HP FlexFabric 5930 Series User manual

HP FlexFabric 5930 Switch Series
Configuration Guides Index
Part number: 5998-7760a
Software version: Release 241x
Document version: 6W102-20151210

Legal and notice information
© Copyright 2015 Hewlett-Packard Development Company, L.P.
No part of this documentation may be reproduced or transmitted in any form or by any means without
prior written consent of Hewlett-Packard Development Company, L.P.
The information contained herein is subject to change without notice.
HEWLETT-PACKARD COMPANY MAKES NO WARRANTY OF ANY KIND WITH REGARD TO THIS
MATERIAL, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
AND FITNESS FOR A PARTICULAR PURPOSE. Hewlett-Packard shall not be liable for errors contained
herein or for incidental or consequential damages in connection with the furnishing, performance, or
use of this material.
The only warranties for HP products and services are set forth in the express warranty statements
accompanying such products and services. Nothing herein should be construed as constituting an
additional warranty. HP shall not be liable for technical or editorial errors or omissions contained
herein.

1
Index
This index covers all configuration guides for the HP FlexFabric 5930 Switch Series product set. Use the table to
match the code to the appropriate guide. Page numbers in the index are preceded by a matching code. For
example, FM-12 indicates page 12 in the fundamentals configuration guide.
Confi
g
uration
g
uide Code
HP FlexFabric 5930 Switch Series ACL and QoS Configuration Guide-Release 241x
QACL
HP FlexFabric 5930 Switch Series EVB Configuration Guide-Release 241x EVB
HP FlexFabric 5930 Switch Series FC and FCoE Configuration Guide-Release 241x
FC&FCoE
HP FlexFabric 5930 Switch Series Fundamentals Configuration Guide-Release 241x
FM
HP FlexFabric 5930 Switch Series High Availability Configuration Guide-Release
241x HA
HP FlexFabric 5930 Switch Series IP Multicast Configuration Guide-Release 241x MCAST
HP FlexFabric 5930 Switch Series IRF Configuration Guide-Release 241x IRF
HP FlexFabric 5930 Switch Series Layer 2 - LAN Switching Configuration
Guide-Release 241x LSW
HP FlexFabric 5930 Switch Series Layer 3 - IP Routing Configuration Guide-Release
241x IPR
HP FlexFabric 5930 Switch Series Layer 3 - IP Services Configuration Guide-Release
241x IPSER
HP FlexFabric 5930 Switch Series MPLS Configuration Guide-Release 241x MPLS
HP FlexFabric 5930 Switch Series Network Management and Monitoring
Configuration Guide-Release 241x NM
HP FlexFabric 5930 Switch Series OpenFlow Configuration Guide-Release 241x OF
HP FlexFabric 5930 Switch Series Security Configuration Guide-Release 241x SEC
HP FlexFabric 5930 Switch Series SPB Configuration Guide-Release 241x SPB
HP FlexFabric 5930 Switch Series TRILL Configuration Guide-Release 241x TRILL
HP FlexFabric 5930 Switch Series VXLAN Configuration Guide-Release 241x VXLAN
?
? (CLI online help access), FM-2
1
1:1 V L A N m a p p i n g
application scenario, LSW-235
configuration, LSW-241, LSW-248
implementation, LSW-237, LSW-238
1: 2 V L A N m a p p i n g
application scenario, LSW-237
configuration, LSW-246, LSW-253
implementation, LSW-237, LSW-239
1:N process redundancy, HA-220
10 -GE interface
combine, LSW-2
1-way DM
CFD 1-way DM configuration, HA-25

2
2
2:2 VLAN mapping
application scenario, LSW-237
configuration, LSW-247, LSW-253
implementation, LSW-237, LSW-239
2-way DM
CFD 2-way DM configuration, HA-25
3
3DES
IPsec encryption algorithm, SEC-276
4
40-GE interface
split, LSW-2
4-byte
IPv4 BGP AS number suppression, IPR-250
IPv6 BGP AS number suppression, IPR-250
6
6PE
IP routing BGP 6PE, IPR-272
IP routing BGP 6PE basics, IPR-272
IP routing BGP 6PE optional capabilities,
IPR-273
IPv6 BGP 6PE, IPR-317
6to4
relay, IPSER-217
tunnel, IPSER-217
tunnel configuration, IPSER-226, IPSER-227
8
802
802.1ah PBB configuration, LSW-256
802.1Q-in-802.1Q. Use QinQ
IGMP snooping message 802.1p priority,
MCAST-27
MLD snooping 802.1p message priority,
MCAST-245
QinQ SVLAN tag 802.1p priority, LSW-229
QoS packet 802.1p priority, QACL-91
SPBM data packet, SPB-4
SPBM ISIS-SPB hello packet, SPB-3
SPBM ISIS-SPB LSP, SPB-4
SPBM ISIS-SPB SNP, SPB-4
SPBM overview, SPB-1
VLAN group configuration, LSW-158
802.1p
priority marking configuration, QACL-69
QCN CND, QACL-104
QCN CND priority mapping, QACL-104
802.1p priority
drop precedence, QACL-68
802.1X
access control method, SEC-87
ACL assignment, SEC-83, SEC-102
architecture, SEC-67
authentication, SEC-71
authentication (access device initiated), SEC-70
authentication (client initiated), SEC-70
authentication configuration, SEC-98
authentication initiation, SEC-70
authentication request attempts max number,
SEC-88
authentication timeout timers, SEC-88
authentication trigger, SEC-90
Auth-Fail VLAN, SEC-80, SEC-94
authorization VLAN, SEC-76
authorization VLAN assignment, SEC-100
basic configuration, SEC-98
configuration, SEC-76, SEC-85
controlled/uncontrolled port, SEC-67
critical VLAN, SEC-81, SEC-95
display, SEC-97
EAD assistant, SEC-104
EAD assistant configuration, SEC-96

