree command puts you into cfg-stp mode, where you must set the protocol (STP or Rapid STP) with the protocol (cfg-stp) command. There are several spanning-tree options you can set from cfg-stp mode, and there are some port-level options you can set from cfg-if-gig mode; see Related Commands, below. The no form of the command resets all global parameters to their respective defaults. The global parameters are the protocol, bridge Priority, Hello Time, Max Age, and Forward Delay.
Samples	bstnA(cfg)# spanning-tree bstnA(cfg-stp)# enters cfg-stp mode. bstnA(cfg)# no spanning-tree bstnA(cfg)# sets all global spanning-tree parameters to their default values.
Related Commands	switch-forwarding enable protocol (cfg-stp) Cfg-stp commands for setting global 802.1D parameters: priority (cfg-stp) hello-time max-age forward-delay A cfg-if-gig command to identify each RSTP Edge Port: spanning-tree edgeport Cfg-if-gig commands for setting Port Cost and Port Priority: spanning-tree cost spanning-tree priority Show commands: show spanning-tree summary show spanning-tree detailed show spanning-tree interface

spanning-tree cost


Purpose	IEEE 802.1D defines Port Cost as the relative cost to relay a frame to the root bridge. A lower cost is preferred. The port with the lowest cost is the root port for the ARX. Neighboring bridges compare the Port Costs of spanning-tree ports to designate one of them for their traffic. Use the spanning-tree cost command to set the Port Cost for the current port. Use no spanning-tree cost to reset the Port Cost to the default.
Mode	cfg-if-gig
Security Role(s)	network-engineer or crypto-officer
Syntax	spanning-tree cost port-cost no spanning-tree cost port-cost (1-200,000) is the Port Cost.
Default(s)	20,000
Valid Platforms	ARX-2000 and ARX-4000
Guidelines	The Spanning-Tree protocol is defined in IEEE 802.1D. This influences the election of a designated port by neighboring bridges. For installations with multiple ports on the same LAN segment, set the Port Cost lower for the fastest ports. Use the spanning-tree priority command to set the Port Priority.
Samples	bstnA(cfg-if-gig[2/4])# spanning-tree cost 1 sets the lowest-possible Port Cost for port 2/4. This port will be the root port for the ARX. If the port is connected to upstream bridges in the tree, it will likely be designated by those bridges, too. bstnA(cfg-if-gig[2/5])# no spanning-tree cost reverts port 2/5 to the default Port Cost.
Related Commands	interface gigabit spanning-tree priority

spanning-tree edgeport


Purpose	Rapid Spanning Tree Protocol (RSTP) defines an Edge Port as a port that connects to only one other port, as opposed to several ports on a LAN segment. This applies to RSTP and MSTP configurations only. Use the spanning-tree edgeport command to declare that the current port is an Edge Port. Use the no form to declare that the current port is not an Edge Port.
Mode	cfg-if-gig
Security Role(s)	network-engineer or crypto-officer
Syntax	spanning-tree edgeport no spanning-tree edgeport
Default(s)	no; new ports are not Edge Ports by default.
Valid Platforms	ARX-2000 and ARX-4000
Guidelines	The Spanning-Tree protocol is defined in IEEE 802.1D. RSTP is defined in IEEE 802.1w. Whenever there is a spanning-tree topology change, RSTP updates its Edge Ports faster than the others. Edge ports cannot possibly create bridge loops, so RSTP can move an Edge Port from discarding state directly to forwarding state, skipping the learning state.
Samples	bstnA(cfg-if-gig[2/4])# spanning-tree edgeport sets port 2/4 as an Edge Port. In the event of a spanning-tree topology change, this port will convert to the new topology immediately. bstnA(cfg-if-gig[2/6])# no spanning-tree edgeport designates port 2/6 as one that connects to multiple ports.
Related Commands	interface gigabit

