Skip to main content

Welcome

Dell Sites

Dell Technologies
Premier Sign In
Partner Program Sign In
Support

Dell Sites

Dell Technologies
Premier Sign In
Partner Program Sign In
Support

Welcome to Dell

My Account

Place orders quickly and easily
View orders and track your shipping status
Create and access a list of your products
Manage your Dell EMC sites, products, and product-level contacts using Company Administration.

Sign In Create an Account Premier Sign In Partner Program Sign In

Your Dell.com Carts

Products
Solutions
Services
Contact Us

Support
Product Support
Manuals

Dell SmartFabric OS10 User Guide Release 10.5.4

Notes, cautions, and warnings
About this guide
- Conventions
- Related Documents
- Documentation Feedback
Change history
Getting Started with Dell SmartFabric OS10
- Switch deployment options
- Remote access
- HTTPS support for HTTP services
  - Updating HTTP certificates
- Scheduled reload
  - Scheduled reload use cases
  - Scheduled reload commands
- Clean reset
  - Configure clean reset
  - Clean reset commands
    - clean-reset
    - show clean-reset status
CLI Basics
- CONFIGURATION mode
- Check device status
- Command help
- Candidate configuration
- Copy running configuration
- Restore startup configuration
- Reload system image
- Filter show commands
- Common OS10 commands
Advanced CLI tasks
- Command alias
- Batch mode
  - batch
- Linux shell commands
- Using OS9 commands
  - feature config-os9-style
Dell SmartFabric OS10 zero-touch deployment
- ZTD DHCP server configuration
- ZTD provisioning script
- ZTD CLI batch file
- Post-ZTD script
- ZTD commands
Dell SmartFabric OS10 provisioning
- Using Ansible
- Example: Configure an OS10 switch using Ansible
System management
- Network load balancing
- System banners
- User session management
  - User session management commands
- Telnet server
  - Telnet commands
    - ip telnet server enable
    - ip telnet server vrf
- Simple Network Management Protocol
- System clock
  - Time zones and UTC offset reference
  - System Clock commands
- Network Time Protocol
- Precision Time Protocol
- Synchronous Ethernet (SyncE)
- Dynamic Host Configuration Protocol
- Containers
- Low Latency Modes
  - Low Latency Modes CLI commands
    - show switching-mode
    - switching-mode cut-through
Interfaces
- Ethernet interfaces
- Unified port groups
- Z9264F-ON port-group profiles
- Port-groups on S5200F-ON switches
- L2 mode configuration
- L3 mode configuration
- Fibre Channel interfaces
  - Configuring wavelength
- Management interface
  - Management interface
- VLAN interfaces
- User-configured default VLAN
- VLAN scale profile
- Loopback interfaces
- Port-channel interfaces
  - Create port-channel
  - Add port member
  - Minimum links
  - Assign Port Channel IP Address
  - Remove or disable port-channel
  - Load balance traffic
  - Change hash algorithm
- Configure interface ranges
- Support for north-bound external interfaces
- Switch-port profiles
  - S4148-ON Series port profiles
  - S4148U-ON port profiles
- Configure negotiation modes on interfaces
- Configure breakout mode
- Breakout auto-configuration
- Reset default configuration
- Forward error correction
- Energy-efficient Ethernet
  - Enable energy-efficient Ethernet
  - Clear EEE counters
  - View EEE status/statistics
  - EEE commands
- View interface configuration
- Viewing journal logs
- High-power optical modules
  - High-power optical module commands
    - allow high-wattage-optics
    - show inventory media wattage
- Digital optical monitoring
  - Enable DOM and DOM traps
- Default MTU Configuration
- Configure polling interval for Ethernet interface counters
