The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
This chapter describes the Cisco Nexus 1000V commands that begin with M.
To create a MAC ACL, use the mac access-list command. To remove the MAC ACL, use the no form of this command.
|
|
This example shows how to create a MAC ACL:
n1000v#
configure terminal
n1000v(config)#
mac access-list aL1
n1000v(config)#
|
|
---|---|
To configure the aging time for entries in the Layer 2 table, use the mac address-table aging-time command. To return to the default settings, use the no form of this command.
mac address-table aging-time seconds [ vlan vlan-id ]
no mac address-table aging-time [ vlan vlan-id ]
|
|
Enter 0 seconds to disable the aging process.
The age value may be rounded off to the nearest multiple of 5 seconds. If the system rounds the value to a different value from that specified by the user (from the rounding process), the system returns an informational message.
When you use this command in the global configuration mode, the age values of all VLANs for which a configuration has not been specified are modified and those VLANs with specifically modified aging times are not modified. When you use the no form of this command without the VLAN parameter, only those VLANs that have not been specifically configured for the aging time reset to the default value. Those VLANs with specifically modified aging times are not modified.
When you use this command and specify a VLAN, the aging time for only the specified VLAN is modified. When you use the no form of this command and specify a VLAN, the aging time for the VLAN is returned to the current global configuration for the aging time, which may or may not be the default value of 300 seconds depending if the global configuration of the device for aging time has been changed.
Aging time is counted from the last time that the switch detected the MAC address.
This example shows how to change the length of time an entry remains in the MAC address table to 500 seconds for the entire device:
n1000v(config)#
mac address-table aging-time 500
n1000v(config)#
|
|
---|---|
To add a static entry to the Layer 2 MAC address table, use the mac address-table static command. To delete the static entry, use the no form of this command.
mac address-table static mac-address vlan vlan-id { interface { interface-name } + | drop } [ auto-learn ]
no mac address-table static mac-address vlan vlan-id
|
|
This command was modified to remove the port channel option. |
|
You cannot apply the mac address-table static mac-address vlan vlan-id drop command to a multicast MAC address.
The output interface specified cannot be a VLAN interface or a Switched Virtual Interface (SVI).
Use the no form to remove entries that are profiled by the combination of specified entry information.
This example shows how to add a static entry to the MAC address table:
n1000v# confi t
n1000v(config)#
mac address-table static 0050.3e8d.6400 vlan 3 interface ethernet 2/1
n1000v(config)#
|
|
---|---|
To toggle the auto-mac-learning state on vEthernet interface, use the mac auto-static-learn command. To disable the auto-mac-learning state, use the no form of this command.
Interface configuration (config-if)
Port profile configuration (config-port-profile)
|
|
This example shows how to configure the auto-mac-learning state on vEth1:
|
|
---|---|
Adds a static MAC address in the Layer 2 MAC address table and saves it in the running configuration. |
To enable access control for port groups, use the mac port access-group command. To disable access control for port groups, use the no form of this command.
mac port access-group name { in | out }
no mac port access-group name { in | out }
Port profile configuration (config-port-prof)
|
|
This example shows how to enable access control for port groups:
|
|
---|---|
To define ACL matching criteria, use the match command. To remove matching criteria, use the no form of this command.
match {{ access-group name name } | {[ not ] cos cos-list } | {[ not ] dscp { dscp-list | dscp-enum } + } | {[ not ] precedence { precedence-list | prec-enum } + } | {[ not ] discard-class discard-class-list } | {[ not ] qos-group qos-group-list } | {[ not ] class-map cmap-name } | {[ not ] packet length len-list } | {[ not ] ip rtp port-list }}
no match {{ access-group name acl-name } | {[ not ] cos cos-list } | {[ not ] dscp { dscp-list | dscp-enum } + } | {[ not ] precedence { precedence-list | prec-enum } + } | {[ not ] discard-class discard-class-list } | {[ not ] qos-group qos-group-list } | {[ not ] class-map cmap-name } | {[ not ] packet length len-list } | {[ not ] ip rtp port-list }}
Class map configuration (config-cmap-qos
|
|
This example shows how to configure a class-map match criteria:
This example shows how to remove the class-map match criteria:
|
|
---|---|
To define IP matching criteria for a NetFlow flow record, use the match ip command. To remove the matching criteria, use the no form of this command.
no match ip { protocol | tos }
Flow record configuration (config-flow-record)
|
|
This example shows how to configure IP matching criteria for a NetFlow flow record and then display the result:
This example shows how to remove the IP matching criteria for a NetFlow flow record a and then display the result:
|
|
---|---|
Defines transport matching criteria for a NetFlow flow record. |
To define IPv4 matching criteria for a NetFlow flow record, use the match ipv4 command. To remove the matching criteria, use the no form of this command.
match ipv4 { source | destination } address
no match ipv4 { source | destination } address
Flow record configuration (config-flow-record)
|
|
This example shows how to configure IPv4 matching criteria for a NetFlow flow record and then display the result:
This example shows how to remove the IPv4 matching criteria for a NetFlow flow record a and then display the result:
|
|
---|---|
Defines transport matching criteria for a NetFlow flow record. |
To configure match criteria based on protocol, use the match protocol command.