3
EAD assistant feature, SEC-84
EAP over RADIUS, SEC-69
EAP packet format, SEC-68
EAP relay authentication, SEC-72
EAP relay enable, SEC-86
EAP relay termination, SEC-74
EAP relay/termination authentication, SEC-72
EAP termination enable, SEC-86
EAP-Message attribute, SEC-70
EAPOL packet format, SEC-69
enable, SEC-85
feature cooperation, SEC-83
guest VLAN, SEC-79, SEC-93
guest VLAN assignment, SEC-100
MAC authentication delay, SEC-116
MAC-based access control, SEC-76
maintain, SEC-97
mandatory port authentication domain, SEC-91
online user handshake, SEC-89
online user handshake reply, SEC-90
overview, SEC-67
packet format, SEC-68
periodic online user reauthentication, SEC-92
port authorization state, SEC-86
port authorization status, SEC-67
port security authentication control mode,
SEC-194
port security client
macAddressElseUserLoginSecure, SEC-210
port security client userLoginWithOUI, SEC-207
port security configuration, SEC-193, SEC-196,
SEC-205
port security features, SEC-199
port security intrusion protection, SEC-200
port security MAC address autoLearn, SEC-205
port security MAC move, SEC-203
port security MAC+802.1X authentication,
SEC-196
port security mode, SEC-198
port security NTK, SEC-199
port users max number, SEC-87
port-based access control, SEC-76
quiet timer, SEC-91
RADIUS Message-Authentication attribute,
SEC-70
related protocols, SEC-68
security user profile configuration, SEC-431
supported domain name delimiters, SEC-96
user profile assignment, SEC-84
VLAN manipulation, SEC-76
802.x
802.1 LLDPDU TLV types, LSW-269
802.1p-to-local priority mapping, LSW-289
802.3 LLDPDU TLV types, LSW-269
LAN switching LLDP PFC 802.1p priority,
LSW-290
A
AAA
concurrent login user max, SEC-51
configuration, SEC-1, SEC-18, SEC-52
device implementation, SEC-11
display, SEC-52
displaying local users/user groups, SEC-24
FIPS compliance, SEC-18
HWTACACS accounting server, SEC-37
HWTACACS authentication server, SEC-36
HWTACACS authorization server, SEC-36
HWTACACS display, SEC-42
HWTACACS implementation, SEC-7
HWTACACS maintain, SEC-42
HWTACACS outgoing packet source IP address,
SEC-39
HWTACACS scheme, SEC-35

4
HWTACACS scheme creation, SEC-35
HWTACACS scheme VPN, SEC-38
HWTACACS server SSH user, SEC-52
HWTACACS shared keys, SEC-38
HWTACACS timers, SEC-40
HWTACACS traffic statistics units, SEC-39
HWTACACS username format, SEC-39
HWTACACS/RADIUS differences, SEC-7
ISP domain accounting method, SEC-49
ISP domain attribute configuration, SEC-46
ISP domain authentication method, SEC-47
ISP domain authorization method, SEC-48
ISP domain creation, SEC-46
ISP domain method, SEC-45
LDAP administrator attribute, SEC-43
LDAP authentication server, SEC-45
LDAP display, SEC-45
LDAP implementation, SEC-9
LDAP scheme, SEC-42
LDAP scheme creation, SEC-45
LDAP server creation, SEC-42
LDAP server IP address, SEC-43
LDAP server SSH user authentication, SEC-59
LDAP user attribute, SEC-44
LDAP versions, SEC-43
local user attribute, SEC-20
local user configuration, SEC-19
methods, SEC-12
MPLS L3VPN implementation, SEC-13
NAS-ID profile configuration, SEC-51
protocols and standards, SEC-14
RADIUS accounting server parameters, SEC-26
RADIUS accounting-on configuration, SEC-33
RADIUS attributes, SEC-14
RADIUS authentication server, SEC-26
RADIUS display, SEC-35
RADIUS implementation, SEC-2
RADIUS maintain, SEC-35
RADIUS request transmission attempts max,
SEC-29
RADIUS scheme, SEC-24
RADIUS scheme creation, SEC-25
RADIUS scheme VPN, SEC-28
RADIUS security policy server IP address,
SEC-33
RADIUS server SSH user
authentication+authorization, SEC-55
RADIUS server status, SEC-29
RADIUS session-control, SEC-51
RADIUS shared keys, SEC-27
RADIUS SNMP notification, SEC-34
RADIUS timers, SEC-32
RADIUS traffic statistics units, SEC-28
RADIUS username format, SEC-28
RBAC AAA authorization, FM-50
RBAC default user role, FM-56
RBAC local AAA authentication user
configuration, FM-61
RBAC non-AAA authorization, FM-50
RBAC user role local AAA authentication,
FM-57
RBAC user role non-AAA authentication, FM-57
RBAC user role remote AAA authentication,
FM-56
scheme configuration, SEC-19
SSH user local authentication+HWTACACS
authorization+RADIUS accounting, SEC-54
troubleshoot HWTACACS, SEC-65
troubleshoot LDAP user authentication fails,
SEC-65
troubleshoot RADIUS, SEC-64
troubleshoot RADIUS accounting error, SEC-65

5
troubleshoot RADIUS authentication failure,
SEC-64
troubleshoot RADIUS packet delivery failure,
SEC-64
user group attribute, SEC-23
user management by ISP domains, SEC-11
user management by user access types, SEC-11
abbreviating command, FM-5
aborting
ISSU software activate/deactivate operation
(install series commands), FM-128
ABR
OSPF discard route configuration, IPR-80
OSPF route summarization (ABR), IPR-79
OSPF router type, IPR-68
OSPFv3 route summarization (ABR), IPR-377
absolute time range (ACL), QACL-93
AC
MPLS L2VPN AC configuration, MPLS-334
MPLS L2VPN attachment circuit (AC), MPLS-328
MPLS L2VPN cross-connect+AC binding,
MPLS-340
VPLS architecture, MPLS-377
VPLS configuration, MPLS-384
VPLS VSI+AC binding, MPLS-390
access
TRILL access port link, TRILL-9
access control
NMM NTP access control rights configuration,
NM-19
NMM NTP peer ACL, NM-12
NMM NTP query ACL, NM-12
NMM NTP security, NM-12
NMM NTP server ACL, NM-12
NMM NTP synchronization ACL, NM-12
NMM SNMP MIB, NM-94
NMM SNMP MIB role-based, NM-96
NMM SNMP MIB view-based, NM-96
security portal authentication, SEC-133
security portal authentication configuration,
SEC-127, SEC-152
security portal authentication cross-subnet,
SEC-164
security portal authentication direct, SEC-152
security portal authentication direct local portal
Web server, SEC-187
security portal authentication extended
cross-subnet, SEC-174
security portal authentication extended direct,
SEC-167
security portal authentication extended re-DHCP,
SEC-170
security portal authentication re-DHCP, SEC-160
security portal authentication server
detection+user synchronization, SEC-177
accessing
access VSAN, FC&FCoE-38
access VSAN configuration, FC&FCoE-43
access VSAN mode negotiation, FC&FCoE-40
CLI online help, FM-2
FC zone access control, FC&FCoE-109
H-VPLS access mode, MPLS-380
H-VPLS Ethernet access mode, MPLS-380
IRF fabric, IRF-21
login management SNMP device access,
FM-38
port-based VLAN assignment (access port),
LSW-147
RBAC VPN instance access policy, FM-49
security portal authentication device access,
SEC-128
VSAN access port interface, FC&FCoE-43
VSAN access port interfaces in bulk,
FC&FCoE-43
account idle time (password control), SEC-218
accounting

