-
Notifications
You must be signed in to change notification settings - Fork 29
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
24 changed files
with
492 additions
and
20 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,3 @@ | ||
# SR Linux CLI | ||
|
||
Documentation under construction... |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,102 @@ | ||
--- | ||
comments: true | ||
title: Show commands for ACL | ||
--- | ||
|
||
# ACL | ||
|
||
## ACL Status | ||
|
||
```srl | ||
A:srl-a# show acl summary | ||
-------------------------------------------------------------------------------------- | ||
CPM Filter ACLs | ||
-------------------------------------------------------------------------------------- | ||
ipv4-entries: 38 | ||
ipv6-entries: 39 | ||
mac-entries : 0 | ||
-------------------------------------------------------------------------------------- | ||
Capture Filter ACLs | ||
-------------------------------------------------------------------------------------- | ||
ipv4-entries: 0 | ||
ipv6-entries: 0 | ||
-------------------------------------------------------------------------------------- | ||
IPv4 Filter ACLs | ||
-------------------------------------------------------------------------------------- | ||
Filter : ip_tcp | ||
Active On: 1 subinterfaces (input) and 0 subinterfaces (output) | ||
Entries : 1 | ||
-------------------------------------------------------------------------------------- | ||
IPv6 Filter ACLs | ||
-------------------------------------------------------------------------------------- | ||
-------------------------------------------------------------------------------------- | ||
MAC Filter ACLs | ||
-------------------------------------------------------------------------------------- | ||
A:srl-a# show acl ipv4-filter ip_tcp | ||
====================================================================================== | ||
Filter : ip_tcp | ||
SubIf-Specific: disabled | ||
Entry-stats : no | ||
Entries : 1 | ||
-------------------------------------------------------------------------------------- | ||
Subinterface Input Output | ||
ethernet-1/1.10 yes no | ||
-------------------------------------------------------------------------------------- | ||
Entry 100 | ||
Match : protocol=tcp, any(*)->any(*) | ||
Action : accept | ||
Input Match Packets : 0 | ||
Input Last Match : never | ||
Output Match Packets: 0 | ||
Output Last Match : never | ||
TCAM Entries : 2 for one subinterface and direction | ||
-------------------------------------------------------------------------------------- | ||
``` | ||
|
||
```srl | ||
A:srl-a# show acl ipv4-filter ip_tcp entry 100 subinterface ethernet-1/1.10 | ||
====================================================================================== | ||
Filter : ip_tcp | ||
SubIf-Specific: disabled | ||
Entry-stats : no | ||
Entries : 1 | ||
-------------------------------------------------------------------------------------- | ||
Subinterface Input Output | ||
ethernet-1/1.10 yes no | ||
-------------------------------------------------------------------------------------- | ||
Entry 100 | ||
Match : protocol=tcp, any(*)->any(*) | ||
Action : accept | ||
Input Match Packets : 0 | ||
Output Match Packets: 0 | ||
TCAM Entries : 2 for one subinterface and direction | ||
-------------------------------------------------------------------------------------- | ||
``` | ||
|
||
## ACL Logging | ||
|
||
```srl | ||
A:srl-a# info system logging file acl-log-1 | ||
system { | ||
logging { | ||
file acl-log-1 { | ||
directory /var/log/srlinux/file/ | ||
rotate 5 | ||
size 1M | ||
subsystem acl { | ||
} | ||
} | ||
} | ||
A:srl-a# info acl ipv4-filter ip_tcp | ||
acl { | ||
ipv4-filter ip_tcp { | ||
entry 100 { | ||
action { | ||
drop { | ||
log true | ||
} | ||
} | ||
match { | ||
protocol tcp } | ||
``` |
File renamed without changes.