- Interface commands
  - channel-group
  - default interface
  - default mtu
  - default vlan-id
  - description (Interface)
  - duplex
  - enable dom
  - enable dom traps
  - feature auto-breakout
  - fec
  - interface breakout
  - interface ethernet
  - interface loopback
  - interface mgmt
  - interface null
  - interface port-channel
  - interface range
  - interface vlan
  - hardware l2 host-mode wide
  - link-bundle-utilization
  - link-bundle-monitor
  - mode
  - mode l3
  - mtu
  - negotiation
  - no switchport access vlan
  - port mode Eth
  - port-group
  - profile
  - scale-profile vlan
  - show default mtu
  - show hardware l2 host-mode
  - show interface
  - show interface description
  - show interface phy-eth
  - show interface switchport
  - show inventory media
  - show inventory media details
  - show link-bundle-utilization
  - show port-channel summary
  - show port-group
  - show switch-port-profile
  - show system
  - show vlan
  - shutdown
  - speed (Fibre Channel)
  - speed (Management)
  - stats-monitor
  - switch-port-profile
  - switchport access vlan
  - switchport mode
  - switchport trunk allowed vlan
  - wavelength
Fibre Channel
- Fibre Channel over Ethernet
  - Configure FIP snooping
- Terminology
- Virtual fabric
- Fibre Channel zoning
- F_Port on Ethernet
- Pinning FCoE traffic to a specific port of a port-channel
- Multiswitch fabric (E Port)
- Multi-hop FIP-snooping bridge
- Configuration guidelines
- NPIV Proxy Gateway cascading
- Support for untagged VLAN in FCoE
- Single FCF per vFabric
- F_Port commands
- NPG commands
- F_Port and NPG commands
- FIP-snooping commands
- FCoE commands
- Debug FC commands
  - debug fc
  - show debug fc
Layer 2
- 802.1X
- Far-end failure detection
- Link Aggregation Control Protocol
- Link Layer Discovery Protocol
- Media Access Control
- Spanning-tree protocol
- Virtual LANs
- Private VLANs
- Port monitoring
Layer 3
- Virtual routing and forwarding
- Bidirectional Forwarding Detection
- Border Gateway Protocol
- Equal cost multi-path
- IPv4 routing
- IPv6 routing
- Open shortest path first
- Object tracking manager
- Policy-based routing
- Virtual Router Redundancy Protocol
Multicast
- Important notes
- Configure multicast routing
- Multicast route optimization
- Multicast Commands
  - ip multicast-routing
- IPv4 multicast routing
- IPv6 multicast routing
- IPv4 multicast traffic reduction
- IPv6 multicast traffic reduction
  - Multicast Listener Discovery Protocol
    - MLD snooping
    - MLD snooping commands
VXLAN
- VXLAN concepts
- VXLAN as NVO solution
- Configure VXLAN
- L3 VXLAN route scaling
- DHCP relay on VTEPs
- View VXLAN configuration
- VXLAN MAC addresses
- VXLAN commands
- VXLAN MAC commands
- Example: VXLAN with static VTEP
- BGP EVPN for VXLAN
UFT modes
- Configure UFT modes
  - IPv6 extended prefix routes
- UFT commands
Security
- Switch security
- Network security
OpenFlow
- OpenFlow logical switch instance
- OpenFlow controller
- OpenFlow version 1.3
- OpenFlow use cases
- Configure OpenFlow
  - Establish TLS connection
- OpenFlow commands
- OpenFlow-only mode commands
Access Control Lists
- IP ACLs
- MAC ACLs
- Control-plane ACLs
  - Control-plane ACL qualifiers
- IP fragment handling
- L3 ACL rules
- Assign sequence number to filter
- Delete ACL rule
- L2 and L3 ACLs
- Assign and apply ACL filters
- Ingress ACL filters
- Egress ACL filters
- VTY ACLs
- SNMP ACLs
- Clear access-list counters
- IP prefix-lists
- Route-maps
- Match routes
- Set conditions
- Continue clause
- ACL flow-based monitoring
- Enable flow-based monitoring
- View ACL table utilization report
  - Known behavior
- ACL logging
