Content

| 5.3 |  | MLS and CEF Configuration Tasks |
| 5.3.5 |  | MLS verification |

The show mls rp command displays the following information:

- Whether MLS switching is globally enabled or disabled
- The MLS ID for this MLS-RP
- The MLS IP address for this MLS-RP
- The MLS flow mask
- The name of the VTP domain in which the MLS-RP interfaces reside
- Statistical information for each VTP domain
- The number of management interfaces defined for the MLS-RP
- The number of VLANs configured for MLS
- The ID of each VLAN configured for this MAC address
- The number of MLS-SEs to which the MLS-RP is connected
- The MAC address of each switch

Each MLS-RP is identified to the switch by both the MLS ID and the MLS IP address of the route processor. The MLS ID is the MAC address of the route processor. The MLS-RP automatically selects the IP address of one of its interfaces from MLS-enabled interfaces and uses that IP address as its MLS IP address.

The MLS-SE uses the MLS ID in the process of populating the MLS cache. This MLS IP address is used in the following situations.

By the MLS-RP and the MLS-SE when sending MLS statistics to a data collection application In the included MLS-RP list on the switch.

To display IP MLS information about a specific interface, use the command show mls rp interface type number. The example shows the output of this command for interface VLAN 10.

The show mls rp vtp-domain domain-name command displays IP MLS information for a specific VTP domain on the MLS-RP.

On the Catalyst 6000 MSFC, the show mls status command displays basic MLS information, as shown in Figure .

The show mls output provides the following information:

- Whether MLS is enabled on the switch
- The aging time, in seconds, for an MLS cache entry
- The fast aging time, in seconds, and the packet threshold for a flow
- The flow mask
- Total packets switched
- The number of active MLS entries in the cache
- Whether NetFlow data export is enabled and, if so, for which port and host
- The MLS-RP IP address, MAC address, XTAG, and supported VLANs

To display MLS information on an MLS-SE, enter the command show mls in privileged mode. The display that results from this command is shown.

To display information about a specific MLS-RP, enter the show mls rp [ip_addr] command. It displays information used by the switch with regard to Layer 3 switched packets, as shown.

Arguably, the most useful show commands for MLS are those that display the MLS cache entries or that use the show mls entry command or one of the four variations on this command. To display all MLS entries on the switch, simply enter the command show mls entry or use an option to get more specific information.

Finally, just as an administrator would occasionally want to clear ARP cache entries, content addressable memory (CAM), or the routing table, sometimes there is a need to remove entries from the MLS cache. To do so, enter the clear mls entry command. The full syntax for this command when used for IP flows is clear mls entry ip [destination ip_addr_spec] [source ip_addr_spec] [flow protocol src_port dst_port] [all]. The all keyword clears all MLS entries. Other than the all keyword option, the syntax parallels that of the show mls entry command. The example shows the output of a prescriptive use of the clear mls entry ip command.