Page 156 / 757 Scroll up to view Page 151 - 155
xStack
®
DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
152
DGS-3627:admin#
show bgp reflection
Command:
show bgp reflection
Client to Client Reflection State : Disabled
Cluster ID
: 0.0.0.0
Router Reflector Client:
10.1.1.20
10.1.1.30
DGS-3627:admin#
show bgp confederation
Purpose
This command is used to display the confederation configuration of BGP.
Syntax
show bgp confederation
Description
This command displays the BGP confederation configuration.
Parameters
None.
Restrictions
None.
Example usage:
To display the BGP confederation setting:
DGS-3627:admin#
show bgp confederation
Command: show bgp confederation
BGP AS Number
:
65501.
Confederation Identifier
: 10
Confederation Peer
: 65502,65503
Neighbor List:
IP Address
Remote AS Number
---------------
--------------------
192.168.1.1
65502
192.168.1.2
65503
192.168.1.3
65501
DGS-3627:admin#
config bgp trap
Purpose
This command is used to configure the BGP trap state.
Syntax
config bgp trap [peer_established | peer_idle | all ] [enable | disable]
Description
This command controls the sending of BGP traps.
Parameters
peer_established
- Enables or disables the sending of the peer established trap. The default
value is disabled.
peer_idle
- Enables or disables the sending of the peer idle trap. The default value is
disabled.
all
- Enables or disables the sending of both the peer idle and established trap. The default
value is disabled.
Restrictions
Only Administrator and Operator-level users can issue this command.
Page 157 / 757
xStack
®
DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
153
Example usage:
To disable the BGP peer idle trap state:
DGS-3627:admin#
config bgp trap peer_idle disable
Command:
config bgp trap peer_idle disable
Success.
DGS-3627:admin#
show bgp trap
Purpose
This command is used to show the BGP trap state.
Syntax
show bgp trap_state
Description
This command displays the BGP trap state.
Parameters
None.
Restrictions
None.
Example usage:
To display the BGP trap state:
DGS-3627:admin#
show bgp trap_state
Command:
show bgp trap_state
BGP Trap State:
BGP Peer Established: Enabled.
BGP Peer Idle: Enabled
DGS-3627:admin#
config bgp scan_timer
Purpose
This command is used to configure the BGP scan timer value. BGP will check the next hop
whether it is reachable from the BGP route before the timer expires.
Syntax
config bgp scan_timer [<sec 5-60> | default]
Description
This command configures the BGP scan timer value.
Parameters
<sec 5-60>
- Set the BGP scan timer value from 5 to 60 seconds. The default value is 60
seconds
default
- Set the BGP scan timer to the default value.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To configure the BGP scan timer to 30 seconds:
DGS-3627:admin#
config bgp scan_timer 30
Command:
config bgp scan_timer 30
Success.
DGS-3627:admin#
Page 158 / 757
xStack
®
DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
154
config bgp aggregate_next_hop_check
Purpose
This command is used to configure the BGP aggregated routes’ next hop check. Only the
routes with the same next hop attribute can be aggregated if the BGP aggregate next hop
check is enabled.
Syntax
config bgp aggregate_next_hop_check [enable | disable]
Description
This command configures the BGP aggregate next hop check state.
Parameters
None.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To configure the BGP aggregate next hop check state:
DGS-3627:admin#
config bgp aggregate_next_hop_check enable
Command:
config bgp aggregate_next_hop_check enable
Success.
DGS-3627:admin#
config bgp fast_external_fallover
Purpose
This command is used to configure the BGP fast external fallover.
Syntax
config bgp fast_external_fallover [enable | disable]
Description
This commands configures a Border Gateway Protocol (BGP) routing process to immediately
reset its external BGP peer sessions if the link used to reach these peers goes down,
Parameters
enable
- Enables BGP fast external fallover flag. The default value is enabled.
disable
- Disables BGP fast external fallover.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To disable BGP fast external fallover:
DGS-3627:admin#
config bgp fast_external_fallover disable
Command:
config bgp fast_external_fallover disable
Success.
DGS-3627:admin#
config bgp neighbor maximum_prefix
Purpose
This command is used to configure the BGP neighbor maximum prefix.
Syntax
config bgp neighbor maximum_prefix [<ipaddr> | peer_group <peer_group_name 16>]
<value 1-12000> {<value 1-100>} {warning_only}
Description
This command is used to control how many prefixes can be received from a neighbor.