  - Important notes
  - IP ACL logging
  - Control-plane management ACL logging
- ACL commands
  - clear ip access-list counters
  - clear ipv6 access-list counters
  - clear mac access-list counters
  - deny
  - deny (IPv6)
  - deny (MAC)
  - deny icmp
  - deny icmp (IPv6)
  - deny ip
  - deny ipv6
  - deny tcp
  - deny tcp (IPv6)
  - deny udp
  - deny udp (IPv6)
  - description
  - ip access-group
  - ip access-list
  - ip as-path access-list
  - ip community-list standard deny
  - ip community–list standard permit
  - ip extcommunity-list standard deny
  - ip extcommunity-list standard permit
  - ip prefix-list description
  - ip prefix-list deny
  - ip prefix-list permit
  - ip prefix-list seq deny
  - ip prefix-list seq permit
  - ipv6 access-group
  - ipv6 access-list
  - ipv6 prefix-list deny
  - ipv6 prefix-list description
  - ipv6 prefix-list permit
  - ipv6 prefix-list seq deny
  - ipv6 prefix-list seq permit
  - logging access-list mgmt burst
  - logging access-list mgmt rate
  - mac access-group
  - mac access-list
  - permit
  - permit (IPv6)
  - permit (MAC)
  - permit icmp
  - permit icmp (IPv6)
  - permit ip
  - permit ipv6
  - permit tcp
  - permit tcp (IPv6)
  - permit udp
  - permit udp (IPv6)
  - remark
  - seq deny
  - seq deny (IPv6)
  - seq deny (MAC)
  - seq deny icmp
  - seq deny icmp (IPv6)
  - seq deny ip
  - seq deny ipv6
  - seq deny tcp
  - seq deny tcp (IPv6)
  - seq deny udp
  - seq deny udp (IPv6)
  - seq permit
  - seq permit (IPv6)
  - seq permit (MAC)
  - seq permit icmp
  - seq permit icmp (IPv6)
  - seq permit ip
  - seq permit ipv6
  - seq permit tcp
  - seq permit tcp (IPv6)
  - seq permit udp
  - seq permit udp (IPv6)
  - show access-group
  - show access-lists
  - show acl-table-usage detail
  - show control-plane logging
  - show ip as-path-access-list
  - show ip prefix-list
  - show logging access-list
- Route-map commands
  - continue
  - match as-path
  - match community
  - match extcommunity
  - match inactive-path-additive
  - match interface
  - match ip address
  - match ip next-hop
  - match ipv6 address
  - match ipv6 next-hop
  - match metric
  - match origin
  - match route-type
  - match tag
  - route-map
  - set comm-list add
  - set comm-list delete
  - set community
  - set extcomm-list add
  - set extcomm-list delete
  - set extcommunity
  - set local-preference
  - set metric
  - set metric-type
  - set next-hop
  - set origin
  - set tag
  - set weight
  - show route-map
Quality of service
- Classification
  - Data traffic classification
  - Control-plane policing
- Marking Traffic
- Queuing
- Policing traffic
- Coloring traffic
- Modifying packet fields
- Shaping traffic
- Bandwidth allocation
- Strict priority queuing
- Rate adjustment
- Configure quality of service
- Example 1: Traffic classification and bandwidth allocation in VXLAN topology using CoS value
- Example 2: Traffic classification and bandwidth allocation in VXLAN topology using CoS value on access ports and DSCP value on network ports
- Buffer management
  - Configure ingress buffer
  - Configure egress buffer
  - Deep Buffer mode
    - Configure Deep Buffer mode
- Congestion avoidance
- Storm control
- RoCE for faster access and lossless connectivity
  - Configure RoCE on the switch
  - RoCE for VXLAN over VLT
  - Buffer statistics tracking
- Port to port-pipe and MMU mapping
- QoS VXLAN usecases
- QoS VXLAN examples
- QoS commands
  - bandwidth
  - buffer-statistics-tracking
  - class
  - class-map
  - clear qos statistics
  - clear qos statistics type
  - control-plane
  - control-plane-buffer-size
  - flowcontrol
  - hardware deep-buffer-mode
  - match
  - match cos