Class map configuration (config-cmap-que)
|
|
The match protocol command configures a match criteria based on the specified protocol.
This example show how to set the protocol to a value of vmw_motion.
To define transport matching criteria for a NetFlow flow record, use the match transport command. To remove the matching criteria, use the no form of this command.
match transport { destination-port | source-port }
no match transport { destination-port | source-port }
Flow Record configuration (config-flow-record)
|
|
This example shows how to configure transport matching criteria for a NetFlow flow record and then display the result:
This example shows how to remove the transport matching criteria for a NetFlow flow record a and then display the result:
|
|
---|---|
To specify the maximum number of ports for a port profile, use the max-ports command. To remove the maximum ports configuration, use the no form of this command.
Specifies the maximum number of ports (1 to 1024) for a port profile. This limit is not applicable when the port binding type is static auto expand. |
Port profile configuration (config-port-prof)
|
|
This command was changed from vmware max-ports to max-ports. |
|
This example shows how to set the maximum number of ports in the testprofile port profile:
n1000v#
configure terminal
This example shows how to remove the maximum ports configuration from the testprofile port profile:
n1000v#
configure terminal
|
|
---|---|
Displays configuration information about a particular port-profile. |
|
To specify the media type of a VLAN as Ethernet, use the media command. To remove the type, use the no form of this command.
VLAN configuration (config-vlan)
|
|
This example shows how to configure media type:
n1000v#
configure terminal
n1000v(
config)#
media ethernet
n1000v(
config)#
|
|
---|---|
To create a new directory, use the mkdir command.
mkdir {bootflash: | debug: | volatile:}
|
|
This example shows how to create the bootflash: directory:
n1000v#
mkdir bootflash:
|
|
---|---|
To enter commands on the VEM remotely from the Cisco Nexus 1000V, use the module vem command.
module vem module-number execute line [line]
|
|
This example shows how to display the VEM port profile configuration remotely from the Cisco Nexus 1000V:
n1000v#
module vem 3 execute vemcmd show port-profile
This example shows how to display the VEM VSD configuration remotely from the Cisco Nexus 1000V:
|
|
---|---|
To enter the monitor configuration mode for configuring an Ethernet switch port analyzer (SPAN) session for analyzing traffic between ports, use the monitor session command.
To disable monitoring a SPAN session(s), use the no form of this command.
monitor session { session-number [ shut | type erspan-source ] | all shut }
no monitor session { session-number [ shut | type erspan-source ] | all shut }
Specifies the session number for monitoring a switched port. SPAN sessions are numbered from 1 to 64. |
|
|
|
This example shows how to enter the monitor configuration mode for configuring SPAN session number 2 for analyzing traffic between ports:
n1000v#
configuration t
n1000v(config)#
monitor session 2
n1000v(config-monitor)#
This example shows how to remove the configuration for SPAN session 2 for analyzing traffic between ports:
n1000v#
configuration t
n1000v(config)#
no
monitor session 2
n1000v(config)#
|
|
---|---|
To move a file from one directory to another, use the move command.
move [ filesystem : [ // module / ][ directory / ] | directory /] source-filename {{ filesystem :[ // module /][ directory / ] | directory / }[ destination-filename ] | target-filename }
The default name for the destination file is the same as the source filename.
|
|
---|---|
You can make a copy of a file by using the copy command.
Tip You can rename a file by moving it within the same directory.
This example shows how to move a file to another directory:
This example shows how to move a file to another file system:
This example shows how to move a file to another supervisor module:
|
|
---|---|
To set the maximum size of a transmission unit (MTU) for an interface, use the mtu command. To remove the configuration from the interface, use the no form of this command.
Specifies the maximum allowable MTU. The range is 1500 to 9000 bytes. |
Interface configuration (config-if)
Port profile configuration (config-port-prof)
|
|
The mtu value must be less than that configured for system jumbomtu.
When configuring port profiles, MTU is only applied in Ethernet type port profiles that are system uplink port profiles.
When you configure the MTU in a system port profile, it causes any interface inheriting the port profile to flap. If the system port profile includes the control VLAN, then the module, itself, flaps.
This example shows how to set the size of the port channel interface MTU to 2000:
n1000v#
configure terminal
n1000v(
config)#
interface port-channel 2
n1000v(
config-if)#
mtu 2000
This example shows how to set the size of the MTU to 2000 in a port profile:
n1000v#
configure terminal
n1000v(
config)#
port-profile AccessProf
To set the maximum size of a transmission unit for ERSPANed packets in a monitor session, use the mtu command.
Specifies the maximum allowable MTU (50 - 1500 bytes) for ERSPANed packets in a monitor session. Packets larger than the allowable size are truncated. |
ERSPAN configuration (config-erspan-src)
|
|
ERSPANed packets larger than the specified allowable size for the monitor session are truncated.
This example shows how to configure an MTU of 1000 bytes for ERSPANed packets in monitor session 2:
n1000v#
configure terminal
n1000v(
config)#
monitor session 2 type erspan-source
n1000v(
config-erspan-source)#
mtu 1000
|
|
---|---|