Parameters
<ipaddr>
- Specifies the IP address of the neighbor to be configured.
<peer_group_name 16>
- Specifies the peer group to be configured.
<value 1-12000>
- The maximum number of prefixes allowed from the specified neighbor.
Page 159 / 757
xStack
®
DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
155
config bgp neighbor maximum_prefix
The default is 12000.
<value 1-100>
- An integer specifying at what percentage the maximum prefix limit on the
router starts to generate a warning message. The range is from 1 to 100. The default is 75.
warning_only
- Allows the router to generate a log message when the maximum prefix limit is
exceeded, instead of terminating the peering session.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To set the maximum number of prefixes that will be accepted from the neighbor 192.168.1.1 to 5000, when 50 percent of
the maximum prefix limit has been reached. This will display a warning message.
DGS-3627:admin#
config bgp neighbor maximum_prefix 192.168.1.1 5000 50
Command:
config bgp neighbor maximum_prefix 192.168.1.1 5000 50
Success.
DGS-3627:admin#
clear bgp flap_statistics
Purpose
This command is used to clear the BGP route dampening flap statistics.
Syntax
clear bgp flap_statistics {[<ipaddr> | <network_address>]}
Description
The command is used to clear the accumulated penalties for routes that have been received
on a router that has BGP dampening enabled. If no arguments or keywords are specified,
flap statistics are cleared for all routes.
Parameters
<ipaddr>
- Specifies an IPv4 address to clear the dampening flap statistics.
<network_address>
- Specifies an IPv4 network to clear the dampening flap statistics.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To clear the route dampening flap statistics of network 192.168.1.0/24:
DGS-3627:admin#
clear bgp flap_statistics 192.168.1.0/24
Command: clear bgp flap_statistics 192.168.1.0/24
Success.
DGS-3627:admin#
Page 160 / 757
xStack
®
DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
156
15
BPDU ATTACK PROTECTION COMMANDS
In a network, customers do not want all the ports of the device to receive STP packets, because some ports that receive
STP BPDU packets will waste system resources.
If the ports are not expected to receive BPDU packets, BPDU attack protection will prevent some ports from receiving
them. The port where BPDU attack protection function is enabled will enter protection state (drop/block/disable) when it
receives a STP BPDU packet.
The BPDU Attack Protection commands in the Command Line Interface (CLI) are listed (along with the appropriate
parameters) in the following table.
Command
Parameters
config bpdu_protection ports
[<portlist> | all ] {state [enable | disable] | mode [ drop | block | shutdown} (1)
config bpdu_protection recovery_timer
[<sec 60-1000000> | infinite]
config bpdu_protection
[trap | log ] [ none | attack_detected | attack_cleared | both ]
enable bpdu_protection
disable bpdu_protection
show bpdu_protection
{ports {<portlist>}}
Each command is listed, in detail, in the following sections.
config bpdu_protection ports
Purpose
Used to configure bpdu_protection state and mode.
Syntax
config bpdu_protection ports [<portlist> | all ] {state [enable | disable] | mode [ drop |
block | shutdown} (1)
Description
The config bpdu_protection ports command is used to configure the BPDP protection
function for the ports on the switch. In generally, there are two states in BPDU protection
function. One is normal state, and another is under attack state. The under attack state have
three modes: drop, block, and shutdown. A BPDU protection enabled port will enter under
attack state when it receives one STP BPDU packet. And it will take action based on the
configuration. Thus, BPDU protection can only be enabled on STP-disabled port.
BPDU protection has high priority than fbpdu setting configured by configure STP command
in determination of BPDU handling. That is, when fbpbu is configured to forward STP BPDU
but BPDU protection is enabled, then the port will not forward STP BPDU.
BPDU protection also has high priority than BPDU tunnel port setting in determination of
BPDU handling.
That is, when a port is configured as BPDU tunnel port for STP, it will forward STP BPDU.
But if the port is BPDU protection enabled. Then the port will not forward STP BPDU
Parameters
portlist
- Specified a range of ports to be configured (port number).
all
- For set all ports in the system, you may use “all” parameter.
state
- Specified the bpdu_protection state. The default state is disable
enable
- Enable bpdu_protection
disable
- Disable bpdu_protection
mode
- Specified the bpdu_protection mode. The default mode is shutdown
drop
- Drop all received BPDU packets when the port enters under_attack state.
block
- Drop all packets (include BPDU and normal packets) when the port enters
under
_attack state.

Rate

4.5 / 5 based on 2 votes.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top