  - match dscp
  - match precedence
  - match queue
  - match vlan
  - mtu
  - pause
  - pfc-cos
  - pfc-max-buffer-size
  - pfc-shared-buffer-size
  - pfc-shared-headroom-buffer-size
  - police
  - policy-map
  - priority
  - priority-flow-control mode
  - qos-group dot1p
  - qos-group dscp
  - qos-map traffic-class
  - qos-rate-adjust
  - queue-limit
  - queue bandwidth
  - queue qos-group
  - queue qos-group (Z9332F-ON)
  - random-detect (interface)
  - random-detect (queue)
  - random-detect color
  - random-detect ecn
  - random-detect ecn
  - random-detect pool
  - random-detect weight
  - service-policy
  - set cos
  - set dscp
  - set qos-group
  - shape
  - show class-map
  - show control-plane buffers
  - show control-plane buffer-stats
  - show control-plane info
  - show control-plane statistics
  - show hardware deep-buffer-mode
  - show interface priority-flow-control
  - show qos interface
  - show policy-map
  - show qos control-plane
  - show qos egress buffers interface
  - show qos egress buffer-statistics-tracking
  - show qos egress buffer-stats interface
  - show qos headroom-pool buffer-statistics-tracking
  - show qos ingress buffers interface
  - show qos ingress buffer-statistics-tracking
  - show qos ingress buffer-stats interface
  - show qos maps
  - show qos maps (Z9332F-ON)
  - show qos port-map details
  - show qos-rate-adjust
  - show qos service-pool buffer-statistics-tracking
  - show qos system
  - show qos system buffers
  - show qos wred-profile
  - show queuing statistics
  - system qos
  - trust dot1p-map
  - trust dscp-map
  - trust-map
  - wred
Virtual Link Trunking
- Terminology
- VLT domain
- VLT interconnect
- Graceful LACP with VLT
- Configure VLT
- Configure VRRP Active-Active mode
- Migrate VMs across data centers with eVLT
- View VLT information
- Guidelines for VLT Hardware upgrade or replacement
- Delay-restore for orphan ports
  - Configuring delay-restore port - non-VLT
  - Configuring delay-restore orphan port in VLT domain
- Example: Configure RSPAN in VLT network
- BFD in VLT Domain
  - Sample BFD configuration in VLT domain
- PBR in VLT Domain
- VLT commands
Uplink Failure Detection
- Configure uplink failure detection
- Uplink failure detection on VLT
  - Sample configurations of UFD on VLT
- UFD commands
Converged data center services
- Priority flow control
- Enhanced transmission selection
- Data center bridging eXchange
- Internet small computer system interface
- Converged network DCB example
sFlow®
- Enable sFlow®
- Max-header size configuration
- Collector configuration
- Polling-interval configuration
- Sample-rate configuration
- Source interface configuration
- View sFlow® information
- sFlow® commands
Telemetry
- Telemetry terminology
- YANG-modeled telemetry data
- Configure telemetry
- View telemetry configuration
- Telemetry client authentication using TLS
- Telemetry commands
- Example: Configure streaming telemetry
RESTCONF API
- Configure RESTCONF API
- RESTCONF request of CLI command
  - Obtain RESTCONF API documentation from OS10
  - Translated RESTCONF requests example
- REST Token-Based Authentication
- CLI commands for RESTCONF API
- RESTCONF API tasks
  - View XML structure of CLI commands
  - RESTCONF API Examples
    - System
    - Interface
Troubleshoot Dell SmartFabric OS10
- Diagnostic tools
- Recover Linux password
- Recover OS10 user name password
- Restore factory defaults
- SupportAssist
- Support bundle
- System monitoring
- Monitor CPU Utilization
  - CPU Utilization commands
- Monitor Memory Utilization
  - Memory Utilization commands
- Log into OS10 device
- Frequently asked questions
Support resources