6
AAA configuration, SEC-1, SEC-18, SEC-52
AAA ISP domain accounting method, SEC-49
AAA RADIUS accounting-on, SEC-33
AAA SSH user local
authentication+HWTACACS
authorization+RADIUS accounting, SEC-54
login management command accounting,
FM-45, FM-46
login management user access control, FM-39
ACL
802.1X ACL assignment, SEC-83, SEC-102
advanced configuration, QACL-6
automatic rule numbering, QACL-3
automatic rule renumbering, QACL-3
basics configuration, QACL-4
categories, QACL-1
configuration, QACL-1, QACL-4, QACL-13
copying, QACL-10
display, QACL-12
Ethernet frame header configuration, QACL-8
IGMP snooping policy, MCAST-28
IPsec ACL, SEC-279
IPsec ACL de-encapsulated packet check,
SEC-288
IPsec ACL rule keywords, SEC-279
IPsec ACL-based implementation, SEC-277,
SEC-278
IPsec ACL-based tunnel establishment, SEC-278
IPsec mirror image ACLs, SEC-280
IPsec non-mirror image ACLs, SEC-280
IPv4 advanced configuration, QACL-6
IPv4 basic configuration, QACL-4
IPv6 advanced configuration, QACL-7
IPv6 basic configuration, QACL-5
LAN switching LLDP APP parameter, LSW-287
login management command authorization,
FM-42, FM-43
login management SNMP access control,
FM-40, FM-41
login management SSH login control, FM-39
login management Telnet login control, FM-39,
FM-40
login management user access control, FM-39
MAC authentication ACL assignment, SEC-111,
SEC-124
maintain, QACL-12
match order, QACL-2
MLD snooping policy, MCAST-246
naming, QACL-2
NMM NTP peer ACL, NM-12
NMM NTP query ACL, NM-12
NMM NTP server ACL, NM-12
NMM NTP synchronization ACL, NM-12
numbering, QACL-2
packet filtering applicable scope (VLAN
interface), QACL-11
packet filtering application (interface), QACL-11
packet filtering configuration, QACL-10
packet filtering default action, QACL-12
packet filtering log interval, QACL-12
packet fragment filtering, QACL-3
routing policy, IPR-442
rule numbering, QACL-3
rule numbering step, QACL-3
SSH management parameters, SEC-333
switch applications, QACL-1
time range configuration, QACL-93
time range display, QACL-93
user-defined configuration, QACL-9
ACS
attribute type, NM-239
attribute type (default)(CLI), NM-240
attribute type (preferred), NM-239
authentication parameters, NM-241

7
autoconnect parameters, NM-242
connection interface, NM-242
HTTPS SSL client policy, NM-244
provision code, NM-241
action
loop detection block, LSW-135
loop detection no-learning protection, LSW-135
loop detection shutdown protection, LSW-135
OpenFlow action list/action set merge
restrictions, OF-20
PBR node, IPR-336
activating
EVB VSI aggregate filter, EVB-10
EVB VSI filter, EVB-10
FC zone set, FC&FCoE-115
ISSU activate operation (install series
commands), FM-128
OpenFlow instance, OF-13
activating RRPP domain, HA-64
active
ARP active acknowledgement, SEC-391
FC zone database active zone set,
FC&FCoE-101
FTP active (PORT) operating mode, FM-75
security portal authentication type, SEC-127
active virtual forwarder. Use AVF
adding
MAC address table blackhole entry, LSW-27
MAC address table multiport unicast entry,
LSW-27
address
DHCP address assignment, IPSER-34
DHCP address pool, IPSER-34
DHCP address pool application on interface,
IPSER-46
DHCP address pool selection, IPSER-35
DHCP allocation, IPSER-27
DHCP BOOTP client address acquisition,
IPSER-85
DHCP client duplicated address detection,
IPSER-69
DHCP IP address allocation sequence, IPSER-36
DHCP IP address conflict detection, IPSER-47
DHCP IP address lease extension, IPSER-28
DHCP server address pool, IPSER-37
DHCP server address pool creation, IPSER-37
DHCP server address pool IP address range,
IPSER-37
DHCPv6 address allocation, IPSER-179
DHCPv6 address pool, IPSER-179
DHCPv6 address pool selection, IPSER-179
DHCPv6 address/prefix assignment, IPSER-174
DHCPv6 address/prefix lease renewal,
IPSER-175
DHCPv6 client IPv6 address acquisition,
IPSER-197
DHCPv6 IA, IPSER-178
DHCPv6 IAID, IPSER-178
DHCPv6 IPv6 address assignment, IPSER-177
DHCPv6 IPv6 address/prefix allocation
sequence, IPSER-180
DHCPv6 multicast, IPSER-178
DHCPv6 overview, IPSER-174
DHCPv6 server dynamic IPv6 address
assignment, IPSER-189
DHCPv6 server IPv6 address assignment,
IPSER-182
fabric FC address assignment, FC&FCoE-53
fabric N_Port-WWN to FC address binding,
FC&FCoE-57
FC (FCoE), FC&FCoE-3
FC direct routes, FC&FCoE-73
FC FSPF configuration, FC&FCoE-76
FC FSPF routes, FC&FCoE-74
FC static route configuration, FC&FCoE-75