spanning-tree priority


Purpose	IEEE 802.1D defines Port Priority as the relative priority between ports with equal Port Costs. Neighboring bridges compare the Port Costs of spanning-tree ports to designate one of them for their traffic; if two or more Port Costs are the same, the protocol uses the Port Priority to break the tie. A lower number represents a higher priority. Use the spanning-tree priority command to set the Port Priority for the current port. Use no spanning-tree cost to reset the Port Priority to the default.
Mode	cfg-if-gig
Security Role(s)	network-engineer or crypto-officer
Syntax	spanning-tree priority port-priority no spanning-tree priority port-priority (0-240) is the Port Priority. 0 (zero) is the highest priority, 240 is the lowest.
Default(s)	128
Valid Platforms	ARX-2000 and ARX-4000
Guidelines	The Spanning-Tree protocol is defined in IEEE 802.1D. This influences the election of a designated port by neighboring bridges. For installations with multiple ports on the same LAN segment, set the Port Priority higher (that is, to a lower number) for the ports that you want to be designated by their neighbors. Use the spanning-tree cost command to set the Port Cost, which has a greater influence on the election of designated ports.
Samples	bstnA(cfg-if-gig[2/3])# spanning-tree priority 0 sets the lowest-possible Port Priority for port 3. bstnA(cfg-if-gig[2/4])# no spanning-tree priority reverts port 2/4 to the default Port Cost.
Related Commands	interface gigabit spanning-tree cost

spanning-tree shutdown


Purpose	You can shut down spanning-tree processing on an individual port, thus removing the port from the spanning-tree topology. This stops the port from relaying frames from one LAN segment to another. You can also shutdown spanning tree for an aggregated channel. Use the spanning-tree shutdown command to shut down spanning tree at the current port or channel. Use no spanning-tree shutdown to put the current port back into the spanning tree.
Modes	cfg-if-gig cfg-if-ten-gig cfg-channel
Security Role(s)	network-engineer or crypto-officer
Syntax	spanning-tree shutdown no spanning-tree shutdown
Default(s)	All ports and channels are part of the spanning tree by default.
Valid Platforms	In cfg-if-gig mode or cfg-channel: ARX-2000 and ARX-4000. In cfg-if-ten-gig mode, ARX-4000 only.
Guidelines	The Spanning-Tree protocol is defined in IEEE 802.1D. Use the spanning-tree command to configure spanning-tree on the ARX. You cannot use this command on a port or channel used in a redundant-pair link (see the documentation for the redundancy protocol and redundancy protocol (cfg-channel) commands). The ARX must be allowed to forward packets (with the switch-forwarding enable command) before you can use this command to enable spanning tree.
Samples	bstnA(cfg-if-gig[2/3])# spanning-tree shutdown removes port 2/3 from the spanning tree. bstnA(cfg-channel[1])# spanning-tree shutdown removes channel 1 from the spanning tree. bstnA(cfg-if-gig[2/3])# no spanning-tree shutdown returns port 2/3 to the spanning tree. bstnA(cfg-if-ten-gig[2/2])# spanning-tree shutdown removes port 2/2, a ten-gigabit port, from the spanning tree.
Related Commands	interface gigabit interface ten-gigabit channel spanning-tree switch-forwarding enable

speed (cfg-if-gig)