File renamed without changes.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,35 @@ | ||
--- | ||
comments: true | ||
title: Show commands for ACL | ||
--- | ||
|
||
# CPM | ||
|
||
## CPM Filter Status | ||
|
||
```srl | ||
A:srl-a# show acl cpm-filter ipv4-filter | ||
============================================================================================= | ||
Filter : CPM IPv4-filter | ||
Entry-stats: yes | ||
Entries : 38 | ||
--------------------------------------------------------------------------------------------- | ||
Entry 10 | ||
Match : protocol=icmp, any(*)->any(*) | ||
Action : accept | ||
Matched Packets: 0 | ||
Last Match : never | ||
TCAM Entries : 12 | ||
Entry 20 | ||
Match : protocol=icmp, any(*)->any(*) | ||
Action : accept | ||
Matched Packets: 0 | ||
Last Match : never | ||
TCAM Entries : 2 | ||
Entry 30 | ||
Match : protocol=icmp, any(*)->any(*) | ||
Action : accept | ||
Matched Packets: 0 | ||
Last Match : never | ||
TCAM Entries : 2 | ||
``` |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,29 @@ | ||
--- | ||
comments: true | ||
title: Show commands for DHCP Relay | ||
--- | ||
|
||
# DHCP Relay | ||
|
||
## DHCP Relay Status | ||
|
||
```srl | ||
A:srl-b# info from state interface ethernet-1/1 subinterface 1 ipv4 dhcp-relay | ||
interface ethernet-1/1 { | ||
subinterface 1 { | ||
ipv4 { | ||
dhcp-relay { | ||
admin-state enable | ||
oper-state down | ||
gi-address 192.168.101.1 | ||
use-gi-addr-as-src-ip-addr true | ||
option [ | ||
circuit-id | ||
remote-id | ||
] | ||
server [ | ||
172.16.32.1 | ||
172.16.64.1 | ||
] | ||
} | ||
``` |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,224 @@ | ||
--- | ||
comments: true | ||
title: Show commands for EVPN | ||
--- | ||
|
||
# EVPN | ||
|
||
## L2 EVPN BGP Commands | ||
|
||
Checking Route Type 3 in the underlay: | ||
|
||
```srl | ||
A:srl-b# /show network-instance default protocols bgp routes evpn route-type 3 detail | ||
-------------------------------------------------------------------------------------- | ||
Show report for the EVPN routes in network-instance "default" | ||
-------------------------------------------------------------------------------------- | ||
Route Distinguisher: 10.1.1.1:111 | ||
Tag-ID : 0 | ||
Originating router : 10.1.1.1 | ||
neighbor : 10.1.1.1 | ||
Received paths : 1 | ||
Path 1: <Best,Valid,Used,> | ||
VNI : 1 | ||
Route source : neighbor 10.1.1.1 (last modified 50s ago) | ||
Route preference: No MED, LocalPref is 100 | ||
Atomic Aggr : false | ||
BGP next-hop : 10.1.1.1 | ||
AS Path : i | ||
Communities : [target:65000:1, bgp-tunnel-encap:VXLAN] | ||
RR Attributes : No Originator-ID, Cluster-List is [] | ||
Aggregation : None | ||
Unknown Attr : None | ||
Invalid Reason : None | ||
Tie Break Reason: none | ||
-------------------------------------------------------------------------------------- | ||
``` | ||
|
||
Checking Route Type 2 in the underlay: | ||
|
||
```srl | ||
A:leaf1# show network-instance default protocols bgp routes evpn route-type 2 summary | ||
-------------------------------------------------------------------------------------- | ||
BGP Router ID: 192.0.2.3 AS: 65003 Local AS: 65003 | ||
-------------------------------------------------------------------------------------- | ||
Type 2 MAC-IP Advertisement Routes | ||
+--------+------------------+---------+-------------------+------------+-----------+-- | ||
| Status | Route- | Tag-ID | MAC-address | IP-address | neighbor | Next-Hop | VNI | ESI | MAC Mobility | | ||
| | distinguisher | | | | | | ||
+========+==================+=========+===================+============+===========+== | ||
| u*> | 192.0.2.4:1 | 0 | 00:00:00:00:00:02 | 0.0.0.0 | 192.0.2.1 | 192.0.2.4 | 1 | 00:00:00:00:00:00:00:00:00:00 | - | | ||
| u*> | 192.0.2.5:1 | 0 | 00:00:00:00:00:03 | 0.0.0.0 | 192.0.2.1 | 192.0.2.5 | 1 | 00:00:00:00:00:00:00:00:00:00 | - | | ||