8
FC static routes, FC&FCoE-74
FCoE fabric address assignment, FC&FCoE-233
FCoE well-known fabric addresses,
FC&FCoE-233
IP address classes, IPSER-21
IP addressing configuration, IPSER-21, IPSER-25
IP addressing interface address, IPSER-23
IP multicast, MCAST-6
IP multicast MD-VPN default group address,
MCAST-198
IP routing IS-IS area, IPR-134
IP routing IS-IS format, IPR-133
IP routing IS-IS NSAP format, IPR-133
IP routing IS-IS PPP interface hello packet source
address check, IPR-150
IP routing IS-IS routing method, IPR-134
IP routing MP-BGP address family, IPR-202
IPPO ICMP packet source address, IPSER-137
IPv6 addresses, IPSER-145
IPv6 ICMPv6 packet source address, IPSER-167
MAC address learning disable, LSW-28
MAC address move notification, LSW-33
MAC address table address synchronization,
LSW-32
MAC address table learning priority, LSW-31
MAC Information queue length, LSW-40
MLD snooping query source IPv6 address,
MCAST-244
ping address reachability determination, NM-1
SNMP notification for MAC address table,
LSW-36
SPBM multicast address, SPB-8
special IP addresses, IPSER-22
stateless DHCPv6, IPSER-176
static source check disable, LSW-35
u R P F c o n f i g u ra t i o n , S EC - 414 , S EC - 417, S EC - 418
VPLS MAC address aging, MPLS-379
VPLS MAC address learning, MPLS-379,
MPLS-393
VPLS MAC address withdrawal, MPLS-379
Address Resolution Protocol. Use ARP, Use ARP
adjacency
MPLS TE traffic forwarding automatic route
advertisement (forwarding adjacency),
MPLS-56
MPLS TE tunnel automatic route advertisement
traffic direction (forwarding adjacency),
MPLS-78
OSPF BDR, IPR-70
OSPF DR, IPR-70
OSPFv3 BFD configuration, IPR-413
OSPFv3 configuration, IPR-371, IPR-372, IPR-394
OSPFv3 DR election configuration, IPR-401
OSPFv3 GR configuration, IPR-411
OSPFv3 IPsec profile configuration, IPR-415
OSPFv3 NSSA area configuration, IPR-398
OSPFv3 route redistribution, IPR-404
OSPFv3 stub area configuration, IPR-394
SPBM hello multiplier for calculating adjacency
hold time, SPB-25
SPBM IS-IS SPB adjacency authentication,
SPB-30
SPBM ISIS-SPB adjacency change output,
SPB-29
SPBM ISIS-SPB adjacency maintenance, SPB-24
adjusting
ARP/ND table capacity, FM-143, FM-148,
FM-163
IGMP performance adjustment, MCAST-85
MAC address table capacity, FM-143, FM-148
MLD performance, MCAST-295
routing table capacity, FM-143, FM-148, FM-163
administrative scoping
IPv6 BIDIR-PIM domains, MCAST-317
IPv6 PIM-SM admin-scoped zone configuration,
MCAST-349

9
IPv6 PIM-SM domains, MCAST-317
IPv6 PIM-SM mechanism, MCAST-318
IPv6 PIM-SM non-scoped zone configuration,
MCAST-346
multicast IPv6 BIDIR-PIM zone relationships,
MCAST-318
PIM-SM admin-scoped zone configuration,
MCAST-140
PIM-SM domain divisions, MCAST-108
PIM-SM non-scoped zone configuration,
MCAST-137
PIM-SM zone relationships, MCAST-109
PIM-SM zones, MCAST-108
advanced ACL
category, QACL-1
naming, QACL-2
numbering, QACL-2
advertisement
TRILL LSP fast advertisement, TRILL-14
advertising
FCoE FKA advertisement interval value,
FC&FCoE-30
FIP solicited discovery advertisement,
FC&FCoE-8
FIP unsolicited discovery advertisement,
FC&FCoE-8
high availability DLDP advertisement packet
send interval, HA-39
high availability DLDP advertisement timer,
HA-35
IP routing BGP COMMUNITY NO_ADVERTISE
path attribute, IPR-192
IP routing BGP configuration, IPR-191, IPR-204
IP routing BGP default route to peer/peer group,
IPR-224
IP routing BGP optimal route, IPR-223
IP routing BGP optimal route advertisement,
IPR-223
IP routing BGP route advertisement rules, IPR-196
IP routing BGP route generation, IPR-219
IP routing IS-IS default route, IPR-146
IP routing RIP summary route advertisement,
IPR-50
IP services IRDP proxy-advertised IP address,
IPSER-125
IP services IRDP router advertisement (RA),
IPSER-125
IPv4 BGP basics, IPR-277
IPv4 BGP BFD, IPR-304
IPv4 BGP COMMUNITY, IPR-260, IPR-291
IPv4 BGP confederation, IPR-296
IPv4 BGP configuration, IPR-277
IPv4 BGP fake AS number advertisement,
IPR-243
IPv4 BGP GR, IPR-303
IPv4 BGP load balancing, IPR-288
IPv4 BGP path selection, IPR-300
IPv4 BGP route reflector, IPR-294
IPv4 BGP route summarization, IPR-284
IPv4 BGP-IGP route redistribution, IPR-281
IPv6 BGP basics, IPR-312
IPv6 BGP BFD, IPR-321
IPv6 BGP COMMUNITY, IPR-260
IPv6 BGP configuration, IPR-312
IPv6 BGP fake AS number advertisement,
IPR-243
IPv6 BGP route reflector, IPR-315
IPv6 MPLS L3VPN routing information
advertisement, MPLS-281
IPv6 VRRP packet attribute, HA-150
LAN switching LLDP advertisable TLV, LSW-277
LAN switching LLDP+DCBX TLV advertisement,
LSW-286
LDP advertisement messages, MPLS-16
LDP label advertisement control, MPLS-45
LDP label advertisement modes, MPLS-18
LDP label advertisement policy, MPLS-29