Purpose	From cfg-if-gig mode, use the speed command to set the speed, line-type, and duplex configuration on a specified gigabit port.
Mode	cfg-if-gig
Security Role(s)	network-engineer or crypto-officer
Syntax	speed {auto \| 100-tx-half \| 100-tx-full \| 100-fx-full \| 1000-full } auto \| 100-tx-half \| 100-tx-full \| 100-fx-full \| 1000-full is a required choice: auto makes the port auto-negotiate with its peer. 100-tx-half is fast Ethernet, 100 megabits per second (mbps), half-duplex. 100-tx-full is fast Ethernet, 100 mbps, full duplex. 100-fx-full is fiber Ethernet, 100 mbps, full duplex. 1000-full is fiber or copper Ethernet, 1000 mbps, full duplex.
Default(s)	auto
Valid Platforms	ARX-500, ARX-1500, ARX-2000, ARX-2500, and ARX-4000
Guidelines	ARX Gigabit Ethernet ports support automatic MDI/MDIX cross-over. This feature automatically corrects the polarity of the attached CAT5 cable, regardless if it is a cross-over or straight-through type. The speed must be set manually (not to auto) for the port to be a member of a channel (see the channel command).
Sample	bstnA(cfg-if-gig[2/5])# speed 100-fx-full For the interface at slot 2, port 5, sets the speed to 100 mbps, the line type to fiber Ethernet, and the duplex configuration to full duplex.
Related Commands	interface gigabit show interface gigabit

switch-forwarding enable


Purpose	By default, the ARX does not forward packets between its client/server ports; it behaves as an end station instead of a MAC bridge. Use the switch-forwarding enable command to enable packet forwarding and start using the ARXs bridging features. Use the no form of this command to stop all packet forwarding.
Mode	cfg
Security Role(s)	network-engineer or crypto-officer
Syntax	switch-forwarding enable no switch-forwarding enable
Default(s)	disabled
Valid Platforms	ARX-2000 and ARX-4000
Guidelines	If switch forwarding is disabled, you cannot enable the spanning-tree protocol. When you enable switch forwarding with this command, spanning tree is enabled as a side-effect. Conversely, when you disable switch forwarding then spanning tree is disabled. The CLI warns you of these side-effects and prompts for confirmation; enter yes to proceed.
Important: Spanning tree is enabled along with switch forwarding to protect against possible network loops. You have the option to disable spanning tree while switch forwarding is active (using shutdown (cfg-stp)), but this is dangerous. Do not disable spanning tree unless you are confident that the ARX cannot create a loop.
	Use the show version command to see the current setting for this ARX.
Samples	bstnA(cfg)# switch-forwarding enable Warning: Enable switch forwarding between all Ethernet Interfaces? This will also enable the Spanning Tree Protocol. [yes/no] yes bstnA(cfg)# enables switch forwarding and spanning tree. This ARX can now behave as a MAC bridge. bstnA(cfg)# no switch-forwarding enable Warning: Disable switch forwarding between all Ethernet Interfaces? This will also disable the Spanning Tree Protocol. [yes/no] yes bstnA(cfg)# returns the bstnA switch to its default status. It no longer forwards packets from one client/server port to another.
Related Commands	spanning-tree show version

tag

A port with VLAN tagging enabled adds the VLAN ID (VID) to outbound frames, and only accepts ingress packets that are specifically tagged for the current VLAN. This is required to support multiple external VLANs. Use the tag command to add a single tag-enabled port or a range of tag-enabled ports to the current VLAN.

Use the no form of this command to disable tagging on a port(s).

cfg-vlan

tag slot/port [to slot/port ]

no tag slot/port [to slot/port ]

slot/port (2/1-14 on ARX-4000; 1/1-4 or 2/1-2 on ARX-2500; 1/1-12 on ARX-2000; 1/1-8 on ARX-1500) is a single port or the first port in a range of ports.

to slot/port (optional) is the last port in a range of ports. You cannot use this option on the ARX-2500 or ARX-1500, which allow only a single port to carry each VLAN.

Use the show interface summary command to locate all slots and ports.

IEEE 802.1Q defines VLANs.

If you select ports that were already configured as members of the VLAN, this command simply enables tagging on the selected ports. This means that incoming packets on those ports are not accepted as part of the current VLAN unless they are explicitly tagged with the VLANs ID.

Use the members (cfg-vlan) command to add ports with tagging disabled.

A port can be a member of multiple VLANs, as long as each port is tagged for the VLANs. Use vlan to go into cfg-vlan mode for a VLAN, then use tag slot/port ... to tag some ports for that VLAN. You can repeat this for multiple VLANs, tagging the same set of ports for each.