+--------+------------------+---------+-------------------+------------+-----------+-- | ||
``` | ||
|
||
## L2 EVPN MAC Table | ||
|
||
A:leaf1# show network-instance mac_vrf_1 bridge-table mac-table all | ||
+--------------------+-------------------------------------- ----------------+-------- | ||
| Address | Destination | Dest Index | Type | Active | Aging | Last Update | | ||
+====================+======================================================+========= | ||
| 00:00:00:00:00:01 | ethernet-1/36.300 | 7 | learnt | true | 263 | 2021-05-04T13:56:25.000Z | 00:00:00:00:00:02 | vxlan-interface:vxlan1.1 vtep:192.0.2.4 vni:1 | 718427846823 | evpn | true | N/A | 2021-05-04T13:43:48.000Z | ||
| 00:00:00:00:00:03 | vxlan-interface:vxlan1.1 vtep:192.0.2.5 vni:1 | 718427846825 | evpn | true | N/A | 2021-05-04T14:04:39.000Z | ||
+--------+------------------+---------+-------------------+------------+-----------+-- | ||
|
||
## L3 EVPN-VxLAN Asymmetric | ||
|
||
```srl | ||
A:srl-a# /show network-instance mac-vrf-14 bridge-table mac-table all | ||
-------------------------------------------------------------------------------------- | ||
Mac-table of network instance mac-vrf-14 | ||
-------------------------------------------------------------------------------------- | ||
+-------------------+----------------------------+-----------+--------+--------+------ | ||
| Address | Destination | Dest | Type | Active | Aging | Last Update | | ||
| | | Index | | | | ||
+===================+============================+===========+========+========+====== | ||
| 00:00:5E:00:01:01 | irb | 0 | irb-in | true | N/A | 2023-04-14T19:54:11.000Z | | ||
| | | | terfac | | | | | ||
| | | | e-anyc | | | | | ||
| | | | ast | | | | | ||
| 1A:4E:01:FF:00:43 | vxlan-interface:vxlan1.14 | 6986941 | evpn- | true | N/A | 2023-04-14T20:02:11.000Z | | ||
| | vtep:10.1.1.2 vni:14 | | static | | | | | ||
| 1A:B5:00:FF:00:43 | irb | 0 | irb-in | true | N/A | 2023-04-14T19:54:11.000Z | | ||
| | | | terface | | | ||
+-------------------+----------------------------+-----------+--------+--------+------ | ||
``` | ||
|
||
```srl | ||
A:srl-a# /show network-instance ip-vrf-15 route-table all | ||
-------------------------------------------------------------------------------------- | ||
IPv4 unicast route table of network instance ip-vrf-15 | ||
-------------------------------------------------------------------------------------- | ||
+-------------+------+-----------+---------------------+---------------------+-------- | ||
| Prefix | ID | Route | Route Owner | Active | Metric | Pref | Next- | Next- | | ||
| | | Type | | | | | hop | hop In | | ||
| | | | | | | | (Type) | terfac | | ||
| | | | | | | | | e | | ||
+=============+======+===========+=====================+=====================+======== | ||
| 13.1.1.0/24 | 7 | local | net_inst_mgr | True | 0 | 0 | 13.1.1 | irb2.1 | | ||
| | | | | | | | .250 ( | 3 | | ||
| | | | | | | | direct | | | ||
| 13.1.1.250/ | 7 | host | net_inst_mgr | True | 0 | 0 | None ( | None | | ||
| 32 | | | | | | | extrac | | | ||
| | | | | | | | t) | | | ||
+-------------+------+-----------+---------------------+---------------------+-------- | ||
``` | ||
|
||
## L3VPN-VxLAN IFL BGP Commands | ||
|
||
Checking Route Type 5 in the underlay: | ||
|
||
```srl | ||
A:srl-b# show network-instance default protocols bgp routes evpn route-type 5 summary | ||
-------------------------------------------------------------------------------------- | ||
Show report for the BGP route table of network-instance "default" | ||
-------------------------------------------------------------------------------------- | ||
Status codes: u=used, *=valid, >=best, x=stale | ||
Origin codes: i=IGP, e=EGP, ?=incomplete | ||
-------------------------------------------------------------------------------------- | ||