10
MPLS egress label type advertisement, MPLS-7
MPLS L2VPN BGP label block information
advertisement, MPLS-337
MPLS L3VPN basics, MPLS-187
MPLS L3VPN HoVPN, MPLS-203
MPLS L3VPN MCE EBGP VPN route advertising,
MPLS-463
MPLS L3VPN MCE OSPF VPN route advertising,
MPLS-457
MPLS L3VPN route advertisement, MPLS-168
MPLS TE attribute advertisement, MPLS-55
MPLS TE CRLSP dynamic establishment,
MPLS-55
MPLS TE link attribute (IGP TE extension),
MPLS-68
MPLS TE link attribute (IS-IS TE), MPLS-69
MPLS TE link attribute (OSPF TE), MPLS-68
MPLS TE traffic forwarding automatic route
advertisement (forwarding adjacency),
MPLS-56
MPLS TE traffic forwarding automatic route
advertisement (IGP shortcut), MPLS-56
MPLS TE tunnel traffic direction (automatic route
advertisement), MPLS-77
OSPF basics configuration, IPR-103
OSPF configuration, IPR-64, IPR-71, IPR-103
OSPF host route advertisement, IPR-85
OSPF route summarization configuration,
IPR-108
RIP default route, IPR-32
RIP on interface, IPR-28
RIPng default route, IPR-357
RIPv2 summary route, IPR-31
voice VLAN CDP advertisement configuration,
LSW-200
voice VLAN information advertisement to IP
phones, LSW-192
voice VLAN LLDP advertisement configuration,
LSW-200
VPLS BGP label block information advertisement,
MPLS-387
VPLS BGP PE information advertisement,
MPLS-389
VRRP advertisement interval, HA-133
AES
IPsec encryption algorithm, SEC-276
affinity
MPLS TE tunnel constraints, MPLS-69
process placement location affinity, HA-222
process placement location-set, HA-221
process placement location-type, HA-221,
HA-222
process placement negative (repulse) affinity,
HA-221
process placement positive (attract) affinity,
HA-221
process placement process, HA-223
process placement program, HA-221
process placement self, HA-221, HA-223
agent
NMM SNMP agent host notification, NM-104
sFlow configuration, NM-213
aggregate CAR
configuration, QACL-83, QACL-84
priority marking configuration, QACL-69
aggregating
link. See link aggregation, See Ethernet link
aggregation
RSCN aggregation, FC&FCoE-61
aging
ARP dynamic entry aging timer, IPSER-6
MAC address table timer, LSW-30
spanning tree max age timer, LSW-105
VPLS MAC address aging, MPLS-379
Agreement Protocol (AP)
mode configuration, SPB-32

11
transient loop prevention, SPB-12
AH
IPsec security protocol 51, SEC-274
airflow direction configuration, FM-156
AIS
CFD AIS configuration, HA-24
CFD function, HA-17
CFD functions, HA-17
alarm
Ethernet OAM fault detection, HA-1
RMON alarm function, NM-116
RMON alarm group sample type, NM-115
RMON configuration, NM-113 , N M -118
RMON group, NM-114
RMON private group, NM-114
alert protocol (SSL), SEC-369
algorithm
configuring load sharing, IPSER-120
configuring symmetric load sharing, IPSER-121
IPsec authentication, SEC-276
IPsec encryption (3DES), SEC-276
IPsec encryption (AES), SEC-276
IPsec encryption (DES), SEC-276
IPsec IKE DH algorithm, SEC-307
MPLS TE CSPF path calculation, MPLS-55
QCN algorithm, QACL-103
QCN algorithm (CP), QACL-103
QCN algorithm (RP), QACL-103
QCN CND, QACL-104
SPBM B-VLAN to ECT algorithm mapping,
SPB-10, SPB-21
SSH negotiation, SEC-326
STP calculation, LSW-83
TRILL SPF algorithm parameter, TRILL-14
alias (command keyword), FM-5
allocating
DHCP address allocation, IPSER-34
DHCP addresses allocation, IPSER-27
DHCP IP address allocation sequence, IPSER-36
DHCPv6 address/prefix allocation sequence,
IPSER-180
DHCPv6 dynamic address allocation, IPSER-179
DHCPv6 dynamic prefix allocation, IPSER-179
DHCPv6 static address allocation, IPSER-179
DHCPv6 static prefix allocation, IPSER-179
alternate port (MST), LSW-94
anti-replay
IPsec anti-replay redundancy, SEC-289
IPsec configuration, SEC-288
any authentication (SSH), SEC-326
Anycast
IPv6 address type, IPSER-146
IPv6 anycast address configuration, IPSER-156
MSDP Anycast RP configuration, MCAST-173
MSDP RP, MCAST-159
troubleshooting MSDP RP entry exchange,
MCAST-182
API
extended Python API, FM-168
extended Python API functions, FM-168
APP parameter (LLDP), LSW-287
Appendix A (Application restrictions), OF-19
Appendix A (Default priority maps), QACL-89
Appendix A (FCoE fabric address assignment),
FC&FCoE-233
Appendix A (MAC-IP flow table), OF-23
Appendix A (Supported NETCONF operations),
NM-292
Appendix B (FCoE well-known fabric addresses),
FC&FCoE-233
Appendix B (Packet precedence), QACL-90
application
ACL switch applications, QACL-1

12
IP multicast data distribution, MCAST-4
IP multicast VPN, MCAST-13
IPsec application-based implementation,
SEC-277
IPsec application-based tunnel establishment,
SEC-278
IRF ARP MAD application scenario, IRF-10
IRF BFD MAD application scenario, IRF-9
IRF LACP MAD application scenario, IRF-9
IRF ND MAD application scenario, IRF-12
NQA+Track+static routing collaboration,
HA-190
Track+application module association, HA-194
Track+application module collaboration,
HA-190
Track+policy-based routing association, HA-196
Track+Smart Link association, HA-198
Track+static routing association, HA-195
Track+VRRP association, HA-194
VRRP, HA-135
VRRP load-sharing, HA-135
VRRP master/backup, HA-135
applying
ACL packet filtering (interface), QACL-11
data buffer configuration, QACL-98
DDNS client policy to interface, IPSER-114
DHCP address pool on interface, IPSER-46
DHCPv6 snooping trusted port, IPSER-206
DHCPv6 snooping untrusted port, IPSER-206
flow mirroring QoS policy, NM-209
flow mirroring QoS policy (control plane),
NM-209
flow mirroring QoS policy (global), NM-209
flow mirroring QoS policy (interface), NM-209
flow mirroring QoS policy (VLAN), NM-209
interface NAS ID profile, SEC-147
IPsec policy to interface, SEC-287
IPv6 PBR apply clause, IPR-433
OSPFv3 IPsec profile, IPR-391
PBR apply clause, IPR-334
port security NAS-ID profile, SEC-203
QoS congestion avoidance queue-based
WRED table, QACL-62
QoS policy, QACL-23
QoS policy (control plane), QACL-25
QoS policy (global), QACL-24
QoS policy (user profile), QACL-26
QoS policy (VLAN), QACL-24
QoS policy to interface, QACL-23
RIPng IPsec profile, IPR-361
routing policy apply clause, IPR-443, IPR-447
routing policy to IPv4 route redistribution,
IPR-450
routing policy to IPv6 route redistribution,
IPR-453
appointed VLAN-x forwarder. See AVF
architecture
802.1X, SEC-67
IP multicast network, MCAST-5
MPLS L3VPN, MPLS-165, MPLS-440
MPLS network, MPLS-3
NMM NTP, NM-9
PKI, SEC-238
VPLS, MPLS-377
archiving
configuration archive, FM-102
configuration archive parameters, FM-103
configuration archiving (automatic), FM-104
running configuration (manual), FM-104
area
data buffer fixed area, QACL-95, QACL-96
data buffer shared area, QACL-95, QACL-96
IP routing IS-IS, IPR-135