PDF

Loading, Please wait

show switchport port-security

Displays port security information of interfaces.

Syntax

show switchport port-security [interface {ethernet node/slot/port[:subport] | port-channel port-channel-number}]

Parameters

interface — Displays the interface type:
- ethernet node/slot/port[:subport] — Displays the port security information of an Ethernet interface.
- port-channel channel-number — Displays the port security information of an Ethernet interface. Valid values are from 1 to 999 or 1001 to 2000.

Default

None

Command Mode

EXEC

Usage Information

This command displays port security information of all interfaces.

Example (Address)

OS10# show switchport port-security

Global Port-security status        :Enable

Interface name                     : ethernet1/1/1

Port Security                      :Enabled
Port Status                        :Error-Disable (MLL violation)
Mac Learning                       :Disabled
Mac-learn-disable-violation action :Log
Mac learn limit                    :100
MAC-learn-limit-Violation action   :Shutdown
Sticky                             :Disabled  
Mac-move-allow                     :Not Allowed
mac-move-violation action          :shutdown-both
Aging                              :Enabled
Total MAC Addresses                :10
Secure static MAC Addresses        :0
Sticky MAC Addresses               :0
Secure Dynamic MAC addresses       :10

Interface name                     : ethernet1/1/10

Port Security                      :Enabled
Port Status                        :Error-Disable (Mac movement violation)
Mac Learning                       :Enabled
Mac-learn-disable-violation action :Drop
Mac learn limit                    :100
MAC-learn-limit-Violation action   :Shutdown
Sticky                             :Enabled  
Mac-move-allow                     :Not Allowed
mac-move-violation action          :shutdown-both
Aging                              :Enabled
Total MAC Addresses                :11
Secure static MAC Addresses        :0
Sticky MAC Addresses               :11
Secure Dynamic MAC addresses       :0

OS10# show switchport port-security interface ethernet 1/1/1

Global Port-security status        :Enable

Interface name                     : ethernet1/1/1

Port Security                      :Enabled
Port Status                        :Error-Disable
Mac Learning                       :Disabled
Mac-learn-disable-violation action :Drop
Mac-learn-limit                    :1024
Mac-learn-limit-Violation Action   :Shutdown
Sticky                             :Enabled
Mac-move-allow                     :Not Allowed
Mac-move-violation                 :shutdown-both
Aging                              :Disabled
Total MAC Addresses                :10
Secure static MAC Addresses        :0
Sticky MAC Addresses               :10
Secure Dynamic MAC addresses       :0

OS10# show switchport port-security interface port-channel 120

Interface name                     :port-channel 120

Port Security                      :Disabled
Port Status                        :Up
Mac Learning                       :Enabled
Mac-learn-disable-violation action :Shutdown
mac-learning-limit                 :1024
Mac-learn-limit-Violation Action   :Flood
Sticky                             :Enabled
Mac-move-allow                     :Allowed
Mac-move-violation                 :shutdown-offending
Aging                              :Disabled
Total MAC Addresses                :11
Secure static MAC Addresses        :0
Sticky MAC Addresses               :11
Secure Dynamic MAC addresses       :0

Supported Releases

10.5.1.0 or later

Data is not available for the Topic

Rate this content

All fields are required unless marked otherwise.

Accurate

not accurate

somewhat accurate

mostly accurate

accurate

very accurate

Useful

not useful

somewhat useful

mostly useful

useful

very useful

Easy to understand

not easy

somewhat easy

mostly easy

easy

very-easy

Was this article helpful?

Yes

No

Send us feedback (Optional)

0/3000 characters

Comments cannot contain these special characters: <>()\

Sorry, our feedback system is currently down. Please try again later.

Thank you for your feedback.

Please provide ratings (1-5 stars).

Please provide ratings (1-5 stars).

Please provide ratings (1-5 stars).

Please select whether the article was helpful or not.

Comments cannot contain these special characters: <>()\

Account

My Account
Order Status
Profile Settings
My Products

Support

Support Home
Contact Technical Support
Returns

Connect with Us

Community
Contact Us

Our Offerings

Artificial Intelligence
Products
Solutions
Services
Deals

Our Company

Who We Are
Careers
Dell Technologies Capital
Investors
Newsroom
Perspectives
Recycling
ESG & Impact
Customer Stories

Our Partners

Find a Partner
OEM Solutions
Partner Program

Resources

Blog
Dell Rewards
Events
Email Sign-Up
Dell Learning Centre
Privacy Centre
Resource Library
Security & Trust Centre
Trial Software Downloads

Dell Technologies
Dell Premier

Copyright © 2024 Dell Inc.
Terms of Sale
Privacy Statement
Legal & Regulatory
Accessibility