Service Configuration Supported on an AS
- Centralized Mode (Batch Configuration: Functions Globally Delivered)
- Centralized Mode (Batch Configuration: Functions Delivered Using Profiles)
- Centralized Mode (Single Configuration: Functions Delivered Using the direct-command Command)
- Centralized Mode (Configurable Commands After Logins to ASs Using the attach-as Command or Console Port)
- Independent Mode (Configurable Commands After Logins to ASs Using the attach-as Command or Console Port)
Centralized Mode (Batch Configuration: Functions Globally Delivered)
Centralized Mode (Batch Configuration: Functions Delivered Using Profiles)
Function |
Sub-function |
Service |
|---|---|---|
Device management |
Administrator |
User name and password of the local administrator |
Traffic policing |
Rate limit for outgoing ARP and DHCP packets on an uplink fabric port |
|
BPDU protection |
BPDU protection on ASs (supported only in V200R013C00 and later versions) |
|
Basic network service |
VLAN management |
Addition and removal of ports to or from a VLAN |
Configuration of the port that connects an AS to an AP |
||
Voice VLAN based on LLDP or CDP negotiation |
||
Enhanced network service |
Basic QoS |
Trust 802.1p (This function is not supported in V200R011C10 and later versions) NOTE:
In V200R011C10 and later versions, the priority-trust enable command cannot be executed in the network enhanced profile view to configure the priority trust function. |
Port security |
Broadcast, multicast, and unknown unicast traffic suppression on a port |
|
Port rate limiting |
||
STP edge port |
||
Access security |
DHCP snooping, IPSG, and DAI |
|
MAC management (supported only in V200R013C00 and later versions) |
Action taken on an interface in case of MAC address flapping |
|
Alarm function for MAC address learning and aging |
||
Access service |
Access authentication |
|
Access control |
MAC address limiting |
|
Maximum number of access users on an AS port (This function is supported in V200R010 and later versions) |
||
Traffic policing |
Rate limit for incoming ARP and DHCP packets on an AS port |
|
QoS service (supported only in V200R013C00 and later versions) |
Priority mapping |
To configure priority mapping based on DSCP priorities, run the trust dscp command. |
Queue scheduling mode |
To configure a queue scheduling mode, run the qos { pq | wrr | drr } command. |
|
Queue scheduling weight |
To configure a queue scheduling weight, run the qos queue command. |
|
Traffic policy services (supported only in V200R019C00 and later versions) |
Packet re-marking |
To configure the packet re-marking rule and information, run the policy command. |
Centralized Mode (Single Configuration: Functions Delivered Using the direct-command Command)
The interface view cannot be the Eth-Trunk interface view.
In versions earlier than V200R019C00, a maximum of 4096 commands can be configured. In V200R019C00 and later versions, a maximum of 8192 commands can be configured.
Centralized Mode (Configurable Commands After Logins to ASs Using the attach-as Command or Console Port)
Commands that can be configured after you log in to an AS in centralized configuration mode are mainly used for fault diagnosis.
In the user view and diagnostic view, all commands are supported except the commands listed in Table 1. Additionally, in V200R009 and earlier versions, the diagnostic view can be displayed only after the diagnose-command command is executed in the user view.
Table 1 Commands not supported in the user view and diagnostic view of ASs Command
View
configuration copy file file-name to running
User view
configuration copy startup to file file-name
User view
configuration exclusive
User view
format drive
User view
lldp clear neighbor [ interface interface-type interface-number ]
User view
local-user change-password
User view
lock
User view
startup patch patch-name [ slave-board | slot slot-id ]
User view
startup saved-configuration configuration-file [ slot slot-id ]
User view
startup system-software system-file [ all | slave-board | slot slot-id ]
User view
save [ all ] [ configuration-file ]
User view
save logfile [ all ]
User view
reboot [ fast | save diagnostic-information ]
User view
schedule reboot { at time | delay interval [ force ] }
User view
rollback
User view
cli enable-config
Diagnostic view
configuration datasync start script-file script-file { result-file result-file }
Diagnostic view
test-device port loopback slot { slot-id | interface { interface-type interface-number1 [ to interface-type interface-number2 ] } &<1-10> }
Diagnostic view
stack enable
undo stack enable
Diagnostic view
undo startup system-software
Diagnostic view
Commands that are supported in other views are used for service diagnosis and fault location. In V200R009 and earlier versions, the uni-mng diag-mode enable command must be executed first to enable the diagnostic mode.
Table 2 Commands supported in other views Command
Function
Configuration Guidelines
port-mirroring
undo port-mirroring
Binds a mirrored port to an observing port.
You are not advised to perform service configurations on Eth-Trunk member ports of an AS that are bound to a fabric port, as doing so may cause a failure of SVF system setup.
traffic-mirror
undo traffic-mirror
Configures the traffic mirroring function.
You are not advised to perform service configurations on Eth-Trunk member ports of an AS that are bound to a fabric port, as doing so may cause a failure of SVF system setup.
observe-port
undo observe-port
Configures an observing port.
Generally, an observing port is dedicated to monitoring forwarding of mirrored traffic. Therefore, configuring an AS port with service configurations as an observing port is not recommended. If a port has been configured as an observing port, do not deliver service configurations to this port through service profiles or the direct-command command.
You are not advised to perform service configurations on Eth-Trunk member ports of an AS that are bound to a fabric port, as doing so may cause a failure of SVF system setup.
traffic-statistic
undo traffic-statistic
Enables the traffic statistics collection function.