13
IP routing IS-IS area address, IPR-134
IP routing IS-IS authentication (area), IPR-159
MPLS L3VPN OSPF area PE-CE configuration,
M PL S -181
OSPF area, IPR-74
OSPF areas, IPR-65
OSPF authentication (area), IPR-89
OSPF backbone, IPR-66
OSPF network type, IPR-76
OSPF NSSA area, IPR-67, IPR-75
OSPF NSSA area configuration, IPR-113
OSPF stub area, IPR-67, IPR-74
OSPF stub area configuration, IPR-111
OSPF totally NSSA area, IPR-67
OSPF totally stub area, IPR-67
OSPF virtual link, IPR-76
OSPFv3 area parameter, IPR-374
OSPFv3 NSSA area, IPR-375
OSPFv3 NSSA area configuration, IPR-398
OSPFv3 stub area, IPR-374
OSPFv3 stub area configuration, IPR-394
OSPFv3 virtual link, IPR-375
QoS data buffer fixed-area max queue ratio,
QACL-98
QoS data buffer shared-area max queue ratio,
QACL-97
QoS data buffer total shared-area ratio,
QACL-97
SPBM area, SPB-2
SPBM ISIS-SPB area authentication, SPB-31
argument (CLI string/text type), FM-4
arithmetic
capture filter operator, NM-305
arithmetic operator
capture filter, NM-303
ARP
ARP fast update enabling for MAC address
move, LSW-35
attack protection. See ARP attack protection
common proxy ARP configuration, IPSER-16
common proxy ARP enable, IPSER-15
configuration, IPSER-1, IPSER-8
customer-side port configuration, IPSER-7
display, IPSER-8
dynamic entry aging timer configuration,
IPSER-6
dynamic entry check enable, IPSER-6
dynamic entry max (device), IPSER-5
dynamic entry max (interface), IPSER-6
dynamic table entry, IPSER-3
fast-reply configuration, IPSER-19
gratuitous ARP configuration, IPSER-12, IPSER-13
gratuitous ARP IP conflict notification, IPSER-13
gratuitous ARP packet learning, IPSER-12
gratuitous ARP periodic packet send, IPSER-12
local proxy ARP enable, IPSER-15
logging enable, IPSER-7
MAD. See ARP MAD
maintain, IPSER-8
message format, IPSER-1
MFF configuration, SEC-406, SEC-408,
SEC-410
MFF manual-mode in ring network, SEC-412
MFF manual-mode in tree network, SEC-410
multiport entry configuration, IPSER-4, IPSER-10
OpenFlow table entry, IPSER-3
operation, IPSER-1
proxy ARP configuration, IPSER-15
scanning configuration restrictions, SEC-401
snooping configuration, IPSER-18
snooping display, IPSER-18
snooping maintain, IPSER-18

14
static configuration, IPSER-8
static entry configuration, IPSER-3
static table entry, IPSER-3
table, IPSER-2
VRRP virtual MAC address assignment, HA-137
VXLAN ARP flood suppression, VXLAN-8,
VXLAN-19
VXLAN local flood (unknown-unicast frames),
VXLAN-17
ARP attack protection
active acknowledgement, SEC-391
ARP detection display, SEC-397
ARP detection maintain, SEC-397
authorized ARP configuration, SEC-392
authorized ARP configuration (DHCP relay
agent), SEC-393
authorized ARP configuration (DHCP server),
SEC-392
configuration, SEC-385
detection configuration, SEC-395
filtering configuration, SEC-404
fixed ARP configuration, SEC-401
gateway protection, SEC-402, SEC-403
packet rate limit configuration, SEC-388
packet source MAC consistency check, SEC-391
packet validity check configuration, SEC-396
restricted forwarding, SEC-397
restricted forwarding configuration, SEC-399
scanning configuration, SEC-401
source MAC-based attack detection, SEC-389,
SEC-390
source MAC-based detection display, SEC-390
unresolvable IP attack, SEC-385, SEC-387
unresolvable IP attack blackhole routing,
SEC-386
unresolvable IP attack protection display,
SEC-386
unresolvable IP attack source suppression,
SEC-386
user validity check, SEC-395
user+packet validity check, SEC-398
ARP detection
VLAN M:1 mapping (dynamic IP address
assignment), LSW-243
ARP MAD
IRF ARP MAD, IRF-10
IRF ARP MAD configuration, IRF-29
IRF ARP MAD configuration (Ethernet port),
IRF-29
IRF ARP MAD configuration (management
Ethernet port), IRF-31
IRF fabric ARP MAD configuration, IRF-45
ARP snooping
VLAN M:1 mapping (static IP address
assignment), LSW-245
AS
IP multicast inter-AS MD-VPN, MCAST-195
IP multicast VPN inter-AS MD-VPN configuration,
MCAST-216
IP routing BGP confederation, IPR-264
IP routing BGP confederation compatibility,
IPR-264
IP routing BGP configuration, IPR-191, IPR-204
IP routing BGP first AS number of EBGP route
updates, IPR-246
IP routing BGP MED attribute, IPR-235
IP routing BGP path AS_PATH attribute, IPR-192
IP routing BGP path AS_SEQUENCE attribute,
IPR-192
IP routing BGP path AS_SET attribute, IPR-192
IP routing IS-IS authentication, IPR-177
IP routing IS-IS basics, IPR-141, IPR-165
IP routing IS-IS configuration, IPR-133, IPR-140,
IPR-165
IP routing IS-IS DIS election, IPR-169
IP routing IS-IS route redistribution, IPR-173