BGP Router ID: 10.10.10.2 AS: 65003 Local AS: 65003 | ||
-------------------------------------------------------------------------------------- | ||
Type 5 IP Prefix Routes | ||
+--------+--------------+------------+---------------------+--------------+----------- | ||
| Status | Route-distin | Tag-ID | IP-address | neighbor | Next-Hop | VNI | Gateway | | ||
| | guisher | | | | | ||
+========+==============+============+=====================+==============+=========== | ||
| u*> | 10.1.1.1:10 | 0 | 10.1.1.0/24 | 10.1.1.1 | 10.1.1.1 | 10 | 0.0.0.0 | | ||
| u*> | 10.1.1.1:10 | 0 | 11.1.1.0/24 | 10.1.1.1 | 10.1.1.1 | 10 | 0.0.0.0 | | ||
+--------+--------------+------------+---------------------+--------------+----------- | ||
-------------------------------------------------------------------------------------- | ||
2 IP Prefix routes 2 used, 2 valid | ||
-------------------------------------------------------------------------------------- | ||
``` | ||
|
||
```srl | ||
A:srl-b# show network-instance default protocols bgp routes evpn route-type 5 prefix 11.1.1.0/24 detail | ||
-------------------------------------------------------------------------------------- | ||
Show report for the EVPN routes in network-instance "default" | ||
-------------------------------------------------------------------------------------- | ||
Route Distinguisher: 10.1.1.1:10 | ||
Tag-ID : 0 | ||
ip-prefix-len : 24 | ||
ip-prefix : 11.1.1.0/24 | ||
neighbor : 10.1.1.1 | ||
Gateway IP : 0.0.0.0 | ||
Received paths : 1 | ||
Path 1: <Best,Valid,Used,> | ||
ESI : 00:00:00:00:00:00:00:00:00:00 | ||
VNI : 10 | ||
Route source : neighbor 10.1.1.1 (last modified 8m20s ago) | ||
Route preference: No MED, LocalPref is 100 | ||
Atomic Aggr : false | ||
BGP next-hop : 10.1.1.1 | ||
AS Path : i | ||
Communities : [target:65000:10, mac-nh:1a:b5:00:ff:00:00, bgp-tunnel-encap:VXLAN] | ||
RR Attributes : No Originator-ID, Cluster-List is [] | ||
Aggregation : None | ||
Unknown Attr : None | ||
Invalid Reason : None | ||
Tie Break Reason: none | ||
-------------------------------------------------------------------------------------- | ||
``` | ||
|
||
## VxLAN Tunnel Status | ||
|
||
```srl | ||
A:srl-b# /show network-instance default tunnel-table all | ||
-------------------------------------------------------------------------------------- | ||
IPv4 tunnel table of network-instance "default" | ||
-------------------------------------------------------------------------------------- | ||
+----------+----------+----------+----------+----------+----------+----------+-------- | ||
| IPv4 | Encaps | Tunnel | Tunnel | FIB | Metric | Preferen | Last | Next-hop | Next-hop | | ||
| Prefix | Type | Type | ID | | | ce | Update | (Type) | | | ||
+==========+==========+==========+==========+==========+==========+==========+======== | ||
| 10.1.1.1 | vxlan | vxlan | 1 | Y | 0 | 0 | 2023-04- | 192.168. | ethernet | | ||
| /32 | | | | | | | 12T13:22 | 10.1 | -1/1.10 | | ||
| | | | | | | | :27.649Z | (direct) | | | ||
+----------+----------+----------+----------+----------+----------+----------+-------- | ||
-------------------------------------------------------------------------------------- | ||
1 VXLAN tunnels, 1 active, 0 inactive | ||
-------------------------------------------------------------------------------------- | ||
``` | ||
|
||
## VxLAN Tunnel Statistics | ||
|
||
```srl | ||
A:srl-b# info from state /tunnel vxlan-tunnel | ||
tunnel { | ||
vxlan-tunnel { | ||
vtep 10.1.1.1 { | ||
index 6986915 | ||
last-change "20 minutes ago" | ||
statistics { | ||
in-octets 0 | ||
in-packets 0 | ||
in-discarded-packets 0 | ||
out-octets 0 | ||
out-packets 0 | ||
out-discarded-packets 0 | ||
} | ||
} | ||
statistics { | ||
in-octets 0 | ||
in-packets 0 | ||
in-discarded-packets 0 | ||
out-octets 0 | ||
out-packets 0 | ||
} | ||
} | ||
} | ||
``` |
Oops, something went wrong.