If you delete the traffic-statistic command that is delivered by the parent to an AS, you will fail to obtain traffic statistics about the AS on the parent.
You are not advised to perform service configurations on Eth-Trunk member ports of an AS that are bound to a fabric port, as doing so may cause a failure of SVF system setup.
capture-packet
Configures the packet header obtaining function.
In an SVF system, an Eth-Trunk bound to a fabric port cannot capture service packets.
acl 2000-2999
undo acl 2000-2999
Creates or deletes an ACL rule.
If the number of traffic policies on an AS reaches the upper limit, the parent fails to deliver the IPSG or DAI configurations. Run the display uni-mng commit-result profile command on the parent to check the configuration delivery result. If the command output shows that the configuration delivery fails, run the display uni-mng execute-failed-record profile as name as-name command to check execution failure records after the configuration is delivered to an AS. The command output provides detailed information about the delivery failure. You can log in to the AS to check whether the ACL resources are used up.
acl 4000-4997
undo acl 4000-4997
rule
undo rule
Creates an ACL rule.
-
interface Eth-Trunk
undo interface Eth-Trunk
Creates or deletes an Eth-Trunk interface or displays the Eth-Trunk interface view.
In V200R011C10 and later versions, you can only enter the Eth-Trunk interface view and cannot create or delete Eth-Trunk interfaces.
Do not delete Eth-Trunk0 or Eth-Trunk interfaces that are bound to the downlink fabric port from an AS.
interface interface-type interface-number
Displays the physical service interface view.
-
display
Displays the device status or configurations.
-
quit
Returns to the upper-level view.
-
return
Returns to the user view.
-
interface stack-port
Displays the stack port view.
-
shutdown interface
undo shutdown interface
Shuts down/restores a stack member port.
This command is configured in the stack port view.
mad restore
Restores all the blocked interfaces of a standby switch that enters the Recovery state after its stack splits.
-
reset trace instance (supported in V200R010 and later versions)
Clears all the diagnosis instances on a device.
-
save trace information (supported in V200R010 and later versions)
Saves diagnosis information in the buffer area as a file.
-
Commands starting with the trace keyword (supported in V200R010 and later versions)
Commands starting with the undo trace keyword (supported in V200R010 and later versions)
Used for service diagnosis and executed in the system view.
-
Commands starting with info-center source (supported in V200R019 and later versions)
Configures the rules for outputting information to information channels in the information center.
-
Independent Mode (Configurable Commands After Logins to ASs Using the attach-as Command or Console Port)
The independent mode has been supported since V200R010. In independent mode, the commands listed in the following table can be configured on ASs. When configuring these commands, pay attention to the following points:
- These commands vary depending on the AS device type. For details, see the command reference of these devices.
- In independent mode, configuring some commands may cause an AS's failure to go online. To prevent this problem, some commands listed in the following table are not supported. If an unsupported command is executed on an AS, an error message is displayed.
Function |
Command |
|---|---|
Basic Configuration |
CLI overview commands |
File management commands |
|
System startup commands |
|
Device Management |
Hardware configuration commands |
Energy-saving configuration commands |
|
PoE configuration commands |
|
Stack configuration commands (except the smooth upgrade commands) |
|
Commands for configuring rules for outputting information to information channels in the information center (supported in V200R019 and later versions) |
|
Interface Management |
Basic interface configuration commands |
Ethernet interface configuration commands |
|
Logical interface configuration commands |
|
Ethernet Switching |
MAC address table configuration commands |
Link aggregation commands |
|
VLAN configuration commands |
|
VLAN aggregation configuration commands |
|
MUX VLAN configuration commands |
|
Voice VLAN configuration commands |
|
QinQ configuration commands |
|
VLAN mapping configuration commands |
|
Loopback detection configuration commands |
|
BPDU protection configuration commands (supported in V200R012C00 and later versions) |
|
Layer 2 protocol tunneling commands |
|
IP Service |
IPv4 configuration commands |
ARP configuration commands |
|
DHCP policy VLAN configuration commands |
|
Reliability |
DLDP configuration commands |
MAC swap loopback configuration commands |
|
User Access and Authentication |
AAA configuration commands |
NAC configuration commands (unified mode) |
|
Policy association configuration commands |
|
Security |
ACL configuration commands |
Local attack defense configuration commands |
|
Attack defense configuration commands |
|
MFF configuration commands |
|
Traffic suppression and storm control configuration commands |
|
ARP security configuration commands |
|
Port security configuration commands |
|
DHCP snooping configuration commands |
|
ND snooping configuration commands |
|
PPPoE+ configuration commands |
|
IP source guard configuration commands |
|
SAVI configuration commands |
|
MPAC configuration commands |
|
QoS |
MQC configuration commands |
Priority mapping commands |
|
Traffic policing, traffic shaping, and interface-based rate limiting commands |
|
Congestion avoidance and congestion management commands |
|
Filtering configuration commands |
|
Redirection configuration commands |
|
Statistics configuration commands |
|
ACL-based simplified traffic policy commands |
|
Network Management and Monitoring |
display and snmp-agent trap enable feature-name commands in SNMP configuration commands |
LLDP configuration commands |
|
Service diagnosis configuration commands |
|
Mirroring configuration commands |
|
Packet obtaining configuration command |
|
Ping and tracert configuration commands |