15
IPv4 BGP 4-byte AS number suppression,
IPR-250
IPv4 BGP AS number substitution, IPR-244
IPv4 BGP basics, IPR-277
IPv4 BGP BFD, IPR-304
IPv4 BGP COMMUNITY, IPR-291
IPv4 BGP confederation, IPR-296
IPv4 BGP configuration, IPR-277
IPv4 BGP fake AS number advertisement,
IPR-243
IPv4 BGP FRR, IPR-308
IPv4 BGP GR, IPR-303
IPv4 BGP load balancing, IPR-288
IPv4 BGP local AS number appearance, IPR-241
IPv4 BGP MED AS route comparison
(confederation peers), IPR-238
IPv4 BGP MED AS route comparison (diff ASs),
IPR-236
IPv4 BGP MED AS route comparison (per-AS),
IPR-237
IPv4 BGP MED default value, IPR-235
IPv4 BGP path selection, IPR-300
IPv4 BGP private AS number removal, IPR-245
IPv4 BGP route reflector, IPR-294
IPv4 BGP route summarization, IPR-284
IPv4 BGP-IGP route redistribution, IPR-281
IPv6 BGP 4-byte AS number suppression,
IPR-250
IPv6 BGP AS number substitution, IPR-244
IPv6 BGP basics, IPR-312
IPv6 BGP BFD, IPR-321
IPv6 BGP configuration, IPR-312
IPv6 BGP fake AS number advertisement,
IPR-243
IPv6 BGP FRR, IPR-324
IPv6 BGP local AS number appearance, IPR-241
IPv6 BGP MED AS route comparison
(confederation peers), IPR-238
IPv6 BGP MED AS route comparison (diff ASs),
IPR-236
IPv6 BGP MED AS route comparison (per-AS),
IPR-237
IPv6 BGP MED default value, IPR-235
IPv6 BGP private AS number removal, IPR-245
IPv6 BGP route reflector, IPR-315
IPv6 MPLS L3VPN inter-AS IPv6 VPN, MPLS-293
IPv6 MPLS L3VPN inter-AS IPv6 VPN option A,
MPLS-293
IPv6 MPLS L3VPN inter-AS IPv6 VPN option C,
MPLS-294
IPv6 MPLS L3VPN inter-AS option A, MPLS-304
IPv6 MPLS L3VPN inter-AS option C, MPLS-309
MPLS L3VPN BGP AS number substitution,
MPLS-184, MPLS-206, MPLS-269
MPLS L3VPN inter-AS option A, MPLS-172,
MPLS-223
MPLS L3VPN inter-AS option B, MPLS-173,
MPLS-228
MPLS L3VPN inter-AS option C, MPLS-175,
MPLS-233
MPLS L3VPN inter-AS VPN, MPLS-197
MPLS L3VPN inter-AS VPN option A, MPLS-172,
MPLS-197
MPLS L3VPN inter-AS VPN option B, MPLS-172,
MPLS-198
MPLS L3VPN inter-AS VPN option C, MPLS-172,
MPLS-199
MPLS L3VPN inter-AS VPN option C ASBR,
MPLS-200
multicast intra-AS MD-VPN configuration,
MCAST-203
OSPF areas, IPR-65
OSPF AS External LSA, IPR-65
routing policy AS_PATH list, IPR-442, IPR-444
AS_PATH
IP routing BGP attribute, IPR-241
IPv4 BGP optimal route selection, IPR-242
IPv6 BGP optimal route selection, IPR-242

16
ASBR
IPv6 MPLS L3VPN inter-AS IPv6 VPN option C
ASBR-PE, MPLS-294
MPLS L3VPN inter-AS VPN option C ASBR,
MPLS-200
OSPF ASBR summary LSA, IPR-65
OSPF discard route configuration, IPR-80
OSPF redistributed route summarization (ASBR),
IPR-80
OSPF router type, IPR-68
OSPFv3 redistributed route summarization
(ASBR), IPR-378
ASCII transfer mode, FM-75
ASM
IP multicast model), MCAST-5
assert
IPv6 PIM-DM, MCAST-309
IPv6 PIM-SM, MCAST-314
PIM-DM, MCAST-100
PIM-SM, MCAST-105
assigning
802.1X ACL assignment, SEC-83, SEC-102
802.1X user profile assignment, SEC-84
CLI user line assignment, FM-18
CWMP ACS attribute (preferred)(CLI), NM-240
CWMP ACS attribute (preferred)(DHCP server),
NM-239
DHCP address, IPSER-34
DHCPv6 address/prefix, IPSER-174
DHCPv6 assignment (4 messages), IPSER-174
DHCPv6 IPv6 address, IPSER-177
DHCPv6 IPv6 prefix, IPSER-177
DHCPv6 rapid assignment (2 messages),
IPSER-174
DHCPv6 server dynamic IPv6 address
assignment, IPSER-189
DHCPv6 server dynamic IPv6 prefix assignment,
IPSER-186
DHCPv6 server IPv6 address assignment,
IPSER-182
DHCPv6 server IPv6 prefix assignment,
IPSER-181
DHCPv6 server network parameters assignment,
IPSER-183
fabric domain ID, FC&FCoE-52
fabric FC address, FC&FCoE-53
FC interface to aggregation group,
FC&FCoE-24
FCoE fabric address, FC&FCoE-233
IP addressing interface address, IPSER-23
IPv4 VRRP virtual IP address, HA-142
IPv6 interface addresses, IPSER-152
IPv6 IS-IS route convergence priority, IPR-423
IPv6 multicast port-based VLAN user port,
MCAST-271
IPv6 VRRP virtual IP address, HA-147
IRF device member IDs, IRF-17
Layer 2 LAN switching port-based VLAN access
port, LSW-147
MAC address table learning priority, LSW-31
MAC authentication ACL, SEC-124
MAC-based VLAN dynamic assignment,
LSW-151
MAC-based VLAN server assignment, LSW-152
MAC-based VLAN static assignment, LSW-150
port mirroring monitor port to remote probe
VLAN, NM-194
port to isolation group (multiple), LSW-78
port-based multicast VLAN user port,
MCAST-52
port-based VLAN access port (interface view),
LSW-147
port-based VLAN access port (VLAN view),
LSW-147
port-based VLAN hybrid port, LSW-149
port-based VLAN trunk port, LSW-148