To assign a channel to the VLAN with tagging enabled, use the vlan-tag command.

On the ARX-1500 and the ARX-2500, only a single port (interface gigabit or interface ten-gigabit) or channel can carry any given VLAN. That is, if you use this command to tag a port with a particular VLAN ID, you cannot tag any other port or channel with the same VLAN ID. This includes VLAN 1; if multiple channels or ports default to VLAN 1, all but one of them must be disabled (with shutdown (cfg-if-gig), shutdown (cfg-if-ten-gig), or shutdown (cfg-channel)).

Guidelines: Removing the Last Port from the Redundancy Link

In the following circumstances, the no tag command causes the backup ARX peer to reboot:

the interface vlan command establishes an in-band (VLAN) management address for this VLAN,

the redundancy (cfg-if-vlan) command establishes the above management address as the local end of the redundancy link,

redundancy is active between the ARX peers, and

the no tag command is removing the last port(s) from the VLAN.

adds ports 2/3-2/5, tagging enabled, to VLAN 1.

bstnA(cfg-vlan[1])# tag 2/3 to 2/5

bstnA(cfg-vlan[1])# tag 2/6

adds port 2/6, tagging enabled, to VLAN 1.

bstnA(cfg-vlan[2])# no tag 2/7

disables tagging for port 2/7, VLAN 2. The port will not tag any outbound frames destined for a MAC on VLAN 2.


Purpose	From cfg-channel mode, use the no trap shutdown command to activate SNMP traps for the current channel. Use the affirmative form, trap shutdown, to stop issuing traps.
Mode	cfg-channel
Security Role(s)	network-engineer or crypto-officer
Syntax	trap shutdown no trap shutdown
Default(s)	trap shutdown
Valid Platforms	ARX-1500, ARX-2000, ARX-2500, and ARX-4000
Guidelines	This activates link traps (link up/down) for the channel as a whole, as opposed to its member ports.
Samples	bstnA(cfg-channel[1])# no trap shutdown activates SNMP traps from channel 1. bstnA(cfg-channel[7])# trap shutdown shuts off SNMP traps from channel 7.
Related Commands	channel

vlan

A Virtual Bridged Local Area Network (VLAN) is a group of physically-separated MAC addresses that appear as a single LAN segment. Devices on the same VLAN appear to be physically co-located even though some of the devices may be on different floors or different buildings. VLAN membership is often driven by human factors like departmental membership in a company. A VLAN often carries a single IP subnet. Use the vlan command to begin configuring a VLAN.

Use the no form of the command to remove a VLAN configuration.

cfg

vlan vlan-id

no vlan vlan-id

vlan-id (1-4009) is an ID you choose for the VLAN. If the VLAN is already configured, this command edits its configuration.

On all platforms except the ARX-1500, ARX-2500, and ARX-VE, the following VLANs are configured by default

VLAN 1, which carries all client and server subnets.

another VLAN to carry private IP traffic amongst the internal processes of the ARX.

a third VLAN to carry metalog IP traffic amongst the internal processes of the ARX.

The ARX-1500 and ARX-2500 do not use internal VLANs for their private or metalog traffic.

any except ARX-VE

IEEE 802.1Q defines VLANs.

This command puts you into cfg-vlan mode, where you must configure at least one member port with either the members (cfg-vlan) command or the tag command. You can edit the ingress options for the VLAN members through some cfg-if-gig commands. See Related Commands, below, for a complete list of CLI options.

The ARX-1500 and ARX-2500 support only one port per VLAN. If you require multiple ports to carry a given VLAN on those chassis types, aggregate them into a channel and assign the VLAN to that channel with vlan (cfg-channel) or vlan-tag.

creates a configuration for VLAN 2.

bstnA(cfg)# vlan 2

bstnA(cfg-vlan[2])#

bstnA(cfg)# no vlan 18

removes the configuration for VLAN 18.