17
RBAC local AAA authentication user role,
FM-57
RBAC non-AAA authentication user role, FM-57
RBAC permission assignment, FM-48
RBAC remote AAA authentication user role,
FM-56
RBAC user role, FM-55
RBAC user role assignment, FM-50
SPBM SPB VSI B-VLAN, SPB-17
voice VLAN assignment mode, LSW-194
voice VLAN assignment mode (automatic),
LSW-194
voice VLAN assignment mode (manual),
LSW-194
VRRP virtual MAC address assignment, HA-137
VSAN access port interface, FC&FCoE-43
VSAN access port interfaces in bulk,
FC&FCoE-43
VXLAN tunnel assignment, VXLAN-12
assistant edge node
RRPP type, HA-50
specifying RRPP, HA-63
associating
IPsec SA, SEC-275
IPv6 MPLS L3VPN VPN instance with interface,
MPLS-283, MPLS-468
MPLS L3VPN VPN instance with interface,
MPLS-188, MPLS-444
NMM IPv6 NTP client/server association mode,
NM-32
NMM IPv6 NTP multicast association mode,
NM-40
NMM IPv6 NTP symmetric active/passive
association mode, NM-34
NMM NTP association mode, NM-15
NMM NTP broadcast association mode, NM-10,
NM-17, NM-36
NMM NTP broadcast association mode with
authentication, NM-45
NMM NTP client/server association mode,
NM-10, NM-15, NM-30
NMM NTP client/server association mode with
authentication, NM-43
NMM NTP client/server mode with MPLS VPN
time synchronization, NM-48
NMM NTP multicast association mode, NM-10,
NM-18, NM-37
NMM NTP symmetric active/passive
association mode, NM-10, NM-16, NM-33
NMM NTP symmetric active/passive mode with
MPLS VPN time synchronization, NM-50
Smart Link associated device, HA-107
Track+application module, HA-194
Track+BFD, HA-192
Track+CFD, HA-192
Track+detection modules, HA-191
Track+interface management, HA-193
Track+NQA, HA-191
Track+policy-based routing, HA-196
Track+Smart Link, HA-198
Track+static routing, HA-195
Track+VRRP, HA-194
TRILL port+track entry, TRILL-20
association
CFD maintenance association, HA-14
asynchronous
OpenFlow message (asynchronous), OF-7
attachment circuit. See AC
attack
ARP attack protection configuration, SEC-385
attack D&P
configuration, SEC-438
login delay, SEC-439
TCP fragment attack prevention configuration,
SEC-438
attack detection and prevention. See attack D&P
attacking

18
detection and prevention. See attack D&P
attribute
802.1X RADIUS EAP-Message, SEC-70
802.1X RADIUS Message-Authentication,
SEC-70
AAA HWTACACS scheme, SEC-35
AAA ISP domain attribute, SEC-46
AAA LDAP administrator attribute, SEC-43
AAA LDAP scheme, SEC-42
AAA LDAP user attribute, SEC-44
AAA local user, SEC-19
AAA local user attribute, SEC-20
AAA RADIUS, SEC-14
AAA RADIUS common standard attributes,
SEC-14
AAA RADIUS extended attributes, SEC-6
AAA RADIUS HP proprietary attributes, SEC-16
AAA RADIUS Login-Service attribute check
method, SEC-34
AAA RADIUS scheme, SEC-24
AAA scheme, SEC-19
AAA user group attribute, SEC-23
Ethernet link aggregation attribute configuration,
LSW-44
IP routing BGP AS_PATH attribute, IPR-241
IP routing BGP MED attribute, IPR-235
IP routing BGP path AS_PATH, IPR-192
IP routing BGP path COMMUNITY, IPR-192
IP routing BGP path LOCAL_PREF, IPR-192
IP routing BGP path MED, IPR-192
IP routing BGP path NEXT_HOP, IPR-192
IP routing BGP path ORIGIN, IPR-192
IP routing MP-BGP MP_REACH_NLRI extended
attribute, IPR-201
IP routing MP-BGP MP_UNREACH_NLRI
extended attribute, IPR-201
IPv4 BGP AS number substitution, IPR-244
IPv4 BGP AS_PATH optimal route selection,
IPR-242
IPv4 BGP COMMUNITY, IPR-260, IPR-291
IPv4 BGP fake AS number advertisement,
IPR-243
IPv4 BGP local AS number appearance, IPR-241
IPv4 BGP MED AS route comparison
(confederation peers), IPR-238
IPv4 BGP MED AS route comparison (diff ASs),
IPR-236
IPv4 BGP MED AS route comparison (per-AS),
IPR-237
IPv4 BGP MED default value, IPR-235
IPv4 BGP NEXT_HOP, IPR-239
IPv4 BGP private AS number removal, IPR-245
IPv4 VRRP packet attribute, HA-144
IPv6 BGP AS number substitution, IPR-244
IPv6 BGP AS_PATH optimal route selection,
IPR-242
IPv6 BGP fake AS number advertisement,
IPR-243
IPv6 BGP local AS number appearance, IPR-241
IPv6 BGP MED AS route comparison
(confederation peers), IPR-238
IPv6 BGP MED AS route comparison (diff ASs),
IPR-236
IPv6 BGP MED AS route comparison (per-AS),
IPR-237
IPv6 BGP MED default value, IPR-235
IPv6 BGP NEXT_HOP, IPR-239
IPv6 BGP private AS number removal, IPR-245
IPv6 MPLS L3VPN VPN instance route related
attributes, MPLS-468
MPLS L3VPN BGP export target attribute,
MPLS-167, MPLS-442
MPLS L3VPN BGP import target attribute,
MPLS-167, MPLS-442
MPLS L3VPN VPN instance route related
attribute configuration, MPLS-445